last executing test programs: 24m2.945867004s ago: executing program 3 (id=910): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xd3, r0, 0x6) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) socket(0xa, 0x1, 0x84) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3a, 0x5, 0x4, 0x1, 0x8) (async) prctl$auto(0x3a, 0x5, 0x4, 0x1, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebf, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebf, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000002c0), 0x901, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) unshare$auto(0x40000080) stat$auto(&(0x7f0000000080)='./cgroup\x00', 0x0) (async) stat$auto(&(0x7f0000000080)='./cgroup\x00', 0x0) mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @inferred, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f501076b376c850e3181d7ab078b9c2a74d949545259b5a23079c5ddb423ec48eaac2ce48768e1ea76aa84b74416a50", &(0x7f0000000100)="899f6eff00"}) (async) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @inferred, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f501076b376c850e3181d7ab078b9c2a74d949545259b5a23079c5ddb423ec48eaac2ce48768e1ea76aa84b74416a50", &(0x7f0000000100)="899f6eff00"}) msgctl$auto_IPC_SET(0x7f7, 0x1, &(0x7f0000000240)={{0x1000, 0xee00, 0xee01, 0x8, 0x40, 0x81, 0x786}, &(0x7f00000001c0)=0x54, &(0x7f0000000200)=0x53, 0x100, 0x5, 0xd48b, 0x4056, 0x3, 0xffff, 0x8, 0xff, @raw=0x4}) setregid$auto(r3, r4) (async) setregid$auto(r3, r4) 24m0.286125552s ago: executing program 3 (id=918): r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 24m0.096047071s ago: executing program 3 (id=919): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r1 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto_lockdown_ops_lockdown(r1, &(0x7f0000000080)="a3c72e71ed506a221381f0538fefa465158fbbeb89451043553ff869189cf3250b65c544ccd3988b29f3cdb20660e616d3daa3e36b174c5661e383221287595a7e873202add9b0f11733de4ec2cd9c5b048058ed89c590d73c2e44d11636cb85ea9cb4180c5d1ab11f731cec20c57489baf87d298ef21b138e83a6a13cfdc39ffcf7c18ae6946c0d58c5026cd804c5d2f1a5348a159fe5e6746038217e838e23a24c5cda52d0af4c570a9983422fb706704f8410113a38fc2decb77fbcbca9e8f3dd2b2ccb939869852e91137af1e79ab833c8b104726d0a00", 0xd9) ioctl$auto_TCFLSH2(r0, 0x80045439, 0x0) (async) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r2, 0x40187013, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty15\x00', 0x440000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0x80401, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180)="fae058d001ae624da44b1de43261ec2f4998e7a4cdf75dfce4c6dc44a8f91694c96f184d539f866358819b63be2fea73359a656f928e61e26b61cecc46f57144cac8815e65f86885b924d138e639a6c2c5eb25946e886864a20f1d7e3d5f0aa5f4aa4c9b1ed563f2caa5ff9c91f00a014fa1a7ec252b721efb9a486895c02876868124a248b3b1fb4c39ce573b29678fea3059bba4d5031cbeec04c6d6176aa27ee19f3b0b", 0x7111}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0xa, 0x2, 0x88) r4 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r0, 0x4, @old_prog_fd=r2}, 0xa3) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r7 = socketcall$auto(0x8000, 0x0) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d01, 0x400, 0x3ff}]}) (async) bpf$auto(0x4, &(0x7f0000000040)=@link_update={r4, @new_prog_fd=r5, 0x1}, 0x7) (async) socket(0x2, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) 23m59.712456808s ago: executing program 3 (id=921): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=&(0x7f00000000c0)='+\x9a\\\\\x04/-{\x9c{w\x00', &(0x7f0000000200)=&(0x7f00000001c0)='}/%-#+\x00') writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_FIBMAP(r2, 0x2272, 0x300000000000000) r3 = fcntl$auto_F_UNLCK(r1, 0x5c22, 0x2) mmap$auto_snd_pcm_f_ops_pcm1(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r3, 0x10001) r4 = prctl$auto_SECCOMP_MODE_STRICT(0x7f, 0x1, 0xffffffffffffffff, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0x74, 0xfffffffffffffffb) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r6, r6, 0x0, 0x7fffe000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) 23m58.907282385s ago: executing program 3 (id=924): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x1, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6f248dedd321cd087885ebc6344880", @ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x34040014) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x44001, 0x0) ioctl$auto(r1, 0x540a, 0x0) (async) unshare$auto(0x40000080) unshare$auto(0x6) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0xa, 0x5, 0x84) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) (async) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, 0x0, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) setgroups$auto(0xe32, 0x0) (async) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x404008, 0xe2, 0x9b75, 0x2, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) 23m57.76519096s ago: executing program 3 (id=929): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r0 = socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0xfffffffffffffffc, 0x1, 0x7fc, 0x9b72, r0, 0x1) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000001c0)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, r1, 0x4) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40980, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0) read$auto(r4, &(0x7f0000001200)='\x00', 0x4) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x408081, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) (async) r5 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x210000, 0x0) fcntl$auto_F_GETFL(r5, 0x3, 0xfffffffffffffff3) 23m57.178650709s ago: executing program 32 (id=929): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r0 = socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0xfffffffffffffffc, 0x1, 0x7fc, 0x9b72, r0, 0x1) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000001c0)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, r1, 0x4) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40980, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0) read$auto(r4, &(0x7f0000001200)='\x00', 0x4) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x408081, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) (async) r5 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x210000, 0x0) fcntl$auto_F_GETFL(r5, 0x3, 0xfffffffffffffff3) 5m25.009654931s ago: executing program 4 (id=4334): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x885) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x800000000008005, 0x0, 0xffffffff, 0x3) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x40, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x30202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x11, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) socket(0x6, 0x2, 0x2000c) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x6, 0x5, 0x8000000000000000}, {0x7, 0x4, 0x8}, {0x2, 0x5, 0x7}]}) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) 5m23.945561751s ago: executing program 4 (id=4342): mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x5, 0x4, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0xc, 0x4, 0x200000eb0, 0x401, 0x705cf82a) read$auto(r0, &(0x7f0000000280)='\x00', 0xffffffffffffff01) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4000000002, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffc]}, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x2, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000340)="63e46100000000000000003c2cae6cbe0b1f4c13dc13b0bb94c70829c8a61424f02b520b16b55f0bb9c47da2799dc4a6cc836e0853177e1921f70f163dd2693761c90eb9c4eea0e24fad4d78827b004409eb354ec668c36f996717c25517b594075d1810f596b55976debc715e8280687afbcce0b5069660ea9bc113671ac9", 0x7f) getpid() mmap$auto(0x0, 0x8000000000000001, 0xb, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_cpus\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)="3e1406", 0x3) getsockname$auto(r1, &(0x7f0000000100)=@sco, &(0x7f0000000200)=0xfffffcdc) mmap$auto(0x200000002, 0x3, 0x4, 0x9b3e, r1, 0x28002) r4 = open(&(0x7f0000000140)='./file0\x00', 0x420000, 0x45c) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/xmit_hash_policy\x00', 0x10b062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 5m21.543263615s ago: executing program 4 (id=4351): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x400000000fdeb}, 0x2, 0x0, 0x7, 0x1}, 0x800}, 0x4, 0x1) (async) mmap$auto(0x0, 0x917d, 0xdf, 0x3ff, r0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001740)='/dev/input/event1\x00', 0x2040, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000001780)={0xe, 0xf7, 0xffff, 0xae, "313c6b07cbd969cbeaef72d0ffaa31e3490e8e54257c2c1448e4030c85b43511"}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x2c, 0x0) (async) r2 = fsopen$auto(0x0, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) (async) socket(0x10, 0x2, 0x0) (async) setresuid$auto(0x0, 0x8, 0x0) (async) sendmsg$auto_TIPC_NL_KEY_FLUSH(r2, 0x0, 0x40094) (async) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) bpf$auto(0x3, &(0x7f0000000240)=@query={@target_fd=r0, 0x1, 0xc9, 0xf405, 0xd, @prog_cnt=0x4, 0x0, 0x7ffe, 0x400000000000b, 0x8, 0xcd7d}, 0x5) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) r4 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r4, 0x0, 0x400) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) pwritev2$auto(r5, &(0x7f0000000100)={0x0, 0x7}, 0x200000000d, 0x2, 0x1aa1, 0x8) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x181081, 0x0) 5m21.230921009s ago: executing program 4 (id=4353): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2501, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x4) read$auto(r2, 0x0, 0x1) write$auto(r1, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r1, 0x0, 0x4044850) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x2c00, 0x0) mmap$auto(0x33, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000040)="0acaef70c8f99ab9a7193eff4d7000904c6c302e8c94a53c116758ec69a35912e740507ced495fedb3e0dcfa6c941558f05ed72745ac1e") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop7\x00', 0x14f340, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 5m20.466731532s ago: executing program 4 (id=4358): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103040, 0x0) ppoll$auto(&(0x7f00000001c0)={r0, 0x2c, 0x1000}, 0xb, 0x0, 0x0, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/authorized_default\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003e80)=""/238, 0xee) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4200, 0x4) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x82584, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) ioctl$auto(r3, 0x5, 0x1) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0xc0045540, 0xb551) (async) madvise$auto(0x0, 0x200007, 0x19) 5m19.980254588s ago: executing program 4 (id=4361): mmap$auto(0x0, 0x8, 0xdb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nfnetlink_log\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x7, 0x400000000000000, 0x1e, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)=':#}>\x99(,\xd1\x00', 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x80000000420009, 0xdf, 0xcfbf, 0x401, 0x8000) mmap$auto(0x0, 0x400002, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x420009, 0x5, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = gettid() rt_sigtimedwait$auto(&(0x7f00000000c0)={0x7fffffff}, 0x0, 0x0, 0x8) kill$auto(r2, 0x11) ioctl$auto_FS_IOC_UNRESVSP(r0, 0x40305829, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r3, 0x9210642d, 0xc5) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r4, &(0x7f0000000100)={0x0, 0x407114}, 0x8) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r5 = socketcall$auto_SYS_ACCEPT4(0x12, 0x0) ioctl$auto_TUNSETVNETLE(r5, 0x400454dc, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x39c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x2}, @NL802154_ATTR_SEC_KEY={0x370, 0x30, 0x0, 0x1, [@nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x38}]}, @nested={0x352, 0xb, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0xd, 0xe5, 0x0, 0x0, @str=':#}>\x99(,\xd1\x00'}, @nested={0x4, 0x72}, @nested={0x4, 0x9}, @nested={0x4, 0x10e}, @nested={0x20c, 0xb6, 0x0, 0x1, [@generic="b614cae05dda7659c968e268a3712fa7ae6b4fe83a5cc5fcfd2a7846e2deb49bee4b32adaea40966d6ae3e449263715f22c6cc1ea4467251f5d8f0961d27522ec90a0015b883f6811f76ed1f6cef06bcb5b042b8d2890b53ef261551f9c5db8651fec7ee3cae9501ddc619700760ccccbba365d1a9bf639612ae84ef61470ecf0c351695314bbbe2748565e5b0dd95ff5ac9cc92b93250765dded33710f37c9667c176ab341477e3487aa47adc5edac457ecb387ac213f1c006c86d9b5ba6a1a97089f764feb6d568720e7fb25bc84698b81a4b360ba87cb41087503a65d8641f1a8529d7b523a572660b9653768627452f7bfae8d9244ef", @nested={0x108, 0xda, 0x0, 0x1, [@generic="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", @nested={0x4, 0xe8}, @nested={0x4, 0xa3}]}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x50, 0xbd, 0x0, 0x0, @binary="583ca68ce2795125492e7e40e1618aec0bd65b5cc6618409875e7fc6138f32e680d1f2ce9e2e09d31240340edc00ebbb23d91d819d4809b02f0afdc504e947962aa8d461f50f4a7b1126da6e"}, @generic="21c456ad42a43586922f46f683dd8c581d16b4f75df0fb1111376a38d10e2edcfbd5c29bbaf9383520eb1004de7489f35fed58bf77d6bb73b0d229afbe530fafb8dbe3aec195002e2f215ae53f99ad0538eb0d542a2fb4a61136bc51cc82e365b4d4a9251f0ae9c37640c34545f0d17aea355017c8cce9582b5ea39dfc579f176fa1e7e7a95841f30556f0a092fc58d47c83119868ff4ddbf96fff9abf8f2480648a55000cecb29090744b8b61cd1bf820eb792c43a8c9412e3bd6ac7d4b775b532a82f5a51963dbba6905ddcea8", @nested={0x4, 0x47}]}, @typed={0x8, 0x90, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r2}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x5}]}, 0x39c}}, 0xc8) r6 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x6, 0x1, 0x9, 0x7, 0x6, 0x401, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x6, 0x0, 0x80, 0x8, 0x40000, 0x7, 