last executing test programs: 5.859142249s ago: executing program 3 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f0000000100)={{0x9, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x8, 0x9}, 0x5, 0x2812, 0x2, 0xa54, @inferred, @raw=0x7, 0x40, 0x0, &(0x7f0000000080)="5bc613a24ab82f7533dd8a33c03a03df9c34ab7fce7b855e697e74a1c160defc5ddb24b1", &(0x7f00000000c0)="2d59a928deb6bd9943881086c22585297d9841788601c7ab30ec09a7068d34dee6ebe03bf29c0042"}) (async) r3 = setfsuid$auto(0xee00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x200000000000, 0x806121, 0x4) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) setsockopt$auto(r4, 0x6, 0x13, 0x0, 0x40) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, 0x54) shmctl$auto_SHM_LOCK(0x4bc, 0xb, &(0x7f0000002240)={{0xf, r3, 0xee01, 0x9, 0x6, 0x10000, 0x2}, 0x8, 0x7, 0x5, 0x100, @raw=0x8, @raw=0x2f82, 0x4, 0x0, &(0x7f0000001200)="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", &(0x7f0000002200)="1fadbc2934ddea6ded93331af7c1d8e21a55c5"}) (async) r6 = setfsgid$auto(0xee00) keyctl$auto(0x4, r3, r5, r6, 0x2000000000) shmctl$auto(0x7, 0x1ff2, &(0x7f00000002c0)={{0x2, r2, r6, 0x8, 0x6, 0x3, 0xff66}, 0x1f, 0x2, 0x100000000, 0x0, @inferred=0xffffffffffffffff, @raw=0x100, 0x4, 0x0, &(0x7f0000000180)="843176acfefe814d12b12343928e9ee4fba3a531f8ed276ba93c319ec0cfec735f1e2635cfbffe969195d6d420c8a8375b2fa4d19b9e5c4a3f1c31d57efe428a2e271a056282265e0d571e77de475b216e876f3859d222d762c426dd1c09f023f9df6f4b2cf440d16faa6356216b3366cf15922988e0fc963c857cbb68afbd3104b66d670e48e26913c713664f53dc15b88a2084fefb205b5b957a241abc01c6c1cd621ad167f0bd607a920179a62557680e8820cbc0f77406df7df149c03f6c9dae4caf8b3b7d80af452c89cef055ca76", &(0x7f0000000280)="60b00a82f4f79fb4bf4c6d9c152df19ed82d282f00c6e2a76f1d6b2eea55e8a9804808c6"}) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r1, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) 5.228856402s ago: executing program 3 (id=388): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000014c0)={0x3, 0x3000005, 0x1, 0xffffefff, 0xffffffff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14008601", @ANYRES16=0x0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) pread64$auto(r1, &(0x7f0000000100)='/dev/snd/timer\x00', 0x5, 0x8) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) set_mempolicy$auto(0x7, &(0x7f0000000080)=0x4, 0x56) unshare$auto(0x40000080) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x8000, 0x0) ioctl$auto(r1, 0x7f, r3) 5.076107321s ago: executing program 2 (id=389): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0x5, 0x7, 0xd) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x48001, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x1000, 0x8000000000000001}, 0x4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, 0xffffffffffffffff, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) 4.628856387s ago: executing program 1 (id=392): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mremap$auto(0x4000000, 0x8, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r1 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffff0100000026291d0000000007014f0100000300", 0x7fff, 0x408, 0xfff, 0xfffbfffffffffffb, 0x200000000040000b}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000), 0x0) ioctl$auto(r3, 0x4b67, 0x1) getsockopt$auto(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x141040, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r5, 0x40045431, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) 4.463272972s ago: executing program 0 (id=393): r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xb32ef65f52c55674, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/tracing/tracing_on\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0x74}) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r5}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) getdents$auto(r0, &(0x7f0000000100)={0xb, 0x40, 0x0, "39e218cbfbd5e08bf98f87e87af5899c0ca0b2902459a85fbfe2572edebbeb6ade2c2e3e54e1b59f85d808"}, 0x3) 4.24530925s ago: executing program 3 (id=394): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x8180, 0x0) r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) write$auto(0x3, 0x0, 0x5c8) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x809c0, 0x0) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r1, &(0x7f00000000c0)=""/214, 0xd6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zl10353/parameters/debug\x00', 0x80000, 0x0) setsockopt$auto_SO_BROADCAST(r0, 0xffffffff, 0x6, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe6/\x00', &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) acct$auto(&(0x7f0000000080)='/dev/video63\x00') 3.769593074s ago: executing program 0 (id=395): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x11, 0x3, 0x10) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(0x0, 0x595002, 0x60d) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(0x0, 0x22040, 0x80) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) open(0x0, 0x149443, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) r1 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r1, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) fcntl$auto(0x8000000000000001, 0x7, 0x8) socket(0x2a, 0x2, 0x6) socket(0x11, 0x80003, 0x300) 3.166414637s ago: executing program 3 (id=396): mmap$auto(0x0, 0x6, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2200, 0x0) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) r4 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r4, 0xd}, 0x92) r5 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xa) bpf$auto(0x3, &(0x7f0000000700)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xd) write$auto_force_wakeup_fops_hci_vhci(r1, &(0x7f0000000080)='1', 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r6, 0x80845663, r6) r7 = getpid() r8 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xe7da) (async) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x1, 0x3, 0x5]}, 0x0, 0x0, 0x0) (async) dup2$auto(0x0, 0x4) (async) r2 = pipe$auto(0x0) (async) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) close_range$auto(r1, r0, 0x0) (async) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyp1/dev\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) (async, rerun: 32) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) (async, rerun: 32) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) 2.190917984s ago: executing program 2 (id=401): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x80002, 0x73) sendmsg$auto_VDPA_CMD_DEV_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x840) sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, 0x0, 0x9, 0x0, 0x4, 0x24000000}, 0x5}, 0x2, 0x2) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) connect$auto(0x3, 0x0, 0x18) r2 = socket(0x22, 0x2, 0x1) fstat$auto(r2, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r0, 0x3b85, 0x38) 2.174715063s ago: executing program 0 (id=402): r0 = socket(0x2, 0x3, 0xa) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) ioctl$auto(0xffffffffffffffff, 0x4b4a, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_INFO(0x80, 0xc, &(0x7f0000000240)={{0x4, 0x0, 0xee01, 0x7, 0x6, 0x6, 0x40}, 0x0, &(0x7f00000001c0)=0x2, 0x3, 0x9, 0x10001, 0x10000, 0x101, 0x100, 0x5, 0x1, @raw, @raw=0x1}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi4\x00', 0x0, 0x0) ioctl$auto(r6, 0x40085618, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f00000004c0)={{0x5, 0xee01, 0xee00, 0x6, 0xf, 0x4, 0x3}, 0xd2, 0xf2d0000000, 0x2, 0x7, @inferred, @raw=0x1, 0xd7, 0x0, &(0x7f0000000340)="07c50145bf9e3d0a03c6bf68208915bdf42ed6ecb1ba3fb55eaa9d765b67c34a6251018c14a3082f1a00afc05372ae1cbfd9c0802b7d782c27bfa75e159ad438cd7e2789926079c5d14b1b93efb1a8d5c617c2fb888994e6a722ec05668bc426f34afd91078ac7a9c258a5ad1e1bed71d6ac4d12c5782878dd96de0435c2e438ab45225a611b42b9ac09f2862244e763d0f8ca80950c6b2523a9c4a0d9340100a04cfd9586f00996a43cd1b30b72b486e2cea73ebfca870e93a124076566ed2856d6669f74166b37b5ed90a18638", &(0x7f0000000440)="06ff108605e2dc7f3aa5eb3de472d704aa6bc3f177ac452fccad0fb41a633037c3abc2c64e90fcb025ed1f3d3ede65f4ae68d785779fc8187bc464dc00fd77aa85968a0d7615c4368a5e"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'hsr0\x00'}) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 1.977450794s ago: executing program 3 (id=403): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000000280)="3c56e86300") openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mprotect$auto(0xc000, 0x8, 0x8) pwritev$auto(r3, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0xfffffffd, 0x1, 0x80f0c8, 0x0, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x200002, 0xffffffffffffffff, 0xe4, 0x2, 0x5, 0x3b1, 0x3, 0x0, 0x78, @attach_btf_obj_fd, 0x6, 0xffff, 0x2, 0x81, 0xfffffffe}, 0x4a) 1.95096962s ago: executing program 1 (id=404): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000006) 1.74409913s ago: executing program 2 (id=405): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0xf, 0x0, 0x0) ioctl$auto(r0, 0x64cf, 0x1df) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x13, 0x0, 0x4) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/status\x00', 0x220, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000080)=""/119, 0x77) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r6, 0x29, 0x1, 0x0, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x80086601, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05082dbd7000fbdbdf257e00"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r9, @ANYBLOB="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"], 0x3e8}, 0x1, 0x0, 0x0, 0x20008014}, 0x20008000) ioctl$auto_SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)="ec") r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x103880, 0x0) ioctl$auto(r10, 0x5607, 0x1) read$auto(r2, 0x0, 0x1001) 1.276379932s ago: executing program 1 (id=406): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) (async) getresgid$auto(&(0x7f0000000040)=0x7f, &(0x7f0000000180)=0x1ff, 0xfffffffffffffffc) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x6) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x1, 0x2070bd26, 0x25dfdb78}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r3, 0x2, &(0x7f0000000040), 0x86) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x104000000000010e, 0xb, 0x0, 0x400) (async) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20044840) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async) r8 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8c3}]}, @ETHTOOL_A_PLCA_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x83b}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffc}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9b}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7fffffff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) 1.125870554s ago: executing program 0 (id=407): socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x28) close_range$auto(0x2, 0x8, 0xb) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000, 0xffffffffffffffff}, 0x10) bpf$auto(0x3, &(0x7f0000000240)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0xc000, 0x9, 0xffffffffffffffff, @relative_fd=r2, 0x40}, 0x5) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@bpf_attr_4={0x3, r3, 0x401, r4}, 0x7) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x440040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3$auto(0x8000000000000001, 0x5, 0x800000000) splice$auto(0x8, &(0x7f0000000080)=0x10d, 0x5, 0x0, 0x1, 0x3) close_range$auto(0x2, r5, 0x0) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='\x00', &(0x7f00000003c0)="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", 