last executing test programs: 11.840897468s ago: executing program 0 (id=512): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400007, 0xff, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x60009, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0xb) bind$auto(r2, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x64) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event\x00', 0x163201, 0x0) write$auto(r3, 0x0, 0x3) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r4, r4, 0x0, 0x10000800000003) connect$auto(r3, 0x0, 0x5c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000240)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x5}, 0x1, 0x7, 0x2, 0x280, @raw, @inferred=r1, 0x32dd, 0x0, 0x0, &(0x7f0000000240)}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 9.102137928s ago: executing program 0 (id=525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffb, 0x7ffe) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20443, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/jbd2/sda1-8/info\x00', 0x240, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173", 0x96) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) ioctl$auto(0x3, 0x40044620, 0x38) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), 0xffffffffffffffff) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x8}, 0x2, &(0x7f0000000040)={0x1000, 0x1000}, &(0x7f0000000080)={0xe1c400000000000}, 0x8) mmap$auto(0x400, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0xffffffffffff6a55, 0x8, 0x14, r2, 0x8003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x105d01, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29e, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) 8.668320496s ago: executing program 1 (id=518): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000000c0)={0x6, 0x8001}) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) pwritev$auto(r3, &(0x7f0000000480)={&(0x7f0000001640), 0x6}, 0x3, 0x1, 0x6e3) fcntl$auto_F_DUPFD_QUERY(r3, 0x403, r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5715, 0x0) read$auto_fops_u64_ro_(0xffffffffffffffff, &(0x7f0000000100)=""/55, 0x37) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r6 = open(0x0, 0x22240, 0x55) statx$auto(r6, 0x0, 0x1003, 0x4005, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000740)="c79ad53322a093d01cf42feaa3cd13f155f08189295b3f1b0a632202b2faad35f145080e9e775fdb44acf87be27dc7829fe385367152b0e77a2ca00baf9c6255d2e960caa8151ce9a6e6432bd43371828e142ceaa267e251b7a0d0fa2665ca4e0bc1d48d401e2591a7d3c80814f66ace38b36b8308265636ec73f43baa714b8427d3f97d7b6a875f6dab3809ab19709aed0d02030464a231382c1a3f4d2ccc8c83d63c553db92768f436555336efa9265094eab1d3f0b1e9529c08e32c76db1d") r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x7ff}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x8}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400}, 0x0) read$auto(r5, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={"090714434b1fba3ddade8aecbfa46d138f46c4004e6cf51198a7c4415f0a5010", 0xfffe, 0x6, 0x1, 0x1, 0x942c, 0x0}) syz_clone3(&(0x7f00000004c0)={0x201000100, &(0x7f0000000380), &(0x7f00000001c0), &(0x7f0000000140)=0x0, {0x27}, &(0x7f0000000640)=""/240, 0xf0, &(0x7f0000000540)=""/235, &(0x7f0000000240)=[0x0, 0x0, r9], 0x3, {r8}}, 0x58) prctl$auto_PR_SYS_DISPATCH_ON(0xd, 0x1, r10, 0x9, 0xb8) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) write$auto(r0, 0x0, 0xfdef) unshare$auto(0x40000080) 7.877193309s ago: executing program 2 (id=519): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC0\x00', 0x8100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e00fee1", @ANYRES16=0x0, @ANYBLOB="90022dbd7000fedbdf2501000000080001000200000004000500080009"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x80000003, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800004000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fd, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 7.74403432s ago: executing program 0 (id=520): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x89a, 0x5, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty44\x00', 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyeb\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x400caed0, r5) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000100)={"b05e5c5443957e90cc358aa47f273719612b76cf6483855efa48f1700b09e2b7", 0x4, 0x6, 0x5, 0x6, 0x7fffffff, 0x0}) sendmsg$auto_TIPC_NL_BEARER_GET(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x4f4, r4, 0x9d0da3446261172d, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1df, 0x6, 0x0, 0x1, [@nested={0x146, 0x28, 0x0, 0x1, [@nested={0xc, 0x25, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @fd=r1}]}, @nested={0x58, 0xb4, 0x0, 0x1, [@nested={0x4, 0x52}, @nested={0x4, 0x4e}, @typed={0x37, 0x25, 0x0, 0x0, @binary="56d4b66b19d40bafc9441340d6ad13bd4b69fd9991d0afddcdfd0a17c08d08b45c23cb024f6a3f1e0ba3297e4ff3d7b93c7c00"}, @nested={0x4, 0x34}, @typed={0xf, 0xaa, 0x0, 0x0, @str='/dev/tty44\x00'}]}, @typed={0x8, 0x137, 0x0, 0x0, @pid=r7}, @generic="6e9f6247e9384a03ad29a084e3d0eb3f7a197302e7b9f23f51c5579df8802cefa36abbb20a057aeaf6d765797291e000c24375a45e4a5641f6c261578d04da9b9d3ad31c91daa4d6b06f4bf00308215fa89d838343ced0221fc78a5d76d277b6e31258f73b1cde3c9511b50e0710081c051db4994c3b0f06855d179e60ce2b46de36e9346dea6b3939557cada3549ddb95aa81b029994a106f209a2937704e45cbceafe7000375de8df18c15f80d7f5f5a728c705435ba39aa01afae1ff9da580029edd66cd3", @typed={0x8, 0xea, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="0bbdf04b0454301b4847ed", @generic="15e4ca73ece49e156edc46ca56c6bfe26b664625a39f10a9168c501995fc66a728abc2e61f8526a1ffa7578d415cad47cc73890a891433564c16e8e05cd650b8c17be904d285c0be737920989d4ecdfde42103fdd8acf1f066822c8d7ee3450ea35c6184be5745ea218a61fd05891fbf902ac8d2f64124f96d2b62572baa82631bfe7c2cd4c5497b"]}, @TIPC_NLA_PUBL={0x1a8, 0x3, 0x0, 0x1, [@nested={0x1a4, 0x88, 0x0, 0x1, [@generic="562a440e4dee75c15640595d49f8b7657f5b053d693ec4e3ead1d8c31ba210612160ff4f9ce046a1a81e22620b8343a8c5e447751ac080e81afe52ab98a22e5ae0ebd856404890fe4b5fda61c12fbac7add514a1b4466802ad3317dfe6f569d00addb3482a04c088940fc2a7d598d05c2e8e13c94f1e131045d87b35c268b4c3b38d50beec4ecceea83dae9a876e46f8ed9f2009c477618a6fad455d0938c9ad20744f93c0bbf1f224f9903c105702a8127f1a0c380eb13fda14ccbf2b3b2824e6ddd9806ea622", @generic="958d7c717ff33e939bd5ba94b867a2f2a167c7664099b55502a39c654d62824d6e5f5cc57b80d62ab011a71be59431956df0a4d386a44ee4952c369b8493c65696848cb265ba0e4ee484566035522294c3bbdc18367da99c02395236d150298f06091f6ec084858f03c6", @generic="1a478c66344da1bbed3e0fcd6f323b870cd70ac8a78578bfcdb99c2fdf420d28da1fe02735dc4b3332572f28bc1f2c8b5461c0ca893771c8686a486c0cd8f626746014b3b05806acde295ce29fc28907b3fdbe44e58b4d729bd612fd146beb059ce9620dc9ddcb", @nested={0x4, 0x8a}, @typed={0x4, 0x145}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@nested={0x38, 0xd2, 0x0, 0x1, [@generic="472d888e6c3e90382d8d1a967f8fac31d2203ce01364d8c0eced0840400ce2440049ad1ad50c58f873901bc896be0a0c", @nested={0x4, 0x4f}]}, @generic="7b049968b5ca546e317ea2cb3c3bdc63689b6ed9ae83188212210358080b9a08c372f5627af161fd4b44682eafe8e72e711a", @generic="0795fcc7267ae83b06e905000000412dc40d1fd1f070c6", @generic="888df6da7fa9d56c9f22855043dff9123a45a775effc6ddf9eb52adde00fbe0fb29f5b70db77d3355ad050826f7c6003c91158a6d08851366a4c7e48375ef24e96b36381fac196bf1df0d82ff6314887ae19e00e0dfc3dd95cfb8dbd403d27ecd78f904a219dc0d88d195871d9c2d62417269003dc9e9fdb4a21578d032450eb947e131c31cb1ad818a773860736a09971a833abac8d59c1e2f9b69a29b490a0a3fff23bd1136548685076382e48b0cb431a9838aebbdcdac57c9e8978d7f7efebd89d0a91d34b58d0e0b171e05fd81096f720"]}]}, 0x4f4}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) write$auto(0x3, 0x0, 0xfffffdef) r8 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) getsockopt$auto_SO_TIMESTAMP_OLD(r0, 0x1, 0x1d, &(0x7f0000000000)='%%\x00', &(0x7f0000000040)=0x8a9) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/raw\x00', 0x60080, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/gid_map\x00', 0x20e000, 0x0) pread64$auto(r9, 0x0, 0x8, 0xffff) ioctl$auto_dvb_demux_fops_dmxdev(r8, 0x8, &(0x7f00000002c0)="800831a256bcc3966a4e7ccf249e1f747822f7052fc5d1475362caa6e8448993b8aae16524c7849a9a231844877f74b83b33799444dc2c1db305cdee75bc3304a458b2dbee215250d52768a364276a6060d608d337f986738a7e98d3014e2d19a82c15d422934e440642a7e953ca3477429e5fc442c3bd44968ace3a5bdcbd84ae50ef3b12cd796f7477ffc05bd25e5f788f1ea5cac9b2cc5ec14a184046f8b940471347dd613d83617fcf3ec5441da73415cd938c45a435315c521e73246da2c74908edd2eac008df7bf2dfc1a98109715b28ddefb427b831cb10ce9ec5e450c72bd9e1d87dc413966195cdb51f1283f64f6b2994c82c28fbf241ddbec2926d283e3f8a650312c7bc5f1f") 7.623669705s ago: executing program 2 (id=521): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0xffffffffffffffff, 0x100, 0x7fffffff) mmap$auto(0x0, 0x200006, 0x7, 0x40eb1, r0, 0x300000000000) mq_open$auto(0x0, 0x62, 0xfffc, 0x0) r1 = socket(0xa, 0x80803, 0x6) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x1b) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c03, 0x0) waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x3}, 0xffffffffffffff74, 0x3ff, 0x4, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x9, 0x2, 0x9, 0x200}) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd08, &(0x7f00000001c0)) poll$auto(0x0, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4004af07, r4) socket(0xa, 0x3, 0x3b) read$auto(0xffffffffffffffff, 0x0, 0x1) msync$auto(0x200000, 0x2000000005, 0x6) futex_waitv$auto(&(0x7f0000000000)={0xfff, 0xb, 0x4002, 0x4}, 0x80000077, 0xfffffff8, 0x0, 0x162bd) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, 0x0, 0x400c000) write$auto(r5, &(0x7f0000000000), 0x2fb) mmap$auto(0x0, 0x20009, 0x8d, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r6, 0x40084503, 0x0) 7.342362878s ago: executing program 1 (id=522): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 6.880620365s ago: executing program 0 (id=523): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getgroups$auto(0x7fd, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001900)="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", 0x1001) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r2) 6.452800011s ago: executing program 2 (id=524): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10, 0x0) r0 = fsopen$auto(0x0, 0x4) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) pselect6$auto(0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffff, 0x100000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC2\x00', 0x141000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000004c0)={0x937, 0x0, "bf8476b8309a34743b6326913a54a2aa", "78e15863b201874de9b7076628f6c969", "6f19188afbfe9dc537060f5cf32260030f97fb6b566f420775e5f39c3ebe1d58", "ee646e9852568b2ba92326520511725385f3abff35c331416dc542f7debafc83ef74d2b9c2f05ed2d4290b23559a69b5f4c9a26bfe4d138a4506320e817b5adb3e5dd7a32b57976091946b3bcdc17ddb", "fdd1d14d2b145f86eeb5386bc206f9ad", "eab6f9b2ea024fdcb7bf9601f213bce57f3c6700ee955a819133996b2bcd25f9d509b8c9505f9223b7ff59e6252def464e40c8f07950a595a715894d2a791476da814b008e0a2c4cd0f06f1ad81a426c", "eaa93dcbd7cee2e8ee642d0075e9c612a0311c2b2cb983bfb79953eae69c8f3020bd8e77e844b457825b5b50de9bf1242fa2d304af08c8e63d3fac93c3732283391a5ee998bedf02b170c1d45b5b611e4123be0d24eb9f0438686b1245f88b980d2250887cdfca6f2d113961151732ead75d66b2ccaf0689aaadeed4de5ef933"}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/distance\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001080)=""/98, 0x62) r4 = clone3$auto(&(0x7f0000000140)={0x1, 0x5, 0x0, 0x0, 0x4, 0x4, 0x8, 0xffff, 0x7fffffff, 0x7, 0x7}, 0x85e) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fcdbdf25160000000500070008000000b30228802f7308009200", @ANYRES32=r1, @ANYBLOB="b4008580d448fb8ccc6a0e53f7d74b421557a5ef6204c7ad6859a126065267d0370a442be43e23f20789fefb9d49c8adb686f823fc3663bfce3f78fb3b21d5e69e433ecd2123db3219db548a8feb3f08369d2f90a7f4c2b1c2e3e6da21472184cdba2bde8193bb6efaa18e959b37abe0dfc392722ca87f7da4214406cff49b3a2b73350cad4cad8eaa59512277d23eaf18ac2a4caf53873d0828dfb08ca87d2c20a051337d3f69d831530629bc853c7db21b6c140c00da800800fc00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="831c69c78c6cce5a55e704d31638510d2a21363d4edb0629a6f7ae981f96e490f3680a553aaf053b6b99ecf018fcdb78ea7b977303168b5c3241b94b3f6f88ccfb6117867050856ad8f398c068a90e3346515aa66f935888030c86e1ec249364d2aabb4f7bc7edf5642e50eaae647385e835bfb38ab629b5e2fa4fa918984c556a2b78d96bdec4f68eb459f87dc486197d270fbcb7455797f5ec979fe859044f3b13c95d9aab442215536281d60bd0984974c9c4550bbd6b59e02bbfd2bd6a448529c0fc050010000000000008000e000400000008002c00b023000008000c000c000000ed001980beda6c10d48dd7e218f30e1943bfff0814567b9e53f9698b71fa181f16a31a10c46234ee385bd258ffc2b6384ff3336e0d3ecd34889cbdcd5908ace8d17468f287d1862cae498011dd62e96469d9cd3850a61f1a6dd837ca55d6519a26fb4b230f33afb5078c495b39fa0aea8a25eeb91e4d401039df8fa681f7885ede21cf7adb85e7981c228b203eee6897e0f60f26f72297212084ad82d826ec38f7b0a8bf2d7f5ea416cf527f9c4c45969e5a6308f77c073fe527149fa46bc22ef3d8357e246111e09036bc720148cedaf653491d477532cf12c8d0211d6bfde693933fdbcf9d3fd7fced096734000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x40001}, 0x20040004) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r6 = socket(0x2b, 0x1, 0x1) r7 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_marker_raw\x00', 0xc8401, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) timerfd_create$auto(0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/trace/end_lba\x00', 0x2062, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) write$auto(r7, &(0x7f0000000000)='_.\x00I\xf2u\xd6\x13\xbbn\v8\xa3\xe1k\xb7\x19\xccU\x00\xe2\xa7\x00', 0x4) sendmmsg$auto(r6, 0x0, 0x7, 0x20020000) r8 = signalfd4$auto(r1, &(0x7f0000000280)={0x3}, 0x5, 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x80, r5, 0x403, 0x70bd25, 0x25dbdbf9, {}, [@HWSIM_ATTR_PERM_ADDR={0x4f, 0x16, "8b35d9e435ca0e4ac78d24e42e8fdcd60193c1d873561c6dd87c50ff91d3ce66e7fad0b4ca1c44f09bbde5a764b5974bd5f59f68660869c73c3058a2ec0566f58e3e21ab12d0f7ad3c0b38"}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x5}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x8000) write$auto(r1, &(0x7f0000000000)='(&:&)e\'-}$\x00', 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe4, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PUBLIC_KEY={0xc8, 0x4, "26b32b7a3310973a722536b452dc2fd1d675ed331cd8798d1e98be7bf55c90f35ee1effd5b7a4c8f2c43e5ce22008fa2d9ef6db3ea763f247344d951281fde2df76f544188d4becbba6ffc878d216800036dca4383f721ddd029cc5ae1d795633072cc3759d5fbb95605ca5ab6ec44f7f46b7b9727596861726302d0764f515daace11a4bb391678849ad200b7c52f38f1ba02f417c0490b96d016d755c9626133f353c21b9508423c80fa17601b5fa79612e1f292e5f21aa8f5c1c3a202fa2c46e8207c"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x7ff}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040}, 0x1) 6.133333356s ago: executing program 2 (id=527): socket(0x11, 0x800, 0x8f5) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f00000002c0)={0x1800000, 0x3, 0x0, 0x5, 0x400, 0xc8a, 0x2, 0x7, 0x5, 0x6, 0x400, 0x4, 0xb, 0x1000, 0x7}) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev2\x00') mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000340)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x13}, 0x0, 0x4c, 0x440, 0x6, @inferred, @inferred=0xffffffffffffffff, 0xf29, 0x0, &(0x7f00000001c0)="783374976bc57458676fe4a6a582084b4711212a6d5e5d59c35a97ed9276a2f21fdda9c700c6d5eca67f66bab1b05c1e49957dea0025b585bb057a8f5bf807fc285a0572d0dc6dfdca791b75b7167599982b7c2e74002846d0c276f2175280ee0e33e3e2e0cfcb3f16ae4907eab39d01e2963e24fede869a4b7a09ed0f42355eae2fcd2c06a627a7a063d9cba2cecabb7f5e0f125ec0c0ca7ec14b6359c8513eb3a7eab8c4b25443aa9f6b011a956658e8fa4cd0b76fc8ac8d9b501730f14a09281c7a279445", &(0x7f0000000080)="cae4ce1b68d04a281469c9e7f0050860b0a7f842f305f203f9321d4dc5cc51f08bf1b972b76d62bb6b152627ed5db9e04c6b387d5c92cbd50030164d4df511"}) msync$auto(0x0, 0xe0, 0x6) bind$auto(r1, &(0x7f0000000040)=@ethernet={0x306, @broadcast}, 0x3) 4.747896999s ago: executing program 2 (id=528): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x8001, 0x2, 0x10, 0x1, 0xee01, 0x0, 0x0, 0x4, 0x2, 0x2, 0xc0e0, 0x1, 0x3, 0x4, 0x2, 0xcab, 0x6}) geteuid() stat$auto(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x7, 0x400, 0x10000000, 0x5, 0xee01, 0xffffffffffffffff, 0x0, 0x13fa, 0x4, 0x4fd, 0x63d, 0x8, 0x5, 0x0, 0x4, 0xff, 0xbf00000000000000}) semctl$auto(0x0, 0x6, 0xfff, 0x17d7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0x40, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000380)={0x7, 0x9, 0x4, 0x9, 0x101}) msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f0000000440)={{0x7, 0xee00, 0xffffffffffffffff, 0xe, 0x0, 0x2, 0x7}, &(0x7f00000003c0)=0x4, &(0x7f0000000400)=0x9, 0x1, 0x9, 0x3, 0x3, 0xd, 0x4, 0x4378, 0x5, @raw=0x4, @raw=0x3}) getpgid$auto(0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_clone3(&(0x7f0000000780)={0x40000000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x2c}, &(0x7f0000000580)=""/233, 0xe9, &(0x7f0000000680)=""/179, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x1f, 0x0) r3 = waitid$auto(0xf739, 0xffffffffffffffff, 0x0, 0xa8, &(0x7f0000000280)={{0xa59, 0x1fffe00000000}, {0x2, 0x5}, 0x2, 0x9f88, 0xe87, 0x81, 0x0, 0x80, 0x6, 0x1ff, 0x2, 0x70000000, 0x9, 0xb7, 0xf2c, 0x4}) waitid$auto_P_PGID(0x2, r3, 0x0, 0x4, &(0x7f0000000380)={{0x5, 0xf}, {0x5, 0x13}, 0x7, 0x0, 0x1, 0x5, 0x2f9d1553, 0x6fa829e1, 0x3, 0x7, 0xf83b, 0x0, 0x8, 0x8, 0x0, 0xffffffff80000000}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x1a1842, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x10001) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000240)={0x0, 0x7}, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="bc240000", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="08008500", @ANYRES32, @ANYBLOB="0800ec00", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="8f816bd64740b0de372f3b1e9c064edda4f698bd9937843e28443e1168d233fd2e5659b8988fd37b3c5b05944e24048bee3f8f7ff1857c21e85def87b7345e0be75a8f3d", @ANYRES32=r4, @ANYBLOB="c63c7de958d8a8e05ca3000007000200242a0000"], 0x24bc}, 0x1, 0x0, 0x0, 0x8000000}, 0x8084) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x6a) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 3.532208677s ago: executing program 1 (id=529): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r1) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x8, 0x43, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x145002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b300") r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2000000, 0x8000}) read$auto_hpet_fops_hpet(0xffffffffffffffff, &(0x7f0000000500)=""/229, 0xe5) getpgid$auto(0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x28002, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 2.800544566s ago: executing program 0 (id=531): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x50a81, 0x0) 2.567822349s ago: executing program 1 (id=532): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) semctl$auto_SEM_STAT(0x4, 0x665, 0x12, 0x5) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000003c0)={0x34, r2, 0x789, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x5}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x7c}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004840) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r3, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r6, 0x1b, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) 2.508932212s ago: executing program 3 (id=533): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x240088e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x16c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ea4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x48c44}, 