0x2000, 0x204, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x2000001000000001, 0x5, 0x4, 0x0, 0xc000000, 0x0, 0x2, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0xf7fffffffffffffc, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x1, 0x0, 0x0, 0x7, 0xb9]}, 0x202, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000140)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 5m4.448900493s ago: executing program 33 (id=4361): mmap$auto(0x0, 0x8, 0xdb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nfnetlink_log\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x7, 0x400000000000000, 0x1e, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)=':#}>\x99(,\xd1\x00', 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x80000000420009, 0xdf, 0xcfbf, 0x401, 0x8000) mmap$auto(0x0, 0x400002, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x420009, 0x5, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = gettid() rt_sigtimedwait$auto(&(0x7f00000000c0)={0x7fffffff}, 0x0, 0x0, 0x8) kill$auto(r2, 0x11) ioctl$auto_FS_IOC_UNRESVSP(r0, 0x40305829, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r3, 0x9210642d, 0xc5) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r4, &(0x7f0000000100)={0x0, 0x407114}, 0x8) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r5 = socketcall$auto_SYS_ACCEPT4(0x12, 0x0) ioctl$auto_TUNSETVNETLE(r5, 0x400454dc, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x39c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x2}, @NL802154_ATTR_SEC_KEY={0x370, 0x30, 0x0, 0x1, [@nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x38}]}, @nested={0x352, 0xb, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0xd, 0xe5, 0x0, 0x0, @str=':#}>\x99(,\xd1\x00'}, @nested={0x4, 0x72}, @nested={0x4, 0x9}, @nested={0x4, 0x10e}, @nested={0x20c, 0xb6, 0x0, 0x1, [@generic="b614cae05dda7659c968e268a3712fa7ae6b4fe83a5cc5fcfd2a7846e2deb49bee4b32adaea40966d6ae3e449263715f22c6cc1ea4467251f5d8f0961d27522ec90a0015b883f6811f76ed1f6cef06bcb5b042b8d2890b53ef261551f9c5db8651fec7ee3cae9501ddc619700760ccccbba365d1a9bf639612ae84ef61470ecf0c351695314bbbe2748565e5b0dd95ff5ac9cc92b93250765dded33710f37c9667c176ab341477e3487aa47adc5edac457ecb387ac213f1c006c86d9b5ba6a1a97089f764feb6d568720e7fb25bc84698b81a4b360ba87cb41087503a65d8641f1a8529d7b523a572660b9653768627452f7bfae8d9244ef", @nested={0x108, 0xda, 0x0, 0x1, [@generic="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", @nested={0x4, 0xe8}, @nested={0x4, 0xa3}]}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x50, 0xbd, 0x0, 0x0, @binary="583ca68ce2795125492e7e40e1618aec0bd65b5cc6618409875e7fc6138f32e680d1f2ce9e2e09d31240340edc00ebbb23d91d819d4809b02f0afdc504e947962aa8d461f50f4a7b1126da6e"}, @generic="21c456ad42a43586922f46f683dd8c581d16b4f75df0fb1111376a38d10e2edcfbd5c29bbaf9383520eb1004de7489f35fed58bf77d6bb73b0d229afbe530fafb8dbe3aec195002e2f215ae53f99ad0538eb0d542a2fb4a61136bc51cc82e365b4d4a9251f0ae9c37640c34545f0d17aea355017c8cce9582b5ea39dfc579f176fa1e7e7a95841f30556f0a092fc58d47c83119868ff4ddbf96fff9abf8f2480648a55000cecb29090744b8b61cd1bf820eb792c43a8c9412e3bd6ac7d4b775b532a82f5a51963dbba6905ddcea8", @nested={0x4, 0x47}]}, @typed={0x8, 0x90, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r2}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x5}]}, 0x39c}}, 0xc8) r6 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x6, 0x1, 0x9, 0x7, 0x6, 0x401, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x6, 0x0, 0x80, 0x8, 0x40000, 0x7, 0x2000, 0x204, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x2000001000000001, 0x5, 0x4, 0x0, 0xc000000, 0x0, 0x2, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0xf7fffffffffffffc, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x1, 0x0, 0x0, 0x7, 0xb9]}, 0x202, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000140)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 8.930375951s ago: executing program 1 (id=5312): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000000)={@sival_ptr=&(0x7f0000000180)="dbe160a6f410354aa627b77390826ede2f92051b44069b5a21e6319a165f9796475b80c07f09247414533cbcb20582d9c83a28c3ebafe5183aa52d3abcbd93e4a723b37613e322987db780362b59e37e8a25e6d6b7abff3c163f321d46529e55", @raw=0x7, 0x5}, &(0x7f0000000280)=0xffd4) socketpair$auto(0x2, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040810}, 0x8c0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) mmap$auto(0x0, 0x2000c, 0x6, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x7f, &(0x7f0000000340)={[0x7, 0x6, 0x5, 0x6, 0x1, 0x5, 0xf8b, 0x1ff, 0x4000000000000009, 0x1, 0x8, 0x81, 0x2000000000002, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0xecd, 0x7, 0x402, 0x3, 0xa, 0x0, 0x7fffffffffffffff, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x5, 0xfffffffffffffff6, 0x7, 0xfffffffffffe0002, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x800000000020, 0x5, 0x3, 0x200, 0x1, 0x7]}, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x40eb2, 0x401, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) syz_clone(0x81000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0xfb2, 0x948b, 0x100003, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x8, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) 7.840917619s ago: executing program 1 (id=5314): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6b) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x3, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) open(&(0x7f0000000040)='&&\x00', 0x40202, 0x79) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) socket(0x2, 0x80805, 0x0) r2 = eventfd$auto(0x9) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000200)=""/36, 0x24) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000080)=""/117, 0x75) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x2, 0xffffffffffff0005, 0x1b) 7.608783405s ago: executing program 5 (id=5315): ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "df5f19b5a360"}) socket(0x2, 0x6, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6e}, 0x1, 0x0, 0x0, 0x44800}, 0x40080c8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) r1 = fcntl$auto(r0, 0x400, 0x1) r2 = fcntl$auto(0x3, 0x8, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x60280, 0x158) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip_vs_conn_sync\x00', 0x181800, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(r4, 0x405c5504, 0x81) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) read$auto_tk_debug_sleep_time_fops_(r1, &(0x7f0000000140)=""/143, 0x8f) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000200)="c64a6ef48d78d0272fa938c722045e8b2bb69a8d0da33d14bfee8c7a538f1ceb3b5c215a3d2687407a9fff1d06ab84f0df74d6fffa886530bfa3620a") listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf423c, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) bind$auto(0x3, 0x0, 0x6a) 6.694699457s ago: executing program 5 (id=5316): mmap$auto(0x0, 0x400005, 0xe1, 0x9a72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x3, 0xa) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) read$auto_buffer_percent_fops_trace(r1, &(0x7f0000000000)=""/230, 0xe6) getsockopt$auto(r0, 0x0, 0x29, 0x0, 0x0) 5.942880797s ago: executing program 5 (id=5318): mmap$auto(0x0, 0x7, 0x7fffffff, 0xeb1, 0x401, 0x81) rseq$auto(0x0, 0x1a, 0x5d7, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) (async, rerun: 32) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x8) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0xffff) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/030/001\x00', 0x20802, 0x0) (rerun: 64) syz_genetlink_get_family_id$auto_nfc(0x0, r1) (async) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (rerun: 64) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x181240, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x101000, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) (async) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x8, 0x2220008, 0x8, 0x15, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4, 0x0) (async, rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) (async, rerun: 64) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0xf, 0x3, 0x2) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x3, 0xff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 4.518312458s ago: executing program 5 (id=5321): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f00000013c0)='./file0/file0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001140)={{@raw=0x8, 0x5, 0x1, 0x6fb, "11893df0fe42fc51177d9f1f8ffe7430ab65a7fb37b8f38979e05b2e1253ce3234da468c63f0bbdc71c58336", @raw=0x10}, 0xa, 0x1000, 0x567, @inferred=r3, @reserved="9147761eceae3bdd80457bc4ad292cd823670254d7ad6ebb8f7fcaa1a7a4f3a68fd9d6660d44dea17d4d78dde44bce5e8b6ed9e6369b4ebd7c99231e770e77a0f64f77469e5758fc61b0aba4664b95ec1d8069fb1a9317b61772ab0241fc0b73b3084ca3c37af0d8d25bf1384e79934ab697679c6006284bd49a9bf9fccfee12", "030e077f29a308132b9e2b4a6cb797dd7560f192cf4b02cb11aa396cc6edb9ddf81a63254edf19bdb0aa9aba7774adc81ac088bc8fa66a99787d3083981067d9"}) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001280)={{@raw=0x9, 0x569, 0x6, 0xd6, "35d7696902bfe35acb38a4e4c9a7a12fc4c8d65d8338f2ca9152583b9a025a75299eb397dd5496f8cf22ac9d", @raw=0x9}, 0x1, 0x1, 0x4, @raw=0x21, @integer={0x8, 0x10000004, 0x3}, "43005ff5637d56a7cfc264e2b8376d5cf075a05de43456e9148eb9681ef44b5bc2b25ecdd919c3f0314d26dd8319b73b09d2756453054d3e4b1b91bd4cf511dd"}) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$auto(0x7f, &(0x7f0000001400)=@token_create={0x4056}, 0x9d24) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r4, &(0x7f00000000c0)=""/4073, 0xfe9) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/wg0/hop_limit\x00', 0xc8202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r2, &(0x7f0000000080)={&(0x7f00000010c0)="e14e430544a93eef44f34af1ff3336fb36000000d16496f43a5e271ce0de9e574110022fd00400000077110bf72ecc118f109df47b8f", 0x2}, 0x2000000000000003) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x8c202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot/cpu\x00', 0x4, 0x0) 4.35981615s ago: executing program 1 (id=5322): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x8, 0x1, 0x400004, 0x1f, r1, 0xffffffff) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) 3.713410726s ago: executing program 1 (id=5324): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="000004") ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.2/usb3/bDeviceSubClass\x00', 0x0, 0x0) sendfile$auto(0x1, r1, 0x0, 0x748) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mlockall$auto(0x7) r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0x48cc0271, &(0x7f00000001c0)={{0xfffffffffffffffb, 0x3}, {0x1, 0x3}, 0x3ff, 0x0, 0x9, 0x1, 0x5, 0xfffffffffffffffa, 0x5c, 0x0, 0x6, 0x1, 0x7, 0x6c3, 0xb8d, 0xc}) msgctl$auto_IPC_INFO(0x10, 0x3, &(0x7f0000000080)={{0x5, 0xee00, 0xffffffffffffffff, 0x47, 0x2, 0x78c5fe5b, 0x9}, 0x0, 0x0, 0xe, 0x800, 0x7fd, 0x6, 0x1, 0x9, 0x5, 0x6, @raw=0x7, @inferred=r2}) setresuid$auto(0x0, r3, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xa) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) write$auto(r0, 0x0, 0x41ec) setsockopt$auto(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) 3.201303818s ago: executing program 0 (id=5327): mlockall$auto(0x7) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x8802, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x9, 0x6, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x5, 0x61, 0x100001000000004, 0x20000000fa31, 0x400, 0x8000) mremap$auto(0x0, 0x1, 0xbfd1, 0x3, 0x27) 2.827475265s ago: executing program 2 (id=5328): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/hard\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/hard\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80, 0x0) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch$auto(r1, 0x8) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40383d0c, 0x0) 2.823512402s ago: executing program 5 (id=5329): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6b) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x3, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) open(&(0x7f0000000040)='&&\x00', 0x40202, 0x79) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2.448779524s ago: executing program 1 (id=5330): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x18ac1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x3f1) getdents$auto(r2, 0x0, 0xa2b0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) fcntl$auto_F_GETPIPE_SZ(r1, 0x408, 0x7fff) (async) fcntl$auto_F_GETPIPE_SZ(r1, 0x408, 0x7fff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1.895776361s ago: executing program 2 (id=5331): ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x9, &(0x7f0000000340)="483987f62f10002e8cfec0670e2f3c148fabcca32d624e5e9e22eaa720e489425a0a6922966784af765137d39a088ef92f89e188cd3ef2bebf39f88cef66fb96ed08d33dd18a02bf426bd7f023ef277d3316", 0x0}) mmap$auto(0x0, 0x4020009, 0x6, 0x8000000000eb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd0"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 1.701075652s ago: executing program 2 (id=5332): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x5, 0x0) r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/available_tracers\x00', 0x208000, 0x0) getsockopt$auto(r0, 0xe1, 0x24, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)="e769ffff91a9bccbf2a814c2b1c2da6a4642e71e42496c6bac2cd2cc3aa9633c36df13128be76976577ef8b494eb27dd7c5c300903663e1e87c15519219ff691bef8e8162e8a841e0b720ba4c432a0b5e1e6ce3fba9b6c4462c74f701a8daaf2a07cdcee8ef120a79f8ecfef3532373fcfc0602284e9ecfab10a02", 0x7b) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000c80)="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", 0x2) (async) io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000c80)="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", 0x2) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0xfe04) 