0x0) syz_clone(0x800611, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.103528043s ago: executing program 1 (id=408): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf250a00000025"], 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) mmap$auto(0x0, 0x42000a, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0xab08, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x1, 0x9, 0x4000, @_sigpoll={0x1, r1}}}, 0x2, &(0x7f0000000140)={{0x1, 0x10001}, {0x65bd, 0x6}, 0x4, 0x800, 0x9, 0x7, 0x10, 0xff, 0x1, 0xe, 0x8, 0x6, 0x8, 0x8000, 0x3, 0x72}) prctl$auto(0x1000000003b, 0x1, r2, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clock_adjtime$auto(0x7, 0x0) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$auto_NL80211_CMD_JOIN_MESH(r3, 0x0, 0x8090) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) socket(0x11, 0x3, 0x2) 591.519862ms ago: executing program 0 (id=409): name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x8, 0xd, "2e5710c910109d7e"}, &(0x7f0000001180), 0x2) mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x9, &(0x7f0000000000)={{0x10, 0x3ff}, {0x6}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d23edb3100000000000000000075210d2de44406c2fb21", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3) fchdir$auto(r1) r2 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003200)={0x14, r4, 0xad36ff18956c1b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20045800}, 0x20040000) r5 = socket(0x2, 0x801, 0x6) setsockopt$auto(r5, 0x1, 0x12, 0x0, 0xa4) r6 = socketcall$auto(0x4, 0x0) ioctl$auto(0x3, 0xae41, r6) r7 = timerfd_create$auto(0x401, 0x0) msgctl$auto_MSG_STAT(0x10001000, 0xb, &(0x7f0000000100)={{0x392c, 0xee00, 0xffffffffffffffff, 0x1, 0x101, 0xfffffff9, 0x7}, &(0x7f0000000080)=0xc4, &(0x7f00000000c0)=0x3, 0x101, 0x538a, 0x7, 0x9, 0x8, 0x5, 0xa6, 0x5, @raw=0xd504, @raw=0x223}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000024c0)={&(0x7f0000000040), 0xc, &(0x7f0000002480)={&(0x7f0000001140)={0x1318, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x1138, 0x2, 0x0, 0x1, [@nested={0x102c, 0x46, 0x0, 0x1, [@typed={0x4, 0x3}, @generic="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", @typed={0x8, 0x3e, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xf}, @nested={0x4, 0x153}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xb3, 0x0, 0x0, @fd=r6}, @typed={0x4, 0x149}]}, @typed={0xe3, 0x6, 0x0, 0x0, @binary="9933c5151809bb554c19b41e22ede0c7aaf7ca08418b72c4e3c8eb434dc2ebdf5ebc08d6cc10c4d05dc04d6c5c8860fb8b78fd76f32bd5c43d65e7b60a215650423682574fc5129f1b4ad515daf5c92a3fafa716d12a5785b9c8a7dfb97516f7869f981b6157ba9b30510bc093b062f5b7f1867245dd9263153e2315646730d41b94e120b4db25d71f6113bc3989dfa3e1ffda4e0acf2053f15b5356e2135b119a535d2ef7338111a2cdd3ab06878623765aa997aaac7de1ed5e1e724e1565c9e07170209838e7b8dae5e0c2d1574f93636696cbdbe5c5927f8e1b94b92fb9"}, @generic="453a7b7611c537098b8cc21025ad7d41ce07a23d195ffefbc30934b9", @typed={0x8, 0x5d, 0x0, 0x0, @fd=r7}]}, @IPVS_CMD_ATTR_DEST={0x1ab, 0x2, 0x0, 0x1, [@generic="8dbd75b13c3d70e595a082e7cc75a374bfdc796b51a31c544cf8e394fea9de77d3eb0a51e067a5a7d2bb06d082a9a41c7a82139a58038514421d7b955ae014b56cba57847f1f53ced295d76e4174fa3c3affe613c160c98fc9de8a053391b003af1e7d4b9e94b9d39491fea7de2137d8c5e23c35e9b6d7c6f26f811b458c646aea41727b0d9b1ef57dfc99d8c966b0021b749e5bf187742834addc9d46ed12699698a6d5e5cd8753f7e28ce4575a8912bf24c0909d334246217b3a16b09607a2a1e90dd2efcbee321fc5a7b4a00ad4", @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xba, 0x65, 0x0, 0x1, [@generic="54cff6331e15e981692f251eb5ebd6c36917c8195e2870d2e1fe4b2c94a6793ee4115d4e6be349c3ec8b5831e63b80769c896cd5e17b3a67b14cc6d56309237c9bc999eb3b2bde301a03eaea132dbac0db775c1c9b5ec23e6862db4550cd8e56ce90407923cc57032fa537e23b28299ae359a8cc02c16798c360e29e395d3f83f5b44e439879670ed174cd8dd416112259a39ec328f64cb3baab6675985eee981cc707d40e3343245f586902ac34", @typed={0x8, 0x40, 0x0, 0x0, @pid=r0}]}, @typed={0x8, 0x16, 0x0, 0x0, @uid=r8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x1318}, 0x1, 0x0, 0x0, 0x40080}, 0x400c080) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/tcp\x00', 0x400, 0x0) pread64$auto(r9, 0x0, 0x202, 0xfffff000) r10 = socket(0xa, 0x5, 0x84) sendto$auto(r10, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) 556.500134ms ago: executing program 2 (id=410): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0) ioctl$auto(0x3, 0xc0104d03, r0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1ffe, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80044943, 0x0) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x24, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x4}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x6}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200680c0}, 0x881) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700000dcdf250200000004000800200001801c001080060009"], 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) 273.413045ms ago: executing program 2 (id=411): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffc, 0x8000000000000001, 0x200000000007, 0x14, 0xffffffffffffffff, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r0 = socket(0x23, 0x5, 0x0) bind$auto(r0, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0xa3}, 0x80) r1 = socket(0x23, 0x5, 0x0) bind$auto(r1, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES16], 0x28}}, 0x20000040) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket(0x2b, 0x1, 0x10) mmap$auto(0xffffffffffffffff, 0x2020006, 0x7fffffff, 0x91, 0xffffffffffffffff, 0x10000008000) ioctl$auto(r3, 0x8936, 0x1) close_range$auto(r3, r0, 0xc94) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x400008, 0x6, 0x9b73, r1, 0x2) socket(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r3) sendmsg$auto_NFC_CMD_START_POLL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000f23eb57e3682fba3adb250944d7186ccbb9fdd54631fe2968a80d4b360c13863393b4b46449ae8a2f2de68bec3c74aee1541e39a7afd8fe80d17133d30e4795f3fc8c51659e1b6f52512cb18ca50df81eded3ddbe884755bf9c639c345ca5c8651d66529bf05873da8ff716af0001265da4c37354b3c83cce2af6df664bcf86dbb4db7f83e96703ef66610c113f36750a936da80304a04824b06a0f46a2e95c530e3c49390832b85901e11ce2208a7e231e046d6b0d01600fd154155376d096ada843697404a22c35dc174cb76577986a52aa37c9472270d4d", @ANYRES16=r5, @ANYBLOB="000428bd7000fbdbdf250600000005000c00070000000800010008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000000) r6 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), r6) 0s ago: executing program 2 (id=412): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) readv$auto(0xffffffffffffffff, 0x0, 0x3) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$auto_TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffedd, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="20030000", @ANYRES16=r1, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x80}, 0x20048880) (async) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffedd, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="20030000", @ANYRES16=r1, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x80}, 0x20048880) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 93.179674][ T5811] cgroup: Unknown subsys name 'net' [ 93.291995][ T5811] cgroup: Unknown subsys name 'cpuset' [ 93.301588][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.073155][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.099329][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.108448][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.124580][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.136865][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.171132][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.190104][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.199957][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.208057][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.216438][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.224546][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.224563][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.240017][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.247123][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.256150][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.263541][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.272053][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.281142][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.281700][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.297090][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.297141][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.319271][ T10] cfg80211: failed to load regulatory.db [ 97.925857][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 97.984652][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 98.114131][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 98.141577][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 98.238629][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.245821][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.253125][ T5830] bridge_slave_0: entered allmulticast mode [ 98.261390][ T5830] bridge_slave_0: entered promiscuous mode [ 98.312252][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.319767][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.326971][ T5830] bridge_slave_1: entered allmulticast mode [ 98.334999][ T5830] bridge_slave_1: entered promiscuous mode [ 98.350104][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.357405][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.364618][ T5833] bridge_slave_0: entered allmulticast mode [ 98.372220][ T5833] bridge_slave_0: entered promiscuous mode [ 98.380526][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.387923][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.395234][ T5833] bridge_slave_1: entered allmulticast mode [ 98.402868][ T5833] bridge_slave_1: entered promiscuous mode [ 98.499494][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.524413][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.549464][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.584062][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.604481][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.612037][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.619720][ T5832] bridge_slave_0: entered allmulticast mode [ 98.627184][ T5832] bridge_slave_0: entered promiscuous mode [ 98.646919][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.654319][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.662143][ T5825] bridge_slave_0: entered allmulticast mode [ 98.669705][ T5825] bridge_slave_0: entered promiscuous mode [ 98.690172][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.697817][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.705141][ T5832] bridge_slave_1: entered allmulticast mode [ 98.712945][ T5832] bridge_slave_1: entered promiscuous mode [ 98.722406][ T5830] team0: Port device team_slave_0 added [ 98.728509][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.735686][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.743499][ T5825] bridge_slave_1: entered allmulticast mode [ 98.751292][ T5825] bridge_slave_1: entered promiscuous mode [ 98.761407][ T5833] team0: Port device team_slave_0 added [ 98.792800][ T5830] team0: Port device team_slave_1 added [ 98.800501][ T5833] team0: Port device team_slave_1 added [ 