last executing test programs: 5.931682166s ago: executing program 0 (id=274): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@bpf_attr_3={0x1, 0x200, 0x100000001, 0x9, 0x5, 0x2, 0x1, 0x6d, 0x7, "e250646a2cc3bcec67f2584daab5b34f", 0x0, 0x8, 0xffffffffffffffff, 0x5, 0x40, 0x3, 0x7, 0x101, 0x28, 0x6, @attach_btf_obj_fd, 0x8, 0x2, 0x0, 0x10000, 0xca}, 0x4) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x6, 0x0, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) removexattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0) 4.436823807s ago: executing program 2 (id=281): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4010744d, 0x0) (async) r4 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r4], 0x1}, 0x58) 4.347740861s ago: executing program 1 (id=282): unshare$auto(0x40000080) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) r0 = socket(0x15, 0x3, 0xfffffffe) socket(0x11, 0x80003, 0x300) timerfd_create$auto(0x61e1, 0x2) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r0, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) getsockopt$auto(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) r1 = getpgid(0x0) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) pipe$auto(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8, @ANYRES8=r3], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) prlimit64$auto(r1, 0x4, 0x0, 0x0) 4.180166962s ago: executing program 2 (id=283): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0xe0180, 0x0) seccomp$auto(0x2, 0x0, &(0x7f0000000040)="c7f6e5f12a23738f76497212909621") ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x15, 0x4005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) write$auto(0xffffffffffffffff, 0x0, 0xf) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000012c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) close_range$auto(0x2, 0x8, 0x0) 3.781890551s ago: executing program 0 (id=284): mmap$auto(0x1, 0x4, 0xdf, 0x1a, 0xffffffffffffffff, 0x5) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) r0 = socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS2\x00', 0x141e81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r2, &(0x7f0000000840)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x1008, 0x400000000000d32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r0, 0x0, 0x3, 0x0) set_mempolicy$auto(0x3, 0x0, 0x9) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f00000010c0)=""/4107, 0x100b) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x149180, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="00042bbd70006c6f0000000000000000000000000000080003008100000008000100"/50, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x801}, 0x40c1) read$auto_tracing_stats_fops_trace(r5, &(0x7f0000000000)=""/43, 0xfedf) r6 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r6, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) io_uring_setup$auto(0xa, 0x0) 3.666330441s ago: executing program 2 (id=285): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) syz_clone3(&(0x7f0000000080)={0x1a6a60080, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) mmap$auto(0x87e3, 0x100000400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x80b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x240) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 3.626974447s ago: executing program 1 (id=286): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xd5920daa8c706c3e, 0x0) (async, rerun: 32) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r1 = epoll_create$auto(0x87ffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create$auto(0x0, 0x4) (async) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x5, 0x7fffffff, 0x8000000008011, 0x3, 0x2000000000) (async) r2 = socket(0x23, 0x80805, 0x0) (async, rerun: 64) epoll_ctl$auto(r1, 0x1, r0, 0x0) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) madvise$auto(0x7, 0x79, 0x7) (async) sendmsg$auto_NL80211_CMD_START_NAN(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x1}, 0xc005) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 2.396448474s ago: executing program 1 (id=290): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sysfs$auto(0x2, 0x3b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.335028311s ago: executing program 0 (id=292): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x800, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0xf9e, 0x800c000}, 0x7) mmap$auto(0x4, 0x7, 0x3, 0x1d, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf250100000005001d000c000000d0fd45e490388d13dbe18677c722d324f244d17babfd9448ee4e256c552171c2849f9df21275c5689191db493f87768e6188cd79dda575c878fa"], 0x1c}, 0x1, 0x0, 0x0, 0x88b1}, 0x4008811) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r4, 0x0, 0x1000200) r5 = socket(0x11, 0x80003, 0x300) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020241cde4e8000a000200"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmmsg$auto(r5, 0x0, 0x10001, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) getdents64$auto(r1, &(0x7f00000000c0)={0x8b7, 0x10001, 0xf, 0x93, "98926d09103960d20df0ba9d16ae893e3741690ae4481076201fa4bb8b303e86fa9a71398cdbf8d199433c6fb654c503820757f8ef95685067a283853b1f19944e9c9c2097c83d869e74f55c5d73680cacbc7dd3f4a914610eb6d726118c6a6bed8695427da3d7"}, 0xa224) madvise$auto(0x3, 0x6, 0x2000015) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) r6 = fsopen$auto(0x0, 0x1) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x800, 0x0) fsconfig$auto(r6, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/tty20\x00', 0x660000, 0x0) 2.051578375s ago: executing program 3 (id=293): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = mq_open$auto(&(0x7f0000000180)='\\*)A\x00*ia,\xc7V\vn\x95\nw\xd5CV\xdfz\x18\xd7\xe8\x06\x03Ib\xb4MY\x83\"\xc6>\xa9\x87\x88\xcf\xa6<3\x88j\xbe\xfbQ\xdfe\xda\x83C\xd3\xde\xf6+', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='\\*)A\x00', 0x1, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 1.948987908s ago: executing program 1 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)='-7', 0x2) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r0) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000300)={0x2c, r2, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000031, 0x0) r3 = fsopen$auto(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r6, 0x40305828, r6) r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000280), r3) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xe2, 0x3, 0x0, 0x1, [@nested={0x68, 0xb3, 0x0, 0x1, [@typed={0x64, 0xa2, 0x0, 0x0, @binary="c58d625b2c63210d827a287da2c77d70efd06b9f0113a6d7e9edbd5a3c91691e125a3322d58dac1e207425bfd40f12d3005f48d22f371c7bb270551b0e73c62691b38a3712e4d8bba9fbd4e395b5eadee32b31027db304670eb84d8bebac6367"}]}, @generic="b08258649c140667e0644a23faf65cb7b26adf2f6a5d9b84dd4025be0ba2cdae338b7e4e6234447d6f58ad52a38006bebdb707514443d71876e1a5cdf9ad3d9a94df0aa2551a5e583b6aa6d4c15ed0d07e613ea0ba16b1aef9683c5220d0127300c972f247588e2913d93c443e8b984a3b120901a6b2"]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x7fffffff}]}, 0x100}, 0x1, 0x0, 0x0, 0x44040}, 0x4040000) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r3, 0x4, &(0x7f00000000c0)='/dev/ppp\x00', &(0x7f0000000100)="73d27ce92a6f2541a5778a0fef3cf5e2d272e08b28f4937ca3001c1ed8034517f6621efc23a3e4c2a85a61ed6b33b47fe53704feea8e02ed6d0ae8e9a392cd91bbbf9298646e", 0x80) r8 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r9, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r8, 0x8910, 0x24) close_range$auto(0x2, 0xa, 0x0) r10 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r10, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r10, 0x40047459, 0x0) 1.816412896s ago: executing program 3 (id=295): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/interface_authorized_default\x00', 0x10b002, 0x0) (async) mmap$auto(0x0, 0x810004, 0x9, 0x8000000008011, 0xffffffffffffffff, 0x808000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r0, 0x4008af00, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) (async, rerun: 64) mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) (async) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) (async, rerun: 64) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mlock$auto(0x112, 0x80006) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x3, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x28, 0x5, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x26441, 0x0) ioctl$auto_BLKSSZGET(r1, 0x1268, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x2c002884) connect$auto(0x3, 0x0, 0x50) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open$auto(&(0x7f00000020c0)='.\xf1\x00', 0x56a, 0x2d, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) (async) msync$auto(0x110c230000, 0x200001, 0x6) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) 1.772183841s ago: executing program 2 (id=296): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0xa, 0x1, 0x84) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(r1, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x1c, r3, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) r4 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/free_buffer\x00', 0x2, 0x0) write$auto_tracing_free_buffer_fops_trace(r5, 0x0, 0x0) connect$auto(r4, 0x0, 0x57) write$auto(0x3, 0x0, 0x3f00) write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) r6 = timerfd_create$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) close_range$auto(r0, r6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = socket(0x15, 0x5, 0x0) getsockopt$auto(r7, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) ioctl$auto(0x1, 0x890c, 0x8) 1.667949525s ago: executing program 3 (id=297): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r2 = socket(0x2, 0x3, 0x100) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r2) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x480, 0x0) write$auto_snd_rawmidi_f_ops_rawmidi(r4, &(0x7f0000000100)="d4b80e37fb11b4605ea934146d07f2e50447fac6211bea4908776e33484db104ad36eeaa8c9380c0c9cd788a8ad769e444d1cded644e57a3a155d5693ef4a3a76acf0ffcc6f5d63324f2903fe4d117de11f28efea7a36b17ffb3458918c87902df2af1fed9042fae942c29cde3159d70af72a3c6fdbcfb97002a5bfb813ac6833a7548854e8de39e21114dfd55ae278efaedb231342696fdafc2877d0eb187079db2d3ceca84f8c9b1c8213195f2e4b6b37cba1129f99770a7b56e3c7d5b459adc", 0xc1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) read$auto(r0, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) (async) socket(0x2, 0x3, 0x100) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) syz_genetlink_get_family_id$auto_thermal(0x0, r2) (async) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x480, 0x0) (async) write$auto_snd_rawmidi_f_ops_rawmidi(r4, &(0x7f0000000100)="d4b80e37fb11b4605ea934146d07f2e50447fac6211bea4908776e33484db104ad36eeaa8c9380c0c9cd788a8ad769e444d1cded644e57a3a155d5693ef4a3a76acf0ffcc6f5d63324f2903fe4d117de11f28efea7a36b17ffb3458918c87902df2af1fed9042fae942c29cde3159d70af72a3c6fdbcfb97002a5bfb813ac6833a7548854e8de39e21114dfd55ae278efaedb231342696fdafc2877d0eb187079db2d3ceca84f8c9b1c8213195f2e4b6b37cba1129f99770a7b56e3c7d5b459adc", 0xc1) (async) 1.541994377s ago: executing program 3 (id=298): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r0, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) poll$auto(&(0x7f0000000200)={r3, 0x1, 0xa}, 0x25, 0x109) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x20, 0x0, 