last executing test programs: 1m38.726388073s ago: executing program 1 (id=430): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0xffffffffffffffff, 0xc37, 0xdf, 0x19, 0xffffffffffffffff, 0x10000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r1, 0x80045518, 0x0) ioctl$auto_TIOCGWINSZ2(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x1000000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x591f81, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd5101fbcbdf250100000004000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) fanotify_init$auto(0x65, 0x2) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x7fffffffffffffff, 0xeb1, r6, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) pipe$auto(0x0) 1m37.574316148s ago: executing program 1 (id=434): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x23, 0x80805, 0x0) bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x29, 0x5, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040854) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x80010001000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, 0x0, 0xf, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x500, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) 1m36.636938665s ago: executing program 1 (id=436): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r2) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r5 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xab700, 0x0) read$auto_proc_timers_operations_base(r5, &(0x7f0000000080)=""/173, 0xad) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r4, 0x4008af20, &(0x7f00000001c0)={0xe0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 1m36.024168943s ago: executing program 1 (id=438): r0 = socket(0x11, 0x3, 0x9) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0xf2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000005340), 0xffffffffffffffff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub2/info\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/87, 0x57) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x204000, 0x80) r6 = setfsuid$auto(0x0) setuid$auto(r6) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000240)={{0x1, 0xee01, 0x0, 0x9, 0x9, 0x4, 0xffff}, &(0x7f0000000180), &(0x7f0000000200)=0x5, 0xffff, 0x37e6, 0x7, 0x8, 0xe, 0x5, 0x3ff, 0x4}) statx$auto(r5, &(0x7f0000000140)='./file0\x00', 0x0, 0x8000, &(0x7f00000002c0)={0xcd, 0x98, 0x2, 0x8000000, r6, r7, 0xad, 0x8, 0x7, 0x5, 0x40, 0x5237a7c2, {0x5}, {0x0, 0x6}, {0x8, 0x4}, {0x9, 0x3661}, 0x8ee, 0x4, 0x1, 0x21a70000, 0x80000001, 0xfffffb52, 0x4, 0x7fffffff, 0xb, 0xa99a36e, 0xdb0389b2, 0x4, [0x6, 0x3, 0x6, 0xfffffffffffffe01, 0xf36c, 0x100000000, 0x2, 0x2, 0x272]}) sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f00000018c0)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x20}}, 0x20008844) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r8 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r8, 0x107, 0xf, 0x0, 0x6) r9 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r9, 0x7ab, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006b", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) 1m35.809116524s ago: executing program 1 (id=440): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0403d11, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r4) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r5, @ANYBLOB="00002cbd7000ffdbdf250200000006000200040000", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r6 = socket(0x2, 0x1, 0x0) r7 = getsockopt$auto(r6, 0x6, 0x23, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r8 = socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) finit_module$auto(r7, &(0x7f00000002c0)='\x00', 0xe) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 1m33.88735596s ago: executing program 1 (id=445): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) timer_create$auto(0x7, &(0x7f0000000000)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000040)=0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x3, 0x0, 0x8) kill$auto(0x80000007, 0x24) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) timer_settime$auto(0x0, 0x3b4, &(0x7f0000000040)={{0x0, 0xd3}, {0x200001005, 0x6}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c", 0x35) 1m18.534890408s ago: executing program 32 (id=445): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) timer_create$auto(0x7, &(0x7f0000000000)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000040)=0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x3, 0x0, 0x8) kill$auto(0x80000007, 0x24) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) timer_settime$auto(0x0, 0x3b4, &(0x7f0000000040)={{0x0, 0xd3}, {0x200001005, 0x6}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c", 0x35) 8.908768835s ago: executing program 4 (id=690): mmap$auto(0x400, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) 8.865060336s ago: executing program 2 (id=691): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x6, 0x4, 0xfffffff7) mlockall$auto(0x800000000000005) r0 = mq_open$auto(0x0, 0x62, 0xfffc, 0x0) mq_timedsend$auto(r0, 0x0, 0x80, 0x9, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0) madvise$auto(0x0, 0x200007, 0x19) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.624189265s ago: executing program 4 (id=695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027ad7600fbdbdf250180000008000800", @ANYRES32=r3, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x40488d4}, 0xc050) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x6a) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc02, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_setup$auto(0x40000006, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x688, 0x0, 0x0, 0x0, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x81) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x121080, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x1c00000) read$auto(0xffffffffffffffff, &(0x7f0000000080)='/sys/kernel/debug/tracing/optio\x05\x00\x00\x00\x00\x00\x00\x00_printk\x00', 0x80000000) read$auto(0x3, 0x0, 0x1f44) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x7a954be, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438fccc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c76011c78e6947a99807bcc100"}) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000180)=@sco, 0x54) 6.388218321s ago: executing program 0 (id=696): timer_gettime$auto(0xfffff000, 0x0) 6.012903628s ago: executing program 0 (id=697): r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shmctl$auto(0xa0000000, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) execve$auto(0x0, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0x1200, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, r1, 0x1) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) r5 = socket(0x26, 0x4, 0x1) bind$auto(r5, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x42080, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, r3, 0x0, 0xd1) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x20d, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5.945415s ago: executing program 2 (id=698): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0xffffffffffffffff, 0xc37, 0xdf, 0x19, 0xffffffffffffffff, 0x10000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/040/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r1, 0x80045518, 0x0) ioctl$auto_TIOCGWINSZ2(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x1000000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x591f81, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd5101fbcbdf250100000004000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) fanotify_init$auto(0x65, 0x2) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x7fffffffffffffff, 0xeb1, r6, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) pipe$auto(0x0) 5.914362149s ago: executing program 3 (id=699): socket(0xa, 0x3, 0xf2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000080)='nfsd ', 0x81, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') 5.525699814s ago: executing program 3 (id=700): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000e00), 0x20000, 0x0) ioctl$auto_TUNGETVNETBE(r5, 0x800454df, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) unshare$auto(0x40000080) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) sendmsg$auto_OVS_FLOW_CMD_NEW(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x4b0, r6, 0x4, 0x70bd28, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x3}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x6}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0xe4, 0x2, 0x0, 0x1, [@generic="3190aca138b13100c6966e8887b1e9c9aa752f0c50d738b13f81757714a07bb7d9bffb55a8d8380b27c260e3e365fdb07ca009bd4a9c62ad2ac86371b4c3b290033cb466bf7a81b5ca4cf132c85a3024c67d83885833187983e567f711da51fd6daad93fce80e1b1519adbc11398093efe72d7e0eb3938bdcafa4b4b522f38a63d077945fc0739a0142048da43bb473ceb05acf4f4142b7edeab5f7641472cfb8d53d5175227f06e7f19ea2bd56d778bbebbf3b11d5d03e00bf03d1d1b7cf940c1bfab2a03c177fc8d0140b648b301d1fa9a26e32997f3af59273833778632d1"]}, @OVS_FLOW_ATTR_MASK={0x8b, 0x7, 0x0, 0x1, [@nested={0x78, 0xb2, 0x0, 0x1, [@typed={0x6d, 0xc5, 0x0, 0x0, @binary="c3b3ae89ef2194e7ab6306873c430c3c3e5fb0ab54275c2adf83859fc8c6e4b2d33d0b454788bd668dff586d2dd3599f5ea3e90ae9977e76a46a9059d6082b7d197eb411c188d6a7f073e634a6a9ed7636bb580fb1da29ef42d73cd17a7a60c2c82398a6172d680bd6"}, @nested={0x4, 0x1b}]}, @generic="c355212f7968adfe8548c68ee000bc"]}, @OVS_FLOW_ATTR_MASK={0x311, 0x7, 0x0, 0x1, [@nested={0x185, 0xcd, 0x0, 0x1, [@generic="5a2f907f70a55c91cbb9b8a4090e85554d5c66258b4b8af1bd5a1c7aa49254e8cdd2ad23498d51d26eb63ea2a5c0e18f185acb0aeb2c26467f2d34b802b639c749a528c886bb157cff745c156ce94d8a0c92c3cfbafc128be3f0129b17c1fcff25d6e70d9b82b66df7c7f0f55fc28123875adf8bc54172a9a18ea20c1ffd94f2b30865e9d13521c765eec50cf2c7e55ed3d5a8993e1e6b34f598221acbd0804062569fca483f9a43c88bee5ebb0e6fa2a84e4f246e1d19cb5bb8548cc8c48c7d0d325ec0b0f43e58abe344340a21d284de092bab60895e91202ec91731b64c17802e6801944f8259cd9f176c62", @typed={0x94, 0x132, 0x0, 0x0, @binary="e2eb45770b810a79c463308ce3ee4db3451abe77ad0a825319aa11343af14dc39413e8c8cf8c08dda68f7e9e0f31f1e8ce346d78113c2e279b528ed49a272d93814e47e0a432b870039403c8b5267292d15c6d5e40bdb20c46ad61689bdb5d564330a35258eef97f00a6ee4d99a8720124373e96a415d11678fdd87c1a9ba099cd3468811e7e74d4a4b7e26cd131afc7"}]}, @generic="cadce65e37627eaea2c6dded620b42fc6d9b489746a4676c1e54eb5ffceddff5040c32b8352add9d793f4aeb1bef1b7e13b9e722cca3ba7c4d3b382bcb14b9503f9bfe0fa5e9acd2406f138da6714ca5eede7e9e94a4d9a9eb2fa4300fb9445488075f38388c42641e8d10cd81ed7e42e31aa6ab0a4d8a19b99236eaf1b5b022b1d966483cfdff8e6f09004eeadbfdcd7a6dd958d29765f1fc1fbfb0436a99a68a9f7f8264bc68d97a4b4225f64bf17dbd82083c4725", @typed={0x2d, 0x69, 0x0, 0x0, @str='/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @nested={0xc, 0x70, 0x0, 0x1, [@nested={0x4, 0x121}, @nested={0x4, 0x117}]}, @generic="9fdcd1eb8de2a4c49b4765cdec0a57d86fda2862ae96cfa0afa20e9317b0", @generic="0c5285a806e5447f5197fcda36d6dac40eaf2b776f9e05cc28985b232a9479083516e75f22c3c7029f8ee9262df1ce93d902cc0ea249fa0ad9fb59cb6d315c896c39cc1e7e1d1e3a10d020d70bd872df3237f9eb7a47f53e2dfde9d28a3cfbc3b70025717110e31fd146f97b001831c3d99c7f702a"]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x20000801}, 0x40010) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x200000000000000, 0x8001, 0x3, 0x2500000010, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 5.462465679s ago: executing program 4 (id=701): mmap$auto(0x40, 0xe983, 0xc38, 0xeb1, 0xffffffffffffffff, 0xfddf) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) select$auto(0x4, 0x0, &(0x7f00000000c0)={[0x1, 0x3, 0x1, 0x6, 0xde, 0x6daff1ff, 0xb0af, 0x7a, 0x2dd8, 0xd, 0x5, 0x400040, 0x2, 0x6, 0x4d, 0x57]}, &(0x7f0000000140)={[0x7fffffffffffffff, 0x9, 0xe88, 0x8, 0x1, 0x9616, 0xfffffffffffffffe, 0x2002, 0xfffffffeffffffff, 0x3b5, 0x8dc1, 0x0, 0x7, 0x1, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='7', 0x1) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@vsock, 0xfffff800) ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) r3 = socket(0x18, 0x5, 0x1) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x101000000) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x3, 0x4b9) lsm_list_modules$auto(0x0, 0x0, 0x0) 5.038872478s ago: executing program 2 (id=702): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x20f34) write$auto(0x3, 0x0, 0xfffffdef) 3.728583029s ago: executing program 0 (id=703): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r2) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r6 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xab700, 0x0) read$auto_proc_timers_operations_base(r6, &(0x7f0000000080)=""/173, 0xad) write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r8, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r5, 0x4008af20, &(0x7f00000001c0)={0xe0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 3.257265478s ago: executing program 2 (id=704): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) (async) pselect6$auto(0x3, 0x0, &(0x7f0000000340)={[0x9, 0x6, 0x40, 0x2f3, 0x8, 0x5, 0x8, 0x200000000008, 0x4, 0x7, 0x40, 0x67a4ee2e, 0x6, 0x7, 0xd, 0xb]}, 0x0, &(0x7f0000000100)={0x10004, 0x8009}, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async, rerun: 64) write$auto(r0, 0x0, 0xb42d) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mbind$auto(0x0, 0x7, 0x10000000000008, 0x0, 0x80000000, 0x10000) (async, rerun: 64) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) madvise$auto(0xf1, 0x6, 0x200) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) fchown$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) (async, rerun: 32) lstat$auto(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r1) getrandom$auto(0x0, 0x6000000, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/120, 0x78) (async) r3 = socket(0xa, 0x5, 0x0) setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x98) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 3.153779115s ago: executing program 4 (id=705): mmap$auto(0xffffffffffff8001, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r6, 0x40045702, &(0x7f0000000040)=0x7fffffff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f00000000c0)={0x1, 0xaa, 0xb, 0x1, 0x5, "e7227115127a1e8f00"}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r3, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100028bd7000fbdbdf257500000008009e7e81fb00fdffffff040073000400cf00080037000200000006006d000000000004003b010400e2000c002c8008000100ffff000004002101"], 0x4c}, 0x1, 0x0, 0x0, 0x44805}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x38, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(r10, 0x0, 0x40044) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) r11 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r11, 0x301, 0x70b52c, 0x25dfdbfb, {0xa, 0x0, 0x3f}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getdents64$auto(r0, 0x0, 0x400) 3.110426554s ago: executing program 3 (id=706): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x426a2, 0x0) ioctl$auto_I2C_PEC(r0, 0x708, &(0x7f0000000040)="b63e0171af55dfed12e0b211da092f005851dd829adcd35c15baf8") write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80)='0', 0x1) futex$auto(0x0, 0x0, 0x2, 0x0, 0x0, 0x71a8dce0) 2.506236796s ago: executing program 0 (id=707): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x46, 0x2e, 0x1000000000065f, 0x80000000, 0x40000007, 0x3, 0x20000002, 0x9, 0x1, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x1, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/x86/nmi_longest_ns\x00', 0x8000, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000080)={0xffff, 0x9a95, 0xfff}, 0x7fff, 0x9) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f00000000c0)={0x6ba, 0x2, 0x678, 0x80, 0x7, 0x25}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.358642568s ago: executing program 4 (id=708): msgctl$auto_IPC_RMID(0x1, 0xd00, 0x0) 2.357186576s ago: executing program 3 (id=709): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f00000000c0)='\xfa\xbf\xea\xc9Y8\xf3ZL\r\xd6K\xe7e\xeco\x15&<\xb4\xc3\xdf\xc3\xe4x\xafM', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 6) 1.760526752s ago: executing program 3 (id=710): r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r0, 0x7fff, @old_prog_fd=0x13b}, 0xa3) 1.711472311s ago: executing program 4 (id=711): mmap$auto(0x40, 0xe983, 0xc38, 0xeb1, 0xffffffffffffffff, 0xfddf) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) select$auto(0x4, 0x0, &(0x7f00000000c0)={[0x1, 0x3, 0x1, 0x6, 0xde, 0x6daff1ff, 0xb0af, 0x7a, 0x2dd8, 0xd, 0x5, 0x400040, 0x2, 0x6, 0x4d, 0x57]}, &(0x7f0000000140)={[0x7fffffffffffffff, 0x9, 0xe88, 0x8, 0x1, 0x9616, 0xfffffffffffffffe, 0x2002, 0xfffffffeffffffff, 0x3b5, 0x8dc1, 0x0, 0x7, 0x1, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='7', 0x1) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x103001, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) r4 = socket(0x18, 0x5, 0x1) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x101000000) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x3, 0x4b9) lsm_list_modules$auto(0x0, 0x0, 0x0) 1.39929756s ago: executing program 0 (id=712): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0) socket(0x1a, 0x4, 0x6) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc94", 0xc2d) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x3, 0x2, 0x2, 0x18, r0, 0xc) mmap$auto(0x0, 0x2060009, 0x3, 0x40000000000eb2, r0, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x81a, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x40804) close_range$auto(0x2, 0xa, 0x0) 506.990641ms ago: executing program 3 (id=713): mmap$auto(0x40, 0xe983, 0xc38, 0xeb1, 0xffffffffffffffff, 0xfddf) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) select$auto(0x4, 0x0, &(0x7f00000000c0)={[0x1, 0x3, 0x1, 0x6, 0xde, 0x6daff1ff, 0xb0af, 0x7a, 0x2dd8, 0xd, 0x5, 0x400040, 0x2, 0x6, 0x4d, 0x57]}, &(0x7f0000000140)={[0x7fffffffffffffff, 0x9, 0xe88, 0x8, 0x1, 0x9616, 0xfffffffffffffffe, 0x2002, 0xfffffffeffffffff, 0x3b5, 0x8dc1, 0x0, 0x7, 0x1, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='7', 0x1) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@vsock, 0xfffff800) ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) r3 = socket(0x18, 0x5, 0x1) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x101000000) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x3, 0x4b9) lsm_list_modules$auto(0x0, 0x0, 0x0) 344.693639ms ago: executing program 2 (id=714): mmap$auto(0x0, 0x2020009, 0x80000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_DISCONNECT(r0, 0x0, 0x2000c800) madvise$auto(0x300, 0xffffffffffff0005, 0x19) 73.989883ms ago: executing program 0 (id=715): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(r0, 0x0, 0x800003, 0x270) (fail_nth: 2) 0s ago: executing program 2 (id=716): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram2\x00', 0x30f601, 0x0) socket(0x2a, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) (async) mmap$auto(0x4, 0x4, 0xffffffffffffffff, 0xeb0, 0x401, 0x8000) (async) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) (async) unshare$auto(0x40000080) (async) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) (async) r1 = socket(0x10, 0x2, 0xc) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xf8}}, 0x10044010) (async) write$auto(0x3, 0x0, 0x100082) (async) mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/dummy_hcd.5/usb6/ep_00/bInterval\x00', 0x101400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) (async) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x14, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400, 0xfff, 0xeb1, 0x1272, 0x8000) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) (async) setsockopt$auto(0x3, 0x45, 0x81, 0x0, 0x1) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) kernel console output (not intermixed with test programs): ="features" dev="configfs" ino=7920 res=0 errno=0 [ 115.857970][ T6141] netlink: 334 bytes leftover after parsing attributes in process `syz.0.48'. [ 116.524527][ T6156] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.917551][ T6168] program syz.3.