1.589077172s ago: executing program 0 (id=5333): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x6, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async) unshare$auto(0x8000000) (async) semget$auto(0x0, 0x2e4a, 0x8000) (async) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) (async) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x6}, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.2/usb14/14-0:1.0/usb14-port7/state\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NLBL_MGMT_C_ADD(r6, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000c0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, &(0x7f00000002c0)={@_si_pad}, 0x6) (async) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x5) 1.387976354s ago: executing program 2 (id=5334): read$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f0000001340)=""/48, 0x30) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = ioctl$auto_TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000011c0)=0x19) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001480)=@link_update={r3, @new_prog_fd=r1, 0x7f, @old_map_fd=r4}, 0x5) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000001300), 0x800, 0x0) execve$auto(&(0x7f0000001080)=':,\x00', &(0x7f0000001100)=&(0x7f00000010c0)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', &(0x7f0000001180)=&(0x7f0000001140)='/dev/hwrng\x00') mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, r2, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r6, 0x8000) r7 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/status\x00', 0x220, 0x0) read$auto_proc_single_file_operations_base(r7, &(0x7f0000000080)=""/119, 0x77) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r8}, 0x287) bpf$auto(0xe00, &(0x7f0000000780)=@batch={0x2, 0x5, 0x5, 0xc429, 0x4, r5, 0x7, 0x4000000000000008}, 0xa3) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) 1.23784734s ago: executing program 0 (id=5335): sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MLD_ADDR={0x10, 0x13a, "9bd0253fe0a85f6df369d6bd"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000100)=0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x9) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) (async) io_uring_setup$auto(0x6, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async) r2 = socket(0x2, 0x1, 0x106) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0x7fff, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x6a) listen$auto(r2, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7fff) (async) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x1, 0x20020000) write$auto(0x3, 0x0, 0x1000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto(0x3, 0x800005411, 0x38) syz_genetlink_get_family_id$auto_vdpa(0x0, r3) 930.614025ms ago: executing program 0 (id=5336): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8880) (async) socket(0x23, 0x80805, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) mincore$auto(0x1000, 0x4000000, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) (async) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) (async) ioctl$auto(0xc8, 0x5452, 0x0) socket(0x1e, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) 656.04202ms ago: executing program 5 (id=5337): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) ioctl$auto_TIOCGETD2(r1, 0x5424, &(0x7f00000000c0)) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x40101, 0x0) ioctl$auto_SCSI_IOCTL_SYNC(r1, 0x4, &(0x7f00000000c0)) mremap$auto(0x9, 0x0, 0x80007, 0xffffffff, 0x1) msync$auto(0x0, 0x2000000005, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, 0x0, 0x24044880) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socketpair$auto(0x1, 0x4, 0x10010000, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) 571.832065ms ago: executing program 1 (id=5338): syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x3ff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xff) madvise$auto(0x0, 0x2003f0, 0x17) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6) 429.436353ms ago: executing program 0 (id=5339): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) r5 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0x400, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0xa8246, 0x0) pread64$auto(r5, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/sun\x00', 0x4, 0x8) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) r8 = setfsuid$auto(0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)={0xffff, 0x6c5e, 0x21, 0x6, r8, 0xffffffffffffffff, 0x0, 0xc0, 0x5, 0x20004, 0x7, 0x5, 0x7, 0xc1, 0x7ff, 0x80000000, 0x8000000000000001}, 0x3ff) setresuid$auto(r9, 0x8, r8) r10 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) r11 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x80400, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000000880)={&(0x7f0000000000), 0xc, &(0x7f0000000840)={&(0x7f0000001100)={0x195c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x136, 0x2, 0x0, 0x1, [@generic="f1aefa2968b3c8968fe74f46f286b2cdb4fa169f0b285ef799aea4e8ee58309f67f4a8b65ee3aba858dcf908cdebff055e6baf6b270276bc52d66181b1e6106a84c2b8e2d0a14078b765be0a51fa20a43298bf65f3166576a97db49e7d54d857ccaaf685c1ce1d1d15256347d8941eb5cd0d3c4f714495bb5896ee3e3a2a005e67f0b30247d194", @generic="998b244db3b6a62ddae1cccbfdd5a974936f269b47d2201aab46e856efedde83ed91c129cb9bba4ebb3c6b35d3e894edee189d3225d5bf87c2e349ef57a6b7144349993bff51496f192ccbed218671e80457d457b2187bc35d64b5c4e7ebb3072083ddbce1c730c54c82a414c050ac70981cdd889a4588c9bee391398a8240285f908f382639dbbcfe5d93978366a747fd42ad2fb03af81e30983659fe68d3dae26a5d705ab4e3d0fa7ab8"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x31}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x912}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2b}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x98, 0x2, 0x0, 0x1, [@nested={0x91, 0x116, 0x0, 0x1, [@generic="3ed16eaab3bc23fb034cbafc0764e685f0e3744a2f8298a4c6103cac34e1dd0f1d104015023b6bc5d7e9a111daa4d01dff77f7882893f2c4b5d3d782b9693c74bd90efa24b0ac165411652966a83b309dd0a57423d253d7e5904cbc6e7a787175bf6707a15109ecc9c40d0efa2f3ec736f1d79318e0afdb4e1d73edf757fce2b75075b37fa49b41532376637c2"]}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x74, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x12bf, 0x2, 0x0, 0x1, [@nested={0x1c, 0x58, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0xa1}, @nested={0x4, 0x123}, @typed={0x8, 0xae, 0x0, 0x0, @uid=r9}]}, @nested={0xdb, 0x98, 0x0, 0x1, [@generic="918b0999565dc99d77c3155491bdafe4586bff31dcc4b5e21881edb32439aafc4d5345ecd1c4f51763f9cd41f01ce65e56e594d7a14979ebacedd6748ec8e391b6c09caf897fd2bab441d7fa7a456c347edc9559a7352591e2afd3a2206f760058a457249d1fa39e6fa627d38b3fbad31233ffd3023caba1056f0804601e5e4ada936022b6946c84c2861c0cec992783254a8293e43c61948aae61d632e88692cc826d7c57efd20bf39895de53fad46532845a1d316b4d26299cf552eb9ee82dd97bb7df8f655dffe9f1ca7e828bd5872a5439", @nested={0x4, 0x84}]}, @generic="36797909331719ba00804a490f269044b9267173f0f1fd836c2c20b4023f513cd4b8e3a437b0e071cb6ced206b63fe5e7a7ca61348a832ab2f557e54ca09552826f35bab1298bd685a3d072d34bc0c24e9850fd0cb920bcfdc3082ff384bd482dbfc300305a2628f0869405a1308396330b2ef3d39c00f15674fdd5e11c90e16478dafd9c99706da91e8361b54c2d784e6e293", @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@empty}, @generic="5131cd33b85b102d9b09152f03e87b29efcbca60f7cf290b5c0c3d1073ce843ece41a2aefd7e9cd53e2a7decb721598d61fd48c711513b79128d7a6d8e13a4e584e9d51512c22938117e95c417c91064d6fa776fd8b4a01ed1e577d3041fb14721a4f5fd9910ce4e0e32ed25a0c45bcb99cee03334ab4bee108286c06e014464df981aa4ca322c34c3e5b3b690be637f868d1da2b487aa612755c56152c6716090c55551d0b55f276c115d57e6db207f90523c333a539a83cfd3487d8dd2335a2004dab3099266683b46156241f592e1d9b83a", @generic="b89e3cd2e61da290c1fa4f66004f15a0d3163335c910fbeadbfd6fc75ab74a2a143be5836f99afa948dbf9f7dc54fc6e45394a9e11841c2ba0d1befe1ea3a74624f4be51c9b2df8d674de3a30ca15b7114963fdae8d26a1a03a9cfb0f176511eee13d597ced5105440fd2bd0a36f9a9d91f54d24c07941904f50868a59de1a73e18883eb12f6e7cd5d7ce89880937bc44ec8a1f630fa67e85b12dcac5257d3cbf955e1dbb45aa2f8b32ed78d66761187a61f544206e1dea06c928a09350ff7b5d014629d616a951f23c07f707fe821371280e951aaff87fd061193262b3643335862ed4f79aaeb1d559989c46a55ed3bd3e4ccdef9d9c147f9a5cd10f6d73775bf871d3d86669e15ad768511691b03992ea5bea735e47b1c0c670d970f33fb45f6516bfe3e1f3921de37a882601720a4681c681a407bbd982e57abc589e723d89ec83983eae607f727d0d5c4a08132b0b0654ed25a03160f3f578b1d641bb7c2c1f2f451a4f7e9b2a7b2839948f751e207242e2959a559f737d4e0b28b2199ee89d8213c6a4ad09964a08154bd123a2aa07c91981a15de62f74c47b3f97862a5d0aad4df07a3c8eb272a547e5b50d56fa1377f5fc76b7cfb86142b1f5577c84d01b8accfb094f48385f17b601e47d220eee293f7627833a684fabbf6df589dc155e3656025ae1e384527b58923c44711826794da74196f46e8ef676af89e01392ae466539f68da06abd83ee7b4c10a63a9836cd0f4172502953404a3b41da2aefb56fb840988abed7c9c2d62e9dfe85a6d6262c85625fa59a16f89e5b59b6bba2837efb197cd4df1f24e5c8678927a8a41d90f4ee62bdb9ad901890f566e43eb4fec3734effc93d7098fbd8c6c79bc8bd9f527be619fe1c5af177add519222651deca89ec3094fa2d231cbbc06888fdf28d47732c08675716b229ea0f765595e1e5ece5a4bf9a345b0daf0545554ea763c1085bdb271becc95f7db45f4ac6ec38276ce4d34d8c0bdf8b1e5cf8ef01559434edd6d49f12543d30c7cd53e38bab3a971cda5ed494691226c933c8a5b1deb8af7da965b8c97794b21d308e0f68f41666342483516122275bf7ccee00a26a7587e276d347d09479836e273f7ac77db780b20cd3a8a3649c315a5848cd555b52fe4a7a5839185b1ff10c358992c1340bd5ab2dc7341424ff32a33f43aa3d63f9ff415e98a59144696c05f535eaf083a115e1796b5844188105f12f22a590772900d946c196b199f3f1627cdbf67beb2dd45f466de9bc1c0fc5899daf571378a818506e81981a17dfa7ef654a42a612ea861586218c77e9d4241e73e222a1609c36d30295d6109e29c3bf754700c17ac68316129b49c23657f1890233d458e76e8b1a028f38dcff791d86470f128de9e32648b47b71a8b89e355603ae778635a303a0ae8bbccac3ddd6a1f8cb4ec01ed955fd6e1392378bea49fa02e58b6663079e6c30ab4b1119837a1dfd246a9572860054ed70128018e39139601bbc9cd65bd0b0382456e30ba437e0c84dc2997aa999544cd54a1cacbd9b49ae61ce13e95a8513426f6e2882b3e5b952c923cdc00230647b552645fc01fd5a814146812b2bd7d2e0cadda87d7bd1403c610cd0803c88b919ef5c559953c6c7910ada7c22c15400e4a8cd8f5632f853d4f75602c5fc170379eb6677294cc56046ee71eb4a208b7b03e8df461579ecc513dad651565f6faa22025f13913715ac764ce2c98f1a190f0c3c99661d37df9f6e1b65fabab62904f6331422fa2295c956af981080673aa974ccd2c8bf7ab82f6589f40d782b9fe9456e25e115d17cebf74e19f633efe1a1c8953f7f00db67fe595dbc779e9a74733f7e3746e0a4a1c706ec25b039a763d7297c9266bd49bb5e9d53a757d76d78bb1f1cc8bff5327d6bb96e0f91421a2732b9f5aeb1b15ecadbc7addab22a4f9ea9a693d0805fdebbb297636b9e4357e4a737c335bacf7f601489fc08b448bbddd4b6996e4234aed62988f9c658237e76f31152f7b7758a6ffc4133cc0e87f86c81c818bce27e98e637a78f34b9fcb54d759c1f7cbae09542ba9621def59c6011f4e65c3cf7d72b6b1bf7c96b5d7a6738b67bc8b3f91782a982887cb8cdf763695f7ce5f8b565d2b16d4eb53edea2c31697869e4d3c029211fb139945aafb067cb0cb0144bc9ce3893c11882b64a9aefe928f2b7ec40ae990e222f81f94bcb6f6044d125775d6f2646a222da693d629b48702784b36cffe3ae8d6296a0fa35ff02842ab155af4f2afbefd14e9dd0aeb0e2746cbd79c9ddbd47627083e2e7a981795564c3d2aabfb58ddc153144dc9c8bbcf44e1b4fa03c9eca8d6f1f8de1443acc2274a434eae50b8d0203698df10297c16091d8c79f66c9f9e775b833101bcc2c3d85b6f946500c40e6e0f57a5690d1bbef126313fa6644238f0cb4d04bc3d29c8cab26568bcddefd3fbecb30a11644302cfb3f4aa63a87b978cf499fb89f3205295c81e5d4cde4a3a8d52e8eb9f5b644df83a654ee86e36866494c7f4dab9d68072fd157678c80268e985849fdb868170999a476a3689a8ad06e7d971b4095920a4de4f0ffb2096072f05c1aeaec5c60240e67864ada691c2858828515a0f2ebaca26ab455965c791886e39ea66ddf964e52563d4c5bd120538f12252089ad453857cbcfd6e0ab7cbc440fe620e6c49d02a85cb4e0613e9a22b7dcaa2d84e3beb3d8c3895aea590f384fcb22275782ad64eb9b1009859bf5633c79e703c98e48b22c1dd81ac73d8490c86fcc55b28ff8cb9771d20e33fdc9bbc48c181f4f7a6b252c1b6811e5226e99c5c59805ca0e4518bf07d24e81cf279cff4910bb5ff48f9ac2e06394939d20481435ccd69f0f631a59d8f83d7bcda9b7e595160e3fbdd3c66a52ce3d7ce95de05995ec4ba183f62afffa7f60bcb82a89ab87b10ffed8b67dcc6922e8591959066723553d8ecbfc4e968c7569294a31e73e7d3c902182532e8399bde475f13d077c466cb247096b5490752ade77b50db3ade1934f0e38eb47629e200b85ee9238d6455cc01073d538f0430c7e6fefceac3e3d5ab29046086e2720ba2306a8e1bdfd201a0dc8cc54e6388b30893d99e771cff0c558265a07d715404a5f33818ac6b1da4995b3ab02b570a5e6b5d80fa0f414aa5776d62be45d8f691c92c3c0d9dfec0869b4aa0c6fba407bbba5afafafdeb952a7dd409730babcf3f1b85a0fd22a068c3b1253205520728a80ca5e8d8496004745e8a3cb4de9d1521e484abcb489ac60eca7e0fbace52a7e4c35829f796a9529e1af1d3e0fa25056854d3fb9f7e854dc28c8532e04b2bd17105d701291295006dcf57093f559d07b61424ecdf30616cd3631476661d7d5d78744c8de578754fc93184fb0119a25e8dcb75f9d43a60bf7de4bb7264285ecd84188a50fbf01b66e609d55a27d231ce143be87d062be085928470ef06b16d6ae6b948c22d0393f8335baffb478f650ede1c6e5b6b26e546e973238bda8592e538da63153d519d8d7fad242f9e45a813f7cc66155cce403facb3d3a732d8db943497dd05ee290bb9736ed9869c0477ec9d6a6ffbfe8ffa9dc7aff5fedfb1c55ccfc77534f720ea4ed9004a19cd3813d4aa44707e21e4d05cd9cf8779b97e45aa361524614787816c47f3c214b20d900938f3257f0393f302d2eabbd6356cfaa22a5071d6656f732659888bde3c8c79320aca4fa905ba55e1cdd7b05d3ad4e32c8b8dd10f784d89c2ddb76ee1a2ccc2aa314032e25bfb01c4047359b46da1194a549996f8926ef2dbd07dc236ea30fef0ec19ba2ff1626250cacef6852f113af914a6c08b9b8a03c44e949c9621eeeaf9492e186c92a4d80ac357cc46a08096b7bcc587cf3695f4fe8bda66b23040af84e5e1395c48cab5f35970a451731d59d8dbdebb62f010a225eac5b8442e255ae73675025b21bdfb1d5a4ffbaec4ff9d2ae52133fe631b7f06f34a15967c5115da02c30f8de1524e9ed8344afa352442723007d56a8d732f85c4372245cf8274e7735251320f365817f782a4891066054bc383fe207cff292d70b6f43ee1d13c29bdbff17ef915c846d78eba812033b5113eb0a327f265ceda404814652bc7ea05111039ac481313989d4bb719bff564b76d997a3a79054dafeef6573abe92a671af3895267727bcb56865b0b27206127ff6b31ad3328662c01011c835dacc18f11d3983afcc0cf6e727630b02a3af3c637d85abfdd507f4913c4842dd6052ef148322bf5c09975572d3375ccaea9f1e339d7042254c5421ac0d2edadc33a4db6e04b45bc18ee0a634aa5bb4cef58b8031908f373f6ec5a62e790a4b332e3a0e6b37538caf154862687a16c5e01c0f365ea475d83cef8eefbe3c0c53d94fdd383a3ea61d2228cdb2dc39a7de651e9b26a98f40683f5b0affcb76c119308d9842a2b6237ffca0679ce0cd66b5c3f0a73e0bf132e4e89fe364a147119877c934185f65af2ed50cc2c298a9c7c1cde37172202a35717123d97f6b8c5f607927400e9daa93087dce6c18209aaadc8c97a934d0c2110f0a95ea4e163de433ed4eeb381d3a366c209d987830a7c07ef30abde8947efe490bed55cfc4ae9654adcf76497db3b06807e8e6dbf904860ca07e79ad43be2a1b41cafc7335f0a56e370be9800a4d47904397aea4ec6af3b3f9ed7eade014d54fe74b92a4f4d946e1e6bde084c96fa8ebd9e436c079863540fbc3c4f1bb30cf12b3451a36ee42e0d90630cb942c3fddc210f7a572393ee06dd6f699b60418fa090d42dae3ad91f1ebfc8a79826d2e81ab89fd56285a1b626fde302ac337d3ea21d3082f7e802ad2fd2225167140cef0c0c64aee723cd5921bdd9c0bb658573b19ac583c4886cfcc0d81505858e5727b6770a77bf176fe30d880ef3c9bd221a8b3757cf78998d78ed9be6dd3c2f280c38ff8205e312594f8755420f40c66cddd5e5e965c62b878bc35aacaf4c2f9b4b89a911f00ee6d0055b004a3342db7072dead11d2686baff5bc0bb4314fb4c7c4340926987b1eb9ba167d04d2e5976cd682ad2ca0a7eb50e23299ec5f66fcb29a8750be43279dc57e4499585fa53f24f1b96c0e1d8d80cb1c912a15eb2e974dde02b2c5aaa9d1a159fbbc3954eff219c82031e6529417f6819bc918bc207cac874bb97ede91f9df956b0e1881abb12ec55c11a5fa384915466a59e083e860a9b6099472b6a97f8a6f0c319315b6525c6973da0453a9cbe39396b5bbac445e50e746d327a0b08822eae312c2c86f1d835eabac28ba74768380761661931ef420591a563ed09d8570f9d52ca55abdfc42565ac2fdb850f88472d604e9849436215fcb26b2168e51c804a8a191c3d24ed3f3629ce6a9e6c6abc70ded744b1c1d84a1fabb94d25572155cbe8685477f5bd6d7b4de67cb79defdfdf9ea6cb853b83bd2998c86b423b16758d26345cae9aeec972b46251b4071862ac92191bdf6807a2b7138fb7cdc1ec92be79812afbf6979ef921e618cdd08dcf73d6c7ad25594c793cc5aacd1a05bc732c139a1029b22c90085c072a82dde8d4eb3d6ec20cd41abbd83fa551101d0ac6a562695309f9b6c9be13de515258dad97ff6f3d4c587950398b83545c763db9e971051f570d86edf0771a01d6da8aa741a9acba5aee42069d174a828a3f162daa7d5a180dc69b33c2774ad935b8a033a0cbf77e0d6ec9ec4e63bf70e5db1d51a530b0c4a4e91aaad2fa90a9769efb4d89dcbea617512a768a6a6d13a5c055aab84f1ce13e083e380fd8518a0d6be3ea03f7a4", @nested={0x8, 