last executing test programs: 10.54530588s ago: executing program 1 (id=545): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/xfs/stats_clear\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) madvise$auto(0x1, 0x77130040, 0x401) socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x11, 0x3, 0x2) getsockopt$auto(r2, 0x107, 0xf, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="e9c8e095", @ANYRES16, @ANYBLOB="040025bd7000199fb180fedbdf25020000000500110030000000ffff27000200000064bfd8a3dbd2f36a209bdf7df8c82bbc"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x4c, &(0x7f0000000180)='\x0ez1\xf02\xc6\n\xf2\x87\x1d\xfeD!\xa8^J9\xaab\x84\xf6\xf7\x93\xa2\x8f\x0e\x1b\xa4\x0fwG]\t\xcd7\f\t\x87\'%\xaf\x80\xdc\x90\x8c\x9cU\a\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x91[\vC\t\x00\x00\x00\x00\x00\x00\x00YA\x92\xed/\"\x92\xf7#{\xa3\xf0\xbe\xc2\xe5\xb5\xc4($\xa4\xfb\a\xe0;b\x16\xfb\xaa\xbf\xc9\xc3DfG\xe5\x00\x00\x00', 0x4) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) connect$auto(r1, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2}, 0x1}}, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, 0x0, 0x18) 9.416431345s ago: executing program 1 (id=549): mmap$auto(0x0, 0x3, 0x4000006, 0x4000000000000eb1, 0xffffffffffffffff, 0x8001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000240)=ANY=[@ANYBLOB="e7fdff8d44916c5dbbdd2310000056b103cfe0ed7b3b8b0442fbf598d28ed0553238b0023f51cd8a9d2df44ce666337d2e04000000000000b7a00ad9bc0046b3eb2f939f3d84dca30cd7d30fb3ab0bff9bc793b415ef83f68700823d2d2e51b8e19744697dd98dff315a6a6b7794818c02ddb41abb348a06000000ccd111ac90afceb162fdee00c84be8872b3387f965180d736e81c95f7ea41ebf60132ad565196494dba303676b4a98a0e446c89b2a566c72ec4b92681653aa44f41e8b7d67e949bff83502a37ade8248d052da08d44ee317c1f3a2ef0b1dfca63a5600561f251f1e06a6e136719549"]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) lseek$auto(r1, 0x2, 0xcb2) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(r1, &(0x7f0000000100)='/dev/raw-gadget\x00', 0xa) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x80, 0x0) ioctl$auto_MEMREADOOB64(r3, 0xc0184d16, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x8000000000000000}) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup2$auto(r2, r2) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/190, 0xbe) madvise$auto(0x2, 0x7fffffffffffffff, 0x4) r4 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80, 0x0) fsconfig$auto_FSCONFIG_CMD_CREATE_EXCL(r4, 0x8, &(0x7f0000000380)=')+/\x00', &(0x7f00000003c0)="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", 0xfffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r5, 0x40044145, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x2, 0x7, 0x2, &(0x7f0000000200)=0xcd51) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1200) mount_setattr$auto(r2, &(0x7f00000013c0)='./file0\x00', 0x1, &(0x7f0000001400)={0xf1, 0x20000000009, 0x88, @raw=0xe1}, 0x0) 9.268067674s ago: executing program 2 (id=551): unshare$auto(0x40000080) (async) unshare$auto(0x6) (async) r0 = fcntl$auto(0x2, 0x2, 0x80000001) (async) capget$auto(&(0x7f0000000000)={0x6, 0x0}, &(0x7f0000000180)={0xf, 0x8, 0x5}) prctl$auto(0x8, 0x8, r1, 0x7fff, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) capset$auto(&(0x7f00000001c0)={0x7fffffff, r1}, &(0x7f0000000240)={0x3, 0x1, 0xfffffffc}) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/oom_score_adj\x00', 0x102, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r0) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x5e, 0x9, 0x0, 0x1, [@generic="ec74736aca574507d2042c54c800c6e48b72970b7c1a35a8b50024af0a4e29a6922abc3d496e1747e29aab3d1423bd7c897a8382c98b71b54251", @typed={0x4, 0x14a}, @typed={0xc, 0x109, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x8f, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xaf, 0x0, 0x0, @pid=r3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) io_uring_setup$auto(0xa, 0x0) (async) prctl$auto_PR_SET_VMA_ANON_NAME(0x81, 0x0, r1, 0x7, 0x7042) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x20000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x0, 0x0) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xb, 0xd, 0x2007d49, 0x9487, 0x4, 0x0, 0xffffffff, 0x3, 0x0, 0x3, 0x7, 0xfffffffffffffff7, 0x5, 0x2, 0x3]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) 6.52799636s ago: executing program 2 (id=559): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_secret$auto(0x0) fstatfs$auto(r1, &(0x7f00000000c0)={0x4, 0x8000000000, 0x5, 0x7fff, 0x0, 0x4, 0x6, {[0x9, 0x3]}, 0x0, 0x5, 0x7, [0x9, 0x7e5, 0x9, 0x26]}) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) (async) r2 = socket(0x2, 0x2, 0x1) sendto$auto(r2, 0x0, 0xf, 0xfffffff8, 0x0, 0x1c) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r3) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd26, 0x6}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) (async) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) preadv$auto(r5, &(0x7f00000000c0)={&(0x7f0000000240), 0x7}, 0x5, 0x37, 0x3) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x84ac0, 0x0) (async) statmount$auto(&(0x7f00000001c0)={0x0, @raw=0x8, 0x2, 0x2, 0xd1d}, &(0x7f0000000200)={0x0, 0x8, 0xfc6, 0x7, 0xf, 0x0, 0x81, 0xb, 0xe6f, 0x4, 0x5, 0x6, 0xe, 0x8, 0x9, 0x3c, 0x7, 0x3, 0x6, 0x39, 0x101, 0x7fff, 0x20, 0x7, 0x400, 0x8, 0x10000, 0x49, 0x743, 0xffff, 0x10001, [0x5, 0x50, 0x2252, 0xd78, 0xbd2, 0x8000, 0x1, 0xffffffffffffffff, 0x1000000000, 0x9a, 0x2b2a, 0x40, 0x80000000, 0x1, 0x2, 0x6, 0xffffffff, 0x7fff, 0x6, 0x9, 0x100, 0x8, 0xffffffffa051be41, 0x6, 0x7, 0x5, 0x43, 0xb, 0x4, 0x1, 0xefdd, 0x3, 0x1, 0x7, 0x0, 0x1, 0x4, 0x5, 0xb, 0x3, 0x100000000, 0x9, 0x5], "2f2fe9af366962ff19fc78633b28d02873db040fd0ad73a5772ccd9068e421d0977d6590ac131589"}, 0x10, 0x8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r7, 0x0, 0x39b8) (async) pread64$auto(r6, 0x0, 0xf429, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r8, r8, 0x0, 0x800400000000ef0) (async) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) 5.42857541s ago: executing program 2 (id=564): mmap$auto(0x0, 0x3, 0x5b, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0x5, 0x5, 0xff, 0xac1, 0x5, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x800, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r1 = clone$auto(0x20003b4a, 0x2, 0x0, 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) ptrace$auto_ARCH_SHSTK_UNLOCK(0xffffffffffffffff, r1, 0xfffffffffffffffc, 0x5004) 5.186839086s ago: executing program 1 (id=566): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) time$auto(0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='5', 0x1) writev$auto(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)="3472517ba6", 0x5}, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) quotactl$auto(0x9, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0xee01, &(0x7f00000004c0)="5f865082dea48a5120697f1dfdfa25db5140bcc1c80a4f634aef6ed739ad5affcd6f11ed4a2e1dee4629f12a309107c8b5e85c181b27ff528bafd3812dd61942749b4248a7036e5274710b58c36fe105369e60270fd2f140dbfe94955295d1e21c7769b2b0b95f2f1be3a3b7ea4b3be9d5956d567fb43d3d00d42dd5000000000000000095e04dc443356fda27596f3f4d6f8341ed7db017854aca8dcc9de3ccdaed1427c6d2ed8649ed3aed4e43fb9575491eb59771f1a66bb0cdfa0807abed52bedaffdd80bac5181c0a38ec6bc3ecab62f67e2b045c7fa5a68dcee5") execveat$auto(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) ioctl$auto(r0, 0xab03, 0xffffffffffffffff) 4.843767441s ago: executing program 1 (id=567): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x400000000000003, 0x7, 0x41d0, 0x10, r0, 0x4d) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (rerun: 64) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (rerun: 32) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x28342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000180)="2a31e12c364d9579a51f77e4721945e5e68093bca79e7feea22b2d024b52a5d009151cc35faee39be67d1073bb4e8de25d331f6543eaeda7dd9c2c0e58c16da85a4d641f0d163942dc6516656cce96cc56545de46a3514") (async) r3 = socket(0x22, 0x3, 0x6) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) (async) accept$auto(r3, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) (async) poll$auto(0x0, 0x200, 0x1) 4.449322011s ago: executing program 2 (id=570): setgroups$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x8002) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r1, 0x0, 0x200c) close_range$auto(0x2, 0xa, 0x0) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x4000c, 0x3, 0x9b72, 0x7, 0x28000) 3.400620376s ago: executing program 1 (id=576): mkdir$auto(&(0x7f0000000500)='./file0\x00', 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\xb1N\t\x911@9B\xd8\xb7#\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t3\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x86#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=', &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/psample/out_ifindex\x00', 0x3a480, 0x0) fallocate$auto(r0, 0x9, 0x1, 0x8000000000000001) 2.831641836s ago: executing program 3 (id=579): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r0, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x5, 0xfffffffffffffffc, 0x0) 2.821571154s ago: executing program 0 (id=580): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) setresuid$auto(0x0, 0x8, 0x8000) ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0x1ca142, 0x0) 2.729735726s ago: executing program 2 (id=581): r0 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x2000b, 0x1, 0xeb1, r0, 0x8000) socketpair$auto(0xb, 0x9, 0x800, 0x0) socket(0xa, 0x2, 0x3a) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x10000, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, r0, 0x4) clock_adjtime$auto(0x6, &(0x7f0000000200)={0x6, 0x0, 0x504, 0x9, 0x7, 0x8ac, 0x80, 0x0, 0x3ff, 0x4, 0x350, {0x5, 0x6}, 0x3, 0x6, 0x5, 0x3a9, 0x0, 0x683, 0x78771cb, 0xf, 0x80, 0x9, 0x39bc5ade}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x1, 0xb8}}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x298a41, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x5, 0xd, 0x1, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x7ff]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 2.592643987s ago: executing program 0 (id=582): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x2600, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r2, 0x4161, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, 0x0, 0x100, 0x0) 2.472043659s ago: executing program 3 (id=583): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="16018d8e82d8e469fdd8c9f27e056e81bc35907492ec2617766f61c7ce27126f3618c51a89c8f0a556d235"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy16/aqm\x00', 0x412000, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r4, &(0x7f0000000080), 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="16018d8e82d8e469fdd8c9f27e056e81bc35907492ec2617766f61c7ce27126f3618c51a89c8f0a556d235"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy16/aqm\x00', 0x412000, 0x0) (async) read$auto_debugfs_full_proxy_file_operations_internal(r4, &(0x7f0000000080), 0x0) (async) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) (async) 2.379143028s ago: executing program 0 (id=584): mmap$auto(0x4000000000081c7, 0x20009, 0xdf, 0x40000000eb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0xb, &(0x7f00000000c0)=@token_create={0x7, 0xffffffffffffffff}, 0x93) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000000c0)) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x1, 0x5, 0x0) getsockname$auto(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r1, &(0x7f0000000240)=""/212, 0xd4) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zram0\x00', 0x2000, 0x0) ioctl$auto_BLKBSZSET(r5, 0x40081271, &(0x7f0000000180)=0x800) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r2, 0x8004ae98, 0x0) 2.1685404s ago: executing program 3 (id=585): ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x4, 0x2, 0xcb6}, 0xaa) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xa7e, 0x6, &(0x7f0000000100)={0x2, 0x201, 0x9, 0xd}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0x2c, 0x1, 