98.860321][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.872657][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.908165][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.920666][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.942283][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.949565][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.975786][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.989720][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.996736][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.023195][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.059314][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.066331][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.093093][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.118368][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.125378][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.151734][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.176913][ T5832] team0: Port device team_slave_0 added [ 99.185961][ T5832] team0: Port device team_slave_1 added [ 99.203926][ T5825] team0: Port device team_slave_0 added [ 99.214194][ T5825] team0: Port device team_slave_1 added [ 99.268169][ T5837] Bluetooth: hci0: command tx timeout [ 99.268318][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.280952][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.307411][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.347407][ T5837] Bluetooth: hci1: command tx timeout [ 99.347413][ T5827] Bluetooth: hci2: command tx timeout [ 99.347686][ T5827] Bluetooth: hci3: command tx timeout [ 99.372068][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.379165][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.405404][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.430616][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.437753][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.463800][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.481516][ T5830] hsr_slave_0: entered promiscuous mode [ 99.488646][ T5830] hsr_slave_1: entered promiscuous mode [ 99.509740][ T5833] hsr_slave_0: entered promiscuous mode [ 99.516473][ T5833] hsr_slave_1: entered promiscuous mode [ 99.523062][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 99.529259][ T5833] Cannot create hsr debugfs directory [ 99.535671][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.542959][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.569378][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.663012][ T5825] hsr_slave_0: entered promiscuous mode [ 99.669838][ T5825] hsr_slave_1: entered promiscuous mode [ 99.676061][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 99.681909][ T5825] Cannot create hsr debugfs directory [ 99.734559][ T5832] hsr_slave_0: entered promiscuous mode [ 99.741095][ T5832] hsr_slave_1: entered promiscuous mode [ 99.747518][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 99.753361][ T5832] Cannot create hsr debugfs directory [ 100.228224][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.248340][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.260777][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.281998][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.354105][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.370389][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.382072][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.394008][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.502770][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.519088][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.535618][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.566735][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.676132][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.692962][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.705070][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.717075][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.782481][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.839055][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.861131][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.903930][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.911500][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.929148][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.949233][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.963916][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.971316][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.001662][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.008891][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.041172][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.048394][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.092226][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.109881][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.139490][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.146666][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.181382][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.188613][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.288258][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.350966][ T5827] Bluetooth: hci0: command tx timeout [ 101.408264][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.427472][ T5827] Bluetooth: hci3: command tx timeout [ 101.433047][ T5827] Bluetooth: hci1: command tx timeout [ 101.444834][ T5145] Bluetooth: hci2: command tx timeout [ 101.458683][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.465877][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.521490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.528724][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.623301][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.703183][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.853880][ T5833] veth0_vlan: entered promiscuous mode [ 101.891695][ T5833] veth1_vlan: entered promiscuous mode [ 101.959040][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.993411][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.043953][ T5833] veth0_macvtap: entered promiscuous mode [ 102.064775][ T5833] veth1_macvtap: entered promiscuous mode [ 102.129550][ T5830] veth0_vlan: entered promiscuous mode [ 102.150933][ T5825] veth0_vlan: entered promiscuous mode [ 102.162784][ T5830] veth1_vlan: entered promiscuous mode [ 102.175411][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.197061][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.210215][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.225522][ T5825] veth1_vlan: entered promiscuous mode [ 102.244254][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.254418][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.264717][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.281255][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.373087][ T5830] veth0_macvtap: entered promiscuous mode [ 102.416904][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.431897][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.446018][ T5830] veth1_macvtap: entered promiscuous mode [ 102.484861][ T5825] veth0_macvtap: entered promiscuous mode [ 102.505832][ T5832] veth0_vlan: entered promiscuous mode [ 102.524940][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.535456][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.543537][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.561051][ T5825] veth1_macvtap: entered promiscuous mode [ 102.590144][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.609970][ T5832] veth1_vlan: entered promiscuous mode [ 102.641860][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.656936][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.675513][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.694204][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.704658][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.722685][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.738658][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.806427][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.824107][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.841907][ T5832] veth0_macvtap: entered promiscuous mode [ 102.851233][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.861730][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.887138][ T5832] veth1_macvtap: entered promiscuous mode [ 102.993952][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.024164][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.042120][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.043137][ T5915] netlink: zone id is out of range [ 103.059800][ T5915] netlink: zone id is out of range [ 103.065435][ T5915] netlink: zone id is out of range [ 103.071710][ T5915] netlink: zone id is out of range [ 103.084632][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.092497][ T5915] netlink: zone id is out of range [ 103.100667][ T5915] netlink: zone id is out of range [ 103.105940][ T5915] netlink: zone id is out of range [ 103.111747][ T5915] netlink: zone id is out of range [ 103.119131][ T5915] netlink: zone id is out of range [ 103.124392][ T5915] netlink: zone id is out of range [ 103.175452][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.187011][ T5919] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 103.198747][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.210250][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.229955][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.239031][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.262387][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.322782][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.333194][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.344000][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.353236][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.427879][ T5827] Bluetooth: hci0: command tx timeout [ 103.508892][ T5837] Bluetooth: hci2: command tx timeout [ 103.522232][ T5145] Bluetooth: hci3: command tx timeout [ 103.529563][ T5827] Bluetooth: hci1: command tx timeout [ 103.537796][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.545781][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.719821][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.742403][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.470998][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.517903][ T5827] Bluetooth: hci0: command tx timeout [ 105.587933][ T5827] Bluetooth: hci1: command tx timeout [ 105.592263][ T5145] Bluetooth: hci3: command tx timeout [ 105.593423][ T5827] Bluetooth: hci2: command tx timeout [ 106.147856][ T5969] Zero length message leads to an empty skb [ 106.712832][ T5975] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.840760][ T5966] NFSD: Failed to start, no listeners configured. [ 107.624050][ T5976] FAULT_INJECTION: forcing a failure. [ 107.624050][ T5976] name failslab, interval 1, probability 0, space 0, times 1 [ 107.790309][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 107.790341][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.790362][ T5976] Call Trace: [ 107.790369][ T5976] [ 107.790380][ T5976] dump_stack_lvl+0x100/0x190 [ 107.790425][ T5976] should_fail_ex.cold+0x5/0xa [ 107.790453][ T5976] should_failslab+0xc2/0x120 [ 107.790481][ T5976] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 107.790518][ T5976] ? __kernfs_new_node+0xd2/0x960 [ 107.790560][ T5976] __kernfs_new_node+0xd2/0x960 [ 107.790599][ T5976] ? __pfx___kernfs_new_node+0x10/0x10 [ 107.790641][ T5976] ? find_held_lock+0x2b/0x80 [ 107.790664][ T5976] ? kernfs_root+0xee/0x2a0 [ 107.790697][ T5976] ? kernfs_root+0xee/0x2a0 [ 107.790738][ T5976] kernfs_new_node+0x11b/0x1a0 [ 107.790766][ T5976] __kernfs_create_file+0x53/0x350 [ 107.790798][ T5976] sysfs_add_file_mode_ns+0x207/0x3c0 [ 107.790839][ T5976] sysfs_merge_group+0x194/0x340 [ 107.790876][ T5976] ? __pfx_sysfs_merge_group+0x10/0x10 [ 107.790913][ T5976] ? bus_add_device+0x368/0x6b0 [ 107.790938][ T5976] ? __pfx_bus_add_device+0x10/0x10 [ 107.790959][ T5976] ? __pfx_dev_add_physical_location+0x10/0x10 [ 107.790997][ T5976] dpm_sysfs_add+0x237/0x280 [ 107.791029][ T5976] device_add+0x9ef/0x1950 [ 107.791063][ T5976] ? __pfx_device_add+0x10/0x10 [ 107.791095][ T5976] ? lockdep_init_map_type+0x5c/0x250 [ 107.791128][ T5976] ? __init_waitqueue_head+0xca/0x150 [ 107.791178][ T5976] netdev_register_kobject+0x1a9/0x3d0 [ 107.791212][ T5976] register_netdevice+0x12e0/0x2210 [ 107.791243][ T5976] ? __pfx_register_netdevice+0x10/0x10 [ 107.791277][ T5976] __ip_tunnel_create+0x52b/0x670 [ 107.791304][ T5976] ? __pfx___ip_tunnel_create+0x10/0x10 [ 107.791329][ T5976] ? net_generic+0xea/0x2a0 [ 107.791360][ T5976] ip_tunnel_init_net+0x230/0x780 [ 107.791390][ T5976] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 107.791424][ T5976] ? __kmalloc_noprof+0x320/0x850 [ 107.791465][ T5976] ? __pfx_ipgre_init_net+0x10/0x10 [ 107.791501][ T5976] ops_init+0x1e2/0x5f0 [ 107.791528][ T5976] setup_net+0x118/0x3a0 [ 107.791552][ T5976] ? __pfx_setup_net+0x10/0x10 [ 107.791575][ T5976] ? lockdep_init_map_type+0x5c/0x250 [ 107.791608][ T5976] ? mutex_init_lockep+0x110/0x150 [ 107.791646][ T5976] copy_net_ns+0x46f/0x7c0 [ 107.791676][ T5976] create_new_namespaces+0x3ea/0xac0 [ 107.791708][ T5976] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 107.791737][ T5976] ksys_unshare+0x473/0xad0 [ 107.791770][ T5976] ? __pfx_ksys_unshare+0x10/0x10 [ 107.791811][ T5976] __x64_sys_unshare+0x31/0x40 [ 107.791842][ T5976] do_syscall_64+0x106/0xf80 [ 107.791866][ T5976] ? clear_bhb_loop+0x40/0x90 [ 107.791895][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.791919][ T5976] RIP: 0033:0x7fa030b9c819 [ 107.791944][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.791966][ T5976] RSP: 002b:00007fa0319f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.791988][ T5976] RAX: ffffffffffffffda RBX: 00007fa030e15fa0 RCX: 00007fa030b9c819 [ 107.792003][ T5976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 107.792018][ T5976] RBP: 00007fa030c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 107.792031][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.792045][ T5976] R13: 00007fa030e16038 R14: 00007fa030e15fa0 R15: 00007ffd8ea0bbd8 [ 107.792075][ T5976] [ 108.519819][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.723483][ T5827] block nbd0: Receive control failed (result -32) [ 110.161298][ T6007] FAULT_INJECTION: forcing a failure. [ 110.161298][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 110.204821][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) [ 110.204866][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.204886][ T6007] Call Trace: [ 110.204897][ T6007] [ 110.204909][ T6007] dump_stack_lvl+0x100/0x190 [ 110.204970][ T6007] should_fail_ex.cold+0x5/0xa [ 110.205012][ T6007] ? __alloc_empty_sheaf+0x35/0x50 [ 110.205067][ T6007] should_failslab+0xc2/0x120 [ 110.205115][ T6007] __kmalloc_noprof+0xe0/0x850 [ 110.205173][ T6007] ? __pcs_replace_empty_main+0x134/0x660 [ 110.205228][ T6007] ? __pcs_replace_empty_main+0x134/0x660 [ 110.205290][ T6007] __alloc_empty_sheaf+0x35/0x50 [ 110.205338][ T6007] __pcs_replace_empty_main+0x40a/0x660 [ 110.205401][ T6007] kmem_cache_alloc_noprof+0x480/0x6e0 [ 110.205456][ T6007] ? sk_prot_alloc+0x60/0x2a0 [ 110.205505][ T6007] sk_prot_alloc+0x60/0x2a0 [ 110.205550][ T6007] sk_alloc+0x36/0xe80 [ 110.205605][ T6007] inet_create+0x3a0/0x1060 [ 110.205652][ T6007] ? inet_create+0x94/0x1060 [ 110.205705][ T6007] __sock_create+0x339/0x860 [ 110.205766][ T6007] __sys_socket+0x14d/0x260 [ 110.205814][ T6007] ? __pfx___sys_socket+0x10/0x10 [ 110.205873][ T6007] __x64_sys_socket+0x72/0xb0 [ 110.205919][ T6007] ? lockdep_hardirqs_on+0x78/0x100 [ 110.205957][ T6007] do_syscall_64+0x106/0xf80 [ 110.205994][ T6007] ? clear_bhb_loop+0x40/0x90 [ 110.206037][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.206073][ T6007] RIP: 0033:0x7fa030b9c819 [ 110.206101][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.206134][ T6007] RSP: 002b:00007fa0319f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.206166][ T6007] RAX: ffffffffffffffda RBX: 00007fa030e15fa0 RCX: 00007fa030b9c819 [ 110.206188][ T6007] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 110.206208][ T6007] RBP: 00007fa030c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 110.206229][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.206249][ T6007] R13: 00007fa030e16038 R14: 00007fa030e15fa0 R15: 00007ffd8ea0bbd8 [ 110.206302][ T6007] [ 110.973725][ T6020] FAULT_INJECTION: forcing a failure. [ 110.973725][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 111.022328][ T6020] CPU: 1 UID: 0 PID: 6020 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 111.022366][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.022383][ T6020] Call Trace: [ 111.022393][ T6020] [ 111.022404][ T6020] dump_stack_lvl+0x100/0x190 [ 111.022462][ T6020] should_fail_ex.cold+0x5/0xa [ 111.022502][ T6020] should_failslab+0xc2/0x120 [ 111.022541][ T6020] __kmalloc_node_noprof+0xe6/0x850 [ 111.022593][ T6020] ? alloc_slab_obj_exts+0xae/0x260 [ 111.022649][ T6020] alloc_slab_obj_exts+0xae/0x260 [ 111.022703][ T6020] __memcg_slab_post_alloc_hook+0x246/0x990 [ 111.022755][ T6020] ? kasan_save_track+0x14/0x30 [ 111.022795][ T6020] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 111.022847][ T6020] ? do_epoll_ctl+0x2434/0x36a0 [ 111.022893][ T6020] do_epoll_ctl+0x2434/0x36a0 [ 111.022964][ T6020] ? __pfx_do_epoll_ctl+0x10/0x10 [ 111.023002][ T6020] ? find_held_lock+0x2b/0x80 [ 111.023036][ T6020] ? __might_fault+0xc5/0x140 [ 111.023088][ T6020] ? __might_fault+0xc5/0x140 [ 111.023154][ T6020] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 111.023192][ T6020] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 111.023234][ T6020] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 111.023287][ T6020] do_syscall_64+0x106/0xf80 [ 111.023324][ T6020] ? clear_bhb_loop+0x40/0x90 [ 111.023366][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.023402][ T6020] RIP: 0033:0x7f0c1259c819 [ 111.023431][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.023486][ T6020] RSP: 002b:00007f0c107cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 111.023519][ T6020] RAX: ffffffffffffffda RBX: 00007f0c12816090 RCX: 00007f0c1259c819 [ 111.023540][ T6020] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 111.023559][ T6020] RBP: 00007f0c12632c91 R08: 0000000000000000 R09: 0000000000000000 [ 111.023578][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.023598][ T6020] R13: 00007f0c12816128 R14: 00007f0c12816090 R15: 00007ffe0dded498 [ 111.023642][ T6020] [ 111.030118][ T6020] netlink: 4132 bytes leftover after parsing attributes in process `syz.2.22'. [ 111.266111][ T6022] FAULT_INJECTION: forcing a failure. [ 111.266111][ T6022] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.282334][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT(full) [ 111.282374][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.282394][ T6022] Call Trace: [ 111.282405][ T6022] [ 111.282417][ T6022] dump_stack_lvl+0x100/0x190 [ 111.282475][ T6022] should_fail_ex.cold+0x5/0xa [ 111.282515][ T6022] get_futex_key+0x1d2/0x1620 [ 111.282561][ T6022] ? __pfx_get_futex_key+0x10/0x10 [ 111.282620][ T6022] futex_wait_setup+0x83/0x510 [ 111.282685][ T6022] __futex_wait+0x19f/0x300 [ 111.282753][ T6022] ? __pfx___futex_wait+0x10/0x10 [ 111.282804][ T6022] ? fixup_exception+0x119/0xff0 [ 111.282848][ T6022] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.282909][ T6022] ? futex_hash+0x2c5/0x380 [ 111.282962][ T6022] futex_wait+0xed/0x380 [ 111.283018][ T6022] ? __pfx_futex_wait+0x10/0x10 [ 111.283091][ T6022] do_futex+0x1ef/0x350 [ 111.283135][ T6022] ? __pfx_do_futex+0x10/0x10 [ 111.283187][ T6022] ? __do_sys_statmount+0xb65/0x2490 [ 111.283227][ T6022] __x64_sys_futex+0x34f/0x4d0 [ 111.283282][ T6022] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.283346][ T6022] do_syscall_64+0x106/0xf80 [ 111.283381][ T6022] ? clear_bhb_loop+0x40/0x90 [ 111.283421][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.283455][ T6022] RIP: 0033:0x7fa030b9c819 [ 111.283480][ T6022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.283510][ T6022] RSP: 002b:00007fa0319f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.283539][ T6022] RAX: ffffffffffffffda RBX: 00007fa030e15fa8 RCX: 00007fa030b9c819 [ 111.283560][ T6022] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa030e15fa8 [ 111.283579][ T6022] RBP: 00007fa030e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.283598][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.283616][ T6022] R13: 00007fa030e16038 R14: 00007ffd8ea0baf0 R15: 00007ffd8ea0bbd8 [ 111.283658][ T6022] [ 112.258020][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 112.267118][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.343582][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.842043][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 113.003687][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.057803][ T6046] zram: Removed device: zram0 [ 113.378146][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.384631][ T6072] net_ratelimit: 4 callbacks suppressed [ 114.384662][ T6072] netlink: zone id is out of range [ 114.455653][ T6072] netlink: zone id is out of range [ 114.468627][ T6072] netlink: zone id is out of range [ 114.548150][ T6072] netlink: zone id is out of range [ 114.557257][ T6072] netlink: zone id is out of range [ 114.566326][ T6072] netlink: zone id is out of range [ 114.576397][ T6072] netlink: zone id is out of range [ 114.672950][ T6072] netlink: zone id is out of range [ 114.681248][ T6072] netlink: zone id is out of range [ 114.778621][ T6072] netlink: zone id is out of range [ 115.999085][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.231691][ T6106] input: jJǸ-9%vJ86 as /devices/virtual/input/input5 [ 119.799153][ T6174] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.808249][ T6195] mmap: syz.1.59 (6195) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.966146][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 122.409924][ T6228] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.767346][ T6230] syz.3.71: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.813178][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 122.813213][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.813228][ T6230] Call Trace: [ 122.813238][ T6230] [ 122.813247][ T6230] dump_stack_lvl+0x100/0x190 [ 122.813316][ T6230] warn_alloc.cold+0x95/0x1c1 [ 122.813361][ T6230] ? __pfx_warn_alloc+0x10/0x10 [ 122.813406][ T6230] ? __lock_acquire+0x4a5/0x2630 [ 122.813458][ T6230] __vmalloc_node_range_noprof+0x1252/0x1530 [ 122.813498][ T6230] ? rcu_is_watching+0x12/0xc0 [ 122.813539][ T6230] ? trace_contention_end+0x140/0x180 [ 122.813578][ T6230] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 122.813612][ T6230] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 122.813642][ T6230] ? tomoyo_path_number_perm+0x28f/0x580 [ 122.813675][ T6230] ? tomoyo_path_number_perm+0x28f/0x580 [ 122.813710][ T6230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.813745][ T6230] ? __pfx___mutex_lock+0x10/0x10 [ 122.813781][ T6230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.813813][ T6230] ? futex_wake+0x1ad/0x530 [ 122.813868][ T6230] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 122.813897][ T6230] __vmalloc_node_noprof+0xad/0xf0 [ 122.813932][ T6230] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 122.813966][ T6230] dvb_dvr_do_ioctl+0x15d/0x270 [ 122.814003][ T6230] dvb_usercopy+0x167/0x340 [ 122.814031][ T6230] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 122.814064][ T6230] ? __pfx_dvb_usercopy+0x10/0x10 [ 122.814108][ T6230] ? __fget_files+0x21f/0x3d0 [ 122.814141][ T6230] dvb_dvr_ioctl+0x29/0x40 [ 122.814169][ T6230] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 122.814200][ T6230] __x64_sys_ioctl+0x18e/0x210 [ 122.814243][ T6230] do_syscall_64+0x106/0xf80 [ 122.814270][ T6230] ? clear_bhb_loop+0x40/0x90 [ 122.814301][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.814328][ T6230] RIP: 0033:0x7f5f3139c819 [ 122.814353][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.814377][ T6230] RSP: 002b:00007f5f322a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.814401][ T6230] RAX: ffffffffffffffda RBX: 00007f5f31616090 RCX: 00007f5f3139c819 [ 122.814418][ T6230] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000002 [ 122.814433][ T6230] RBP: 00007f5f31432c91 R08: 0000000000000000 R09: 0000000000000000 [ 122.814448][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.814463][ T6230] R13: 00007f5f31616128 R14: 00007f5f31616090 R15: 00007fffa647f818 [ 122.814504][ T6230] [ 122.814520][ T6230] Mem-Info: [ 123.300603][ T6230] active_anon:7323 inactive_anon:0 isolated_anon:550 [ 123.300603][ T6230] active_file:4636 inactive_file:40512 isolated_file:0 [ 123.300603][ T6230] unevictable:768 dirty:265 writeback:0 [ 123.300603][ T6230] slab_reclaimable:10612 slab_unreclaimable:90542 [ 123.300603][ T6230] mapped:27046 shmem:1361 pagetables:1100 [ 123.300603][ T6230] sec_pagetables:0 bounce:0 [ 123.300603][ T6230] kernel_misc_reclaimable:0 [ 123.300603][ T6230] free:1320254 free_pcp:14995 free_cma:0 [ 123.452181][ T6230] Node 0 active_anon:29192kB inactive_anon:0kB active_file:18468kB inactive_file:161844kB unevictable:1536kB isolated(anon):800kB isolated(file):0kB mapped:110212kB dirty:1056kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11584kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.534359][ T6230] Node 1 active_anon:1500kB inactive_anon:0kB active_file:76kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.577098][ T6230] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.611864][ T6230] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 123.643816][ T6230] Node 0 DMA32 free:1328812kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29192kB inactive_anon:0kB active_file:18468kB inactive_file:161844kB unevictable:1536kB writepending:1056kB zspages:0kB present:3129332kB managed:2537256kB mlocked:0kB bounce:0kB free_pcp:62312kB local_pcp:36372kB free_cma:0kB [ 123.757248][ T6230] lowmem_reserve[]: 0 0 1 1 1 [ 123.787743][ T6230] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 123.889143][ T6230] lowmem_reserve[]: 0 0 0 0 0 [ 123.893984][ T6230] Node 1 Normal free:3936844kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:200kB inactive_anon:0kB active_file:76kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10732kB local_pcp:548kB free_cma:0kB [ 123.989148][ T6230] lowmem_reserve[]: 0 0 0 0 0 [ 123.997488][ T6230] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.033927][ T6230] Node 0 DMA32: 2402*4kB (UME) 1331*8kB (UME) 178*16kB (UME) 120*32kB (UME) 60*64kB (UME) 56*128kB (UME) 43*256kB (UME) 25*512kB (UME) 15*1024kB (UM) 4*2048kB (UM) 314*4096kB (M) = 1371456kB [ 124.112906][ T6230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.186587][ T6230] Node 1 Normal: 6*4kB (U) 5*8kB (UM) 6*16kB (U) 5*32kB (U) 3*64kB (UM) 1*128kB (U) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 960*4096kB (M) = 3936896kB [ 124.224381][ T6214] kexec: Could not allocate control_code_buffer [ 124.231164][ T6230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.257342][ T6230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.291450][ T6230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.327258][ T6230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.336929][ T6230] 46505 total pagecache pages [ 124.352015][ T6230] 0 pages in swap cache [ 124.356268][ T6230] Free swap = 124996kB [ 124.373586][ T6230] Total swap = 124996kB [ 124.386715][ T6230] 2097051 pages RAM [ 124.391494][ T6230] 0 pages HighMem/MovableOnly [ 124.396960][ T6230] 430859 pages reserved [ 124.402495][ T6230] 0 pages cma reserved [ 124.411961][ T6253] FAULT_INJECTION: forcing a failure. [ 124.411961][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 124.425171][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 124.425201][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.425215][ T6253] Call Trace: [ 124.425222][ T6253] [ 124.425230][ T6253] dump_stack_lvl+0x100/0x190 [ 124.425271][ T6253] should_fail_ex.cold+0x5/0xa [ 124.425299][ T6253] should_failslab+0xc2/0x120 [ 124.425325][ T6253] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 124.425363][ T6253] ? skb_clone+0x190/0x400 [ 124.425390][ T6253] skb_clone+0x190/0x400 [ 124.425414][ T6253] netlink_deliver_tap+0xaed/0xcc0 [ 124.425444][ T6253] netlink_unicast+0x650/0x870 [ 124.425474][ T6253] ? __pfx_netlink_unicast+0x10/0x10 [ 124.425511][ T6253] netlink_sendmsg+0x8b0/0xda0 [ 124.425541][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.425571][ T6253] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 124.425601][ T6253] sock_write_iter+0x524/0x5a0 [ 124.425629][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.425655][ T6253] ? __pfx_sock_write_iter+0x10/0x10 [ 124.425694][ T6253] ? bpf_lsm_file_permission+0x9/0x10 [ 124.425724][ T6253] ? security_file_permission+0x76/0x210 [ 124.425758][ T6253] ? rw_verify_area+0xce/0x6d0 [ 124.425796][ T6253] vfs_write+0x6ac/0x1070 [ 124.425820][ T6253] ? __pfx_sock_write_iter+0x10/0x10 [ 124.425852][ T6253] ? __pfx_vfs_write+0x10/0x10 [ 124.425873][ T6253] ? find_held_lock+0x2b/0x80 [ 124.425914][ T6253] ksys_write+0x1f8/0x250 [ 124.425937][ T6253] ? __pfx_ksys_write+0x10/0x10 [ 124.425970][ T6253] do_syscall_64+0x106/0xf80 [ 124.425995][ T6253] ? clear_bhb_loop+0x40/0x90 [ 124.426023][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.426047][ T6253] RIP: 0033:0x7f0c1259c819 [ 124.426066][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.426088][ T6253] RSP: 002b:00007f0c107ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.426109][ T6253] RAX: ffffffffffffffda RBX: 00007f0c12815fa0 RCX: 00007f0c1259c819 [ 124.426125][ T6253] RDX: 0000000000000101 RSI: 00002000000002c0 RDI: 0000000000000003 [ 124.426138][ T6253] RBP: 00007f0c12632c91 R08: 0000000000000000 R09: 0000000000000000 [ 124.426152][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.426165][ T6253] R13: 00007f0c12816038 R14: 00007f0c12815fa0 R15: 00007ffe0dded498 [ 124.426195][ T6253] [ 126.078852][ T5827] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 126.510920][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 126.681559][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.799586][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.104956][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 128.150340][ T6322] FAULT_INJECTION: forcing a failure. [ 128.150340][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 128.219484][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 128.219525][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.219544][ T6322] Call Trace: [ 128.219554][ T6322] [ 128.219566][ T6322] dump_stack_lvl+0x100/0x190 [ 128.219622][ T6322] should_fail_ex.cold+0x5/0xa [ 128.219663][ T6322] should_failslab+0xc2/0x120 [ 128.219709][ T6322] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 128.219764][ T6322] ? alloc_inode+0x183/0x250 [ 128.219810][ T6322] ? find_inode_fast+0x1fa/0x910 [ 128.219863][ T6322] alloc_inode+0x183/0x250 [ 128.219910][ T6322] iget_locked+0x1d9/0x6d0 [ 128.219959][ T6322] ? __pfx_iget_locked+0x10/0x10 [ 128.220003][ T6322] ? kernfs_root+0xee/0x2a0 [ 128.220052][ T6322] ? kernfs_root+0xee/0x2a0 [ 128.220110][ T6322] kernfs_get_inode+0x46/0x470 [ 128.220161][ T6322] kernfs_iop_lookup+0x1a7/0x2d0 [ 128.220218][ T6322] __lookup_slow+0x251/0x460 [ 128.220265][ T6322] ? __pfx___lookup_slow+0x10/0x10 [ 128.220333][ T6322] ? __d_lookup+0x266/0x4a0 [ 128.220393][ T6322] lookup_slow+0x50/0x70 [ 128.220441][ T6322] link_path_walk+0x1377/0x1cc0 [ 128.220510][ T6322] path_openat+0x1be/0x31a0 [ 128.220545][ T6322] ? kasan_save_stack+0x3f/0x50 [ 128.220574][ T6322] ? kasan_save_stack+0x30/0x50 [ 128.220603][ T6322] ? kasan_save_track+0x14/0x30 [ 128.220634][ T6322] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 128.220706][ T6322] ? __pfx_path_openat+0x10/0x10 [ 128.220760][ T6322] do_file_open+0x20e/0x430 [ 128.220801][ T6322] ? __pfx_do_file_open+0x10/0x10 [ 128.220869][ T6322] ? alloc_fd+0x476/0x790 [ 128.220909][ T6322] ? do_getname+0x191/0x390 [ 128.220958][ T6322] do_sys_openat2+0x10d/0x1e0 [ 128.221006][ T6322] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.221069][ T6322] __x64_sys_openat+0x12d/0x210 [ 128.221119][ T6322] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.221184][ T6322] do_syscall_64+0x106/0xf80 [ 128.221219][ T6322] ? clear_bhb_loop+0x40/0x90 [ 128.221261][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.221295][ T6322] RIP: 0033:0x7f5f3139c819 [ 128.221321][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.221351][ T6322] RSP: 002b:00007f5f322c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.221382][ T6322] RAX: ffffffffffffffda RBX: 00007f5f31615fa0 RCX: 00007f5f3139c819 [ 128.221402][ T6322] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 128.221422][ T6322] RBP: 00007f5f31432c91 R08: 0000000000000000 R09: 0000000000000000 [ 128.221441][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.221460][ T6322] R13: 00007f5f31616038 R14: 00007f5f31615fa0 R15: 00007fffa647f818 [ 128.221504][ T6322] [ 128.601163][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.739576][ T6321] NFSD: Failed to start, no listeners configured. [ 128.819719][ T6318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.894428][ T6340] __vm_enough_memory: pid: 6340, comm: syz.3.88, bytes: 4398046457856 not enough memory for the allocation [ 129.173016][ T6344] futex_wake_op: syz.2.89 tries to shift op by -2048; fix this program [ 129.547757][ T29] audit: type=1800 audit(4294967302.797:2): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.90" name="lu_gp_id" dev="configfs" ino=9976 res=0 errno=0 [ 130.542655][ T6370] syz.1.92(6370): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 130.801851][ T6374] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[6374] [ 132.197362][ T6347] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 133.112432][ T6414] netlink: 25 bytes leftover after parsing attributes in process `syz.1.99'. [ 133.138743][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.145660][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.037129][ T6429] random: crng reseeded on system resumption [ 134.252274][ T6359] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 134.711229][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 136.106293][ T6473] program syz.1.