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.604926][ T6205] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.447772][ T6236] svc: failed to register nfsdv3 RPC service (errno 111). [ 123.696754][ T6236] svc: failed to register nfsaclv3 RPC service (errno 111). [ 124.434850][ T6248] Unable to find swap-space signature [ 126.024329][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 126.138972][ T30] audit: type=1804 audit(1759256805.217:3): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.79" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 126.217918][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 127.438265][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 127.706945][ T6291] random: crng reseeded on system resumption [ 127.765743][ T6296] netlink: 334 bytes leftover after parsing attributes in process `syz.2.86'. [ 127.792809][ T6291] Restarting kernel threads ... [ 127.824229][ T6291] Done restarting kernel threads. [ 128.718924][ T6317] can: request_module (can-proto-0) failed. [ 130.314985][ T6344] FAULT_INJECTION: forcing a failure. [ 130.314985][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.418775][ T6344] CPU: 1 UID: 0 PID: 6344 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT(full) [ 130.418827][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.418845][ T6344] Call Trace: [ 130.418855][ T6344] [ 130.418866][ T6344] dump_stack_lvl+0x16c/0x1f0 [ 130.418907][ T6344] should_fail_ex+0x512/0x640 [ 130.418946][ T6344] _copy_from_iter+0x463/0x1720 [ 130.418992][ T6344] ? __pfx__copy_from_iter+0x10/0x10 [ 130.419030][ T6344] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 130.419076][ T6344] netlink_sendmsg+0x829/0xdd0 [ 130.419117][ T6344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.419156][ T6344] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 130.419201][ T6344] ____sys_sendmsg+0xa98/0xc70 [ 130.419243][ T6344] ? copy_msghdr_from_user+0x10a/0x160 [ 130.419276][ T6344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.419324][ T6344] ? __pfx__kstrtoull+0x10/0x10 [ 130.419377][ T6344] ___sys_sendmsg+0x134/0x1d0 [ 130.419412][ T6344] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.419464][ T6344] ? find_held_lock+0x2b/0x80 [ 130.419521][ T6344] __sys_sendmmsg+0x200/0x420 [ 130.419559][ T6344] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.419606][ T6344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.419656][ T6344] ? fput+0x9b/0xd0 [ 130.419698][ T6344] ? ksys_write+0x1ac/0x250 [ 130.419732][ T6344] ? __pfx_ksys_write+0x10/0x10 [ 130.419773][ T6344] __x64_sys_sendmmsg+0x9c/0x100 [ 130.419803][ T6344] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.419841][ T6344] do_syscall_64+0xcd/0x4c0 [ 130.419876][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.419905][ T6344] RIP: 0033:0x7fd70ad8eec9 [ 130.419930][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.419956][ T6344] RSP: 002b:00007fd70bba0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.419985][ T6344] RAX: ffffffffffffffda RBX: 00007fd70afe5fa0 RCX: 00007fd70ad8eec9 [ 130.420004][ T6344] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 130.420021][ T6344] RBP: 00007fd70bba0090 R08: 0000000000000000 R09: 0000000000000000 [ 130.420038][ T6344] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 130.420055][ T6344] R13: 00007fd70afe6038 R14: 00007fd70afe5fa0 R15: 00007fff44549b58 [ 130.420093][ T6344] [ 131.274628][ T6346] mkiss: ax0: crc mode is auto. [ 134.379874][ T6396] FAULT_INJECTION: forcing a failure. [ 134.379874][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 134.439988][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 134.440032][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.440050][ T6396] Call Trace: [ 134.440059][ T6396] [ 134.440070][ T6396] dump_stack_lvl+0x16c/0x1f0 [ 134.440108][ T6396] should_fail_ex+0x512/0x640 [ 134.440139][ T6396] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 134.440173][ T6396] should_failslab+0xc2/0x120 [ 134.440210][ T6396] __kmalloc_cache_noprof+0x6a/0x3e0 [ 134.440239][ T6396] ? copy_net_ns+0x136/0x690 [ 134.440282][ T6396] copy_net_ns+0x136/0x690 [ 134.440315][ T6396] ? copy_cgroup_ns+0x71/0x6b0 [ 134.440350][ T6396] create_new_namespaces+0x3ea/0xa90 [ 134.440402][ T6396] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 134.440439][ T6396] ksys_unshare+0x45b/0xa40 [ 134.440477][ T6396] ? __pfx_ksys_unshare+0x10/0x10 [ 134.440511][ T6396] ? ksys_write+0x1ac/0x250 [ 134.440557][ T6396] __x64_sys_unshare+0x31/0x40 [ 134.440592][ T6396] do_syscall_64+0xcd/0x4c0 [ 134.440624][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.440652][ T6396] RIP: 0033:0x7f2f2318eec9 [ 134.440676][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.440700][ T6396] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.440726][ T6396] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 134.440742][ T6396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 134.440757][ T6396] RBP: 00007f2f24035090 R08: 0000000000000000 R09: 0000000000000000 [ 134.440773][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.440789][ T6396] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 134.440825][ T6396] [ 135.405754][ T6404] mkiss: ax0: crc mode is auto. [ 137.958329][ T6445] netlink: 342 bytes leftover after parsing attributes in process `syz.1.117'. [ 138.431115][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.437741][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.608742][ T6461] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 140.223539][ T6474] capability: warning: `syz.0.122' uses 32-bit capabilities (legacy support in use) [ 141.290065][ T6482] mkiss: ax0: crc mode is auto. [ 142.775824][ T6526] netlink: 504 bytes leftover after parsing attributes in process `syz.1.129'. [ 142.785649][ T6526] netlink: 350 bytes leftover after parsing attributes in process `syz.1.129'. [ 143.372052][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'. [ 143.479491][ T6539] FAULT_INJECTION: forcing a failure. [ 143.479491][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 143.549170][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 143.549213][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.549230][ T6539] Call Trace: [ 143.549240][ T6539] [ 143.549252][ T6539] dump_stack_lvl+0x16c/0x1f0 [ 143.549289][ T6539] should_fail_ex+0x512/0x640 [ 143.549321][ T6539] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 143.549367][ T6539] should_failslab+0xc2/0x120 [ 143.549419][ T6539] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 143.549460][ T6539] ? __lock_acquire+0x62e/0x1ce0 [ 143.549494][ T6539] ? kstrdup_const+0x63/0x80 [ 143.549538][ T6539] kstrdup+0x53/0x100 [ 143.549576][ T6539] kstrdup_const+0x63/0x80 [ 143.549621][ T6539] kvasprintf_const+0x10f/0x1a0 [ 143.549659][ T6539] kobject_set_name_vargs+0x5a/0x140 [ 143.549701][ T6539] kobject_init_and_add+0xe7/0x190 [ 143.549741][ T6539] ? __pfx_kobject_init_and_add+0x10/0x10 [ 143.549797][ T6539] ? up_write+0x1b2/0x520 [ 143.549850][ T6539] sysfs_slab_add+0x18e/0x1e0 [ 143.549886][ T6539] do_kmem_cache_create+0x529/0x720 [ 143.549933][ T6539] ? __kmem_cache_create_args+0x205/0x390 [ 143.549973][ T6539] __kmem_cache_create_args+0x225/0x390 [ 143.550012][ T6539] mon_text_open+0x313/0x4f0 [ 143.550059][ T6539] ? __pfx_mon_text_open+0x10/0x10 [ 143.550101][ T6539] ? __debugfs_file_get+0x1fe/0x840 [ 143.550139][ T6539] ? __pfx_mon_text_ctor+0x10/0x10 [ 143.550187][ T6539] ? __pfx_apparmor_file_open+0x10/0x10 [ 143.550218][ T6539] ? lockdown_is_locked_down+0x3f/0x130 [ 143.550246][ T6539] ? bpf_lsm_locked_down+0x9/0x10 [ 143.550280][ T6539] ? __pfx_mon_text_open+0x10/0x10 [ 143.550320][ T6539] full_proxy_open_regular+0x1b6/0x360 [ 143.550358][ T6539] do_dentry_open+0x97f/0x1530 [ 143.550398][ T6539] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 143.550444][ T6539] vfs_open+0x82/0x3f0 [ 143.550489][ T6539] path_openat+0x1de4/0x2cb0 [ 143.550538][ T6539] ? __pfx_path_openat+0x10/0x10 [ 143.550581][ T6539] do_filp_open+0x20b/0x470 [ 143.550616][ T6539] ? __pfx_do_filp_open+0x10/0x10 [ 143.550678][ T6539] ? alloc_fd+0x471/0x7d0 [ 143.550720][ T6539] do_sys_openat2+0x11b/0x1d0 [ 143.550762][ T6539] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.550824][ T6539] __x64_sys_openat+0x174/0x210 [ 143.550850][ T6539] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.550904][ T6539] do_syscall_64+0xcd/0x4c0 [ 143.550941][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.550972][ T6539] RIP: 0033:0x7f493a18eec9 [ 143.550997][ T6539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.551024][ T6539] RSP: 002b:00007f493b07a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.551052][ T6539] RAX: ffffffffffffffda RBX: 00007f493a3e6180 RCX: 00007f493a18eec9 [ 143.551070][ T6539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 143.551086][ T6539] RBP: 00007f493a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 143.551101][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.551117][ T6539] R13: 00007f493a3e6218 R14: 00007f493a3e6180 R15: 00007ffc33fc9fc8 [ 143.551156][ T6539] [ 143.942629][ T6539] kobject: can not set name properly! [ 144.264871][ T6539] SLUB: Unable to add cache mon_text_ffff888029274400 to sysfs [ 144.649922][ T6536] team0 (unregistering): Port device team_slave_0 removed [ 144.683714][ T6536] team0 (unregistering): Port device team_slave_1 removed [ 146.705374][ T6593] FAULT_INJECTION: forcing a failure. [ 146.705374][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.886900][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(full) [ 146.886953][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.886969][ T6593] Call Trace: [ 146.886979][ T6593] [ 146.886990][ T6593] dump_stack_lvl+0x16c/0x1f0 [ 146.887031][ T6593] should_fail_ex+0x512/0x640 [ 146.887070][ T6593] _copy_from_iter+0x29f/0x1720 [ 146.887109][ T6593] ? __alloc_skb+0x200/0x380 [ 146.887141][ T6593] ? __pfx__copy_from_iter+0x10/0x10 [ 146.887181][ T6593] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 146.887211][ T6593] ? __lock_acquire+0xb97/0x1ce0 [ 146.887260][ T6593] netlink_sendmsg+0x829/0xdd0 [ 146.887301][ T6593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.887340][ T6593] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 146.887382][ T6593] ____sys_sendmsg+0xa98/0xc70 [ 146.887425][ T6593] ? copy_msghdr_from_user+0x10a/0x160 [ 146.887457][ T6593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.887516][ T6593] ___sys_sendmsg+0x134/0x1d0 [ 146.887551][ T6593] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.887632][ T6593] __sys_sendmsg+0x16d/0x220 [ 146.887665][ T6593] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.887723][ T6593] do_syscall_64+0xcd/0x4c0 [ 146.887759][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.887790][ T6593] RIP: 0033:0x7f2f2318eec9 [ 146.887813][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.887843][ T6593] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.887871][ T6593] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 146.887887][ T6593] RDX: 00000000160000a4 RSI: 0000200000000280 RDI: 0000000000000003 [ 146.887905][ T6593] RBP: 00007f2f24035090 R08: 0000000000000000 R09: 0000000000000000 [ 146.887930][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.887947][ T6593] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 146.887989][ T6593] [ 150.882357][ T6669] netlink: 504 bytes leftover after parsing attributes in process `syz.3.157'. [ 150.902405][ T6669] netlink: 350 bytes leftover after parsing attributes in process `syz.3.157'. [ 155.196775][ T6712] netlink: 504 bytes leftover after parsing attributes in process `syz.0.167'. [ 155.206853][ T6712] netlink: 350 bytes leftover after parsing attributes in process `syz.0.167'. [ 157.407455][ T6746] netlink: 504 bytes leftover after parsing attributes in process `syz.3.176'. [ 157.462319][ T6746] netlink: 350 bytes leftover after parsing attributes in process `syz.3.176'. [ 157.827458][ T6750] Invalid ELF header magic: != ELF [ 158.362125][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 160.208720][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.185'. [ 160.404110][ T51] Bluetooth: hci1: command tx timeout [ 160.423759][ T6773] bond0: (slave bond_slave_1): Releasing backup interface [ 168.141517][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 169.839139][ T6907] mtrr: base(0x7961000) is not aligned on a size(0x0000) boundary [ 170.762258][ T6919] syz.3.217 uses obsolete (PF_INET,SOCK_PACKET) [ 170.769290][ T6919] ======================================================= [ 170.769290][ T6919] WARNING: The mand mount option has been deprecated and [ 170.769290][ T6919] and is ignored by this kernel. Remove the mand [ 170.769290][ T6919] option from the mount to silence this warning. [ 170.769290][ T6919] ======================================================= [ 170.986110][ T3486] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.705053][ T6942] random: crng reseeded on system resumption [ 175.391836][ T51] Bluetooth: hci3: unexpected event 0x0e length: 440 > 260 [ 175.517731][ T7018] netlink: 342 bytes leftover after parsing attributes in process `syz.2.239'. [ 176.840113][ T7030] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 177.794798][ T7057] FAULT_INJECTION: forcing a failure. [ 177.794798][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 177.845382][ T7047] FAULT_INJECTION: forcing a failure. [ 177.845382][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 177.859223][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT(full) [ 177.859261][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.859278][ T7057] Call Trace: [ 177.859287][ T7057] [ 177.859299][ T7057] dump_stack_lvl+0x16c/0x1f0 [ 177.859337][ T7057] should_fail_ex+0x512/0x640 [ 177.859369][ T7057] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 177.859406][ T7057] should_failslab+0xc2/0x120 [ 177.859445][ T7057] __kmalloc_cache_noprof+0x6a/0x3e0 [ 177.859477][ T7057] ? create_filter_start.constprop.0+0x103/0x300 [ 177.859523][ T7057] create_filter_start.constprop.0+0x103/0x300 [ 177.859566][ T7057] apply_subsystem_event_filter+0x188/0x17e0 [ 177.859618][ T7057] ? __might_fault+0xe3/0x190 [ 177.859653][ T7057] ? __might_fault+0x13b/0x190 [ 177.859687][ T7057] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 177.859739][ T7057] ? _copy_from_user+0x59/0xd0 [ 177.859780][ T7057] subsystem_filter_write+0x95/0x120 [ 177.859819][ T7057] ? __pfx_subsystem_filter_write+0x10/0x10 [ 177.859852][ T7057] vfs_write+0x29d/0x11d0 [ 177.859892][ T7057] ? __pfx___mutex_lock+0x10/0x10 [ 177.859924][ T7057] ? __pfx_vfs_write+0x10/0x10 [ 177.859969][ T7057] ? __fget_files+0x20e/0x3c0 [ 177.860015][ T7057] ksys_write+0x12a/0x250 [ 177.860047][ T7057] ? __pfx_ksys_write+0x10/0x10 [ 177.860094][ T7057] do_syscall_64+0xcd/0x4c0 [ 177.860129][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.860159][ T7057] RIP: 0033:0x7f2f2318eec9 [ 177.860183][ T7057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.860209][ T7057] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.860236][ T7057] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 177.860256][ T7057] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 177.860273][ T7057] RBP: 00007f2f24035090 R08: 0000000000000000 R09: 