0xa2) getsockopt$auto(r2, 0x65, 0xcc9, 0xffffffffffffffff, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffff7f7, 0x0, 0x6, 0x253}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2, 0x80002, 0x73) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msgget$auto(0x4, 0x4) 2.127554571s ago: executing program 0 (id=586): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x20000000, 0x2, 0xffb, 0x8000000008051, 0x3, 0xe396) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x755b461c, 0xfffefffffffffff7, 0x10, 0x11, r0, 0x8001) r1 = socketpair$auto(0x10000, 0x7, 0x8000000000000000, 0x0) open(0x0, 0x20342, 0x55) r2 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x3, 0x0, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x4, 0xd, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x9, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x81, 0x5, 0x5, 0x0, 0x400000000000000b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) sendmsg$auto_NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40052}, 0x20000000) mmap$auto(0x440, 0xbfca, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/036/001\x00', 0x18301, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) close_range$auto(r2, r1, 0x0) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030d28bd7827918dde70f2c5eca2191006a2dfff6edf25040000000800090002000000"], 0x1c}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x5, 0x77, 0x1, 0x2, 0x10000004, 0x7, 0x8, 0x9, 0x100000000000000a, 0x2, 0xa, 0x2000fca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) mmap$auto(0x0, 0x40009, 0xfff, 0x9b72, 0xffffffffffffffff, 0x28000) 1.527810236s ago: executing program 3 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x24, r1, 0x27c9d9d5b13b6c03, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) 1.212930844s ago: executing program 2 (id=588): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/max_sg_segs\x00', 0x183080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/198, 0xc6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyq2\x00', 0x161102, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, &(0x7f0000000180)="ceca0622921ada98fa942b57a22809f89f46956933f4102441b7f89a6275abf05bb9c280360516d6e160c53edfacc9f1c22d418f4b19759b96a367e141033facb0a66224b30e76ba9a0f4e067415941f3d82315d6c224753b65c51f2c3e7ee2acfe14f7601e0addae526b6bf3ecc9f057755e3b48ebfd9aea561fc699e7f1b12f3b24efaa2119a790dedb6ff3a8bcb60a59b4261b24cc31aaceee5c433bd97904e435a04efbcb0c49f10b6795b9b781bc053e91deacaa5e118c4dd58988914f09ab9ee0dd698b2d91064ec7f1ae19e06c5772df07f7de3a5") tee$auto(r3, r0, 0x8, 0x3) r4 = fcntl$getown(r0, 0x9) prctl$auto(0x1000000003b, 0x1, r4, 0x4, 0x4) madvise$auto(0x0, 0x1, 0x19) rt_sigtimedwait$auto(0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x428c0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/devices/virtual/iscsi_transport/iser/caps\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000c80)=""/74, 0x4a) r6 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xa) bpf$auto(0x3, &(0x7f0000000700)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xd) getsockopt$auto_SO_TIMESTAMP_OLD(r6, 0x4, 0x1d, &(0x7f0000000080)='-?%[\x00', &(0x7f0000000100)=0xbd) write$auto(r1, &(0x7f0000000000)='-\x00', 0x1d30) madvise$auto(0xffff, 0x6, 0x3) 1.183016719s ago: executing program 3 (id=589): timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x8, 0x0, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) socket(0x11, 0x3, 0x2) socket(0x11, 0x2, 0x73) socket(0xf, 0x4, 0x5b) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x92\xa3\x99\xc4 \xbcr^\x9f\x8a\a\xd7\x19\xc3k\xa2\xce\xdb\xab?\xec\x1f\x00\x068\xae\b\x1e~\xe0{\x1f\xf6^\x92\xdfDng', 0x80) write$auto(0xffffffffffffffff, &(0x7f0000000240)='-\x00\xfb\xbb\xd9\xd8.\xd5\x94\x00\x00\x18\xa0\xaa\xcc\x92\xb4\xdd\xe7\x13\xb2[\x97n#\x8d\x11\xf0\xa8\x91,\x1b\x12\x124\xb5V<\xec\xec\xbeq\x89.\xa5\r\f{\xe0\x8e\xb2+U\xbbJC,\x83UF=\xa3\xdf\x95@\xb3\xf5\x0f\x06}\xc3 \xda\xe0\xee\x88\xb5\xf0\xect\x14\xd2\x92Dv\xf0\x8a\x97\a\x82\x12\xf1\a\xfcRU\xb8\x83$\x0fL\x81\xe7\x88\fK\xc7\x91\xfbo\xd4\xef\xda\xf0q\\\x86\xf7yA66wu\xda-x$\x03\xc2\x9f\x87\x8a)\xfd\xb4\xcb\x15\x9b\x88\x8c\x89\x19;\xf7Nc\t\xec\xf8]S\xaeF\x98\xedn\xb4\xd2\x8a\x91\x97\xcd\xbamo\xc5\x00\x00', 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r1, 0x5, &(0x7f0000000040)='vcan0\x00', &(0x7f00000000c0)="a16babce01d44f70ffc8441b21e5d8b88e9a2140fa07a7ddc2701abe8c5162adc158a87b3a5862369414cf4cf70ce5b8daac73241a83c4f2c2e00de8f531aaf7b15224490b81ad30217ca72124db2ce4408d8da6fa2a56b2d3feccd66bca2f58f9be83936a74bc78a281479f8dcf6e2198f07a68b8673551caa36993001c791a709015567b7733943d5a82f3aebef8abde9e943dd4aba66149e8fc270bd762ae585290b34741c722d73f1efd23dbc3c1", 0x5) r4 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x10000) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r4, 0x1, 0xe, &(0x7f00000003c0)='\xf6Gw\xa1\"\xfb\xbb\x1ew\x878\xaa\x86r\x02$\x0f\xcd\x92\xce%\xce\x9b9\x97\x03\xefHN\xaa\xa9\xe6a\x91n\xfcoP\xe2.\x85\x15q\xb1\xcb\xee+6\xc5\x81\x11\x967\xb3\xdc\xb9\xcf\xc3\xdcq\xa01\xe0K#\xd0\x98\nQ\xb9\x82\xf7rO\xa8\x06\xfcI\x02\xbb\xbd>\xed\xf1\xd8Z\x1a\xf5D(oPU\xa4\x05\x9c.\xfb+\xce\xd7\xe7\x8a6\xfe\xb4\x82\xfas\xd7\x84)\x7fE\x93M\xbf\xaa1\xef\x9eT\xf0/R9\x94;\xe0a\xd4\xb7\x8a\xb6\xe6`i\xdc0\x05\x01\xbeG\x90\x9bQ$\xe5\xa5\x0f=\x97b\x19\xc5\xb3\x0eJec\x84\x17\xd5d\x00'/179, 0x0) preadv2$auto(r0, 0x0, 0x7, 0xffffffffffffffff, 0x7fffffffffffb, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) mmap$auto(0x0, 0x8, 0xdf, 0x800000eb1, r2, 0x7ffc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmget$auto(0x0, 0x7b, 0x100) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) syz_clone3(0x0, 0x0) 1.139674727s ago: executing program 0 (id=590): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x4b0102, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40882, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x2003f0, 0x17) 457.345896ms ago: executing program 3 (id=591): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe400, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x60e02, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x0f\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\\\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x13, 0x7) write$auto(r2, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x9) r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) mmap$auto(0x6, 0x5, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) mmap$auto(0xc, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) write$auto(0x3, 0x0, 0xfffffffffffffffc) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bus/usb/030/001\x00', 0x42a041, 0x0) r6 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto_proc_fault_inject_operations_base(r6, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0x8ffff, 0x5, &(0x7f0000000140)="5a47c610e193ca96", 0xc694, 0x3, 0x80004, @stream_id=0x7fff, 0x20047, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r5, 0x4004550c, &(0x7f0000000300)=0x10003fe) r7 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000280)={0x9, &(0x7f0000000240)={0x1, 0x3, 0x1, @inferred=r3}}) ioctl$auto_KVM_GET_MSRS(r7, 0x4068aea3, &(0x7f0000000040)={0x8fce, 0x0, [{0x407f, 0x67c1, 0x1}]}) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r7) 235.532924ms ago: executing program 1 (id=592): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x2600, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r2, 0x4161, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, 0x0, 0x100, 0x0) 0s ago: executing program 0 (id=593): mmap$auto(0xfffffffffffffffc, 0x6, 0xdf, 0xeb0, 0x401, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x3, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xff, 0x403, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r0, 0x404c534a, 0x38) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/pagemap\x00', 0x141201, 0x0) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x1d}, 0x800005, 0xfffffffffffffffa, 0x4, 0x10b1c) unshare$auto(0x40000080) unshare$auto(0x6) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000500)=@link_detach={0xffffffffffffffff}, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x24000, 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000140)='/dev/tty19\x00', &(0x7f0000000200)=&(0x7f00000001c0)='\x00') ioctl$auto_RNDRESEEDCRNG2(r5, 0x5207, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 82.673336][ T5617] cgroup: Unknown subsys name 'net' [ 82.789166][ T5617] cgroup: Unknown subsys name 'cpuset' [ 82.798797][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.524249][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.843338][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.858294][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.866367][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.877009][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.877038][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.891243][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.895200][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.900657][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.915695][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.923499][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.932495][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.939841][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.943320][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.954294][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.963446][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.971999][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.980088][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.988820][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.000672][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.016973][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.770862][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.778148][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.785943][ T5628] bridge_slave_0: entered allmulticast mode [ 88.793472][ T5628] bridge_slave_0: entered promiscuous mode [ 88.843322][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.850500][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.858044][ T5628] bridge_slave_1: entered allmulticast mode [ 88.865618][ T5628] bridge_slave_1: entered promiscuous mode [ 88.879391][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.886565][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.893727][ T5630] bridge_slave_0: entered allmulticast mode [ 88.901295][ T5630] bridge_slave_0: entered promiscuous mode [ 88.936962][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.944210][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.951722][ T5630] bridge_slave_1: entered allmulticast mode [ 88.959246][ T5630] bridge_slave_1: entered promiscuous mode [ 88.966925][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.974056][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.981305][ T5631] bridge_slave_0: entered allmulticast mode [ 88.989339][ T5631] bridge_slave_0: entered promiscuous mode [ 89.024524][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.032489][ T5634] Bluetooth: hci0: command tx timeout [ 89.032658][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.039557][ T50] Bluetooth: hci2: command tx timeout [ 89.046881][ T5631] bridge_slave_1: entered allmulticast mode [ 89.058538][ T5631] bridge_slave_1: entered promiscuous mode [ 89.069204][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.106175][ T5634] Bluetooth: hci3: command tx timeout [ 89.112439][ T50] Bluetooth: hci1: command tx timeout [ 89.125226][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.160316][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.192176][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.199472][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.206936][ T5629] bridge_slave_0: entered allmulticast mode [ 89.214318][ T5629] bridge_slave_0: entered promiscuous mode [ 89.225508][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.238251][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.249643][ T5628] team0: Port device team_slave_0 added [ 89.259043][ T5628] team0: Port device team_slave_1 added [ 89.264781][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.272059][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.279307][ T5629] bridge_slave_1: entered allmulticast mode [ 89.286941][ T5629] bridge_slave_1: entered promiscuous mode [ 89.306340][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.389224][ T5630] team0: Port device team_slave_0 added [ 89.407030][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.414102][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.440203][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.454690][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.466357][ T5630] team0: Port device team_slave_1 added [ 89.473824][ T5631] team0: Port device team_slave_0 added [ 89.480261][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.487486][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.514325][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.536332][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.558096][ T5631] team0: Port device team_slave_1 added [ 89.626174][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.633210][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.659547][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.673777][ T5629] team0: Port device team_slave_0 added [ 89.680331][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.687508][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.713738][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.737654][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.744642][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.772033][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.785246][ T5629] team0: Port device team_slave_1 added [ 89.791514][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.798639][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.824593][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.872078][ T5628] hsr_slave_0: entered promiscuous mode [ 89.879008][ T5628] hsr_slave_1: entered promiscuous mode [ 89.917613][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.924627][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.950644][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.963791][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.970928][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.997342][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.099374][ T5631] hsr_slave_0: entered promiscuous mode [ 90.106226][ T5631] hsr_slave_1: entered promiscuous mode [ 90.112424][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.118321][ T5631] Cannot create hsr debugfs directory [ 90.130409][ T5630] hsr_slave_0: entered promiscuous mode [ 90.137003][ T5630] hsr_slave_1: entered promiscuous mode [ 90.143164][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 90.149067][ T5630] Cannot create hsr debugfs directory [ 90.235846][ T5629] hsr_slave_0: entered promiscuous mode [ 90.242447][ T5629] hsr_slave_1: entered promiscuous mode [ 90.248961][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 90.254724][ T5629] Cannot create hsr debugfs directory [ 90.684010][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.705492][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.713880][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.724500][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.734717][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.749094][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.757311][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.770725][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.873637][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.890436][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.902348][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.915769][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.925732][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.937138][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.946205][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.957425][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.070410][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.082738][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.092725][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.102882][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.106765][ T5634] Bluetooth: hci0: command tx timeout [ 91.115453][ T50] Bluetooth: hci2: command tx timeout [ 91.118302][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.132799][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.150105][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.160754][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.185152][ T5634] Bluetooth: hci3: command tx timeout [ 91.190636][ T50] Bluetooth: hci1: command tx timeout [ 91.248351][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.294408][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.307569][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.321707][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.331701][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.351429][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.361848][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.371786][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.388676][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.399129][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.428446][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.436017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.462961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.470123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.543167][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.609310][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.624518][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.654784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.662032][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.684901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.692438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.723647][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.777085][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.784308][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.822250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.829439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.920091][ T807] cfg80211: failed to load regulatory.db [ 91.963915][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.059439][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.101258][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.108484][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.160484][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.167732][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.654774][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.844629][ T5628] veth0_vlan: entered promiscuous mode [ 92.894480][ T5628] veth1_vlan: entered promiscuous mode [ 93.016974][ T5628] veth0_macvtap: entered promiscuous mode [ 93.048692][ T5628] veth1_macvtap: entered promiscuous mode [ 93.103158][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.151627][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.161473][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.182617][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.190874][ T50] Bluetooth: hci2: command tx timeout [ 93.196377][ T5634] Bluetooth: hci0: command tx timeout [ 93.207437][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218000][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.235791][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.245554][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.266308][ T5634] Bluetooth: hci1: command tx timeout [ 93.272227][ T50] Bluetooth: hci3: command tx timeout [ 93.393177][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.432219][ T5630] veth0_vlan: entered promiscuous mode [ 93.472512][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.488731][ T5630] veth1_vlan: entered promiscuous mode [ 93.494772][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.514670][ T5631] veth0_vlan: entered promiscuous mode [ 93.562599][ T5631] veth1_vlan: entered promiscuous mode [ 93.578580][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.591197][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.660230][ T5630] veth0_macvtap: entered promiscuous mode [ 93.688550][ T5629] veth0_vlan: entered promiscuous mode [ 93.704637][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.724611][ T5630] veth1_macvtap: entered promiscuous mode [ 93.741040][ T5629] veth1_vlan: entered promiscuous mode [ 93.766930][ T5631] veth0_macvtap: entered promiscuous mode [ 93.807559][ T5631] veth1_macvtap: entered promiscuous mode [ 93.846620][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.874205][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.910190][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.919169][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929111][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.948481][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.956485][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.965888][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.982161][ T5629] veth0_macvtap: entered promiscuous mode [ 94.026722][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.038018][ T5629] veth1_macvtap: entered promiscuous mode [ 94.049589][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.099436][ T5789] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.099914][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.119396][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.144082][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.188293][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.259399][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.269367][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.309213][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.322141][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.339234][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.348597][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430253][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.447182][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.514346][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.529574][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.612513][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.641594][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.688271][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.716370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.872016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.903870][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.047365][ T5795] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.265113][ T5634] Bluetooth: hci0: command tx timeout [ 95.270632][ T50] Bluetooth: hci2: command tx timeout [ 95.346226][ T50] Bluetooth: hci3: command tx timeout [ 95.351951][ T5634] Bluetooth: hci1: command tx timeout [ 95.381636][ T5634] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 95.393001][ T5806] usb usb3: usbfs: process 5806 (syz.3.4) did not claim interface 0 before use [ 95.522301][ T5806] random: crng reseeded on system resumption [ 97.507128][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 97.670693][ T5852] mmap: syz.3.14 (5852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.946416][ T5852] Zero length message leads to an empty skb [ 98.114597][ T5860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 99.435119][ T5844] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 99.435131][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.587614][ T5634] Bluetooth: hci3: command 0x2016 tx timeout [ 100.023222][ T5844] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.038514][ T5844] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.050481][ T5844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.056812][ T5844] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.064283][ T5844] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.080168][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.086545][ T5844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.097274][ T5844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.111343][ T5844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.119708][ T5844] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.129914][ T5844] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.149366][ T5856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 100.295974][ T5884] FAULT_INJECTION: forcing a failure. [ 100.295974][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 100.329698][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) [ 100.329740][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.329767][ T5884] Call Trace: [ 100.329779][ T5884] [ 100.329791][ T5884] dump_stack_lvl+0x100/0x190 [ 100.329838][ T5884] should_fail_ex.cold+0x5/0xa [ 100.329892][ T5884] ? kobject_get_path+0xcf/0x2c0 [ 100.329926][ T5884] should_failslab+0xc2/0x120 [ 100.329962][ T5884] __kmalloc_noprof+0xe0/0x850 [ 100.329998][ T5884] kobject_get_path+0xcf/0x2c0 [ 100.330037][ T5884] kobject_uevent_env+0x287/0x18b0 [ 100.330085][ T5884] ? bus_to_subsys+0x114/0x150 [ 100.330145][ T5884] device_add+0x116e/0x1950 [ 100.330193][ T5884] ? __pfx_device_add+0x10/0x10 [ 100.330252][ T5884] nfc_register_device+0x41/0x3e0 [ 100.330310][ T5884] nci_register_device+0x7f1/0xb80 [ 100.330355][ T5884] ? __pfx_nci_register_device+0x10/0x10 [ 100.330405][ T5884] ? lockdep_init_map_type+0x5c/0x250 [ 100.330448][ T5884] virtual_ncidev_open+0x141/0x220 [ 100.330505][ T5884] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 100.330561][ T5884] misc_open+0x26d/0x450 [ 100.330618][ T5884] ? __pfx_misc_open+0x10/0x10 [ 100.330661][ T5884] chrdev_open+0x234/0x6a0 [ 100.330703][ T5884] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.330735][ T5884] ? __pfx_chrdev_open+0x10/0x10 [ 100.330781][ T5884] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.330835][ T5884] do_dentry_open+0x6d8/0x1660 [ 100.330908][ T5884] ? __pfx_chrdev_open+0x10/0x10 [ 100.330963][ T5884] vfs_open+0x82/0x3f0 [ 100.331020][ T5884] path_openat+0x208c/0x31a0 [ 100.331076][ T5884] ? __pfx_path_openat+0x10/0x10 [ 100.331133][ T5884] do_file_open+0x20e/0x430 [ 100.331181][ T5884] ? __pfx_do_file_open+0x10/0x10 [ 100.331250][ T5884] ? alloc_fd+0x476/0x790 [ 100.331295][ T5884] ? do_getname+0x191/0x390 [ 100.331348][ T5884] do_sys_openat2+0x10d/0x1e0 [ 100.331396][ T5884] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.331461][ T5884] ? find_held_lock+0x2b/0x80 [ 100.331510][ T5884] __x64_sys_openat+0x12d/0x210 [ 100.331557][ T5884] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.331611][ T5884] ? rcu_is_watching+0x12/0xc0 [ 100.331654][ T5884] do_syscall_64+0x10b/0xf80 [ 100.331705][ T5884] ? clear_bhb_loop+0x40/0x90 [ 100.331745][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.331778][ T5884] RIP: 0033:0x7f831bd9ce59 [ 100.331806][ T5884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.331837][ T5884] RSP: 002b:00007f831cb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.331879][ T5884] RAX: ffffffffffffffda RBX: 00007f831c015fa0 RCX: 00007f831bd9ce59 [ 100.331900][ T5884] RDX: 000000000000013e RSI: 0000200000000240 RDI: ffffffffffffff9c [ 100.331921][ T5884] RBP: 00007f831be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 100.331941][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.331959][ T5884] R13: 00007f831c016038 R14: 00007f831c015fa0 R15: 00007ffedefba238 [ 100.332000][ T5884] [ 101.497473][ T5896] futex_wake_op: syz.2.23 tries to shift op by -1; fix this program [ 101.507570][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.065051][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.145044][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 102.151129][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.585081][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.014306][ T29] audit: type=1400 audit(1779344294.903:2): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=5947 comm="syz.3.33" [ 104.145061][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.184857][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 104.229032][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 104.235171][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.054643][ T5965] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 105.730874][ T5972] i2c i2c-0: new_device: Can't parse I2C address [ 106.226994][ T5989] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.270449][ T6001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.305229][ T5989] Bluetooth: hci3: command 0x2016 tx timeout [ 106.311390][ T5976] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.393019][ T5992] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 106.393019][ T5992] program syz.1.37 not setting count and/or reply_len properly [ 109.110033][ T6042] FAULT_INJECTION: forcing a failure. [ 109.110033][ T6042] name failslab, interval 1, probability 0, space 0, times 0 [ 109.126165][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 109.126209][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.126227][ T6042] Call Trace: [ 109.126237][ T6042] [ 109.126260][ T6042] dump_stack_lvl+0x100/0x190 [ 109.126301][ T6042] should_fail_ex.cold+0x5/0xa [ 109.126345][ T6042] should_failslab+0xc2/0x120 [ 109.126382][ T6042] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 109.126437][ T6042] ? __alloc_skb+0x140/0x710 [ 109.126481][ T6042] __alloc_skb+0x140/0x710 [ 109.126513][ T6042] ? __alloc_skb+0x5b7/0x710 [ 109.126552][ T6042] ? __pfx___alloc_skb+0x10/0x10 [ 109.126588][ T6042] ? netlink_has_listeners+0x21b/0x430 [ 109.126635][ T6042] ? netlink_has_listeners+0x21b/0x430 [ 109.126685][ T6042] alloc_uevent_skb+0x7d/0x210 [ 109.126731][ T6042] kobject_uevent_env+0xd2d/0x18b0 [ 109.126776][ T6042] ? bus_to_subsys+0x114/0x150 [ 109.126832][ T6042] device_add+0x116e/0x1950 [ 109.126880][ T6042] ? __pfx_device_add+0x10/0x10 [ 109.126938][ T6042] nfc_register_device+0x41/0x3e0 [ 109.127001][ T6042] nci_register_device+0x7f1/0xb80 [ 109.127044][ T6042] ? __pfx_nci_register_device+0x10/0x10 [ 109.127103][ T6042] ? lockdep_init_map_type+0x5c/0x250 [ 109.127147][ T6042] virtual_ncidev_open+0x141/0x220 [ 109.127197][ T6042] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 109.127245][ T6042] misc_open+0x26d/0x450 [ 109.127293][ T6042] ? __pfx_misc_open+0x10/0x10 [ 109.127343][ T6042] chrdev_open+0x234/0x6a0 [ 109.127378][ T6042] ? __pfx_apparmor_file_open+0x10/0x10 [ 109.127407][ T6042] ? __pfx_chrdev_open+0x10/0x10 [ 109.127446][ T6042] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 109.127494][ T6042] do_dentry_open+0x6d8/0x1660 [ 109.127530][ T6042] ? __pfx_chrdev_open+0x10/0x10 [ 109.127575][ T6042] vfs_open+0x82/0x3f0 [ 109.127622][ T6042] path_openat+0x208c/0x31a0 [ 109.127672][ T6042] ? __pfx_path_openat+0x10/0x10 [ 109.127723][ T6042] do_file_open+0x20e/0x430 [ 109.127763][ T6042] ? __pfx_do_file_open+0x10/0x10 [ 109.127826][ T6042] ? alloc_fd+0x476/0x790 [ 109.127865][ T6042] ? do_getname+0x191/0x390 [ 109.127928][ T6042] do_sys_openat2+0x10d/0x1e0 [ 109.127977][ T6042] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.128026][ T6042] ? find_held_lock+0x2b/0x80 [ 109.128076][ T6042] __x64_sys_openat+0x12d/0x210 [ 109.128125][ T6042] ? __pfx___x64_sys_openat+0x10/0x10 [ 109.128181][ T6042] ? rcu_is_watching+0x12/0xc0 [ 109.128224][ T6042] do_syscall_64+0x10b/0xf80 [ 109.128277][ T6042] ? clear_bhb_loop+0x40/0x90 [ 109.128316][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.128348][ T6042] RIP: 0033:0x7f831bd9ce59 [ 109.128384][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.128412][ T6042] RSP: 002b:00007f831cb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.128441][ T6042] RAX: ffffffffffffffda RBX: 00007f831c015fa0 RCX: 00007f831bd9ce59 [ 109.128462][ T6042] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 109.128481][ T6042] RBP: 00007f831be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 109.128499][ T6042] R10: 0000000000003e00 R11: 0000000000000246 R12: 0000000000000000 [ 109.128517][ T6042] R13: 00007f831c016038 R14: 00007f831c015fa0 R15: 00007ffedefba238 [ 109.128558][ T6042] [ 109.336026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 110.121474][ T6056] __vm_enough_memory: pid: 6056, comm: syz.0.51, bytes: 4398046457856 not enough memory for the allocation [ 110.250025][ T6052] syz.1.50 (6052) used greatest stack depth: 19720 bytes left [ 110.477119][ T6063] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.150487][ T6073] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.186378][ T6078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.205303][ T6078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.224572][ T6078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.247088][ T6078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.362828][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 112.636714][ T6101] ima: policy update failed [ 112.646877][ T29] audit: type=1802 audit(1779344303.543:3): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.59" res=0 errno=0 [ 112.666866][ T6105] process 'syz.2.60' launched './file0' with NULL argv: empty string added [ 113.746211][ T5989] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.961886][ T29] audit: type=1400 audit(1779344304.853:4): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6117 comm="syz.1.61" [ 114.225159][ T5989] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.231268][ T5989] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.305017][ T5989] Bluetooth: hci3: command 0x2016 tx timeout [ 115.347731][ T6157] netlink: 'syz.3.72': attribute type 83 has an invalid length. [ 116.101919][ T6171] FAULT_INJECTION: forcing a failure. [ 116.101919][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 116.143904][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.0.76 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.143950][ T6171] Tainted: [L]=SOFTLOCKUP [ 116.143961][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.143978][ T6171] Call Trace: [ 116.143987][ T6171] [ 116.143998][ T6171] dump_stack_lvl+0x100/0x190 [ 116.144036][ T6171] should_fail_ex.cold+0x5/0xa [ 116.144075][ T6171] should_failslab+0xc2/0x120 [ 116.144111][ T6171] __kmalloc_cache_noprof+0x7a/0x6f0 [ 116.144155][ T6171] ? copy_ipcs+0x10d/0x7e0 [ 116.144192][ T6171] copy_ipcs+0x10d/0x7e0 [ 116.144224][ T6171] create_new_namespaces+0x20a/0xac0 [ 116.144266][ T6171] ? security_capable+0x80/0x260 [ 116.144318][ T6171] unshare_nsproxy_namespaces+0xf2/0x220 [ 116.144362][ T6171] ksys_unshare+0x438/0xab0 [ 116.144408][ T6171] ? __pfx_ksys_unshare+0x10/0x10 [ 116.144511][ T6171] __x64_sys_unshare+0x31/0x40 [ 116.144568][ T6171] do_syscall_64+0x10b/0xf80 [ 116.144614][ T6171] ? clear_bhb_loop+0x40/0x90 [ 116.144650][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.144679][ T6171] RIP: 0033:0x7f2506f9ce59 [ 116.144703][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.144729][ T6171] RSP: 002b:00007f25051f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 116.144756][ T6171] RAX: ffffffffffffffda RBX: 00007f2507215fa0 RCX: 00007f2506f9ce59 [ 116.144775][ T6171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 116.144791][ T6171] RBP: 00007f2507032d6f R08: 0000000000000000 R09: 0000000000000000 [ 116.144808][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.144825][ T6171] R13: 00007f2507216038 R14: 00007f2507215fa0 R15: 00007ffe7560e958 [ 116.144862][ T6171] syzkaller syzkaller login: [ 116.645514][ T6182] random: crng reseeded on system resumption [ 116.678060][ T6177] FAULT_INJECTION: forcing a failure. [ 116.678060][ T6177] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.728199][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.3.77 