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.158747][ T6473] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.983986][ T6521] syz.0.121 (6521) used greatest stack depth: 19632 bytes left [ 139.206912][ T6532] FAULT_INJECTION: forcing a failure. [ 139.206912][ T6532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 139.242573][ T6530] sp0: Synchronizing with TNC [ 139.283537][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 139.283581][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.283600][ T6532] Call Trace: [ 139.283623][ T6532] [ 139.283635][ T6532] dump_stack_lvl+0x100/0x190 [ 139.283697][ T6532] should_fail_ex.cold+0x5/0xa [ 139.283732][ T6532] ? __kernel_text_address+0xd/0x30 [ 139.283791][ T6532] get_futex_key+0x1d2/0x1620 [ 139.283840][ T6532] ? __pfx_get_futex_key+0x10/0x10 [ 139.283886][ T6532] ? putname+0xb1/0x110 [ 139.283925][ T6532] ? stack_trace_save+0x8e/0xc0 [ 139.283961][ T6532] ? __pfx_stack_trace_save+0x10/0x10 [ 139.284002][ T6532] futex_wait_setup+0x83/0x510 [ 139.284067][ T6532] __futex_wait+0x19f/0x300 [ 139.284122][ T6532] ? __pfx___futex_wait+0x10/0x10 [ 139.284179][ T6532] ? __pfx_futex_wake_mark+0x10/0x10 [ 139.284238][ T6532] ? futex_hash+0x2c5/0x380 [ 139.284293][ T6532] futex_wait+0xed/0x380 [ 139.284349][ T6532] ? __pfx_futex_wait+0x10/0x10 [ 139.284415][ T6532] ? putname+0xb1/0x110 [ 139.284452][ T6532] ? kmem_cache_free+0x124/0x6a0 [ 139.284510][ T6532] do_futex+0x1ef/0x350 [ 139.284561][ T6532] ? __pfx_do_futex+0x10/0x10 [ 139.284614][ T6532] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.284659][ T6532] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 139.284699][ T6532] __x64_sys_futex+0x34f/0x4d0 [ 139.284739][ T6532] ? __x64_sys_openat+0x12d/0x210 [ 139.284778][ T6532] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.284830][ T6532] do_syscall_64+0x106/0xf80 [ 139.284863][ T6532] ? clear_bhb_loop+0x40/0x90 [ 139.284899][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.284927][ T6532] RIP: 0033:0x7fd50b19c819 [ 139.284951][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.284977][ T6532] RSP: 002b:00007fd50c1400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.285008][ T6532] RAX: ffffffffffffffda RBX: 00007fd50b415fa8 RCX: 00007fd50b19c819 [ 139.285029][ T6532] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd50b415fa8 [ 139.285048][ T6532] RBP: 00007fd50b415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 139.285068][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.285086][ T6532] R13: 00007fd50b416038 R14: 00007ffcd4794730 R15: 00007ffcd4794818 [ 139.285125][ T6532] [ 139.887665][ T6552] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[6552] [ 140.161470][ T6565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 140.576542][ T6568] process 'syz.2.130' launched ':,' with NULL argv: empty string added [ 140.637984][ T6568] FAULT_INJECTION: forcing a failure. [ 140.637984][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 140.651052][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 140.651082][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.651097][ T6568] Call Trace: [ 140.651106][ T6568] [ 140.651127][ T6568] dump_stack_lvl+0x100/0x190 [ 140.651169][ T6568] should_fail_ex.cold+0x5/0xa [ 140.651198][ T6568] should_failslab+0xc2/0x120 [ 140.651226][ T6568] __kmalloc_cache_noprof+0x7a/0x6f0 [ 140.651260][ T6568] ? qrtr_tun_open+0x47/0x220 [ 140.651297][ T6568] ? __pfx_qrtr_tun_open+0x10/0x10 [ 140.651332][ T6568] qrtr_tun_open+0x47/0x220 [ 140.651365][ T6568] ? __pfx_qrtr_tun_open+0x10/0x10 [ 140.651413][ T6568] misc_open+0x26d/0x450 [ 140.651446][ T6568] ? __pfx_misc_open+0x10/0x10 [ 140.651477][ T6568] chrdev_open+0x234/0x6a0 [ 140.651505][ T6568] ? __pfx_chrdev_open+0x10/0x10 [ 140.651533][ T6568] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 140.651567][ T6568] do_dentry_open+0x6d8/0x1660 [ 140.651593][ T6568] ? __pfx_chrdev_open+0x10/0x10 [ 140.651626][ T6568] vfs_open+0x82/0x3f0 [ 140.651661][ T6568] path_openat+0x208c/0x31a0 [ 140.651698][ T6568] ? __pfx_path_openat+0x10/0x10 [ 140.651736][ T6568] do_file_open+0x20e/0x430 [ 140.651765][ T6568] ? __pfx_do_file_open+0x10/0x10 [ 140.651819][ T6568] ? alloc_fd+0x476/0x790 [ 140.651848][ T6568] ? do_getname+0x191/0x390 [ 140.651883][ T6568] do_sys_openat2+0x10d/0x1e0 [ 140.651917][ T6568] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.651962][ T6568] __x64_sys_openat+0x12d/0x210 [ 140.651997][ T6568] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.652043][ T6568] do_syscall_64+0x106/0xf80 [ 140.652068][ T6568] ? clear_bhb_loop+0x40/0x90 [ 140.652098][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.652122][ T6568] RIP: 0033:0x7f0c1259c819 [ 140.652143][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.652165][ T6568] RSP: 002b:00007f0c107ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.652188][ T6568] RAX: ffffffffffffffda RBX: 00007f0c12815fa0 RCX: 00007f0c1259c819 [ 140.652204][ T6568] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 140.652219][ T6568] RBP: 00007f0c12632c91 R08: 0000000000000000 R09: 0000000000000000 [ 140.652233][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.652247][ T6568] R13: 00007f0c12816038 R14: 00007f0c12815fa0 R15: 00007ffe0dded498 [ 140.652278][ T6568] [ 141.057051][ T29] audit: type=1800 audit(4294967314.331:3): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.130" name="members" dev="configfs" ino=12540 res=0 errno=0 [ 141.447913][ T6584] Malformed UNC in devname [ 141.447913][ T6584] [ 141.454723][ T6584] CIFS: VFS: Malformed UNC in devname [ 142.023463][ T6600] sctp: [Deprecated]: syz.2.136 (pid 6600) Use of int in max_burst socket option deprecated. [ 142.023463][ T6600] Use struct sctp_assoc_value instead [ 142.787455][ T6618] ptp ptp0: new virtual clock ptp1 [ 142.792894][ T6618] ptp ptp0: guarantee physical clock free running [ 144.130947][ T6652] net_ratelimit: 18 callbacks suppressed [ 144.130973][ T6652] netlink: Setting conntrack mark requires 'commit' flag. [ 145.696315][ T6679] ptp ptp0: max value is 20 [ 145.743612][ T6679] ptp ptp0: new virtual clock ptp2 [ 145.838948][ T6679] ptp ptp0: new virtual clock ptp3 [ 145.884202][ T6679] ptp ptp0: new virtual clock ptp4 [ 145.998872][ T6679] ptp ptp0: new virtual clock ptp5 [ 146.021563][ T6679] ptp ptp0: new virtual clock ptp6 [ 146.047217][ T6679] ptp ptp0: new virtual clock ptp7 [ 146.088259][ T6679] ptp ptp0: guarantee physical clock free running [ 146.993172][ T6704] random: crng reseeded on system resumption [ 148.257216][ T6722] netlink: 334 bytes leftover after parsing attributes in process `syz.1.162'. [ 148.812143][ T6734] : Can't lookup blockdev [ 148.901576][ T6733] netlink: 318 bytes leftover after parsing attributes in process `syz.1.165'. [ 151.531202][ T6800] binder: 6799:6800 ioctl 400c620e 2000000008c0 returned -22 [ 151.605246][ T6796] netlink: zone id is out of range [ 151.618763][ T6796] netlink: zone id is out of range [ 151.651141][ T6796] netlink: zone id is out of range [ 151.673766][ T6796] netlink: zone id is out of range [ 151.678976][ T6796] netlink: zone id is out of range [ 151.731069][ T6796] netlink: zone id is out of range [ 151.736271][ T6796] netlink: zone id is out of range [ 151.791449][ T6796] netlink: zone id is out of range [ 151.796823][ T6796] netlink: zone id is out of range [ 151.802191][ T6796] netlink: zone id is out of range [ 151.905403][ T6805] WARNING! power/level is deprecated; use power/control instead [ 153.120541][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 156.248099][ T6893] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.453465][ T29] audit: type=1800 audit(4294967307.604:4): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.203" name="dummy_udc" dev="gadgetfs" ino=5928 res=0 errno=0 [ 156.816863][ T6893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.943601][ T6909] net_ratelimit: 14 callbacks suppressed [ 156.943631][ T6909] netlink: zone id is out of range [ 156.993112][ T6909] netlink: zone id is out of range [ 157.014249][ T6909] netlink: zone id is out of range [ 157.019424][ T6909] netlink: zone id is out of range [ 157.043990][ T6909] netlink: zone id is out of range [ 157.076758][ T6909] netlink: zone id is out of range [ 157.102539][ T6909] netlink: zone id is out of range [ 157.135929][ T6909] netlink: zone id is out of range [ 157.176644][ T6909] netlink: zone id is out of range [ 157.181872][ T6909] netlink: zone id is out of range [ 157.458096][ T6893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.718840][ T6893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.952264][ T6893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.172848][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 160.774721][ T6984] mkiss: ax0: crc mode is auto. [ 161.670822][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 163.199173][ T7052] ubi5: attaching mtd0 [ 163.203763][ T7052] ubi5 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 163.350741][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 164.424245][ T7083] mkiss: ax0: crc mode is auto. [ 164.525512][ T7083] FAULT_INJECTION: forcing a failure. [ 164.525512][ T7083] name fail_futex, interval 1, probability 0, space 0, times 0 [ 164.544960][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 164.545002][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.545020][ T7083] Call Trace: [ 164.545030][ T7083] [ 164.545041][ T7083] dump_stack_lvl+0x100/0x190 [ 164.545097][ T7083] should_fail_ex.cold+0x5/0xa [ 164.545137][ T7083] get_futex_key+0x107c/0x1620 [ 164.545184][ T7083] ? __pfx_get_futex_key+0x10/0x10 [ 164.545223][ T7083] ? lock_acquire+0x1cf/0x380 [ 164.545281][ T7083] futex_wake+0xea/0x530 [ 164.545337][ T7083] ? __pfx_futex_wake+0x10/0x10 [ 164.545389][ T7083] ? exit_mm_release+0x19/0x30 [ 164.545443][ T7083] do_futex+0x32b/0x350 [ 164.545488][ T7083] ? __pfx_do_futex+0x10/0x10 [ 164.545531][ T7083] ? __might_fault+0xc5/0x140 [ 164.545592][ T7083] mm_release+0x24a/0x2f0 [ 164.545628][ T7083] do_exit+0x704/0x2b60 [ 164.545680][ T7083] ? __pfx_do_exit+0x10/0x10 [ 164.545725][ T7083] ? do_raw_spin_lock+0x128/0x260 [ 164.545782][ T7083] ? find_held_lock+0x2b/0x80 [ 164.545813][ T7083] ? get_signal+0x7e0/0x21e0 [ 164.545851][ T7083] do_group_exit+0xd5/0x2a0 [ 164.545901][ T7083] get_signal+0x1ec7/0x21e0 [ 164.545943][ T7083] ? rcu_read_lock_any_held+0x6a/0xa0 [ 164.545981][ T7083] ? __pfx_get_signal+0x10/0x10 [ 164.546017][ T7083] ? do_futex+0x192/0x350 [ 164.546063][ T7083] arch_do_signal_or_restart+0x91/0x770 [ 164.546110][ T7083] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 164.546164][ T7083] ? __pfx___x64_sys_futex+0x10/0x10 [ 164.546220][ T7083] exit_to_user_mode_loop+0x86/0x4a0 [ 164.546267][ T7083] do_syscall_64+0x668/0xf80 [ 164.546299][ T7083] ? clear_bhb_loop+0x40/0x90 [ 164.546339][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.546372][ T7083] RIP: 0033:0x7f5f3139c819 [ 164.546400][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.546429][ T7083] RSP: 002b:00007f5f322a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 164.546458][ T7083] RAX: fffffffffffffe00 RBX: 00007f5f31616098 RCX: 00007f5f3139c819 [ 164.546478][ T7083] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5f31616098 [ 164.546498][ T7083] RBP: 00007f5f31616090 R08: 0000000000000000 R09: 0000000000000000 [ 164.546517][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.546535][ T7083] R13: 00007f5f31616128 R14: 00007fffa647f730 R15: 00007fffa647f818 [ 164.546578][ T7083] [ 166.433856][ T7116] net_ratelimit: 15 callbacks suppressed [ 166.433885][ T7116] netlink: zone id is out of range [ 166.445187][ T7116] netlink: zone id