0x7fffe) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x800, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7114}, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/workqueue/blkcg_punt_bio/affinity_strict\x00', 0x1e1880, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00') mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) unshare$auto(0x40000080) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ram15\x00', 0x2c0000, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r5, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x80, 0x1, 0x31, 0x0) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f00000001c0)="125d19b13f71a0efb02ca09635e9ad1d1111d0517c1def35a4b1cf359f87a8df2245abcc4893d83117b07dff9824c21f746f591f34137324b5904058ef78bcc9ceb236b12dac7901a924bf099479507b13580af934270caf6b9a1adae95a6dcaff81caa988948385a8753c167994ce855daeb4a57fbc8a181fdacda9f0496c873e628c08b1d65b6433557ecdc36c2a75816cd1f5df4d5baafd2e16c50ff69befe43d0d85dce14acce4d5b29285b694d24343b04977b3a9b8ef096fe2893ca3088a06c93812616808d6232843e60986e2d455a99ad59ee424e56a83c4222572f944c15da1ef7adf", 0xe27, &(0x7f0000000340)={&(0x7f00000002c0)="00bcfca5e282805f6c2472eaa845e425e6003dc61dfb1d8f7c64900da707cccffdcd0382628907726dc07c9c54b245551f5cca2efb25d6c0d6e12075815984e5ec45971e7b1a353449815cdc860dd01725ca9d8e66dc8ce9467a26a4119dfd", 0x300000000}, 0x8, 0x0, 0x4, 0x9}, 0x7}, 0x200, 0x3) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000140)="5a854caf7917", 0x6) connect$auto(r6, &(0x7f0000000140)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x180, 0x2}, 0x4) 1.441977402s ago: executing program 0 (id=299): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) utime$auto(&(0x7f0000000300)='./file0\x00', 0x0) setsockopt$auto(0x3, 0x1, 0x7fff, 0x0, 0xf) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/acpi/parameters/acpica_version\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)=""/266, 0x10a) read$auto(0x3, 0x0, 0x80) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x61, 0x0, 0x28) write$auto(0x3, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r3, 0x0) socketpair$auto(0x40001e, 0x4, 0x8000000000000000, 0x0) 1.426043861s ago: executing program 1 (id=300): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x2) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) socket(0x1e, 0x1, 0x106) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_console_fops_tty_io(r3, &(0x7f0000000000), 0x0) socket(0x1f, 0x5, 0x3) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x242000, 0x0) mmap$auto(0x0, 0xfffffffffffffff7, 0xffb, 0x8000000008011, r0, 0x8002) close_range$auto(0x2, 0x8, 0x0) 1.324582329s ago: executing program 2 (id=301): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd2/queue/iosched/front_merges\x00', 0x80302, 0x0) io_uring_register$auto(r0, 0x0, &(0x7f0000000040)="65e0e187b2a9c4", 0x0) sendfile$auto(r0, r0, 0x0, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r2 = socket(0x2, 0x3, 0x100) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) splice$auto(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001a80), 0x1140, 0x0) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0xfffffffffffffffd) mmap$auto(0x0, 0x4, 0xffb, 0xecb8, 0x3, 0x354e) r5 = socket(0x11, 0x3, 0x9) epoll_ctl$auto(r5, 0x0, r5, &(0x7f0000000040)={0xffff1205, 0x6}) prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto(r1, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xc4\xe9d\x03\rF\xec\xb8\x01\x00|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x8ab\xce\xa7tU\x14w\xb4e\xe5\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4}\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lF\x97)}\a\x00\x009-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\x00\x00\x00\x00\x00', 0x4100000a3d6) 1.185193309s ago: executing program 0 (id=302): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) write$auto(r0, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x200000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syncfs$auto(0xffffffffffffffff) mmap$auto(0x54, 0x7, 0xd9, 0x10, 0x40000000000a5, 0x3) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) write$auto(0x3, 0x0, 0x5c8) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) rseq$auto(0x0, 0x20, 0x0, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) io_submit$auto(0x4, 0x7, &(0x7f0000000280)=0x0) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000004}, 0x4804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0xc, 0x75c0237c, "6d962c000400003344980946"}, 0x0, 0x200) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 1.177871059s ago: executing program 2 (id=303): mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone(0x80000000, 0x0, 0xf, 0x0, 0x0, 0x0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x4044085) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mbind$auto(0x8, 0x2091d2, 0x1, 0x0, 0x6, 0x200002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) unshare$auto(0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xbc, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x200) prctl$auto(0x1, 0x6, 0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x420000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x40000, 0x400008, 0xffffffff, 0x9b72, r1, 0x34000000000000) mremap$auto(0x6, 0x100005, 0x843, 0xffffffffffffffff, 0x2) fsopen$auto(0x0, 0x1) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x8000000004, 0x400007, 0x80, 0x16, 0xffffffffffffffff, 0x5) read$auto(0x3, 0x0, 0x8080) 417.747461ms ago: executing program 1 (id=304): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) socket(0x2, 0x1, 0x106) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x4, 0x5, 0x3, 0x5, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0, 0x3, 0x1]}, 0x7, 0x81) statmount$auto(0x0, &(0x7f00000007c0)={0x8, 0x1, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0xd) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x4f) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) select$auto(0x7ff, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x6, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xd]}, 0x0, 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0xf80f, 0x8000000008091, 0x3, 0x3) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x0, 0x400053, 0x9) unshare$auto(0x40000080) 417.242383ms ago: executing program 3 (id=305): socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) setgroups$auto(0x3, &(0x7f0000000080)=0x1) r1 = userfaultfd$auto(0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88302, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_UI_SET_RELBIT(r0, 0x40045566, &(0x7f0000000040)=0x8000) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000000), r1) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4800) 49.474079ms ago: executing program 3 (id=306): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000040)="b6f3ff5c6efad30d6b455767a382919debcd954d76e6ac7e491fd3911946a27eb1e8558a32fcc961544322064cfd14b359dcaf54350366928c927d2fbcad0eeecf029e7ff67f68303a967d6849156f900d10bb0542e8e68a74c7852f2af5a86c95d87ee7eba6e6f96fcdbdb5", 0x58}, 0x10006, 0xfffffff3, 0x5) unshare$auto(0x40000080) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0xa, 0x0) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x22c422, 0x0) (async) ioctl$auto(0x3, 0x40605346, 0x38) 0s ago: executing program 0 (id=307): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x50b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) socket(0x11, 0x3, 0x300) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000100)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8004) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mbind$auto(0x2, 0x2000000000101, 0x100000000, 0x0, 0x0, 0x4) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy5/reset\x00', 0x82641, 0x0) write$auto(r4, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) socket(0xa, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x288b02, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0xa, 0x8) mq_timedsend$auto(r5, &(0x7f0000000180)='\xa0j\xfb\xff\xff\xff\xff\xff\xff\xff\x02\t\x00n~\\^\xe2\x03\xbc\xb3\b\x83>\x83\x1b\x00\x00\x00\x00\x00# 7k\x01\x00\x00\x00\x00\x00\x00\x00\x91$\xca\xe20\x0e\x89\xcd\'Y\xdc\x82V\xc0]\xab\x9b\x9d\x8f\xef\xf2\x80\xac\x92', 0xd95, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044880}, 0x480d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x1a, 0x1, 0x2f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 56.859636][ T5608] cgroup: Unknown subsys name 'net' [ 56.963104][ T5608] cgroup: Unknown subsys name 'cpuset' [ 56.970665][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.120295][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.579402][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.587485][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.596312][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.604733][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.613685][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.627494][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.635766][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.643100][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.650859][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.661770][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.714548][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.723333][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.730647][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.739514][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.750238][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.774663][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.785024][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.792463][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.800255][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.809444][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.425229][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.432574][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.439922][ T5621] bridge_slave_0: entered allmulticast mode [ 60.446640][ T5621] bridge_slave_0: entered promiscuous mode [ 60.465662][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.472890][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.480103][ T5621] bridge_slave_1: entered allmulticast mode [ 60.487750][ T5621] bridge_slave_1: entered promiscuous mode [ 60.540574][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.568138][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.610944][ T5621] team0: Port device team_slave_0 added [ 60.638128][ T5621] team0: Port device team_slave_1 added [ 60.698507][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.706405][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.732750][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.746522][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.753948][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.761232][ T5630] bridge_slave_0: entered allmulticast mode [ 60.767747][ T5630] bridge_slave_0: entered promiscuous mode [ 60.779093][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.786120][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.812061][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.825768][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.832968][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.840281][ T5630] bridge_slave_1: entered allmulticast mode [ 60.847040][ T5630] bridge_slave_1: entered promiscuous mode [ 60.887174][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.910807][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.925056][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.932271][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.939426][ T5624] bridge_slave_0: entered allmulticast mode [ 60.946135][ T5624] bridge_slave_0: entered promiscuous mode [ 60.966890][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.974270][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.981607][ T5624] bridge_slave_1: entered allmulticast mode [ 60.988129][ T5624] bridge_slave_1: entered promiscuous mode [ 60.997359][ T5621] hsr_slave_0: entered promiscuous mode [ 61.003603][ T5621] hsr_slave_1: entered promiscuous mode [ 61.014741][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.021892][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.029038][ T5634] bridge_slave_0: entered allmulticast mode [ 61.035749][ T5634] bridge_slave_0: entered promiscuous mode [ 61.054010][ T5630] team0: Port device team_slave_0 added [ 61.059812][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.066988][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.074390][ T5634] bridge_slave_1: entered allmulticast mode [ 61.080894][ T5634] bridge_slave_1: entered promiscuous mode [ 61.095204][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.105845][ T5630] team0: Port device team_slave_1 added [ 61.122975][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.141934][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.167369][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.182219][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.189263][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.215291][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.235461][ T5624] team0: Port device team_slave_0 added [ 61.241813][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.248827][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.275054][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.295226][ T5624] team0: Port device team_slave_1 added [ 61.309493][ T5634] team0: Port device team_slave_0 added [ 61.329932][ T5634] team0: Port device team_slave_1 added [ 61.341684][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.348805][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.374775][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.404048][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.411091][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.437558][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.460754][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.467815][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.494752][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.507072][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.514075][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.540360][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.559271][ T5630] hsr_slave_0: entered promiscuous mode [ 61.565474][ T5630] hsr_slave_1: entered promiscuous mode [ 61.571762][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 61.577518][ T5630] Cannot create hsr debugfs directory [ 61.606789][ T5624] hsr_slave_0: entered promiscuous mode [ 61.613376][ T5624] hsr_slave_1: entered promiscuous mode [ 61.619324][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 61.625105][ T5624] Cannot create hsr debugfs directory [ 61.651222][ T5623] Bluetooth: hci0: command tx timeout [ 61.684645][ T5634] hsr_slave_0: entered promiscuous mode [ 61.690669][ T5634] hsr_slave_1: entered promiscuous mode [ 61.697076][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 61.703053][ T5634] Cannot create hsr debugfs directory [ 61.731202][ T5623] Bluetooth: hci1: command tx timeout [ 61.811248][ T5623] Bluetooth: hci2: command tx timeout [ 61.812940][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.825301][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.843645][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.852288][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.872197][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.880514][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.891287][ T5623] Bluetooth: hci3: command tx timeout [ 61.900157][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.908542][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.946903][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.955662][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.964894][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.973397][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.983645][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.992890][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.003890][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.012252][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.053635][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.063364][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.073439][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.082434][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.090193][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.098730][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.113147][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.122175][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.163830][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.173004][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.180605][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.189053][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.196857][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.205546][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.213682][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.222180][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.273467][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.313924][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.333187][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.345871][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.353083][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.368861][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.375989][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.397213][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.417334][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.424478][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.435504][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.455275][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.468228][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.475401][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.493436][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.502028][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.524094][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.531231][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.539881][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.546990][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.563965][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.571090][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.579504][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.586620][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.176792][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.253129][ T5621] veth0_vlan: entered promiscuous mode [ 63.279014][ T5621] veth1_vlan: entered promiscuous mode [ 63.302203][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.318390][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.335860][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.385084][ T5624] veth0_vlan: entered promiscuous mode [ 63.392249][ T5621] veth0_macvtap: entered promiscuous mode [ 63.417674][ T5621] veth1_macvtap: entered promiscuous mode [ 63.427953][ T5630] veth0_vlan: entered promiscuous mode [ 63.440842][ T5624] veth1_vlan: entered promiscuous mode [ 63.448730][ T5634] veth0_vlan: entered promiscuous mode [ 63.465664][ T5634] veth1_vlan: entered promiscuous mode [ 63.474769][ T5630] veth1_vlan: entered promiscuous mode [ 63.483310][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.503697][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.524282][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.533356][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.547496][ T5624] veth0_macvtap: entered promiscuous mode [ 63.555394][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.564462][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.587084][ T5624] veth1_macvtap: entered promiscuous mode [ 63.595654][ T5634] veth0_macvtap: entered promiscuous mode [ 63.610438][ T5634] veth1_macvtap: entered promiscuous mode [ 63.636005][ T5630] veth0_macvtap: entered promiscuous mode [ 63.645787][ T5630] veth1_macvtap: entered promiscuous mode [ 63.663386][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.678246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.685035][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.689751][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.702921][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.731448][ T5623] Bluetooth: hci0: command tx timeout [ 63.732334][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.745286][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.753239][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.762333][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.779372][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.788299][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.788667][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.797773][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.818871][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.826850][ T5623] Bluetooth: hci1: command tx timeout [ 63.832377][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.845116][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.862944][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.872295][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.885442][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.900292][ T5623] Bluetooth: hci2: command tx timeout [ 63.907182][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.934444][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.943311][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.966073][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.981518][ T5623] Bluetooth: hci3: command tx timeout [ 63.995524][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.008357][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.037510][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.046054][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.088420][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.100614][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.149063][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.166720][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.216454][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.234471][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.243927][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.254324][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.264624][ T5768] FAULT_INJECTION: forcing a failure. [ 