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.728245][ T6177] Tainted: [L]=SOFTLOCKUP [ 116.728256][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.728273][ T6177] Call Trace: [ 116.728282][ T6177] [ 116.728293][ T6177] dump_stack_lvl+0x100/0x190 [ 116.728330][ T6177] should_fail_ex.cold+0x5/0xa [ 116.728365][ T6177] get_futex_key+0x1d2/0x1510 [ 116.728399][ T6177] ? __pfx_get_futex_key+0x10/0x10 [ 116.728432][ T6177] ? register_lock_class+0x187/0x560 [ 116.728475][ T6177] futex_wake+0xea/0x530 [ 116.728516][ T6177] ? __pfx_futex_wake+0x10/0x10 [ 116.728566][ T6177] do_futex+0x32b/0x350 [ 116.728597][ T6177] ? __pfx_do_futex+0x10/0x10 [ 116.728637][ T6177] __x64_sys_futex+0x34f/0x4d0 [ 116.728674][ T6177] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.728712][ T6177] ? rcu_is_watching+0x12/0xc0 [ 116.728751][ T6177] do_syscall_64+0x10b/0xf80 [ 116.728795][ T6177] ? clear_bhb_loop+0x40/0x90 [ 116.728829][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.728857][ T6177] RIP: 0033:0x7f98c5d9ce59 [ 116.728880][ T6177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.728908][ T6177] RSP: 002b:00007f98c6cbf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.728936][ T6177] RAX: ffffffffffffffda RBX: 00007f98c6015fa8 RCX: 00007f98c5d9ce59 [ 116.728954][ T6177] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f98c6015fac [ 116.728972][ T6177] RBP: 00007f98c6015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 116.728988][ T6177] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 116.729004][ T6177] R13: 00007f98c6016038 R14: 00007ffd52ad7380 R15: 00007ffd52ad7468 [ 116.729040][ T6177] [ 117.018342][ T6162] can: request_module (can-proto-0) failed. [ 117.047943][ T29] audit: type=1326 audit(1779344307.943:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.2.75" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8bd39ce59 code=0x0 [ 118.072678][ T29] audit: type=1400 audit(1779344308.963:6): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6197 comm="syz.2.80" [ 122.946426][ T6272] zswap: compressor 000 not available [ 123.001322][ T6282] netlink: 'syz.2.99': attribute type 83 has an invalid length. [ 126.182313][ T6336] zswap: compressor 000 not available [ 126.413274][ T6350] netlink: 'syz.3.114': attribute type 16 has an invalid length. [ 126.441018][ T6350] netlink: 330 bytes leftover after parsing attributes in process `syz.3.114'. [ 127.139797][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 131.088955][ T29] audit: type=1326 audit(1779344321.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.0.137" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2506f9ce59 code=0x0 [ 131.307949][ T6448] zswap: compressor 000 not available [ 131.863223][ T6461] ksmbd: Unknown IPC event: 14, ignore. [ 131.942701][ T6467] syz.2.143 (6467): drop_caches: 0 [ 132.867313][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.880065][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.750525][ T6528] netlink: 62 bytes leftover after parsing attributes in process `syz.3.156'. [ 137.911497][ T6565] FAULT_INJECTION: forcing a failure. [ 137.911497][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 138.076585][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.0.164 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.076633][ T6565] Tainted: [L]=SOFTLOCKUP [ 138.076643][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.076659][ T6565] Call Trace: [ 138.076669][ T6565] [ 138.076680][ T6565] dump_stack_lvl+0x100/0x190 [ 138.076738][ T6565] should_fail_ex.cold+0x5/0xa [ 138.076777][ T6565] should_failslab+0xc2/0x120 [ 138.076812][ T6565] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 138.076858][ T6565] ? alloc_empty_file+0x5b/0x1c0 [ 138.076911][ T6565] alloc_empty_file+0x5b/0x1c0 [ 138.076966][ T6565] alloc_file_pseudo+0x13a/0x230 [ 138.077016][ T6565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 138.077082][ T6565] ? alloc_fd+0x476/0x790 [ 138.077123][ T6565] ? do_raw_spin_unlock+0x145/0x1e0 [ 138.077166][ T6565] __anon_inode_getfile+0xe8/0x280 [ 138.077223][ T6565] anon_inode_getfile_fmode+0x37/0xa0 [ 138.077276][ T6565] do_eventfd+0x159/0x2b0 [ 138.077312][ T6565] __x64_sys_eventfd+0x32/0x50 [ 138.077347][ T6565] do_syscall_64+0x10b/0xf80 [ 138.077397][ T6565] ? clear_bhb_loop+0x40/0x90 [ 138.077437][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.077472][ T6565] RIP: 0033:0x7f2506f9ce59 [ 138.077505][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.077540][ T6565] RSP: 002b:00007f25051f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 138.077572][ T6565] RAX: ffffffffffffffda RBX: 00007f2507215fa0 RCX: 00007f2506f9ce59 [ 138.077593][ T6565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 138.077611][ T6565] RBP: 00007f2507032d6f R08: 0000000000000000 R09: 0000000000000000 [ 138.077630][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.077648][ T6565] R13: 00007f2507216038 R14: 00007f2507215fa0 R15: 00007ffe7560e958 [ 138.077690][ T6565] [ 139.657607][ T6604] ======================================================= [ 139.657607][ T6604] WARNING: The mand mount option has been deprecated and [ 139.657607][ T6604] and is ignored by this kernel. Remove the mand [ 139.657607][ T6604] option from the mount to silence this warning. [ 139.657607][ T6604] ======================================================= [ 140.207815][ T6597] netlink: 62 bytes leftover after parsing attributes in process `syz.2.170'. [ 142.223792][ T6634] zswap: compressor 000 not available [ 147.422173][ T6717] zswap: compressor 000 not available [ 151.179708][ T6778] dyndbg: expected <4096 bytes into control syzkaller syzkaller login: [ 156.147307][ T6846] netlink: 222 bytes leftover after parsing attributes in process `syz.1.214'. [ 156.458540][ T6857] netlink: 342 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.475058][ T6849] netlink: 222 bytes leftover after parsing attributes in process `syz.1.214'. [ 156.485634][ T6857] netlink: 342 bytes leftover after parsing attributes in process `syz.3.215'. [ 157.400564][ T6871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.811983][ T6885] random: crng reseeded on system resumption [ 159.093546][ T6901] FAULT_INJECTION: forcing a failure. [ 159.093546][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 159.150269][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.1.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.150320][ T6901] Tainted: [L]=SOFTLOCKUP [ 159.150332][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.150350][ T6901] Call Trace: [ 159.150361][ T6901] [ 159.150372][ T6901] dump_stack_lvl+0x100/0x190 [ 159.150413][ T6901] should_fail_ex.cold+0x5/0xa [ 159.150456][ T6901] should_failslab+0xc2/0x120 [ 159.150495][ T6901] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 159.150548][ T6901] ? sock_alloc_inode+0x26/0x290 [ 159.150625][ T6901] ? __pfx_sock_alloc_inode+0x10/0x10 [ 159.150681][ T6901] sock_alloc_inode+0x26/0x290 [ 159.150727][ T6901] ? __pfx_sock_alloc_inode+0x10/0x10 [ 159.150770][ T6901] alloc_inode+0x68/0x250 [ 159.150826][ T6901] sock_alloc+0x44/0x280 [ 159.150874][ T6901] ? security_socket_create+0x7f/0x250 [ 159.150925][ T6901] __sock_create+0xc2/0x860 [ 159.150978][ T6901] __sys_socket+0x14d/0x260 [ 159.151025][ T6901] ? __pfx___sys_socket+0x10/0x10 [ 159.151075][ T6901] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 159.151125][ T6901] __x64_sys_socket+0x72/0xb0 [ 159.151151][ T6901] ? lockdep_hardirqs_on+0x78/0x100 [ 159.151197][ T6901] do_syscall_64+0x10b/0xf80 [ 159.151244][ T6901] ? clear_bhb_loop+0x40/0x90 [ 159.151280][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.151310][ T6901] RIP: 0033:0x7f831bd9ce59 [ 159.151334][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.151362][ T6901] RSP: 002b:00007f831cb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 159.151390][ T6901] RAX: ffffffffffffffda RBX: 00007f831c015fa0 RCX: 00007f831bd9ce59 [ 159.151410][ T6901] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 159.151427][ T6901] RBP: 00007f831be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 159.151445][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.151463][ T6901] R13: 00007f831c016038 R14: 00007f831c015fa0 R15: 00007ffedefba238 [ 159.151500][ T6901] [ 159.435294][ T6901] socket: no more sockets [ 159.627528][ T29] audit: type=1326 audit(1779344350.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.1.225" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f831bd9ce59 code=0x0 [ 159.859833][ T6911] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 159.859833][ T6911] program syz.1.226 not setting count and/or reply_len properly [ 159.911986][ T6909] nvme_fabrics: missing parameter 'transport=%s' [ 159.932412][ T6909] nvme_fabrics: missing parameter 'nqn=%s' [ 160.098602][ T6914] netlink: 342 bytes leftover after parsing attributes in process `syz.3.227'. [ 160.543227][ T6921] cougar: G6 mapped to space [ 164.704064][ T6996] random: crng reseeded on system resumption [ 166.723403][ T7052] FAULT_INJECTION: forcing a failure. [ 166.723403][ T7052] name fail_futex, interval 1, probability 0, space 0, times 0 [ 166.782248][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.0.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.782283][ T7052] Tainted: [L]=SOFTLOCKUP [ 166.782291][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.782304][ T7052] Call Trace: [ 166.782310][ T7052] [ 166.782319][ T7052] dump_stack_lvl+0x100/0x190 [ 166.782346][ T7052] should_fail_ex.cold+0x5/0xa [ 166.782374][ T7052] get_futex_key+0x1d2/0x1510 [ 166.782399][ T7052] ? __pfx_get_futex_key+0x10/0x10 [ 166.782419][ T7052] ? pick_eevdf+0x4d3/0x860 [ 166.782452][ T7052] ? update_se+0x94/0x770 [ 166.782496][ T7052] futex_wait_setup+0x83/0x510 [ 166.782560][ T7052] __futex_wait+0x19f/0x300 [ 166.782592][ T7052] ? __pfx___futex_wait+0x10/0x10 [ 166.782619][ T7052] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 166.782656][ T7052] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.782689][ T7052] ? find_held_lock+0x2b/0x80 [ 166.782717][ T7052] ? futex_wake+0x456/0x530 [ 166.782750][ T7052] futex_wait+0xe6/0x370 [ 166.782779][ T7052] ? __pfx_futex_wait+0x10/0x10 [ 166.782812][ T7052] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.782842][ T7052] ? lockdep_hardirqs_on+0x78/0x100 [ 166.782875][ T7052] ? _raw_spin_unlock_irq+0x2e/0x50 [ 166.782913][ T7052] ? do_timer_create+0x746/0x1480 [ 166.782941][ T7052] do_futex+0x1ef/0x350 [ 166.782965][ T7052] ? __pfx_do_futex+0x10/0x10 [ 166.782986][ T7052] ? __fget_files+0x215/0x3d0 [ 166.783019][ T7052] __x64_sys_futex+0x34f/0x4d0 [ 166.783044][ T7052] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 166.783071][ T7052] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.783100][ T7052] ? rcu_is_watching+0x12/0xc0 [ 166.783144][ T7052] do_syscall_64+0x10b/0xf80 [ 166.783190][ T7052] ? clear_bhb_loop+0x40/0x90 [ 166.783230][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.783262][ T7052] RIP: 0033:0x7f2506f9ce59 [ 166.783280][ T7052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.783300][ T7052] RSP: 002b:00007f25051f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.783320][ T7052] RAX: ffffffffffffffda RBX: 00007f2507215fa8 RCX: 00007f2506f9ce59 [ 166.783338][ T7052] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2507215fa8 [ 166.783351][ T7052] RBP: 00007f2507215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 166.783364][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.783376][ T7052] R13: 00007f2507216038 R14: 00007ffe7560e870 R15: 00007ffe7560e958 [ 166.783403][ T7052] [ 167.659125][ T7064] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 168.494377][ T7091] vhci_hcd vhci_hcd.1: invalid port number 16 [ 168.518048][ T7091] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 169.832166][ T7117] FAULT_INJECTION: forcing a failure. [ 169.832166][ T7117] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.875644][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.3.275 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.875699][ T7117] Tainted: [L]=SOFTLOCKUP [ 169.875710][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.875728][ T7117] Call Trace: [ 169.875738][ T7117] [ 169.875750][ T7117] dump_stack_lvl+0x100/0x190 [ 169.875791][ T7117] should_fail_ex.cold+0x5/0xa [ 169.875844][ T7117] _copy_to_user+0x32/0xd0 [ 169.875881][ T7117] simple_read_from_buffer+0xcb/0x170 [ 169.875923][ T7117] proc_fail_nth_read+0x1af/0x230 [ 169.875975][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.876029][ T7117] ? rw_verify_area+0xce/0x6d0 [ 169.876061][ T7117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.876112][ T7117] vfs_read+0x1e4/0xb30 [ 169.876153][ T7117] ? __pfx_vfs_read+0x10/0x10 [ 169.876187][ T7117] ? __fget_files+0x215/0x3d0 [ 169.876233][ T7117] ? __fget_files+0x21f/0x3d0 [ 169.876281][ T7117] ksys_read+0x12a/0x250 [ 169.876318][ T7117] ? __pfx_ksys_read+0x10/0x10 [ 169.876358][ T7117] ? rcu_is_watching+0x12/0xc0 [ 169.876406][ T7117] do_syscall_64+0x10b/0xf80 [ 169.876474][ T7117] ? clear_bhb_loop+0x40/0x90 [ 169.876515][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.876548][ T7117] RIP: 0033:0x7f98c5d5d68e [ 169.876573][ T7117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.876603][ T7117] RSP: 002b:00007f98c6cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.876632][ T7117] RAX: ffffffffffffffda RBX: 00007f98c6cbf6c0 RCX: 00007f98c5d5d68e [ 169.876652][ T7117] RDX: 000000000000000f RSI: 00007f98c6cbf0a0 RDI: 0000000000000004 [ 169.876684][ T7117] RBP: 00007f98c6cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 169.876701][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.876719][ T7117] R13: 00007f98c6016038 R14: 00007f98c6015fa0 R15: 00007ffd52ad7468 [ 169.876759][ T7117] [ 169.878823][ T7107] Process accounting resumed [ 170.174331][ T7118] vivid-008: ================= START STATUS ================= [ 170.256406][ T7118] vivid-008: ================== END STATUS ================== [ 171.662802][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 171.816074][ T7114] ima: policy update failed [ 171.850503][ T29] audit: type=1802 audit(1779344362.743:9): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.276" res=0 errno=0 [ 172.847795][ T5989] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 173.150836][ T7177] capability: warning: `syz.0.288' uses 32-bit capabilities (legacy support in use) [ 175.187184][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 175.331878][ T7230] HfR: entered promiscuous mode [ 175.354181][ T7231] HfR: left promiscuous mode [ 177.880289][ T29] audit: type=1806 audit(1779344368.773:10): xattr="." res=0 [ 178.378500][ T7287] netlink: zone id is out of range [ 178.405439][ T7287] netlink: zone id is out of range [ 178.426715][ T7287] netlink: zone id is out of range [ 178.456323][ T7287] netlink: zone id is out of range [ 178.496610][ T7287] netlink: zone id is out of range [ 178.537078][ T7287] netlink: zone id is out of range [ 178.571248][ T7287] netlink: zone id is out of range [ 178.606563][ T7287] netlink: zone id is out of range [ 178.645003][ T7287] netlink: zone id is out of range [ 178.664969][ T7287] netlink: zone id is out of range [ 179.373436][ T7308] ubi0: attaching mtd0 [ 179.495492][ T7308] ubi0: scanning is finished [ 179.528076][ T7308] ubi0: empty MTD device detected [ 180.241228][ T7324] phram: not enough arguments [ 180.538916][ T7308] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 180.690423][ T7308] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 180.713109][ T7308] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 180.742484][ T7308] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 180.768971][ T7308] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 180.807263][ T7308] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 180.833481][ T7308] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1816894370 [ 180.858742][ T7308] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 180.892851][ T7328] ubi0: background thread "ubi_bgt0d" started, PID 7328 [ 181.010387][ T7312] Process accounting resumed [ 181.027683][ T7309] ubi0: detaching mtd0 [ 181.313171][ T7309] ubi0: mtd0 is detached [ 184.717846][ T7377] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 185.080114][ T5989] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 186.717613][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 187.105067][ T5976] Bluetooth: hci3: command 0x2016 tx timeout [ 187.541775][ T7433] netlink: 'syz.2.335': attribute type 16 has an invalid length. [ 187.564064][ T7433] netlink: 330 bytes leftover after parsing attributes in process `syz.2.335'. [ 189.177337][ T7467] FAULT_INJECTION: forcing a failure. [ 189.177337][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.188992][ T5989] Bluetooth: hci3: command 0x2016 tx timeout [ 189.332026][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.1.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.332059][ T7467] Tainted: [L]=SOFTLOCKUP [ 189.332066][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.332081][ T7467] Call Trace: [ 189.332088][ T7467] [ 189.332095][ T7467] dump_stack_lvl+0x100/0x190 [ 189.332122][ T7467] should_fail_ex.cold+0x5/0xa [ 189.332147][ T7467] _copy_from_iter+0x1f4/0x1690 [ 189.332172][ T7467] ? rcu_is_watching+0x12/0xc0 [ 189.332197][ T7467] ? trace_kmem_cache_alloc+0xd5/0x100 [ 189.332222][ T7467] ? __kasan_slab_alloc+0x89/0x90 [ 189.332244][ T7467] ? __pfx__copy_from_iter+0x10/0x10 [ 189.332266][ T7467] ? __asan_memset+0x23/0x50 [ 189.332297][ T7467] ? __build_skb_around+0x278/0x390 [ 189.332333][ T7467] ? is_vmalloc_addr+0x86/0xa0 [ 189.332371][ T7467] netlink_sendmsg+0x808/0xda0 [ 189.332408][ T7467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.332462][ T7467] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 189.332503][ T7467] sock_write_iter+0x524/0x5a0 [ 189.332541][ T7467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.332575][ T7467] ? __pfx_sock_write_iter+0x10/0x10 [ 189.332617][ T7467] ? bpf_lsm_file_permission+0x9/0x10 [ 189.332639][ T7467] ? security_file_permission+0x76/0x210 [ 189.332667][ T7467] ? rw_verify_area+0xce/0x6d0 [ 189.332692][ T7467] vfs_write+0x6ac/0x1070 [ 189.332718][ T7467] ? __pfx_sock_write_iter+0x10/0x10 [ 189.332753][ T7467] ? __pfx_vfs_write+0x10/0x10 [ 189.332776][ T7467] ? find_held_lock+0x2b/0x80 [ 189.332822][ T7467] ksys_write+0x1f8/0x250 [ 189.332847][ T7467] ? __pfx_ksys_write+0x10/0x10 [ 189.332875][ T7467] ? rcu_is_watching+0x12/0xc0 [ 189.332905][ T7467] do_syscall_64+0x10b/0xf80 [ 189.332939][ T7467] ? clear_bhb_loop+0x40/0x90 [ 189.332999][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.333031][ T7467] RIP: 0033:0x7f831bd9ce59 [ 189.333055][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.333089][ T7467] RSP: 002b:00007f831cb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.333111][ T7467] RAX: ffffffffffffffda RBX: 00007f831c015fa0 RCX: 00007f831bd9ce59 [ 189.333125][ T7467] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 189.333138][ T7467] RBP: 00007f831cb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 189.333151][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.333164][ T7467] R13: 00007f831c016038 R14: 00007f831c015fa0 R15: 00007ffedefba238 [ 189.333192][ T7467] [ 193.074444][ T7532] warning: `syz.1.353' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.307463][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318785][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.505760][ T7617] [U] 0="/ [ 196.534015][ T7617] [U] [ 196.576923][ T7617] [U] EeQ@ [ 196.941348][ T7635] FAULT_INJECTION: forcing a failure. [ 196.941348][ T7635] name failslab, interval 1, probability 0, space 0, times 0 [ 196.998877][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: syz.1.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.998927][ T7635] Tainted: [L]=SOFTLOCKUP [ 196.998938][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.998957][ T7635] Call Trace: [ 196.998967][ T7635] [ 196.998978][ T7635] dump_stack_lvl+0x100/0x190 [ 196.999020][ T7635] should_fail_ex.cold+0x5/0xa [ 196.999062][ T7635] should_failslab+0xc2/0x120 [ 196.999106][ T7635] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 196.999161][ T7635] ? __alloc_skb+0x140/0x710 [ 196.999206][ T7635] __alloc_skb+0x140/0x710 [ 196.999239][ T7635] ? __alloc_skb+0x5b7/0x710 [ 196.999274][ T7635] ? __pfx___alloc_skb+0x10/0x10 [ 196.999308][ T7635] ? trace_contention_end+0x122/0x170 [ 196.999345][ T7635] ? __mutex_lock+0x26d/0x1b10 [ 196.999382][ T7635] netlink_dump+0x194/0xd00 [ 196.999431][ T7635] ? __pfx___mutex_lock+0x10/0x10 [ 196.999462][ T7635] ? __pfx_netlink_dump+0x10/0x10 [ 196.999535][ T7635] __netlink_dump_start+0x6d6/0x990 [ 196.999590][ T7635] xsk_diag_handler_dump+0x1ac/0x250 [ 196.999643][ T7635] ? __pfx_xsk_diag_handler_dump+0x10/0x10 [ 196.999695][ T7635] ? __pfx_xsk_diag_dump+0x10/0x10 [ 196.999756][ T7635] ? sock_diag_lock_handler+0x10f/0x2e0 [ 196.999803][ T7635] sock_diag_rcv_msg+0x431/0x7a0 [ 196.999843][ T7635] netlink_rcv_skb+0x159/0x420 [ 196.999893][ T7635] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 196.999932][ T7635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.999998][ T7635] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.000055][ T7635] netlink_unicast+0x585/0x850 [ 197.000111][ T7635] ? __pfx_netlink_unicast+0x10/0x10 [ 197.000158][ T7635] ? __build_skb_around+0x278/0x390 [ 197.000214][ T7635] ? is_vmalloc_addr+0x86/0xa0 [ 197.000269][ T7635] netlink_sendmsg+0x8b0/0xda0 [ 197.000339][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.000391][ T7635] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 197.000447][ T7635] sock_write_iter+0x524/0x5a0 [ 197.000494][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.000540][ T7635] ? __pfx_sock_write_iter+0x10/0x10 [ 197.000602][ T7635] ? bpf_lsm_file_permission+0x9/0x10 [ 197.000632][ T7635] ? security_file_permission+0x76/0x210 [ 197.000672][ T7635] ? rw_verify_area+0xce/0x6d0 [ 197.000713][ T7635] vfs_write+0x6ac/0x1070 [ 197.000750][ T7635] ? __pfx_sock_write_iter+0x10/0x10 [ 197.000800][ T7635] ? __pfx_vfs_write+0x10/0x10 [ 197.000833][ T7635] ? find_held_lock+0x2b/0x80 [ 197.000900][ T7635] ksys_write+0x1f8/0x250 [ 197.000935][ T7635] ? __pfx_ksys_write+0x10/0x10 [ 197.000975][ T7635] ? rcu_is_watching+0x12/0xc0 [ 197.001018][ T7635] do_syscall_64+0x10b/0xf80 [ 197.001066][ T7635] ? clear_bhb_loop+0x40/0x90 [ 197.001105][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.001136][ T7635] RIP: 0033:0x7f831bd9ce59 [ 197.001162][ T7635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.001191][ T7635] RSP: 002b:00007f831cb8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.001220][ T7635] RAX: ffffffffffffffda RBX: 00007f831c015fa0 RCX: 00007f831bd9ce59 [ 197.001247][ T7635] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.001266][ T7635] RBP: 00007f831cb8b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.001283][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.001306][ T7635] R13: 00007f831c016038 R14: 00007f831c015fa0 R15: 00007ffedefba238 [ 197.001345][ T7635] [ 197.719852][ T7616] [U]  [ 199.235549][ T7678] FAULT_INJECTION: forcing a failure. [ 199.235549][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 199.289294][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.2.