0000000000000000 [ 177.860289][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.860306][ T7057] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 177.860345][ T7057] [ 178.088865][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 178.088909][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.088927][ T7047] Call Trace: [ 178.088936][ T7047] [ 178.088946][ T7047] dump_stack_lvl+0x16c/0x1f0 [ 178.088986][ T7047] should_fail_ex+0x512/0x640 [ 178.089020][ T7047] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 178.089055][ T7047] should_failslab+0xc2/0x120 [ 178.089096][ T7047] __kmalloc_cache_noprof+0x6a/0x3e0 [ 178.089129][ T7047] ? refill_pi_state_cache+0x89/0x250 [ 178.089172][ T7047] refill_pi_state_cache+0x89/0x250 [ 178.089213][ T7047] futex_lock_pi+0x175/0x7c0 [ 178.089257][ T7047] ? futex_unqueue+0x13d/0x2c0 [ 178.089292][ T7047] ? __pfx_futex_lock_pi+0x10/0x10 [ 178.089330][ T7047] ? __futex_wait+0x24c/0x2f0 [ 178.089401][ T7047] ? futex_private_hash_put+0x18a/0x300 [ 178.089443][ T7047] ? __pfx_futex_wake_mark+0x10/0x10 [ 178.089497][ T7047] ? __pfx_child_wait_callback+0x10/0x10 [ 178.089547][ T7047] do_futex+0x11a/0x350 [ 178.089585][ T7047] ? __pfx_do_futex+0x10/0x10 [ 178.089622][ T7047] ? __pfx___do_sys_wait4+0x10/0x10 [ 178.089673][ T7047] ? __might_fault+0xe3/0x190 [ 178.089705][ T7047] ? __might_fault+0x13b/0x190 [ 178.089743][ T7047] __x64_sys_futex+0x1e0/0x4c0 [ 178.089786][ T7047] ? __pfx___x64_sys_futex+0x10/0x10 [ 178.089830][ T7047] ? syscall_user_dispatch+0x78/0x140 [ 178.089885][ T7047] do_syscall_64+0xcd/0x4c0 [ 178.089916][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.089943][ T7047] RIP: 0033:0x7fad5638eec9 [ 178.089967][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.089993][ T7047] RSP: 002b:00007fad5720f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.090020][ T7047] RAX: ffffffffffffffda RBX: 00007fad565e6090 RCX: 00007fad5638eec9 [ 178.090037][ T7047] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 178.090055][ T7047] RBP: 00007fad56411f91 R08: 0000000000000000 R09: 000000008000fff2 [ 178.090065][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.090075][ T7047] R13: 00007fad565e6128 R14: 00007fad565e6090 R15: 00007ffef05834c8 [ 178.090098][ T7047] [ 178.538822][ T7063] FAULT_INJECTION: forcing a failure. [ 178.538822][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 178.552852][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.2.255 Not tainted syzkaller #0 PREEMPT(full) [ 178.552912][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.552929][ T7063] Call Trace: [ 178.552938][ T7063] [ 178.552949][ T7063] dump_stack_lvl+0x16c/0x1f0 [ 178.552990][ T7063] should_fail_ex+0x512/0x640 [ 178.553022][ T7063] ? fs_reclaim_acquire+0xae/0x150 [ 178.553081][ T7063] ? ima_alloc_init_template+0xb5/0x720 [ 178.553128][ T7063] should_failslab+0xc2/0x120 [ 178.553182][ T7063] __kmalloc_noprof+0xd2/0x510 [ 178.553216][ T7063] ? find_held_lock+0x2b/0x80 [ 178.553249][ T7063] ima_alloc_init_template+0xb5/0x720 [ 178.553291][ T7063] ? take_dentry_name_snapshot+0x319/0x7d0 [ 178.553365][ T7063] ima_store_measurement+0x1eb/0x5c0 [ 178.553407][ T7063] ? __pfx_ima_store_measurement+0x10/0x10 [ 178.553447][ T7063] ? vfs_getxattr_alloc+0xec/0x340 [ 178.553490][ T7063] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 178.553529][ T7063] process_measurement+0x1ddb/0x23e0 [ 178.553586][ T7063] ? __pfx_process_measurement+0x10/0x10 [ 178.553620][ T7063] ? kasan_save_stack+0x33/0x60 [ 178.553655][ T7063] ? __kasan_slab_alloc+0x89/0x90 [ 178.553689][ T7063] ? security_file_alloc+0x34/0x2b0 [ 178.553727][ T7063] ? init_file+0x93/0x4c0 [ 178.553775][ T7063] ? find_held_lock+0x2b/0x80 [ 178.553851][ T7063] ima_file_mmap+0x1b1/0x1d0 [ 178.553886][ T7063] ? __pfx_ima_file_mmap+0x10/0x10 [ 178.553932][ T7063] security_mmap_file+0x88c/0x990 [ 178.553977][ T7063] vm_mmap_pgoff+0xec/0x470 [ 178.554025][ T7063] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 178.554061][ T7063] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 178.554108][ T7063] ? hugetlbfs_get_inode+0x31f/0x730 [ 178.554154][ T7063] ksys_mmap_pgoff+0x1c8/0x5c0 [ 178.554202][ T7063] __x64_sys_mmap+0x125/0x190 [ 178.554235][ T7063] do_syscall_64+0xcd/0x4c0 [ 178.554272][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.554302][ T7063] RIP: 0033:0x7f2f2318eec9 [ 178.554325][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.554351][ T7063] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 178.554380][ T7063] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 178.554397][ T7063] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 178.554414][ T7063] RBP: 00007f2f23211f91 R08: 0000000000000401 R09: 0000300000000000 [ 178.554431][ T7063] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 178.554447][ T7063] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 178.554486][ T7063] [ 178.555739][ T30] audit: type=1804 audit(1759257880.627:4): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.255" name="anon_hugepage" dev="hugetlbfs" ino=11894 res=0 errno=0 [ 178.915404][ T7065] netlink: 350 bytes leftover after parsing attributes in process `syz.1.256'. [ 179.045873][ T7069] FAULT_INJECTION: forcing a failure. [ 179.045873][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 179.068103][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT(full) [ 179.068143][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.068161][ T7069] Call Trace: [ 179.068171][ T7069] [ 179.068182][ T7069] dump_stack_lvl+0x16c/0x1f0 [ 179.068220][ T7069] should_fail_ex+0x512/0x640 [ 179.068254][ T7069] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 179.068301][ T7069] should_failslab+0xc2/0x120 [ 179.068341][ T7069] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 179.068383][ T7069] ? kstrdup_const+0x63/0x80 [ 179.068427][ T7069] kstrdup+0x53/0x100 [ 179.068466][ T7069] kstrdup_const+0x63/0x80 [ 179.068502][ T7069] wakeup_source_register+0x6a/0x3e0 [ 179.068537][ T7069] ep_create_wakeup_source+0x139/0x2e0 [ 179.068578][ T7069] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 179.068618][ T7069] ? do_epoll_ctl+0x1565/0x3790 [ 179.068659][ T7069] do_epoll_ctl+0x1f60/0x3790 [ 179.068710][ T7069] ? __pfx_do_epoll_ctl+0x10/0x10 [ 179.068742][ T7069] ? find_held_lock+0x2b/0x80 [ 179.068770][ T7069] ? __might_fault+0xe3/0x190 [ 179.068802][ T7069] ? __might_fault+0xe3/0x190 [ 179.068849][ T7069] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 179.068877][ T7069] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 179.068906][ T7069] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 179.068945][ T7069] do_syscall_64+0xcd/0x4c0 [ 179.068972][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.068996][ T7069] RIP: 0033:0x7fad5638eec9 [ 179.069016][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.069038][ T7069] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 179.069061][ T7069] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 179.069076][ T7069] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 179.069090][ T7069] RBP: 00007fad56411f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.069104][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.069117][ T7069] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 179.069148][ T7069] [ 179.444554][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.454034][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 179.463013][ T51] Bluetooth: hci3: hardware error 0x00 [ 179.471590][ T7078] netlink: 350 bytes leftover after parsing attributes in process `syz.1.262'. [ 180.063652][ T30] audit: type=1800 audit(1759257882.137:5): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="trace_pipe" dev="tracefs" ino=33 res=0 errno=0 [ 181.606842][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 182.609945][ T7130] binder: 7129:7130 ioctl c018620c 0 returned -1 [ 183.419555][ T7149] netlink: 338 bytes leftover after parsing attributes in process `syz.0.281'. [ 185.803397][ T7190] netlink: 350 bytes leftover after parsing attributes in process `syz.3.291'. [ 186.054000][ T30] audit: type=1800 audit(1759257888.084:6): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.287" name="members" dev="configfs" ino=13251 res=0 errno=0 [ 189.671360][ T7251] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 190.014892][ T51] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 191.211816][ T7267] FAULT_INJECTION: forcing a failure. [ 191.211816][ T7267] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 191.272348][ T7267] CPU: 0 UID: 0 PID: 7267 Comm: syz.3.312 Not tainted syzkaller #0 PREEMPT(full) [ 191.272389][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.272405][ T7267] Call Trace: [ 191.272415][ T7267] [ 191.272427][ T7267] dump_stack_lvl+0x16c/0x1f0 [ 191.272464][ T7267] should_fail_ex+0x512/0x640 [ 191.272513][ T7267] should_fail_alloc_page+0xe7/0x130 [ 191.272556][ T7267] prepare_alloc_pages+0x3c2/0x610 [ 191.272608][ T7267] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 191.272644][ T7267] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 191.272700][ T7267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.272735][ T7267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.272796][ T7267] ? __lock_acquire+0xb97/0x1ce0 [ 191.272832][ T7267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.272879][ T7267] ? policy_nodemask+0xea/0x4e0 [ 191.272921][ T7267] alloc_pages_mpol+0x1fb/0x550 [ 191.272963][ T7267] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 191.273001][ T7267] ? do_raw_spin_lock+0x12c/0x2b0 [ 191.273043][ T7267] ? find_held_lock+0x2b/0x80 [ 191.273080][ T7267] alloc_pages_noprof+0x131/0x390 [ 191.273120][ T7267] __pmd_alloc+0x3b/0x930 [ 191.273161][ T7267] ? __pud_alloc+0x526/0x750 [ 191.273206][ T7267] walk_to_pmd+0x3a6/0x4c0 [ 191.273253][ T7267] __get_locked_pte+0x25/0xc0 [ 191.273300][ T7267] map_ldt_struct+0x3b0/0xa60 [ 191.273343][ T7267] ? __pfx_map_ldt_struct+0x10/0x10 [ 191.273377][ T7267] ? alloc_pages_noprof+0x23c/0x390 [ 191.273422][ T7267] write_ldt+0x8fa/0xd20 [ 191.273455][ T7267] ? __fget_files+0x20e/0x3c0 [ 191.273500][ T7267] ? __pfx_write_ldt+0x10/0x10 [ 191.273530][ T7267] ? fput+0x9b/0xd0 [ 191.273571][ T7267] ? ksys_write+0x1ac/0x250 [ 191.273604][ T7267] ? __pfx_ksys_write+0x10/0x10 [ 191.273647][ T7267] __x64_sys_modify_ldt+0xb1/0x170 [ 191.273682][ T7267] do_syscall_64+0xcd/0x4c0 [ 191.273719][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.273747][ T7267] RIP: 0033:0x7f493a18eec9 [ 191.273771][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.273797][ T7267] RSP: 002b:00007f493b0bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 191.273825][ T7267] RAX: ffffffffffffffda RBX: 00007f493a3e5fa0 RCX: 00007f493a18eec9 [ 191.273844][ T7267] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 191.273861][ T7267] RBP: 00007f493b0bc090 R08: 0000000000000000 R09: 0000000000000000 [ 191.273877][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.273894][ T7267] R13: 00007f493a3e6038 R14: 00007f493a3e5fa0 R15: 00007ffc33fc9fc8 [ 191.273934][ T7267] [ 192.947613][ T7310] netlink: 350 bytes leftover after parsing attributes in process `syz.2.322'. [ 196.692243][ T7356] vivid-003: ================= START STATUS ================= [ 196.722854][ T7356] vivid-003: Radio HW Seek Mode: Bounded [ 196.800219][ T7356] vivid-003: Radio Programmable HW Seek: false [ 196.820882][ T7356] vivid-003: RDS Rx I/O Mode: Block I/O [ 196.849837][ T7356] vivid-003: Generate RBDS Instead of RDS: false [ 196.857724][ T7356] vivid-003: RDS Reception: true [ 196.864929][ T7356] vivid-003: RDS Program Type: 0 inactive [ 196.899192][ T7356] vivid-003: RDS PS Name: inactive [ 196.908783][ T7356] vivid-003: RDS Radio Text: inactive [ 196.939936][ T7356] vivid-003: RDS Traffic Announcement: false inactive [ 196.960737][ T7356] vivid-003: RDS Traffic Program: false inactive [ 196.974108][ T7356] vivid-003: RDS Music: false inactive [ 197.016306][ T7356] vivid-003: ================== END STATUS ================== [ 197.406564][ T7379] tipc: Started in network mode [ 197.418278][ T7379] tipc: Node identity ee00, cluster identity 4711 [ 197.428449][ T7379] tipc: Node number set to 60928 [ 198.032914][ T7387] FAULT_INJECTION: forcing a failure. [ 198.032914][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 198.051612][ T7387] CPU: 1 UID: 0 PID: 7387 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) [ 198.051646][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.051657][ T7387] Call Trace: [ 198.051663][ T7387] [ 198.051670][ T7387] dump_stack_lvl+0x16c/0x1f0 [ 198.051696][ T7387] should_fail_ex+0x512/0x640 [ 198.051722][ T7387] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 198.051744][ T7387] should_failslab+0xc2/0x120 [ 198.051769][ T7387] __kmalloc_cache_noprof+0x6a/0x3e0 [ 198.051789][ T7387] ? virtual_ncidev_open+0x49/0x220 [ 198.051820][ T7387] virtual_ncidev_open+0x49/0x220 [ 198.051848][ T7387] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 198.051880][ T7387] misc_open+0x35d/0x420 [ 198.051908][ T7387] ? __pfx_misc_open+0x10/0x10 [ 198.051934][ T7387] chrdev_open+0x234/0x6a0 [ 198.051957][ T7387] ? __pfx_apparmor_file_open+0x10/0x10 [ 198.051979][ T7387] ? __pfx_chrdev_open+0x10/0x10 [ 198.052003][ T7387] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 198.052030][ T7387] do_dentry_open+0x97f/0x1530 [ 198.052053][ T7387] ? __pfx_chrdev_open+0x10/0x10 [ 198.052081][ T7387] vfs_open+0x82/0x3f0 [ 198.052111][ T7387] path_openat+0x1de4/0x2cb0 [ 198.052141][ T7387] ? __pfx_path_openat+0x10/0x10 [ 198.052169][ T7387] do_filp_open+0x20b/0x470 [ 198.052191][ T7387] ? __pfx_do_filp_open+0x10/0x10 [ 198.052232][ T7387] ? alloc_fd+0x471/0x7d0 [ 198.052259][ T7387] do_sys_openat2+0x11b/0x1d0 [ 198.052287][ T7387] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.052316][ T7387] ? kmem_cache_free+0x2d1/0x4d0 [ 198.052343][ T7387] __x64_sys_openat+0x174/0x210 [ 198.052359][ T7387] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.052385][ T7387] do_syscall_64+0xcd/0x4c0 [ 198.052407][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.052425][ T7387] RIP: 0033:0x7f2f2318eec9 [ 198.052440][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.052457][ T7387] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.052481][ T7387] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 198.052492][ T7387] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 198.052502][ T7387] RBP: 00007f2f23211f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.052512][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.052522][ T7387] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 198.052545][ T7387] [ 198.056089][ T51] Bluetooth: hci1: Malformed Event: 0x02 [ 199.048944][ T7403] netlink: 350 bytes leftover after parsing attributes in process `syz.3.342'. [ 199.856146][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.862820][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.318996][ T7421] mkiss: ax0: crc mode is auto. [ 200.333351][ T7421] Invalid ELF header magic: != ELF [ 203.127772][ T7453] HSR: entered promiscuous mode [ 205.775869][ T7496] netlink: 350 bytes leftover after parsing attributes in process `syz.0.366'. [ 208.584249][ T7536] netlink: 350 bytes leftover after parsing attributes in process `syz.1.376'. [ 208.715081][ T7523] bond0: option fail_over_mac: invalid value () [ 211.351307][ T7601] FAULT_INJECTION: forcing a failure. [ 211.351307][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 211.369893][ T7601] CPU: 1 UID: 0 PID: 7601 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(full) [ 211.369920][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.369930][ T7601] Call Trace: [ 211.369936][ T7601] [ 211.369943][ T7601] dump_stack_lvl+0x16c/0x1f0 [ 211.369969][ T7601] should_fail_ex+0x512/0x640 [ 211.369990][ T7601] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 211.370027][ T7601] should_failslab+0xc2/0x120 [ 211.370052][ T7601] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.370080][ T7601] ? getname_flags.part.0+0x4c/0x550 [ 211.370112][ T7601] getname_flags.part.0+0x4c/0x550 [ 211.370164][ T7601] getname_flags+0x93/0xf0 [ 211.370184][ T7601] do_sys_openat2+0xb8/0x1d0 [ 211.370213][ T7601] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.370244][ T7601] ? __fget_files+0x20e/0x3c0 [ 211.370268][ T7601] __x64_sys_openat+0x174/0x210 [ 211.370285][ T7601] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.370301][ T7601] ? ksys_write+0x1ac/0x250 [ 211.370330][ T7601] do_syscall_64+0xcd/0x4c0 [ 211.370352][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.370371][ T7601] RIP: 0033:0x7f2f2318eec9 [ 211.370388][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.370405][ T7601] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.370423][ T7601] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 211.370434][ T7601] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 211.370444][ T7601] RBP: 00007f2f24035090 R08: 0000000000000000 R09: 0000000000000000 [ 211.370455][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.370465][ T7601] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 211.370486][ T7601] [ 211.370874][ T7601] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.215430][ T7614] FAULT_INJECTION: forcing a failure. [ 212.215430][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 212.259654][ T7614] CPU: 1 UID: 0 PID: 7614 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) [ 212.259694][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.259709][ T7614] Call Trace: [ 212.259719][ T7614] [ 212.259730][ T7614] dump_stack_lvl+0x16c/0x1f0 [ 212.259769][ T7614] should_fail_ex+0x512/0x640 [ 212.259802][ T7614] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 