64.264624][ T5768] name failslab, interval 1, probability 0, space 0, times 1 [ 64.284341][ T5768] CPU: 1 UID: 0 PID: 5768 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 64.284379][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 64.284403][ T5768] Call Trace: [ 64.284411][ T5768] [ 64.284420][ T5768] dump_stack_lvl+0x100/0x190 [ 64.284457][ T5768] should_fail_ex.cold+0x5/0xa [ 64.284486][ T5768] ? __kmalloc_noprof+0xba/0x840 [ 64.284527][ T5768] ? lsm_blob_alloc+0x68/0x90 [ 64.284568][ T5768] should_failslab+0xc2/0x120 [ 64.284599][ T5768] __kmalloc_noprof+0xe0/0x840 [ 64.284633][ T5768] ? trace_kmem_cache_alloc+0xdd/0x100 [ 64.284670][ T5768] lsm_blob_alloc+0x68/0x90 [ 64.284715][ T5768] security_sk_alloc+0x2d/0x290 [ 64.284745][ T5768] sk_prot_alloc+0x1d1/0x2a0 [ 64.284772][ T5768] sk_alloc+0x36/0xe80 [ 64.284805][ T5768] inet6_create+0x385/0x12b0 [ 64.284831][ T5768] ? inet6_create+0x7f/0x12b0 [ 64.284857][ T5768] __sock_create+0x339/0x860 [ 64.284887][ T5768] udp_sock_create6+0xc7/0x6a0 [ 64.284927][ T5768] ? __pfx_udp_sock_create6+0x10/0x10 [ 64.284965][ T5768] ? crng_make_state+0x273/0x6c0 [ 64.285009][ T5768] ? rcu_is_watching+0x12/0xc0 [ 64.285039][ T5768] ? trace_irq_enable.constprop.0+0x122/0x160 [ 64.285080][ T5768] ? crng_make_state+0x2b0/0x6c0 [ 64.285120][ T5768] rxrpc_open_socket+0x206/0x6e0 [ 64.285161][ T5768] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 64.285208][ T5768] ? rcu_is_watching+0x12/0xc0 [ 64.285236][ T5768] rxrpc_lookup_local+0xac7/0x1220 [ 64.285319][ T5768] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 64.285359][ T5768] ? rxrpc_sendmsg+0x116/0x680 [ 64.285385][ T5768] ? rcu_is_watching+0x12/0xc0 [ 64.285410][ T5768] ? rxrpc_sendmsg+0x116/0x680 [ 64.285435][ T5768] ? trace_irq_enable.constprop.0+0x122/0x160 [ 64.285476][ T5768] rxrpc_sendmsg+0x34a/0x680 [ 64.285504][ T5768] sock_write_iter+0x53a/0x5b0 [ 64.285529][ T5768] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 64.285556][ T5768] ? __pfx_sock_write_iter+0x10/0x10 [ 64.285586][ T5768] ? bpf_lsm_file_permission+0x9/0x10 [ 64.285623][ T5768] ? security_file_permission+0x76/0x210 [ 64.285661][ T5768] ? rw_verify_area+0xce/0x6d0 [ 64.285695][ T5768] vfs_write+0x6ac/0x1050 [ 64.285729][ T5768] ? __pfx_sock_write_iter+0x10/0x10 [ 64.285757][ T5768] ? __pfx_vfs_write+0x10/0x10 [ 64.285789][ T5768] ? lock_release+0x24d/0x310 [ 64.285829][ T5768] ksys_write+0x1f8/0x250 [ 64.285859][ T5768] ? __pfx_ksys_write+0x10/0x10 [ 64.285892][ T5768] ? rcu_is_watching+0x12/0xc0 [ 64.285920][ T5768] do_syscall_64+0x115/0x840 [ 64.285948][ T5768] ? clear_bhb_loop+0x40/0x90 [ 64.285979][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.286007][ T5768] RIP: 0033:0x7fa84879ce59 [ 64.286041][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.286072][ T5768] RSP: 002b:00007fa849718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.286104][ T5768] RAX: ffffffffffffffda RBX: 00007fa848a16090 RCX: 00007fa84879ce59 [ 64.286123][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 64.286140][ T5768] RBP: 00007fa848832e6f R08: 0000000000000000 R09: 0000000000000000 [ 64.286157][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.286173][ T5768] R13: 00007fa848a16128 R14: 00007fa848a16090 R15: 00007ffd21d770a8 [ 64.286198][ T5768] [ 64.656649][ T5768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 64.670472][ T5768] nbd: must specify a size in bytes for the device [ 64.705886][ T29] audit: type=1800 audit(1781939759.322:2): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="features" dev="configfs" ino=7777 res=0 errno=0 [ 64.962785][ T5780] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 65.057310][ T5780] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 65.346377][ T5788] netlink: 310 bytes leftover after parsing attributes in process `syz.2.7'. [ 65.391800][ T5788] Zero length message leads to an empty skb [ 65.763622][ T5798] openvswitch: netlink: Key type 348 is out of range max 32 [ 65.812002][ T5623] Bluetooth: hci0: command tx timeout [ 65.902205][ T5623] Bluetooth: hci1: command tx timeout [ 65.930056][ T5802] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 65.938043][ T5805] sd 0:0:1:0: PR command failed: 1026 [ 65.946110][ T5805] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 65.959742][ T5805] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 65.971526][ T5623] Bluetooth: hci2: command tx timeout [ 65.989222][ T5802] netlink: 330 bytes leftover after parsing attributes in process `syz.2.11'. [ 66.010668][ T5809] mmap: syz.0.13 (5809) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.051602][ T5623] Bluetooth: hci3: command tx timeout [ 66.380958][ T5819] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.603109][ T5825] sd 0:0:1:0: PR command failed: 1026 [ 66.626637][ T5825] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 66.656406][ T5825] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 66.940050][ T5824] netlink: 342 bytes leftover after parsing attributes in process `syz.3.16'. [ 67.024113][ T5824] netlink: 342 bytes leftover after parsing attributes in process `syz.3.16'. [ 67.891539][ T5623] Bluetooth: hci0: command tx timeout [ 67.971830][ T5623] Bluetooth: hci1: command tx timeout [ 68.053245][ T5623] Bluetooth: hci2: command tx timeout [ 68.131841][ T5623] Bluetooth: hci3: command tx timeout [ 69.154633][ T5883] netlink: 330 bytes leftover after parsing attributes in process `syz.1.26'. [ 69.761875][ T5864] kexec: Could not allocate control_code_buffer [ 69.945375][ T5900] netlink: 346 bytes leftover after parsing attributes in process `syz.3.29'. [ 70.083785][ T5891] ubi0: attaching mtd0 [ 70.109981][ T5891] ubi0: scanning is finished [ 70.131415][ T5891] ubi0: empty MTD device detected [ 70.448590][ T5891] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 70.497888][ T5891] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 70.541245][ T5891] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 70.562777][ T5891] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 70.605413][ T5891] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 70.626703][ T5919] sd 0:0:1:0: PR command failed: 1026 [ 70.651239][ T5891] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 70.659495][ T5919] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 70.675250][ T5919] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 70.691290][ T5891] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1900827564 [ 70.752619][ T5891] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 70.844744][ T5917] ubi0: background thread "ubi_bgt0d" started, PID 5917 [ 70.844760][ T5895] ubi0: detaching mtd0 [ 70.895091][ T5895] ubi0: mtd0 is detached [ 71.443121][ T5934] sd 0:0:1:0: PR command failed: 1026 [ 71.455125][ T5934] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 71.479022][ T5934] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 71.501656][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.509558][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.765389][ T5985] netlink: 130 bytes leftover after parsing attributes in process `syz.0.44'. [ 74.905522][ T6012] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 74.919267][ T6012] bond0: option packets_per_slave: allowed values 0 - 65535 [ 75.134480][ T6028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 75.457023][ T6036] FAULT_INJECTION: forcing a failure. [ 75.457023][ T6036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.504795][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: syz.2.55 Not tainted syzkaller #0 PREEMPT(full) [ 75.504833][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.504848][ T6036] Call Trace: [ 75.504857][ T6036] [ 75.504866][ T6036] dump_stack_lvl+0x100/0x190 [ 75.504900][ T6036] should_fail_ex.cold+0x5/0xa [ 75.504936][ T6036] _copy_from_user+0x2e/0xd0 [ 75.504982][ T6036] copy_msghdr_from_user+0x9f/0x4c0 [ 75.505013][ T6036] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 75.505046][ T6036] ? __pfx__kstrtoull+0x10/0x10 [ 75.505074][ T6036] ? rcu_is_watching+0x12/0xc0 [ 75.505104][ T6036] ? aa_file_perm+0x7e4/0x14d0 [ 75.505148][ T6036] ___sys_sendmsg+0x106/0x1e0 [ 75.505177][ T6036] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.505211][ T6036] ? rcu_is_watching+0x12/0xc0 [ 75.505249][ T6036] __sys_sendmmsg+0x20c/0x440 [ 75.505288][ T6036] ? __pfx___sys_sendmmsg+0x10/0x10 [ 75.505325][ T6036] ? rcu_is_watching+0x12/0xc0 [ 75.505351][ T6036] ? ksys_write+0x190/0x250 [ 75.505405][ T6036] ? fput+0x79/0x100 [ 75.505428][ T6036] ? ksys_write+0x1ac/0x250 [ 75.505462][ T6036] ? __pfx_ksys_write+0x10/0x10 [ 75.505505][ T6036] __x64_sys_sendmmsg+0x9c/0x100 [ 75.505543][ T6036] do_syscall_64+0x115/0x840 [ 75.505573][ T6036] ? clear_bhb_loop+0x40/0x90 [ 75.505609][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.505644][ T6036] RIP: 0033:0x7fa84879ce59 [ 75.505665][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.505690][ T6036] RSP: 002b:00007fa849739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.505716][ T6036] RAX: ffffffffffffffda RBX: 00007fa848a15fa0 RCX: 00007fa84879ce59 [ 75.505733][ T6036] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000007 [ 75.505750][ T6036] RBP: 00007fa849739090 R08: 0000000000000000 R09: 0000000000000000 [ 75.505766][ T6036] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 75.505782][ T6036] R13: 00007fa848a16038 R14: 00007fa848a15fa0 R15: 00007ffd21d770a8 [ 75.505808][ T6036] [ 75.896279][ T5623] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 76.217698][ T6052] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 76.644859][ T6079] FAULT_INJECTION: forcing a failure. [ 76.644859][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.692596][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 76.692619][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.692628][ T6079] Call Trace: [ 76.692633][ T6079] [ 76.692639][ T6079] dump_stack_lvl+0x100/0x190 [ 76.692658][ T6079] should_fail_ex.cold+0x5/0xa [ 76.692676][ T6079] _copy_from_user+0x2e/0xd0 [ 76.692698][ T6079] ____sys_sendmsg+0x1d1/0xbe0 [ 76.692714][ T6079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.692729][ T6079] ? __pfx__kstrtoull+0x10/0x10 [ 76.692744][ T6079] ? rcu_is_watching+0x12/0xc0 [ 76.692759][ T6079] ? aa_file_perm+0x7e4/0x14d0 [ 76.692782][ T6079] ___sys_sendmsg+0x190/0x1e0 [ 76.692797][ T6079] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.692815][ T6079] ? rcu_is_watching+0x12/0xc0 [ 76.692834][ T6079] __sys_sendmmsg+0x20c/0x440 [ 76.692855][ T6079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 76.692874][ T6079] ? rcu_is_watching+0x12/0xc0 [ 76.692891][ T6079] ? ksys_write+0x190/0x250 [ 76.692916][ T6079] ? fput+0x79/0x100 [ 76.692931][ T6079] ? ksys_write+0x1ac/0x250 [ 76.692962][ T6079] ? __pfx_ksys_write+0x10/0x10 [ 76.692997][ T6079] __x64_sys_sendmmsg+0x9c/0x100 [ 76.693021][ T6079] do_syscall_64+0x115/0x840 [ 76.693037][ T6079] ? clear_bhb_loop+0x40/0x90 [ 76.693053][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.693068][ T6079] RIP: 0033:0x7f4d1779ce59 [ 76.693080][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.693094][ T6079] RSP: 002b:00007f4d185a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.693109][ T6079] RAX: ffffffffffffffda RBX: 00007f4d17a15fa0 RCX: 00007f4d1779ce59 [ 76.693118][ T6079] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000007 [ 76.693127][ T6079] RBP: 00007f4d185a4090 R08: 0000000000000000 