0x40) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(0x3, 0xae41, r2) 1.444939929s ago: executing program 3 (id=534): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000240)={{0xff6e, 0xee01, 0x0, 0x5, 0x3, 0x8, 0x3}, 0x80, 0x4, 0x101, 0x7, @inferred, @raw, 0x0, 0x0, &(0x7f0000000140)="0313d666924c3d63a0289947ec754e2f135933d65fdb0a19ec6f998d80a7da8f3ddb5df3060e0667904a7d534795b08b3d3acd0620e731966c34b030306f44a22d3d856576c2c50b1b29dbb42c2b5e5e13fce22d4ff7526bc97a085620240b3c22c9fcc90a1c467980928c8b3dcb1d0512e97a05caaced014ddca2f3627160876fbad77aea83674c343c409a4a22a6c38d1095dfb14ddcd860eab67e2caf0008d9354fa15c2d8c864c5fc08fbb3939e84ff2f08132b532ccc0474cb1919c13d4a58927be2767f73327169b5878e530de8f1a149ac153e8358ff8", &(0x7f0000000000)="65241ec2a60793e07a1dd2cfebb43389dea64dfbe3a183d7575002509df0c82e91dced19e65b663cd7e512d768605bd40eff4acd5b83342d9547fc8e39c3ffac77e742749bf48c5d6e097b188aab3eea149d8503c8a89a033c08b19bc8bfefab811b9008653c56024baef07b9a50992718632c18f11e2fcfc647dd9092eaac0c9ff17c3483fc46c9d18b7937b64a2c8c765af7b738ea87d9d647fa0c60f4b9c4"}) keyctl$auto(0x4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x8) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x0, 0x0) ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, 0x0) read$auto_proc_uid_map_operations_base(r1, &(0x7f00000002c0)=""/39, 0x27) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK(r3, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb90e9a6a7cb7d163}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x590, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x564, 0x7f, "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"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x7}}]}, 0x590}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000001100)={0x1184, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_OBSS_PD={0x1030, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6, 0x5, "71a9"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x1004, 0x5, "1723466ca59e02dd5c87d8ac03201fc9b45fbabf329fc914593664b8f89406aee62e53ee3af0ca858f1b9f8888025d0c1bd5dd3cf02c7a7b97838e3cd1810f1be3648979d79716ae0be8f71c1e5c922af4db56ca15cc5f90d39e744b6fa5d9cb1170b9087aef89265c71ce4462639e6583080f3cec65523ffc7bdba662f84639933f51a389c3e22dcf6e31ef5a94ff3208b994a94e458ac788f0d20c0f3f7d4f28c96f6a47a3fe63f3c8f8941280fb283f5d9bac0b5185cfd7ccea766d50df913f8664f77f9952c83f060246c4b1c938409df66912d1e5b1b23743a73c802518dbdf164ce3a061bae9432c1749dbc7484729dc1b50ec6a429dd9eaa6d7bf9e897bb440d3a5e7b05bc2856c7cdce02d5276cb937406fb8ea74d9f0e8a9f8187446c4b82c1332cb97707c5c56e268271712effa90c659838eed2102d1b5e7b99884e588d54200101f9bde95766cb368caef4bc6cbef163cc4cecd7dbe1d1aaab7f25606a63f55148a1c6131c9a3f99d94957b0a12b052dcf16901abc4feb1ea639cac59b0ef9dfd1e934d715188b3f516e0ede40b7703d6723a5e86e25182064f72145023b164c4211fa3709686a6fbfd31d503a2a93d497201b6be8bb8720fdc17e18638cf7ef5ab20b3eb76be53d354a3cba368d0df231a277de7263409a788a68dfc99534f2a716c8781b8936d18c0553fcba698f992fef531bd7ac708ea1e7f038028f9b61dbbb8137bfd8d83e5fb432bf06d5218d68a32c5a50dcaa3b4c795db3aedcf0f88d9057485628c7cfc31ab1aa4ef46a706c7399ea37c5ab4c77b4f9cf3fe8939aebd4a0384068e0e255d961c85aec82792839288ccefaf8e267a3d23b28125cf34128d4c583de02f17360dfdf1f9c02bf66a2d82acc142f4648c077ab9fdc1cd0b25e312fa34451482bc10ea7018c3b745a686cc314e7999a5a35d29757184f87ec730c9d058c82ab4a58d2780f170876dd16af6f82780d443bd044d659b4191cfaf391eaaf4b1e268681c98d5550f2492f562de7e419642b76c9898d5dc050ef1f0010a8ceccf740cc8143fc8818dbbfb930079b852ac9b421b4cfc367020d8dfd23b84cb0ea2d6bb6e0448ce40ee02131b2886bae2c29b8d09e3a96b7856f7356a8a92fa0158e74748c17541cc0add5a93fc79af093a9ece79ffac8f63195cb2a56b7c60180a07395beddd6ea90d5fddc89ae8bde18287e6cd18da29c00d333d4ebbf9408abda2634de6e65af2f0deb9b8fc7e24f22608a36e0ab62a052c9bc376d679e99f397a1b776c021b8047454bf846e5f4b02c0ead1791a9bfc218e3c6d1751c429df1e25494ff13f56497b1cd3d94ae77ed6372d2a6fb83ddb04685118a329cc09c211e68d9281e6015fe2e8328a0e4e3a9b6ac45f5046659c4e2fc332632d43006f59b59a85a7ca45cdfdb813c5e97fcde6ec5b38eec645389e651ed0b3671003ef9a88873e0509edfad7a4ae198ea007370a2b2c35f8a818dcfd3bd43cf03fd7936a5f020c587123c477a016cd861b93e1b007fedc6ce1ea51b255ec72b8e223266535f13a9cb53185cbc5bb7e718e73720f415b86f7df6686f1b0b95dc06d64b65687339e909377bd8d3cd601451070b2e7269f91921d42a0289b7bf2d71e0a16f224a4e78af9560bc3362fd0579e6345400e55b146ff094b9e5f2960bcafc82be515c4324275877e9bb67695a420be22c186c91b8b1a51b23dbc44a79ecec680c7ab8e0a4fd8dadec4cff3f0cef6e139095aa7053e20c21d30954764bab2928ce496856ef847f1d7c3892b9e26412b990ab4eb6d1dffe39554ea2b1f62ee0b4f9237b40b66d55c411543348022ea891034d559cc145fbe0716d19840043eec255d91acf6c34ef80b252d910224d5593bbfe0288c9ab53174b497a0277555e78a227c8842d9f5fac5106c85f40d3d0decda86eac1fe03b83f13c9e873ca2178a0dec5229f12dced47a8236341c96e9a8d6e27266e354819e631e3e57f30e626ff275bb3b7e5aeddf075d1db428cc8b2b403d9c39faf802bebd7ed8ce796591f03b8d5cd3288308fde487ae9d7eb9ac7f1aa51e651d5de755bb16fa13529accb9948f66538813b4a5f9dd94c0c8aeef1260bfd8b3a6cf02ba39afb3c5a8e67e978dac0d16726f6243672ef19b5c305b55377b50fa009f4697f1330a17d624f2149bf5304dcac73495eb128c47607e0c4437dbda76d4842dac5922de75e4c2cac9bf7c168dab216bfa1ef495ba78e3ed957e9bce1f25b5f9d27ce5790bf452444b2f15966d057df832f2dc75c89a6433bd4e65a6b4e88129360e3e01fec05112ca87562c5f0cbebfd8fe4c1e27614d15983cc0bfb1b482bb8eb827c605380a00204ec71337edf590d918648b16c9bc3c8d60626382098cfff904562439325b0ee17e9f5145f54e106f6b0926bfe7609cb2e45135cc412eeb7818f02d8a9444f511e78def077e44c9c03988870e7469a5fb2c0e887f755c3db72fa19cc232b9504e34aafe51534c2fbeed9cacb94f9f2ac2a862f7217673041c3969b4fd6658c319a693be85215917304358ac6459d2172e3d0896f90f7fd26861bf6d06245cd618cef0bc7f64522209e95851db5552d65b5f59fc7a6fb7434ef3637ad155a21cabded6f2ada3a4d3660b1faf6b60071be4f67dcc783cf3a74d81959e7be77b292cd0b9b65d124e553a9a3186142d68e21607ecf2eda4f89f314607c02e6b400f7b6157901be694136dd18137e8429d9dcc2e515fecd3410cec128276f26c1834eea528e681215939510fcca5651d0339dc99ed4b612630d2119bf99053520eeaaa9f468b36fa000365fa5f243a218dfddbf459f4c25c0fe33cde77d08a1cd6c99860e749f6da633b35143d65b59ecdd4907bc0d4f95955faed3db66b162ed19f665005362fa48f70f8a3e7f723a712c7ddceb508cbd318bed2574d7c0eff269babad935c1f0cc415cc46067025a5036f36c8a7a4633e771c6bb99d1e0ac1d3fa53f76c607ee9d20aba6de50ed711b0f744172fd0f34cea4cc4a905278590622ba7ea36cb973f619992600decfee9f3cf60f8ab308ad13ffabe6d68b76ad6e83291922e6a9e1f10e2ae25ebc2490258e57e173f76c5d1e06690535a9d2c4a96e8ccd1c4be555adb840fb8984b11669fd573544bddcf124a9f379f11cb65c62fddb132c64c481fe619c05dba2101a07797277b4ef83fc9a58ecb8db0546c3421be3ca31781d2b7fcd8fba1598e9a3649542a0ac4694383da5c3f8b487698109dbf533fcd16da3779c555f654764276cb9473b795c1775e9ff799f8c1628b78ac24af6badbc8710acd8e86ade5be068a511c7aa3602c17b4a8b357dd2c8b2ef0551a3d1c70907af6e35f9f856566d99ec9692c6fe8de6f1fdfe341422d2652fe4ca9de7c5a4f25c642a902d55798167a78058a0712fcb0711d9fb51cd14015bb01c9e51b52aa4ed0349d406cf440cbdad3391fb9ea8da45525fe611a0cd27eb1ef4b44519ed1a7aa55661a002b5fd33567bdf3aae3cfb59021905a55714328c9fcca63d0a98f01d678529791525e8dea845e59e25b3e130bf175fd82dd89c51aff3087f0b6aeec3dd13504cc5a89709d1fddc9df2f46523c4d8eb7e185bfab27b380952e1559aaccd2b6c0c20bd93ab4a7a49307b3e3d0b198b515f96b7c841616633ca32dcbb8751f5f1e92cfb8419667828f950601886f3d9b7604b6868c7224d82bee43ced24a67faf72d3985780b395dd74b6b0626daa5b63b0537c753f2942f6980d2e326662e6921c0b468977e7b28952e081881b0b4671ed995478a7f3433dec0c803c8f1cde1ff1d1f2b914baf6e5460628591bf96ef37124ca15d0a8013afe5c0d82bc400ccdcb1077ded8d2631bd4260d3a04b76a0f76d788566f5f0e5605f6356c5ce2a489138255fe365c00c5517d957a300825e292208ffcc11149e81408b3c2f2236d4d4baa66dae5372e0a47e5c13cdf2a7d76bad9e1e33de2aecfa15c585f30a7c49183c939c29a87ee8c5520b067d53bf4ba7dc79673b3890bad1f7cb34e1324e9e90b7098584fe898d182b2729661062d73a23d993fb5c7a31b307b3328055fef8b00eee59eb21b4c48572837c0b780e60ae7e97ba8e53016c5aa8b90f7dc230051c826a5f330d3ad0a8c69747cc26e0cdf638e96cf25ac871e371f779224e3f3a1503989bd1dc9cafd63fece0b770a525be2ca94d1be766ed8ac4f0dc7c741f35749d78263f2773ad8398c32ff80aa8420e0ad7597b3a3704ad18918699e2f579764e058effdffb7bec735c14c7e26edf6462793a1be42ea528a8c12727d79ec2ca1e63d3daa04a33576bce3092552097eee08c241f9e9eb731425003bd2359c1d7970d72549a9b1e97dde47b15159bd79e897fbc652573e2b86ee20cddf6a657ddf93a0752c097ea9c2c36df3fd3a84b206e40cea0832e117dcfda1367384666a495ad49311a394410e24d056ecee4b5da36ce99809ea249f29acb2d48de2ece23ba57d26f35f894730d8b8ac0167745fe87ffee764a717674d59150bdec85fe60c6f12a0259dc5806e9727fe960e9b53ecb89240ef6b4c79d190dbf2b1f6b9c53f8b1215955443d38f6ca17b7212b5a3bac65cc19d456dd2d557cea962673c903c3736fd7f763cc33b63013364e4a13530b96900e3413d93bb576250595c46efd848d0a85ca5282068a2e52e7bdc6d6d517bfc1de5bb4fa181744f9f59322fd48f55d7ab245cf5cf99215f04f34c3512e501c74684480fb7efa34aa4a405d2c0fc3e963212631c9fa91c6850d6054cf79e5f90718665e182a2869660175a77c06c7dbef211264d290dae2a8060e0fb11442b4e0275b073359d6674110eb17fdf16dd2f741ff87679cfea14880072ad6ab9d21930a00f0c98c3f416dbc0eb508fd070d83ecffd88aa29bfff8601fc3c0223959ec877d8b8f5fb91bf3d4e7599ac42d257546c2ba3939219519383980191beab340745ac19ee5f20548d9e72647dda60b99d953a4ffa3c59d481076f46a02ec2f65c9a068463d2a30536175886016eba7676caae3e91827962e96abbb829aa6d1a9f1ebb7dd47f767aac707f33a734d3dffe952083792dc473c039dd53108204ed9b4e94a7d758b18afd344ae39a034de1b5463bf6d6eda0efc8db820c28e88fd044750cb5971bbb9ed5dab221fedddb9d3a86399b584f859fbbb220c965c92ecfb8dc0ca9515e0dda0cb60d0e74822b5087bc2799e113d517d56abc2b5867129381db4e23fd67f0b7f3e265f08cfe5a47453a1ea8cf6c21e8141645ad6773dd6ae071b1156597daf6730a7866855d0828b07c1c19b72adbf8ac1b99c33d092c6a613e80cadd4044edef86708a3d473bc22766def35ac717dc65e512c24cfdc9482e34bca19d435155a3496755430f31732bfa6f86f30b0aa19b34b2bc72ba010b65d2171810326e7c14e01470e7b4bc82bff3629f0d3110e1ecbf3612fe7d81957d33f2f358d0ec7dd637767d8f47b8f26d018b57e33a69e4ffd1e57014536c4ec50673cfa23e5ff149251271d461c9383cf9ad3d2e49f0ea1ab2381f837ac9f982e5c5db2cdc9f24e8ede20558cba0d9e405d1dc4282ad12cd58eb1ff3765971d4dfbbef79945e89bbdb3d7d27870d44b5e4f7ddcd19c0418df93f6d9edc8edbddab2ba15b45f2920f7e8e1609d532df8c16beda1303c25b67640599bab09b0a9e60ff41b72d9efd076d9b68ea1a38a08a69a50a8ab764dcfe6223db340f506c72366377b74edde39d5135a292cdd608181bbd56db5d42d757a"}]}, @NL80211_ATTR_AUTH_DATA={0x4e, 0x9c, "3558294ca47f010ce6eff451155678185aaaa299401fface1b63f92e8b3d86c1d40ee3d95ae705f23b3ed5f272f3aa783ed3fa2a57d85358e169c523e159c6395ef3a964f900c4867e6e"}, @NL80211_ATTR_FILS_ERP_REALM={0x2b, 0xfa, "5522b91395bf4dd4c1c417c6856f86781ac94b49d5a89e5ef54575ac88ea3694f08e1406f5ec64"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xc3, 0xba, "888bda924f40daa47183c852331581eb810c692cd1a8427554dd75655a76741c9b2aa9ee988a8a61c302b3e4b6a79c952073673e0e0d5ae442047f3df38a4ebab88b0102810eddf0164627a2be60122c6b60ae0658c357457b398e3dffcadba7bc88da2627b6f68cf6452a0d98e56a5a690df22d3e936f209e30ead167028b679c93122eea643b5e1d0160ac671015e75f71e6a706e9d666389e40b781bbf7293f85c52faff17738860271efd6b55102aa75f6817f60a0b83932170b1b6a74"}]}, 0x1184}, 0x1, 0x0, 0x0, 0x8000}, 0x40000810) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0x8b0, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x3, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0x200000000a78, 0x100000000000000, 0x100000004, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x4, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffb, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x5, 0x1, 0x1000, 0x100000001, 0x100, 0x80000001, 0x8, 0x7, 0x4, 0x8, 0x800000000010, 0xff, 0x6, 0xff8000000, 0x2a4c32e3, 0x800, 0x18, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0x0, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xc, 0x6, 0xa, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) r6 = epoll_create$auto(0x4) r7 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r6, 0x1, r7, 0x0) r8 = epoll_create$auto(0x3e) epoll_ctl$auto(r8, 0x1, r6, 0x0) shutdown$auto(0x200000003, 0x2) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) 1.353894837s ago: executing program 3 (id=535): r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81) getsockopt$auto_SO_DOMAIN(0xffffffffffffffff, 0xf99, 0x27, &(0x7f0000000040)='-&\x00', &(0x7f0000000100)=0x100203) open(0x0, 0x22240, 0x155) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/power_state\x00', 0x40, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd1/queue/read_ahead_kb\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x92\xa3\x99\xc4 \xbcr^\x9f\x8a\a\xd7\x19\xb8k\xa2\xce\xdb\xab?\xecZ\xb4\x068\xae\b\x1e~\xe0{\x1f\xf6^\x92\xdfDng', 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x7, 0xe3, 0x400009b72, r3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xe1, 0x83ae, 0x6) madvise$auto(0x7fffffff, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) futex_wake$auto(0x0, 0x4, 0x1, 0x9) mincore$auto(0x1000, 0x4000000, 0x0) preadv$auto(r0, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/supports_autosuspend\x00', 0x28000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)=""/4074, 0xfea) 1.254794832s ago: executing program 3 (id=536): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r1 = eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x141080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r3, 0x4020ae76, r4) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/225, 0xe1) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xa, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) capset$auto(0x0, 0x0) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0xd) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) capget$auto(0x0, &(0x7f00000002c0)={0x3, 0x9, 0x7f}) close_range$auto(0x2, 0x8, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x8}, 0x10, 0x2, 0x3, 0xa2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto(0x6, 0x0, 0x100000001) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 643.743934ms ago: executing program 2 (id=537): mmap$auto(0x0, 0x8000400008, 0xdf, 0x9b74, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(r0, 0x0, 0x12001, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(r0, r0, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socketpair$auto(0x800019, 0xf, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000300)="dd") close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x3, 0x12000000, 0xfffffffa, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) r3 = socket(0xa, 0x3, 0x3b) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto_SO_CNX_ADVICE(r3, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r4) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b9effc6a4f747d5f75db0ad20000", @ANYRES16=r5, @ANYBLOB="000226bd7000fbdbdf25660000000400fd0004003c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b873a6555d00", @ANYRES16=r5, @ANYBLOB="000228bd7000fbdbdf25870000009100bb001b0c49885df0cdc5032655af6b505fb0313c74062f35b5798c2f608f38ddff194c2e5c5a4c8d02725a6e1f0a16f04305cc84798bd372c87b741a11040c67a2736fefd76b59db342714b1a0c31a16c5e95f0b34f5a40430d567b398c02195a3152433514de3b465e733f6d98e884b97420c8062dae35647c4e1f3a4e22220fe89409a1e35622b66a933eaefa3300000001e009400121324831f3129cebe475836e06aa4c37cf72cc535dd075d7a400000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, 0x0, 0x20) socket(0x22, 0x6, 0x84) 552.90691ms ago: executing program 1 (id=538): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x89a, 0x5, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty44\x00', 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyeb\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x400caed0, r5) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000100)={"b05e5c5443957e90cc358aa47f273719612b76cf6483855efa48f1700b09e2b7", 0x4, 0x6, 0x5, 0x6, 0x7fffffff, 0x0}) sendmsg$auto_TIPC_NL_BEARER_GET(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x4f4, r4, 0x9d0da3446261172d, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1df, 0x6, 0x0, 0x1, [@nested={0x146, 0x28, 0x0, 0x1, [@nested={0xc, 0x25, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @fd=r1}]}, @nested={0x58, 0xb4, 0x0, 0x1, [@nested={0x4, 0x52}, @nested={0x4, 0x4e}, @typed={0x37, 0x25, 0x0, 0x0, @binary="56d4b66b19d40bafc9441340d6ad13bd4b69fd9991d0afddcdfd0a17c08d08b45c23cb024f6a3f1e0ba3297e4ff3d7b93c7c00"}, @nested={0x4, 0x34}, @typed={0xf, 0xaa, 0x0, 0x0, @str='/dev/tty44\x00'}]}, @typed={0x8, 0x137, 0x0, 0x0, @pid=r7}, @generic="6e9f6247e9384a03ad29a084e3d0eb3f7a197302e7b9f23f51c5579df8802cefa36abbb20a057aeaf6d765797291e000c24375a45e4a5641f6c261578d04da9b9d3ad31c91daa4d6b06f4bf00308215fa89d838343ced0221fc78a5d76d277b6e31258f73b1cde3c9511b50e0710081c051db4994c3b0f06855d179e60ce2b46de36e9346dea6b3939557cada3549ddb95aa81b029994a106f209a2937704e45cbceafe7000375de8df18c15f80d7f5f5a728c705435ba39aa01afae1ff9da580029edd66cd3", @typed={0x8, 0xea, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="0bbdf04b0454301b4847ed", @generic="15e4ca73ece49e156edc46ca56c6bfe26b664625a39f10a9168c501995fc66a728abc2e61f8526a1ffa7578d415cad47cc73890a891433564c16e8e05cd650b8c17be904d285c0be737920989d4ecdfde42103fdd8acf1f066822c8d7ee3450ea35c6184be5745ea218a61fd05891fbf902ac8d2f64124f96d2b62572baa82631bfe7c2cd4c5497b"]}, @TIPC_NLA_PUBL={0x1a8, 0x3, 0x0, 0x1, [@nested={0x1a4, 0x88, 0x0, 0x1, [@generic="562a440e4dee75c15640595d49f8b7657f5b053d693ec4e3ead1d8c31ba210612160ff4f9ce046a1a81e22620b8343a8c5e447751ac080e81afe52ab98a22e5ae0ebd856404890fe4b5fda61c12fbac7add514a1b4466802ad3317dfe6f569d00addb3482a04c088940fc2a7d598d05c2e8e13c94f1e131045d87b35c268b4c3b38d50beec4ecceea83dae9a876e46f8ed9f2009c477618a6fad455d0938c9ad20744f93c0bbf1f224f9903c105702a8127f1a0c380eb13fda14ccbf2b3b2824e6ddd9806ea622", @generic="958d7c717ff33e939bd5ba94b867a2f2a167c7664099b55502a39c654d62824d6e5f5cc57b80d62ab011a71be59431956df0a4d386a44ee4952c369b8493c65696848cb265ba0e4ee484566035522294c3bbdc18367da99c02395236d150298f06091f6ec084858f03c6", @generic="1a478c66344da1bbed3e0fcd6f323b870cd70ac8a78578bfcdb99c2fdf420d28da1fe02735dc4b3332572f28bc1f2c8b5461c0ca893771c8686a486c0cd8f626746014b3b05806acde295ce29fc28907b3fdbe44e58b4d729bd612fd146beb059ce9620dc9ddcb", @nested={0x4, 0x8a}, @typed={0x4, 0x145}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@nested={0x38, 0xd2, 0x0, 0x1, [@generic="472d888e6c3e90382d8d1a967f8fac31d2203ce01364d8c0eced0840400ce2440049ad1ad50c58f873901bc896be0a0c", @nested={0x4, 0x4f}]}, @generic="7b049968b5ca546e317ea2cb3c3bdc63689b6ed9ae83188212210358080b9a08c372f5627af161fd4b44682eafe8e72e711a", @generic="0795fcc7267ae83b06e905000000412dc40d1fd1f070c6", @generic="888df6da7fa9d56c9f22855043dff9123a45a775effc6ddf9eb52adde00fbe0fb29f5b70db77d3355ad050826f7c6003c91158a6d08851366a4c7e48375ef24e96b36381fac196bf1df0d82ff6314887ae19e00e0dfc3dd95cfb8dbd403d27ecd78f904a219dc0d88d195871d9c2d62417269003dc9e9fdb4a21578d032450eb947e131c31cb1ad818a773860736a09971a833abac8d59c1e2f9b69a29b490a0a3fff23bd1136548685076382e48b0cb431a9838aebbdcdac57c9e8978d7f7efebd89d0a91d34b58d0e0b171e05fd81096f720"]}]}, 0x4f4}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080) write$auto(0x3, 0x0, 0xfffffdef) r8 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) getsockopt$auto_SO_TIMESTAMP_OLD(r0, 0x1, 0x1d, &(0x7f0000000000)='%%\x00', &(0x7f0000000040)=0x8a9) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/raw\x00', 0x60080, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/gid_map\x00', 0x20e000, 0x0) pread64$auto(r9, 0x0, 0x8, 0xffff) ioctl$auto_dvb_demux_fops_dmxdev(r8, 0x8, &(0x7f00000002c0)="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") 477.842182ms ago: executing program 3 (id=539): r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) pwrite64$auto(r0, 0x0, 0x7, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) write$auto(0x3, 0x0, 0x81) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r4, 0x800064d1, r4) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x101) lseek$auto(0x3, 0x2, 0x4) setsockopt$auto_SO_SELECT_ERR_QUEUE(r0, 0x1, 0x2d, &(0x7f0000000080)='!