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.289343][ T7678] Tainted: [L]=SOFTLOCKUP [ 199.289350][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.289362][ T7678] Call Trace: [ 199.289369][ T7678] [ 199.289376][ T7678] dump_stack_lvl+0x100/0x190 [ 199.289401][ T7678] should_fail_ex.cold+0x5/0xa [ 199.289426][ T7678] should_failslab+0xc2/0x120 [ 199.289456][ T7678] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 199.289487][ T7678] ? skb_clone+0x190/0x400 [ 199.289514][ T7678] skb_clone+0x190/0x400 [ 199.289538][ T7678] netlink_deliver_tap+0xaed/0xcc0 [ 199.289572][ T7678] netlink_dump+0x909/0xd00 [ 199.289613][ T7678] ? __pfx_netlink_dump+0x10/0x10 [ 199.289655][ T7678] __netlink_dump_start+0x6d6/0x990 [ 199.289686][ T7678] xsk_diag_handler_dump+0x1ac/0x250 [ 199.289718][ T7678] ? __pfx_xsk_diag_handler_dump+0x10/0x10 [ 199.289749][ T7678] ? __pfx_xsk_diag_dump+0x10/0x10 [ 199.289780][ T7678] ? sock_diag_lock_handler+0x10f/0x2e0 [ 199.289807][ T7678] sock_diag_rcv_msg+0x431/0x7a0 [ 199.289831][ T7678] netlink_rcv_skb+0x159/0x420 [ 199.289860][ T7678] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 199.289882][ T7678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.289920][ T7678] ? netlink_deliver_tap+0x1ae/0xcc0 [ 199.289951][ T7678] netlink_unicast+0x585/0x850 [ 199.289984][ T7678] ? __pfx_netlink_unicast+0x10/0x10 [ 199.290011][ T7678] ? __build_skb_around+0x278/0x390 [ 199.290044][ T7678] ? is_vmalloc_addr+0x86/0xa0 [ 199.290113][ T7678] netlink_sendmsg+0x8b0/0xda0 [ 199.290147][ T7678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.290179][ T7678] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 199.290214][ T7678] sock_write_iter+0x524/0x5a0 [ 199.290242][ T7678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.290271][ T7678] ? __pfx_sock_write_iter+0x10/0x10 [ 199.290308][ T7678] ? bpf_lsm_file_permission+0x9/0x10 [ 199.290327][ T7678] ? security_file_permission+0x76/0x210 [ 199.290351][ T7678] ? rw_verify_area+0xce/0x6d0 [ 199.290377][ T7678] vfs_write+0x6ac/0x1070 [ 199.290400][ T7678] ? __pfx_sock_write_iter+0x10/0x10 [ 199.290431][ T7678] ? __pfx_vfs_write+0x10/0x10 [ 199.290456][ T7678] ? find_held_lock+0x2b/0x80 [ 199.290497][ T7678] ksys_write+0x1f8/0x250 [ 199.290519][ T7678] ? __pfx_ksys_write+0x10/0x10 [ 199.290543][ T7678] ? rcu_is_watching+0x12/0xc0 [ 199.290570][ T7678] do_syscall_64+0x10b/0xf80 [ 199.290602][ T7678] ? clear_bhb_loop+0x40/0x90 [ 199.290626][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.290646][ T7678] RIP: 0033:0x7fe8bd39ce59 [ 199.290662][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.290681][ T7678] RSP: 002b:00007fe8be309028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.290699][ T7678] RAX: ffffffffffffffda RBX: 00007fe8bd615fa0 RCX: 00007fe8bd39ce59 [ 199.290712][ T7678] RDX: 0000000000001d30 RSI: 0000200000000000 RDI: 0000000000000003 [ 199.290723][ T7678] RBP: 00007fe8be309090 R08: 0000000000000000 R09: 0000000000000000 [ 199.290735][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.290763][ T7678] R13: 00007fe8bd616038 R14: 00007fe8bd615fa0 R15: 00007ffda3970b28 [ 199.290803][ T7678] [ 203.143951][ T7724] vhci_hcd vhci_hcd.0: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 203.635453][ T7737] netlink: 'syz.2.394': attribute type 11 has an invalid length. [ 204.447150][ T5976] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 207.249173][ T7796] lo: entered allmulticast mode [ 207.366796][ T7799] lo: left allmulticast mode [ 209.370139][ T7879] bond0: Unable to set down delay as MII monitoring is disabled [ 209.491298][ T7883] < [ 210.253434][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 211.923112][ T7925] Process accounting paused [ 214.489974][ T8013] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 214.559654][ T8023] netlink: 'syz.1.457': attribute type 3 has an invalid length. [ 217.842253][ T8081] netlink: 146 bytes leftover after parsing attributes in process `syz.0.467'. [ 218.153233][ T8095] netlink: 'syz.2.471': attribute type 9 has an invalid length. [ 218.581017][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 219.664248][ T8115] net_ratelimit: 48 callbacks suppressed [ 219.664272][ T8115] netlink: del zone limit has 4 unknown bytes [ 219.957374][ T8121] netlink: del zone limit has 4 unknown bytes [ 221.343363][ T8152] FAULT_INJECTION: forcing a failure. [ 221.343363][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 221.377538][ T8152] CPU: 1 UID: 0 PID: 8152 Comm: syz.0.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.377585][ T8152] Tainted: [L]=SOFTLOCKUP [ 221.377596][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.377612][ T8152] Call Trace: [ 221.377621][ T8152] [ 221.377632][ T8152] dump_stack_lvl+0x100/0x190 [ 221.377671][ T8152] should_fail_ex.cold+0x5/0xa [ 221.377709][ T8152] should_failslab+0xc2/0x120 [ 221.377763][ T8152] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 221.377814][ T8152] ? security_inode_alloc+0x3b/0x2c0 [ 221.377845][ T8152] ? lockdep_init_map_type+0x5c/0x250 [ 221.377884][ T8152] security_inode_alloc+0x3b/0x2c0 [ 221.377919][ T8152] inode_init_always_gfp+0xcc0/0x1000 [ 221.377966][ T8152] alloc_inode+0x8e/0x250 [ 221.378017][ T8152] new_inode+0x22/0x1c0 [ 221.378070][ T8152] shmem_get_inode+0x1e3/0xfb0 [ 221.378118][ T8152] ? __pfx_shmem_get_inode+0x10/0x10 [ 221.378165][ T8152] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.378209][ T8152] shmem_mknod+0x217/0x480 [ 221.378258][ T8152] ? __pfx_shmem_mknod+0x10/0x10 [ 221.378302][ T8152] ? bpf_lsm_inode_create+0x9/0x10 [ 221.378357][ T8152] ? __pfx_shmem_create+0x10/0x10 [ 221.378402][ T8152] lookup_open.isra.0+0xc47/0x11b0 [ 221.378454][ T8152] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 221.378497][ T8152] ? __pfx___might_resched+0x10/0x10 [ 221.378535][ T8152] ? mnt_get_write_access+0x52/0x2f0 [ 221.378596][ T8152] ? __pfx_down_write+0x10/0x10 [ 221.378629][ T8152] ? mnt_get_write_access+0x1e9/0x2f0 [ 221.378687][ T8152] path_openat+0x2291/0x31a0 [ 221.378742][ T8152] ? __pfx_path_openat+0x10/0x10 [ 221.378807][ T8152] do_file_open+0x20e/0x430 [ 221.378851][ T8152] ? __pfx_do_file_open+0x10/0x10 [ 221.378919][ T8152] ? alloc_fd+0x476/0x790 [ 221.378960][ T8152] ? do_getname+0x191/0x390 [ 221.379010][ T8152] do_sys_openat2+0x10d/0x1e0 [ 221.379077][ T8152] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.379144][ T8152] __x64_sys_openat+0x12d/0x210 [ 221.379208][ T8152] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.379254][ T8152] ? ksys_write+0x1ac/0x250 [ 221.379295][ T8152] ? rcu_is_watching+0x12/0xc0 [ 221.379336][ T8152] do_syscall_64+0x10b/0xf80 [ 221.379403][ T8152] ? clear_bhb_loop+0x40/0x90 [ 221.379454][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.379488][ T8152] RIP: 0033:0x7f2506f9ce59 [ 221.379516][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.379547][ T8152] RSP: 002b:00007f25051f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.379578][ T8152] RAX: ffffffffffffffda RBX: 00007f2507215fa0 RCX: 00007f2506f9ce59 [ 221.379600][ T8152] RDX: 0000000000183841 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 221.379620][ T8152] RBP: 00007f2507032d6f R08: 0000000000000000 R09: 0000000000000000 [ 221.379639][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.379657][ T8152] R13: 00007f2507216038 R14: 00007f2507215fa0 R15: 00007ffe7560e958 [ 221.379700][ T8152] [ 225.145688][ T8223] random: crng reseeded on system resumption [ 225.215819][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 225.247283][ T8224] netlink: 25 bytes leftover after parsing attributes in process `syz.3.499'. [ 225.736073][ T8240] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 228.259565][ T8297] FAULT_INJECTION: forcing a failure. [ 228.259565][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 228.297324][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.3.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.297371][ T8297] Tainted: [L]=SOFTLOCKUP [ 228.297381][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.297407][ T8297] Call Trace: [ 228.297417][ T8297] [ 228.297428][ T8297] dump_stack_lvl+0x100/0x190 [ 228.297467][ T8297] should_fail_ex.cold+0x5/0xa [ 228.297506][ T8297] should_failslab+0xc2/0x120 [ 228.297542][ T8297] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 228.297591][ T8297] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 228.297643][ T8297] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 228.297698][ T8297] idr_get_free+0x52e/0xa00 [ 228.297758][ T8297] idr_alloc_u32+0x1ac/0x320 [ 228.297811][ T8297] ? __pfx_idr_alloc_u32+0x10/0x10 [ 228.297862][ T8297] ? mark_held_locks+0x40/0x70 [ 228.297902][ T8297] idr_alloc+0xc0/0x130 [ 228.297949][ T8297] ? __pfx_idr_alloc+0x10/0x10 [ 228.297994][ T8297] ? net_generic+0xea/0x2a0 [ 228.298041][ T8297] ? __radix_tree_lookup+0x217/0x2b0 [ 228.298091][ T8297] ppp_dev_configure+0x8f1/0xcb0 [ 228.298151][ T8297] ppp_ioctl+0x9d7/0x27c0 [ 228.298183][ T8297] ? find_held_lock+0x2b/0x80 [ 228.298224][ T8297] ? __pfx_ppp_ioctl+0x10/0x10 [ 228.298260][ T8297] ? __fget_files+0x21f/0x3d0 [ 228.298304][ T8297] ? __pfx_ppp_ioctl+0x10/0x10 [ 228.298335][ T8297] __x64_sys_ioctl+0x18e/0x210 [ 228.298370][ T8297] do_syscall_64+0x10b/0xf80 [ 228.298438][ T8297] ? clear_bhb_loop+0x40/0x90 [ 228.298478][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.298511][ T8297] RIP: 0033:0x7f98c5d9ce59 [ 228.298535][ T8297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.298564][ T8297] RSP: 002b:00007f98c6cbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.298593][ T8297] RAX: ffffffffffffffda RBX: 00007f98c6015fa0 RCX: 00007f98c5d9ce59 [ 228.298613][ T8297] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000a [ 228.298631][ T8297] RBP: 00007f98c5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 228.298649][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.298667][ T8297] R13: 00007f98c6016038 R14: 00007f98c6015fa0 R15: 00007ffd52ad7468 [ 228.298707][ T8297] [ 228.553506][ T8301] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 230.793966][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 231.718639][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 234.180387][ T8436] FAULT_INJECTION: forcing a failure. [ 234.180387][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 234.180442][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.0.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.180490][ T8436] Tainted: [L]=SOFTLOCKUP [ 234.180499][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.180514][ T8436] Call Trace: [ 234.180522][ T8436] [ 234.180533][ T8436] dump_stack_lvl+0x100/0x190 [ 234.180567][ T8436] should_fail_ex.cold+0x5/0xa [ 234.180604][ T8436] ? tomoyo_realpath_from_path+0xb6/0x690 [ 234.180641][ T8436] should_failslab+0xc2/0x120 [ 234.180674][ T8436] __kmalloc_noprof+0xe0/0x850 [ 234.180697][ T8436] ? kfree+0x1dd/0x6c0 [ 234.180742][ T8436] tomoyo_realpath_from_path+0xb6/0x690 [ 234.180787][ T8436] tomoyo_path_number_perm+0x23c/0x580 [ 234.180817][ T8436] ? tomoyo_path_number_perm+0x22e/0x580 [ 234.180850][ T8436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.180914][ T8436] ? find_held_lock+0x2b/0x80 [ 234.180970][ T8436] ? __fget_files+0x215/0x3d0 [ 234.181003][ T8436] ? hook_file_ioctl_common+0x149/0x410 [ 234.181035][ T8436] ? __fget_files+0x215/0x3d0 [ 234.181082][ T8436] ? __fget_files+0x21f/0x3d0 [ 234.181120][ T8436] security_file_ioctl+0xd3/0x230 [ 234.181155][ T8436] __x64_sys_ioctl+0xb7/0x210 [ 234.181187][ T8436] do_syscall_64+0x10b/0xf80 [ 234.181230][ T8436] ? clear_bhb_loop+0x40/0x90 [ 234.181265][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.181294][ T8436] RIP: 0033:0x7f2506f9ce59 [ 234.181329][ T8436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.181354][ T8436] RSP: 002b:00007f25051d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.181379][ T8436] RAX: ffffffffffffffda RBX: 00007f2507216090 RCX: 00007f2506f9ce59 [ 234.181396][ T8436] RDX: 0000000000000000 RSI: 0000000000004604 RDI: 0000000000000003 [ 234.181411][ T8436] RBP: 00007f25051d5090 R08: 0000000000000000 R09: 0000000000000000 [ 234.181427][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.181442][ T8436] R13: 00007f2507216128 R14: 00007f2507216090 R15: 00007ffe7560e958 [ 234.181478][ T8436] [ 234.212189][ T8436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.786832][ T8458] FAULT_INJECTION: forcing a failure. [ 236.786832][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 236.822529][ T8458] CPU: 1 UID: 0 PID: 8458 Comm: syz.3.