R09: 0000000000000000 [ 76.693136][ T6079] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 76.693144][ T6079] R13: 00007f4d17a16038 R14: 00007f4d17a15fa0 R15: 00007ffdbd4a5058 [ 76.693157][ T6079] [ 77.256040][ T6089] process 'syz.1.66' launched ':,' with NULL argv: empty string added [ 79.422811][ T6147] FAULT_INJECTION: forcing a failure. [ 79.422811][ T6147] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.449110][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(full) [ 79.449148][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.449164][ T6147] Call Trace: [ 79.449172][ T6147] [ 79.449182][ T6147] dump_stack_lvl+0x100/0x190 [ 79.449214][ T6147] should_fail_ex.cold+0x5/0xa [ 79.449245][ T6147] should_fail_alloc_page+0xeb/0x140 [ 79.449288][ T6147] prepare_alloc_pages+0x1f0/0x5f0 [ 79.449321][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.449350][ T6147] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 79.449394][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.449421][ T6147] ? is_bpf_text_address+0x8a/0x1a0 [ 79.449455][ T6147] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.449488][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.449514][ T6147] ? is_bpf_text_address+0x8a/0x1a0 [ 79.449546][ T6147] ? lock_release+0x24d/0x310 [ 79.449580][ T6147] ? bpf_ksym_find+0x124/0x1c0 [ 79.449604][ T6147] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.449639][ T6147] ? is_bpf_text_address+0x94/0x1a0 [ 79.449671][ T6147] ? kernel_text_address+0x8d/0x100 [ 79.449705][ T6147] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 79.449743][ T6147] ? arch_stack_walk+0xa6/0xf0 [ 79.449778][ T6147] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 79.449819][ T6147] ? vma_is_special_huge+0x23f/0x2d0 [ 79.449851][ T6147] ? __pfx_vma_is_special_huge+0x10/0x10 [ 79.449883][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.449909][ T6147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.449943][ T6147] ? policy_nodemask+0xed/0x4f0 [ 79.449976][ T6147] alloc_pages_mpol+0x1fb/0x540 [ 79.450008][ T6147] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 79.450041][ T6147] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 79.450080][ T6147] alloc_pages_noprof+0x1a/0x160 [ 79.450116][ T6147] __pmd_alloc+0x3b/0x950 [ 79.450150][ T6147] __handle_mm_fault+0xa9c/0x2a00 [ 79.450194][ T6147] ? mt_find+0x45e/0x8e0 [ 79.450228][ T6147] ? __pfx___handle_mm_fault+0x10/0x10 [ 79.450265][ T6147] ? __pfx_mt_find+0x10/0x10 [ 79.450311][ T6147] ? find_vma+0xbf/0x140 [ 79.450338][ T6147] ? __pfx_find_vma+0x10/0x10 [ 79.450367][ T6147] handle_mm_fault+0x37b/0xa30 [ 79.450408][ T6147] do_user_addr_fault+0x74c/0x12f0 [ 79.450447][ T6147] exc_page_fault+0x6f/0xd0 [ 79.450474][ T6147] asm_exc_page_fault+0x26/0x30 [ 79.450500][ T6147] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 79.450545][ T6147] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 79.450569][ T6147] RSP: 0018:ffffc900015f79b0 EFLAGS: 00050246 [ 79.450592][ T6147] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 79.450606][ T6147] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900015f7a38 [ 79.450621][ T6147] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520002bef47 [ 79.450637][ T6147] R10: ffffc900015f7a3f R11: 0000000000000000 R12: 0000000000000000 [ 79.450653][ T6147] R13: ffffc900015f7a38 R14: 1ffff920002bef41 R15: ffffc900015f7d7c [ 79.450679][ T6147] _copy_from_user+0x98/0xd0 [ 79.450720][ T6147] ____sys_sendmsg+0x1d1/0xbe0 [ 79.450749][ T6147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.450778][ T6147] ? __pfx__kstrtoull+0x10/0x10 [ 79.450805][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.450832][ T6147] ? aa_file_perm+0x7e4/0x14d0 [ 79.450873][ T6147] ___sys_sendmsg+0x190/0x1e0 [ 79.450902][ T6147] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.450938][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.450977][ T6147] __sys_sendmmsg+0x20c/0x440 [ 79.451014][ T6147] ? __pfx___sys_sendmmsg+0x10/0x10 [ 79.451050][ T6147] ? rcu_is_watching+0x12/0xc0 [ 79.451077][ T6147] ? ksys_write+0x190/0x250 [ 79.451120][ T6147] ? fput+0x79/0x100 [ 79.451138][ T6147] ? ksys_write+0x1ac/0x250 [ 79.451168][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 79.451205][ T6147] __x64_sys_sendmmsg+0x9c/0x100 [ 79.451241][ T6147] do_syscall_64+0x115/0x840 [ 79.451269][ T6147] ? clear_bhb_loop+0x40/0x90 [ 79.451306][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.451333][ T6147] RIP: 0033:0x7f94c739ce59 [ 79.451354][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.451375][ T6147] RSP: 002b:00007f94c8226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.451397][ T6147] RAX: ffffffffffffffda RBX: 00007f94c7615fa0 RCX: 00007f94c739ce59 [ 79.451415][ T6147] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000007 [ 79.451430][ T6147] RBP: 00007f94c8226090 R08: 0000000000000000 R09: 0000000000000000 [ 79.451446][ T6147] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 79.451462][ T6147] R13: 00007f94c7616038 R14: 00007f94c7615fa0 R15: 00007ffe6c7ddfa8 [ 79.451484][ T6147] [ 80.366930][ T6162] futex_wake_op: syz.3.79 tries to shift op by -2048; fix this program [ 80.387770][ T6162] futex_wake_op: syz.3.79 tries to shift op by -2048; fix this program [ 80.478032][ T6168] random: crng reseeded on system resumption [ 80.516501][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 81.733162][ T46] cfg80211: failed to load regulatory.db [ 81.801766][ T6198] MTRR 1 not used [ 81.927505][ T6201] zswap: compressor FÛâ(_ not available [ 82.079628][ T6207] random: crng reseeded on system resumption [ 82.537398][ T6217] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.161061][ T6227] vivid-007: ================= START STATUS ================= [ 83.176024][ T6233] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.181536][ T6227] vivid-007: Generate PTS: true [ 83.197627][ T6227] vivid-007: Generate SCR: true [ 83.212775][ T6227] tpg source WxH: 320x240 (Y'CbCr) [ 83.227835][ T6227] tpg field: 1 [ 83.238303][ T6227] tpg crop: (0,0)/320x240 [ 83.244381][ T6227] tpg compose: (0,0)/320x240 [ 83.249548][ T6227] tpg colorspace: 8 [ 83.253515][ T6227] tpg transfer function: 0/0 [ 83.268660][ T6227] tpg Y'CbCr encoding: 0/0 [ 83.283451][ T6227] tpg quantization: 0/0 [ 83.289212][ T6227] tpg RGB range: 0/2 [ 83.296434][ T6227] vivid-007: ================== END STATUS ================== [ 83.370303][ T6242] FAULT_INJECTION: forcing a failure. [ 83.370303][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 83.425729][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(full) [ 83.425753][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.425762][ T6242] Call Trace: [ 83.425767][ T6242] [ 83.425773][ T6242] dump_stack_lvl+0x100/0x190 [ 83.425793][ T6242] should_fail_ex.cold+0x5/0xa [ 83.425809][ T6242] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 83.425826][ T6242] should_failslab+0xc2/0x120 [ 83.425857][ T6242] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 83.425879][ T6242] ? ptlock_alloc+0x1f/0x70 [ 83.425899][ T6242] ? do_raw_spin_lock+0x128/0x260 [ 83.425914][ T6242] ptlock_alloc+0x1f/0x70 [ 83.425933][ T6242] pte_alloc_one+0x82/0x3d0 [ 83.425960][ T6242] do_fault+0x86c/0x1750 [ 83.425978][ T6242] ? __pmd_alloc+0x3fb/0x950 [ 83.425996][ T6242] __handle_mm_fault+0x187d/0x2a00 [ 83.426018][ T6242] ? mt_find+0x45e/0x8e0 [ 83.426036][ T6242] ? __pfx___handle_mm_fault+0x10/0x10 [ 83.426055][ T6242] ? __pfx_mt_find+0x10/0x10 [ 83.426076][ T6242] ? find_vma+0xbf/0x140 [ 83.426090][ T6242] ? __pfx_find_vma+0x10/0x10 [ 83.426105][ T6242] handle_mm_fault+0x37b/0xa30 [ 83.426127][ T6242] do_user_addr_fault+0x74c/0x12f0 [ 83.426147][ T6242] exc_page_fault+0x6f/0xd0 [ 83.426162][ T6242] asm_exc_page_fault+0x26/0x30 [ 83.426176][ T6242] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 83.426198][ T6242] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 83.426211][ T6242] RSP: 0018:ffffc9000385fa98 EFLAGS: 00050212 [ 83.426224][ T6242] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024 [ 83.426233][ T6242] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000385fb28 [ 83.426242][ T6242] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff5200070bf69 [ 83.426251][ T6242] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 83.426259][ T6242] R13: ffffc9000385fb28 R14: 0000000000000000 R15: 000000000000b6bd [ 83.426272][ T6242] _copy_from_user+0x98/0xd0 [ 83.426294][ T6242] sg_write+0x2af/0xdb0 [ 83.426314][ T6242] ? __pfx_sg_write+0x10/0x10 [ 83.426338][ T6242] ? apparmor_file_permission+0x13f/0x1c0 [ 83.426358][ T6242] ? bpf_lsm_file_permission+0x9/0x10 [ 83.426378][ T6242] ? security_file_permission+0x76/0x210 [ 83.426398][ T6242] ? rw_verify_area+0xce/0x6d0 [ 83.426416][ T6242] vfs_write+0x2aa/0x1050 [ 83.426434][ T6242] ? __pfx_sg_write+0x10/0x10 [ 83.426455][ T6242] ? __pfx_vfs_write+0x10/0x10 [ 83.426473][ T6242] ? __fget_files+0x215/0x3d0 [ 83.426491][ T6242] ? rcu_is_watching+0x12/0xc0 [ 83.426505][ T6242] ? __fget_files+0x215/0x3d0 [ 83.426523][ T6242] ? lock_release+0x24d/0x310 [ 83.426543][ T6242] ? __fget_files+0x21f/0x3d0 [ 83.426566][ T6242] ksys_write+0x12a/0x250 [ 83.426584][ T6242] ? __pfx_ksys_write+0x10/0x10 [ 83.426604][ T6242] ? rcu_is_watching+0x12/0xc0 [ 83.426619][ T6242] do_syscall_64+0x115/0x840 [ 83.426635][ T6242] ? clear_bhb_loop+0x40/0x90 [ 83.426651][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.426665][ T6242] RIP: 0033:0x7f4d1779ce59 [ 83.426677][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.426690][ T6242] RSP: 002b:00007f4d185a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.426703][ T6242] RAX: ffffffffffffffda RBX: 00007f4d17a15fa0 RCX: 00007f4d1779ce59 [ 83.426712][ T6242] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 83.426721][ T6242] RBP: 00007f4d17832e6f R08: 0000000000000000 R09: 0000000000000000 [ 83.426729][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.426737][ T6242] R13: 00007f4d17a16038 R14: 00007f4d17a15fa0 R15: 00007ffdbd4a5058 [ 83.426751][ T6242] [ 84.229227][ T6254] HfR: entered promiscuous mode [ 84.409398][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 84.439757][ T6259] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 84.448434][ T6253] netlink: 86 bytes leftover after parsing attributes in process `syz.1.96'. [ 85.180109][ T6285] random: crng reseeded on system resumption [ 85.358406][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 85.423869][ T6296] FAULT_INJECTION: forcing a failure. [ 85.423869][ T6296] name fail_futex, interval 1, probability 0, space 0, times 1 [ 85.436772][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) [ 85.436809][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.436825][ T6296] Call Trace: [ 85.436833][ T6296] [ 85.436843][ T6296] dump_stack_lvl+0x100/0x190 [ 85.436876][ T6296] should_fail_ex.cold+0x5/0xa [ 85.436908][ T6296] should_fail_futex+0x4c/0x60 [ 85.436949][ T6296] futex_lock_pi_atomic+0x12d/0xaf0 [ 85.436983][ T6296] futex_lock_pi+0x278/0x7f0 [ 85.437016][ T6296] ? __pfx_futex_lock_pi+0x10/0x10 [ 85.437045][ T6296] ? try_to_wake_up+0x70a/0x1c90 [ 85.437089][ T6296] ? __pfx_try_to_wake_up+0x10/0x10 [ 85.437137][ T6296] ? plist_check_list+0x1b8/0x280 [ 85.437183][ T6296] ? futex_private_hash_put+0x115/0x1c0 [ 85.437225][ T6296] ? __pfx_futex_wake_mark+0x10/0x10 [ 85.437267][ T6296] ? preempt_count_add+0x76/0x150 [ 85.437303][ T6296] ? ksys_write+0x190/0x250 [ 85.437334][ T6296] ? rcu_is_watching+0x12/0xc0 [ 85.437362][ T6296] do_futex+0x371/0x440 [ 85.437386][ T6296] ? __pfx_do_futex+0x10/0x10 [ 85.437408][ T6296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.437441][ T6296] __x64_sys_futex+0x34f/0x4d0 [ 85.437465][ T6296] ? __pfx___x64_sys_futex+0x10/0x10 [ 85.437494][ T6296] ? rcu_is_watching+0x12/0xc0 [ 85.437523][ T6296] do_syscall_64+0x115/0x840 [ 85.437548][ T6296] ? clear_bhb_loop+0x40/0x90 [ 85.437576][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.437602][ T6296] RIP: 0033:0x7f94c739ce59 [ 85.437622][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.437647][ T6296] RSP: 002b:00007f94c8226028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 85.437673][ T6296] RAX: ffffffffffffffda RBX: 00007f94c7615fa0 RCX: 00007f94c739ce59 [ 85.437691][ T6296] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 85.437706][ T6296] RBP: 00007f94c7432e6f R08: 0000000000000000 R09: 000000008000fff5 [ 85.437722][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.437737][ T6296] R13: 00007f94c7616038 R14: 00007f94c7615fa0 R15: 00007ffe6c7ddfa8 [ 85.437763][ T6296] [ 86.260971][ T6330] random: crng reseeded on system resumption [ 86.630018][ T6322] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 87.081798][ T6354] FAULT_INJECTION: forcing a failure. [ 87.081798][ T6354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.117914][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 87.117954][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.117971][ T6354] Call Trace: [ 87.117988][ T6354] [ 87.117999][ T6354] dump_stack_lvl+0x100/0x190 [ 87.118033][ T6354] should_fail_ex.cold+0x5/0xa [ 87.118067][ T6354] should_fail_alloc_page+0xeb/0x140 [ 87.118104][ T6354] prepare_alloc_pages+0x1f0/0x5f0 [ 87.118141][ T6354] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 87.118184][ T6354] ? mas_next_slot+0x10a3/0x1960 [ 87.118220][ T6354] ? __pfx___up_read+0x10/0x10 [ 87.118246][ T6354] ? mas_find+0x2dd/0x740 [ 87.118277][ T6354] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.118325][ T6354] ? __pfx_validate_mm+0x10/0x10 [ 87.118369][ T6354] ? vma_iter_store_overwrite+0x392/0x650 [ 87.118411][ T6354] ? vma_link+0x5ee/0x8d0 [ 87.118446][ T6354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.118480][ T6354] ? policy_nodemask+0xed/0x4f0 [ 87.118528][ T6354] alloc_pages_mpol+0x1fb/0x540 [ 87.118562][ T6354] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 87.118596][ T6354] ? anon_vma_clone+0x675/0xcd0 [ 87.118635][ T6354] alloc_pages_noprof+0x1a/0x160 [ 87.118673][ T6354] __pmd_alloc+0x3b/0x950 [ 87.118708][ T6354] move_page_tables+0x2f7c/0x4610 [ 87.118749][ T6354] ? __pfx_copy_vma+0x10/0x10 [ 87.118790][ T6354] ? __pfx_move_page_tables+0x10/0x10 [ 87.118834][ T6354] ? rcu_is_watching+0x12/0xc0 [ 87.118859][ T6354] ? lock_acquire+0x301/0x370 [ 87.118896][ T6354] ? finish_task_switch.isra.0+0x2c5/0x1010 [ 87.118945][ T6354] copy_vma_and_data+0x25c/0x7c0 [ 87.118999][ T6354] ? __pfx_copy_vma_and_data+0x10/0x10 [ 87.119046][ T6354] ? lock_release+0x24d/0x310 [ 87.119084][ T6354] ? __vma_start_write+0x17f/0x280 [ 87.119121][ T6354] ? __pfx___vma_start_write+0x10/0x10 [ 87.119160][ T6354] ? security_vm_enough_memory_mm+0xdc/0x110 [ 87.119191][ T6354] move_vma+0x574/0x1920 [ 87.119237][ T6354] ? __pfx_move_vma+0x10/0x10 [ 87.119280][ T6354] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 87.119313][ T6354] ? cap_mmap_addr+0x4b/0x120 [ 87.119339][ T6354] ? bpf_lsm_mmap_addr+0x9/0x30 [ 87.119380][ T6354] ? security_mmap_addr+0x71/0x1e0 [ 87.119417][ T6354] ? __get_unmapped_area+0x255/0x3e0 [ 87.119450][ T6354] ? vrm_set_new_addr+0x204/0x290 [ 87.119490][ T6354] mremap_to+0x234/0x4c0 [ 87.119526][ T6354] ? mas_walk+0x6ef/0x9b0 [ 87.119552][ T6354] ? __pfx_mremap_to+0x10/0x10 [ 87.119589][ T6354] ? check_prep_vma+0x912/0xe60 [ 87.119627][ T6354] __do_sys_mremap+0x88c/0x1850 [ 87.119669][ T6354] ? __pfx___do_sys_mremap+0x10/0x10 [ 87.119710][ T6354] ? __pfx_do_futex+0x10/0x10 [ 87.119738][ T6354] ? __x64_sys_futex+0x34f/0x4d0 [ 87.119771][ T6354] ? rcu_is_watching+0x12/0xc0 [ 87.119803][ T6354] do_syscall_64+0x115/0x840 [ 87.119831][ T6354] ? clear_bhb_loop+0x40/0x90 [ 87.119860][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.119889][ T6354] RIP: 0033:0x7f94c739ce59 [ 87.119922][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.119948][ T6354] RSP: 002b:00007f94c8205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 87.119982][ T6354] RAX: ffffffffffffffda RBX: 00007f94c7616090 RCX: 00007f94c739ce59 [ 87.120000][ T6354] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 87.120017][ T6354] RBP: 00007f94c7432e6f R08: 0000000100000000 R09: 0000000000000000 [ 87.120033][ T6354] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 87.120049][ T6354] R13: 00007f94c7616128 R14: 00007f94c7616090 R15: 00007ffe6c7ddfa8 [ 87.120075][ T6354] [ 88.619451][ T6372] KVM: debugfs: duplicate directory 6372-3 [ 89.673207][ T6413] bond0: option arp_interval: invalid value () [ 89.686317][ T6413] bond0: option arp_interval: allowed values 0 - 2147483647 [ 91.835305][ T6461] KVM: debugfs: duplicate directory 6461-3 [ 92.364376][ T6494] FAULT_INJECTION: forcing a failure. [ 92.364376][ T6494] name failslab, interval 1, probability 0, space 0, times 0 [ 92.399201][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(full) [ 92.399239][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.399255][ T6494] Call Trace: [ 92.399263][ T6494] [ 92.399272][ T6494] dump_stack_lvl+0x100/0x190 [ 92.399303][ T6494] should_fail_ex.cold+0x5/0xa [ 92.399331][ T6494] ? __kvmalloc_node_noprof+0xd4/0xa60 [ 92.399360][ T6494] should_failslab+0xc2/0x120 [ 92.399391][ T6494] __kvmalloc_node_noprof+0xfa/0xa60 [ 92.399416][ T6494] ? seq_read_iter+0x819/0x1270 [ 92.399452][ T6494] seq_read_iter+0x819/0x1270 [ 92.399483][ T6494] ? rcu_is_watching+0x12/0xc0 [ 92.399513][ T6494] ? apparmor_file_permission+0x13f/0x1c0 [ 92.399549][ T6494] kernfs_fop_read_iter+0x46c/0x610 [ 92.399575][ T6494] ? rw_verify_area+0xce/0x6d0 [ 92.399614][ T6494] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 92.399641][ T6494] vfs_read+0x82e/0xb40 [ 92.399676][ T6494] ? __pfx_vfs_read+0x10/0x10 [ 92.399720][ T6494] ksys_read+0x12a/0x250 [ 92.399753][ T6494] ? __pfx_ksys_read+0x10/0x10 [ 92.399790][ T6494] ? rcu_is_watching+0x12/0xc0 [ 92.399818][ T6494] do_syscall_64+0x115/0x840 [ 92.399846][ T6494] ? clear_bhb_loop+0x40/0x90 [ 92.399876][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.399903][ T6494] RIP: 0033:0x7f8a3d39ce59 [ 92.399923][ T6494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.399948][ T6494] RSP: 002b:00007f8a3e2ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.399973][ T6494] RAX: ffffffffffffffda RBX: 00007f8a3d615fa0 RCX: 00007f8a3d39ce59 [ 92.399991][ T6494] RDX: 0000000000000ff9 RSI: 00002000000003c0 RDI: 0000000000000003 [ 92.400007][ T6494] RBP: 00007f8a3e2ca090 R08: 0000000000000000 R09: 0000000000000000 [ 92.400023][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.400038][ T6494] R13: 00007f8a3d616038 R14: 00007f8a3d615fa0 R15: 00007ffd9f9be058 [ 92.400061][ T6494] [ 93.318974][ T6516] FAULT_INJECTION: forcing a failure. [ 93.318974][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 93.367831][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 93.367874][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.367892][ T6516] Call Trace: [ 93.367901][ T6516] [ 93.367911][ T6516] dump_stack_lvl+0x100/0x190 [ 93.367946][ T6516] should_fail_ex.cold+0x5/0xa [ 93.367976][ T6516] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 93.368022][ T6516] should_failslab+0xc2/0x120 [ 93.368056][ T6516] __kmalloc_cache_noprof+0x7a/0x6e0 [ 93.368104][ T6516] ? can_pernet_init+0xb7/0x370 [ 93.368137][ T6516] ? __pfx_can_pernet_init+0x10/0x10 [ 93.368167][ T6516] can_pernet_init+0xb7/0x370 [ 93.368198][ T6516] ? __pfx_can_pernet_init+0x10/0x10 [ 93.368226][ T6516] ops_init+0x1e2/0x5f0 [ 93.368266][ T6516] setup_net+0x118/0x3a0 [ 93.368303][ T6516] ? __pfx_setup_net+0x10/0x10 [ 93.368340][ T6516] ? mutex_init_lockdep+0xf1/0x120 [ 93.368379][ T6516] copy_net_ns+0x46f/0x7c0 [ 93.368401][ T6516] create_new_namespaces+0x3ea/0xac0 [ 93.368444][ T6516] unshare_nsproxy_namespaces+0xf2/0x220 [ 93.368485][ T6516] ksys_unshare+0x438/0xab0 [ 93.368514][ T6516] ? __pfx_ksys_unshare+0x10/0x10 [ 93.368546][ T6516] __x64_sys_unshare+0x31/0x40 [ 93.368577][ T6516] do_syscall_64+0x115/0x840 [ 93.368606][ T6516] ? clear_bhb_loop+0x40/0x90 [ 93.368636][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.368662][ T6516] RIP: 0033:0x7f4d1779ce59 [ 93.368682][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.368705][ T6516] RSP: 002b:00007f4d185a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.368729][ T6516] RAX: ffffffffffffffda RBX: 00007f4d17a15fa0 RCX: 00007f4d1779ce59 [ 93.368746][ T6516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 93.368760][ T6516] RBP: 00007f4d17832e6f R08: 0000000000000000 R09: 0000000000000000 [ 93.368775][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.368790][ T6516] R13: 00007f4d17a16038 R14: 00007f4d17a15fa0 R15: 00007ffdbd4a5058 [ 93.368813][ T6516] [ 94.626144][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 94.761414][ T6531] vivid-007: ================= START STATUS ================= [ 94.791675][ T6521] KVM: debugfs: duplicate directory 6521-3 [ 94.806753][ T6531] vivid-007: Generate PTS: true [ 94.905274][ T6531] vivid-007: Generate SCR: true [ 94.917977][ T6531] tpg source WxH: 320x240 (Y'CbCr) [ 94.928079][ T6531] tpg field: 1 [ 94.940494][ T6531] tpg crop: (0,0)/320x240 [ 94.972690][ T6531] tpg compose: (0,0)/320x240 [ 94.983912][ T6531] tpg colorspace: 8 [ 95.065861][ T6531] tpg transfer function: 0/0 [ 95.083251][ T6531] tpg Y'CbCr encoding: 0/0 [ 95.092593][ T6531] tpg quantization: 0/0 [ 95.106646][ T6531] tpg RGB range: 0/2 [ 95.136348][ T6531] vivid-007: ================== END STATUS ================== [ 95.590428][ T6556] bridge0: port 3(team0) entered blocking state [ 95.606827][ T6556] bridge0: port 3(team0) entered disabled state [ 95.622574][ T6556] team0: entered allmulticast mode [ 95.628575][ T6556] team_slave_0: entered allmulticast mode [ 95.634473][ T6556] team_slave_1: entered allmulticast mode [ 95.642790][ T6556] team0: entered promiscuous mode [ 95.648384][ T6556] team_slave_0: entered promiscuous mode [ 95.654647][ T6556] team_slave_1: entered promiscuous mode [ 95.662470][ T6556] bridge0: port 3(team0) entered blocking state [ 95.668788][ T6556] bridge0: port 3(team0) entered forwarding state [ 95.806145][ T6557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'. [ 96.485905][ T6562] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 96.510248][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.525836][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.545802][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.570291][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.594643][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.611126][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.634450][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.652022][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.660516][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.668839][ T46] hid-generic 0000:0000:9F9BE999.0001: unknown main item tag 0x0 [ 96.679146][ T46] hid-generic 0000:0000:9F9BE999.0001: item fetching failed at offset 24/25 [ 96.691175][ T46] hid-generic 0000:0000:9F9BE999.0001: probe with driver hid-generic failed with error -22 [ 97.356623][ T6607] FAULT_INJECTION: forcing a failure. [ 97.356623][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 97.392577][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.3.