0x13d, 0x0, 0x1, [@nested={0x4, 0xe0}]}, @generic="dfab3d2bb27e1392fa84f975403c3633011177e12b1354d39867f359d9830b63e78c1385379bca6163872daef8b9b7dcab97c2f275423e5f6ac16a4a40f9fa53bcf13efacbad9807ff4ebd5151"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc0, 0x2, 0x0, 0x1, [@nested={0x8, 0x110, 0x0, 0x1, [@nested={0x4, 0x92}]}, @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x53d24410}, @typed={0x8, 0xf1, 0x0, 0x0, @uid=r8}, @generic="9018", @typed={0xc, 0xc0, 0x0, 0x0, @str=')!^{/*)\x00'}, @generic="ffce3b2cc754190b6dbc41e9f1db2d61d10d770141fbd1f78851091e794da5104a735ab5ada173ae1571d8db61b4631673c92f78a122658d675e96d7d33243bad75956719d48950e4db49946f24a3d11b9fa1b6bd774f4e54265a8be01e6b0c961086d7084074107036b04d17ce4e30df2026ca56759f081bdfb118084b8f9a6190a6291302b1014c4b0022ad359b9660727"]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x34c, 0x2, 0x0, 0x1, [@nested={0x9e, 0x4a, 0x0, 0x1, [@generic="fe3bea0823cb85279eead24fc05ca6f69037293519da80821c6514f6cb7ec995ae6e0679173d3128891328b5f51670ebc4bb474a39a76f98743c5f4ce5fb2e0238fcfd49ba1ab1a9403526", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@multicast1}, @generic="79d09f22ce469372a689440d2eb07902e3612c57b24c10c1eda93a91629d055edcea8854338c6f51c368ac2ff3362c1d3fc4df67b09cd885fe746a2254879fb95fce9949b20135"]}, @generic="63d7f16f070f6c542d34e16fc5a74b9bc703e90aed7915b3a7e23f571ca4264cb2dba67b755f0ef396005d0f0e4d9402a0bd1864f5260f79f037b2ecac0fcb05", @nested={0x69, 0xa7, 0x0, 0x1, [@generic="874070f674f4f66632c0bedd0977804e5b17804e85136f37db6dedd890633e4274f9f3e12b23cfed738f2056d723964b880d961a14dfd10cecb808263b0a157ba67e57a39cf944bfe26ea117f91fc70036fd7eeeae759e99bd991bca1f4e327a007e383b0a"]}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="b04ae15a766331c03c2cd4266afb09f691a51e1b33ecfc04c157c4a55edc420cd2f13bd5bcd43013cb36d6da10dcfb53f4aea41b5e1c54bd05eed5f85ef6131f1c52d262a52c9cce63865f9bf02259b68278fd9810600c2f74e6aa2f33487595f1cb5dfc4e0030220182a2ab7135ea6f02f818138647dc96487406589648c37f420ebf7921e6aa42c7fc9ecdb5fecd32bb3486aef1829e9733d1efbae5f6191966fe4e7478a44bf2f41a9866aa464575d7c53915d15a18f77a4759e1925c09924f14bbf8db6e7ee934374fcfc67ed152b05d03006c03686bc768fd7ceaff12835dacfb7aea97f88423edebd35918ea5087fc67fd", @nested={0x53, 0xee, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r11}, @generic="6543b7b82b3ff835541b4750137ee49df26eeb942fbc778c4c81479ee83b204dcdccd5450758f380b09620889a5dea18207d5b74fbe961620155fcf29bf4a5"]}, @typed={0x4, 0xed}, @nested={0x99, 0xdb, 0x0, 0x1, [@generic="dbc4c0a5e6b0e929f51797f5307f3c7aa619ce82376fb9dffcb34adab42e11019a3f6618daf4efed045ae68a1af575b993da7877825179c68028706b7f0cce3e6cd598f1dd4b3181ede57ab338b45606eec7c6a55369332cc245743fe84bd7027f6008711c32555785d014862c2e48520ccc7caacb54708758725a5f459d71b21d1fc3e4b9eb284bf15a92e00d244f1dc6a355a3eb"]}]}]}, 0x195c}, 0x1, 0x0, 0x0, 0x50}, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r12 = fanotify_init$auto(0x5, 0x2000000000002) fallocate$auto(r12, 0x3, 0x4d, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bind$auto(r13, &(0x7f00000010c0)=@sco={0x1f, @none}, 0x3) ioctl$auto(0x3, 0xff05, 0x0) 278.962335ms ago: executing program 2 (id=5340): ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x9, &(0x7f0000000340)="483987f62f10002e8cfec0670e2f3c148fabcca32d624e5e9e22eaa720e489425a0a6922966784af765137d39a088ef92f89e188cd3ef2bebf39f88cef66fb96ed08d33dd18a02bf426bd7f023ef277d3316", 0x0}) mmap$auto(0x0, 0x4020009, 0x6, 0x8000000000eb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd0"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 196.132028ms ago: executing program 0 (id=5341): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r5 = bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4}, 0x6f4) read$auto(r3, 0x0, 0x20) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000580)={0x2, @raw=0x7, @raw=0x2, 0x6, 0xf9f, '\x00', {0x9, 0x3, 0x2, 0x0, 0x0, 0x7fffffff, 0x6, 0x4, {0x4, 0x4}, {0x8, 0xfffffffb}, {0x0, 0x6}, 0x2, 0xfffffffb, 0x9, 0x3, 0x5, 0x8, 0x7, 0x0, 0x1000, 0x1, '\x00', 0x7, 0xfffffff8, 0x9}}) write$auto(r6, 0x0, 0x6) unshare$auto(0x40000080) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000000)="b2", 0x1) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r8, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) socket(0x10, 0x80002, 0x0) bind$auto(r2, &(0x7f0000000140)=@generic={0x1a, "9300000004000000000000000091"}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port7/over_current_count\x00', 0x400000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 0s ago: executing program 2 (id=5342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c081) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r3, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_fd=r3, 0xffffffffffffffff, 0x7b, 0x2, r2, @relative_id=0x621b93a0, 0x10001}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050725bd70abc9394d6d72e76700"/27], 0x2c}}, 0x40d0) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r8, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) kernel console output (not intermixed with test programs): ivid-007: ================= START STATUS ================= [ 1649.517765][T28327] vivid-007: Generate PTS: true [ 1649.526637][T28327] vivid-007: Generate SCR: true [ 1649.606473][T28327] tpg source WxH: 320x240 (Y'CbCr) [ 1649.629049][T28327] tpg field: 1 [ 1649.632516][T28327] tpg crop: (0,0)/320x240 [ 1649.636996][T28327] tpg compose: (0,0)/320x240 [ 1649.700670][T28327] tpg colorspace: 8 [ 1649.758430][T28327] tpg transfer function: 0/0 [ 1649.763388][T28327] tpg Y'CbCr encoding: 0/0 [ 1649.769072][T28327] tpg quantization: 0/0 [ 1649.777886][T28327] tpg RGB range: 0/2 [ 1649.786974][T28327] vivid-007: ================== END STATUS ================== [ 1650.964836][T28350] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1653.579544][T28398] FAULT_INJECTION: forcing a failure. [ 1653.579544][T28398] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.592689][T28398] CPU: 1 UID: 0 PID: 28398 Comm: syz.0.4489 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1653.592758][T28398] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1653.592778][T28398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1653.592810][T28398] Call Trace: [ 1653.592818][T28398] [ 1653.592828][T28398] dump_stack_lvl+0x16c/0x1f0 [ 1653.592872][T28398] should_fail_ex+0x512/0x640 [ 1653.592900][T28398] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1653.592938][T28398] should_failslab+0xc2/0x120 [ 1653.592975][T28398] kmem_cache_alloc_noprof+0x83/0x770 [ 1653.593004][T28398] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1653.593037][T28398] ? acpi_ps_alloc_op+0x29d/0x360 [ 1653.593074][T28398] ? acpi_ps_alloc_op+0x29d/0x360 [ 1653.593102][T28398] acpi_ps_alloc_op+0x29d/0x360 [ 1653.593131][T28398] ? acpi_ut_status_exit+0x103/0x1c0 [ 1653.593164][T28398] acpi_ps_create_op+0x4bd/0xd30 [ 1653.593196][T28398] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 1653.593226][T28398] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 1653.593257][T28398] ? acpi_ut_value_exit+0xff/0x180 [ 1653.593294][T28398] acpi_ps_parse_loop+0xf06/0x2470 [ 1653.593326][T28398] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 1653.593367][T28398] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1653.593396][T28398] ? acpi_ut_status_exit+0x103/0x1c0 [ 1653.593429][T28398] ? acpi_ds_call_control_method+0x435/0xab0 [ 1653.593459][T28398] acpi_ps_parse_aml+0x817/0x1170 [ 1653.593494][T28398] acpi_ps_execute_method+0x5c4/0xe90 [ 1653.593535][T28398] acpi_ns_evaluate+0x98c/0x16d0 [ 1653.593578][T28398] acpi_evaluate_object+0x4ca/0xdf0 [ 1653.593605][T28398] ? ksys_read+0x12a/0x250 [ 1653.593642][T28398] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1653.593672][T28398] ? __pfx___might_resched+0x10/0x10 [ 1653.593709][T28398] acpi_evaluate_integer+0xdd/0x230 [ 1653.593746][T28398] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1653.593803][T28398] ? __pfx_status_show+0x10/0x10 [ 1653.593829][T28398] status_show+0xa0/0x120 [ 1653.593854][T28398] ? __pfx_status_show+0x10/0x10 [ 1653.593888][T28398] dev_attr_show+0x56/0xe0 [ 1653.593923][T28398] ? __pfx_dev_attr_show+0x10/0x10 [ 1653.593955][T28398] sysfs_kf_seq_show+0x216/0x3e0 [ 1653.593985][T28398] seq_read_iter+0x50e/0x12d0 [ 1653.594030][T28398] kernfs_fop_read_iter+0x46c/0x610 [ 1653.594066][T28398] ? rw_verify_area+0xcf/0x6c0 [ 1653.594099][T28398] vfs_read+0x8bf/0xcf0 [ 1653.594138][T28398] ? __pfx_vfs_read+0x10/0x10 [ 1653.594189][T28398] ksys_read+0x12a/0x250 [ 1653.594222][T28398] ? __pfx_ksys_read+0x10/0x10 [ 1653.594264][T28398] do_syscall_64+0xcd/0xf80 [ 1653.594288][T28398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.594312][T28398] RIP: 0033:0x7f37b938f7c9 [ 1653.594332][T28398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1653.594354][T28398] RSP: 002b:00007f37ba1b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1653.594376][T28398] RAX: ffffffffffffffda RBX: 00007f37b95e6180 RCX: 00007f37b938f7c9 [ 1653.594393][T28398] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 1653.594408][T28398] RBP: 00007f37b9413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1653.594423][T28398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1653.594437][T28398] R13: 00007f37b95e6218 R14: 00007f37b95e6180 R15: 00007ffdc3df1e88 [ 1653.594470][T28398] [ 1653.594491][T28398] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1654.049211][T28398] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1656.284450][T16703] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1656.691470][T16703] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 1656.761334][T28424] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1659.573143][T28454] hub 1-0:1.0: USB hub found [ 1659.645802][T28454] hub 1-0:1.0: 1 port detected [ 1663.341167][T28530] netlink: 226 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1663.446888][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1663.534964][T28530] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1665.479978][T28567] FAULT_INJECTION: forcing a failure. [ 1665.479978][T28567] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.559352][T28567] CPU: 0 UID: 0 PID: 28567 Comm: syz.2.4523 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1665.559425][T28567] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1665.559462][T28567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1665.559483][T28567] Call Trace: [ 1665.559495][T28567] [ 1665.559509][T28567] dump_stack_lvl+0x16c/0x1f0 [ 1665.559568][T28567] should_fail_ex+0x512/0x640 [ 1665.559608][T28567] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1665.559656][T28567] should_failslab+0xc2/0x120 [ 1665.559707][T28567] kmem_cache_alloc_noprof+0x83/0x770 [ 1665.559749][T28567] ? __anon_vma_prepare+0x344/0x5e0 [ 1665.559794][T28567] ? __anon_vma_prepare+0x344/0x5e0 [ 1665.559830][T28567] __anon_vma_prepare+0x344/0x5e0 [ 1665.559865][T28567] ? __filemap_get_folio_mpol+0x32f/0xc60 [ 1665.559910][T28567] __vmf_anon_prepare+0x11c/0x240 [ 1665.559964][T28567] hugetlb_no_page+0x10ae/0x2140 [ 1665.560014][T28567] hugetlb_fault+0x5ed/0x1730 [ 1665.560057][T28567] ? __pfx_hugetlb_fault+0x10/0x10 [ 1665.560109][T28567] ? __pfx___up_read+0x10/0x10 [ 1665.560146][T28567] ? hugetlb_vma_unlock_read+0xff/0x130 [ 1665.560197][T28567] handle_mm_fault+0x95d/0xad0 [ 1665.560242][T28567] __get_user_pages+0x54e/0x3590 [ 1665.560310][T28567] ? __pfx___get_user_pages+0x10/0x10 [ 1665.560372][T28567] populate_vma_page_range+0x267/0x3f0 [ 1665.560440][T28567] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1665.560494][T28567] ? __pfx_find_vma_intersection+0x10/0x10 [ 1665.560557][T28567] __mm_populate+0x1d8/0x380 [ 1665.560612][T28567] ? __pfx___mm_populate+0x10/0x10 [ 