is out of range [ 166.458910][ T7116] netlink: zone id is out of range [ 166.468630][ T7116] netlink: zone id is out of range [ 166.473833][ T7116] netlink: zone id is out of range [ 166.526298][ T7116] netlink: zone id is out of range [ 166.564512][ T7116] netlink: zone id is out of range [ 166.632957][ T7116] netlink: zone id is out of range [ 166.646251][ T7115] FAULT_INJECTION: forcing a failure. [ 166.646251][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 166.667293][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.3.249 Not tainted syzkaller #0 PREEMPT(full) [ 166.667326][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.667341][ T7115] Call Trace: [ 166.667348][ T7115] [ 166.667357][ T7115] dump_stack_lvl+0x100/0x190 [ 166.667400][ T7115] should_fail_ex.cold+0x5/0xa [ 166.667429][ T7115] should_failslab+0xc2/0x120 [ 166.667457][ T7115] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 166.667496][ T7115] ? security_inode_alloc+0x3b/0x2c0 [ 166.667524][ T7115] ? lockdep_init_map_type+0x5c/0x250 [ 166.667562][ T7115] security_inode_alloc+0x3b/0x2c0 [ 166.667591][ T7115] inode_init_always_gfp+0xced/0x1040 [ 166.667625][ T7115] alloc_inode+0x8e/0x250 [ 166.667659][ T7115] new_inode+0x22/0x1c0 [ 166.667695][ T7115] shmem_get_inode+0x212/0x1040 [ 166.667733][ T7115] ? __pfx_shmem_get_inode+0x10/0x10 [ 166.667765][ T7115] ? rcu_is_watching+0x12/0xc0 [ 166.667803][ T7115] ? percpu_counter_add_batch+0xb9/0x230 [ 166.667849][ T7115] __shmem_file_setup+0x3ac/0x490 [ 166.667885][ T7115] ? __pfx___shmem_file_setup+0x10/0x10 [ 166.667925][ T7115] ? vm_area_alloc+0x1f/0x160 [ 166.667963][ T7115] shmem_zero_setup+0x96/0x1b0 [ 166.667989][ T7115] __mmap_region+0x21f6/0x2a50 [ 166.668032][ T7115] ? __pfx___mmap_region+0x10/0x10 [ 166.668117][ T7115] ? lockdep_hardirqs_on+0x78/0x100 [ 166.668144][ T7115] ? finish_task_switch.isra.0+0x205/0xb80 [ 166.668173][ T7115] ? rcu_is_watching+0x12/0xc0 [ 166.668302][ T7115] ? rcu_is_watching+0x12/0xc0 [ 166.668360][ T7115] ? cap_capable+0x107/0x460 [ 166.668401][ T7115] mmap_region+0x180/0x3e0 [ 166.668464][ T7115] do_mmap+0xc63/0x12f0 [ 166.668512][ T7115] ? __pfx_do_mmap+0x10/0x10 [ 166.668555][ T7115] ? __pfx_down_write_killable+0x10/0x10 [ 166.668609][ T7115] vm_mmap_pgoff+0x29e/0x470 [ 166.668660][ T7115] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 166.668705][ T7115] ? do_futex+0x192/0x350 [ 166.668753][ T7115] ? __pfx_do_futex+0x10/0x10 [ 166.668801][ T7115] ? fd_install+0x223/0x580 [ 166.668841][ T7115] ksys_mmap_pgoff+0xe1/0x650 [ 166.668888][ T7115] ? __x64_sys_futex+0x34f/0x4d0 [ 166.668934][ T7115] ? __x64_sys_futex+0x358/0x4d0 [ 166.668984][ T7115] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 166.669024][ T7115] ? xfd_validate_state+0x129/0x190 [ 166.669084][ T7115] __x64_sys_mmap+0x125/0x190 [ 166.669144][ T7115] do_syscall_64+0x106/0xf80 [ 166.669180][ T7115] ? clear_bhb_loop+0x40/0x90 [ 166.669223][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.669259][ T7115] RIP: 0033:0x7f5f3139c819 [ 166.669286][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.669318][ T7115] RSP: 002b:00007f5f322c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 166.669350][ T7115] RAX: ffffffffffffffda RBX: 00007f5f31615fa0 RCX: 00007f5f3139c819 [ 166.669372][ T7115] RDX: 00000000000000df RSI: 0000000000010005 RDI: 0000000000000000 [ 166.669392][ T7115] RBP: 00007f5f31432c91 R08: 00040000000000a5 R09: 0000000000008000 [ 166.669414][ T7115] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 166.669433][ T7115] R13: 00007f5f31616038 R14: 00007f5f31615fa0 R15: 00007fffa647f818 [ 166.669491][ T7115] [ 166.985188][ T7116] netlink: zone id is out of range [ 166.990957][ T7116] netlink: zone id is out of range [ 167.594546][ T7132] netlink: 'syz.3.252': attribute type 4 has an invalid length. [ 167.772365][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'. [ 170.166480][ T7185] ACPI: button: Initial lid state set to 'ignore' [ 170.275832][ T7177] FAULT_INJECTION: forcing a failure. [ 170.275832][ T7177] name fail_futex, interval 1, probability 0, space 0, times 0 [ 170.330709][ T7177] CPU: 0 UID: 0 PID: 7177 Comm: syz.3.260 Not tainted syzkaller #0 PREEMPT(full) [ 170.330752][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.330771][ T7177] Call Trace: [ 170.330781][ T7177] [ 170.330793][ T7177] dump_stack_lvl+0x100/0x190 [ 170.330850][ T7177] should_fail_ex.cold+0x5/0xa [ 170.330884][ T7177] ? rcu_is_watching+0x12/0xc0 [ 170.330940][ T7177] get_futex_key+0x107c/0x1620 [ 170.330987][ T7177] ? __pfx_get_futex_key+0x10/0x10 [ 170.331024][ T7177] ? lock_acquire+0x1cf/0x380 [ 170.331080][ T7177] futex_wake+0xea/0x530 [ 170.331141][ T7177] ? __pfx_futex_wake+0x10/0x10 [ 170.331179][ T7177] ? exit_mm_release+0x19/0x30 [ 170.331216][ T7177] do_futex+0x32b/0x350 [ 170.331248][ T7177] ? __pfx_do_futex+0x10/0x10 [ 170.331277][ T7177] ? __might_fault+0xc5/0x140 [ 170.331346][ T7177] mm_release+0x24a/0x2f0 [ 170.331382][ T7177] do_exit+0x704/0x2b60 [ 170.331439][ T7177] ? __pfx_do_exit+0x10/0x10 [ 170.331471][ T7177] ? do_raw_spin_lock+0x128/0x260 [ 170.331506][ T7177] ? find_held_lock+0x2b/0x80 [ 170.331528][ T7177] ? get_signal+0x7e0/0x21e0 [ 170.331556][ T7177] do_group_exit+0xd5/0x2a0 [ 170.331590][ T7177] get_signal+0x1ec7/0x21e0 [ 170.331632][ T7177] ? __pfx_get_signal+0x10/0x10 [ 170.331659][ T7177] ? do_futex+0x192/0x350 [ 170.331698][ T7177] arch_do_signal_or_restart+0x91/0x770 [ 170.331730][ T7177] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.331768][ T7177] ? __pfx___x64_sys_futex+0x10/0x10 [ 170.331807][ T7177] exit_to_user_mode_loop+0x86/0x4a0 [ 170.331842][ T7177] do_syscall_64+0x668/0xf80 [ 170.331867][ T7177] ? clear_bhb_loop+0x40/0x90 [ 170.331896][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.331919][ T7177] RIP: 0033:0x7f5f3139c819 [ 170.331939][ T7177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.331960][ T7177] RSP: 002b:00007f5f321fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.331982][ T7177] RAX: fffffffffffffe00 RBX: 00007f5f31616548 RCX: 00007f5f3139c819 [ 170.331997][ T7177] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5f31616548 [ 170.332011][ T7177] RBP: 00007f5f31616540 R08: 0000000000000000 R09: 0000000000000000 [ 170.332024][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.332038][ T7177] R13: 00007f5f316165d8 R14: 00007fffa647f730 R15: 00007fffa647f818 [ 170.332067][ T7177] [ 171.829386][ T7205] sg_write: data in/out 13788/90 bytes for SCSI command 0x0-- guessing data in; [ 171.829386][ T7205] program syz.1.267 not setting count and/or reply_len properly [ 174.429077][ T7250] capability: warning: `syz.2.275' uses deprecated v2 capabilities in a way that may be insecure [ 174.475466][ T7250] syz.2.275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.767423][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 176.903051][ T7259] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 178.500979][ T7263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 180.635646][ T7302] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 182.371576][ T7328] net_ratelimit: 16 callbacks suppressed [ 182.371596][ T7328] netlink: zone id is out of range [ 182.515591][ T7328] netlink: zone id is out of range [ 182.525641][ T7328] netlink: zone id is out of range [ 182.536578][ T7328] netlink: zone id is out of range [ 182.556455][ T7328] netlink: zone id is out of range [ 182.581931][ T7328] netlink: zone id is out of range [ 182.622756][ T7328] netlink: zone id is out of range [ 182.637102][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 182.690223][ T7328] netlink: zone id is out of range [ 182.736309][ T7328] netlink: zone id is out of range [ 182.747826][ T7328] netlink: zone id is out of range [ 186.545348][ T7390] ubi31: attaching mtd0 [ 186.666730][ T7390] ubi31: scanning is finished [ 186.678943][ T7390] ubi31: empty MTD device detected [ 186.712739][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 187.024615][ T7390] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 187.033009][ T7390] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 187.041789][ T7390] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 187.056642][ T7390] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 187.067949][ T7390] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 187.076064][ T7390] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 187.088440][ T7390] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2811490287 [ 187.104009][ T7390] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 187.123302][ T7399] ubi31: background thread "ubi_bgt31d" started, PID 7399 [ 187.339254][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 188.417595][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 188.814975][ T7430] net_ratelimit: 16 callbacks suppressed [ 188.815000][ T7430] netlink: zone id is out of range [ 188.850833][ T7430] netlink: zone id is out of range [ 188.856447][ T7430] netlink: zone id is out of range [ 188.924678][ T7430] netlink: zone id is out of range [ 188.930510][ T7430] netlink: zone id is out of range [ 188.936351][ T7430] netlink: zone id is out of range [ 188.941800][ T7430] netlink: zone id is out of range [ 188.947128][ T7430] netlink: zone id is out of range [ 188.952571][ T7430] netlink: zone id is out of range [ 188.962876][ T7430] netlink: zone id is out of range [ 192.169533][ T7484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.214727][ T7484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.284307][ T7484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.376156][ T7484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.386730][ T7484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.500970][ T7492] netlink: 342 bytes leftover after parsing attributes in process `syz.2.329'. [ 192.555384][ T7484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.626232][ T7484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.662241][ T7484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.685572][ T7484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.720939][ T7484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.730036][ T7484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.774836][ T7484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.116193][ T6359] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.432507][ T6359] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.596933][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606563][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.661600][ T7556] net_ratelimit: 16 callbacks suppressed [ 194.661625][ T7556] netlink: zone id is out of range [ 194.676722][ T6359] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.688172][ T7556] netlink: zone id is out of range [ 194.703112][ T7556] netlink: zone id is out of range [ 194.710245][ T7556] netlink: zone id is out of range [ 194.724022][ T7556] netlink: zone id is out of range [ 194.735551][ T7556] netlink: zone id is out of range [ 194.743049][ T7556] netlink: zone id is out of range [ 194.748312][ T7556] netlink: zone id is out of range [ 194.753722][ T6359] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.760101][ T7556] netlink: zone id is out of range [ 194.765383][ T7556] netlink: zone id is out of range [ 195.415065][ T7565] zswap: compressor not available [ 195.620338][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 196.193894][ T6359] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.516635][ T6359] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.757856][ T6359] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.845714][ T6359] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.696139][ T7628] [U] ^\ [ 198.012988][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'. [ 198.293384][ T6359] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.594401][ T6359] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.835109][ T6359] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.914886][ T6359] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.990744][ T7656] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 201.172225][ T7697] netlink: 21 bytes leftover after parsing attributes in process `syz.2.371'. [ 202.108509][ T29] audit: type=1800 audit(4294967353.251:5): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="dbroot" dev="configfs" ino=18212 res=0 errno=0 [ 202.384526][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 202.437635][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 202.694970][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 202.941781][ T7755] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 202.989455][ T7757] netlink: 330 bytes leftover after parsing attributes in process `syz.1.385'. [ 203.020194][ T7745] FAULT_INJECTION: forcing a failure. [ 203.020194][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 203.057116][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.0.383 Not tainted syzkaller #0 PREEMPT(full) [ 203.057160][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.057181][ T7745] Call Trace: [ 203.057192][ T7745] [ 203.057204][ T7745] dump_stack_lvl+0x100/0x190 [ 203.057264][ T7745] should_fail_ex.cold+0x5/0xa [ 203.057306][ T7745] should_failslab+0xc2/0x120 [ 203.057345][ T7745] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 203.057403][ T7745] ? sock_alloc_inode+0x25/0x1c0 [ 203.057445][ T7745] ? mark_held_locks+0x40/0x70 [ 203.057493][ T7745] ? __pfx_sock_alloc_inode+0x10/0x10 [ 203.057537][ T7745] sock_alloc_inode+0x25/0x1c0 [ 203.057577][ T7745] alloc_inode+0x68/0x250 [ 203.057627][ T7745] sock_alloc+0x44/0x280 [ 203.057662][ T7745] ? security_socket_create+0x7f/0x250 [ 203.057703][ T7745] __sock_create+0xc2/0x860 [ 203.057756][ T7745] inet_ctl_sock_create+0x94/0x230 [ 203.057801][ T7745] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 203.057845][ T7745] ? timer_init_key+0x150/0x340 [ 203.057892][ T7745] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 203.057926][ T7745] sctp_ctrlsock_init+0x40/0xd0 [ 203.057960][ T7745] ops_init+0x1e2/0x5f0 [ 203.058001][ T7745] setup_net+0x118/0x3a0 [ 203.058047][ T7745] ? __pfx_setup_net+0x10/0x10 [ 203.058081][ T7745] ? lockdep_init_map_type+0x5c/0x250 [ 203.058135][ T7745] ? mutex_init_lockep+0x110/0x150 [ 203.058191][ T7745] copy_net_ns+0x46f/0x7c0 [ 203.058236][ T7745] create_new_namespaces+0x3ea/0xac0 [ 203.058284][ T7745] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 203.058328][ T7745] ksys_unshare+0x473/0xad0 [ 203.058376][ T7745] ? __pfx_ksys_unshare+0x10/0x10 [ 203.058436][ T7745] __x64_sys_unshare+0x31/0x40 [ 203.058482][ T7745] do_syscall_64+0x106/0xf80 [ 203.058518][ T7745] ? clear_bhb_loop+0x40/0x90 [ 203.058561][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.058596][ T7745] RIP: 0033:0x7fd50b19c819 [ 203.058623][ T7745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.058655][ T7745] RSP: 002b:00007fd50c140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 203.058686][ T7745] RAX: ffffffffffffffda RBX: 00007fd50b415fa0 RCX: 00007fd50b19c819 [ 203.058709][ T7745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 203.058729][ T7745] RBP: 00007fd50b232c91 R08: 0000000000000000 R09: 0000000000000000 [ 203.058748][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.058768][ T7745] R13: 00007fd50b416038 R14: 00007fd50b415fa0 R15: 00007ffcd4794818 [ 203.058821][ T7745] [ 203.326808][ T7745] net_ratelimit: 3 callbacks suppressed [ 203.326835][ T7745] socket: no more sockets [ 203.747318][ T7767] netlink: 'syz.3.388': attribute type 19 has an invalid length. [ 203.755303][ T7767] netlink: 334 bytes leftover after parsing attributes in process `syz.3.388'. [ 203.952650][ T7751] kexec: Could not allocate control_code_buffer [ 204.447050][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 205.363774][ T29] audit: type=1800 audit(4294967356.500:6): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.394" name="dbroot" dev="configfs" ino=18407 res=0 errno=0 [ 207.252237][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 208.346847][ T7874] openvswitch: netlink: IP tunnel TTL not specified. [ 208.874696][ T7885] ================================================================== [ 208.874723][ T7885] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 208.874799][ T7885] Write of size 8 at addr ffffc900042b9000 by task syz.2.412/7885 [ 208.874826][ T7885] [ 208.874841][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.2.412 Not tainted syzkaller #0 PREEMPT(full) [ 208.874877][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.874896][ T7885] Call Trace: [ 208.874906][ T7885] [ 208.874918][ T7885] dump_stack_lvl+0x100/0x190 [ 208.874968][ T7885] print_report+0x156/0x4c9 [ 208.875014][ T7885] ? _raw_spin_lock_irqsave+0x52/0x60 [ 208.875072][ T7885] ? sys_fillrect+0x174a/0x1910 [ 208.875120][ T7885] kasan_report+0xdf/0x1e0 [ 208.875157][ T7885] ? sys_fillrect+0x174a/0x1910 [ 208.875213][ T7885] sys_fillrect+0x174a/0x1910 [ 208.875272][ T7885] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 208.875313][ T7885] bit_clear+0x17d/0x220 [ 208.875355][ T7885] ? __pfx_bit_clear+0x10/0x10 [ 208.875398][ T7885] ? fb_get_color_depth+0x120/0x250 [ 208.875437][ T7885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.875476][ T7885] __fbcon_clear+0x633/0x760 [ 208.875515][ T7885] ? __pfx_bit_clear+0x10/0x10 [ 208.875553][ T7885] fbcon_scroll+0x48b/0x650 [ 208.875594][ T7885] con_scroll+0x464/0x690 [ 208.875647][ T7885] do_con_write+0x6883/0x8540 [ 208.875690][ T7885] ? __pfx_do_con_write+0x10/0x10 [ 208.875730][ T7885] con_write+0x23/0xb0 [ 208.875760][ T7885] n_tty_write+0x44f/0x12d0 [ 208.875813][ T7885] ? __pfx_n_tty_write+0x10/0x10 [ 208.875851][ T7885] ? trace_kmalloc+0x101/0x130 [ 208.875887][ T7885] ? __pfx_woken_wake_function+0x10/0x10 [ 208.875941][ T7885] ? rcu_is_watching+0x12/0xc0 [ 208.875992][ T7885] ? file_tty_write.isra.0+0x694/0x890 [ 208.876045][ T7885] ? kfree+0x2ec/0x6b0 [ 208.876088][ T7885] ? __pfx_n_tty_write+0x10/0x10 [ 208.876128][ T7885] file_tty_write.isra.0+0x4d2/0x890 [ 208.876187][ T7885] redirected_tty_write+0xd4/0x120 [ 208.876240][ T7885] vfs_write+0x6ac/0x1070 [ 208.876271][ T7885] ? __pfx_redirected_tty_write+0x10/0x10 [ 208.876327][ T7885] ? __pfx_vfs_write+0x10/0x10 [ 208.876357][ T7885] ? find_held_lock+0x2b/0x80 [ 208.876403][ T7885] ksys_write+0x12a/0x250 [ 208.876434][ T7885] ? __pfx_ksys_write+0x10/0x10 [ 208.876472][ T7885] do_syscall_64+0x106/0xf80 [ 208.876506][ T7885] ? clear_bhb_loop+0x40/0x90 [ 208.876544][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.876577][ T7885] RIP: 0033:0x7f0c1259c819 [ 208.876602][ T7885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.876638][ T7885] RSP: 002b:00007f0c107ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.876669][ T7885] RAX: ffffffffffffffda RBX: 00007f0c12815fa0 RCX: 00007f0c1259c819 [ 208.876690][ T7885] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 208.876710][ T7885] RBP: 00007f0c12632c91 R08: 0000000000000000 R09: 0000000000000000 [ 208.876730][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.876748][ T7885] R13: 00007f0c12816038 R14: 00007f0c12815fa0 R15: 00007ffe0dded498 [ 208.876787][ T7885] [ 208.876798][ T7885] [ 208.876806][ T7885] The buggy address belongs to a vmalloc virtual mapping [ 208.876828][ T7885] Memory state around the buggy address: [ 208.876845][ T7885] ffffc900042b8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.876873][ T7885] ffffc900042b8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.876895][ T7885] >ffffc900042b9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.876911][ T7885] ^ [ 208.876926][ T7885] ffffc900042b9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.876948][ T7885] ffffc900042b9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.876964][ T7885] ================================================================== [ 208.877050][ T7885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.877069][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.2.412 Not tainted syzkaller #0 PREEMPT(full) [ 208.877102][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.877119][ T7885] Call Trace: [ 208.877128][ T7885] [ 208.877139][ T7885] dump_stack_lvl+0x100/0x190 [ 208.877183][ T7885] vpanic+0x552/0x970 [ 208.877210][ T7885] ? __pfx_vpanic+0x10/0x10 [ 208.877242][ T7885] ? sys_fillrect+0x174a/0x1910 [ 208.877285][ T7885] panic+0xd1/0xe0 [ 208.877310][ T7885] ? __pfx_panic+0x10/0x10 [ 208.877338][ T7885] ? sys_fillrect+0x174a/0x1910 [ 208.877381][ T7885] ? preempt_schedule_common+0x42/0xc0 [ 208.877411][ T7885] ? check_panic_on_warn+0x1f/0x90 [ 208.877455][ T7885] check_panic_on_warn.cold+0x19/0x34 [ 208.877486][ T7885] end_report.part.0+0x3a/0x90 [ 208.877526][ T7885] kasan_report.cold+0xe/0x18 [ 208.877567][ T7885] ? sys_fillrect+0x174a/0x1910 [ 208.877615][ T7885] sys_fillrect+0x174a/0x1910 [ 208.877666][ T7885] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 208.877701][ T7885] bit_clear+0x17d/0x220 [ 208.877737][ T7885] ? __pfx_bit_clear+0x10/0x10 [ 208.877782][ T7885] ? fb_get_color_depth+0x120/0x250 [ 208.877816][ T7885] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.877850][ T7885] __fbcon_clear+0x633/0x760 [ 208.877883][ T7885] ? __pfx_bit_clear+0x10/0x10 [ 208.877922][ T7885] fbcon_scroll+0x48b/0x650 [ 208.877957][ T7885] con_scroll+0x464/0x690 [ 208.878002][ T7885] do_con_write+0x6883/0x8540 [ 208.878039][ T7885] ? __pfx_do_con_write+0x10/0x10 [ 208.878074][ T7885] con_write+0x23/0xb0 [ 208.878099][ T7885] n_tty_write+0x44f/0x12d0 [ 208.878140][ T7885] ? __pfx_n_tty_write+0x10/0x10 [ 208.878172][ T7885] ? trace_kmalloc+0x101/0x130 [ 208.878203][ T7885] ? __pfx_woken_wake_function+0x10/0x10 [ 208.878249][ T7885] ? rcu_is_watching+0x12/0xc0 [ 208.878293][ T7885] ? file_tty_write.isra.0+0x694/0x890 [ 208.878338][ T7885] ? kfree+0x2ec/0x6b0 [ 208.878375][ T7885] ? __pfx_n_tty_write+0x10/0x10 [ 208.878409][ T7885] file_tty_write.isra.0+0x4d2/0x890 [ 208.878459][ T7885] redirected_tty_write+0xd4/0x120 [ 208.878506][ T7885] vfs_write+0x6ac/0x1070 [ 208.878533][ T7885] ? __pfx_redirected_tty_write+0x10/0x10 [ 208.878581][ T7885] ? __pfx_vfs_write+0x10/0x10 [ 208.878607][ T7885] ? find_held_lock+0x2b/0x80 [ 208.878646][ T7885] ksys_write+0x12a/0x250 [ 208.878672][ T7885] ? __pfx_ksys_write+0x10/0x10 [ 208.878705][ T7885] do_syscall_64+0x106/0xf80 [ 208.878735][ T7885] ? clear_bhb_loop+0x40/0x90 [ 208.878768][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.878803][ T7885] RIP: 0033:0x7f0c1259c819 [ 208.878826][ T7885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.878853][ T7885] RSP: 002b:00007f0c107ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.878880][ T7885] RAX: ffffffffffffffda RBX: 00007f0c12815fa0 RCX: 00007f0c1259c819 [ 208.878899][ T7885] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 208.878917][ T7885] RBP: 00007f0c12632c91 R08: 0000000000000000 R09: 0000000000000000 [ 208.878935][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.878952][ T7885] R13: 00007f0c12816038 R14: 00007f0c12815fa0 R15: 00007ffe0dded498 [ 208.878981][ T7885] [ 208.879570][ T7885] Kernel Offset: disabled