212.259843][ T7614] should_failslab+0xc2/0x120 [ 212.259883][ T7614] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 212.259919][ T7614] ? __pmd_alloc+0xbf/0x930 [ 212.259967][ T7614] __pmd_alloc+0xbf/0x930 [ 212.260012][ T7614] __handle_mm_fault+0xa06/0x2a50 [ 212.260047][ T7614] ? mt_find+0x3ef/0xa30 [ 212.260082][ T7614] ? __pfx___handle_mm_fault+0x10/0x10 [ 212.260109][ T7614] ? __pfx_mt_find+0x10/0x10 [ 212.260166][ T7614] ? find_vma+0xbf/0x140 [ 212.260204][ T7614] ? __pfx_find_vma+0x10/0x10 [ 212.260247][ T7614] handle_mm_fault+0x589/0xd10 [ 212.260280][ T7614] ? trace_raw_output_exceptions+0x131/0x150 [ 212.260338][ T7614] do_user_addr_fault+0x7a6/0x1370 [ 212.260371][ T7614] ? rcu_is_watching+0x12/0xc0 [ 212.260407][ T7614] exc_page_fault+0x5c/0xb0 [ 212.260439][ T7614] asm_exc_page_fault+0x26/0x30 [ 212.260466][ T7614] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 212.260508][ T7614] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1e 04 00 66 66 [ 212.260534][ T7614] RSP: 0018:ffffc900036477d0 EFLAGS: 00050202 [ 212.260558][ T7614] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 0000000000000007 [ 212.260575][ T7614] RDX: ffffed10064449a1 RSI: 0000000000000000 RDI: ffff888032224d00 [ 212.260592][ T7614] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10064449a0 [ 212.260608][ T7614] R10: ffff888032224d06 R11: 0000000000000000 R12: ffffc90003647d60 [ 212.260626][ T7614] R13: 0000000000000007 R14: ffff888032224d00 R15: 00007ffffffff000 [ 212.260664][ T7614] _copy_from_iter+0x383/0x1720 [ 212.260704][ T7614] ? __alloc_skb+0x200/0x380 [ 212.260734][ T7614] ? __pfx__copy_from_iter+0x10/0x10 [ 212.260772][ T7614] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 212.260804][ T7614] ? __lock_acquire+0xb97/0x1ce0 [ 212.260854][ T7614] netlink_sendmsg+0x829/0xdd0 [ 212.260895][ T7614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.260934][ T7614] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 212.260976][ T7614] ____sys_sendmsg+0xa98/0xc70 [ 212.261017][ T7614] ? copy_msghdr_from_user+0x10a/0x160 [ 212.261049][ T7614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.261096][ T7614] ? __pfx__kstrtoull+0x10/0x10 [ 212.261148][ T7614] ___sys_sendmsg+0x134/0x1d0 [ 212.261184][ T7614] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.261234][ T7614] ? find_held_lock+0x2b/0x80 [ 212.261290][ T7614] __sys_sendmmsg+0x200/0x420 [ 212.261338][ T7614] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.261384][ T7614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.261434][ T7614] ? fput+0x9b/0xd0 [ 212.261474][ T7614] ? ksys_write+0x1ac/0x250 [ 212.261507][ T7614] ? __pfx_ksys_write+0x10/0x10 [ 212.261549][ T7614] __x64_sys_sendmmsg+0x9c/0x100 [ 212.261580][ T7614] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.261607][ T7614] do_syscall_64+0xcd/0x4c0 [ 212.261642][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.261671][ T7614] RIP: 0033:0x7fad5638eec9 [ 212.261694][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.261719][ T7614] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.261745][ T7614] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 212.261764][ T7614] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 212.261781][ T7614] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 212.261799][ T7614] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.261816][ T7614] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 212.261856][ T7614] [ 212.747918][ T7618] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 212.779534][ T7620] FAULT_INJECTION: forcing a failure. [ 212.779534][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 212.795711][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 212.795750][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.795766][ T7620] Call Trace: [ 212.795775][ T7620] [ 212.795786][ T7620] dump_stack_lvl+0x16c/0x1f0 [ 212.795824][ T7620] should_fail_ex+0x512/0x640 [ 212.795856][ T7620] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 212.795897][ T7620] should_failslab+0xc2/0x120 [ 212.795936][ T7620] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 212.795972][ T7620] ? __pfx_stack_trace_save+0x10/0x10 [ 212.796005][ T7620] ? __d_alloc+0x32/0xae0 [ 212.796044][ T7620] __d_alloc+0x32/0xae0 [ 212.796084][ T7620] d_alloc_parallel+0x111/0x1480 [ 212.796141][ T7620] ? find_held_lock+0x2b/0x80 [ 212.796173][ T7620] ? __pfx_d_alloc_parallel+0x10/0x10 [ 212.796223][ T7620] ? __d_lookup+0x266/0x4a0 [ 212.796284][ T7620] lookup_open.isra.0+0x665/0x1580 [ 212.796324][ T7620] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 212.796374][ T7620] ? __pfx_down_write+0x10/0x10 [ 212.796406][ T7620] ? mnt_get_write_access+0x20c/0x300 [ 212.796454][ T7620] path_openat+0x893/0x2cb0 [ 212.796503][ T7620] ? __pfx_path_openat+0x10/0x10 [ 212.796551][ T7620] ? __lock_acquire+0xb97/0x1ce0 [ 212.796594][ T7620] do_filp_open+0x20b/0x470 [ 212.796629][ T7620] ? __pfx_do_filp_open+0x10/0x10 [ 212.796693][ T7620] ? _raw_spin_unlock+0x28/0x50 [ 212.796734][ T7620] ? alloc_fd+0x471/0x7d0 [ 212.796777][ T7620] do_sys_openat2+0x11b/0x1d0 [ 212.796822][ T7620] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.796870][ T7620] ? __fget_files+0x20e/0x3c0 [ 212.796934][ T7620] __x64_sys_open+0x153/0x1e0 [ 212.796960][ T7620] ? __pfx___x64_sys_open+0x10/0x10 [ 212.796996][ T7620] ? rcu_is_watching+0x12/0xc0 [ 212.797029][ T7620] do_syscall_64+0xcd/0x4c0 [ 212.797063][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.797101][ T7620] RIP: 0033:0x7fad5638eec9 [ 212.797125][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.797151][ T7620] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 212.797178][ T7620] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 212.797196][ T7620] RDX: 0000000000000155 RSI: 0000000000022240 RDI: 0000000000000000 [ 212.797212][ T7620] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 212.797229][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.797246][ T7620] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 212.797293][ T7620] [ 213.781620][ T7630] .^: entered promiscuous mode [ 214.089908][ T7643] random: crng reseeded on system resumption [ 214.519752][ T7649] HSR: entered promiscuous mode [ 216.168106][ T7686] netlink: 252 bytes leftover after parsing attributes in process `syz.3.409'. [ 216.205802][ T7686] unsupported nla_type 65535 [ 216.727153][ T30] audit: type=1806 audit(1759267766.765:7): xattr="." res=0 [ 216.805134][ T7698] netlink: 342 bytes leftover after parsing attributes in process `syz.0.413'. [ 216.958273][ T7699] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:0 is already present [ 217.269192][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 217.275352][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 217.281754][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 217.387545][ T7695] FAULT_INJECTION: forcing a failure. [ 217.387545][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 217.525334][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 217.525380][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.525398][ T7695] Call Trace: [ 217.525408][ T7695] [ 217.525420][ T7695] dump_stack_lvl+0x16c/0x1f0 [ 217.525459][ T7695] should_fail_ex+0x512/0x640 [ 217.525494][ T7695] ? __kmalloc_noprof+0xbf/0x510 [ 217.525531][ T7695] ? sk_prot_alloc+0x1a8/0x2a0 [ 217.525568][ T7695] should_failslab+0xc2/0x120 [ 217.525609][ T7695] __kmalloc_noprof+0xd2/0x510 [ 217.525653][ T7695] sk_prot_alloc+0x1a8/0x2a0 [ 217.525696][ T7695] sk_alloc+0x36/0xc20 [ 217.525727][ T7695] pppol2tp_create+0x32/0x250 [ 217.525766][ T7695] pppox_create+0x15c/0x2c0 [ 217.525797][ T7695] __sock_create+0x335/0x8d0 [ 217.525846][ T7695] __sys_socket+0x14d/0x260 [ 217.525889][ T7695] ? __pfx___sys_socket+0x10/0x10 [ 217.525931][ T7695] ? xfd_validate_state+0x61/0x180 [ 217.525971][ T7695] ? __pfx_do_pwritev+0x10/0x10 [ 217.526012][ T7695] __x64_sys_socket+0x72/0xb0 [ 217.526053][ T7695] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.526083][ T7695] do_syscall_64+0xcd/0x4c0 [ 217.526119][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.526147][ T7695] RIP: 0033:0x7f493a18eec9 [ 217.526168][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.526194][ T7695] RSP: 002b:00007f493b0bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 217.526233][ T7695] RAX: ffffffffffffffda RBX: 00007f493a3e5fa0 RCX: 00007f493a18eec9 [ 217.526252][ T7695] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 217.526268][ T7695] RBP: 00007f493a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.526285][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.526302][ T7695] R13: 00007f493a3e6038 R14: 00007f493a3e5fa0 R15: 00007ffc33fc9fc8 [ 217.526340][ T7695] [ 218.813178][ T7725] ICMPv6: process `syz.3.417' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 219.514204][ T7712] bond0: option fail_over_mac: invalid value () [ 221.098159][ T7744] ima: policy update failed [ 221.122365][ T30] audit: type=1802 audit(1759267771.226:8): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.421" res=0 errno=0 [ 221.180213][ T7744] netlink: 25 bytes leftover after parsing attributes in process `syz.0.421'. [ 221.556060][ T7750] FAULT_INJECTION: forcing a failure. [ 221.556060][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 221.632740][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.0.423 Not tainted syzkaller #0 PREEMPT(full) [ 221.632796][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.632814][ T7750] Call Trace: [ 221.632825][ T7750] [ 221.632836][ T7750] dump_stack_lvl+0x16c/0x1f0 [ 221.632879][ T7750] should_fail_ex+0x512/0x640 [ 221.632913][ T7750] ? fs_reclaim_acquire+0xae/0x150 [ 221.632964][ T7750] should_failslab+0xc2/0x120 [ 221.633005][ T7750] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 221.633042][ T7750] ? security_inode_alloc+0x3b/0x2b0 [ 221.633086][ T7750] security_inode_alloc+0x3b/0x2b0 [ 221.633125][ T7750] inode_init_always_gfp+0xce4/0x1030 [ 221.633167][ T7750] alloc_inode+0x86/0x240 [ 221.633211][ T7750] iget_locked+0x2fa/0x860 [ 221.633260][ T7750] ? __pfx_iget_locked+0x10/0x10 [ 221.633316][ T7750] ? find_held_lock+0x2b/0x80 [ 221.633348][ T7750] ? kernfs_root+0xee/0x2a0 [ 221.633399][ T7750] kernfs_get_inode+0x48/0x460 [ 221.633441][ T7750] kernfs_iop_lookup+0x1a7/0x2d0 [ 221.633485][ T7750] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 221.633528][ T7750] lookup_open.isra.0+0x4da/0x1580 [ 221.633570][ T7750] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 221.633626][ T7750] ? mnt_get_write_access+0x20c/0x300 [ 221.633687][ T7750] path_openat+0x893/0x2cb0 [ 221.633740][ T7750] ? __pfx_path_openat+0x10/0x10 [ 221.633788][ T7750] do_filp_open+0x20b/0x470 [ 221.633826][ T7750] ? __pfx_do_filp_open+0x10/0x10 [ 221.633894][ T7750] ? alloc_fd+0x471/0x7d0 [ 221.633940][ T7750] do_sys_openat2+0x11b/0x1d0 [ 221.633988][ T7750] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.634051][ T7750] __x64_sys_openat+0x174/0x210 [ 221.634081][ T7750] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.634129][ T7750] do_syscall_64+0xcd/0x4c0 [ 221.634167][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.634203][ T7750] RIP: 0033:0x7fad5638eec9 [ 221.634225][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.634252][ T7750] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.634289][ T7750] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 221.634310][ T7750] RDX: 00000000001c9282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 221.634329][ T7750] RBP: 00007fad56411f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.634347][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.634364][ T7750] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 221.634406][ T7750] [ 223.128930][ T7767] mmap: syz.0.428 (7767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.253082][ T7757] FAULT_INJECTION: forcing a failure. [ 223.253082][ T7757] name failslab, interval 1, probability 0, space 0, times 0 [ 223.292938][ T7771] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 223.310746][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz.2.426 Not tainted syzkaller #0 PREEMPT(full) [ 223.310786][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.310802][ T7757] Call Trace: [ 223.310811][ T7757] [ 223.310820][ T7757] dump_stack_lvl+0x16c/0x1f0 [ 223.310858][ T7757] should_fail_ex+0x512/0x640 [ 223.310890][ T7757] ? __kvmalloc_node_noprof+0x124/0x620 [ 223.310930][ T7757] should_failslab+0xc2/0x120 [ 223.310971][ T7757] __kvmalloc_node_noprof+0x137/0x620 [ 223.311017][ T7757] ? __pfx_net_ctl_permissions+0x10/0x10 [ 223.311052][ T7757] ? proc_sys_call_handler+0x281/0x570 [ 223.311094][ T7757] ? ns_capable_noaudit+0xda/0x110 [ 223.311134][ T7757] ? proc_sys_call_handler+0x281/0x570 [ 223.311176][ T7757] proc_sys_call_handler+0x281/0x570 [ 223.311224][ T7757] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 223.311264][ T7757] ? trace_kmalloc+0x2b/0xd0 [ 223.311320][ T7757] copy_splice_read+0x618/0xc20 [ 223.311365][ T7757] ? __pfx_copy_splice_read+0x10/0x10 [ 223.311402][ T7757] ? look_up_lock_class+0x59/0x150 [ 223.311441][ T7757] ? lockdep_init_map_type+0x5c/0x280 [ 223.311485][ T7757] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 223.311525][ T7757] ? __pfx_copy_splice_read+0x10/0x10 [ 223.311556][ T7757] do_splice_read+0x282/0x370 [ 223.311593][ T7757] splice_direct_to_actor+0x2a1/0xa30 [ 223.311630][ T7757] ? __pfx_direct_splice_actor+0x10/0x10 [ 223.311672][ T7757] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 223.311720][ T7757] do_splice_direct+0x174/0x240 [ 223.311754][ T7757] ? __pfx_do_splice_direct+0x10/0x10 [ 223.311787][ T7757] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 223.311819][ T7757] ? bpf_lsm_file_permission+0x9/0x10 [ 223.311859][ T7757] ? security_file_permission+0x71/0x210 [ 223.311900][ T7757] ? rw_verify_area+0xcf/0x6c0 [ 223.311935][ T7757] do_sendfile+0xb06/0xe50 [ 223.311976][ T7757] ? __pfx_do_sendfile+0x10/0x10 [ 223.312026][ T7757] ? __x64_sys_futex+0x1e0/0x4c0 [ 223.312062][ T7757] ? __x64_sys_futex+0x1e9/0x4c0 [ 223.312106][ T7757] __x64_sys_sendfile64+0x1d8/0x220 [ 223.312150][ T7757] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 223.312208][ T7757] do_syscall_64+0xcd/0x4c0 [ 223.312244][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.312274][ T7757] RIP: 0033:0x7f2f2318eec9 [ 223.312299][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.312327][ T7757] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.312356][ T7757] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 223.312376][ T7757] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 223.312392][ T7757] RBP: 00007f2f23211f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.312410][ T7757] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 223.312428][ T7757] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 223.312468][ T7757] [ 223.617437][ T5848] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 223.617474][ T5848] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 223.634108][ T5848] Bluetooth: hci2: Dropping invalid advertising data [ 223.642405][ T5848] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 223.642447][ T5848] Bluetooth: hci2: Dropping invalid advertising data [ 223.656637][ T5848] Bluetooth: hci2: Malformed LE Event: 0x02 [ 226.142054][ T7808] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.754649][ T7821] netlink: 326 bytes leftover after parsing attributes in process `syz.0.442'. [ 226.947761][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 227.690786][ T7824] bond0: option fail_over_mac: invalid value () [ 227.934300][ T7838] netlink: 342 bytes leftover after parsing attributes in process `syz.3.444'. [ 235.441064][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 235.454391][ T7915] Line length is too long: Should be less than 4094 [ 239.730475][ T7960] FAULT_INJECTION: forcing a failure. [ 239.730475][ T7960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.745603][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) [ 239.745641][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.745656][ T7960] Call Trace: [ 239.745665][ T7960] [ 239.745676][ T7960] dump_stack_lvl+0x16c/0x1f0 [ 239.745715][ T7960] should_fail_ex+0x512/0x640 [ 239.745755][ T7960] should_fail_alloc_page+0xe7/0x130 [ 239.745804][ T7960] prepare_alloc_pages+0x3c2/0x610 [ 239.745846][ T7960] ? rcu_is_watching+0x12/0xc0 [ 239.745875][ T7960] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 239.745899][ T7960] ? css_rstat_updated+0x1c2/0x510 [ 239.745919][ T7960] ? __pfx_css_rstat_updated+0x10/0x10 [ 239.745947][ T7960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 239.745979][ T7960] ? __lock_acquire+0x62e/0x1ce0 [ 239.746008][ T7960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.746040][ T7960] ? policy_nodemask+0xea/0x4e0 [ 239.746068][ T7960] alloc_pages_mpol+0x1fb/0x550 [ 239.746094][ T7960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 239.746121][ T7960] ? __lock_acquire+0x62e/0x1ce0 [ 239.746148][ T7960] folio_alloc_mpol_noprof+0x36/0x2f0 [ 239.746179][ T7960] vma_alloc_folio_noprof+0xed/0x1e0 [ 239.746207][ T7960] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 239.746243][ T7960] do_pte_missing+0x2230/0x3ba0 [ 239.746263][ T7960] ? find_held_lock+0x2b/0x80 [ 239.746287][ T7960] __handle_mm_fault+0x152a/0x2a50 [ 239.746313][ T7960] ? __pfx___handle_mm_fault+0x10/0x10 [ 239.746334][ T7960] ? __pte_offset_map_lock+0x174/0x310 [ 239.746361][ T7960] ? find_held_lock+0x2b/0x80 [ 239.746386][ T7960] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 239.746421][ T7960] handle_mm_fault+0x589/0xd10 [ 239.746445][ T7960] __get_user_pages+0x551/0x34a0 [ 239.746482][ T7960] ? __pfx___get_user_pages+0x10/0x10 [ 239.746517][ T7960] populate_vma_page_range+0x267/0x3f0 [ 239.746536][ T7960] ? __pfx_populate_vma_page_range+0x10/0x10 [ 239.746553][ T7960] ? __pfx_find_vma_intersection+0x10/0x10 [ 239.746581][ T7960] ? do_mmap+0x69c/0x1210 [ 239.746610][ T7960] __mm_populate+0x1d8/0x380 [ 239.746628][ T7960] ? __pfx___mm_populate+0x10/0x10 [ 239.746648][ T7960] ? up_write+0x1b2/0x520 [ 239.746691][ T7960] vm_mmap_pgoff+0x37f/0x470 [ 239.746736][ T7960] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 239.746777][ T7960] ? __x64_sys_futex+0x1e0/0x4c0 [ 239.746807][ T7960] ? __x64_sys_futex+0x1e9/0x4c0 [ 239.746834][ T7960] ksys_mmap_pgoff+0x7d/0x5c0 [ 239.746859][ T7960] ? xfd_validate_state+0x61/0x180 [ 239.746886][ T7960] ? __pfx___do_sys_close_range+0x10/0x10 [ 239.746912][ T7960] __x64_sys_mmap+0x125/0x190 [ 239.746932][ T7960] do_syscall_64+0xcd/0x4c0 [ 239.746954][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.746972][ T7960] RIP: 0033:0x7f493a18eec9 [ 239.746987][ T7960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.747004][ T7960] RSP: 002b:00007f493b0bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 239.747022][ T7960] RAX: ffffffffffffffda RBX: 00007f493a3e5fa0 RCX: 00007f493a18eec9 [ 239.747033][ T7960] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 239.747046][ T7960] RBP: 00007f493a211f91 R08: 0000000000000002 R09: 0000000000008000 [ 239.747056][ T7960] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 239.747066][ T7960] R13: 00007f493a3e6038 R14: 00007f493a3e5fa0 R15: 00007ffc33fc9fc8 [ 239.747089][ T7960] [ 240.433085][ T7966] netlink: 330 bytes leftover after parsing attributes in process `syz.3.476'. [ 241.339683][ T7978] can0: slcan on pty66. [ 241.444410][ T7980] can0 (unregistered): slcan off pty66. [ 243.064319][ T7995] FAULT_INJECTION: forcing a failure. [ 243.064319][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 243.077965][ T7995] CPU: 1 UID: 0 PID: 7995 Comm: syz.0.485 Not tainted syzkaller #0 PREEMPT(full) [ 243.077996][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.078007][ T7995] Call Trace: [ 243.078014][ T7995] [ 243.078021][ T7995] dump_stack_lvl+0x16c/0x1f0 [ 243.078050][ T7995] should_fail_ex+0x512/0x640 [ 243.078073][ T7995] ? __kvmalloc_node_noprof+0x124/0x620 [ 243.078098][ T7995] should_failslab+0xc2/0x120 [ 243.078124][ T7995] __kvmalloc_node_noprof+0x137/0x620 [ 243.078148][ T7995] ? io_alloc_cache_init+0x33/0x170 [ 243.078173][ T7995] ? io_alloc_cache_init+0x33/0x170 [ 243.078192][ T7995] io_alloc_cache_init+0x33/0x170 [ 243.078214][ T7995] io_uring_setup+0x656/0x20c0 [ 243.078246][ T7995] ? __pfx_io_uring_setup+0x10/0x10 [ 243.078275][ T7995] ? do_futex+0x122/0x350 [ 243.078300][ T7995] ? __pfx_do_futex+0x10/0x10 [ 243.078325][ T7995] ? __pfx___might_resched+0x10/0x10 [ 243.078354][ T7995] ? xfd_validate_state+0x61/0x180 [ 243.078382][ T7995] ? __pfx___do_sys_close_range+0x10/0x10 [ 243.078410][ T7995] __x64_sys_io_uring_setup+0xc2/0x170 [ 243.078440][ T7995] do_syscall_64+0xcd/0x4c0 [ 243.078464][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.078483][ T7995] RIP: 0033:0x7fad5638eec9 [ 243.078498][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.078516][ T7995] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 243.078534][ T7995] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 243.078546][ T7995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 243.078557][ T7995] RBP: 00007fad56411f91 R08: 0000000000000000 R09: 0000000000000000 [ 243.078567][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.078578][ T7995] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 243.078601][ T7995] [ 243.866394][ T8000] FAULT_INJECTION: forcing a failure. [ 243.866394][ T8000] name failslab, interval 1, probability 0, space 0, times 0 [ 243.905434][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: syz.0.487 Not tainted syzkaller #0 PREEMPT(full) [ 243.905473][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.905487][ T8000] Call Trace: [ 243.905496][ T8000] [ 243.905507][ T8000] dump_stack_lvl+0x16c/0x1f0 [ 243.905545][ T8000] should_fail_ex+0x512/0x640 [ 243.905576][ T8000] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 243.905619][ T8000] should_failslab+0xc2/0x120 [ 243.905657][ T8000] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 243.905690][ T8000] ? inode_set_ctime_current+0x2a1/0x8f0 [ 243.905728][ T8000] ? __d_alloc+0x32/0xae0 [ 243.905766][ T8000] __d_alloc+0x32/0xae0 [ 243.905805][ T8000] d_alloc_pseudo+0x1c/0xc0 [ 243.905848][ T8000] alloc_file_pseudo+0xcf/0x230 [ 243.905893][ T8000] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 243.905940][ T8000] ? hugetlbfs_get_inode+0x31f/0x730 [ 243.905983][ T8000] hugetlb_file_setup+0x4ce/0x620 [ 243.906030][ T8000] ksys_mmap_pgoff+0x189/0x5c0 [ 243.906079][ T8000] __x64_sys_mmap+0x125/0x190 [ 243.906113][ T8000] do_syscall_64+0xcd/0x4c0 [ 243.906154][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.906183][ T8000] RIP: 0033:0x7fad5638eec9 [ 243.906206][ T8000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.906232][ T8000] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 243.906259][ T8000] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 243.906278][ T8000] RDX: 0000000000000002 RSI: 00000c0000000000 RDI: 0000000000000000 [ 243.906294][ T8000] RBP: 00007fad57230090 R08: ffffffffffffffff R09: 0000308000000000 [ 243.906311][ T8000] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000001 [ 243.906327][ T8000] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 243.906366][ T8000] [ 244.890775][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.917141][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.927956][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.945559][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.956136][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.311483][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 247.053755][ T5859] Bluetooth: hci4: command tx timeout [ 247.072778][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.113091][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.148794][ T8013] bridge_slave_0: entered allmulticast mode [ 247.157588][ T8013] bridge_slave_0: entered promiscuous mode [ 247.191247][ T8040] FAULT_INJECTION: forcing a failure. [ 247.191247][ T8040] name failslab, interval 1, probability 0, space 0, times 0 [ 247.204513][ T8040] CPU: 1 UID: 0 PID: 8040 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(full) [ 247.204539][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.204549][ T8040] Call Trace: [ 247.204555][ T8040] [ 247.204562][ T8040] dump_stack_lvl+0x16c/0x1f0 [ 247.204588][ T8040] should_fail_ex+0x512/0x640 [ 247.204612][ T8040] should_failslab+0xc2/0x120 [ 247.204638][ T8040] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 247.204661][ T8040] ? skb_clone+0x190/0x3f0 [ 247.204685][ T8040] skb_clone+0x190/0x3f0 [ 247.204705][ T8040] netlink_deliver_tap+0xabd/0xd30 [ 247.204730][ T8040] netlink_unicast+0x64c/0x870 [ 247.204762][ T8040] ? __pfx_netlink_unicast+0x10/0x10 [ 247.204783][ T8040] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 247.204802][ T8040] ? __lock_acquire+0xb97/0x1ce0 [ 247.204834][ T8040] netlink_sendmsg+0x8d1/0xdd0 [ 247.204858][ T8040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.204882][ T8040] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 247.204908][ T8040] ____sys_sendmsg+0xa98/0xc70 [ 247.204934][ T8040] ? copy_msghdr_from_user+0x10a/0x160 [ 247.204953][ T8040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.204989][ T8040] ___sys_sendmsg+0x134/0x1d0 [ 247.205010][ T8040] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.205058][ T8040] __sys_sendmsg+0x16d/0x220 [ 247.205078][ T8040] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.205112][ T8040] do_syscall_64+0xcd/0x4c0 [ 247.205134][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.205153][ T8040] RIP: 0033:0x7f493a18eec9 [ 247.205167][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.205184][ T8040] RSP: 002b:00007f493b0bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.205202][ T8040] RAX: ffffffffffffffda RBX: 00007f493a3e5fa0 RCX: 00007f493a18eec9 [ 247.205213][ T8040] RDX: 0000000000008810 RSI: 0000200000001440 RDI: 0000000000000003 [ 247.205224][ T8040] RBP: 00007f493b0bc090 R08: 0000000000000000 R09: 0000000000000000 [ 247.205234][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.205244][ T8040] R13: 00007f493a3e6038 R14: 00007f493a3e5fa0 R15: 00007ffc33fc9fc8 [ 247.205265][ T8040] [ 247.221461][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.548155][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.555642][ T8013] bridge_slave_1: entered allmulticast mode [ 247.609806][ T8013] bridge_slave_1: entered promiscuous mode [ 248.153638][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.228564][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.381180][ T8013] team0: Port device team_slave_0 added [ 248.420657][ T8013] team0: Port device team_slave_1 added [ 248.782584][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.865413][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.045084][ T8013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.109409][ T5848] Bluetooth: hci4: command tx timeout [ 249.131373][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.217743][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.315775][ T8013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.386915][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 249.421534][ T8062] netlink: 25 bytes leftover after parsing attributes in process `syz.3.502'. [ 249.491485][ T8013] hsr_slave_0: entered promiscuous mode [ 249.564213][ T8013] hsr_slave_1: entered promiscuous mode [ 249.571000][ T8013] debugfs: 'hsr0' already exists in 'hsr' [ 249.576914][ T8013] Cannot create hsr debugfs directory [ 249.639631][ T8060] mkiss: ax0: crc mode is auto. [ 249.999616][ T8070] FAULT_INJECTION: forcing a failure. [ 249.999616][ T8070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.056991][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.0.505 Not tainted syzkaller #0 PREEMPT(full) [ 250.057017][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.057027][ T8070] Call Trace: [ 250.057033][ T8070] [ 250.057045][ T8070] dump_stack_lvl+0x16c/0x1f0 [ 250.057072][ T8070] should_fail_ex+0x512/0x640 [ 250.057097][ T8070] _copy_to_user+0x32/0xd0 [ 250.057121][ T8070] tomoyo_flush+0x161/0x520 [ 250.057155][ T8070] tomoyo_set_string+0xaf/0xe0 [ 250.057185][ T8070] tomoyo_read_exception+0x313/0xc30 [ 250.057211][ T8070] tomoyo_read_control+0x29c/0x540 [ 250.057234][ T8070] ? __pfx_tomoyo_read+0x10/0x10 [ 250.057263][ T8070] vfs_read+0x1e1/0xcf0 [ 250.057289][ T8070] ? __pfx___mutex_lock+0x10/0x10 [ 250.057310][ T8070] ? __pfx_vfs_read+0x10/0x10 [ 250.057338][ T8070] ? __fget_files+0x20e/0x3c0 [ 250.057365][ T8070] ksys_read+0x12a/0x250 [ 250.057387][ T8070] ? __pfx_ksys_read+0x10/0x10 [ 250.057415][ T8070] do_syscall_64+0xcd/0x4c0 [ 250.057437][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.057456][ T8070] RIP: 0033:0x7fad5638eec9 [ 250.057471][ T8070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.057488][ T8070] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.057505][ T8070] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 250.057516][ T8070] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000005 [ 250.057527][ T8070] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 250.057537][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.057547][ T8070] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 250.057570][ T8070] [ 250.651446][ T8075] FAULT_INJECTION: forcing a failure. [ 250.651446][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.692087][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.0.506 Not tainted syzkaller #0 PREEMPT(full) [ 250.692126][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.692141][ T8075] Call Trace: [ 250.692150][ T8075] [ 250.692160][ T8075] dump_stack_lvl+0x16c/0x1f0 [ 250.692199][ T8075] should_fail_ex+0x512/0x640 [ 250.692237][ T8075] _copy_from_iter+0x29f/0x1720 [ 250.692281][ T8075] ? __pfx__copy_from_iter+0x10/0x10 [ 250.692316][ T8075] ? find_held_lock+0x2b/0x80 [ 250.692347][ T8075] ? pfn_valid+0x26a/0x4d0 [ 250.692386][ T8075] copy_page_from_iter+0xde/0x180 [ 250.692425][ T8075] bio_copy_from_iter+0x11e/0x280 [ 250.692471][ T8075] blk_rq_map_user_iov+0x981/0x13b0 [ 250.692520][ T8075] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 250.692566][ T8075] ? __pfx___might_resched+0x10/0x10 [ 250.692599][ T8075] ? rcu_is_watching+0x12/0xc0 [ 250.692630][ T8075] ? trace_contention_end+0xdd/0x130 [ 250.692668][ T8075] ? find_held_lock+0x2b/0x80 [ 250.692707][ T8075] ? sg_common_write.constprop.0+0xbf9/0x1c90 [ 250.692750][ T8075] ? import_ubuf+0x1b6/0x220 [ 250.692786][ T8075] blk_rq_map_user_io+0x1ff/0x230 [ 250.692829][ T8075] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 250.692868][ T8075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.692920][ T8075] sg_common_write.constprop.0+0xd43/0x1c90 [ 250.692982][ T8075] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 250.693044][ T8075] sg_write+0x813/0xe10 [ 250.693092][ T8075] ? __pfx_sg_write+0x10/0x10 [ 250.693144][ T8075] ? __pfx_aa_file_perm+0x10/0x10 [ 250.693205][ T8075] ? bpf_lsm_file_permission+0x9/0x10 [ 250.693249][ T8075] ? security_file_permission+0x71/0x210 [ 250.693293][ T8075] ? rw_verify_area+0xcf/0x6c0 [ 250.693327][ T8075] ? __pfx_sg_write+0x10/0x10 [ 250.693367][ T8075] vfs_writev+0x5df/0xde0 [ 250.693410][ T8075] ? __pfx_vfs_writev+0x10/0x10 [ 250.693471][ T8075] ? __fget_files+0x20e/0x3c0 [ 250.693503][ T8075] ? __fget_files+0x200/0x3c0 [ 250.693544][ T8075] ? do_writev+0x132/0x340 [ 250.693573][ T8075] do_writev+0x132/0x340 [ 250.693604][ T8075] ? __pfx_do_writev+0x10/0x10 [ 250.693649][ T8075] do_syscall_64+0xcd/0x4c0 [ 250.693692][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.693722][ T8075] RIP: 0033:0x7fad5638eec9 [ 250.693745][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.693771][ T8075] RSP: 002b:00007fad5720f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 250.693799][ T8075] RAX: ffffffffffffffda RBX: 00007fad565e6090 RCX: 00007fad5638eec9 [ 250.693818][ T8075] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 250.693835][ T8075] RBP: 00007fad5720f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.693852][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.693869][ T8075] R13: 00007fad565e6128 R14: 00007fad565e6090 R15: 00007ffef05834c8 [ 250.693907][ T8075] [ 251.299213][ T5848] Bluetooth: hci4: command tx timeout [ 251.980488][ T8013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.046097][ T8013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.237943][ T8013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.368425][ T8013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.517893][ T8093] netlink: 252 bytes leftover after parsing attributes in process `syz.0.509'. [ 253.339646][ T5848] Bluetooth: hci4: command tx timeout [ 253.610252][ T8013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.779434][ T8013] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.881781][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.889127][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.982752][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.990105][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.976879][ T8130] netlink: 186 bytes leftover after parsing attributes in process `syz.2.515'. [ 254.990274][ T8128] FAULT_INJECTION: forcing a failure. [ 254.990274][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.006037][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.2.515 Not tainted syzkaller #0 PREEMPT(full) [ 255.006077][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.006093][ T8128] Call Trace: [ 255.006103][ T8128] [ 255.006114][ T8128] dump_stack_lvl+0x16c/0x1f0 [ 255.006154][ T8128] should_fail_ex+0x512/0x640 [ 255.006195][ T8128] _copy_from_iter+0x29f/0x1720 [ 255.006236][ T8128] ? __alloc_skb+0x200/0x380 [ 255.006267][ T8128] ? __pfx__copy_from_iter+0x10/0x10 [ 255.006305][ T8128] ? __pfx___might_resched+0x10/0x10 [ 255.006336][ T8128] ? __lock_acquire+0xb97/0x1ce0 [ 255.006386][ T8128] netlink_sendmsg+0x829/0xdd0 [ 255.006434][ T8128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.006474][ T8128] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 255.006516][ T8128] ____sys_sendmsg+0xa98/0xc70 [ 255.006557][ T8128] ? copy_msghdr_from_user+0x10a/0x160 [ 255.006589][ T8128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.006636][ T8128] ? __pfx__kstrtoull+0x10/0x10 [ 255.006699][ T8128] ___sys_sendmsg+0x134/0x1d0 [ 255.006732][ T8128] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.006785][ T8128] ? find_held_lock+0x2b/0x80 [ 255.006840][ T8128] __sys_sendmmsg+0x200/0x420 [ 255.006878][ T8128] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.006925][ T8128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.006985][ T8128] ? fput+0x9b/0xd0 [ 255.007028][ T8128] ? ksys_write+0x1ac/0x250 [ 255.007061][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 255.007103][ T8128] __x64_sys_sendmmsg+0x9c/0x100 [ 255.007135][ T8128] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.007166][ T8128] do_syscall_64+0xcd/0x4c0 [ 255.007201][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.007230][ T8128] RIP: 0033:0x7f2f2318eec9 [ 255.007254][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.007281][ T8128] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.007310][ T8128] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 255.007328][ T8128] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.007344][ T8128] RBP: 00007f2f24035090 R08: 0000000000000000 R09: 0000000000000000 [ 255.007361][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.007377][ T8128] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 255.007416][ T8128] [ 256.044223][ T8013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.603526][ T8153] mkiss: ax0: crc mode is auto. [ 256.905976][ T8166] random: crng reseeded on system resumption [ 256.990826][ T8013] veth0_vlan: entered promiscuous mode [ 257.020231][ T8013] veth1_vlan: entered promiscuous mode [ 257.213340][ T8013] veth0_macvtap: entered promiscuous mode [ 257.230596][ T8013] veth1_macvtap: entered promiscuous mode [ 257.286086][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.321751][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.356043][ T1317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.377449][ T1317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.404838][ T1317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.423478][ T8174] FAULT_INJECTION: forcing a failure. [ 257.423478][ T8174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.445461][ T1317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.510588][ T8174] CPU: 1 UID: 0 PID: 8174 Comm: syz.3.525 Not tainted syzkaller #0 PREEMPT(full) [ 257.510628][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.510643][ T8174] Call Trace: [ 257.510651][ T8174] [ 257.510661][ T8174] dump_stack_lvl+0x16c/0x1f0 [ 257.510697][ T8174] should_fail_ex+0x512/0x640 [ 257.510735][ T8174] should_fail_alloc_page+0xe7/0x130 [ 257.510776][ T8174] prepare_alloc_pages+0x3c2/0x610 [ 257.510816][ T8174] ? find_held_lock+0x2b/0x80 [ 257.510848][ T8174] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 257.510898][ T8174] ? kernel_text_address+0x8d/0x100 [ 257.510947][ T8174] ? __kernel_text_address+0xd/0x40 [ 257.510995][ T8174] ? do_raw_spin_lock+0x12c/0x2b0 [ 257.511036][ T8174] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 257.511078][ T8174] ? rcu_is_watching+0x12/0xc0 [ 257.511110][ T8174] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.511153][ T8174] ? stack_depot_save_flags+0x3de/0x9c0 [ 257.511192][ T8174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.511237][ T8174] ? policy_nodemask+0xea/0x4e0 [ 257.511278][ T8174] alloc_pages_mpol+0x1fb/0x550 [ 257.511316][ T8174] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 257.511365][ T8174] alloc_pages_noprof+0x131/0x390 [ 257.511402][ T8174] kimage_alloc_pages+0x75/0x350 [ 257.511449][ T8174] kimage_alloc_control_pages+0x153/0xa00 [ 257.511487][ T8174] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 257.511528][ T8174] do_kexec_load+0x478/0x8a0 [ 257.511559][ T8174] ? __pfx_do_kexec_load+0x10/0x10 [ 257.511591][ T8174] ? _copy_from_user+0x59/0xd0 [ 257.511634][ T8174] __x64_sys_kexec_load+0x1bf/0x230 [ 257.511665][ T8174] do_syscall_64+0xcd/0x4c0 [ 257.511698][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.511726][ T8174] RIP: 0033:0x7f493a18eec9 [ 257.511749][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.511775][ T8174] RSP: 002b:00007f493b09b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 257.511801][ T8174] RAX: ffffffffffffffda RBX: 00007f493a3e6090 RCX: 00007f493a18eec9 [ 257.511819][ T8174] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 257.511835][ T8174] RBP: 00007f493b09b090 R08: 0000000000000000 R09: 0000000000000000 [ 257.511851][ T8174] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 257.511866][ T8174] R13: 00007f493a3e6128 R14: 00007f493a3e6090 R15: 00007ffc33fc9fc8 [ 257.511912][ T8174] [ 257.699877][ T8174] kexec: Could not allocate control_code_buffer [ 257.953595][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.020332][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.177909][ T8183] random: crng reseeded on system resumption [ 258.311935][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.352475][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.503456][ T8185] FAULT_INJECTION: forcing a failure. [ 258.503456][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 258.604844][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 258.604888][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.604905][ T8185] Call Trace: [ 258.604916][ T8185] [ 258.604928][ T8185] dump_stack_lvl+0x16c/0x1f0 [ 258.604968][ T8185] should_fail_ex+0x512/0x640 [ 258.605003][ T8185] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 258.605048][ T8185] should_failslab+0xc2/0x120 [ 258.605090][ T8185] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 258.605127][ T8185] ? vma_merge_new_range+0x3ae/0xa50 [ 258.605161][ T8185] ? vm_area_alloc+0x1f/0x160 [ 258.605198][ T8185] vm_area_alloc+0x1f/0x160 [ 258.605230][ T8185] __mmap_region+0xf90/0x27b0 [ 258.605273][ T8185] ? __pfx___mmap_region+0x10/0x10 [ 258.605324][ T8185] ? __pfx___schedule+0x10/0x10 [ 258.605349][ T8185] ? trace_sched_exit_tp+0xd1/0x120 [ 258.605478][ T8185] ? trace_cap_capable+0x18d/0x200 [ 258.605530][ T8185] mmap_region+0x1ab/0x3f0 [ 258.605568][ T8185] ? __get_unmapped_area+0x267/0x440 [ 258.605627][ T8185] do_mmap+0xa3e/0x1210 [ 258.605680][ T8185] ? __pfx_do_mmap+0x10/0x10 [ 258.605726][ T8185] ? __pfx_down_write_killable+0x10/0x10 [ 258.605772][ T8185] vm_mmap_pgoff+0x29e/0x470 [ 258.605826][ T8185] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 258.605881][ T8185] ? __x64_sys_futex+0x1e0/0x4c0 [ 258.605918][ T8185] ? __x64_sys_futex+0x1e9/0x4c0 [ 258.605961][ T8185] ksys_mmap_pgoff+0x7d/0x5c0 [ 258.606003][ T8185] ? xfd_validate_state+0x61/0x180 [ 258.606056][ T8185] __x64_sys_mmap+0x125/0x190 [ 258.606091][ T8185] do_syscall_64+0xcd/0x4c0 [ 258.606128][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.606160][ T8185] RIP: 0033:0x7fad5638eec9 [ 258.606185][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.606213][ T8185] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 258.606242][ T8185] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 258.606262][ T8185] RDX: 00000000000000df RSI: 0000000000420009 RDI: 0000000000000000 [ 258.606279][ T8185] RBP: 00007fad56411f91 R08: 0000000000000401 R09: 0000000000008000 [ 258.606297][ T8185] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 258.606314][ T8185] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 258.606355][ T8185] [ 259.410185][ T8202] FAULT_INJECTION: forcing a failure. [ 259.410185][ T8202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.431450][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.0.531 Not tainted syzkaller #0 PREEMPT(full) [ 259.431476][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.431487][ T8202] Call Trace: [ 259.431493][ T8202] [ 259.431499][ T8202] dump_stack_lvl+0x16c/0x1f0 [ 259.431524][ T8202] should_fail_ex+0x512/0x640 [ 259.431549][ T8202] should_fail_alloc_page+0xe7/0x130 [ 259.431576][ T8202] prepare_alloc_pages+0x3c2/0x610 [ 259.431608][ T8202] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 259.431637][ T8202] ? kfree_skbmem+0x1a4/0x1f0 [ 259.431664][ T8202] ? consume_skb+0xcc/0x100 [ 259.431689][ T8202] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.431713][ T8202] ? __local_bh_enable_ip+0xa4/0x120 [ 259.431735][ T8202] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.431753][ T8202] ? __dev_queue_xmit+0xaf1/0x4490 [ 259.431779][ T8202] ? __local_bh_enable_ip+0xa4/0x120 [ 259.431798][ T8202] ? __dev_queue_xmit+0xaf1/0x4490 [ 259.431830][ T8202] ? __lock_acquire+0x62e/0x1ce0 [ 259.431856][ T8202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.431886][ T8202] ? policy_nodemask+0xea/0x4e0 [ 259.431913][ T8202] alloc_pages_mpol+0x1fb/0x550 [ 259.431946][ T8202] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 259.431978][ T8202] folio_alloc_mpol_noprof+0x36/0x2f0 [ 259.432008][ T8202] shmem_alloc_folio+0x135/0x160 [ 259.432027][ T8202] shmem_alloc_and_add_folio+0x499/0xc20 [ 259.432053][ T8202] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 259.432077][ T8202] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 259.432103][ T8202] shmem_get_folio_gfp+0x67f/0x1600 [ 259.432130][ T8202] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 259.432154][ T8202] ? filemap_map_pages+0xf58/0x1670 [ 259.432179][ T8202] shmem_fault+0x1fe/0xa30 [ 259.432201][ T8202] ? __pfx_shmem_fault+0x10/0x10 [ 259.432226][ T8202] ? __pfx_filemap_map_pages+0x10/0x10 [ 259.432255][ T8202] ? __pfx_filemap_map_pages+0x10/0x10 [ 259.432276][ T8202] __do_fault+0x10a/0x490 [ 259.432301][ T8202] ? __pfx_filemap_map_pages+0x10/0x10 [ 259.432322][ T8202] do_pte_missing+0xf50/0x3ba0 [ 259.432341][ T8202] ? find_held_lock+0x2b/0x80 [ 259.432360][ T8202] ? __handle_mm_fault+0x14fd/0x2a50 [ 259.432382][ T8202] __handle_mm_fault+0x152a/0x2a50 [ 259.432403][ T8202] ? mt_find+0x3ef/0xa30 [ 259.432427][ T8202] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.432444][ T8202] ? __pfx_mt_find+0x10/0x10 [ 259.432478][ T8202] ? find_vma+0xbf/0x140 [ 259.432502][ T8202] ? __pfx_find_vma+0x10/0x10 [ 259.432529][ T8202] handle_mm_fault+0x589/0xd10 [ 259.432549][ T8202] ? trace_raw_output_exceptions+0x131/0x150 [ 259.432581][ T8202] do_user_addr_fault+0x7a6/0x1370 [ 259.432601][ T8202] ? rcu_is_watching+0x12/0xc0 [ 259.432623][ T8202] exc_page_fault+0x5c/0xb0 [ 259.432641][ T8202] asm_exc_page_fault+0x26/0x30 [ 259.432659][ T8202] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 259.432686][ T8202] Code: 1e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 1e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 259.432703][ T8202] RSP: 0018:ffffc900044bf9d0 EFLAGS: 00050202 [ 259.432718][ T8202] RAX: 0000000000000001 RBX: 000000000000ffd8 RCX: 000000000000efd8 [ 259.432729][ T8202] RDX: ffffed100978dffb RSI: 0000000000001000 RDI: ffff88804bc61000 [ 259.432740][ T8202] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100978dffa [ 259.432750][ T8202] R10: ffff88804bc6ffd7 R11: 0000000000000000 R12: ffffc900044bfc58 [ 259.432760][ T8202] R13: 000000000000ffd8 R14: ffff88804bc60000 R15: 00007ffffffff000 [ 259.432782][ T8202] _copy_from_iter+0x383/0x1720 [ 259.432808][ T8202] ? rcu_is_watching+0x12/0xc0 [ 259.432827][ T8202] ? __pfx__copy_from_iter+0x10/0x10 [ 259.432846][ T8202] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 259.432869][ T8202] ? __asan_memset+0x23/0x50 [ 259.432887][ T8202] ? __build_skb_around+0x278/0x3b0 [ 259.432915][ T8202] ? is_vmalloc_addr+0x86/0xa0 [ 259.432946][ T8202] netlink_sendmsg+0x829/0xdd0 [ 259.432971][ T8202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.432995][ T8202] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 259.433020][ T8202] sock_write_iter+0x566/0x610 [ 259.433046][ T8202] ? __pfx_sock_write_iter+0x10/0x10 [ 259.433080][ T8202] ? bpf_lsm_file_permission+0x9/0x10 [ 259.433106][ T8202] ? security_file_permission+0x71/0x210 [ 259.433135][ T8202] ? rw_verify_area+0xcf/0x6c0 [ 259.433156][ T8202] vfs_write+0x7d3/0x11d0 [ 259.433178][ T8202] ? __pfx_sock_write_iter+0x10/0x10 [ 259.433205][ T8202] ? __pfx_vfs_write+0x10/0x10 [ 259.433225][ T8202] ? find_held_lock+0x2b/0x80 [ 259.433256][ T8202] ksys_write+0x1f8/0x250 [ 259.433277][ T8202] ? __pfx_ksys_write+0x10/0x10 [ 259.433305][ T8202] do_syscall_64+0xcd/0x4c0 [ 259.433327][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.433345][ T8202] RIP: 0033:0x7fad5638eec9 [ 259.433359][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.433375][ T8202] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.433390][ T8202] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 259.433401][ T8202] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 259.433411][ T8202] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 259.433421][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.433431][ T8202] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 259.433453][ T8202] [ 261.064637][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.073105][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.383491][ T8223] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 261.473668][ T8227] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 263.721143][ T5848] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 264.687775][ T8272] netlink: 342 bytes leftover after parsing attributes in process `syz.2.545'. [ 264.706616][ T8272] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.769057][ T8272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.777011][ T8272] IPv6: NLM_F_CREATE should be set when creating new route [ 264.784273][ T8272] IPv6: NLM_F_CREATE should be set when creating new route [ 265.166003][ T5848] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 265.802855][ T8287] netlink: 342 bytes leftover after parsing attributes in process `syz.4.548'. [ 265.944049][ T8291] netlink: 342 bytes leftover after parsing attributes in process `syz.4.548'. [ 266.030135][ T8291] netlink: 342 bytes leftover after parsing attributes in process `syz.4.548'. [ 266.112526][ T8291] netlink: 342 bytes leftover after parsing attributes in process `syz.4.548'. [ 266.222442][ T8291] netlink: 342 bytes leftover after parsing attributes in process `syz.4.548'. [ 267.096242][ T8298] netlink: 330 bytes leftover after parsing attributes in process `syz.2.551'. [ 267.189910][ T8298] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 267.791441][ T8298] random: crng reseeded on system resumption [ 272.813735][ T8391] FAULT_INJECTION: forcing a failure. [ 272.813735][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 272.831588][ T8381] block nbd9: NBD_DISCONNECT [ 272.874075][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz.4.570 Not tainted syzkaller #0 PREEMPT(full) [ 272.874102][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.874112][ T8391] Call Trace: [ 272.874119][ T8391] [ 272.874126][ T8391] dump_stack_lvl+0x16c/0x1f0 [ 272.874152][ T8391] should_fail_ex+0x512/0x640 [ 272.874174][ T8391] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 272.874199][ T8391] should_failslab+0xc2/0x120 [ 272.874225][ T8391] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 272.874248][ T8391] ? vm_area_dup+0x27/0x8d0 [ 272.874271][ T8391] vm_area_dup+0x27/0x8d0 [ 272.874291][ T8391] __split_vma+0x18e/0x1070 [ 272.874315][ T8391] ? __pfx___split_vma+0x10/0x10 [ 272.874335][ T8391] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 272.874366][ T8391] vms_gather_munmap_vmas+0x3b1/0x1340 [ 272.874392][ T8391] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 272.874424][ T8391] ? __pfx_copy_vma+0x10/0x10 [ 272.874453][ T8391] do_vmi_align_munmap+0x27c/0x7d0 [ 272.874478][ T8391] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 272.874539][ T8391] do_vmi_munmap+0x204/0x3e0 [ 272.874563][ T8391] move_vma+0x809/0x1780 [ 272.874589][ T8391] ? __pfx_move_vma+0x10/0x10 [ 272.874608][ T8391] ? mm_get_unmapped_area+0x95/0xe0 [ 272.874637][ T8391] ? shmem_get_unmapped_area+0x170/0xa00 [ 272.874664][ T8391] ? vrm_set_new_addr+0x208/0x290 [ 272.874687][ T8391] mremap_to+0x1b7/0x450 [ 272.874709][ T8391] do_mremap+0xd91/0x2030 [ 272.874733][ T8391] ? get_pid_task+0x106/0x250 [ 272.874760][ T8391] ? proc_fail_nth_write+0x9f/0x220 [ 272.874781][ T8391] ? find_held_lock+0x2b/0x80 [ 272.874800][ T8391] ? __pfx_do_mremap+0x10/0x10 [ 272.874824][ T8391] ? find_held_lock+0x2b/0x80 [ 272.874842][ T8391] ? ksys_write+0x190/0x250 [ 272.874869][ T8391] __do_sys_mremap+0x119/0x170 [ 272.874891][ T8391] ? __pfx___do_sys_mremap+0x10/0x10 [ 272.874911][ T8391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.874953][ T8391] do_syscall_64+0xcd/0x4c0 [ 272.874975][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.874994][ T8391] RIP: 0033:0x7fb60e58eec9 [ 272.875008][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.875025][ T8391] RSP: 002b:00007fb60f390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 272.875043][ T8391] RAX: ffffffffffffffda RBX: 00007fb60e7e5fa0 RCX: 00007fb60e58eec9 [ 272.875054][ T8391] RDX: 0000000000013fd4 RSI: 00000000000000b8 RDI: 0000000000004000 [ 272.875064][ T8391] RBP: 00007fb60f390090 R08: 00000000fffff000 R09: 0000000000000000 [ 272.875075][ T8391] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 272.875090][ T8391] R13: 00007fb60e7e6038 R14: 00007fb60e7e5fa0 R15: 00007fff76e1bff8 [ 272.875112][ T8391] [ 273.663791][ T8393] FAULT_INJECTION: forcing a failure. [ 273.663791][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 273.663903][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.4.571 Not tainted syzkaller #0 PREEMPT(full) [ 273.663937][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.663954][ T8393] Call Trace: [ 273.663963][ T8393] [ 273.663972][ T8393] dump_stack_lvl+0x16c/0x1f0 [ 273.663997][ T8393] should_fail_ex+0x512/0x640 [ 273.664021][ T8393] should_failslab+0xc2/0x120 [ 273.664047][ T8393] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 273.664070][ T8393] ? dst_alloc+0x99/0x1a0 [ 273.664090][ T8393] dst_alloc+0x99/0x1a0 [ 273.664108][ T8393] rt_dst_alloc+0x35/0x3a0 [ 273.664132][ T8393] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 273.664168][ T8393] ip_route_output_key_hash+0x137/0x2e0 [ 273.664196][ T8393] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 273.664228][ T8393] ? __pfx_stack_trace_save+0x10/0x10 [ 273.664250][ T8393] ? is_bpf_text_address+0x8a/0x1a0 [ 273.664273][ T8393] ? stack_depot_save_flags+0x29/0x9c0 [ 273.664299][ T8393] ip_route_output_flow+0x27/0x150 [ 273.664328][ T8393] tcp_v4_connect+0x899/0x1bb0 [ 273.664360][ T8393] ? __pfx_tcp_v4_connect+0x10/0x10 [ 273.664392][ T8393] __inet_stream_connect+0x914/0xf60 [ 273.664424][ T8393] ? __pfx___inet_stream_connect+0x10/0x10 [ 273.664462][ T8393] tcp_sendmsg_fastopen+0x3ed/0x750 [ 273.664493][ T8393] tcp_sendmsg_locked+0x23ff/0x42a0 [ 273.664534][ T8393] ? __lock_acquire+0xb97/0x1ce0 [ 273.664565][ T8393] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 273.664593][ T8393] ? do_raw_spin_lock+0x12c/0x2b0 [ 273.664622][ T8393] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.664655][ T8393] ? __local_bh_enable_ip+0xa4/0x120 [ 273.664680][ T8393] tcp_sendmsg+0x2e/0x50 [ 273.664703][ T8393] ? __pfx_tcp_sendmsg+0x10/0x10 [ 273.664735][ T8393] inet_sendmsg+0xb9/0x140 [ 273.664765][ T8393] ____sys_sendmsg+0x973/0xc70 [ 273.664793][ T8393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.664823][ T8393] ? __pfx__kstrtoull+0x10/0x10 [ 273.664855][ T8393] ___sys_sendmsg+0x134/0x1d0 [ 273.664877][ T8393] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.664908][ T8393] ? find_held_lock+0x2b/0x80 [ 273.664940][ T8393] __sys_sendmmsg+0x200/0x420 [ 273.664962][ T8393] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.664990][ T8393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.665020][ T8393] ? fput+0x9b/0xd0 [ 273.665046][ T8393] ? ksys_write+0x1ac/0x250 [ 273.665067][ T8393] ? __pfx_ksys_write+0x10/0x10 [ 273.665093][ T8393] __x64_sys_sendmmsg+0x9c/0x100 [ 273.665113][ T8393] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.665131][ T8393] do_syscall_64+0xcd/0x4c0 [ 273.665153][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.665171][ T8393] RIP: 0033:0x7fb60e58eec9 [ 273.665186][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.665203][ T8393] RSP: 002b:00007fb60f390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.665220][ T8393] RAX: ffffffffffffffda RBX: 00007fb60e7e5fa0 RCX: 00007fb60e58eec9 [ 273.665231][ T8393] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 273.665241][ T8393] RBP: 00007fb60f390090 R08: 0000000000000000 R09: 0000000000000000 [ 273.665251][ T8393] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.665261][ T8393] R13: 00007fb60e7e6038 R14: 00007fb60e7e5fa0 R15: 00007fff76e1bff8 [ 273.665296][ T8393] [ 274.956831][ T8400] tty tty51: ldisc open failed (-12), clearing slot 50 [ 274.987080][ T8405] tty tty45: ldisc open failed (-12), clearing slot 44 [ 274.999343][ T8406] tty tty45: ldisc open failed (-12), clearing slot 44 [ 275.505098][ T8432] FAULT_INJECTION: forcing a failure. [ 275.505098][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 275.518310][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.2.579 Not tainted syzkaller #0 PREEMPT(full) [ 275.518335][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.518345][ T8432] Call Trace: [ 275.518353][ T8432] [ 275.518361][ T8432] dump_stack_lvl+0x16c/0x1f0 [ 275.518386][ T8432] should_fail_ex+0x512/0x640 [ 275.518411][ T8432] should_failslab+0xc2/0x120 [ 275.518442][ T8432] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 275.518521][ T8432] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 275.518554][ T8432] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 275.518587][ T8432] idr_get_free+0x528/0xa30 [ 275.518611][ T8432] idr_alloc_u32+0x190/0x2f0 [ 275.518631][ T8432] ? __pfx_idr_alloc_u32+0x10/0x10 [ 275.518648][ T8432] ? do_raw_spin_lock+0x12c/0x2b0 [ 275.518677][ T8432] ? net_generic+0xea/0x2a0 [ 275.518699][ T8432] l2tp_tunnel_register+0xf8/0xbe0 [ 275.518728][ T8432] ? __pfx___debug_object_init+0x10/0x10 [ 275.518758][ T8432] ? sprintf+0xcc/0x100 [ 275.518775][ T8432] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 275.518803][ T8432] ? lockdep_init_map_type+0x5c/0x280 [ 275.518830][ T8432] ? lockdep_init_map_type+0x5c/0x280 [ 275.518861][ T8432] ? l2tp_tunnel_create+0x2cf/0x460 [ 275.518879][ T8432] ? l2tp_tunnel_create+0x37d/0x460 [ 275.518901][ T8432] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 275.518929][ T8432] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 275.518974][ T8432] pppol2tp_connect+0xb1b/0x1ce0 [ 275.519004][ T8432] ? __pfx_pppol2tp_connect+0x10/0x10 [ 275.519028][ T8432] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 275.519060][ T8432] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.519091][ T8432] ? apparmor_socket_connect+0x100/0x1d0 [ 275.519113][ T8432] ? __pfx_pppol2tp_connect+0x10/0x10 [ 275.519136][ T8432] __sys_connect_file+0x141/0x1a0 [ 275.519168][ T8432] __sys_connect+0x13b/0x160 [ 275.519184][ T8432] ? __pfx___sys_connect+0x10/0x10 [ 275.519207][ T8432] ? __pfx_ksys_write+0x10/0x10 [ 275.519233][ T8432] __x64_sys_connect+0x72/0xb0 [ 275.519249][ T8432] ? lockdep_hardirqs_on+0x7c/0x110 [ 275.519267][ T8432] do_syscall_64+0xcd/0x4c0 [ 275.519289][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.519308][ T8432] RIP: 0033:0x7f2f2318eec9 [ 275.519324][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.519342][ T8432] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 275.519359][ T8432] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 275.519371][ T8432] RDX: 000000000000003a RSI: 0000200000000000 RDI: 0000000000000001 [ 275.519382][ T8432] RBP: 00007f2f24035090 R08: 0000000000000000 R09: 0000000000000000 [ 275.519392][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.519403][ T8432] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 275.519424][ T8432] [ 276.566354][ T30] audit: type=1800 audit(1759267826.926:9): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.582" name="dummy_udc" dev="gadgetfs" ino=7105 res=0 errno=0 [ 278.945113][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 279.089174][ T8475] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 280.519167][ T8510] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 281.556365][ T8512] bond0: option fail_over_mac: invalid value () [ 283.222395][ T8539] netlink: 252 bytes leftover after parsing attributes in process `syz.4.601'. [ 283.693934][ T8527] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 286.049999][ T8582] FAULT_INJECTION: forcing a failure. [ 286.049999][ T8582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.098776][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.0.613 Not tainted syzkaller #0 PREEMPT(full) [ 286.098818][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.098835][ T8582] Call Trace: [ 286.098845][ T8582] [ 286.098857][ T8582] dump_stack_lvl+0x16c/0x1f0 [ 286.098897][ T8582] should_fail_ex+0x512/0x640 [ 286.098938][ T8582] _copy_to_user+0x32/0xd0 [ 286.098976][ T8582] simple_read_from_buffer+0xcb/0x170 [ 286.099012][ T8582] proc_fail_nth_read+0x197/0x240 [ 286.099048][ T8582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.099087][ T8582] ? rw_verify_area+0xcf/0x6c0 [ 286.099118][ T8582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.099153][ T8582] vfs_read+0x1e1/0xcf0 [ 286.099193][ T8582] ? __pfx___mutex_lock+0x10/0x10 [ 286.099226][ T8582] ? __pfx_vfs_read+0x10/0x10 [ 286.099278][ T8582] ? __fget_files+0x20e/0x3c0 [ 286.099324][ T8582] ksys_read+0x12a/0x250 [ 286.099358][ T8582] ? __pfx_ksys_read+0x10/0x10 [ 286.099390][ T8582] ? xfd_validate_state+0x61/0x180 [ 286.099446][ T8582] do_syscall_64+0xcd/0x4c0 [ 286.099482][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.099512][ T8582] RIP: 0033:0x7fad5638d8dc [ 286.099537][ T8582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.099564][ T8582] RSP: 002b:00007fad57230030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.099593][ T8582] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638d8dc [ 286.099612][ T8582] RDX: 000000000000000f RSI: 00007fad572300a0 RDI: 0000000000000003 [ 286.099623][ T8582] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 286.099633][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.099643][ T8582] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 286.099666][ T8582] [ 286.778505][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.988036][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.617'. [ 287.034483][ T8591] HfR: entered promiscuous mode [ 287.100277][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.110320][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 287.180920][ T8591] HfR: left promiscuous mode [ 287.353760][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.373815][ T8589] zswap: compressor not available [ 287.638833][ T8602] random: crng reseeded on system resumption [ 287.802712][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.604428][ T49] bridge_slave_1: left allmulticast mode [ 288.653693][ T49] bridge_slave_1: left promiscuous mode [ 288.714769][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.800060][ T49] bridge_slave_0: left allmulticast mode [ 288.828927][ T49] bridge_slave_0: left promiscuous mode [ 288.844149][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.576429][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.639081][ T49] bond0 (unregistering): Released all slaves [ 292.295886][ T8660] kexec: Could not allocate control_code_buffer [ 292.636250][ T8677] random: crng reseeded on system resumption [ 294.044760][ T49] hsr_slave_0: left promiscuous mode [ 294.064514][ T49] hsr_slave_1: left promiscuous mode [ 294.071461][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.079857][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.089131][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.107305][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.147844][ T8689] serio: Serial port pty183 [ 294.366387][ T49] veth1_macvtap: left promiscuous mode [ 294.435715][ T49] veth0_macvtap: left promiscuous mode [ 294.542369][ T49] veth1_vlan: left promiscuous mode [ 294.562563][ T49] veth0_vlan: left promiscuous mode [ 299.004306][ T8734] FAULT_INJECTION: forcing a failure. [ 299.004306][ T8734] name failslab, interval 1, probability 0, space 0, times 0 [ 299.064132][ T8734] CPU: 1 UID: 0 PID: 8734 Comm: syz.2.642 Not tainted syzkaller #0 PREEMPT(full) [ 299.064172][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.064189][ T8734] Call Trace: [ 299.064198][ T8734] [ 299.064210][ T8734] dump_stack_lvl+0x16c/0x1f0 [ 299.064248][ T8734] should_fail_ex+0x512/0x640 [ 299.064281][ T8734] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 299.064316][ T8734] should_failslab+0xc2/0x120 [ 299.064356][ T8734] __kmalloc_cache_noprof+0x6a/0x3e0 [ 299.064386][ T8734] ? alloc_pages_mpol+0x25a/0x550 [ 299.064425][ T8734] ? remap_pfn_range+0x234/0x500 [ 299.064465][ T8734] remap_pfn_range+0x234/0x500 [ 299.064497][ T8734] ? __pfx_remap_pfn_range+0x10/0x10 [ 299.064526][ T8734] ? alloc_pages_noprof+0x23c/0x390 [ 299.064575][ T8734] ? get_free_pages_noprof+0x10/0xb0 [ 299.064621][ T8734] usbdev_mmap+0x74e/0xa70 [ 299.064655][ T8734] ? __pfx_usbdev_mmap+0x10/0x10 [ 299.064682][ T8734] ? vma_merge_new_range+0x3ae/0xa50 [ 299.064713][ T8734] ? vm_area_alloc+0x1f/0x160 [ 299.064745][ T8734] ? lockdep_init_map_type+0x5c/0x280 [ 299.064792][ T8734] __mmap_region+0x1311/0x27b0 [ 299.064835][ T8734] ? __pfx___mmap_region+0x10/0x10 [ 299.064884][ T8734] ? is_bpf_text_address+0x8a/0x1a0 [ 299.064920][ T8734] ? bpf_ksym_find+0x124/0x1c0 [ 299.064950][ T8734] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.064986][ T8734] ? is_bpf_text_address+0x94/0x1a0 [ 299.065023][ T8734] ? kernel_text_address+0x8d/0x100 [ 299.065070][ T8734] ? __kernel_text_address+0xd/0x40 [ 299.065201][ T8734] ? __lock_acquire+0xb97/0x1ce0 [ 299.065255][ T8734] mmap_region+0x32b/0x3f0 [ 299.065300][ T8734] do_mmap+0xa3e/0x1210 [ 299.065352][ T8734] ? __pfx_do_mmap+0x10/0x10 [ 299.065396][ T8734] ? __pfx_down_write_killable+0x10/0x10 [ 299.065443][ T8734] vm_mmap_pgoff+0x29e/0x470 [ 299.065497][ T8734] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 299.065549][ T8734] ? __fget_files+0x20e/0x3c0 [ 299.065602][ T8734] ksys_mmap_pgoff+0x32c/0x5c0 [ 299.065642][ T8734] ? __pfx_ksys_write+0x10/0x10 [ 299.065684][ T8734] __x64_sys_mmap+0x125/0x190 [ 299.065719][ T8734] do_syscall_64+0xcd/0x4c0 [ 299.065755][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.065786][ T8734] RIP: 0033:0x7f2f2318eec9 [ 299.065810][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.065838][ T8734] RSP: 002b:00007f2f24035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 299.065867][ T8734] RAX: ffffffffffffffda RBX: 00007f2f233e5fa0 RCX: 00007f2f2318eec9 [ 299.065887][ T8734] RDX: 000000000000000b RSI: 0000000000080009 RDI: 00000000ffff8000 [ 299.065904][ T8734] RBP: 00007f2f24035090 R08: 0000000000000004 R09: 0000000000000000 [ 299.065922][ T8734] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 299.065938][ T8734] R13: 00007f2f233e6038 R14: 00007f2f233e5fa0 R15: 00007ffd1a4ae268 [ 299.065976][ T8734] [ 302.989283][ T8807] delete_channel: no stack [ 303.034109][ T8807] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 308.300470][ T8893] netlink: 186 bytes leftover after parsing attributes in process `syz.2.667'. [ 309.958754][ T8923] FAULT_INJECTION: forcing a failure. [ 309.958754][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 309.982584][ T8923] CPU: 1 UID: 0 PID: 8923 Comm: syz.0.674 Not tainted syzkaller #0 PREEMPT(full) [ 309.982623][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.982634][ T8923] Call Trace: [ 309.982643][ T8923] [ 309.982651][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 309.982677][ T8923] should_fail_ex+0x512/0x640 [ 309.982703][ T8923] should_failslab+0xc2/0x120 [ 309.982729][ T8923] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 309.982752][ T8923] ? i8237A_resume+0x120/0x140 [ 309.982772][ T8923] ? sctp_chunkify+0x51/0x2d0 [ 309.982801][ T8923] sctp_chunkify+0x51/0x2d0 [ 309.982829][ T8923] _sctp_make_chunk+0x148/0x270 [ 309.982858][ T8923] sctp_make_control+0x2f/0x2d0 [ 309.982886][ T8923] sctp_make_shutdown+0xb6/0x1d0 [ 309.982916][ T8923] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 309.982947][ T8923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.982978][ T8923] sctp_sf_do_9_2_start_shutdown+0x27/0x490 [ 309.983006][ T8923] sctp_sf_do_9_2_prm_shutdown+0x11c/0x150 [ 309.983033][ T8923] ? __pfx_sctp_pname+0x10/0x10 [ 309.983061][ T8923] sctp_do_sm+0x181/0x5c80 [ 309.983094][ T8923] ? __pfx_sctp_do_sm+0x10/0x10 [ 309.983125][ T8923] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 309.983222][ T8923] ? do_raw_spin_lock+0x12c/0x2b0 [ 309.983254][ T8923] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.983285][ T8923] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 309.983313][ T8923] sctp_shutdown+0x137/0x180 [ 309.983330][ T8923] ? __pfx_sctp_shutdown+0x10/0x10 [ 309.983347][ T8923] inet_shutdown+0x1a2/0x440 [ 309.983374][ T8923] __sys_shutdown+0x116/0x1b0 [ 309.983395][ T8923] __x64_sys_shutdown+0x53/0x80 [ 309.983415][ T8923] do_syscall_64+0xcd/0x4c0 [ 309.983437][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.983457][ T8923] RIP: 0033:0x7fad5638eec9 [ 309.983474][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.983492][ T8923] RSP: 002b:00007fad5720f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 309.983510][ T8923] RAX: ffffffffffffffda RBX: 00007fad565e6090 RCX: 00007fad5638eec9 [ 309.983522][ T8923] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000200000003 [ 309.983532][ T8923] RBP: 00007fad5720f090 R08: 0000000000000000 R09: 0000000000000000 [ 309.983543][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.983553][ T8923] R13: 00007fad565e6128 R14: 00007fad565e6090 R15: 00007ffef05834c8 [ 309.983576][ T8923] [ 312.719560][ T8969] sg_write: process 653 (syz.2.685) changed security contexts after opening file descriptor, this is not allowed. [ 314.434565][ T9002] FAULT_INJECTION: forcing a failure. [ 314.434565][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 314.456122][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.3.692 Not tainted syzkaller #0 PREEMPT(full) [ 314.456150][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.456160][ T9002] Call Trace: [ 314.456166][ T9002] [ 314.456173][ T9002] dump_stack_lvl+0x16c/0x1f0 [ 314.456207][ T9002] should_fail_ex+0x512/0x640 [ 314.456228][ T9002] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 314.456252][ T9002] should_failslab+0xc2/0x120 [ 314.456277][ T9002] __kmalloc_cache_noprof+0x6a/0x3e0 [ 314.456297][ T9002] ? ioam6_genl_dumpns_start+0x13a/0x1c0 [ 314.456327][ T9002] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 314.456355][ T9002] ioam6_genl_dumpns_start+0x13a/0x1c0 [ 314.456385][ T9002] genl_start+0x5ff/0x980 [ 314.456413][ T9002] __netlink_dump_start+0x60e/0x990 [ 314.456440][ T9002] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 314.456468][ T9002] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 314.456498][ T9002] ? aa_get_newest_label+0xd2/0x250 [ 314.456520][ T9002] ? __pfx_genl_start+0x10/0x10 [ 314.456541][ T9002] ? __pfx_genl_dumpit+0x10/0x10 [ 314.456563][ T9002] ? __pfx_genl_done+0x10/0x10 [ 314.456588][ T9002] ? bpf_lsm_capable+0x9/0x10 [ 314.456605][ T9002] ? security_capable+0x7e/0x260 [ 314.456630][ T9002] genl_rcv_msg+0x46e/0x800 [ 314.456657][ T9002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.456682][ T9002] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 314.456708][ T9002] ? __pfx_ioam6_genl_dumpns+0x10/0x10 [ 314.456735][ T9002] ? __pfx_ioam6_genl_dumpns_done+0x10/0x10 [ 314.456770][ T9002] netlink_rcv_skb+0x158/0x420 [ 314.456792][ T9002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.456817][ T9002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.456847][ T9002] ? netlink_deliver_tap+0x1ae/0xd30 [ 314.456870][ T9002] genl_rcv+0x28/0x40 [ 314.456892][ T9002] netlink_unicast+0x5a7/0x870 [ 314.456916][ T9002] ? __pfx_netlink_unicast+0x10/0x10 [ 314.456936][ T9002] ? __pfx___might_resched+0x10/0x10 [ 314.456955][ T9002] ? __lock_acquire+0xb97/0x1ce0 [ 314.456986][ T9002] netlink_sendmsg+0x8d1/0xdd0 [ 314.457011][ T9002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.457035][ T9002] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 314.457060][ T9002] ____sys_sendmsg+0xa98/0xc70 [ 314.457088][ T9002] ? copy_msghdr_from_user+0x10a/0x160 [ 314.457108][ T9002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.457144][ T9002] ___sys_sendmsg+0x134/0x1d0 [ 314.457166][ T9002] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.457220][ T9002] __sys_sendmsg+0x16d/0x220 [ 314.457241][ T9002] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.457276][ T9002] do_syscall_64+0xcd/0x4c0 [ 314.457298][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.457318][ T9002] RIP: 0033:0x7f493a18eec9 [ 314.457333][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.457351][ T9002] RSP: 002b:00007f493b0bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.457369][ T9002] RAX: ffffffffffffffda RBX: 00007f493a3e5fa0 RCX: 00007f493a18eec9 [ 314.457381][ T9002] RDX: 000000000000c840 RSI: 0000200000000100 RDI: 0000000000000003 [ 314.457391][ T9002] RBP: 00007f493b0bc090 R08: 0000000000000000 R09: 0000000000000000 [ 314.457402][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.457412][ T9002] R13: 00007f493a3e6038 R14: 00007f493a3e5fa0 R15: 00007ffc33fc9fc8 [ 314.457438][ T9002] [ 315.384601][ T9012] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 315.708052][ T9020] FAULT_INJECTION: forcing a failure. [ 315.708052][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 315.783067][ T9020] CPU: 1 UID: 0 PID: 9020 Comm: syz.4.695 Not tainted syzkaller #0 PREEMPT(full) [ 315.783110][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.783139][ T9020] Call Trace: [ 315.783149][ T9020] [ 315.783161][ T9020] dump_stack_lvl+0x16c/0x1f0 [ 315.783202][ T9020] should_fail_ex+0x512/0x640 [ 315.783236][ T9020] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 315.783278][ T9020] should_failslab+0xc2/0x120 [ 315.783321][ T9020] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 315.783360][ T9020] ? __pmd_alloc+0xbf/0x930 [ 315.783411][ T9020] __pmd_alloc+0xbf/0x930 [ 315.783454][ T9020] ? find_held_lock+0x2b/0x80 [ 315.783488][ T9020] __handle_mm_fault+0xa06/0x2a50 [ 315.783533][ T9020] ? __pfx___handle_mm_fault+0x10/0x10 [ 315.783601][ T9020] handle_mm_fault+0x589/0xd10 [ 315.783642][ T9020] __get_user_pages+0x551/0x34a0 [ 315.783705][ T9020] ? __pfx___get_user_pages+0x10/0x10 [ 315.783764][ T9020] populate_vma_page_range+0x267/0x3f0 [ 315.783796][ T9020] ? __pfx_populate_vma_page_range+0x10/0x10 [ 315.783823][ T9020] ? __pfx_find_vma_intersection+0x10/0x10 [ 315.783869][ T9020] ? do_mmap+0x69c/0x1210 [ 315.783919][ T9020] __mm_populate+0x1d8/0x380 [ 315.783948][ T9020] ? __pfx___mm_populate+0x10/0x10 [ 315.783978][ T9020] ? up_write+0x1b2/0x520 [ 315.784026][ T9020] vm_mmap_pgoff+0x37f/0x470 [ 315.784074][ T9020] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 315.784136][ T9020] ? __x64_sys_futex+0x1e0/0x4c0 [ 315.784172][ T9020] ? __x64_sys_futex+0x1e9/0x4c0 [ 315.784214][ T9020] ksys_mmap_pgoff+0x7d/0x5c0 [ 315.784254][ T9020] ? xfd_validate_state+0x61/0x180 [ 315.784296][ T9020] ? __pfx_ksys_write+0x10/0x10 [ 315.784336][ T9020] __x64_sys_mmap+0x125/0x190 [ 315.784368][ T9020] do_syscall_64+0xcd/0x4c0 [ 315.784404][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.784433][ T9020] RIP: 0033:0x7fb60e58eec9 [ 315.784457][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.784485][ T9020] RSP: 002b:00007fb60f390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 315.784514][ T9020] RAX: ffffffffffffffda RBX: 00007fb60e7e5fa0 RCX: 00007fb60e58eec9 [ 315.784534][ T9020] RDX: 0000000c00000072 RSI: 0000000000000004 RDI: 0000000000000000 [ 315.784552][ T9020] RBP: 00007fb60e611f91 R08: 0000001000000002 R09: 0000000000008000 [ 315.784570][ T9020] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000000 [ 315.784588][ T9020] R13: 00007fb60e7e6038 R14: 00007fb60e7e5fa0 R15: 00007fff76e1bff8 [ 315.784629][ T9020] [ 319.179594][ T9080] vivid-003: ================= START STATUS ================= [ 319.260187][ T9080] vivid-003: Radio HW Seek Mode: Bounded [ 319.320919][ T9080] vivid-003: Radio Programmable HW Seek: false [ 319.336665][ T9080] vivid-003: RDS Rx I/O Mode: Block I/O [ 319.343465][ T9080] vivid-003: Generate RBDS Instead of RDS: false [ 319.389103][ T9080] vivid-003: RDS Reception: true [ 319.424551][ T9080] vivid-003: RDS Program Type: 0 inactive [ 319.440137][ T9080] vivid-003: RDS PS Name: inactive [ 319.445643][ T9080] vivid-003: RDS Radio Text: inactive [ 319.451587][ T9080] vivid-003: RDS Traffic Announcement: false inactive [ 319.459951][ T9080] vivid-003: RDS Traffic Program: false inactive [ 319.478692][ T9080] vivid-003: RDS Music: false inactive [ 319.498653][ T9080] vivid-003: ================== END STATUS ================== [ 319.699753][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 319.778555][ T9092] FAULT_INJECTION: forcing a failure. [ 319.778555][ T9092] name failslab, interval 1, probability 0, space 0, times 0 [ 319.809565][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(full) [ 319.809605][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.809622][ T9092] Call Trace: [ 319.809632][ T9092] [ 319.809643][ T9092] dump_stack_lvl+0x16c/0x1f0 [ 319.809683][ T9092] should_fail_ex+0x512/0x640 [ 319.809715][ T9092] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 319.809754][ T9092] should_failslab+0xc2/0x120 [ 319.809791][ T9092] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 319.809835][ T9092] ? ptlock_alloc+0x1f/0x70 [ 319.809871][ T9092] ptlock_alloc+0x1f/0x70 [ 319.809901][ T9092] pte_alloc_one+0x82/0x3a0 [ 319.809936][ T9092] do_pte_missing+0x1afc/0x3ba0 [ 319.809969][ T9092] ? do_raw_spin_unlock+0x172/0x230 [ 319.810018][ T9092] ? __pmd_alloc+0x3fb/0x930 [ 319.810066][ T9092] __handle_mm_fault+0x152a/0x2a50 [ 319.810103][ T9092] ? mt_find+0x3ef/0xa30 [ 319.810152][ T9092] ? __pfx___handle_mm_fault+0x10/0x10 [ 319.810181][ T9092] ? __pfx_mt_find+0x10/0x10 [ 319.810240][ T9092] ? find_vma+0xbf/0x140 [ 319.810277][ T9092] ? __pfx_find_vma+0x10/0x10 [ 319.810322][ T9092] handle_mm_fault+0x589/0xd10 [ 319.810354][ T9092] ? trace_raw_output_exceptions+0x131/0x150 [ 319.810403][ T9092] do_user_addr_fault+0x7a6/0x1370 [ 319.810433][ T9092] ? rcu_is_watching+0x12/0xc0 [ 319.810469][ T9092] exc_page_fault+0x5c/0xb0 [ 319.810501][ T9092] asm_exc_page_fault+0x26/0x30 [ 319.810529][ T9092] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 319.810570][ T9092] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1e 04 00 66 66 [ 319.810597][ T9092] RSP: 0018:ffffc900036379d0 EFLAGS: 00050202 [ 319.810622][ T9092] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 319.810639][ T9092] RDX: fffff520006c6f4c RSI: 0000000000000000 RDI: ffffc90003637a58 [ 319.810658][ T9092] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff520006c6f4b [ 319.810675][ T9092] R10: ffffc90003637a5e R11: 0000000000000000 R12: 0000000000000000 [ 319.810692][ T9092] R13: ffffc90003637a58 R14: 1ffff920006c6f45 R15: ffffc90003637d8c [ 319.810733][ T9092] _copy_from_user+0x98/0xd0 [ 319.810770][ T9092] ____sys_sendmsg+0x607/0xc70 [ 319.810817][ T9092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.810863][ T9092] ? __pfx__kstrtoull+0x10/0x10 [ 319.810915][ T9092] ___sys_sendmsg+0x134/0x1d0 [ 319.810951][ T9092] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.811004][ T9092] ? find_held_lock+0x2b/0x80 [ 319.811060][ T9092] __sys_sendmmsg+0x200/0x420 [ 319.811099][ T9092] ? __pfx___sys_sendmmsg+0x10/0x10 [ 319.811154][ T9092] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.811204][ T9092] ? fput+0x9b/0xd0 [ 319.811245][ T9092] ? ksys_write+0x1ac/0x250 [ 319.811279][ T9092] ? __pfx_ksys_write+0x10/0x10 [ 319.811321][ T9092] __x64_sys_sendmmsg+0x9c/0x100 [ 319.811354][ T9092] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.811383][ T9092] do_syscall_64+0xcd/0x4c0 [ 319.811417][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.811446][ T9092] RIP: 0033:0x7f493a18eec9 [ 319.811468][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.811494][ T9092] RSP: 002b:00007f493b0bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.811520][ T9092] RAX: ffffffffffffffda RBX: 00007f493a3e5fa0 RCX: 00007f493a18eec9 [ 319.811538][ T9092] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 319.811556][ T9092] RBP: 00007f493b0bc090 R08: 0000000000000000 R09: 0000000000000000 [ 319.811573][ T9092] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 319.811590][ T9092] R13: 00007f493a3e6038 R14: 00007f493a3e5fa0 R15: 00007ffc33fc9fc8 [ 319.811630][ T9092] [ 320.196621][ T9089] hsr_slave_0 (unregistering): left promiscuous mode [ 322.152359][ T9133] FAULT_INJECTION: forcing a failure. [ 322.152359][ T9133] name failslab, interval 1, probability 0, space 0, times 0 [ 322.210070][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.0.715 Not tainted syzkaller #0 PREEMPT(full) [ 322.210109][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.210127][ T9133] Call Trace: [ 322.210137][ T9133] [ 322.210149][ T9133] dump_stack_lvl+0x16c/0x1f0 [ 322.210189][ T9133] should_fail_ex+0x512/0x640 [ 322.210221][ T9133] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 322.210257][ T9133] should_failslab+0xc2/0x120 [ 322.210297][ T9133] __kmalloc_cache_noprof+0x6a/0x3e0 [ 322.210325][ T9133] ? rcu_is_watching+0x12/0xc0 [ 322.210364][ T9133] ? s_start+0x7b/0x320 [ 322.210409][ T9133] s_start+0x7b/0x320 [ 322.210455][ T9133] traverse.part.0.constprop.0+0xaf/0x640 [ 322.210488][ T9133] ? aa_file_perm+0x28f/0x12e0 [ 322.210525][ T9133] seq_read_iter+0x932/0x12c0 [ 322.210561][ T9133] ? __pfx_aa_file_perm+0x10/0x10 [ 322.210592][ T9133] seq_read+0x3a3/0x570 [ 322.210618][ T9133] ? __pfx_seq_read+0x10/0x10 [ 322.210644][ T9133] ? get_pid_task+0xfc/0x250 [ 322.210702][ T9133] ? rw_verify_area+0xcf/0x6c0 [ 322.210732][ T9133] ? __pfx_seq_read+0x10/0x10 [ 322.210758][ T9133] vfs_read+0x1e1/0xcf0 [ 322.210800][ T9133] ? __pfx_vfs_read+0x10/0x10 [ 322.210830][ T9133] ? find_held_lock+0x2b/0x80 [ 322.210860][ T9133] ? __fget_files+0x204/0x3c0 [ 322.210899][ T9133] ? __fget_files+0x20e/0x3c0 [ 322.210928][ T9133] ? __fget_files+0x200/0x3c0 [ 322.210973][ T9133] __x64_sys_pread64+0x1eb/0x250 [ 322.211011][ T9133] ? __pfx___x64_sys_pread64+0x10/0x10 [ 322.211057][ T9133] do_syscall_64+0xcd/0x4c0 [ 322.211097][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.211127][ T9133] RIP: 0033:0x7fad5638eec9 [ 322.211150][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.211177][ T9133] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 322.211202][ T9133] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 322.211221][ T9133] RDX: 0000000000800003 RSI: 0000000000000000 RDI: 0000000000000003 [ 322.211238][ T9133] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 322.211256][ T9133] R10: 0000000000000270 R11: 0000000000000246 R12: 0000000000000001 [ 322.211273][ T9133] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 322.211313][ T9133] [ 322.211404][ T9133] [ 322.213399][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.221095][ T9133] ===================================== [ 322.221107][ T9133] WARNING: bad unlock balance detected! [ 322.221117][ T9133] syzkaller #0 Not tainted [ 322.221131][ T9133] ------------------------------------- [ 322.221139][ T9133] syz.0.715/9133 is trying to release lock (event_mutex [ 322.235640][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.237876][ T9133] ) at: [ 322.237886][ T9133] [] traverse.part.0.constprop.0+0x2bd/0x640 [ 322.500071][ T9133] but there are no more locks to release! [ 322.505981][ T9133] [ 322.505981][ T9133] other info that might help us debug this: [ 322.514146][ T9133] 1 lock held by syz.0.715/9133: [ 322.519416][ T9133] #0: ffff8880336881c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 322.528543][ T9133] [ 322.528543][ T9133] stack backtrace: [ 322.534726][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.0.715 Not tainted syzkaller #0 PREEMPT(full) [ 322.534762][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.534776][ T9133] Call Trace: [ 322.534787][ T9133] [ 322.534796][ T9133] dump_stack_lvl+0x116/0x1f0 [ 322.534826][ T9133] ? traverse.part.0.constprop.0+0x2bd/0x640 [ 322.534851][ T9133] print_unlock_imbalance_bug+0x11b/0x130 [ 322.534881][ T9133] ? traverse.part.0.constprop.0+0x2bd/0x640 [ 322.534904][ T9133] lock_release+0x242/0x2f0 [ 322.534935][ T9133] __mutex_unlock_slowpath+0xa2/0x7b0 [ 322.534962][ T9133] ? rcu_is_watching+0x12/0xc0 [ 322.534986][ T9133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.535011][ T9133] ? __kmalloc_cache_noprof+0x249/0x3e0 [ 322.535037][ T9133] ? rcu_is_watching+0x12/0xc0 [ 322.535059][ T9133] ? kfree+0x24f/0x4d0 [ 322.535080][ T9133] ? s_start+0x28c/0x320 [ 322.535113][ T9133] traverse.part.0.constprop.0+0x2bd/0x640 [ 322.535137][ T9133] ? aa_file_perm+0x28f/0x12e0 [ 322.535161][ T9133] seq_read_iter+0x932/0x12c0 [ 322.535185][ T9133] ? __pfx_aa_file_perm+0x10/0x10 [ 322.535208][ T9133] seq_read+0x3a3/0x570 [ 322.535228][ T9133] ? __pfx_seq_read+0x10/0x10 [ 322.535249][ T9133] ? get_pid_task+0xfc/0x250 [ 322.535286][ T9133] ? rw_verify_area+0xcf/0x6c0 [ 322.535309][ T9133] ? __pfx_seq_read+0x10/0x10 [ 322.535329][ T9133] vfs_read+0x1e1/0xcf0 [ 322.535364][ T9133] ? __pfx_vfs_read+0x10/0x10 [ 322.535388][ T9133] ? find_held_lock+0x2b/0x80 [ 322.535411][ T9133] ? __fget_files+0x204/0x3c0 [ 322.535438][ T9133] ? __fget_files+0x20e/0x3c0 [ 322.535461][ T9133] ? __fget_files+0x200/0x3c0 [ 322.535488][ T9133] __x64_sys_pread64+0x1eb/0x250 [ 322.535517][ T9133] ? __pfx___x64_sys_pread64+0x10/0x10 [ 322.535549][ T9133] do_syscall_64+0xcd/0x4c0 [ 322.535576][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.535600][ T9133] RIP: 0033:0x7fad5638eec9 [ 322.535619][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.535642][ T9133] RSP: 002b:00007fad57230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 322.535666][ T9133] RAX: ffffffffffffffda RBX: 00007fad565e5fa0 RCX: 00007fad5638eec9 [ 322.535682][ T9133] RDX: 0000000000800003 RSI: 0000000000000000 RDI: 0000000000000003 [ 322.535696][ T9133] RBP: 00007fad57230090 R08: 0000000000000000 R09: 0000000000000000 [ 322.535711][ T9133] R10: 0000000000000270 R11: 0000000000000246 R12: 0000000000000001 [ 322.535725][ T9133] R13: 00007fad565e6038 R14: 00007fad565e5fa0 R15: 00007ffef05834c8 [ 322.535747][ T9133] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 322.938019][ T9135] caif:caif_disconnect_client(): nothing to disconnect [ 323.789771][ T3489] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.894756][ T3489] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.004095][ T3489] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.109681][ T3489] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.196006][ T3489] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.254750][ T3489] bridge_slave_1: left allmulticast mode [ 324.264836][ T3489] bridge_slave_1: left promiscuous mode [ 324.270896][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.282057][ T3489] bridge_slave_0: left allmulticast mode [ 324.288132][ T3489] bridge_slave_0: left promiscuous mode [ 324.293886][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.472479][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.490264][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.512222][ T3489] bond0 (unregistering): Released all slaves [ 324.573728][ T3489] tipc: Left network mode [ 324.769432][ T3489] hsr_slave_0: left promiscuous mode [ 324.775459][ T3489] hsr_slave_1: left promiscuous mode [ 324.781547][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.789569][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.797696][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.805356][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.822527][ T3489] veth1_macvtap: left promiscuous mode [ 324.828432][ T3489] veth0_macvtap: left promiscuous mode [ 324.835250][ T3489] veth1_vlan: left promiscuous mode [ 324.840821][ T3489] veth0_vlan: left promiscuous mode [ 325.123633][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 325.148858][ T3489] team0 (unregistering): Port device team_slave_0 removed [ 325.494699][ T3489] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.536594][ T3489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.613094][ T3489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.655919][ T3489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.709860][ T3489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.818368][ T3489] bridge_slave_1: left allmulticast mode [ 325.826033][ T3489] bridge_slave_1: left promiscuous mode [ 325.832958][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.844171][ T3489] bridge_slave_0: left allmulticast mode [ 325.850276][ T3489] bridge_slave_0: left promiscuous mode [ 325.856303][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.993773][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.004694][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.015156][ T3489] bond0 (unregistering): Released all slaves [ 326.097372][ T3489] .^: left promiscuous mode [ 326.168331][ T3489] HSR: left promiscuous mode [ 326.381874][ T3489] hsr_slave_0: left promiscuous mode [ 326.389861][ T3489] hsr_slave_1: left promiscuous mode [ 326.395678][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.403492][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.411468][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.419195][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.431498][ T3489] veth1_macvtap: left promiscuous mode [ 326.437209][ T3489] veth0_macvtap: left promiscuous mode [ 326.442755][ T3489] veth1_vlan: left promiscuous mode [ 326.448263][ T3489] veth0_vlan: left promiscuous mode [ 326.578481][ T3489] team0 (unregistering): Port device team_slave_1 removed [ 326.599889][ T3489] team0 (unregistering): Port device team_slave_0 removed