1665.560668][T28567] ? up_write+0x2cf/0x4e0 [ 1665.560708][T28567] vm_mmap_pgoff+0x37f/0x470 [ 1665.560761][T28567] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1665.560819][T28567] ? __x64_sys_futex+0x1e0/0x4c0 [ 1665.560857][T28567] ? __x64_sys_futex+0x1e9/0x4c0 [ 1665.560902][T28567] ksys_mmap_pgoff+0x7d/0x5c0 [ 1665.560948][T28567] ? xfd_validate_state+0x61/0x180 [ 1665.560987][T28567] __x64_sys_mmap+0x125/0x190 [ 1665.561026][T28567] do_syscall_64+0xcd/0xf80 [ 1665.561061][T28567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.561095][T28567] RIP: 0033:0x7f1d5878f7c9 [ 1665.561122][T28567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1665.561154][T28567] RSP: 002b:00007f1d59565038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1665.561186][T28567] RAX: ffffffffffffffda RBX: 00007f1d589e6090 RCX: 00007f1d5878f7c9 [ 1665.561209][T28567] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000 [ 1665.561231][T28567] RBP: 00007f1d58813f91 R08: 0000000000000002 R09: 0000000000008000 [ 1665.561252][T28567] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1665.561273][T28567] R13: 00007f1d589e6128 R14: 00007f1d589e6090 R15: 00007ffd0f46bb78 [ 1665.561318][T28567] [ 1666.464502][T28584] NFSD: Failed to start, no listeners configured. [ 1668.007622][T28601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4529'. [ 1669.255323][T28635] zswap: compressor not available [ 1669.275793][T28636] FAULT_INJECTION: forcing a failure. [ 1669.275793][T28636] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.319664][T28636] CPU: 1 UID: 0 PID: 28636 Comm: syz.2.4536 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1669.319731][T28636] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1669.319749][T28636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1669.319768][T28636] Call Trace: [ 1669.319779][T28636] [ 1669.319790][T28636] dump_stack_lvl+0x16c/0x1f0 [ 1669.319847][T28636] should_fail_ex+0x512/0x640 [ 1669.319885][T28636] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1669.319928][T28636] should_failslab+0xc2/0x120 [ 1669.319979][T28636] kmem_cache_alloc_noprof+0x83/0x770 [ 1669.320019][T28636] ? vm_area_dup+0x27/0x8d0 [ 1669.320061][T28636] ? vm_area_dup+0x27/0x8d0 [ 1669.320102][T28636] vm_area_dup+0x27/0x8d0 [ 1669.320139][T28636] dup_mmap+0x6a4/0x20e0 [ 1669.320185][T28636] ? __pfx_dup_mmap+0x10/0x10 [ 1669.320243][T28636] copy_process+0x3b9f/0x7430 [ 1669.320293][T28636] ? __pfx___futex_wait+0x10/0x10 [ 1669.320353][T28636] ? __pfx_copy_process+0x10/0x10 [ 1669.320411][T28636] ? futex_private_hash_put+0x160/0x1b0 [ 1669.320453][T28636] kernel_clone+0xfc/0x910 [ 1669.320504][T28636] ? __pfx_kernel_clone+0x10/0x10 [ 1669.320577][T28636] __do_sys_clone+0xce/0x120 [ 1669.320626][T28636] ? __pfx___do_sys_clone+0x10/0x10 [ 1669.320696][T28636] ? xfd_validate_state+0x61/0x180 [ 1669.320741][T28636] do_syscall_64+0xcd/0xf80 [ 1669.320775][T28636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.320807][T28636] RIP: 0033:0x7f1d5878f7c9 [ 1669.320831][T28636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.320867][T28636] RSP: 002b:00007f1d59564fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1669.320889][T28636] RAX: ffffffffffffffda RBX: 00007f1d589e6090 RCX: 00007f1d5878f7c9 [ 1669.320904][T28636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1669.320918][T28636] RBP: 00007f1d58813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1669.320933][T28636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1669.320946][T28636] R13: 00007f1d589e6128 R14: 00007f1d589e6090 R15: 00007ffd0f46bb78 [ 1669.320978][T28636] [ 1670.574961][T28649] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 1670.922816][T28654] random: crng reseeded on system resumption [ 1671.105007][T28656] Invalid ELF header magic: != ELF [ 1674.512733][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.519151][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.768666][T28745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1676.788364][T28745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1676.810353][T28745] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1676.830217][T28745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1676.850024][T28745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1676.901234][T28745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1677.258815][T28751] FAULT_INJECTION: forcing a failure. [ 1677.258815][T28751] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.295630][T28751] CPU: 1 UID: 0 PID: 28751 Comm: syz.2.4559 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1677.295704][T28751] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1677.295723][T28751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1677.295743][T28751] Call Trace: [ 1677.295755][T28751] [ 1677.295769][T28751] dump_stack_lvl+0x16c/0x1f0 [ 1677.295830][T28751] should_fail_ex+0x512/0x640 [ 1677.295869][T28751] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1677.295915][T28751] should_failslab+0xc2/0x120 [ 1677.295966][T28751] kmem_cache_alloc_noprof+0x83/0x770 [ 1677.296007][T28751] ? alloc_empty_file+0x55/0x1e0 [ 1677.296049][T28751] ? alloc_empty_file+0x55/0x1e0 [ 1677.296082][T28751] alloc_empty_file+0x55/0x1e0 [ 1677.296120][T28751] alloc_file_pseudo+0x13a/0x230 [ 1677.296158][T28751] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1677.296195][T28751] ? alloc_fd+0x471/0x7d0 [ 1677.296249][T28751] sock_alloc_file+0x50/0x210 [ 1677.296311][T28751] __sys_socket+0x1c0/0x260 [ 1677.296345][T28751] ? __fget_files+0x20e/0x3c0 [ 1677.296391][T28751] ? __pfx___sys_socket+0x10/0x10 [ 1677.296427][T28751] ? xfd_validate_state+0x61/0x180 [ 1677.296469][T28751] __x64_sys_socket+0x72/0xb0 [ 1677.296503][T28751] ? lockdep_hardirqs_on+0x7c/0x110 [ 1677.296556][T28751] do_syscall_64+0xcd/0xf80 [ 1677.296590][T28751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.296625][T28751] RIP: 0033:0x7f1d5878f7c9 [ 1677.296652][T28751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.296684][T28751] RSP: 002b:00007f1d59586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1677.296716][T28751] RAX: ffffffffffffffda RBX: 00007f1d589e5fa0 RCX: 00007f1d5878f7c9 [ 1677.296738][T28751] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 1677.296758][T28751] RBP: 00007f1d58813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1677.296779][T28751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.296799][T28751] R13: 00007f1d589e6038 R14: 00007f1d589e5fa0 R15: 00007ffd0f46bb78 [ 1677.296843][T28751] [ 1678.807673][T18892] Bluetooth: hci4: command 0x0c1a tx timeout [ 1678.813921][T10977] Bluetooth: hci1: command 0x0c1a tx timeout [ 1678.820533][T16703] Bluetooth: hci0: command 0x0c1a tx timeout [ 1678.887896][T16703] Bluetooth: hci2: command 0x0c1a tx timeout [ 1679.082891][T28780] random: crng reseeded on system resumption [ 1679.561664][T28767] nbd: must specify an index to disconnect [ 1680.936976][T28816] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1680.956165][T16703] Bluetooth: hci2: command 0x0c1a tx timeout [ 1681.583560][T28826] random: crng reseeded on system resumption [ 1681.873544][T28823] random: crng reseeded on system resumption [ 1683.057359][T16703] Bluetooth: hci2: command 0x0c1a tx timeout [ 1684.772612][T28863] hub 1-0:1.0: USB hub found [ 1684.851497][T28863] hub 1-0:1.0: 1 port detected [ 1689.610112][T10977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1689.635553][T10977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1689.644844][T10977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1689.665700][T10977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1689.673993][T10977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1690.212326][T28956] chnl_net:caif_netlink_parms(): no params data found [ 1690.948182][T28956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.965699][T28956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.996326][T28956] bridge_slave_0: entered allmulticast mode [ 1691.028694][T28956] bridge_slave_0: entered promiscuous mode [ 1691.076982][T28956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.103502][T28956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.123454][T28956] bridge_slave_1: entered allmulticast mode [ 1691.131934][T28956] bridge_slave_1: entered promiscuous mode [ 1691.231186][T28956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1691.256983][T28956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.439663][T28956] team0: Port device team_slave_0 added [ 1691.459243][T28956] team0: Port device team_slave_1 added [ 1691.577941][T28997] ubi0: attaching mtd0 [ 1691.586626][T28997] ubi0: scanning is finished [ 1691.599272][T28997] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1691.650805][T29002] random: crng reseeded on system resumption [ 1691.659028][T28956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.690949][T28956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.708333][T16703] Bluetooth: hci3: command tx timeout [ 1691.773863][T28956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.870133][T28956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.875021][T28997] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1691.912329][T28956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.976016][T29007] Invalid ELF header magic: != ELF [ 1692.022309][T28956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.327639][T28956] hsr_slave_0: entered promiscuous mode [ 1692.338116][T28956] hsr_slave_1: entered promiscuous mode [ 1692.345072][T28956] debugfs: 'hsr0' already exists in 'hsr' [ 1692.351697][T28956] Cannot create hsr debugfs directory [ 1693.218170][T28956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.769550][T16703] Bluetooth: hci3: command tx timeout [ 1693.826586][T28956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.134216][T28956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.399402][T28956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.773577][T28956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1694.812059][T28956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1694.828327][T28956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1694.874617][T28956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1694.953226][T29024] usb usb36: usbfs: process 29024 (syz.2.4623) did not claim interface 0 before use [ 1695.108717][T29024] Invalid ELF header magic: != ELF [ 1695.500553][T28956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.561348][T28956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.794399][T26336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.801687][T26336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.838802][T16703] Bluetooth: hci3: command tx timeout [ 1695.864219][T26336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.871649][T26336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.458244][T28956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.375613][T28956] veth0_vlan: entered promiscuous mode [ 1697.425336][T28956] veth1_vlan: entered promiscuous mode [ 1697.754905][T28956] veth0_macvtap: entered promiscuous mode [ 1697.911590][T16703] Bluetooth: hci3: command tx timeout [ 1698.020553][T28956] veth1_macvtap: entered promiscuous mode [ 1698.330438][T28956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.488314][T28956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.842082][T26337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.906975][T29097] FAULT_INJECTION: forcing a failure. [ 1698.906975][T29097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1698.957623][T29097] CPU: 1 UID: 0 PID: 29097 Comm: syz.2.4628 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1698.957694][T29097] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1698.957713][T29097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1698.957734][T29097] Call Trace: [ 1698.957746][T29097] [ 1698.957759][T29097] dump_stack_lvl+0x16c/0x1f0 [ 1698.957816][T29097] should_fail_ex+0x512/0x640 [ 1698.957860][T29097] should_fail_alloc_page+0xe7/0x130 [ 1698.957931][T29097] prepare_alloc_pages+0x401/0x670 [ 1698.957993][T29097] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1698.958034][T29097] ? kasan_save_stack+0x33/0x60 [ 1698.958073][T29097] ? kasan_save_track+0x14/0x30 [ 1698.958111][T29097] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1698.958144][T29097] ? ptlock_alloc+0x1f/0x70 [ 1698.958168][T29097] ? pte_alloc_one+0x84/0x3d0 [ 1698.958205][T29097] ? __pte_alloc+0x6d/0x3f0 [ 1698.958247][T29097] ? do_anonymous_page+0x1092/0x2190 [ 1698.958276][T29097] ? __handle_mm_fault+0x1ecf/0x2bb0 [ 1698.958308][T29097] ? handle_mm_fault+0x3fe/0xad0 [ 1698.958338][T29097] ? __get_user_pages+0x54e/0x3590 [ 1698.958382][T29097] ? populate_vma_page_range+0x267/0x3f0 [ 1698.958434][T29097] ? __mm_populate+0x1d8/0x380 [ 1698.958483][T29097] ? vm_mmap_pgoff+0x37f/0x470 [ 1698.958526][T29097] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 1698.958571][T29097] ? __x64_sys_mmap+0x125/0x190 [ 1698.958611][T29097] ? do_syscall_64+0xcd/0xf80 [ 1698.958641][T29097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.958682][T29097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1698.958744][T29097] ? __lock_acquire+0x436/0x2890 [ 1698.958780][T29097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1698.958834][T29097] ? policy_nodemask+0xea/0x4e0 [ 1698.958888][T29097] alloc_pages_mpol+0x1fb/0x550 [ 1698.958943][T29097] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1698.958991][T29097] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1698.959033][T29097] ? find_held_lock+0x2b/0x80 [ 1698.959082][T29097] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1698.959136][T29097] vma_alloc_folio_noprof+0xed/0x1e0 [ 1698.959171][T29097] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1698.959209][T29097] ? find_held_lock+0x2b/0x80 [ 1698.959260][T29097] do_anonymous_page+0xc81/0x2190 [ 1698.959312][T29097] __handle_mm_fault+0x1ecf/0x2bb0 [ 1698.959355][T29097] ? __lock_acquire+0x436/0x2890 [ 1698.959389][T29097] ? __pfx___handle_mm_fault+0x10/0x10 [ 1698.959430][T29097] ? __lock_acquire+0x436/0x2890 [ 1698.959489][T29097] handle_mm_fault+0x3fe/0xad0 [ 1698.959533][T29097] __get_user_pages+0x54e/0x3590 [ 1698.959611][T29097] ? __pfx___get_user_pages+0x10/0x10 [ 1698.959676][T29097] populate_vma_page_range+0x267/0x3f0 [ 1698.959732][T29097] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1698.959785][T29097] ? __pfx_find_vma_intersection+0x10/0x10 [ 1698.959837][T29097] ? do_mmap+0x69c/0x1210 [ 1698.959890][T29097] __mm_populate+0x1d8/0x380 [ 1698.959944][T29097] ? __pfx___mm_populate+0x10/0x10 [ 1698.960000][T29097] ? up_write+0x282/0x4e0 [ 1698.960041][T29097] vm_mmap_pgoff+0x37f/0x470 [ 1698.960092][T29097] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1698.960149][T29097] ? __x64_sys_futex+0x1e0/0x4c0 [ 1698.960185][T29097] ? __x64_sys_futex+0x1e9/0x4c0 [ 1698.960229][T29097] ksys_mmap_pgoff+0x7d/0x5c0 [ 1698.960276][T29097] ? xfd_validate_state+0x61/0x180 [ 1698.960305][T29097] ? __pfx_do_writev+0x10/0x10 [ 1698.960369][T29097] __x64_sys_mmap+0x125/0x190 [ 1698.960408][T29097] do_syscall_64+0xcd/0xf80 [ 1698.960444][T29097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.960477][T29097] RIP: 0033:0x7f1d5878f7c9 [ 1698.960506][T29097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.960539][T29097] RSP: 002b:00007f1d59586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1698.960569][T29097] RAX: ffffffffffffffda RBX: 00007f1d589e5fa0 RCX: 00007f1d5878f7c9 [ 1698.960592][T29097] RDX: 00000000000000df RSI: 0000000000400408 RDI: 0000000000000000 [ 1698.960817][T29097] RBP: 00007f1d58813f91 R08: 0000000000000002 R09: 0000000000008000 [ 1698.960839][T29097] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1698.960859][T29097] R13: 00007f1d589e6038 R14: 00007f1d589e5fa0 R15: 00007ffd0f46bb78 [ 1698.960906][T29097] [ 1699.411989][T26337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.449475][T26337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.490036][T26337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.892755][T26340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.936851][T29104] random: crng reseeded on system resumption [ 1699.956086][T26340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.038729][T29104] hub 1-0:1.0: USB hub found [ 1700.054722][T29104] hub 1-0:1.0: 1 port detected [ 1700.173179][T26334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.194921][T26334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.523772][T29117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4632'. [ 1700.681385][T29117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4632'. [ 1700.939919][T16703] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1700.947915][T16703] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1701.634245][T29140] FAULT_INJECTION: forcing a failure. [ 1701.634245][T29140] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.647132][T29140] CPU: 1 UID: 0 PID: 29140 Comm: syz.0.4636 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1701.647183][T29140] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1701.647197][T29140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1701.647211][T29140] Call Trace: [ 1701.647219][T29140] [ 1701.647228][T29140] dump_stack_lvl+0x16c/0x1f0 [ 1701.647271][T29140] should_fail_ex+0x512/0x640 [ 1701.647299][T29140] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1701.647330][T29140] should_failslab+0xc2/0x120 [ 1701.647370][T29140] __kmalloc_cache_noprof+0x80/0x800 [ 1701.647401][T29140] ? append_filter_err+0xb8/0x610 [ 1701.647432][T29140] ? process_preds+0xc2f/0x1c50 [ 1701.647466][T29140] ? append_filter_err+0xb8/0x610 [ 1701.647496][T29140] append_filter_err+0xb8/0x610 [ 1701.647526][T29140] ? create_filter_start.constprop.0+0x56/0x300 [ 1701.647579][T29140] create_filter+0x1a6/0x210 [ 1701.647613][T29140] ? __pfx_create_filter+0x10/0x10 [ 1701.647649][T29140] ? find_held_lock+0x2b/0x80 [ 1701.647685][T29140] apply_event_filter+0x220/0x500 [ 1701.647719][T29140] ? __pfx_apply_event_filter+0x10/0x10 [ 1701.647765][T29140] ? __pfx_event_filter_write+0x10/0x10 [ 1701.647787][T29140] event_filter_write+0x16d/0x290 [ 1701.647812][T29140] vfs_writev+0x5df/0xde0 [ 1701.647855][T29140] ? __pfx_vfs_writev+0x10/0x10 [ 1701.647885][T29140] ? fdget_pos+0x2a2/0x370 [ 1701.647940][T29140] ? __fget_files+0x20e/0x3c0 [ 1701.647980][T29140] ? do_writev+0x132/0x340 [ 1701.648008][T29140] do_writev+0x132/0x340 [ 1701.648039][T29140] ? __pfx_do_writev+0x10/0x10 [ 1701.648087][T29140] do_syscall_64+0xcd/0xf80 [ 1701.648112][T29140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.648136][T29140] RIP: 0033:0x7f37b938f7c9 [ 1701.648155][T29140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.648177][T29140] RSP: 002b:00007f37ba1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1701.648199][T29140] RAX: ffffffffffffffda RBX: 00007f37b95e6090 RCX: 00007f37b938f7c9 [ 1701.648214][T29140] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1701.648229][T29140] RBP: 00007f37b9413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1701.648243][T29140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.648257][T29140] R13: 00007f37b95e6128 R14: 00007f37b95e6090 R15: 00007ffdc3df1e88 [ 1701.648290][T29140] [ 1703.270638][T29167] random: crng reseeded on system resumption [ 1703.313001][ T30] audit: type=1800 audit(4294971169.374:88): pid=29171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4642" name="version" dev="configfs" ino=145515 res=0 errno=0 [ 1703.993524][T29176] FAULT_INJECTION: forcing a failure. [ 1703.993524][T29176] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.101958][T29176] CPU: 0 UID: 0 PID: 29176 Comm: syz.0.4644 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1704.102010][T29176] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1704.102024][T29176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1704.102038][T29176] Call Trace: [ 1704.102046][T29176] [ 1704.102055][T29176] dump_stack_lvl+0x16c/0x1f0 [ 1704.102100][T29176] should_fail_ex+0x512/0x640 [ 1704.102127][T29176] ? __kmalloc_noprof+0xca/0x910 [ 1704.102167][T29176] should_failslab+0xc2/0x120 [ 1704.102206][T29176] __kmalloc_noprof+0xeb/0x910 [ 1704.102233][T29176] ? __register_sysctl_table+0xea2/0x1900 [ 1704.102272][T29176] ? __register_sysctl_table+0xea2/0x1900 [ 1704.102306][T29176] __register_sysctl_table+0xea2/0x1900 [ 1704.102348][T29176] ? __pfx___register_sysctl_table+0x10/0x10 [ 1704.102380][T29176] ? is_module_address+0x69/0xf0 [ 1704.102407][T29176] ? register_net_sysctl_sz+0x222/0x450 [ 1704.102435][T29176] ? __asan_memcpy+0x3c/0x60 [ 1704.102466][T29176] sctp_sysctl_net_register+0x15d/0x200 [ 1704.102507][T29176] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1704.102545][T29176] sctp_defaults_init+0x6d2/0xd90 [ 1704.102584][T29176] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1704.102621][T29176] ops_init+0x1e2/0x5f0 [ 1704.102658][T29176] setup_net+0x11d/0x3a0 [ 1704.102693][T29176] ? __pfx_setup_net+0x10/0x10 [ 1704.102725][T29176] ? lockdep_init_map_type+0x5c/0x270 [ 1704.102750][T29176] ? mutex_init_lockep+0x110/0x150 [ 1704.102781][T29176] copy_net_ns+0x351/0x7c0 [ 1704.102806][T29176] create_new_namespaces+0x3ea/0xab0 [ 1704.102846][T29176] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1704.102882][T29176] ksys_unshare+0x45b/0xa40 [ 1704.102903][T29176] ? __pfx_ksys_unshare+0x10/0x10 [ 1704.102942][T29176] ? xfd_validate_state+0x61/0x180 [ 1704.102972][T29176] __x64_sys_unshare+0x31/0x40 [ 1704.102992][T29176] do_syscall_64+0xcd/0xf80 [ 1704.103017][T29176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.103041][T29176] RIP: 0033:0x7f37b938f7c9 [ 1704.103060][T29176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.103084][T29176] RSP: 002b:00007f37ba1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1704.103106][T29176] RAX: ffffffffffffffda RBX: 00007f37b95e5fa0 RCX: 00007f37b938f7c9 [ 1704.103122][T29176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1704.103143][T29176] RBP: 00007f37b9413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1704.103158][T29176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.103172][T29176] R13: 00007f37b95e6038 R14: 00007f37b95e5fa0 R15: 00007ffdc3df1e88 [ 1704.103203][T29176] [ 1704.103213][T29176] sysctl could not get directory: /net/sctp -12 [ 1705.532942][T29186] openvswitch: netlink: ct_state flags aa1414ac unsupported [ 1706.168562][T29207] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4650'. [ 1706.182774][T29207] mac80211_hwsim hwsim40 : renamed from wlan0 (while UP) [ 1710.536983][T29278] ubi0: attaching mtd0 [ 1710.558498][T29278] ubi0: scanning is finished [ 1710.576160][T29278] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1711.226467][T29278] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1711.315249][T29291] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1711.439235][T29295] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1712.305854][T29298] NFSD: Failed to start, no listeners configured. [ 1713.973687][T29331] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1714.008796][T29331] mac80211_hwsim hwsim67 : renamed from wlan0 (while UP) [ 1714.152975][T29341] zswap: compressor not available [ 1718.104573][T29424] MTRR 0 not used [ 1720.505929][T29447] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 1722.075299][T29470] FAULT_INJECTION: forcing a failure. [ 1722.075299][T29470] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.174070][T29470] CPU: 1 UID: 0 PID: 29470 Comm: syz.1.4695 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1722.174138][T29470] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1722.174157][T29470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1722.174177][T29470] Call Trace: [ 1722.174189][T29470] [ 1722.174202][T29470] dump_stack_lvl+0x16c/0x1f0 [ 1722.174260][T29470] should_fail_ex+0x512/0x640 [ 1722.174297][T29470] ? fs_reclaim_acquire+0xae/0x150 [ 1722.174351][T29470] should_failslab+0xc2/0x120 [ 1722.174397][T29470] kmem_cache_alloc_noprof+0x83/0x770 [ 1722.174434][T29470] ? __pfx_map_id_range_down+0x10/0x10 [ 1722.174521][T29470] ? security_inode_alloc+0x3b/0x2b0 [ 1722.174568][T29470] ? security_inode_alloc+0x3b/0x2b0 [ 1722.174599][T29470] security_inode_alloc+0x3b/0x2b0 [ 1722.174633][T29470] inode_init_always_gfp+0xced/0x1040 [ 1722.174687][T29470] alloc_inode+0x86/0x240 [ 1722.174728][T29470] sock_alloc+0x40/0x280 [ 1722.174778][T29470] __sock_create+0xc2/0x8a0 [ 1722.174815][T29470] __sys_socket+0x14d/0x260 [ 1722.174846][T29470] ? __pfx___sys_socket+0x10/0x10 [ 1722.174880][T29470] ? do_user_addr_fault+0x843/0x1370 [ 1722.174923][T29470] __x64_sys_socket+0x72/0xb0 [ 1722.174952][T29470] ? lockdep_hardirqs_on+0x7c/0x110 [ 1722.175002][T29470] do_syscall_64+0xcd/0xf80 [ 1722.175032][T29470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.175060][T29470] RIP: 0033:0x7f9f41d916e7 [ 1722.175091][T29470] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.175121][T29470] RSP: 002b:00007f9f42c18fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1722.175150][T29470] RAX: ffffffffffffffda RBX: 00007f9f41fe5fa0 RCX: 00007f9f41d916e7 [ 1722.175171][T29470] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1722.175189][T29470] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1722.175208][T29470] R10: 0000200000000300 R11: 0000000000000286 R12: 0000000000000000 [ 1722.175229][T29470] R13: 00007f9f41fe6038 R14: 00007f9f41fe5fa0 R15: 00007ffe67fde258 [ 1722.175269][T29470] [ 1722.175430][T29470] socket: no more sockets [ 1723.238185][T29491] zswap: compressor not available [ 1723.923247][T29507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1724.001864][T29507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1724.173343][T29507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1724.180169][T29507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1724.445297][T29507] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1724.537793][T29507] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1725.922286][T10977] Bluetooth: hci1: command 0x0c1a tx timeout [ 1726.001842][T10977] Bluetooth: hci0: command 0x0c1a tx timeout [ 1726.242127][T16703] Bluetooth: hci3: command 0x0c1a tx timeout [ 1726.254558][T10977] Bluetooth: hci2: command 0x0c1a tx timeout [ 1728.256790][T29557] FAULT_INJECTION: forcing a failure. [ 1728.256790][T29557] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.309891][T10977] Bluetooth: hci3: command 0x0c1a tx timeout [ 1728.407808][T29557] CPU: 0 UID: 0 PID: 29557 Comm: syz.0.4707 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1728.407881][T29557] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1728.407900][T29557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1728.407920][T29557] Call Trace: [ 1728.407931][T29557] [ 1728.407945][T29557] dump_stack_lvl+0x16c/0x1f0 [ 1728.408005][T29557] should_fail_ex+0x512/0x640 [ 1728.408044][T29557] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1728.408091][T29557] should_failslab+0xc2/0x120 [ 1728.408143][T29557] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1728.408187][T29557] ? __d_alloc+0x35/0xa80 [ 1728.408223][T29557] ? __d_alloc+0x35/0xa80 [ 1728.408249][T29557] __d_alloc+0x35/0xa80 [ 1728.408277][T29557] ? stack_trace_save+0x8e/0xc0 [ 1728.408332][T29557] d_alloc_parallel+0x111/0x1510 [ 1728.408392][T29557] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1728.408440][T29557] ? lockdep_init_map_type+0x5c/0x270 [ 1728.408476][T29557] ? lockdep_init_map_type+0x5c/0x270 [ 1728.408519][T29557] __lookup_slow+0x193/0x460 [ 1728.408558][T29557] ? __pfx___lookup_slow+0x10/0x10 [ 1728.408618][T29557] ? __d_lookup+0x266/0x4a0 [ 1728.408677][T29557] lookup_slow+0x50/0x70 [ 1728.408717][T29557] link_path_walk+0x12d8/0x1c70 [ 1728.408778][T29557] path_openat+0x1bd/0x3140 [ 1728.408827][T29557] ? do_syscall_64+0xcd/0xf80 [ 1728.408856][T29557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.408904][T29557] ? __pfx_path_openat+0x10/0x10 [ 1728.408972][T29557] do_filp_open+0x20b/0x470 [ 1728.409024][T29557] ? __pfx_do_filp_open+0x10/0x10 [ 1728.409101][T29557] ? alloc_fd+0x471/0x7d0 [ 1728.409159][T29557] do_sys_openat2+0x121/0x290 [ 1728.409201][T29557] ? __pfx_do_sys_openat2+0x10/0x10 [ 1728.409252][T29557] __x64_sys_openat+0x174/0x210 [ 1728.409291][T29557] ? __pfx___x64_sys_openat+0x10/0x10 [ 1728.409347][T29557] do_syscall_64+0xcd/0xf80 [ 1728.409382][T29557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.409416][T29557] RIP: 0033:0x7f37b938f7c9 [ 1728.409445][T29557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.409478][T29557] RSP: 002b:00007f37ba1b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1728.409510][T29557] RAX: ffffffffffffffda RBX: 00007f37b95e6180 RCX: 00007f37b938f7c9 [ 1728.409531][T29557] RDX: 0000000000101042 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1728.409553][T29557] RBP: 00007f37b9413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1728.409574][T29557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.409594][T29557] R13: 00007f37b95e6218 R14: 00007f37b95e6180 R15: 00007ffdc3df1e88 [ 1728.409639][T29557] [ 1729.641126][T29581] futex_wake_op: syz.5.4713 tries to shift op by -2048; fix this program [ 1729.661194][T29581] futex_wake_op: syz.5.4713 tries to shift op by -2048; fix this program [ 1729.698628][T29581] 0x000000000001-0x000000020000 : "" [ 1729.749450][T29581] ftl_cs: FTL header corrupt! [ 1729.812962][T29583] udevd[29583]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd14ro': Bad message [ 1729.929251][T29582] futex_wake_op: syz.5.4713 tries to shift op by -2048; fix this program [ 1730.128180][T29595] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 1730.384979][T10977] Bluetooth: hci3: command 0x0c1a tx timeout [ 1730.621964][T22152] bridge_slave_1: left allmulticast mode [ 1730.665089][T22152] bridge_slave_1: left promiscuous mode [ 1730.689299][T22152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.750237][T22152] bridge_slave_0: left allmulticast mode [ 1730.758615][T22152] bridge_slave_0: left promiscuous mode [ 1730.765090][T22152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.800034][T29603] udevd[29603]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 1731.655411][T29615] zswap: compressor not available [ 1731.721906][T29614] vhci_hcd vhci_hcd.2: invalid port number 252 [ 1731.729449][T29614] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 1732.655512][T29629] futex_wake_op: syz.5.4722 tries to shift op by -2048; fix this program [ 1732.733503][T29629] futex_wake_op: syz.5.4722 tries to shift op by -2048; fix this program [ 1732.752872][T22152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.783952][T29629] ubi1: attaching mtd0 [ 1732.789744][T29629] ubi1: scanning is finished [ 1732.803069][T29629] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 1732.834043][T22152] bond0 (unregistering): Released all slaves [ 1732.925277][T29632] zswap: compressor 000 not available [ 1733.117508][T29629] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1733.209581][T22152] ovs_: left promiscuous mode [ 1733.317751][T22152] HfR: left promiscuous mode [ 1733.369761][T29641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1733.425818][T29641] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1733.505060][T22152] tipc: Left network mode [ 1733.969105][T29648] FAULT_INJECTION: forcing a failure. [ 1733.969105][T29648] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.018635][T29648] CPU: 1 UID: 0 PID: 29648 Comm: syz.1.4728 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1734.018715][T29648] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1734.018737][T29648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1734.018760][T29648] Call Trace: [ 1734.018773][T29648] [ 1734.018788][T29648] dump_stack_lvl+0x16c/0x1f0 [ 1734.018853][T29648] should_fail_ex+0x512/0x640 [ 1734.018896][T29648] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1734.018945][T29648] should_failslab+0xc2/0x120 [ 1734.019004][T29648] kmem_cache_alloc_noprof+0x83/0x770 [ 1734.019052][T29648] ? alloc_empty_file+0x55/0x1e0 [ 1734.019101][T29648] ? alloc_empty_file+0x55/0x1e0 [ 1734.019139][T29648] alloc_empty_file+0x55/0x1e0 [ 1734.019193][T29648] alloc_file_pseudo+0x13a/0x230 [ 1734.019244][T29648] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1734.019301][T29648] __shmem_file_setup+0x1a8/0x350 [ 1734.019369][T29648] shmem_zero_setup+0x93/0x1b0 [ 1734.019419][T29648] __mmap_region+0x2277/0x2a00 [ 1734.019470][T29648] ? __pfx___mmap_region+0x10/0x10 [ 1734.019528][T29648] ? trace_ignore_this_task+0xbc/0x100 [ 1734.019607][T29648] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1734.019664][T29648] ? rcu_is_watching+0x12/0xc0 [ 1734.019805][T29648] ? rcu_is_watching+0x12/0xc0 [ 1734.019868][T29648] mmap_region+0x1ab/0x3f0 [ 1734.019914][T29648] ? __get_unmapped_area+0x267/0x3f0 [ 1734.019983][T29648] do_mmap+0xa3e/0x1210 [ 1734.020043][T29648] ? __pfx_do_mmap+0x10/0x10 [ 1734.020097][T29648] ? __pfx_down_write_killable+0x10/0x10 [ 1734.020149][T29648] vm_mmap_pgoff+0x29e/0x470 [ 1734.020227][T29648] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1734.020293][T29648] ? __x64_sys_futex+0x1e0/0x4c0 [ 1734.020335][T29648] ? __x64_sys_futex+0x1e9/0x4c0 [ 1734.020385][T29648] ksys_mmap_pgoff+0x7d/0x5c0 [ 1734.020439][T29648] ? xfd_validate_state+0x61/0x180 [ 1734.020473][T29648] ? __pfx_ksys_write+0x10/0x10 [ 1734.020531][T29648] __x64_sys_mmap+0x125/0x190 [ 1734.020574][T29648] do_syscall_64+0xcd/0xf80 [ 1734.020613][T29648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.020650][T29648] RIP: 0033:0x7f9f41d8f7c9 [ 1734.020682][T29648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.020720][T29648] RSP: 002b:00007f9f42c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1734.020756][T29648] RAX: ffffffffffffffda RBX: 00007f9f41fe5fa0 RCX: 00007f9f41d8f7c9 [ 1734.020781][T29648] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1734.020804][T29648] RBP: 00007f9f41e13f91 R08: ffffffffffffffff R09: 0000000000008000 [ 1734.020828][T29648] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1734.020851][T29648] R13: 00007f9f41fe6038 R14: 00007f9f41fe5fa0 R15: 00007ffe67fde258 [ 1734.020901][T29648] [ 1735.658760][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.671796][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.852640][T22152] hsr_slave_0: left promiscuous mode [ 1735.861314][T22152] hsr_slave_1: left promiscuous mode [ 1735.869178][T22152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.884556][T22152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.952203][T22152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.980155][T22152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.035006][T22152] veth1_macvtap: left promiscuous mode [ 1736.047374][T22152] veth0_macvtap: left promiscuous mode [ 1736.053942][T22152] veth1_vlan: left promiscuous mode [ 1736.061835][T22152] veth0_vlan: left promiscuous mode [ 1737.047605][T29679] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1737.207614][T29684] futex_wake_op: syz.0.4734 tries to shift op by -2048; fix this program [ 1737.226879][T29684] futex_wake_op: syz.0.4734 tries to shift op by -2048; fix this program [ 1737.251104][T29684] ubi1: attaching mtd0 [ 1737.260627][T29684] ubi1: scanning is finished [ 1737.266993][T29684] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 1737.737732][T29684] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1738.567270][T22152] team0 (unregistering): Port device team_slave_1 removed [ 1738.700118][T22152] team0 (unregistering): Port device team_slave_0 removed [ 1738.799831][T29701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4739'. [ 1739.762590][T29700] HfR: entered promiscuous mode [ 1739.795083][T29701] HfR: left promiscuous mode [ 1740.868712][T29722] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1741.975587][T16703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1741.995091][T16703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1742.004798][T16703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1742.013966][T16703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1742.033510][T16703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1743.186934][T29738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.353257][T29758] FAULT_INJECTION: forcing a failure. [ 1743.353257][T29758] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1743.432052][T29758] CPU: 1 UID: 0 PID: 29758 Comm: syz.2.4750 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1743.432127][T29758] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1743.432145][T29758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1743.432165][T29758] Call Trace: [ 1743.432177][T29758] [ 1743.432191][T29758] dump_stack_lvl+0x16c/0x1f0 [ 1743.432251][T29758] should_fail_ex+0x512/0x640 [ 1743.432297][T29758] get_futex_key+0x1d0/0x15f0 [ 1743.432337][T29758] ? __pfx_get_futex_key+0x10/0x10 [ 1743.432388][T29758] futex_wake+0xea/0x530 [ 1743.432430][T29758] ? lockdep_init_map_type+0x5c/0x270 [ 1743.432473][T29758] ? __pfx_futex_wake+0x10/0x10 [ 1743.432522][T29758] ? percpu_counter_add_batch+0xca/0x200 [ 1743.432555][T29758] ? errseq_sample+0x53/0x70 [ 1743.432599][T29758] ? file_init_path+0x4fe/0x760 [ 1743.432641][T29758] do_futex+0x1e3/0x350 [ 1743.432678][T29758] ? __pfx_do_futex+0x10/0x10 [ 1743.432716][T29758] ? fd_install+0x223/0x570 [ 1743.432770][T29758] __x64_sys_futex+0x1e0/0x4c0 [ 1743.432807][T29758] ? __sys_socket+0xac/0x260 [ 1743.432841][T29758] ? __pfx___x64_sys_futex+0x10/0x10 [ 1743.432877][T29758] ? xfd_validate_state+0x61/0x180 [ 1743.432917][T29758] do_syscall_64+0xcd/0xf80 [ 1743.432949][T29758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.432981][T29758] RIP: 0033:0x7f1d5878f7c9 [ 1743.433009][T29758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.433042][T29758] RSP: 002b:00007f1d595650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1743.433072][T29758] RAX: ffffffffffffffda RBX: 00007f1d589e6098 RCX: 00007f1d5878f7c9 [ 1743.433094][T29758] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1d589e609c [ 1743.433115][T29758] RBP: 00007f1d589e6090 R08: 00007f1d59587000 R09: 0000000000000000 [ 1743.433136][T29758] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1743.433156][T29758] R13: 00007f1d589e6128 R14: 00007ffd0f46ba90 R15: 00007ffd0f46bb78 [ 1743.433199][T29758] [ 1743.797576][T29738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.887368][T29738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.947388][T29731] chnl_net:caif_netlink_parms(): no params data found [ 1744.096988][T22152] hsr0: left allmulticast mode [ 1744.107914][T22152] hsr_slave_0: left allmulticast mode [ 1744.115060][T22152] hsr_slave_1: left allmulticast mode [ 1744.123700][T22152] hsr0: left promiscuous mode [ 1744.134053][T22152] bridge0: port 3(hsr0) entered disabled state [ 1744.152865][T16703] Bluetooth: hci4: command tx timeout [ 1744.168661][T22152] bridge_slave_1: left allmulticast mode [ 1744.174385][T22152] bridge_slave_1: left promiscuous mode [ 1744.180692][T22152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.210987][T22152] bridge_slave_0: left allmulticast mode [ 1744.216773][T22152] bridge_slave_0: left promiscuous mode [ 1744.226944][T22152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.247881][T29768] openvswitch: netlink: IP tunnel dst address not specified [ 1744.260660][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1744.328365][T29770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1744.907254][T22152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.936812][T22152] bond0 (unregistering): Released all slaves [ 1745.095280][T29731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.104888][T29731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.112253][T29731] bridge_slave_0: entered allmulticast mode [ 1745.136247][T29731] bridge_slave_0: entered promiscuous mode [ 1745.166161][T29731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.202270][T29731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.209582][T29731] bridge_slave_1: entered allmulticast mode [ 1745.230032][T29731] bridge_slave_1: entered promiscuous mode [ 1745.375921][T29731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.515144][T29731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.773889][T29731] team0: Port device team_slave_0 added [ 1745.852695][T29731] team0: Port device team_slave_1 added [ 1745.979980][T29731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1745.997338][T29731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.040261][T29731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.094594][T29731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.105301][T29731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.136923][T29731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.218199][T16703] Bluetooth: hci4: command tx timeout [ 1746.273265][T22152] hsr_slave_0: left promiscuous mode [ 1746.279643][T22152] hsr_slave_1: left promiscuous mode [ 1746.293361][T22152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1746.355460][T22152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1746.370464][T22152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1746.389330][T22152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1746.439376][T22152] veth1_macvtap: left promiscuous mode [ 1746.455674][T22152] veth0_macvtap: left promiscuous