*\x00', 0x2) r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x50481, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd4/trace/start_lba\x00', 0x22062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r7 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/syscall\x00', 0x80002, 0x0) read$auto_proc_single_file_operations_base(r7, &(0x7f0000000040)=""/228, 0xe4) ioctl$auto_I2C_FUNCS(r5, 0x705, &(0x7f0000000100)="fbb54e224657c656520354ce8429c7d9aeecb445ff8a7da1c4638c11990564b80d16859efb91813d433a021883281d87496e57a5c203803ab6492067487a00b129edb91e888ab245a6c5041b83b083ac1995c065b3f1ee521c6a32a99e7037f4d646214a8b30531051dd9d2f4a") 266.07163ms ago: executing program 0 (id=540): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r1) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x8, 0x43, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x145002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b300") r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2000000, 0x8000}) read$auto_hpet_fops_hpet(0xffffffffffffffff, &(0x7f0000000500)=""/229, 0xe5) getpgid$auto(0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x28002, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 247.887101ms ago: executing program 3 (id=541): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r1) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x8, 0x43, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x145002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b300") r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2000000, 0x8000}) read$auto_hpet_fops_hpet(0xffffffffffffffff, &(0x7f0000000500)=""/229, 0xe5) getpgid$auto(0x0) ioctl$auto(0xffffffffffffffff, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 0s ago: executing program 1 (id=542): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400007, 0xff, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x60009, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0xb) bind$auto(r2, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x64) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event\x00', 0x163201, 0x0) write$auto(r3, 0x0, 0x3) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r4, r4, 0x0, 0x10000800000003) connect$auto(r3, 0x0, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000240)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x5}, 0x1, 0x7, 0x2, 0x280, @raw, @inferred=r1, 0x32dd, 0x0, 0x0, &(0x7f0000000240)}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 75.664014][ T5814] cgroup: Unknown subsys name 'net' [ 75.813716][ T5814] cgroup: Unknown subsys name 'cpuset' [ 75.822654][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.305599][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.991469][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.999974][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.007745][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.017007][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.032073][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.051463][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.064678][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.073059][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.093423][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.101620][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.147250][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.158505][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.167086][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.175126][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.183222][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.200135][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.209281][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.218459][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.226918][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.234755][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.638240][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.784059][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 79.829950][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.890393][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.898391][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.906068][ T5828] bridge_slave_0: entered allmulticast mode [ 79.914993][ T5828] bridge_slave_0: entered promiscuous mode [ 79.925660][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.933350][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.940934][ T5828] bridge_slave_1: entered allmulticast mode [ 79.947927][ T5828] bridge_slave_1: entered promiscuous mode [ 80.030566][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 80.051841][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.090601][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.152979][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.160230][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.167388][ T5825] bridge_slave_0: entered allmulticast mode [ 80.174728][ T5825] bridge_slave_0: entered promiscuous mode [ 80.193038][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.200211][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.207638][ T5831] bridge_slave_0: entered allmulticast mode [ 80.215029][ T5831] bridge_slave_0: entered promiscuous mode [ 80.224417][ T5828] team0: Port device team_slave_0 added [ 80.230674][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.238795][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.246166][ T5825] bridge_slave_1: entered allmulticast mode [ 80.253225][ T5825] bridge_slave_1: entered promiscuous mode [ 80.265640][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.273016][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.280563][ T5831] bridge_slave_1: entered allmulticast mode [ 80.287668][ T5831] bridge_slave_1: entered promiscuous mode [ 80.296809][ T5828] team0: Port device team_slave_1 added [ 80.374920][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.397647][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.410515][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.421361][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.428316][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.454688][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.469150][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.496715][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.504344][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.530568][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.551840][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.559036][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.566732][ T5832] bridge_slave_0: entered allmulticast mode [ 80.574180][ T5832] bridge_slave_0: entered promiscuous mode [ 80.621448][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.628728][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.636170][ T5832] bridge_slave_1: entered allmulticast mode [ 80.643309][ T5832] bridge_slave_1: entered promiscuous mode [ 80.652607][ T5831] team0: Port device team_slave_0 added [ 80.684964][ T5825] team0: Port device team_slave_0 added [ 80.692789][ T5831] team0: Port device team_slave_1 added [ 80.700854][ T5825] team0: Port device team_slave_1 added [ 80.723769][ T5828] hsr_slave_0: entered promiscuous mode [ 80.730724][ T5828] hsr_slave_1: entered promiscuous mode [ 80.763227][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.775902][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.822841][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.829928][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.856634][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.887309][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.894521][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.921342][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.933711][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.940935][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.967444][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.981895][ T5832] team0: Port device team_slave_0 added [ 80.994818][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.001943][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.028236][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.050602][ T5832] team0: Port device team_slave_1 added [ 81.060644][ T5148] Bluetooth: hci0: command tx timeout [ 81.140193][ T5148] Bluetooth: hci1: command tx timeout [ 81.168038][ T5831] hsr_slave_0: entered promiscuous mode [ 81.174877][ T5831] hsr_slave_1: entered promiscuous mode [ 81.181308][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 81.187291][ T5831] Cannot create hsr debugfs directory [ 81.206532][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.213763][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.240060][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.262715][ T5825] hsr_slave_0: entered promiscuous mode [ 81.269072][ T5825] hsr_slave_1: entered promiscuous mode [ 81.275518][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 81.281448][ T5825] Cannot create hsr debugfs directory [ 81.293678][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.301016][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.309892][ T5148] Bluetooth: hci3: command tx timeout [ 81.327946][ T5830] Bluetooth: hci2: command tx timeout [ 81.339208][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.523215][ T5832] hsr_slave_0: entered promiscuous mode [ 81.529534][ T5832] hsr_slave_1: entered promiscuous mode [ 81.536336][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 81.542156][ T5832] Cannot create hsr debugfs directory [ 81.786181][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.814256][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.850400][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.885328][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.009018][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.062163][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.073905][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.087553][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.154641][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.186486][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.196948][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.208968][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.293275][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.314607][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.335675][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.346401][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.447464][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.481856][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.495979][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.518841][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.526187][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.566332][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.573461][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.599255][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.616772][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.648231][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.655429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.678353][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.701290][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.708383][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.736073][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.744604][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.751826][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.762355][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.769873][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.899596][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.943962][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.951249][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.986812][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.994025][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.141828][ T5830] Bluetooth: hci0: command tx timeout [ 83.184969][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.221197][ T5830] Bluetooth: hci1: command tx timeout [ 83.353266][ T5828] veth0_vlan: entered promiscuous mode [ 83.382993][ T5830] Bluetooth: hci3: command tx timeout [ 83.388438][ T5830] Bluetooth: hci2: command tx timeout [ 83.389604][ T5828] veth1_vlan: entered promiscuous mode [ 83.447865][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.473026][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.587774][ T5828] veth0_macvtap: entered promiscuous mode [ 83.607503][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.629828][ T5831] veth0_vlan: entered promiscuous mode [ 83.637117][ T5825] veth0_vlan: entered promiscuous mode [ 83.645430][ T5828] veth1_macvtap: entered promiscuous mode [ 83.669472][ T5825] veth1_vlan: entered promiscuous mode [ 83.690774][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.715391][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.726156][ T5831] veth1_vlan: entered promiscuous mode [ 83.748842][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.782090][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791624][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.806325][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.835163][ T5825] veth0_macvtap: entered promiscuous mode [ 83.847074][ T5825] veth1_macvtap: entered promiscuous mode [ 83.909569][ T5832] veth0_vlan: entered promiscuous mode [ 83.949610][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.958218][ T5831] veth0_macvtap: entered promiscuous mode [ 83.967845][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.986275][ T5832] veth1_vlan: entered promiscuous mode [ 84.023778][ T5831] veth1_macvtap: entered promiscuous mode [ 84.042307][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.058727][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.069132][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.083122][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.116691][ T1126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.144527][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.153910][ T1126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.164638][ T1126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.172925][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.206663][ T5832] veth0_macvtap: entered promiscuous mode [ 84.214417][ T1126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.227911][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.257490][ T5832] veth1_macvtap: entered promiscuous mode [ 84.298994][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.320540][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.329305][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.364008][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.455719][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.487060][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.501407][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.521844][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.604244][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.613490][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.622456][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.630320][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.639074][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.650401][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.680869][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.697603][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.957802][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.977318][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.224727][ T5148] Bluetooth: hci0: command tx timeout [ 85.301118][ T5148] Bluetooth: hci1: command tx timeout [ 85.330407][ T5925] Zero length message leads to an empty skb [ 85.391148][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.424994][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.460710][ T5148] Bluetooth: hci2: command tx timeout [ 85.466131][ T5148] Bluetooth: hci3: command tx timeout [ 85.604882][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.632793][ T5922] ipvlan1: entered promiscuous mode [ 85.650021][ T5922] ipvlan1: entered allmulticast mode [ 85.660311][ T5922] veth0_vlan: entered allmulticast mode [ 85.764695][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.773546][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.800245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.800293][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.032813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.339836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 86.610063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.839438][ T47] cfg80211: failed to load regulatory.db [ 87.022115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.321368][ T5148] Bluetooth: hci0: command tx timeout [ 87.390657][ T5148] Bluetooth: hci1: command tx timeout [ 87.544614][ T5148] Bluetooth: hci3: command tx timeout [ 87.551235][ T5148] Bluetooth: hci2: command tx timeout [ 87.568771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.905483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 88.230276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.242741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 88.329321][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b123000: rx timeout, send abort [ 88.338949][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b123000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.387989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.432858][ T5947] netlink: 350 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.282715][ T5967] forcing mempool usage for bvec_alloc+0x197/0x210 [ 89.325052][ T5965] Invalid ELF header magic: != ELF [ 89.688570][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027225000: rx timeout, send abort [ 89.697096][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027225c00: rx timeout, send abort [ 89.706160][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027225000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.720745][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027225c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.392795][ T6005] tipc: Started in network mode [ 93.412341][ T6005] tipc: Node identity ee00, cluster identity 4711 [ 93.418848][ T6005] tipc: Node number set to 60928 [ 93.516929][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 93.817981][ T6025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.868389][ T6025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.942677][ T6033] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 93.960241][ T6033] netlink: 9 bytes leftover after parsing attributes in process `syz.2.24'. [ 94.179328][ T6025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.388343][ T6025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.424647][ T6025] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.568760][ T6025] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.600216][ T6025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.639209][ T6025] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.673855][ T6025] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 94.682044][ T6025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.688363][ T6025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.702582][ T6025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.939429][ T6036] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 95.860007][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.113438][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 96.423701][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.659840][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.753887][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.872895][ T6081] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.941623][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.175746][ T6089] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.509795][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.740066][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.819824][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.951207][ T6100] netlink: 330 bytes leftover after parsing attributes in process `syz.3.37'. [ 99.040003][ T6100] mac80211_hwsim hwsim2 ›: renamed from wlan0 (while UP) [ 100.029757][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.238650][ T6117] process 'syz.2.41' launched './file0' with NULL argv: empty string added [ 100.579796][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.819767][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.890276][ T6123] zswap: compressor not available [ 100.901557][ T6134] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.911657][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.263419][ T6132] can: request_module (can-proto-3) failed. [ 101.813008][ T6142] FAULT_INJECTION: forcing a failure. [ 101.813008][ T6142] name failslab, interval 1, probability 0, space 0, times 1 [ 101.872738][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.1.44 Not tainted syzkaller #0 PREEMPT(full) [ 101.872774][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.872795][ T6142] Call Trace: [ 101.872805][ T6142] [ 101.872814][ T6142] dump_stack_lvl+0x100/0x190 [ 101.872863][ T6142] should_fail_ex.cold+0x5/0xa [ 101.872895][ T6142] should_failslab+0xc2/0x120 [ 101.872924][ T6142] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.872960][ T6142] ? do_getname+0x35/0x390 [ 101.872998][ T6142] do_getname+0x35/0x390 [ 101.873037][ T6142] do_sys_openat2+0xc5/0x1e0 [ 101.873073][ T6142] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.873123][ T6142] __x64_sys_openat+0x12d/0x210 [ 101.873161][ T6142] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.873208][ T6142] do_syscall_64+0x106/0xf80 [ 101.873243][ T6142] ? clear_bhb_loop+0x40/0x90 [ 101.873274][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.873299][ T6142] RIP: 0033:0x7f38f735cfce [ 101.873328][ T6142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.873359][ T6142] RSP: 002b:00007f38f81c4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.873384][ T6142] RAX: ffffffffffffffda RBX: 00007f38f81c56c0 RCX: 00007f38f735cfce [ 101.873411][ T6142] RDX: 0000000000000002 RSI: 00007f38f81c4f90 RDI: ffffffffffffff9c [ 101.873429][ T6142] RBP: 00007f38f7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 101.873444][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.873460][ T6142] R13: 00007f38f7616038 R14: 00007f38f7615fa0 R15: 00007ffd4866e668 [ 101.873494][ T6142] [ 103.044498][ T6163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.110247][ T29] audit: type=1800 audit(1773922644.193:2): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 104.130087][ T6166] mmap: syz.0.48 (6166) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.212887][ T6182] FAULT_INJECTION: forcing a failure. [ 105.212887][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 105.252053][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.2.52 Not tainted syzkaller #0 PREEMPT(full) [ 105.252092][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.252108][ T6182] Call Trace: [ 105.252116][ T6182] [ 105.252125][ T6182] dump_stack_lvl+0x100/0x190 [ 105.252153][ T6182] should_fail_ex.cold+0x5/0xa [ 105.252171][ T6182] should_failslab+0xc2/0x120 [ 105.252187][ T6182] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 105.252208][ T6182] ? security_inode_alloc+0x3b/0x2c0 [ 105.252223][ T6182] ? lockdep_init_map_type+0x5c/0x250 [ 105.252245][ T6182] security_inode_alloc+0x3b/0x2c0 [ 105.252260][ T6182] inode_init_always_gfp+0xced/0x1040 [ 105.252278][ T6182] alloc_inode+0x8e/0x250 [ 105.252296][ T6182] path_from_stashed+0x25b/0x750 [ 105.252316][ T6182] pidfs_alloc_file+0xf8/0x290 [ 105.252338][ T6182] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 105.252365][ T6182] pidfd_prepare+0x123/0x200 [ 105.252383][ T6182] __x64_sys_pidfd_open+0x105/0x1a0 [ 105.252403][ T6182] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 105.252427][ T6182] do_syscall_64+0x106/0xf80 [ 105.252447][ T6182] ? clear_bhb_loop+0x40/0x90 [ 105.252464][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.252479][ T6182] RIP: 0033:0x7f12d5b9c799 [ 105.252493][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.252506][ T6182] RSP: 002b:00007f12d6a00028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 105.252520][ T6182] RAX: ffffffffffffffda RBX: 00007f12d5e15fa0 RCX: 00007f12d5b9c799 [ 105.252530][ T6182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 105.252545][ T6182] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 105.252554][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.252563][ T6182] R13: 00007f12d5e16038 R14: 00007f12d5e15fa0 R15: 00007ffe0d1d0aa8 [ 105.252582][ T6182] [ 105.585060][ T6185] ======================================================= [ 105.585060][ T6185] WARNING: The mand mount option has been deprecated and [ 105.585060][ T6185] and is ignored by this kernel. Remove the mand [ 105.585060][ T6185] option from the mount to silence this warning. [ 105.585060][ T6185] ======================================================= [ 105.831464][ T6175] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 106.694402][ T6185] kexec: Could not allocate control_code_buffer [ 108.503967][ T6194] program syz.1.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.915885][ T6284] Invalid ELF header magic: != ELF [ 111.948766][ T6284] FAULT_INJECTION: forcing a failure. [ 111.948766][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 111.962856][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(full) [ 111.962892][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.962909][ T6284] Call Trace: [ 111.962918][ T6284] [ 111.962928][ T6284] dump_stack_lvl+0x100/0x190 [ 111.962974][ T6284] should_fail_ex.cold+0x5/0xa [ 111.963007][ T6284] should_failslab+0xc2/0x120 [ 111.963037][ T6284] __kvmalloc_node_noprof+0xfa/0xa00 [ 111.963078][ T6284] ? file_tty_write.isra.0+0x64e/0x890 [ 111.963129][ T6284] file_tty_write.isra.0+0x64e/0x890 [ 111.963169][ T6284] ? security_file_permission+0x76/0x210 [ 111.963205][ T6284] ? rw_verify_area+0xce/0x6d0 [ 111.963248][ T6284] vfs_write+0x6ac/0x1070 [ 111.963273][ T6284] ? __pfx_tty_write+0x10/0x10 [ 111.963312][ T6284] ? __pfx_vfs_write+0x10/0x10 [ 111.963336][ T6284] ? find_held_lock+0x2b/0x80 [ 111.963387][ T6284] ksys_write+0x12a/0x250 [ 111.963414][ T6284] ? __pfx_ksys_write+0x10/0x10 [ 111.963452][ T6284] do_syscall_64+0x106/0xf80 [ 111.963490][ T6284] ? clear_bhb_loop+0x40/0x90 [ 111.963524][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.963553][ T6284] RIP: 0033:0x7f69c299c799 [ 111.963578][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.963604][ T6284] RSP: 002b:00007f69c37c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.963630][ T6284] RAX: ffffffffffffffda RBX: 00007f69c2c16090 RCX: 00007f69c299c799 [ 111.963649][ T6284] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 111.963665][ T6284] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 111.963682][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.963698][ T6284] R13: 00007f69c2c16128 R14: 00007f69c2c16090 R15: 00007fffa1576e78 [ 111.963738][ T6284] [ 115.304892][ T6323] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input6 [ 115.382072][ T6321] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 117.271257][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 117.314526][ T6346] zswap: compressor not available [ 117.789348][ T6367] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 117.876965][ T6367] File: /dev/nullb0 PID: 6367 Comm: syz.2.80 [ 118.139916][ T6376] vivid-007: ================= START STATUS ================= [ 118.147876][ T6376] vivid-007: Generate PTS: true [ 118.163884][ T6376] vivid-007: Generate SCR: true [ 118.178615][ T6376] tpg source WxH: 320x240 (Y'CbCr) [ 118.195691][ T6376] tpg field: 1 [ 118.199116][ T6376] tpg crop: (0,0)/320x240 [ 118.233830][ T6376] tpg compose: (0,0)/320x240 [ 118.246460][ T6376] tpg colorspace: 8 [ 118.261968][ T6378] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 118.279808][ T6376] tpg transfer function: 0/0 [ 118.284506][ T6376] tpg Y'CbCr encoding: 0/0 [ 118.299896][ T6376] tpg quantization: 0/0 [ 118.319832][ T6376] tpg RGB range: 0/2 [ 118.323774][ T6376] vivid-007: ================== END STATUS ================== [ 119.325774][ T6396] futex_wake_op: syz.2.87 tries to shift op by -2048; fix this program [ 119.354456][ T6396] futex_wake_op: syz.2.87 tries to shift op by -2048; fix this program [ 119.468043][ T6396] 0x000000000001-0x000000020000 : "" [ 119.483739][ T6396] ftl_cs: FTL header corrupt! [ 121.321934][ T6417] delete_channel: no stack [ 121.353854][ T6417] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 121.390999][ T6417] netlink: 330 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.624437][ T5830] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 123.053809][ T5830] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 123.532456][ T6453] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 124.245471][ T29] audit: type=1800 audit(1773922665.373:3): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.97" name="file0" dev="tmpfs" ino=142 res=0 errno=0 [ 126.148259][ T6465] FAULT_INJECTION: forcing a failure. [ 126.148259][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 126.161203][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.0.99 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.161249][ T6465] Tainted: [L]=SOFTLOCKUP [ 126.161259][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.161274][ T6465] Call Trace: [ 126.161283][ T6465] [ 126.161293][ T6465] dump_stack_lvl+0x100/0x190 [ 126.161352][ T6465] should_fail_ex.cold+0x5/0xa [ 126.161386][ T6465] should_failslab+0xc2/0x120 [ 126.161415][ T6465] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 126.161463][ T6465] ? alloc_pid+0x1bd/0x1890 [ 126.161496][ T6465] ? ida_alloc_range+0x70d/0x830 [ 126.161535][ T6465] ? rcu_is_watching+0x12/0xc0 [ 126.161582][ T6465] alloc_pid+0x1bd/0x1890 [ 126.161618][ T6465] ? __lock_acquire+0x4a5/0x2630 [ 126.161656][ T6465] ? __pfx_alloc_pid+0x10/0x10 [ 126.161704][ T6465] ? find_held_lock+0x2b/0x80 [ 126.161729][ T6465] ? copy_cgroup_ns+0x405/0x970 [ 126.161760][ T6465] ? copy_cgroup_ns+0x405/0x970 [ 126.161807][ T6465] ? fpu_clone+0x226/0x7c0 [ 126.161840][ T6465] ? copy_thread+0x6ce/0xb60 [ 126.161883][ T6465] copy_process+0x40e7/0x7a40 [ 126.161933][ T6465] ? __pfx_copy_process+0x10/0x10 [ 126.161980][ T6465] kernel_clone+0xfc/0x9a0 [ 126.162010][ T6465] ? __pfx_futex_wait+0x10/0x10 [ 126.162053][ T6465] ? __pfx_kernel_clone+0x10/0x10 [ 126.162105][ T6465] __do_sys_clone+0xd9/0x120 [ 126.162138][ T6465] ? __pfx___do_sys_clone+0x10/0x10 [ 126.162169][ T6465] ? __fget_files+0x21f/0x3d0 [ 126.162222][ T6465] do_syscall_64+0x106/0xf80 [ 126.162260][ T6465] ? clear_bhb_loop+0x40/0x90 [ 126.162293][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.162322][ T6465] RIP: 0033:0x7f61e1b9c799 [ 126.162353][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.162380][ T6465] RSP: 002b:00007f61e2b37fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 126.162407][ T6465] RAX: ffffffffffffffda RBX: 00007f61e1e15fa0 RCX: 00007f61e1b9c799 [ 126.162425][ T6465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 126.162448][ T6465] RBP: 00007f61e1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 126.162465][ T6465] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.162482][ T6465] R13: 00007f61e1e16038 R14: 00007f61e1e15fa0 R15: 00007ffd4f7d06d8 [ 126.162519][ T6465] [ 127.755981][ T6479] ovs_: entered promiscuous mode [ 132.442709][ T6542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.456582][ T6542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.467318][ T6542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.519777][ T6542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.909629][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.917476][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.504754][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.511577][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.517613][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.579989][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.517750][ T6590] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 137.784365][ T6609] Invalid ELF header magic: != ELF [ 137.863838][ T6614] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.934395][ T6614] random: crng reseeded on system resumption [ 138.067101][ T6617] zswap: compressor not available [ 138.546121][ T6627] Invalid ELF header magic: != ELF [ 142.062818][ T6669] smpboot: CPU 1 is now offline [ 142.507829][ T6675] FAULT_INJECTION: forcing a failure. [ 142.507829][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 142.622954][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.622982][ T6675] Tainted: [L]=SOFTLOCKUP [ 142.622987][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.622996][ T6675] Call Trace: [ 142.623001][ T6675] [ 142.623007][ T6675] dump_stack_lvl+0x100/0x190 [ 142.623034][ T6675] should_fail_ex.cold+0x5/0xa [ 142.623052][ T6675] should_failslab+0xc2/0x120 [ 142.623069][ T6675] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 142.623090][ T6675] ? do_getname+0x35/0x390 [ 142.623112][ T6675] do_getname+0x35/0x390 [ 142.623132][ T6675] __x64_sys_mknod+0x78/0xc0 [ 142.623149][ T6675] do_syscall_64+0x106/0xf80 [ 142.623168][ T6675] ? clear_bhb_loop+0x40/0x90 [ 142.623186][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.623201][ T6675] RIP: 0033:0x7f61e1b9c799 [ 142.623215][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.623228][ T6675] RSP: 002b:00007f61e2b38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 142.623243][ T6675] RAX: ffffffffffffffda RBX: 00007f61e1e15fa0 RCX: 00007f61e1b9c799 [ 142.623252][ T6675] RDX: 0000000000000017 RSI: 0000000000000e6c RDI: 0000200000000080 [ 142.623261][ T6675] RBP: 00007f61e1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 142.623269][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.623277][ T6675] R13: 00007f61e1e16038 R14: 00007f61e1e15fa0 R15: 00007ffd4f7d06d8 [ 142.623296][ T6675] [ 144.228473][ T6703] mkiss: ax0: crc mode is auto. [ 144.446528][ T6708] capability: warning: `syz.0.144' uses 32-bit capabilities (legacy support in use) [ 145.758496][ T6723] Invalid ELF header magic: != ELF [ 147.247758][ T6740] Invalid ELF header magic: != ELF [ 147.696336][ T6752] FAULT_INJECTION: forcing a failure. [ 147.696336][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 147.747614][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.3.153 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.747640][ T6752] Tainted: [L]=SOFTLOCKUP [ 147.747645][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.747654][ T6752] Call Trace: [ 147.747659][ T6752] [ 147.747666][ T6752] dump_stack_lvl+0x100/0x190 [ 147.747693][ T6752] should_fail_ex.cold+0x5/0xa [ 147.747711][ T6752] should_failslab+0xc2/0x120 [ 147.747728][ T6752] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 147.747750][ T6752] ? alloc_inode+0x183/0x250 [ 147.747773][ T6752] alloc_inode+0x183/0x250 [ 147.747793][ T6752] new_inode+0x22/0x1c0 [ 147.747810][ T6752] ? dput.part.0+0xdd/0x570 [ 147.747829][ T6752] simple_fill_super+0x2d9/0x680 [ 147.747854][ T6752] ? __pfx_nfsd_fill_super+0x10/0x10 [ 147.747872][ T6752] nfsd_fill_super+0x98/0x560 [ 147.747887][ T6752] ? __pfx_set_anon_super_fc+0x10/0x10 [ 147.747909][ T6752] ? __pfx_nfsd_fill_super+0x10/0x10 [ 147.747926][ T6752] get_tree_keyed+0x10e/0x1d0 [ 147.747948][ T6752] vfs_get_tree+0x92/0x320 [ 147.747968][ T6752] path_mount+0x7d0/0x23d0 [ 147.747988][ T6752] ? __pfx_path_mount+0x10/0x10 [ 147.748003][ T6752] ? lockdep_hardirqs_on+0x78/0x100 [ 147.748025][ T6752] ? putname+0xb1/0x110 [ 147.748039][ T6752] ? kmem_cache_free+0x124/0x6a0 [ 147.748064][ T6752] ? __x64_sys_mount+0x293/0x310 [ 147.748080][ T6752] __x64_sys_mount+0x293/0x310 [ 147.748097][ T6752] ? __pfx___x64_sys_mount+0x10/0x10 [ 147.748119][ T6752] do_syscall_64+0x106/0xf80 [ 147.748138][ T6752] ? clear_bhb_loop+0x40/0x90 [ 147.748156][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.748170][ T6752] RIP: 0033:0x7f69c299c799 [ 147.748184][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.748197][ T6752] RSP: 002b:00007f69c37c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.748211][ T6752] RAX: ffffffffffffffda RBX: 00007f69c2c16090 RCX: 00007f69c299c799 [ 147.748221][ T6752] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 147.748229][ T6752] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 147.748238][ T6752] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 147.748246][ T6752] R13: 00007f69c2c16128 R14: 00007f69c2c16090 R15: 00007fffa1576e78 [ 147.748265][ T6752] [ 149.436562][ T6770] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 150.216283][ T796] Process accounting resumed [ 152.011852][ T6796] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.762911][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 154.642251][ T29] audit: type=1326 audit(1773922695.773:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.1.168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f739c799 code=0x0 [ 154.691344][ T51] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 156.394060][ T6867] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 158.780206][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 158.860887][ T6898] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 158.936015][ T6898] netlink: 51505 bytes leftover after parsing attributes in process `syz.2.180'. [ 161.210595][ T6917] bridge0: port 3(gretap0) entered blocking state [ 161.246896][ T6917] bridge0: port 3(gretap0) entered disabled state [ 161.267457][ T6917] gretap0: entered allmulticast mode [ 161.298495][ T6917] FAULT_INJECTION: forcing a failure. [ 161.298495][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 161.351974][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.1.185 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.352001][ T6917] Tainted: [L]=SOFTLOCKUP [ 161.352006][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.352015][ T6917] Call Trace: [ 161.352021][ T6917] [ 161.352026][ T6917] dump_stack_lvl+0x100/0x190 [ 161.352054][ T6917] should_fail_ex.cold+0x5/0xa [ 161.352072][ T6917] should_failslab+0xc2/0x120 [ 161.352088][ T6917] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 161.352113][ T6917] ? kstrdup_const+0x63/0x80 [ 161.352130][ T6917] kstrdup+0x51/0xe0 [ 161.352154][ T6917] kstrdup_const+0x63/0x80 [ 161.352171][ T6917] __kernfs_new_node+0x9b/0x960 [ 161.352191][ T6917] ? up_write+0x290/0x4f0 [ 161.352214][ T6917] ? __pfx___kernfs_new_node+0x10/0x10 [ 161.352240][ T6917] ? find_held_lock+0x2b/0x80 [ 161.352253][ T6917] ? kernfs_root+0xee/0x2a0 [ 161.352273][ T6917] ? kernfs_root+0xee/0x2a0 [ 161.352296][ T6917] kernfs_new_node+0x11b/0x1a0 [ 161.352321][ T6917] kernfs_create_link+0xcc/0x240 [ 161.352339][ T6917] sysfs_do_create_link_sd+0x90/0x140 [ 161.352360][ T6917] sysfs_create_link+0x61/0xc0 [ 161.352380][ T6917] br_sysfs_addif+0x1ae/0x210 [ 161.352402][ T6917] br_add_if+0x701/0x1b40 [ 161.352422][ T6917] ? security_capable+0x80/0x260 [ 161.352446][ T6917] add_del_if+0x114/0x160 [ 161.352466][ T6917] br_dev_siocdevprivate+0x8ac/0x1650 [ 161.352487][ T6917] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 161.352515][ T6917] ? lock_acquire+0x1cf/0x380 [ 161.352540][ T6917] ? netdev_name_node_lookup+0x107/0x150 [ 161.352558][ T6917] ? __mutex_lock+0x26a/0x1b90 [ 161.352581][ T6917] dev_ifsioc+0xc1e/0x1e90 [ 161.352609][ T6917] ? __pfx_dev_ifsioc+0x10/0x10 [ 161.352627][ T6917] ? __pfx___mutex_lock+0x10/0x10 [ 161.352655][ T6917] ? dev_load+0x8e/0x240 [ 161.352672][ T6917] ? dev_load+0x8e/0x240 [ 161.352694][ T6917] dev_ioctl+0x70e/0x1070 [ 161.352714][ T6917] sock_ioctl+0x494/0x6b0 [ 161.352731][ T6917] ? __pfx_sock_ioctl+0x10/0x10 [ 161.352746][ T6917] ? hook_file_ioctl_common+0x146/0x410 [ 161.352767][ T6917] ? __fget_files+0x21f/0x3d0 [ 161.352784][ T6917] ? __pfx_sock_ioctl+0x10/0x10 [ 161.352800][ T6917] __x64_sys_ioctl+0x18e/0x210 [ 161.352822][ T6917] do_syscall_64+0x106/0xf80 [ 161.352841][ T6917] ? clear_bhb_loop+0x40/0x90 [ 161.352859][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.352874][ T6917] RIP: 0033:0x7f38f739c799 [ 161.352887][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.352901][ T6917] RSP: 002b:00007f38f81c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.352916][ T6917] RAX: ffffffffffffffda RBX: 00007f38f7615fa0 RCX: 00007f38f739c799 [ 161.352925][ T6917] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 161.352935][ T6917] RBP: 00007f38f7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 161.352944][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.352952][ T6917] R13: 00007f38f7616038 R14: 00007f38f7615fa0 R15: 00007ffd4866e668 [ 161.352972][ T6917] [ 161.353907][ T6917] gretap0: left allmulticast mode [ 162.589215][ T6927] block2mtd: illegal erase size [ 162.687967][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 162.940119][ T6924] HfR: entered promiscuous mode [ 163.194387][ T6938] futex_wake_op: syz.1.189 tries to shift op by -2048; fix this program [ 163.240365][ T6938] futex_wake_op: syz.1.189 tries to shift op by -2048; fix this program [ 163.257088][ T6929] HfR: left promiscuous mode [ 163.296161][ T6939] 0x000000000001-0x000000020000 : "" [ 163.357341][ T6939] ftl_cs: FTL header corrupt! [ 165.066265][ T6955] netlink: 330 bytes leftover after parsing attributes in process `syz.2.192'. [ 165.945627][ T6963] hub 1-0:1.0: USB hub found [ 166.063072][ T6963] hub 1-0:1.0: 1 port detected [ 167.976895][ T6988] futex_wake_op: syz.3.199 tries to shift op by -2048; fix this program [ 170.870323][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 170.946572][ T7030] netlink: 25 bytes leftover after parsing attributes in process `syz.1.206'. [ 175.645277][ T7090] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 175.645277][ T7090] The task syz.2.219 (7090) triggered the difference, watch for misbehavior. [ 178.391112][ T7127] futex_wake_op: syz.1.225 tries to shift op by -2048; fix this program [ 178.466684][ T7127] futex_wake_op: syz.1.225 tries to shift op by -2048; fix this program [ 179.212217][ T7146] Invalid ELF header magic: != ELF [ 180.173846][ T7160] Invalid ELF header magic: != ELF [ 182.050414][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 182.116370][ T7182] ipvlan0: entered promiscuous mode [ 182.148149][ T7182] ipvlan0: entered allmulticast mode [ 182.202933][ T7182] veth0_vlan: entered allmulticast mode [ 182.869280][ T7174] kexec: Could not allocate control_code_buffer [ 184.871885][ T7220] netlink: 342 bytes leftover after parsing attributes in process `syz.1.242'. [ 185.123384][ T7221] zswap: compressor û not available [ 185.483738][ T7216] FAULT_INJECTION: forcing a failure. [ 185.483738][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 185.669303][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.669331][ T7216] Tainted: [L]=SOFTLOCKUP [ 185.669336][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.669349][ T7216] Call Trace: [ 185.669355][ T7216] [ 185.669361][ T7216] dump_stack_lvl+0x100/0x190 [ 185.669390][ T7216] should_fail_ex.cold+0x5/0xa [ 185.669408][ T7216] should_failslab+0xc2/0x120 [ 185.669425][ T7216] __kmalloc_cache_noprof+0x7a/0x6f0 [ 185.669444][ T7216] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 185.669464][ T7216] ? get_mem_cgroup_from_mm+0x88/0x600 [ 185.669484][ T7216] ? get_mem_cgroup_from_mm+0x132/0x600 [ 185.669507][ T7216] __do_sys_fanotify_init+0x5cf/0xe50 [ 185.669530][ T7216] do_syscall_64+0x106/0xf80 [ 185.669550][ T7216] ? clear_bhb_loop+0x40/0x90 [ 185.669568][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.669583][ T7216] RIP: 0033:0x7f12d5b9c799 [ 185.669597][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.669611][ T7216] RSP: 002b:00007f12d69df028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 185.669625][ T7216] RAX: ffffffffffffffda RBX: 00007f12d5e16090 RCX: 00007f12d5b9c799 [ 185.669635][ T7216] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 185.669643][ T7216] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 185.669652][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.669660][ T7216] R13: 00007f12d5e16128 R14: 00007f12d5e16090 R15: 00007ffe0d1d0aa8 [ 185.669678][ T7216] [ 186.285714][ T7236] zram: Added device: zram1 [ 187.012379][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 188.172520][ T51] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 188.172543][ T51] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 188.188862][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 188.188895][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 188.201324][ T51] Bluetooth: hci0: adv larger than maximum supported [ 188.208372][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x56 [ 188.215956][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 189.074191][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.180791][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 190.277948][ T7288] netlink: 25 bytes leftover after parsing attributes in process `syz.2.257'. [ 190.539822][ T7285] syz.0.258 (7285) used greatest stack depth: 19672 bytes left [ 191.154732][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.988905][ T7322] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 194.366428][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374322][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665352][ T7330] Invalid ELF header magic: != ELF [ 196.271160][ T7348] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 201.090471][ T7404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.220315][ T7404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.305268][ T7404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.398544][ T7404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.160088][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.238867][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.318972][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.479251][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.751326][ T7440] FAULT_INJECTION: forcing a failure. [ 203.751326][ T7440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.974225][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.3.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.974252][ T7440] Tainted: [L]=SOFTLOCKUP [ 203.974258][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.974267][ T7440] Call Trace: [ 203.974272][ T7440] [ 203.974278][ T7440] dump_stack_lvl+0x100/0x190 [ 203.974306][ T7440] should_fail_ex.cold+0x5/0xa [ 203.974321][ T7440] ? prepare_alloc_pages+0x16d/0x5f0 [ 203.974339][ T7440] should_fail_alloc_page+0xeb/0x140 [ 203.974357][ T7440] prepare_alloc_pages+0x1f0/0x5f0 [ 203.974377][ T7440] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 203.974403][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 203.974424][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 203.974443][ T7440] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.974473][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 203.974502][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 203.974520][ T7440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.974546][ T7440] ? policy_nodemask+0xed/0x4f0 [ 203.974564][ T7440] alloc_pages_mpol+0x1fb/0x550 [ 203.974580][ T7440] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 203.974600][ T7440] alloc_pages_noprof+0x131/0x390 [ 203.974617][ T7440] pte_alloc_one+0x1c/0x3d0 [ 203.974634][ T7440] do_huge_pmd_anonymous_page+0x7fc/0x1c40 [ 203.974660][ T7440] __handle_mm_fault+0x1e9e/0x2b60 [ 203.974683][ T7440] ? mt_find+0x45e/0x8e0 [ 203.974705][ T7440] ? __pfx___handle_mm_fault+0x10/0x10 [ 203.974722][ T7440] ? __pfx_mt_find+0x10/0x10 [ 203.974758][ T7440] handle_mm_fault+0x36d/0xa20 [ 203.974781][ T7440] __get_user_pages+0xf9c/0x34d0 [ 203.974802][ T7440] ? down_read_killable+0x30e/0x4c0 [ 203.974816][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 203.974834][ T7440] ? __pfx___get_user_pages+0x10/0x10 [ 203.974849][ T7440] ? __lock_acquire+0x4a5/0x2630 [ 203.974871][ T7440] __gup_longterm_locked+0x87d/0x16f0 [ 203.974893][ T7440] ? __pfx___gup_longterm_locked+0x10/0x10 [ 203.974911][ T7440] ? try_get_folio+0x262/0x750 [ 203.974924][ T7440] ? pmd_write+0xd3/0x150 [ 203.974947][ T7440] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 203.974966][ T7440] gup_fast_fallback+0x18c6/0x2460 [ 203.974996][ T7440] ? __pfx_gup_fast_fallback+0x10/0x10 [ 203.975012][ T7440] ? kasan_save_stack+0x30/0x50 [ 203.975033][ T7440] ? kasan_save_track+0x14/0x30 [ 203.975053][ T7440] ? __kasan_slab_alloc+0x89/0x90 [ 203.975066][ T7440] ? mempool_alloc_noprof+0x1b7/0x310 [ 203.975080][ T7440] ? bvec_alloc+0x197/0x210 [ 203.975094][ T7440] ? bio_alloc_bioset+0x59e/0x850 [ 203.975108][ T7440] ? blkdev_direct_IO+0xeae/0x1fb0 [ 203.975127][ T7440] ? blkdev_write_iter+0x703/0xd70 [ 203.975145][ T7440] ? vfs_write+0x6ac/0x1070 [ 203.975157][ T7440] ? ksys_write+0x12a/0x250 [ 203.975169][ T7440] ? do_syscall_64+0x106/0xf80 [ 203.975187][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.975206][ T7440] pin_user_pages_fast+0xa7/0xf0 [ 203.975222][ T7440] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 203.975240][ T7440] ? iov_iter_advance+0xac/0x6d0 [ 203.975262][ T7440] iov_iter_extract_pages+0xa0d/0x1ef0 [ 203.975283][ T7440] ? irqentry_exit+0x180/0x670 [ 203.975302][ T7440] ? lockdep_hardirqs_on+0x78/0x100 [ 203.975321][ T7440] ? irqentry_exit+0x180/0x670 [ 203.975342][ T7440] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 203.975364][ T7440] ? iov_iter_revert+0x252/0x5b0 [ 203.975383][ T7440] iov_iter_extract_bvecs+0x10e/0xf40 [ 203.975408][ T7440] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 203.975427][ T7440] ? bio_init+0x404/0x610 [ 203.975456][ T7440] bio_iov_iter_get_pages+0x26a/0x970 [ 203.975480][ T7440] blkdev_direct_IO+0x1302/0x1fb0 [ 203.975511][ T7440] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 203.975541][ T7440] blkdev_write_iter+0x703/0xd70 [ 203.975567][ T7440] vfs_write+0x6ac/0x1070 [ 203.975582][ T7440] ? __pfx_blkdev_write_iter+0x10/0x10 [ 203.975603][ T7440] ? __pfx_vfs_write+0x10/0x10 [ 203.975615][ T7440] ? find_held_lock+0x2b/0x80 [ 203.975641][ T7440] ksys_write+0x12a/0x250 [ 203.975654][ T7440] ? __pfx_ksys_write+0x10/0x10 [ 203.975673][ T7440] do_syscall_64+0x106/0xf80 [ 203.975692][ T7440] ? clear_bhb_loop+0x40/0x90 [ 203.975710][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.975725][ T7440] RIP: 0033:0x7f69c299c799 [ 203.975738][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.975752][ T7440] RSP: 002b:00007f69c03f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.975767][ T7440] RAX: ffffffffffffffda RBX: 00007f69c2c16360 RCX: 00007f69c299c799 [ 203.975776][ T7440] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000007 [ 203.975785][ T7440] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 203.975794][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.975803][ T7440] R13: 00007f69c2c163f8 R14: 00007f69c2c16360 R15: 00007fffa1576e78 [ 203.975823][ T7440] [ 208.393902][ T7471] program syz.3.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.939975][ T7494] netlink: 330 bytes leftover after parsing attributes in process `syz.2.306'. [ 209.078766][ T7494] mac80211_hwsim hwsim5 ›: renamed from wlan0 (while UP) [ 211.644560][ T7531] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 213.552101][ T7549] Invalid ELF header magic: != ELF [ 214.263174][ T7563] FAULT_INJECTION: forcing a failure. [ 214.263174][ T7563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.338344][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.2.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.338372][ T7563] Tainted: [L]=SOFTLOCKUP [ 214.338377][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.338386][ T7563] Call Trace: [ 214.338397][ T7563] [ 214.338403][ T7563] dump_stack_lvl+0x100/0x190 [ 214.338431][ T7563] should_fail_ex.cold+0x5/0xa [ 214.338446][ T7563] ? prepare_alloc_pages+0x16d/0x5f0 [ 214.338465][ T7563] should_fail_alloc_page+0xeb/0x140 [ 214.338481][ T7563] prepare_alloc_pages+0x1f0/0x5f0 [ 214.338501][ T7563] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 214.338525][ T7563] ? lock_acquire+0x1cf/0x380 [ 214.338547][ T7563] ? lock_acquire+0x1cf/0x380 [ 214.338565][ T7563] ? find_held_lock+0x2b/0x80 [ 214.338578][ T7563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.338599][ T7563] ? is_bpf_text_address+0x8a/0x1a0 [ 214.338622][ T7563] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.338638][ T7563] ? is_bpf_text_address+0x94/0x1a0 [ 214.338659][ T7563] ? kernel_text_address+0x8d/0x100 [ 214.338682][ T7563] ? arch_stack_walk+0xa6/0xf0 [ 214.338699][ T7563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.338724][ T7563] ? policy_nodemask+0xed/0x4f0 [ 214.338741][ T7563] alloc_pages_mpol+0x1fb/0x550 [ 214.338756][ T7563] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 214.338777][ T7563] alloc_pages_noprof+0x131/0x390 [ 214.338794][ T7563] pte_alloc_one+0x1c/0x3d0 [ 214.338810][ T7563] do_huge_pmd_anonymous_page+0x7fc/0x1c40 [ 214.338837][ T7563] __handle_mm_fault+0x1e9e/0x2b60 [ 214.338859][ T7563] ? mt_find+0x45e/0x8e0 [ 214.338881][ T7563] ? __pfx___handle_mm_fault+0x10/0x10 [ 214.338899][ T7563] ? __pfx_mt_find+0x10/0x10 [ 214.338934][ T7563] handle_mm_fault+0x36d/0xa20 [ 214.338957][ T7563] __get_user_pages+0xf9c/0x34d0 [ 214.338978][ T7563] ? down_read_killable+0x30e/0x4c0 [ 214.338992][ T7563] ? __lock_acquire+0x4a5/0x2630 [ 214.339009][ T7563] ? __pfx___get_user_pages+0x10/0x10 [ 214.339024][ T7563] ? __lock_acquire+0x4a5/0x2630 [ 214.339047][ T7563] __gup_longterm_locked+0x87d/0x16f0 [ 214.339069][ T7563] ? __pfx___gup_longterm_locked+0x10/0x10 [ 214.339087][ T7563] ? try_get_folio+0x262/0x750 [ 214.339100][ T7563] ? pmd_write+0xd3/0x150 [ 214.339122][ T7563] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 214.339141][ T7563] gup_fast_fallback+0x18c6/0x2460 [ 214.339171][ T7563] ? __pfx_gup_fast_fallback+0x10/0x10 [ 214.339188][ T7563] ? kasan_save_stack+0x30/0x50 [ 214.339208][ T7563] ? kasan_save_track+0x14/0x30 [ 214.339228][ T7563] ? __kasan_slab_alloc+0x89/0x90 [ 214.339241][ T7563] ? mempool_alloc_noprof+0x1b7/0x310 [ 214.339255][ T7563] ? bvec_alloc+0x197/0x210 [ 214.339270][ T7563] ? bio_alloc_bioset+0x59e/0x850 [ 214.339283][ T7563] ? blkdev_direct_IO+0xeae/0x1fb0 [ 214.339302][ T7563] ? blkdev_write_iter+0x703/0xd70 [ 214.339320][ T7563] ? vfs_write+0x6ac/0x1070 [ 214.339332][ T7563] ? ksys_write+0x12a/0x250 [ 214.339344][ T7563] ? do_syscall_64+0x106/0xf80 [ 214.339363][ T7563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.339382][ T7563] pin_user_pages_fast+0xa7/0xf0 [ 214.339406][ T7563] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 214.339425][ T7563] ? iov_iter_advance+0xac/0x6d0 [ 214.339445][ T7563] iov_iter_extract_pages+0xa0d/0x1ef0 [ 214.339470][ T7563] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 214.339493][ T7563] ? iov_iter_revert+0x252/0x5b0 [ 214.339508][ T7563] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 214.339531][ T7563] iov_iter_extract_bvecs+0x10e/0xf40 [ 214.339556][ T7563] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 214.339577][ T7563] ? bio_init+0x404/0x610 [ 214.339601][ T7563] bio_iov_iter_get_pages+0x26a/0x970 [ 214.339623][ T7563] blkdev_direct_IO+0x1302/0x1fb0 [ 214.339653][ T7563] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 214.339683][ T7563] blkdev_write_iter+0x703/0xd70 [ 214.339709][ T7563] vfs_write+0x6ac/0x1070 [ 214.339723][ T7563] ? __pfx_blkdev_write_iter+0x10/0x10 [ 214.339745][ T7563] ? __pfx_vfs_write+0x10/0x10 [ 214.339757][ T7563] ? find_held_lock+0x2b/0x80 [ 214.339783][ T7563] ksys_write+0x12a/0x250 [ 214.339796][ T7563] ? __pfx_ksys_write+0x10/0x10 [ 214.339815][ T7563] do_syscall_64+0x106/0xf80 [ 214.339834][ T7563] ? clear_bhb_loop+0x40/0x90 [ 214.339851][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.339866][ T7563] RIP: 0033:0x7f12d5b9c799 [ 214.339880][ T7563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.339894][ T7563] RSP: 002b:00007f12d697c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.339908][ T7563] RAX: ffffffffffffffda RBX: 00007f12d5e16360 RCX: 00007f12d5b9c799 [ 214.339918][ T7563] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000007 [ 214.339928][ T7563] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 214.339937][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.339946][ T7563] R13: 00007f12d5e163f8 R14: 00007f12d5e16360 R15: 00007ffe0d1d0aa8 [ 214.339965][ T7563] [ 215.728072][ T7574] netlink: 330 bytes leftover after parsing attributes in process `syz.2.309'. [ 218.673816][ T29] audit: type=1326 audit(1773923782.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.3.