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.392616][ T6607] Tainted: [L]=SOFTLOCKUP [ 97.392625][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.392639][ T6607] Call Trace: [ 97.392646][ T6607] [ 97.392654][ T6607] dump_stack_lvl+0x100/0x190 [ 97.392685][ T6607] should_fail_ex.cold+0x5/0xa [ 97.392711][ T6607] ? fs_reclaim_acquire+0x70/0x100 [ 97.392745][ T6607] ? tomoyo_encode2+0xfb/0x3c0 [ 97.392783][ T6607] should_failslab+0xc2/0x120 [ 97.392815][ T6607] __kmalloc_noprof+0xe0/0x840 [ 97.392853][ T6607] ? d_absolute_path+0x136/0x1b0 [ 97.392887][ T6607] tomoyo_encode2+0xfb/0x3c0 [ 97.392927][ T6607] tomoyo_encode+0x29/0x50 [ 97.392963][ T6607] tomoyo_realpath_from_path+0x18c/0x690 [ 97.393005][ T6607] tomoyo_path_number_perm+0x23c/0x580 [ 97.393039][ T6607] ? tomoyo_path_number_perm+0x22e/0x580 [ 97.393074][ T6607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.393111][ T6607] ? __pfx_futex_wait+0x10/0x10 [ 97.393155][ T6607] ? rcu_is_watching+0x12/0xc0 [ 97.393183][ T6607] ? __fget_files+0x215/0x3d0 [ 97.393219][ T6607] ? hook_file_ioctl_common+0x140/0x440 [ 97.393255][ T6607] ? lock_release+0x24d/0x310 [ 97.393296][ T6607] ? __fget_files+0x21f/0x3d0 [ 97.393339][ T6607] security_file_ioctl+0xd3/0x230 [ 97.393372][ T6607] __x64_sys_ioctl+0xb7/0x210 [ 97.393405][ T6607] do_syscall_64+0x115/0x840 [ 97.393433][ T6607] ? clear_bhb_loop+0x40/0x90 [ 97.393464][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.393492][ T6607] RIP: 0033:0x7f8a3d39ce59 [ 97.393512][ T6607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.393537][ T6607] RSP: 002b:00007f8a3e2ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.393563][ T6607] RAX: ffffffffffffffda RBX: 00007f8a3d615fa0 RCX: 00007f8a3d39ce59 [ 97.393582][ T6607] RDX: 0000000000000000 RSI: 0000000040383d0c RDI: 0000000000000009 [ 97.393598][ T6607] RBP: 00007f8a3d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 97.393614][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.393629][ T6607] R13: 00007f8a3d616038 R14: 00007f8a3d615fa0 R15: 00007ffd9f9be058 [ 97.393655][ T6607] [ 97.499386][ T6600] vivid-007: ================= START STATUS ================= [ 97.634268][ T6600] vivid-007: Generate PTS: true [ 97.641932][ T6600] vivid-007: Generate SCR: true [ 97.647607][ T6607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.654531][ T6600] tpg source WxH: 320x240 (Y'CbCr) [ 97.673849][ T6600] tpg field: 1 [ 97.679390][ T6600] tpg crop: (0,0)/320x240 [ 97.684144][ T6600] tpg compose: (0,0)/320x240 [ 97.688874][ T6600] tpg colorspace: 8 [ 97.694952][ T6600] tpg transfer function: 0/0 [ 97.699810][ T6600] tpg Y'CbCr encoding: 0/0 [ 97.705256][ T6600] tpg quantization: 0/0 [ 97.709950][ T6600] tpg RGB range: 0/2 [ 97.715632][ T6600] vivid-007: ================== END STATUS ================== [ 98.930727][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 99.350698][ T6668] MTRR 1 not used [ 99.703340][ T6677] Invalid ELF header magic: != ELF [ 99.871415][ T6685] FAULT_INJECTION: forcing a failure. [ 99.871415][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 99.910830][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.3.204 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.910873][ T6685] Tainted: [L]=SOFTLOCKUP [ 99.910884][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.910901][ T6685] Call Trace: [ 99.910910][ T6685] [ 99.910920][ T6685] dump_stack_lvl+0x100/0x190 [ 99.910952][ T6685] should_fail_ex.cold+0x5/0xa [ 99.910981][ T6685] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 99.911011][ T6685] should_failslab+0xc2/0x120 [ 99.911052][ T6685] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 99.911079][ T6685] ? __proc_create+0x2cb/0x8c0 [ 99.911119][ T6685] ? lock_release+0x24d/0x310 [ 99.911157][ T6685] __proc_create+0x2cb/0x8c0 [ 99.911193][ T6685] ? __pfx___proc_create+0x10/0x10 [ 99.911228][ T6685] ? _raw_write_unlock+0x28/0x50 [ 99.911253][ T6685] ? proc_register+0x559/0x8a0 [ 99.911293][ T6685] proc_create_reg+0x75/0x170 [ 99.911332][ T6685] ? __pfx_can_reset_stats_proc_show+0x10/0x10 [ 99.911366][ T6685] proc_create_net_single+0x86/0x180 [ 99.911402][ T6685] ? __pfx_proc_create_net_single+0x10/0x10 [ 99.911438][ T6685] ? round_jiffies+0x10a/0x160 [ 99.911474][ T6685] can_init_proc+0x112/0x4b0 [ 99.911504][ T6685] can_pernet_init+0x1e4/0x370 [ 99.911533][ T6685] ? __pfx_can_pernet_init+0x10/0x10 [ 99.911566][ T6685] ops_init+0x1e2/0x5f0 [ 99.911607][ T6685] setup_net+0x118/0x3a0 [ 99.911647][ T6685] ? __pfx_setup_net+0x10/0x10 [ 99.911698][ T6685] ? mutex_init_lockdep+0xf1/0x120 [ 99.911744][ T6685] copy_net_ns+0x46f/0x7c0 [ 99.911770][ T6685] create_new_namespaces+0x3ea/0xac0 [ 99.911828][ T6685] unshare_nsproxy_namespaces+0xf2/0x220 [ 99.911875][ T6685] ksys_unshare+0x438/0xab0 [ 99.911907][ T6685] ? __pfx_ksys_unshare+0x10/0x10 [ 99.911944][ T6685] __x64_sys_unshare+0x31/0x40 [ 99.911974][ T6685] do_syscall_64+0x115/0x840 [ 99.912002][ T6685] ? clear_bhb_loop+0x40/0x90 [ 99.912033][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.912061][ T6685] RIP: 0033:0x7f8a3d39ce59 [ 99.912082][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.912108][ T6685] RSP: 002b:00007f8a3e2ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.912135][ T6685] RAX: ffffffffffffffda RBX: 00007f8a3d615fa0 RCX: 00007f8a3d39ce59 [ 99.912154][ T6685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 99.912170][ T6685] RBP: 00007f8a3d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 99.912187][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.912202][ T6685] R13: 00007f8a3d616038 R14: 00007f8a3d615fa0 R15: 00007ffd9f9be058 [ 99.912231][ T6685] [ 100.429925][ T6695] vivid-008: ================= START STATUS ================= [ 100.439117][ T6695] vivid-008: ================== END STATUS ================== [ 100.721096][ T46] Process accounting resumed [ 101.098513][ T6726] FAULT_INJECTION: forcing a failure. [ 101.098513][ T6726] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.111421][ T6726] CPU: 1 UID: 0 PID: 6726 Comm: syz.1.211 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.111467][ T6726] Tainted: [L]=SOFTLOCKUP [ 101.111478][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.111494][ T6726] Call Trace: [ 101.111502][ T6726] [ 101.111513][ T6726] dump_stack_lvl+0x100/0x190 [ 101.111548][ T6726] should_fail_ex.cold+0x5/0xa [ 101.111581][ T6726] should_fail_futex+0x4c/0x60 [ 101.111623][ T6726] futex_lock_pi_atomic+0xe7/0xaf0 [ 101.111658][ T6726] futex_lock_pi+0x278/0x7f0 [ 101.111693][ T6726] ? __pfx_futex_lock_pi+0x10/0x10 [ 101.111726][ T6726] ? __pfx___futex_wait+0x10/0x10 [ 101.111757][ T6726] ? futex_hash+0x311/0x400 [ 101.111809][ T6726] ? __pfx_futex_wake_mark+0x10/0x10 [ 101.111846][ T6726] ? preempt_count_add+0x76/0x150 [ 101.111885][ T6726] ? ksys_write+0x190/0x250 [ 101.111922][ T6726] ? rcu_is_watching+0x12/0xc0 [ 101.111953][ T6726] do_futex+0x371/0x440 [ 101.111979][ T6726] ? __pfx_do_futex+0x10/0x10 [ 101.112014][ T6726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.112051][ T6726] __x64_sys_futex+0x34f/0x4d0 [ 101.112080][ T6726] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.112111][ T6726] ? rcu_is_watching+0x12/0xc0 [ 101.112142][ T6726] do_syscall_64+0x115/0x840 [ 101.112172][ T6726] ? clear_bhb_loop+0x40/0x90 [ 101.112204][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.112233][ T6726] RIP: 0033:0x7f4d1779ce59 [ 101.112255][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.112282][ T6726] RSP: 002b:00007f4d159f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.112310][ T6726] RAX: ffffffffffffffda RBX: 00007f4d17a16180 RCX: 00007f4d1779ce59 [ 101.112329][ T6726] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 101.112346][ T6726] RBP: 00007f4d17832e6f R08: 0000000000000000 R09: 000000008000fff5 [ 101.112363][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.112380][ T6726] R13: 00007f4d17a16218 R14: 00007f4d17a16180 R15: 00007ffdbd4a5058 [ 101.112407][ T6726] [ 101.478617][ T5623] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 101.478658][ T5623] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 101.494896][ T5623] Bluetooth: hci3: Unknown advertising packet type: 0x3e [ 101.494930][ T5623] Bluetooth: hci3: adv larger than maximum supported [ 101.501983][ T5623] Bluetooth: hci3: Malformed LE Event: 0x0d [ 101.514805][ T5623] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 101.615513][ T6741] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 101.630596][ T6741] vivid-007: ================= START STATUS ================= [ 101.671626][ T6741] vivid-007: Generate PTS: true [ 101.704910][ T6741] vivid-007: Generate SCR: true [ 101.731812][ T6741] tpg source WxH: 320x240 (Y'CbCr) [ 101.755682][ T6741] tpg field: 1 [ 101.769303][ T6741] tpg crop: (0,0)/320x240 [ 101.788230][ T6741] tpg compose: (0,0)/320x240 [ 101.800482][ T6741] tpg colorspace: 8 [ 101.814742][ T6741] tpg transfer function: 0/0 [ 101.823365][ T6741] tpg Y'CbCr encoding: 0/0 [ 101.833058][ T6741] tpg quantization: 0/0 [ 101.842639][ T6741] tpg RGB range: 0/2 [ 101.854603][ T6741] vivid-007: ================== END STATUS ================== [ 102.244812][ T6762] MTRR 1 not used [ 102.828448][ T6779] Process accounting resumed [ 103.119167][ T6793] hub 1-0:1.0: USB hub found [ 103.127548][ T6793] hub 1-0:1.0: 1 port detected [ 103.750972][ T5623] Bluetooth: hci0: command 0x2016 tx timeout [ 103.758964][ T6732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.774914][ T6732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.787762][ T6732] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.796637][ T6732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.803400][ T6732] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.815660][ T6732] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.828001][ T6732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.836986][ T6732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.849525][ T6732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.882158][ T6732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.890841][ T6732] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.897366][ T6732] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.810618][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.816755][ T5626] Bluetooth: hci0: command 0x2016 tx timeout [ 105.900042][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.906160][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.018978][ T6847] netlink: 330 bytes leftover after parsing attributes in process `syz.0.236'. [ 106.338531][ T6856] openvswitch: netlink: Key type 246 is out of range max 32 [ 107.883613][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.889888][ T5626] Bluetooth: hci0: command 0x2016 tx timeout [ 107.959627][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.968008][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.109377][ T6919] ======================================================= [ 109.109377][ T6919] WARNING: The mand mount option has been deprecated and [ 109.109377][ T6919] and is ignored by this kernel. Remove the mand [ 109.109377][ T6919] option from the mount to silence this warning. [ 109.109377][ T6919] ======================================================= [ 109.439076][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 109.838038][ T6923] syz.1.253 (6923) used greatest stack depth: 19992 bytes left [ 109.949695][ T5623] Bluetooth: hci0: command 0x2016 tx timeout [ 109.955821][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.030883][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.037141][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.203135][ T6932] FAULT_INJECTION: forcing a failure. [ 110.203135][ T6932] name fail_futex, interval 1, probability 0, space 0, times 0 [ 110.216034][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.3.