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.822581][ T8458] Tainted: [L]=SOFTLOCKUP [ 236.822593][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.822611][ T8458] Call Trace: [ 236.822622][ T8458] [ 236.822635][ T8458] dump_stack_lvl+0x100/0x190 [ 236.822676][ T8458] should_fail_ex.cold+0x5/0xa [ 236.822717][ T8458] should_failslab+0xc2/0x120 [ 236.822757][ T8458] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 236.822821][ T8458] ? __d_alloc+0x34/0xa40 [ 236.822874][ T8458] __d_alloc+0x34/0xa40 [ 236.822925][ T8458] d_alloc_pseudo+0x1c/0xc0 [ 236.822957][ T8458] alloc_file_pseudo+0xcf/0x230 [ 236.823009][ T8458] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 236.823066][ T8458] ? alloc_fd+0x476/0x790 [ 236.823118][ T8458] sock_alloc_file+0x50/0x210 [ 236.823163][ T8458] __sys_socket+0x1c0/0x260 [ 236.823218][ T8458] ? __pfx___sys_socket+0x10/0x10 [ 236.823269][ T8458] ? ksys_write+0x1ac/0x250 [ 236.823318][ T8458] __x64_sys_socket+0x72/0xb0 [ 236.823346][ T8458] ? lockdep_hardirqs_on+0x78/0x100 [ 236.823399][ T8458] do_syscall_64+0x10b/0xf80 [ 236.823449][ T8458] ? clear_bhb_loop+0x40/0x90 [ 236.823501][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.823536][ T8458] RIP: 0033:0x7f98c5d9ce59 [ 236.823563][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.823596][ T8458] RSP: 002b:00007f98c6cbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 236.823629][ T8458] RAX: ffffffffffffffda RBX: 00007f98c6015fa0 RCX: 00007f98c5d9ce59 [ 236.823650][ T8458] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 236.823669][ T8458] RBP: 00007f98c5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 236.823689][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.823708][ T8458] R13: 00007f98c6016038 R14: 00007f98c6015fa0 R15: 00007ffd52ad7468 [ 236.823751][ T8458] [ 238.727485][ T29] audit: type=1800 audit(1779344431.621:11): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.549" name="lu_gp_id" dev="configfs" ino=20438 res=0 errno=0 [ 239.522640][ T8579] IPVS: length: 131 != 8 [ 241.576151][ T8608] unsupported nla_type 113 [ 242.162831][ T8617] Process accounting resumed [ 242.612083][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 242.662254][ T8625] ipvlan1: entered promiscuous mode [ 242.679560][ T8625] ipvlan1: entered allmulticast mode [ 242.693466][ T8625] veth0_vlan: entered allmulticast mode [ 244.030505][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 245.367529][ T8705] program syz.0.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.628640][ T8722] nvme_fcloop: unknown parameter or missing value '7' [ 246.651269][ T8725] FAULT_INJECTION: forcing a failure. [ 246.651269][ T8725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.682569][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.0.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.682626][ T8725] Tainted: [L]=SOFTLOCKUP [ 246.682638][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.682661][ T8725] Call Trace: [ 246.682671][ T8725] [ 246.682683][ T8725] dump_stack_lvl+0x100/0x190 [ 246.682725][ T8725] should_fail_ex.cold+0x5/0xa [ 246.682767][ T8725] ? prepare_alloc_pages+0x16d/0x5f0 [ 246.682814][ T8725] should_fail_alloc_page+0xeb/0x140 [ 246.682857][ T8725] prepare_alloc_pages+0x1f0/0x5f0 [ 246.682905][ T8725] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 246.682962][ T8725] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 246.683010][ T8725] ? __lock_acquire+0x4a5/0x2630 [ 246.683047][ T8725] ? __lock_acquire+0x4a5/0x2630 [ 246.683076][ T8725] ? css_rstat_updated+0x1ce/0x5a0 [ 246.683131][ T8725] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.683190][ T8725] ? do_raw_spin_lock+0x128/0x260 [ 246.683230][ T8725] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 246.683269][ T8725] ? find_held_lock+0x2b/0x80 [ 246.683323][ T8725] ? __lock_acquire+0x4a5/0x2630 [ 246.683354][ T8725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.683406][ T8725] ? policy_nodemask+0xed/0x4f0 [ 246.683468][ T8725] alloc_pages_mpol+0x1fb/0x540 [ 246.683511][ T8725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 246.683552][ T8725] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 246.683587][ T8725] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 246.683641][ T8725] folio_alloc_mpol_noprof+0x36/0x260 [ 246.683688][ T8725] shmem_alloc_folio+0x135/0x160 [ 246.683737][ T8725] shmem_alloc_and_add_folio+0x371/0xd40 [ 246.683809][ T8725] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 246.683869][ T8725] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 246.683913][ T8725] shmem_get_folio_gfp+0x6ab/0x1900 [ 246.683955][ T8725] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 246.683988][ T8725] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 246.684023][ T8725] ? lockdep_hardirqs_on+0x78/0x100 [ 246.684082][ T8725] shmem_fault+0x1f9/0xa20 [ 246.684114][ T8725] ? __lock_acquire+0x4a5/0x2630 [ 246.684147][ T8725] ? __pfx_shmem_fault+0x10/0x10 [ 246.684181][ T8725] ? __up_read+0x2c1/0x6e0 [ 246.684234][ T8725] ? __pfx_filemap_map_pages+0x10/0x10 [ 246.684287][ T8725] __do_fault+0x10b/0x440 [ 246.684320][ T8725] ? find_held_lock+0x2b/0x80 [ 246.684366][ T8725] do_fault+0x2db/0x1750 [ 246.684416][ T8725] __handle_mm_fault+0x187d/0x2a00 [ 246.684491][ T8725] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 246.684549][ T8725] ? __pfx___handle_mm_fault+0x10/0x10 [ 246.684603][ T8725] ? pte_offset_map_lock+0x174/0x320 [ 246.684643][ T8725] ? find_held_lock+0x2b/0x80 [ 246.684699][ T8725] ? follow_page_pte+0x4d0/0x13f0 [ 246.684756][ T8725] handle_mm_fault+0x36d/0xa20 [ 246.684816][ T8725] __get_user_pages+0x1178/0x32a0 [ 246.684868][ T8725] ? down_read_killable+0x307/0x4b0 [ 246.684906][ T8725] ? __pfx___get_user_pages+0x10/0x10 [ 246.684958][ T8725] faultin_page_range+0x1f1/0x9e0 [ 246.685010][ T8725] madvise_do_behavior+0x354/0x510 [ 246.685059][ T8725] ? __pfx_madvise_do_behavior+0x10/0x10 [ 246.685115][ T8725] ? find_held_lock+0x2b/0x80 [ 246.685167][ T8725] do_madvise+0x195/0x240 [ 246.685210][ T8725] ? __pfx_do_madvise+0x10/0x10 [ 246.685253][ T8725] ? do_futex+0x192/0x350 [ 246.685297][ T8725] ? __fget_files+0x21f/0x3d0 [ 246.685364][ T8725] __x64_sys_madvise+0xa9/0x110 [ 246.685408][ T8725] ? lockdep_hardirqs_on+0x78/0x100 [ 246.685459][ T8725] do_syscall_64+0x10b/0xf80 [ 246.685510][ T8725] ? clear_bhb_loop+0x40/0x90 [ 246.685551][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.685584][ T8725] RIP: 0033:0x7f2506f9ce59 [ 246.685610][ T8725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.685642][ T8725] RSP: 002b:00007f25051f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 246.685679][ T8725] RAX: ffffffffffffffda RBX: 00007f2507215fa0 RCX: 00007f2506f9ce59 [ 246.685700][ T8725] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 246.685719][ T8725] RBP: 00007f2507032d6f R08: 0000000000000000 R09: 0000000000000000 [ 246.685738][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.685762][ T8725] R13: 00007f2507216038 R14: 00007f2507215fa0 R15: 00007ffe7560e958 [ 246.685803][ T8725] [ 247.259384][ T8730] kafs: addr_prefs: Invalid Command [ 247.945397][ T5784] ================================================================== [ 247.945422][ T5784] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 247.945461][ T5784] Write of size 8 at addr ffffc90004c190a0 by task kworker/0:6/5784 [ 247.945478][ T5784] [ 247.945489][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.945518][ T5784] Tainted: [L]=SOFTLOCKUP [ 247.945525][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.945542][ T5784] Workqueue: events_power_efficient fb_flashcursor [ 247.945566][ T5784] Call Trace: [ 247.945572][ T5784] [ 247.945580][ T5784] dump_stack_lvl+0x100/0x190 [ 247.945607][ T5784] print_report+0x13d/0x4b0 [ 247.945637][ T5784] ? _raw_spin_lock_irqsave+0x52/0x60 [ 247.945669][ T5784] ? sys_imageblit+0x19fb/0x1d60 [ 247.945700][ T5784] kasan_report+0xdf/0x1d0 [ 247.945725][ T5784] ? sys_imageblit+0x19fb/0x1d60 [ 247.945759][ T5784] sys_imageblit+0x19fb/0x1d60 [ 247.945795][ T5784] ? __pfx_sys_imageblit+0x10/0x10 [ 247.945860][ T5784] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 247.945888][ T5784] soft_cursor+0x524/0xa10 [ 247.945919][ T5784] bit_cursor+0xca1/0x1490 [ 247.945948][ T5784] ? __pfx_bit_cursor+0x10/0x10 [ 247.945978][ T5784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.946009][ T5784] ? get_color+0x1da/0x450 [ 247.946031][ T5784] ? __pfx_bit_cursor+0x10/0x10 [ 247.946056][ T5784] fb_flashcursor+0x338/0x430 [ 247.946078][ T5784] process_one_work+0xa0e/0x1980 [ 247.946104][ T5784] ? __pfx_process_one_work+0x10/0x10 [ 247.946128][ T5784] ? __pfx_fb_flashcursor+0x10/0x10 [ 247.946151][ T5784] worker_thread+0x5ef/0xe50 [ 247.946174][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 247.946195][ T5784] ? kthread+0x13a/0x450 [ 247.946211][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 247.946233][ T5784] kthread+0x370/0x450 [ 247.946250][ T5784] ? __pfx_kthread+0x10/0x10 [ 247.946269][ T5784] ret_from_fork+0x72b/0xd50 [ 247.946291][ T5784] ? __pfx_ret_from_fork+0x10/0x10 [ 247.946314][ T5784] ? __switch_to+0x800/0x1100 [ 247.946343][ T5784] ? __switch_to_asm+0x39/0x70 [ 247.946372][ T5784] ? __pfx_kthread+0x10/0x10 [ 247.946390][ T5784] ret_from_fork_asm+0x1a/0x30 [ 247.946424][ T5784] [ 247.946431][ T5784] [ 247.946436][ T5784] The buggy address belongs to a vmalloc virtual mapping [ 247.946455][ T5784] Memory state around the buggy address: [ 247.946482][ T5784] ffffc90004c18f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.946509][ T5784] ffffc90004c19000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.946524][ T5784] >ffffc90004c19080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.946535][ T5784] ^ [ 247.946546][ T5784] ffffc90004c19100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.946560][ T5784] ffffc90004c19180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.946572][ T5784] ================================================================== [ 247.946598][ T5784] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.946612][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.946641][ T5784] Tainted: [L]=SOFTLOCKUP [ 247.946648][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.946662][ T5784] Workqueue: events_power_efficient fb_flashcursor [ 247.946684][ T5784] Call Trace: [ 247.946691][ T5784] [ 247.946698][ T5784] dump_stack_lvl+0x100/0x190 [ 247.946719][ T5784] vpanic+0x552/0x970 [ 247.946738][ T5784] ? __pfx_vpanic+0x10/0x10 [ 247.946757][ T5784] ? mark_held_locks+0x40/0x70 [ 247.946776][ T5784] ? irqentry_exit+0x24d/0x7e0 [ 247.946813][ T5784] ? sys_imageblit+0x19fb/0x1d60 [ 247.946844][ T5784] panic+0xd1/0xe0 [ 247.946862][ T5784] ? __pfx_panic+0x10/0x10 [ 247.946885][ T5784] ? check_panic_on_warn+0x1f/0x90 [ 247.946906][ T5784] check_panic_on_warn.cold+0x19/0x34 [ 247.946928][ T5784] end_report.part.0+0x3a/0x90 [ 247.946956][ T5784] kasan_report.cold+0xe/0x18 [ 247.946986][ T5784] ? sys_imageblit+0x19fb/0x1d60 [ 247.947021][ T5784] sys_imageblit+0x19fb/0x1d60 [ 247.947056][ T5784] ? __pfx_sys_imageblit+0x10/0x10 [ 247.947093][ T5784] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 247.947119][ T5784] soft_cursor+0x524/0xa10 [ 247.947149][ T5784] bit_cursor+0xca1/0x1490 [ 247.947179][ T5784] ? __pfx_bit_cursor+0x10/0x10 [ 247.947209][ T5784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.947240][ T5784] ? get_color+0x1da/0x450 [ 247.947261][ T5784] ? __pfx_bit_cursor+0x10/0x10 [ 247.947287][ T5784] fb_flashcursor+0x338/0x430 [ 247.947309][ T5784] process_one_work+0xa0e/0x1980 [ 247.947335][ T5784] ? __pfx_process_one_work+0x10/0x10 [ 247.947359][ T5784] ? __pfx_fb_flashcursor+0x10/0x10 [ 247.947382][ T5784] worker_thread+0x5ef/0xe50 [ 247.947425][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 247.947447][ T5784] ? kthread+0x13a/0x450 [ 247.947465][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 247.947494][ T5784] kthread+0x370/0x450 [ 247.947516][ T5784] ? __pfx_kthread+0x10/0x10 [ 247.947544][ T5784] ret_from_fork+0x72b/0xd50 [ 247.947570][ T5784] ? __pfx_ret_from_fork+0x10/0x10 [ 247.947602][ T5784] ? __switch_to+0x800/0x1100 [ 247.947632][ T5784] ? __switch_to_asm+0x39/0x70 [ 247.947660][ T5784] ? __pfx_kthread+0x10/0x10 [ 247.947680][ T5784] ret_from_fork_asm+0x1a/0x30 [ 247.947716][ T5784] [ 247.948458][ T5784] Kernel Offset: disabled