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69c299c799 code=0x0 [ 218.738536][ T5830] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 220.786280][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 220.878439][ T7676] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 220.952768][ T7676] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.324'. [ 223.280285][ T7707] page: refcount:3 mapcount:1 mapping:ffff88805e2ee4a8 index:0x384 pfn:0x78256 [ 223.367247][ T7707] memcg:ffff88801caf8d40 [ 223.399408][ T7707] aops:shmem_aops ino:14f dentry name(?):"dev/zero" [ 223.444185][ T7707] flags: 0xfff00000020018(uptodate|dirty|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 223.511850][ T7707] raw: 00fff00000020018 ffffea0001b3e3c8 ffffea0001e095c8 ffff88805e2ee4a8 [ 223.563211][ T7707] raw: 0000000000000384 0000000000000000 0000000300000000 ffff88801caf8d40 [ 223.622498][ T7707] page dumped because: unmovable page [ 223.656827][ T7707] page_owner tracks the page as allocated [ 223.713011][ T7707] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7688, tgid 7684 (syz.3.327), ts 223014489221, free_ts 214999656679 [ 223.810874][ T7707] post_alloc_hook+0x153/0x170 [ 223.839391][ T7707] get_page_from_freelist+0x111d/0x3140 [ 223.869024][ T7707] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 223.900820][ T7707] alloc_pages_mpol+0x1fb/0x550 [ 223.949741][ T7707] folio_alloc_mpol_noprof+0x36/0x340 [ 223.980304][ T7707] shmem_alloc_folio+0x135/0x160 [ 224.021618][ T7707] shmem_alloc_and_add_folio+0x371/0xd40 [ 224.027315][ T7707] shmem_get_folio_gfp+0x6ab/0x1900 [ 224.074764][ T7707] shmem_fault+0x1f9/0xa20 [ 224.098857][ T7707] __do_fault+0x10d/0x550 [ 224.125073][ T7707] do_fault+0x2db/0x1990 [ 224.149505][ T7707] __handle_mm_fault+0x180f/0x2b60 [ 224.183414][ T7707] handle_mm_fault+0x36d/0xa20 [ 224.204706][ T7707] do_user_addr_fault+0x74c/0x12f0 [ 224.239492][ T7707] exc_page_fault+0x6f/0xd0 [ 224.244052][ T7707] asm_exc_page_fault+0x26/0x30 [ 224.248893][ T7707] page last free pid 7418 tgid 7418 stack trace: [ 224.320805][ T7707] free_unref_folios+0xaea/0x1790 [ 224.325869][ T7707] folios_put_refs+0x53c/0x840 [ 224.372380][ T7707] shmem_undo_range+0x5e5/0x1570 [ 224.377376][ T7707] shmem_evict_inode+0x39e/0xbd0 [ 224.416430][ T7707] evict+0x3c2/0xad0 [ 224.435525][ T7707] iput.part.0+0x605/0xf50 [ 224.463137][ T7707] iput+0x35/0x40 [ 224.484044][ T7707] dentry_unlink_inode+0x2a1/0x490 [ 224.489183][ T7707] __dentry_kill+0x1d0/0x600 [ 224.509514][ T7707] finish_dput+0x76/0x480 [ 224.526895][ T7707] dput.part.0+0x456/0x570 [ 224.539823][ T7707] dput+0x1f/0x30 [ 224.549718][ T7707] __fput+0x519/0xb40 [ 224.567885][ T7707] task_work_run+0x150/0x240 [ 224.583170][ T7707] do_exit+0x8b8/0x2b60 [ 224.587356][ T7707] do_group_exit+0xd5/0x2a0 [ 225.024850][ T7727] netlink: 330 bytes leftover after parsing attributes in process `syz.1.334'. [ 225.083882][ T7727] mac80211_hwsim hwsim8 ›: renamed from wlan0 (while UP) [ 225.922052][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 225.984845][ T7745] netlink: 354 bytes leftover after parsing attributes in process `syz.0.337'. [ 227.687735][ T7766] hub 1-0:1.0: USB hub found [ 227.716704][ T7766] hub 1-0:1.0: 1 port detected [ 227.818471][ T7760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.833189][ T7760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.871503][ T7760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.877519][ T7760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.410281][ T7786] FAULT_INJECTION: forcing a failure. [ 228.410281][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 228.544844][ T7793] netlink: 330 bytes leftover after parsing attributes in process `syz.1.347'. [ 228.587571][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.3.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.587599][ T7786] Tainted: [L]=SOFTLOCKUP [ 228.587604][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.587613][ T7786] Call Trace: [ 228.587620][ T7786] [ 228.587627][ T7786] dump_stack_lvl+0x100/0x190 [ 228.587655][ T7786] should_fail_ex.cold+0x5/0xa [ 228.587673][ T7786] _copy_from_iter+0x1f4/0x1690 [ 228.587694][ T7786] ? __asan_memset+0x23/0x50 [ 228.587716][ T7786] ? __pfx__copy_from_iter+0x10/0x10 [ 228.587733][ T7786] ? __pfx___alloc_skb+0x10/0x10 [ 228.587760][ T7786] netlink_sendmsg+0x808/0xda0 [ 228.587786][ T7786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.587807][ T7786] ? __import_iovec+0x1d2/0x640 [ 228.587825][ T7786] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 228.587850][ T7786] ____sys_sendmsg+0x9e1/0xb70 [ 228.587864][ T7786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.587888][ T7786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.587907][ T7786] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.587931][ T7786] ___sys_sendmsg+0x190/0x1e0 [ 228.587948][ T7786] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.587986][ T7786] __sys_sendmsg+0x170/0x220 [ 228.588006][ T7786] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.588025][ T7786] ? __x64_sys_futex+0x34f/0x4d0 [ 228.588048][ T7786] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 228.588066][ T7786] ? syscall_user_dispatch+0x76/0x130 [ 228.588089][ T7786] do_syscall_64+0x106/0xf80 [ 228.588109][ T7786] ? clear_bhb_loop+0x40/0x90 [ 228.588126][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.588142][ T7786] RIP: 0033:0x7f69c299c799 [ 228.588155][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.588169][ T7786] RSP: 002b:00007f69c37ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.588183][ T7786] RAX: ffffffffffffffda RBX: 00007f69c2c15fa0 RCX: 00007f69c299c799 [ 228.588192][ T7786] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 000000000000000d [ 228.588210][ T7786] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 228.588218][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.588228][ T7786] R13: 00007f69c2c16038 R14: 00007f69c2c15fa0 R15: 00007fffa1576e78 [ 228.588247][ T7786] [ 229.732360][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.892232][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 229.898272][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.904325][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.811082][ T7831] netlink: 330 bytes leftover after parsing attributes in process `syz.2.356'. [ 233.870142][ T7855] bridge_slave_1: left allmulticast mode [ 233.918743][ T7855] bridge_slave_1: left promiscuous mode [ 233.972660][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.507208][ T7868] netlink: 342 bytes leftover after parsing attributes in process `syz.1.362'. [ 234.540987][ T7868] netlink: 342 bytes leftover after parsing attributes in process `syz.1.362'. [ 235.699710][ T7884] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 236.951257][ T1114] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.229136][ T7960] Console: switching to colour VGA+ 80x25 [ 244.243947][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 244.374727][ T8036] kAFS: No cell specified [ 246.148391][ T8055] Invalid ELF header magic: != ELF [ 246.333567][ T8069] block2mtd: error: cannot open device /sys/modu [ 246.679917][ T8069] Console: switching to colour frame buffer device 128x48 [ 246.983856][ T8067] program syz.2.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.915614][ T8087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 248.857888][ T8105] mkiss: ax0: crc mode is auto. [ 251.717492][ T8158] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 255.834018][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843301][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.924180][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 258.301683][ T796] Process accounting resumed [ 260.590254][ T8316] FAULT_INJECTION: forcing a failure. [ 260.590254][ T8316] name failslab, interval 1, probability 0, space 0, times 0 [ 260.689173][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.2.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.689200][ T8316] Tainted: [L]=SOFTLOCKUP [ 260.689205][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.689218][ T8316] Call Trace: [ 260.689224][ T8316] [ 260.689230][ T8316] dump_stack_lvl+0x100/0x190 [ 260.689257][ T8316] should_fail_ex.cold+0x5/0xa [ 260.689276][ T8316] should_failslab+0xc2/0x120 [ 260.689293][ T8316] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 260.689313][ T8316] ? __anon_vma_prepare+0x344/0x5e0 [ 260.689337][ T8316] __anon_vma_prepare+0x344/0x5e0 [ 260.689356][ T8316] ? do_raw_spin_lock+0x128/0x260 [ 260.689379][ T8316] __vmf_anon_prepare+0x11f/0x250 [ 260.689397][ T8316] do_huge_pmd_anonymous_page+0x15c/0x1c40 [ 260.689420][ T8316] ? __pmd_alloc+0x3fb/0x950 [ 260.689438][ T8316] __handle_mm_fault+0x1e9e/0x2b60 [ 260.689460][ T8316] ? mt_find+0x45e/0x8e0 [ 260.689482][ T8316] ? __pfx___handle_mm_fault+0x10/0x10 [ 260.689500][ T8316] ? __pfx_mt_find+0x10/0x10 [ 260.689536][ T8316] handle_mm_fault+0x36d/0xa20 [ 260.689559][ T8316] __get_user_pages+0xf9c/0x34d0 [ 260.689584][ T8316] ? __pfx___get_user_pages+0x10/0x10 [ 260.689605][ T8316] populate_vma_page_range+0x267/0x3f0 [ 260.689624][ T8316] ? __pfx_populate_vma_page_range+0x10/0x10 [ 260.689641][ T8316] ? __pfx_find_vma_intersection+0x10/0x10 [ 260.689657][ T8316] ? do_mmap+0x93f/0x12f0 [ 260.689674][ T8316] __mm_populate+0x107/0x3a0 [ 260.689692][ T8316] ? __pfx___mm_populate+0x10/0x10 [ 260.689710][ T8316] ? up_write+0x290/0x4f0 [ 260.689732][ T8316] vm_mmap_pgoff+0x37f/0x470 [ 260.689751][ T8316] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 260.689768][ T8316] ? do_futex+0x192/0x350 [ 260.689787][ T8316] ? __pfx_do_futex+0x10/0x10 [ 260.689808][ T8316] ksys_mmap_pgoff+0xe1/0x650 [ 260.689824][ T8316] ? __x64_sys_futex+0x34f/0x4d0 [ 260.689841][ T8316] ? __x64_sys_futex+0x358/0x4d0 [ 260.689859][ T8316] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 260.689875][ T8316] ? xfd_validate_state+0x129/0x190 [ 260.689899][ T8316] __x64_sys_mmap+0x125/0x190 [ 260.689925][ T8316] do_syscall_64+0x106/0xf80 [ 260.689944][ T8316] ? clear_bhb_loop+0x40/0x90 [ 260.689962][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.689977][ T8316] RIP: 0033:0x7f12d5b9c799 [ 260.689992][ T8316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.690005][ T8316] RSP: 002b:00007f12d6a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 260.690024][ T8316] RAX: ffffffffffffffda RBX: 00007f12d5e15fa0 RCX: 00007f12d5b9c799 [ 260.690034][ T8316] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 260.690049][ T8316] RBP: 00007f12d5c32c99 R08: ffffffffffffffff R09: 0000000000008000 [ 260.690058][ T8316] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 260.690067][ T8316] R13: 00007f12d5e16038 R14: 00007f12d5e15fa0 R15: 00007ffe0d1d0aa8 [ 260.690087][ T8316] [ 261.639829][ T8328] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 261.968394][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.025704][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.186840][ T8344] block2mtd: error: cannot open device /sys/modu [ 262.766681][ T8336] hub 1-0:1.0: USB hub found [ 262.780573][ T8336] hub 1-0:1.0: 1 port detected [ 262.905911][ T8333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.917044][ T8333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.946062][ T8333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.969421][ T8333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.247816][ T8365] Invalid ELF header magic: != ELF [ 263.403764][ T8366] FAULT_INJECTION: forcing a failure. [ 263.403764][ T8366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.483582][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.483609][ T8366] Tainted: [L]=SOFTLOCKUP [ 263.483614][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.483623][ T8366] Call Trace: [ 263.483629][ T8366] [ 263.483635][ T8366] dump_stack_lvl+0x100/0x190 [ 263.483662][ T8366] should_fail_ex.cold+0x5/0xa [ 263.483677][ T8366] ? prepare_alloc_pages+0x16d/0x5f0 [ 263.483695][ T8366] should_fail_alloc_page+0xeb/0x140 [ 263.483720][ T8366] prepare_alloc_pages+0x1f0/0x5f0 [ 263.483737][ T8366] ? __lock_acquire+0x4a5/0x2630 [ 263.483759][ T8366] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 263.483786][ T8366] ? lock_acquire+0x1cf/0x380 [ 263.483803][ T8366] ? find_held_lock+0x2b/0x80 [ 263.483816][ T8366] ? page_table_check_set+0x49a/0xa10 [ 263.483831][ T8366] ? page_table_check_set+0x49a/0xa10 [ 263.483847][ T8366] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.483878][ T8366] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 263.483892][ T8366] ? xas_move_index+0xae/0x110 [ 263.483916][ T8366] ? xas_find+0x32c/0x8e0 [ 263.483939][ T8366] ? find_held_lock+0x2b/0x80 [ 263.483953][ T8366] ? find_held_lock+0x2b/0x80 [ 263.483966][ T8366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.483991][ T8366] ? policy_nodemask+0xed/0x4f0 [ 263.484009][ T8366] alloc_pages_mpol+0x1fb/0x550 [ 263.484025][ T8366] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 263.484045][ T8366] folio_alloc_mpol_noprof+0x36/0x340 [ 263.484064][ T8366] vma_alloc_folio_noprof+0xed/0x1d0 [ 263.484082][ T8366] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 263.484105][ T8366] do_anonymous_page+0xb3a/0x1fb0 [ 263.484131][ T8366] __handle_mm_fault+0x1d42/0x2b60 [ 263.484154][ T8366] ? reacquire_held_locks+0xce/0x1e0 [ 263.484172][ T8366] ? __pfx___handle_mm_fault+0x10/0x10 [ 263.484194][ T8366] ? lock_vma_under_rcu+0x17c/0x590 [ 263.484227][ T8366] handle_mm_fault+0x36d/0xa20 [ 263.484250][ T8366] do_user_addr_fault+0x5a3/0x12f0 [ 263.484279][ T8366] exc_page_fault+0x6f/0xd0 [ 263.484299][ T8366] asm_exc_page_fault+0x26/0x30 [ 263.484314][ T8366] RIP: 0033:0x7f12d5a5df4b [ 263.484327][ T8366] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 263.484341][ T8366] RSP: 002b:00007f12d69bcfa0 EFLAGS: 00010206 [ 263.484353][ T8366] RAX: 0000000000000000 RBX: 00007f12d5e16180 RCX: 0000000000000000 [ 263.484362][ T8366] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000180 [ 263.484371][ T8366] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 263.484379][ T8366] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000000 [ 263.484391][ T8366] R13: 00007f12d5e16218 R14: 00007f12d5e16180 R15: 00007ffe0d1d0aa8 [ 263.484410][ T8366] [ 263.484563][ T8366] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 264.799593][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 264.949708][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.955747][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.033768][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 266.114236][ T8410] mkiss: ax0: crc mode is auto. [ 266.291215][ T8413] netlink: 342 bytes leftover after parsing attributes in process `syz.3.482'. [ 266.682335][ T8424] FAULT_INJECTION: forcing a failure. [ 266.682335][ T8424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.855606][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.3.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.855633][ T8424] Tainted: [L]=SOFTLOCKUP [ 266.855639][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.855648][ T8424] Call Trace: [ 266.855653][ T8424] [ 266.855659][ T8424] dump_stack_lvl+0x100/0x190 [ 266.855686][ T8424] should_fail_ex.cold+0x5/0xa [ 266.855702][ T8424] ? prepare_alloc_pages+0x16d/0x5f0 [ 266.855720][ T8424] should_fail_alloc_page+0xeb/0x140 [ 266.855736][ T8424] prepare_alloc_pages+0x1f0/0x5f0 [ 266.855756][ T8424] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 266.855786][ T8424] ? find_held_lock+0x2b/0x80 [ 266.855799][ T8424] ? is_bpf_text_address+0x8a/0x1a0 [ 266.855821][ T8424] ? is_bpf_text_address+0x8a/0x1a0 [ 266.855842][ T8424] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.855864][ T8424] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.855879][ T8424] ? is_bpf_text_address+0x94/0x1a0 [ 266.855900][ T8424] ? kernel_text_address+0x8d/0x100 [ 266.855920][ T8424] ? __kernel_text_address+0xd/0x30 [ 266.855940][ T8424] ? unwind_get_return_address+0x59/0xa0 [ 266.855962][ T8424] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.855987][ T8424] ? policy_nodemask+0xed/0x4f0 [ 266.856003][ T8424] alloc_pages_mpol+0x1fb/0x550 [ 266.856019][ T8424] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 266.856034][ T8424] ? kasan_save_stack+0x30/0x50 [ 266.856054][ T8424] ? kasan_save_track+0x14/0x30 [ 266.856074][ T8424] ? __kasan_kmalloc+0xaa/0xb0 [ 266.856093][ T8424] ? __get_vm_area_node+0x101/0x330 [ 266.856108][ T8424] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 266.856128][ T8424] alloc_pages_noprof+0x131/0x390 [ 266.856145][ T8424] get_free_pages_noprof+0x10/0xb0 [ 266.856159][ T8424] __kasan_populate_vmalloc+0xa0/0x210 [ 266.856185][ T8424] alloc_vmap_area+0x95d/0x2bd0 [ 266.856207][ T8424] ? __pfx_alloc_vmap_area+0x10/0x10 [ 266.856227][ T8424] __get_vm_area_node+0x1ca/0x330 [ 266.856247][ T8424] __vmalloc_node_range_noprof+0x213/0x1530 [ 266.856265][ T8424] ? kernel_clone+0xfc/0x9a0 [ 266.856280][ T8424] ? find_held_lock+0x2b/0x80 [ 266.856293][ T8424] ? local_lock_release+0x99/0x130 [ 266.856309][ T8424] ? local_lock_release+0x99/0x130 [ 266.856328][ T8424] ? kernel_clone+0xfc/0x9a0 [ 266.856344][ T8424] ? find_held_lock+0x2b/0x80 [ 266.856357][ T8424] ? rcu_read_unlock+0x17/0x60 [ 266.856372][ T8424] ? rcu_read_unlock+0x17/0x60 [ 266.856388][ T8424] ? obj_cgroup_charge_account+0x46d/0x640 [ 266.856404][ T8424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.856432][ T8424] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 266.856452][ T8424] ? rcu_is_watching+0x12/0xc0 [ 266.856474][ T8424] ? trace_kmem_cache_alloc+0xf3/0x120 [ 266.856492][ T8424] ? kernel_clone+0xfc/0x9a0 [ 266.856508][ T8424] __vmalloc_node_noprof+0xad/0xf0 [ 266.856526][ T8424] ? kernel_clone+0xfc/0x9a0 [ 266.856544][ T8424] copy_process+0x5ec/0x7a40 [ 266.856560][ T8424] ? futex_unqueue+0x133/0x2c0 [ 266.856585][ T8424] ? __pfx_copy_process+0x10/0x10 [ 266.856606][ T8424] ? _copy_from_user+0x59/0xd0 [ 266.856626][ T8424] kernel_clone+0xfc/0x9a0 [ 266.856644][ T8424] ? __pfx_kernel_clone+0x10/0x10 [ 266.856664][ T8424] ? __pfx_futex_wait+0x10/0x10 [ 266.856690][ T8424] __do_sys_clone3+0x214/0x290 [ 266.856707][ T8424] ? __pfx___do_sys_clone3+0x10/0x10 [ 266.856749][ T8424] do_syscall_64+0x106/0xf80 [ 266.856769][ T8424] ? clear_bhb_loop+0x40/0x90 [ 266.856787][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.856803][ T8424] RIP: 0033:0x7f69c299c799 [ 266.856817][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.856831][ T8424] RSP: 002b:00007f69c37e9ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 266.856845][ T8424] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f69c299c799 [ 266.856855][ T8424] RDX: 00007f69c37e9f10 RSI: 0000000000000058 RDI: 00007f69c37e9f10 [ 266.856864][ T8424] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000058 [ 266.856873][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.856881][ T8424] R13: 00007f69c2c16038 R14: 00007f69c2c15fa0 R15: 00007fffa1576e78 [ 266.856901][ T8424] [ 266.857080][ T8424] syz.3.484: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 268.707632][ T8437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 269.015803][ T8441] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(12) [ 269.651695][ T8428] FAULT_INJECTION: forcing a failure. [ 269.651695][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 269.722100][ T8428] CPU: 0 UID: 0 PID: 8428 Comm: syz.3.