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.216079][ T6932] Tainted: [L]=SOFTLOCKUP [ 110.216089][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.216106][ T6932] Call Trace: [ 110.216115][ T6932] [ 110.216125][ T6932] dump_stack_lvl+0x100/0x190 [ 110.216161][ T6932] should_fail_ex.cold+0x5/0xa [ 110.216195][ T6932] should_fail_futex+0x4c/0x60 [ 110.216239][ T6932] futex_lock_pi_atomic+0xe7/0xaf0 [ 110.216281][ T6932] futex_lock_pi+0x278/0x7f0 [ 110.216314][ T6932] ? __pfx_futex_lock_pi+0x10/0x10 [ 110.216347][ T6932] ? __pfx___futex_wait+0x10/0x10 [ 110.216379][ T6932] ? futex_hash+0x311/0x400 [ 110.216434][ T6932] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.216471][ T6932] ? preempt_count_add+0x76/0x150 [ 110.216512][ T6932] ? ksys_write+0x190/0x250 [ 110.216547][ T6932] ? rcu_is_watching+0x12/0xc0 [ 110.216578][ T6932] do_futex+0x371/0x440 [ 110.216605][ T6932] ? __pfx_do_futex+0x10/0x10 [ 110.216631][ T6932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.216668][ T6932] __x64_sys_futex+0x34f/0x4d0 [ 110.216697][ T6932] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.216728][ T6932] ? rcu_is_watching+0x12/0xc0 [ 110.216758][ T6932] do_syscall_64+0x115/0x840 [ 110.216786][ T6932] ? clear_bhb_loop+0x40/0x90 [ 110.216818][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.216848][ T6932] RIP: 0033:0x7f8a3d39ce59 [ 110.216870][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.216896][ T6932] RSP: 002b:00007f8a3e288028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.216924][ T6932] RAX: ffffffffffffffda RBX: 00007f8a3d616180 RCX: 00007f8a3d39ce59 [ 110.216944][ T6932] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 110.216960][ T6932] RBP: 00007f8a3d432e6f R08: 0000000000000000 R09: 000000008000fff5 [ 110.216978][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.216995][ T6932] R13: 00007f8a3d616218 R14: 00007f8a3d616180 R15: 00007ffd9f9be058 [ 110.217021][ T6932] [ 110.711751][ T5626] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 110.711800][ T5626] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 110.729639][ T5626] Bluetooth: hci2: Unknown advertising packet type: 0x3e [ 110.729676][ T5626] Bluetooth: hci2: adv larger than maximum supported [ 110.736809][ T5626] Bluetooth: hci2: Malformed LE Event: 0x0d [ 111.553918][ T6953] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 111.616135][ T6953] bond0: option packets_per_slave: allowed values 0 - 65535 [ 112.543407][ T6974] netlink: 342 bytes leftover after parsing attributes in process `syz.2.264'. [ 112.560700][ T6974] netlink: 342 bytes leftover after parsing attributes in process `syz.2.264'. [ 112.591509][ T6974] netlink: 342 bytes leftover after parsing attributes in process `syz.2.264'. [ 112.713517][ T6980] netlink: 342 bytes leftover after parsing attributes in process `syz.2.264'. [ 112.737351][ T6980] netlink: 342 bytes leftover after parsing attributes in process `syz.2.264'. [ 113.456783][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 114.125139][ T29] audit: type=1800 audit(1781939818.870:3): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.276" name="dbroot" dev="configfs" ino=15739 res=0 errno=0 [ 114.589931][ T7040] synth uevent: /devices/virtual/tty/ttyr7: unknown uevent action string [ 114.634782][ T7040] tty ttyr7: uevent: failed to send synthetic uevent: -22 [ 114.884463][ T5626] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 116.063403][ T7074] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 116.083981][ T7074] bond0: option packets_per_slave: allowed values 0 - 65535 [ 117.639654][ T7113] netlink: 'syz.3.293': attribute type 19 has an invalid length. [ 117.701131][ T7113] netlink: 226 bytes leftover after parsing attributes in process `syz.3.293'. [ 117.795861][ T7116] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 117.973400][ T7116] tipc: Started in network mode [ 117.978562][ T7116] tipc: Node identity ee00, cluster identity 4711 [ 117.985156][ T7116] tipc: Node number set to 60928 [ 119.746902][ T7179] ------------[ cut here ]------------ [ 119.752418][ T7179] !list_empty(&local->chanctx_list) [ 119.752429][ T7179] WARNING: net/mac80211/pm.c:171 at __ieee80211_suspend+0x105f/0x12c0, CPU#0: syz.0.307/7179 [ 119.767900][ T7179] Modules linked in: [ 119.771899][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.0.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.782766][ T7179] Tainted: [L]=SOFTLOCKUP [ 119.787282][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.797394][ T7179] RIP: 0010:__ieee80211_suspend+0x105f/0x12c0 [ 119.803877][ T7179] Code: 0f 0b 90 e9 8f f8 ff ff e8 4e c9 db f6 90 0f 0b 90 e9 64 f7 ff ff e8 40 c9 db f6 90 0f 0b 90 e9 be f6 ff ff e8 32 c9 db f6 90 <0f> 0b 90 e9 50 fc ff ff e8 24 c9 db f6 48 8b 54 24 10 48 b8 00 00 [ 119.823778][ T7179] RSP: 0018:ffffc900043ffc38 EFLAGS: 00010287 [ 119.829924][ T7179] RAX: 0000000000005159 RBX: ffff888058bf2c10 RCX: ffffc90006671000 [ 119.837989][ T7179] RDX: 0000000000080000 RSI: ffffffff8b2d124e RDI: ffff88802cf08000 [ 119.845988][ T7179] RBP: ffff888058bf0f40 R08: 0000000000000001 R09: 0000000000000000 [ 119.854741][ T7179] R10: 0000000000000001 R11: ffffffff81000130 R12: dffffc0000000000 [ 119.862899][ T7179] R13: ffffed100b17e1f2 R14: ffff888058bf2a10 R15: 0000000000000001 [ 119.870934][ T7179] FS: 00007f94c82266c0(0000) GS:ffff888124321000(0000) knlGS:0000000000000000 [ 119.879913][ T7179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.886494][ T7179] CR2: 00007f7c4b04a6b0 CR3: 000000007622e000 CR4: 00000000003526f0 [ 119.894510][ T7179] Call Trace: [ 119.897783][ T7179] [ 119.900938][ T7179] reset_write+0x7a/0x290 [ 119.905272][ T7179] short_proxy_write+0x133/0x1a0 [ 119.910526][ T7179] vfs_write+0x2aa/0x1050 [ 119.914949][ T7179] ? __pfx_short_proxy_write+0x10/0x10 [ 119.920443][ T7179] ? __pfx_vfs_write+0x10/0x10 [ 119.925310][ T7179] ? rcu_is_watching+0x12/0xc0 [ 119.930125][ T7179] ? __fget_files+0x21f/0x3d0 [ 119.934810][ T7179] ksys_write+0x12a/0x250 [ 119.939186][ T7179] ? __pfx_ksys_write+0x10/0x10 [ 119.944112][ T7179] ? rcu_is_watching+0x12/0xc0 [ 119.949041][ T7179] do_syscall_64+0x115/0x840 [ 119.953685][ T7179] ? clear_bhb_loop+0x40/0x90 [ 119.958423][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.964339][ T7179] RIP: 0033:0x7f94c739ce59 [ 119.968842][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.989158][ T7179] RSP: 002b:00007f94c8226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.997680][ T7179] RAX: ffffffffffffffda RBX: 00007f94c7615fa0 RCX: 00007f94c739ce59 [ 120.005913][ T7179] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000006 [ 120.013967][ T7179] RBP: 00007f94c7432e6f R08: 0000000000000000 R09: 0000000000000000 [ 120.022022][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.030198][ T7179] R13: 00007f94c7616038 R14: 00007f94c7615fa0 R15: 00007ffe6c7ddfa8 [ 120.038331][ T7179] [ 120.041369][ T7179] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.048673][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.0.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.059469][ T7179] Tainted: [L]=SOFTLOCKUP [ 120.063798][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.073861][ T7179] Call Trace: [ 120.077144][ T7179] [ 120.080075][ T7179] dump_stack_lvl+0x100/0x190 [ 120.084764][ T7179] vpanic+0x552/0x970 [ 120.088751][ T7179] ? __pfx_vpanic+0x10/0x10 [ 120.093258][ T7179] ? lock_release+0x24d/0x310 [ 120.097958][ T7179] panic+0xd1/0xe0 [ 120.101686][ T7179] ? __pfx_panic+0x10/0x10 [ 120.106150][ T7179] check_panic_on_warn.cold+0x19/0x34 [ 120.111531][ T7179] ? __ieee80211_suspend+0x105f/0x12c0 [ 120.117015][ T7179] __warn.cold+0x191/0x318 [ 120.121460][ T7179] __report_bug+0x30f/0x440 [ 120.125977][ T7179] ? __ieee80211_suspend+0x105f/0x12c0 [ 120.131467][ T7179] ? __pfx___report_bug+0x10/0x10 [ 120.136523][ T7179] ? dput+0x24/0x30 [ 120.140347][ T7179] ? end_dirop+0x82/0xa0 [ 120.144594][ T7179] ? __debugfs_create_file+0x400/0x4f0 [ 120.150063][ T7179] ? debugfs_create_file_short+0x41/0x60 [ 120.155750][ T7179] ? __ieee80211_suspend+0x105f/0x12c0 [ 120.161228][ T7179] report_bug+0xb2/0x220 [ 120.165490][ T7179] ? __ieee80211_suspend+0x105f/0x12c0 [ 120.170978][ T7179] handle_bug+0x16a/0x2a0 [ 120.175325][ T7179] exc_invalid_op+0x17/0x50 [ 120.179853][ T7179] asm_exc_invalid_op+0x1a/0x20 [ 120.184713][ T7179] RIP: 0010:__ieee80211_suspend+0x105f/0x12c0 [ 120.190800][ T7179] Code: 0f 0b 90 e9 8f f8 ff ff e8 4e c9 db f6 90 0f 0b 90 e9 64 f7 ff ff e8 40 c9 db f6 90 0f 0b 90 e9 be f6 ff ff e8 32 c9 db f6 90 <0f> 0b 90 e9 50 fc ff ff e8 24 c9 db f6 48 8b 54 24 10 48 b8 00 00 [ 120.210515][ T7179] RSP: 0018:ffffc900043ffc38 EFLAGS: 00010287 [ 120.216607][ T7179] RAX: 0000000000005159 RBX: ffff888058bf2c10 RCX: ffffc90006671000 [ 120.224583][ T7179] RDX: 0000000000080000 RSI: ffffffff8b2d124e RDI: ffff88802cf08000 [ 120.232663][ T7179] RBP: ffff888058bf0f40 R08: 0000000000000001 R09: 0000000000000000 [ 120.240649][ T7179] R10: 0000000000000001 R11: ffffffff81000130 R12: dffffc0000000000 [ 120.248632][ T7179] R13: ffffed100b17e1f2 R14: ffff888058bf2a10 R15: 0000000000000001 [ 120.256641][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.262742][ T7179] ? __ieee80211_suspend+0x105e/0x12c0 [ 120.268226][ T7179] ? __ieee80211_suspend+0x105e/0x12c0 [ 120.273704][ T7179] reset_write+0x7a/0x290 [ 120.278053][ T7179] short_proxy_write+0x133/0x1a0 [ 120.283011][ T7179] vfs_write+0x2aa/0x1050 [ 120.287362][ T7179] ? __pfx_short_proxy_write+0x10/0x10 [ 120.292841][ T7179] ? __pfx_vfs_write+0x10/0x10 [ 120.297624][ T7179] ? rcu_is_watching+0x12/0xc0 [ 120.302403][ T7179] ? __fget_files+0x21f/0x3d0 [ 120.307100][ T7179] ksys_write+0x12a/0x250 [ 120.311450][ T7179] ? __pfx_ksys_write+0x10/0x10 [ 120.316328][ T7179] ? rcu_is_watching+0x12/0xc0 [ 120.321106][ T7179] do_syscall_64+0x115/0x840 [ 120.325716][ T7179] ? clear_bhb_loop+0x40/0x90 [ 120.330413][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.336405][ T7179] RIP: 0033:0x7f94c739ce59 [ 120.340824][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.360528][ T7179] RSP: 002b:00007f94c8226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.369127][ T7179] RAX: ffffffffffffffda RBX: 00007f94c7615fa0 RCX: 00007f94c739ce59 [ 120.377103][ T7179] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000006 [ 120.385080][ T7179] RBP: 00007f94c7432e6f R08: 0000000000000000 R09: 0000000000000000 [ 120.393054][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.401030][ T7179] R13: 00007f94c7616038 R14: 00007f94c7615fa0 R15: 00007ffe6c7ddfa8 [ 120.409018][ T7179] [ 120.412372][ T7179] Kernel Offset: disabled [ 120.416686][ T7179] Rebooting in 86400 seconds..