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.722126][ T8428] Tainted: [L]=SOFTLOCKUP [ 269.722132][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.722141][ T8428] Call Trace: [ 269.722146][ T8428] [ 269.722153][ T8428] dump_stack_lvl+0x100/0x190 [ 269.722180][ T8428] should_fail_ex.cold+0x5/0xa [ 269.722198][ T8428] should_failslab+0xc2/0x120 [ 269.722214][ T8428] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 269.722242][ T8428] ? __kernfs_new_node+0xd2/0x960 [ 269.722266][ T8428] __kernfs_new_node+0xd2/0x960 [ 269.722285][ T8428] ? kernfs_add_one+0x583/0x850 [ 269.722308][ T8428] ? __pfx___kernfs_new_node+0x10/0x10 [ 269.722333][ T8428] ? find_held_lock+0x2b/0x80 [ 269.722346][ T8428] ? kernfs_root+0xee/0x2a0 [ 269.722365][ T8428] ? kernfs_root+0xee/0x2a0 [ 269.722388][ T8428] kernfs_new_node+0x11b/0x1a0 [ 269.722413][ T8428] kernfs_create_dir_ns+0x4c/0x1a0 [ 269.722429][ T8428] internal_create_group+0x36f/0xf40 [ 269.722453][ T8428] ? __pfx_internal_create_group+0x10/0x10 [ 269.722474][ T8428] ? __pfx_internal_create_group+0x10/0x10 [ 269.722497][ T8428] ? __pfx_dev_add_physical_location+0x10/0x10 [ 269.722514][ T8428] ? bus_to_subsys+0x114/0x150 [ 269.722536][ T8428] dpm_sysfs_add+0x80/0x280 [ 269.722553][ T8428] device_add+0x9ef/0x1950 [ 269.722572][ T8428] ? __pfx_device_add+0x10/0x10 [ 269.722588][ T8428] ? lockdep_init_map_type+0x5c/0x250 [ 269.722608][ T8428] ? __init_waitqueue_head+0xca/0x150 [ 269.722633][ T8428] netdev_register_kobject+0x1a9/0x3d0 [ 269.722659][ T8428] register_netdevice+0x12e0/0x2210 [ 269.722685][ T8428] ? __pfx_register_netdevice+0x10/0x10 [ 269.722713][ T8428] ip6_mroute_setsockopt+0x683/0x36d0 [ 269.722733][ T8428] ? lock_acquire+0x1cf/0x380 [ 269.722754][ T8428] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 269.722772][ T8428] ? perf_trace_sched_pi_setprio+0x640/0x750 [ 269.722792][ T8428] ? lockdep_hardirqs_on+0x78/0x100 [ 269.722814][ T8428] ? rcu_is_watching+0x12/0xc0 [ 269.722835][ T8428] ? trace_sched_exit_tp+0x13a/0x180 [ 269.722852][ T8428] ? __schedule+0x1000/0x6120 [ 269.722871][ T8428] ? __lock_acquire+0x4a5/0x2630 [ 269.722901][ T8428] ? do_ipv6_setsockopt+0x551/0x4400 [ 269.722923][ T8428] do_ipv6_setsockopt+0x551/0x4400 [ 269.722950][ T8428] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 269.722971][ T8428] ? aa_label_sk_perm+0x194/0x5f0 [ 269.722990][ T8428] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 269.723009][ T8428] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 269.723027][ T8428] ? __pfx_futex_wake_mark+0x10/0x10 [ 269.723052][ T8428] ? find_held_lock+0x2b/0x80 [ 269.723065][ T8428] ? futex_wake+0x456/0x530 [ 269.723092][ T8428] ? __pfx___might_resched+0x10/0x10 [ 269.723113][ T8428] ? __lock_acquire+0x4a5/0x2630 [ 269.723133][ T8428] ? aa_sk_perm+0x309/0xaa0 [ 269.723151][ T8428] ? ipv6_setsockopt+0xcb/0x170 [ 269.723171][ T8428] ipv6_setsockopt+0xcb/0x170 [ 269.723195][ T8428] rawv6_setsockopt+0xee/0x5a0 [ 269.723222][ T8428] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 269.723245][ T8428] ? aa_sock_opt_perm+0xfe/0x1b0 [ 269.723268][ T8428] ? sock_common_setsockopt+0x2e/0xf0 [ 269.723283][ T8428] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 269.723299][ T8428] do_sock_setsockopt+0xf3/0x1d0 [ 269.723324][ T8428] __sys_setsockopt+0x119/0x190 [ 269.723347][ T8428] __x64_sys_setsockopt+0xbd/0x160 [ 269.723365][ T8428] ? do_syscall_64+0x95/0xf80 [ 269.723387][ T8428] ? lockdep_hardirqs_on+0x78/0x100 [ 269.723406][ T8428] do_syscall_64+0x106/0xf80 [ 269.723425][ T8428] ? clear_bhb_loop+0x40/0x90 [ 269.723443][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.723459][ T8428] RIP: 0033:0x7f69c299c799 [ 269.723472][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.723486][ T8428] RSP: 002b:00007f69c37c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.723500][ T8428] RAX: ffffffffffffffda RBX: 00007f69c2c16090 RCX: 00007f69c299c799 [ 269.723510][ T8428] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0400000000000003 [ 269.723519][ T8428] RBP: 00007f69c2a32c99 R08: 0000000000000567 R09: 0000000000000000 [ 269.723528][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.723537][ T8428] R13: 00007f69c2c16128 R14: 00007f69c2c16090 R15: 00007fffa1576e78 [ 269.723557][ T8428] [ 270.756053][ T8424] ,cpuset=/,mems_allowed=0-1 [ 270.760876][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.3.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.760899][ T8424] Tainted: [L]=SOFTLOCKUP [ 270.760904][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.760913][ T8424] Call Trace: [ 270.760918][ T8424] [ 270.760923][ T8424] dump_stack_lvl+0x100/0x190 [ 270.760949][ T8424] warn_alloc.cold+0x95/0x1c1 [ 270.760973][ T8424] ? __pfx_warn_alloc+0x10/0x10 [ 270.760993][ T8424] ? lockdep_hardirqs_on+0x78/0x100 [ 270.761016][ T8424] ? __get_vm_area_node+0x2c5/0x330 [ 270.761036][ T8424] ? __get_vm_area_node+0x208/0x330 [ 270.761055][ T8424] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 270.761077][ T8424] ? find_held_lock+0x2b/0x80 [ 270.761091][ T8424] ? local_lock_release+0x99/0x130 [ 270.761108][ T8424] ? local_lock_release+0x99/0x130 [ 270.761127][ T8424] ? kernel_clone+0xfc/0x9a0 [ 270.761144][ T8424] ? find_held_lock+0x2b/0x80 [ 270.761157][ T8424] ? rcu_read_unlock+0x17/0x60 [ 270.761172][ T8424] ? rcu_read_unlock+0x17/0x60 [ 270.761187][ T8424] ? obj_cgroup_charge_account+0x46d/0x640 [ 270.761203][ T8424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.761223][ T8424] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 270.761242][ T8424] ? rcu_is_watching+0x12/0xc0 [ 270.761263][ T8424] ? trace_kmem_cache_alloc+0xf3/0x120 [ 270.761280][ T8424] ? kernel_clone+0xfc/0x9a0 [ 270.761298][ T8424] __vmalloc_node_noprof+0xad/0xf0 [ 270.761315][ T8424] ? kernel_clone+0xfc/0x9a0 [ 270.761332][ T8424] copy_process+0x5ec/0x7a40 [ 270.761347][ T8424] ? futex_unqueue+0x133/0x2c0 [ 270.761374][ T8424] ? __pfx_copy_process+0x10/0x10 [ 270.761395][ T8424] ? _copy_from_user+0x59/0xd0 [ 270.761414][ T8424] kernel_clone+0xfc/0x9a0 [ 270.761431][ T8424] ? __pfx_kernel_clone+0x10/0x10 [ 270.761451][ T8424] ? __pfx_futex_wait+0x10/0x10 [ 270.761477][ T8424] __do_sys_clone3+0x214/0x290 [ 270.761494][ T8424] ? __pfx___do_sys_clone3+0x10/0x10 [ 270.761533][ T8424] do_syscall_64+0x106/0xf80 [ 270.761552][ T8424] ? clear_bhb_loop+0x40/0x90 [ 270.761571][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.761585][ T8424] RIP: 0033:0x7f69c299c799 [ 270.761599][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.761612][ T8424] RSP: 002b:00007f69c37e9ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 270.761625][ T8424] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f69c299c799 [ 270.761635][ T8424] RDX: 00007f69c37e9f10 RSI: 0000000000000058 RDI: 00007f69c37e9f10 [ 270.761643][ T8424] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000058 [ 270.761652][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.761660][ T8424] R13: 00007f69c2c16038 R14: 00007f69c2c15fa0 R15: 00007fffa1576e78 [ 270.761678][ T8424] [ 270.761691][ T8424] Mem-Info: [ 271.147464][ T8424] active_anon:51244 inactive_anon:1 isolated_anon:0 [ 271.147464][ T8424] active_file:14552 inactive_file:45909 isolated_file:0 [ 271.147464][ T8424] unevictable:777 dirty:1065 writeback:1 [ 271.147464][ T8424] slab_reclaimable:11767 slab_unreclaimable:93064 [ 271.147464][ T8424] mapped:43258 shmem:35577 pagetables:1208 [ 271.147464][ T8424] sec_pagetables:0 bounce:0 [ 271.147464][ T8424] kernel_misc_reclaimable:0 [ 271.147464][ T8424] free:1245044 free_pcp:44179 free_cma:0 [ 271.315920][ T8424] Node 0 active_anon:210444kB inactive_anon:4kB active_file:58208kB inactive_file:183460kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:173032kB dirty:4260kB writeback:4kB shmem:143892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:38912kB kernel_stack:11520kB pagetables:4676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.473092][ T8424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.624884][ T8424] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.789618][ T8424] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 271.823150][ T8424] Node 0 DMA32 free:1048032kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:224596kB inactive_anon:4kB active_file:58208kB inactive_file:183460kB unevictable:1572kB writepending:4264kB zspages:0kB present:3129332kB managed:2537380kB mlocked:36kB bounce:0kB free_pcp:125872kB local_pcp:125872kB free_cma:0kB [ 271.823202][ T8424] lowmem_reserve[]: 0 0 1 1 1 [ 271.823230][ T8424] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 271.823270][ T8424] lowmem_reserve[]: 0 0 0 0 0 [ 271.823298][ T8424] Node 1 Normal free:3916556kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30892kB local_pcp:30892kB free_cma:0kB [ 271.823339][ T8424] lowmem_reserve[]: 0 0 0 0 0 [ 271.823366][ T8424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.823458][ T8424] Node 0 DMA32: 2718*4kB (U) 1932*8kB (U) 103*16kB (UE) 420*32kB (UE) 48*64kB (UE) 40*128kB (UME) 24*256kB (U) 18*512kB (UE) 40*1024kB (UME) 2*2048kB (UE) 229*4096kB (UM) = 1048008kB [ 271.823583][ T8424] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 271.823663][ T8424] Node 1 Normal: 6*4kB (UM) 14*8kB (UM) 9*16kB (UM) 9*32kB (U) 8*64kB (U) 4*128kB (U) 3*256kB (U) 1*512kB (M) 2*1024kB (U) 2*2048kB (UM) 954*4096kB (M) = 3916600kB [ 271.823788][ T8424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.823800][ T8424] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 271.823811][ T8424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.823822][ T8424] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 271.823833][ T8424] 99825 total pagecache pages [ 271.823839][ T8424] 8 pages in swap cache [ 271.823844][ T8424] Free swap = 124992kB [ 271.823849][ T8424] Total swap = 124996kB [ 271.823855][ T8424] 2097051 pages RAM [ 271.823860][ T8424] 0 pages HighMem/MovableOnly [ 271.823865][ T8424] 430826 pages reserved [ 271.823870][ T8424] 0 pages cma reserved [ 272.357983][ T8467] ima: policy update failed [ 272.358148][ T29] audit: type=1802 audit(1773925882.439:6): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.493" res=0 errno=0 [ 273.945628][ T8502] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 274.067873][ T8495] zswap: compressor û not available [ 274.502380][ T8480] Setting dangerous option i915.mitigations - tainting kernel [ 275.391495][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 275.452218][ T8522] netlink: 354 bytes leftover after parsing attributes in process `syz.1.505'. [ 277.942855][ T29] audit: type=1804 audit(1773925888.016:7): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.515" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3935 res=1 errno=0 [ 278.507383][ T8602] FAULT_INJECTION: forcing a failure. [ 278.507383][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 278.584096][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.3.516 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.584125][ T8602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.584130][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.584139][ T8602] Call Trace: [ 278.584145][ T8602] [ 278.584151][ T8602] dump_stack_lvl+0x100/0x190 [ 278.584178][ T8602] should_fail_ex.cold+0x5/0xa [ 278.584196][ T8602] ? tracepoint_add_func+0x2c5/0xf30 [ 278.584211][ T8602] should_failslab+0xc2/0x120 [ 278.584227][ T8602] __kmalloc_noprof+0xe0/0x850 [ 278.584253][ T8602] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 278.584268][ T8602] tracepoint_add_func+0x2c5/0xf30 [ 278.584282][ T8602] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 278.584301][ T8602] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 278.584315][ T8602] tracepoint_probe_register+0xc4/0x110 [ 278.584331][ T8602] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 278.584346][ T8602] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 278.584366][ T8602] tracing_start_sched_switch+0xdc/0x170 [ 278.584401][ T8602] __ftrace_event_enable_disable+0x557/0x6f0 [ 278.584421][ T8602] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 278.584445][ T8602] ftrace_set_clr_event+0x16e/0x330 [ 278.584465][ T8602] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 278.584484][ T8602] ? trace_get_user+0x3ae/0xa70 [ 278.584505][ T8602] ftrace_event_write+0x259/0x2c0 [ 278.584524][ T8602] ? __pfx_ftrace_event_write+0x10/0x10 [ 278.584550][ T8602] vfs_write+0x2aa/0x1070 [ 278.584565][ T8602] ? __pfx_ftrace_event_write+0x10/0x10 [ 278.584585][ T8602] ? __pfx_vfs_write+0x10/0x10 [ 278.584599][ T8602] ? __fget_files+0x215/0x3d0 [ 278.584617][ T8602] ? __fget_files+0x21f/0x3d0 [ 278.584636][ T8602] ksys_write+0x12a/0x250 [ 278.584650][ T8602] ? __pfx_ksys_write+0x10/0x10 [ 278.584669][ T8602] do_syscall_64+0x106/0xf80 [ 278.584689][ T8602] ? clear_bhb_loop+0x40/0x90 [ 278.584707][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.584722][ T8602] RIP: 0033:0x7f69c299c799 [ 278.584736][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.584750][ T8602] RSP: 002b:00007f69c3787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.584764][ T8602] RAX: ffffffffffffffda RBX: 00007f69c2c16270 RCX: 00007f69c299c799 [ 278.584773][ T8602] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000006 [ 278.584782][ T8602] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 278.584790][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.584799][ T8602] R13: 00007f69c2c16308 R14: 00007f69c2c16270 R15: 00007fffa1576e78 [ 278.584819][ T8602] [ 278.584838][ T8602] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup_new [ 280.092036][ T8615] vivid-007: ================= START STATUS ================= [ 280.240537][ T8615] vivid-007: Generate PTS: true [ 280.293321][ T8615] vivid-007: Generate SCR: true [ 280.301894][ T8621] random: crng reseeded on system resumption [ 280.337114][ T8615] tpg source WxH: 320x240 (Y'CbCr) [ 280.403526][ T8615] tpg field: 1 [ 280.435380][ T8615] tpg crop: (0,0)/320x240 [ 280.512799][ T8615] tpg compose: (0,0)/320x240 [ 280.580265][ T8615] tpg colorspace: 8 [ 280.658447][ T8615] tpg transfer function: 0/0 [ 280.710256][ T8615] tpg Y'CbCr encoding: 0/0 [ 280.752827][ T8615] tpg quantization: 0/0 [ 280.782452][ T8615] tpg RGB range: 0/2 [ 280.825616][ T8615] vivid-007: ================== END STATUS ================== [ 281.485334][ T8633] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 282.573398][ T8650] netlink: 'syz.2.524': attribute type 11 has an invalid length. [ 283.036583][ T8661] FAULT_INJECTION: forcing a failure. [ 283.036583][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 283.189361][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.2.527 Tainted: G U L syzkaller #0 PREEMPT(full) [ 283.189389][ T8661] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 283.189395][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.189403][ T8661] Call Trace: [ 283.189408][ T8661] [ 283.189415][ T8661] dump_stack_lvl+0x100/0x190 [ 283.189442][ T8661] should_fail_ex.cold+0x5/0xa [ 283.189461][ T8661] should_failslab+0xc2/0x120 [ 283.189477][ T8661] __kmalloc_cache_noprof+0x7a/0x6f0 [ 283.189496][ T8661] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 283.189518][ T8661] __v4l2_subdev_state_alloc+0x53/0x410 [ 283.189538][ T8661] subdev_open+0xa6/0x510 [ 283.189556][ T8661] v4l2_open+0x1d2/0x490 [ 283.189578][ T8661] ? __pfx_v4l2_open+0x10/0x10 [ 283.189599][ T8661] chrdev_open+0x234/0x6a0 [ 283.189614][ T8661] ? __pfx_apparmor_file_open+0x10/0x10 [ 283.189629][ T8661] ? __pfx_chrdev_open+0x10/0x10 [ 283.189645][ T8661] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 283.189664][ T8661] do_dentry_open+0x6d8/0x1660 [ 283.189679][ T8661] ? __pfx_chrdev_open+0x10/0x10 [ 283.189698][ T8661] vfs_open+0x82/0x3f0 [ 283.189719][ T8661] path_openat+0x208c/0x31a0 [ 283.189738][ T8661] ? futex_unqueue+0x13d/0x2c0 [ 283.189756][ T8661] ? stack_depot_save_flags+0x27/0x9d0 [ 283.189775][ T8661] ? __pfx_path_openat+0x10/0x10 [ 283.189791][ T8661] ? kasan_save_stack+0x3f/0x50 [ 283.189860][ T8661] ? kasan_save_stack+0x30/0x50 [ 283.189881][ T8661] ? kasan_save_track+0x14/0x30 [ 283.189902][ T8661] ? __kasan_slab_alloc+0x89/0x90 [ 283.189915][ T8661] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 283.189935][ T8661] ? do_getname+0x35/0x390 [ 283.189955][ T8661] do_file_open+0x20e/0x430 [ 283.189971][ T8661] ? __pfx_do_file_open+0x10/0x10 [ 283.190001][ T8661] ? find_held_lock+0x2b/0x80 [ 283.190014][ T8661] ? __might_fault+0xc5/0x140 [ 283.190033][ T8661] ? __might_fault+0xc5/0x140 [ 283.190055][ T8661] file_open_name+0x198/0x3b0 [ 283.190074][ T8661] ? __pfx_file_open_name+0x10/0x10 [ 283.190096][ T8661] ? do_getname+0x191/0x390 [ 283.190115][ T8661] acct_on+0xa4/0x9e0 [ 283.190136][ T8661] ? __pfx_acct_on+0x10/0x10 [ 283.190156][ T8661] ? bpf_lsm_capable+0x9/0x10 [ 283.190171][ T8661] ? security_capable+0x80/0x260 [ 283.190195][ T8661] __x64_sys_acct+0x81/0x1e0 [ 283.190214][ T8661] ? lockdep_hardirqs_on+0x78/0x100 [ 283.190234][ T8661] do_syscall_64+0x106/0xf80 [ 283.190253][ T8661] ? clear_bhb_loop+0x40/0x90 [ 283.190271][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.190286][ T8661] RIP: 0033:0x7f12d5b9c799 [ 283.190300][ T8661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.190314][ T8661] RSP: 002b:00007f12d69be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 283.190328][ T8661] RAX: ffffffffffffffda RBX: 00007f12d5e16180 RCX: 00007f12d5b9c799 [ 283.190337][ T8661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 283.190346][ T8661] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 283.190355][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.190363][ T8661] R13: 00007f12d5e16218 R14: 00007f12d5e16180 R15: 00007ffe0d1d0aa8 [ 283.190383][ T8661] [ 283.195301][ T8654] FAULT_INJECTION: forcing a failure. [ 283.195301][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 284.199972][ T8668] FAULT_INJECTION: forcing a failure. [ 284.199972][ T8668] name failslab, interval 1, probability 0, space 0, times 0 [ 284.246284][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.2.528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 284.246313][ T8668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 284.246319][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.246328][ T8668] Call Trace: [ 284.246334][ T8668] [ 284.246340][ T8668] dump_stack_lvl+0x100/0x190 [ 284.246366][ T8668] should_fail_ex.cold+0x5/0xa [ 284.246385][ T8668] should_failslab+0xc2/0x120 [ 284.246401][ T8668] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 284.246423][ T8668] ? alloc_vmap_area+0x640/0x2bd0 [ 284.246441][ T8668] alloc_vmap_area+0x640/0x2bd0 [ 284.246464][ T8668] ? __pfx_alloc_vmap_area+0x10/0x10 [ 284.246485][ T8668] __get_vm_area_node+0x1ca/0x330 [ 284.246505][ T8668] __vmalloc_node_range_noprof+0x213/0x1530 [ 284.246525][ T8668] ? kernel_clone+0xfc/0x9a0 [ 284.246540][ T8668] ? find_held_lock+0x2b/0x80 [ 284.246554][ T8668] ? local_lock_release+0x99/0x130 [ 284.246571][ T8668] ? local_lock_release+0x99/0x130 [ 284.246589][ T8668] ? kernel_clone+0xfc/0x9a0 [ 284.246606][ T8668] ? find_held_lock+0x2b/0x80 [ 284.246618][ T8668] ? rcu_read_unlock+0x17/0x60 [ 284.246633][ T8668] ? rcu_read_unlock+0x17/0x60 [ 284.246648][ T8668] ? obj_cgroup_charge_account+0x46d/0x640 [ 284.246665][ T8668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.246684][ T8668] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 284.246703][ T8668] ? rcu_is_watching+0x12/0xc0 [ 284.246723][ T8668] ? trace_kmem_cache_alloc+0xf3/0x120 [ 284.246740][ T8668] ? kernel_clone+0xfc/0x9a0 [ 284.246761][ T8668] __vmalloc_node_noprof+0xad/0xf0 [ 284.246779][ T8668] ? kernel_clone+0xfc/0x9a0 [ 284.246797][ T8668] copy_process+0x5ec/0x7a40 [ 284.246814][ T8668] ? futex_unqueue+0x133/0x2c0 [ 284.246840][ T8668] ? __pfx_copy_process+0x10/0x10 [ 284.246862][ T8668] ? _copy_from_user+0x59/0xd0 [ 284.246881][ T8668] kernel_clone+0xfc/0x9a0 [ 284.246899][ T8668] ? __pfx_kernel_clone+0x10/0x10 [ 284.246919][ T8668] ? __pfx_futex_wait+0x10/0x10 [ 284.246944][ T8668] __do_sys_clone3+0x214/0x290 [ 284.246961][ T8668] ? __pfx___do_sys_clone3+0x10/0x10 [ 284.247001][ T8668] do_syscall_64+0x106/0xf80 [ 284.247020][ T8668] ? clear_bhb_loop+0x40/0x90 [ 284.247038][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.247053][ T8668] RIP: 0033:0x7f12d5b9c799 [ 284.247066][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.247079][ T8668] RSP: 002b:00007f12d69ffef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 284.247094][ T8668] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f12d5b9c799 [ 284.247103][ T8668] RDX: 00007f12d69fff10 RSI: 0000000000000058 RDI: 00007f12d69fff10 [ 284.247112][ T8668] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000058 [ 284.247120][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.247128][ T8668] R13: 00007f12d5e16038 R14: 00007f12d5e15fa0 R15: 00007ffe0d1d0aa8 [ 284.247146][ T8668] [ 284.247166][ T8668] syz.2.528: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 284.920858][ T8654] CPU: 0 UID: 0 PID: 8654 Comm: syz.3.526 Tainted: G U L syzkaller #0 PREEMPT(full) [ 284.920884][ T8654] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 284.920890][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.920898][ T8654] Call Trace: [ 284.920903][ T8654] [ 284.920909][ T8654] dump_stack_lvl+0x100/0x190 [ 284.920936][ T8654] should_fail_ex.cold+0x5/0xa [ 284.920954][ T8654] should_failslab+0xc2/0x120 [ 284.920970][ T8654] __kmalloc_cache_noprof+0x7a/0x6f0 [ 284.920988][ T8654] ? vkms_plane_duplicate_state+0x87/0x130 [ 284.921009][ T8654] vkms_plane_duplicate_state+0x87/0x130 [ 284.921025][ T8654] drm_atomic_get_plane_state+0x279/0x760 [ 284.921045][ T8654] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 284.921067][ T8654] ? trace_contention_end+0x140/0x180 [ 284.921090][ T8654] ? __mutex_lock+0x26a/0x1b90 [ 284.921111][ T8654] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 284.921132][ T8654] ? drm_master_internal_acquire+0x21/0x80 [ 284.921169][ T8654] drm_client_modeset_commit_locked+0x14d/0x580 [ 284.921193][ T8654] drm_client_modeset_commit+0x4f/0x80 [ 284.921213][ T8654] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 284.921237][ T8654] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 284.921259][ T8654] drm_fbdev_client_restore+0x1b/0x30 [ 284.921276][ T8654] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 284.921296][ T8654] drm_client_dev_restore+0x205/0x2a0 [ 284.921319][ T8654] drm_release+0x2c6/0x360 [ 284.921338][ T8654] ? __pfx_drm_release+0x10/0x10 [ 284.921356][ T8654] __fput+0x3ff/0xb40 [ 284.921378][ T8654] task_work_run+0x150/0x240 [ 284.921399][ T8654] ? __pfx_task_work_run+0x10/0x10 [ 284.921425][ T8654] exit_to_user_mode_loop+0x100/0x4a0 [ 284.921447][ T8654] do_syscall_64+0x668/0xf80 [ 284.921466][ T8654] ? clear_bhb_loop+0x40/0x90 [ 284.921484][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.921499][ T8654] RIP: 0033:0x7f69c299c799 [ 284.921512][ T8654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.921526][ T8654] RSP: 002b:00007f69c37ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 284.921540][ T8654] RAX: 0000000000000000 RBX: 00007f69c2c15fa0 RCX: 00007f69c299c799 [ 284.921550][ T8654] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 284.921558][ T8654] RBP: 00007f69c2a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 284.921566][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.921574][ T8654] R13: 00007f69c2c16038 R14: 00007f69c2c15fa0 R15: 00007fffa1576e78 [ 284.921594][ T8654] [ 285.544721][ T8668] ,cpuset=/,mems_allowed=0-1 [ 285.549360][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.2.528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 285.549383][ T8668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 285.549388][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.549397][ T8668] Call Trace: [ 285.549402][ T8668] [ 285.549407][ T8668] dump_stack_lvl+0x100/0x190 [ 285.549432][ T8668] warn_alloc.cold+0x95/0x1c1 [ 285.549457][ T8668] ? __pfx_warn_alloc+0x10/0x10 [ 285.549476][ T8668] ? lockdep_hardirqs_on+0x78/0x100 [ 285.549498][ T8668] ? __get_vm_area_node+0x2c5/0x330 [ 285.549519][ T8668] ? __get_vm_area_node+0x208/0x330 [ 285.549538][ T8668] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 285.549555][ T8668] ? find_held_lock+0x2b/0x80 [ 285.549569][ T8668] ? local_lock_release+0x99/0x130 [ 285.549585][ T8668] ? local_lock_release+0x99/0x130 [ 285.549603][ T8668] ? kernel_clone+0xfc/0x9a0 [ 285.549620][ T8668] ? find_held_lock+0x2b/0x80 [ 285.549633][ T8668] ? rcu_read_unlock+0x17/0x60 [ 285.549648][ T8668] ? rcu_read_unlock+0x17/0x60 [ 285.549663][ T8668] ? obj_cgroup_charge_account+0x46d/0x640 [ 285.549679][ T8668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.549698][ T8668] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 285.549717][ T8668] ? rcu_is_watching+0x12/0xc0 [ 285.549738][ T8668] ? trace_kmem_cache_alloc+0xf3/0x120 [ 285.549755][ T8668] ? kernel_clone+0xfc/0x9a0 [ 285.549774][ T8668] __vmalloc_node_noprof+0xad/0xf0 [ 285.549792][ T8668] ? kernel_clone+0xfc/0x9a0 [ 285.549810][ T8668] copy_process+0x5ec/0x7a40 [ 285.549828][ T8668] ? futex_unqueue+0x133/0x2c0 [ 285.549853][ T8668] ? __pfx_copy_process+0x10/0x10 [ 285.549874][ T8668] ? _copy_from_user+0x59/0xd0 [ 285.549894][ T8668] kernel_clone+0xfc/0x9a0 [ 285.549911][ T8668] ? __pfx_kernel_clone+0x10/0x10 [ 285.549931][ T8668] ? __pfx_futex_wait+0x10/0x10 [ 285.549957][ T8668] __do_sys_clone3+0x214/0x290 [ 285.549973][ T8668] ? __pfx___do_sys_clone3+0x10/0x10 [ 285.550013][ T8668] do_syscall_64+0x106/0xf80 [ 285.550032][ T8668] ? clear_bhb_loop+0x40/0x90 [ 285.550049][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.550064][ T8668] RIP: 0033:0x7f12d5b9c799 [ 285.550077][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.550091][ T8668] RSP: 002b:00007f12d69ffef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 285.550104][ T8668] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f12d5b9c799 [ 285.550113][ T8668] RDX: 00007f12d69fff10 RSI: 0000000000000058 RDI: 00007f12d69fff10 [ 285.550122][ T8668] RBP: 00007f12d5c32c99 R08: 0000000000000000 R09: 0000000000000058 [ 285.550131][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.550139][ T8668] R13: 00007f12d5e16038 R14: 00007f12d5e15fa0 R15: 00007ffe0d1d0aa8 [ 285.550157][ T8668] [ 285.867851][ T8677] openvswitch: netlink: Missing valid actions attribute. [ 286.542261][ T8679] FAULT_INJECTION: forcing a failure. [ 286.542261][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 286.589293][ T8679] CPU: 0 UID: 0 PID: 8679 Comm: syz.2.528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 286.589322][ T8679] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 286.589327][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.589337][ T8679] Call Trace: [ 286.589342][ T8679] [ 286.589348][ T8679] dump_stack_lvl+0x100/0x190 [ 286.589376][ T8679] should_fail_ex.cold+0x5/0xa [ 286.589395][ T8679] should_failslab+0xc2/0x120 [ 286.589411][ T8679] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 286.589433][ T8679] ? __kernfs_new_node+0xd2/0x960 [ 286.589458][ T8679] __kernfs_new_node+0xd2/0x960 [ 286.589482][ T8679] ? __pfx___kernfs_new_node+0x10/0x10 [ 286.589506][ T8679] ? find_held_lock+0x2b/0x80 [ 286.589520][ T8679] ? kernfs_root+0xee/0x2a0 [ 286.589540][ T8679] ? kernfs_root+0xee/0x2a0 [ 286.589571][ T8679] kernfs_new_node+0x11b/0x1a0 [ 286.589597][ T8679] __kernfs_create_file+0x53/0x350 [ 286.589617][ T8679] sysfs_add_file_mode_ns+0x207/0x3c0 [ 286.589642][ T8679] sysfs_merge_group+0x194/0x340 [ 286.589664][ T8679] ? __pfx_sysfs_merge_group+0x10/0x10 [ 286.589687][ T8679] ? __pfx_dev_add_physical_location+0x10/0x10 [ 286.589704][ T8679] ? bus_to_subsys+0x114/0x150 [ 286.589725][ T8679] dpm_sysfs_add+0x237/0x280 [ 286.589742][ T8679] device_add+0x9ef/0x1950 [ 286.589760][ T8679] ? __pfx_device_add+0x10/0x10 [ 286.589777][ T8679] ? lockdep_init_map_type+0x5c/0x250 [ 286.589796][ T8679] ? __init_waitqueue_head+0xca/0x150 [ 286.589821][ T8679] netdev_register_kobject+0x1a9/0x3d0 [ 286.589848][ T8679] register_netdevice+0x12e0/0x2210 [ 286.589873][ T8679] ? __pfx_register_netdevice+0x10/0x10 [ 286.589901][ T8679] ip6_mroute_setsockopt+0x683/0x36d0 [ 286.589921][ T8679] ? lock_acquire+0x1cf/0x380 [ 286.589943][ T8679] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 286.589960][ T8679] ? perf_trace_sched_pi_setprio+0x640/0x750 [ 286.589979][ T8679] ? lockdep_hardirqs_on+0x78/0x100 [ 286.590001][ T8679] ? rcu_is_watching+0x12/0xc0 [ 286.590022][ T8679] ? trace_sched_exit_tp+0x13a/0x180 [ 286.590039][ T8679] ? __schedule+0x1000/0x6120 [ 286.590058][ T8679] ? __lock_acquire+0x4a5/0x2630 [ 286.590088][ T8679] ? do_ipv6_setsockopt+0x551/0x4400 [ 286.590110][ T8679] do_ipv6_setsockopt+0x551/0x4400 [ 286.590137][ T8679] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 286.590158][ T8679] ? aa_label_sk_perm+0x194/0x5f0 [ 286.590176][ T8679] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.590196][ T8679] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 286.590213][ T8679] ? __pfx_futex_wake_mark+0x10/0x10 [ 286.590238][ T8679] ? find_held_lock+0x2b/0x80 [ 286.590251][ T8679] ? futex_wake+0x456/0x530 [ 286.590278][ T8679] ? __pfx___might_resched+0x10/0x10 [ 286.590298][ T8679] ? __lock_acquire+0x4a5/0x2630 [ 286.590318][ T8679] ? aa_sk_perm+0x309/0xaa0 [ 286.590336][ T8679] ? ipv6_setsockopt+0xcb/0x170 [ 286.590357][ T8679] ipv6_setsockopt+0xcb/0x170 [ 286.590380][ T8679] rawv6_setsockopt+0xee/0x5a0 [ 286.590402][ T8679] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 286.590422][ T8679] ? aa_sock_opt_perm+0xfe/0x1b0 [ 286.590443][ T8679] ? sock_common_setsockopt+0x2e/0xf0 [ 286.590457][ T8679] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 286.590473][ T8679] do_sock_setsockopt+0xf3/0x1d0 [ 286.590498][ T8679] __sys_setsockopt+0x119/0x190 [ 286.590521][ T8679] __x64_sys_setsockopt+0xbd/0x160 [ 286.590539][ T8679] ? do_syscall_64+0x95/0xf80 [ 286.590566][ T8679] ? lockdep_hardirqs_on+0x78/0x100 [ 286.590587][ T8679] do_syscall_64+0x106/0xf80 [ 286.590607][ T8679] ? clear_bhb_loop+0x40/0x90 [ 286.590625][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.590646][ T8679] RIP: 0033:0x7f12d5b9c799 [ 286.590660][ T8679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.590674][ T8679] RSP: 002b:00007f12d69df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.590689][ T8679] RAX: ffffffffffffffda RBX: 00007f12d5e16090 RCX: 00007f12d5b9c799 [ 286.590699][ T8679] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0400000000000003 [ 286.590708][ T8679] RBP: 00007f12d5c32c99 R08: 0000000000000567 R09: 0000000000000000 [ 286.590716][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.590725][ T8679] R13: 00007f12d5e16128 R14: 00007f12d5e16090 R15: 00007ffe0d1d0aa8 [ 286.590745][ T8679] [ 287.651939][ T8668] Mem-Info: [ 287.655187][ T8668] active_anon:19065 inactive_anon:0 isolated_anon:0 [ 287.655187][ T8668] active_file:10688 inactive_file:45535 isolated_file:0 [ 287.655187][ T8668] unevictable:768 dirty:468 writeback:0 [ 287.655187][ T8668] slab_reclaimable:11785 slab_unreclaimable:91898 [ 287.655187][ T8668] mapped:29422 shmem:3409 pagetables:1125 [ 287.655187][ T8668] sec_pagetables:0 bounce:0 [ 287.655187][ T8668] kernel_misc_reclaimable:0 [ 287.655187][ T8668] free:1301470 free_pcp:25497 free_cma:0 [ 287.705893][ T8668] Node 0 active_anon:76260kB inactive_anon:0kB active_file:42752kB inactive_file:181964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117636kB dirty:1868kB writeback:0kB shmem:12100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:38912kB kernel_stack:11520kB pagetables:4340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 287.739602][ T8668] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 287.790266][ T8668] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.832769][ T8668] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 287.838649][ T8668] Node 0 DMA32 free:1269512kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76364kB inactive_anon:0kB active_file:42752kB inactive_file:181964kB unevictable:1536kB writepending:1868kB zspages:8kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:74532kB local_pcp:74532kB free_cma:0kB [ 287.874358][ T8668] lowmem_reserve[]: 0 0 1 1 1 [ 287.879067][ T8668] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 287.913684][ T8668] lowmem_reserve[]: 0 0 0 0 0 [ 287.918427][ T8668] Node 1 Normal free:3916908kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30584kB local_pcp:30584kB free_cma:0kB [ 287.954524][ T8668] lowmem_reserve[]: 0 0 0 0 0 [ 287.959255][ T8668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 287.977992][ T8668] Node 0 DMA32: 4340*4kB (UM) 3165*8kB (UM) 1389*16kB (UME) 772*32kB (UME) 626*64kB (UME) 374*128kB (UME) 179*256kB (UM) 88*512kB (UME) 58*1024kB (UME) 9*2048kB (UME) 226*4096kB (UM) = 1271944kB [ 287.997765][ T8668] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 288.009980][ T8668] Node 1 Normal: 7*4kB (UM) 16*8kB (UM) 11*16kB (UM) 11*32kB (UM) 11*64kB (UM) 8*128kB (UM) 3*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 954*4096kB (M) = 3916908kB [ 288.027749][ T8668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.038334][ T8668] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.047980][ T8668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.057789][ T8668] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 288.070415][ T8668] 59630 total pagecache pages [ 288.075349][ T8668] 2 pages in swap cache [ 288.079568][ T8668] Free swap = 124980kB [ 288.084389][ T8668] Total swap = 124996kB [ 288.088601][ T8668] 2097051 pages RAM [ 288.092710][ T8668] 0 pages HighMem/MovableOnly [ 288.097528][ T8668] 430826 pages reserved [ 288.102067][ T8668] 0 pages cma reserved [ 288.123694][ T8691] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.131505][ T8691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.152745][ T8691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.167876][ T8691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.454949][ T8711] mkiss: ax0: crc mode is auto. [ 289.004787][ T8726] ------------[ cut here ]------------ [ 289.004823][ T8726] IS_ERR(old) [ 289.004832][ T8726] WARNING: kernel/tracepoint.c:367 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.1.542/8726 [ 289.004866][ T8726] Modules linked in: [ 289.004888][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.1.542 Tainted: G U L syzkaller #0 PREEMPT(full) [ 289.004911][ T8726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 289.004918][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.004928][ T8726] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 289.004947][ T8726] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 20 dc 09 82 48 c7 c7 40 31 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 289.004969][ T8726] RSP: 0018:ffffc90004e078a8 EFLAGS: 00010283 [ 289.004983][ T8726] RAX: 0000000000007519 RBX: 00000000fffffffe RCX: ffffc90006289000 [ 289.004995][ T8726] RDX: 0000000000080000 RSI: ffffffff8209ed16 RDI: ffff888032588000 [ 289.005005][ T8726] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 289.005015][ T8726] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff821007e0 [ 289.005026][ T8726] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f786da0 [ 289.005037][ T8726] FS: 00007f38f81c56c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 289.005053][ T8726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.005064][ T8726] CR2: 000000110c97cff7 CR3: 000000007c6d2000 CR4: 00000000003526f0 [ 289.005075][ T8726] Call Trace: [ 289.005081][ T8726] [ 289.005094][ T8726] tracing_stop_cmdline_record+0x66/0xa0 [ 289.005120][ T8726] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 289.005140][ T8726] ftrace_event_set_open+0x224/0x380 [ 289.005160][ T8726] do_dentry_open+0x6d8/0x1660 [ 289.005176][ T8726] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 289.005198][ T8726] vfs_open+0x82/0x3f0 [ 289.005220][ T8726] path_openat+0x208c/0x31a0 [ 289.005243][ T8726] ? __pfx_path_openat+0x10/0x10 [ 289.005267][ T8726] do_file_open+0x20e/0x430 [ 289.005294][ T8726] ? __pfx_do_file_open+0x10/0x10 [ 289.005325][ T8726] ? alloc_fd+0x476/0x790 [ 289.005344][ T8726] ? do_getname+0x191/0x390 [ 289.005366][ T8726] do_sys_openat2+0x10d/0x1e0 [ 289.005387][ T8726] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.005415][ T8726] __x64_sys_openat+0x12d/0x210 [ 289.005436][ T8726] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.005463][ T8726] do_syscall_64+0x106/0xf80 [ 289.005484][ T8726] ? clear_bhb_loop+0x40/0x90 [ 289.005503][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.005519][ T8726] RIP: 0033:0x7f38f739c799 [ 289.005534][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.005548][ T8726] RSP: 002b:00007f38f81c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.005564][ T8726] RAX: ffffffffffffffda RBX: 00007f38f7615fa0 RCX: 00007f38f739c799 [ 289.005575][ T8726] RDX: 0000000000163201 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 289.005585][ T8726] RBP: 00007f38f7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 289.005595][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.005605][ T8726] R13: 00007f38f7616038 R14: 00007f38f7615fa0 R15: 00007ffd4866e668 [ 289.005625][ T8726] [ 289.005638][ T8726] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.005650][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.1.542 Tainted: G U L syzkaller #0 PREEMPT(full) [ 289.005673][ T8726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 289.005679][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.005690][ T8726] Call Trace: [ 289.005695][ T8726] [ 289.005701][ T8726] dump_stack_lvl+0x100/0x190 [ 289.005724][ T8726] vpanic+0x552/0x970 [ 289.005739][ T8726] ? __pfx_vpanic+0x10/0x10 [ 289.005760][ T8726] panic+0xd1/0xe0 [ 289.005774][ T8726] ? __pfx_panic+0x10/0x10 [ 289.005798][ T8726] check_panic_on_warn.cold+0x19/0x34 [ 289.005814][ T8726] ? tracepoint_probe_unregister+0x837/0xd10 [ 289.005829][ T8726] __warn.cold+0x191/0x348 [ 289.005846][ T8726] __report_bug+0x296/0x3d0 [ 289.005864][ T8726] ? tracepoint_probe_unregister+0x837/0xd10 [ 289.005881][ T8726] ? __pfx___report_bug+0x10/0x10 [ 289.005900][ T8726] ? rcu_is_watching+0x12/0xc0 [ 289.005921][ T8726] ? trace_contention_end+0x140/0x180 [ 289.005942][ T8726] ? __mutex_lock+0x26a/0x1b90 [ 289.005965][ T8726] ? tracepoint_probe_unregister+0x31/0xd10 [ 289.005982][ T8726] ? tracepoint_probe_unregister+0x837/0xd10 [ 289.005999][ T8726] report_bug+0xb2/0x220 [ 289.006018][ T8726] ? tracepoint_probe_unregister+0x837/0xd10 [ 289.006033][ T8726] handle_bug+0x16a/0x2a0 [ 289.006048][ T8726] exc_invalid_op+0x17/0x50 [ 289.006062][ T8726] asm_exc_invalid_op+0x1a/0x20 [ 289.006077][ T8726] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 289.006094][ T8726] Code: cc e8 6d 2b fe ff 48 8d 73 f0 48 c7 c2 20 dc 09 82 48 c7 c7 40 31 87 8e e8 e6 79 e2 ff eb ba bb fe ff ff ff e8 4a 2b fe ff 90 <0f> 0b 90 eb ac e8 3f 2b fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 289.006108][ T8726] RSP: 0018:ffffc90004e078a8 EFLAGS: 00010283 [ 289.006120][ T8726] RAX: 0000000000007519 RBX: 00000000fffffffe RCX: ffffc90006289000 [ 289.006129][ T8726] RDX: 0000000000080000 RSI: ffffffff8209ed16 RDI: ffff888032588000 [ 289.006139][ T8726] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 289.006148][ T8726] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff821007e0 [ 289.006157][ T8726] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f786da0 [ 289.006168][ T8726] ? __pfx_probe_sched_switch+0x10/0x10 [ 289.006187][ T8726] ? tracepoint_probe_unregister+0x836/0xd10 [ 289.006205][ T8726] ? tracepoint_probe_unregister+0x836/0xd10 [ 289.006226][ T8726] tracing_stop_cmdline_record+0x66/0xa0 [ 289.006250][ T8726] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 289.006269][ T8726] ftrace_event_set_open+0x224/0x380 [ 289.006296][ T8726] do_dentry_open+0x6d8/0x1660 [ 289.006313][ T8726] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 289.006335][ T8726] vfs_open+0x82/0x3f0 [ 289.006357][ T8726] path_openat+0x208c/0x31a0 [ 289.006380][ T8726] ? __pfx_path_openat+0x10/0x10 [ 289.006404][ T8726] do_file_open+0x20e/0x430 [ 289.006422][ T8726] ? __pfx_do_file_open+0x10/0x10 [ 289.006451][ T8726] ? alloc_fd+0x476/0x790 [ 289.006468][ T8726] ? do_getname+0x191/0x390 [ 289.006489][ T8726] do_sys_openat2+0x10d/0x1e0 [ 289.006508][ T8726] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.006534][ T8726] __x64_sys_openat+0x12d/0x210 [ 289.006555][ T8726] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.006582][ T8726] do_syscall_64+0x106/0xf80 [ 289.006601][ T8726] ? clear_bhb_loop+0x40/0x90 [ 289.006619][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.006635][ T8726] RIP: 0033:0x7f38f739c799 [ 289.006648][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.006666][ T8726] RSP: 002b:00007f38f81c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.006680][ T8726] RAX: ffffffffffffffda RBX: 00007f38f7615fa0 RCX: 00007f38f739c799 [ 289.006690][ T8726] RDX: 0000000000163201 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 289.006700][ T8726] RBP: 00007f38f7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 289.006712][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.006722][ T8726] R13: 00007f38f7616038 R14: 00007f38f7615fa0 R15: 00007ffd4866e668 [ 289.006742][ T8726] [ 289.006807][ T8726] Kernel Offset: disabled