mode [ 1746.461876][T22152] veth1_vlan: left promiscuous mode [ 1746.472457][T22152] veth0_vlan: left promiscuous mode [ 1746.509662][T29795] nfs: Unknown parameter 'nl802154' [ 1746.572701][T29795] ptp ptp0: only physical clock in use now [ 1747.819987][T22152] team0 (unregistering): Port device team_slave_1 removed [ 1748.286874][T16703] Bluetooth: hci4: command tx timeout [ 1748.978003][T29731] hsr_slave_0: entered promiscuous mode [ 1749.032445][T29731] hsr_slave_1: entered promiscuous mode [ 1749.042557][T29731] debugfs: 'hsr0' already exists in 'hsr' [ 1749.048498][T29731] Cannot create hsr debugfs directory [ 1749.498402][T29810] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1749.552664][T29813] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1750.172947][T29731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1750.188261][T29731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1750.220431][T29731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1750.261230][T29731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1750.358924][T16703] Bluetooth: hci4: command tx timeout [ 1750.521263][T29838] FAULT_INJECTION: forcing a failure. [ 1750.521263][T29838] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.534629][T29838] CPU: 1 UID: 0 PID: 29838 Comm: syz.2.4767 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1750.534699][T29838] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1750.534718][T29838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1750.534748][T29838] Call Trace: [ 1750.534759][T29838] [ 1750.534773][T29838] dump_stack_lvl+0x16c/0x1f0 [ 1750.534832][T29838] should_fail_ex+0x512/0x640 [ 1750.534876][T29838] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1750.534920][T29838] should_failslab+0xc2/0x120 [ 1750.534971][T29838] __kmalloc_cache_noprof+0x80/0x800 [ 1750.535011][T29838] ? ring_buffer_read_start+0x149/0x500 [ 1750.535062][T29838] ? ring_buffer_read_start+0x149/0x500 [ 1750.535105][T29838] ring_buffer_read_start+0x149/0x500 [ 1750.535153][T29838] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1750.535196][T29838] ? lockdep_init_map_type+0x5c/0x270 [ 1750.535231][T29838] ? ring_buffer_overruns+0x195/0x1f0 [ 1750.535272][T29838] tracing_open+0x93f/0xe10 [ 1750.535318][T29838] do_dentry_open+0x748/0x1590 [ 1750.535364][T29838] ? __pfx_tracing_open+0x10/0x10 [ 1750.535414][T29838] vfs_open+0x82/0x3f0 [ 1750.535456][T29838] path_openat+0x2078/0x3140 [ 1750.535521][T29838] ? __pfx_path_openat+0x10/0x10 [ 1750.535586][T29838] do_filp_open+0x20b/0x470 [ 1750.535637][T29838] ? __pfx_do_filp_open+0x10/0x10 [ 1750.535719][T29838] ? alloc_fd+0x471/0x7d0 [ 1750.535789][T29838] do_sys_openat2+0x121/0x290 [ 1750.535826][T29838] ? __pfx_do_sys_openat2+0x10/0x10 [ 1750.535882][T29838] __x64_sys_openat+0x174/0x210 [ 1750.535922][T29838] ? __pfx___x64_sys_openat+0x10/0x10 [ 1750.535976][T29838] do_syscall_64+0xcd/0xf80 [ 1750.536011][T29838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.536044][T29838] RIP: 0033:0x7f1d5878f7c9 [ 1750.536073][T29838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1750.536106][T29838] RSP: 002b:00007f1d59565038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1750.536137][T29838] RAX: ffffffffffffffda RBX: 00007f1d589e6090 RCX: 00007f1d5878f7c9 [ 1750.536157][T29838] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1750.536180][T29838] RBP: 00007f1d58813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1750.536201][T29838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1750.536221][T29838] R13: 00007f1d589e6128 R14: 00007f1d589e6090 R15: 00007ffd0f46bb78 [ 1750.536266][T29838] [ 1752.398241][T29731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.642408][T29731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.765352][T22162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.772672][T22162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.790419][T22162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.797703][T22162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.609825][T29867] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4771'. [ 1753.674852][T29731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.759218][T29731] veth0_vlan: entered promiscuous mode [ 1753.838881][T29731] veth1_vlan: entered promiscuous mode [ 1753.959449][T29731] veth0_macvtap: entered promiscuous mode [ 1754.027699][T29731] veth1_macvtap: entered promiscuous mode [ 1754.073952][T29731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.103507][T29731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.146896][T22148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.416147][T22148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.451123][T22148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.461079][T22148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.338674][T16740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.418817][T16740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.720326][T26333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.758318][T26333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.153634][T29903] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4746'. [ 1761.387056][T30007] udevd[30007]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 1761.488175][T30006] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4795'. [ 1761.527729][T30006] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4795'. [ 1762.168266][T30022] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1762.363142][T30024] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1762.373071][T30026] netlink: 290 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1765.388032][T30131] FAULT_INJECTION: forcing a failure. [ 1765.388032][T30131] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.437865][T30131] CPU: 1 UID: 0 PID: 30131 Comm: syz.0.4810 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1765.437930][T30131] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1765.437948][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1765.437967][T30131] Call Trace: [ 1765.437977][T30131] [ 1765.437989][T30131] dump_stack_lvl+0x16c/0x1f0 [ 1765.438045][T30131] should_fail_ex+0x512/0x640 [ 1765.438082][T30131] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1765.438124][T30131] should_failslab+0xc2/0x120 [ 1765.438177][T30131] kmem_cache_alloc_noprof+0x83/0x770 [ 1765.438218][T30131] ? __pmd_alloc+0xbf/0x9c0 [ 1765.438275][T30131] ? __pmd_alloc+0xbf/0x9c0 [ 1765.438323][T30131] __pmd_alloc+0xbf/0x9c0 [ 1765.438375][T30131] __handle_mm_fault+0xbeb/0x2bb0 [ 1765.438419][T30131] ? __pfx___handle_mm_fault+0x10/0x10 [ 1765.438474][T30131] ? find_vma+0xbf/0x140 [ 1765.438516][T30131] ? __pfx_find_vma+0x10/0x10 [ 1765.438575][T30131] handle_mm_fault+0x3fe/0xad0 [ 1765.438617][T30131] do_user_addr_fault+0x7a6/0x1370 [ 1765.438661][T30131] ? rcu_is_watching+0x12/0xc0 [ 1765.438710][T30131] exc_page_fault+0x64/0xc0 [ 1765.438762][T30131] asm_exc_page_fault+0x26/0x30 [ 1765.438794][T30131] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1765.438835][T30131] Code: c4 10 e9 54 81 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 1765.438865][T30131] RSP: 0018:ffffc900045afce8 EFLAGS: 00050206 [ 1765.438892][T30131] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000003 [ 1765.438910][T30131] RDX: ffffed1009d9267c RSI: 0000000000000000 RDI: ffff88804ec933e0 [ 1765.438931][T30131] RBP: 0000000000000003 R08: 0000000000000001 R09: ffffed1009d9267c [ 1765.438951][T30131] R10: 0000000000000002 R11: ffff88807c844830 R12: 0000000000000000 [ 1765.438971][T30131] R13: ffff88804ec933e0 R14: 0000000000000000 R15: 0000000000000003 [ 1765.439014][T30131] _copy_from_user+0x98/0xd0 [ 1765.439054][T30131] sctp_setsockopt+0x206e/0xb8c0 [ 1765.439094][T30131] ? ksys_write+0x190/0x250 [ 1765.439147][T30131] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1765.439187][T30131] ? find_held_lock+0x2b/0x80 [ 1765.439232][T30131] ? aa_sock_opt_perm+0xfd/0x1b0 [ 1765.439283][T30131] ? sock_common_setsockopt+0x2e/0xf0 [ 1765.439335][T30131] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1765.439390][T30131] do_sock_setsockopt+0xf3/0x1d0 [ 1765.439448][T30131] __sys_setsockopt+0x120/0x1a0 [ 1765.439499][T30131] __x64_sys_setsockopt+0xbd/0x160 [ 1765.439550][T30131] ? do_syscall_64+0x91/0xf80 [ 1765.439580][T30131] ? lockdep_hardirqs_on+0x7c/0x110 [ 1765.439632][T30131] do_syscall_64+0xcd/0xf80 [ 1765.439665][T30131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.439698][T30131] RIP: 0033:0x7faba458f7c9 [ 1765.439725][T30131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1765.439756][T30131] RSP: 002b:00007faba5392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1765.439786][T30131] RAX: ffffffffffffffda RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1765.439808][T30131] RDX: 0000000000000076 RSI: 0000010000000084 RDI: 0000000000000003 [ 1765.439827][T30131] RBP: 00007faba5392090 R08: 0000000000000003 R09: 0000000000000000 [ 1765.439847][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.439866][T30131] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1765.439911][T30131] [ 1766.062945][T30147] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 1766.428519][T30137] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1767.652052][T30143] kexec: Could not allocate control_code_buffer [ 1770.012771][T30206] random: crng reseeded on system resumption [ 1770.056497][T30211] udevd[30211]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 1770.649226][T30222] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4833'. [ 1773.301135][T30260] blktrace: Concurrent blktraces are not allowed on loop2 [ 1774.344027][T30273] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4841'. [ 1776.067966][T30294] random: crng reseeded on system resumption [ 1776.346431][T30299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 1776.431254][T30299] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1776.506321][T30299] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1776.506461][T30299] page_type: f5(slab) [ 1776.506504][T30299] raw: 00fff00000000040 ffff888140407640 0000000000000000 dead000000000001 [ 1776.506556][T30299] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 1776.506599][T30299] head: 00fff00000000040 ffff888140407640 0000000000000000 dead000000000001 [ 1776.506633][T30299] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 1776.506667][T30299] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 1776.506700][T30299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1776.506722][T30299] page dumped because: unmovable page [ 1776.506739][T30299] page_owner tracks the page as allocated [ 1776.506820][T30299] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16479, tgid 16479 (syz-executor), ts 892424091275, free_ts 892081532603 [ 1776.506884][T30299] post_alloc_hook+0x1af/0x220 [ 1776.506926][T30299] get_page_from_freelist+0xd0b/0x31a0 [ 1776.506967][T30299] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1776.507009][T30299] alloc_pages_mpol+0x1fb/0x550 [ 1776.507059][T30299] new_slab+0x2c3/0x430 [ 1776.507091][T30299] ___slab_alloc+0xe18/0x1c90 [ 1776.507126][T30299] __slab_alloc.constprop.0+0x63/0x110 [ 1776.507162][T30299] kmem_cache_alloc_noprof+0x44d/0x770 [ 1776.507202][T30299] getname_flags.part.0+0x4c/0x550 [ 1776.507238][T30299] getname_flags+0x93/0xf0 [ 1776.507280][T30299] user_path_at+0x24/0x60 [ 1776.507323][T30299] __x64_sys_chdir+0xbe/0x270 [ 1776.507354][T30299] do_syscall_64+0xcd/0xf80 [ 1776.507385][T30299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.507419][T30299] page last free pid 14186 tgid 14186 stack trace: [ 1776.507440][T30299] __free_frozen_pages+0x7df/0x1170 [ 1776.507474][T30299] __put_partials+0x130/0x170 [ 1776.507510][T30299] qlist_free_all+0x4c/0xf0 [ 1776.507552][T30299] kasan_quarantine_reduce+0x195/0x1e0 [ 1776.507604][T30299] __kasan_slab_alloc+0x69/0x90 [ 1776.507653][T30299] kmem_cache_alloc_noprof+0x25e/0x770 [ 1776.507693][T30299] mas_alloc_nodes+0x27b/0x380 [ 1776.507738][T30299] mas_preallocate+0x5e3/0xee0 [ 1776.507769][T30299] commit_merge+0x29b/0xfb0 [ 1776.507804][T30299] vma_modify+0x9cd/0x2360 [ 1776.507838][T30299] vma_modify_flags+0x24c/0x3c0 [ 1776.507876][T30299] mprotect_fixup+0x3a1/0xb80 [ 1776.507910][T30299] do_mprotect_pkey+0x9bc/0xd40 [ 1776.507945][T30299] __x64_sys_mprotect+0x78/0xc0 [ 1776.507979][T30299] do_syscall_64+0xcd/0xf80 [ 1776.508009][T30299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.450106][T30311] zswap: compressor not available [ 1778.531330][T30326] overlayfs: "check_copy_up" module option is obsolete [ 1782.898094][T30388] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4862'. [ 1784.024920][T30379] zswap: compressor not available [ 1786.598040][T30470] udevd[30470]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 1787.310294][T30485] zswap: compressor 000 not available [ 1788.120003][T30501] overlayfs: "check_copy_up" module option is obsolete [ 1788.339960][T30513] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1788.545488][T30516] futex_wake_op: syz.1.4887 tries to shift op by -2048; fix this program [ 1788.558948][T30516] futex_wake_op: syz.1.4887 tries to shift op by -2048; fix this program [ 1788.588593][T30516] 0x000000000001-0x000000020000 : "" [ 1788.685230][T30516] ftl_cs: FTL header corrupt! [ 1788.782671][T30519] udevd[30519]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd15ro': Bad message [ 1789.048136][T10977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1789.068653][T10977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1789.084038][T10977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1789.111200][T10977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1789.123663][T10977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1790.589029][T30521] chnl_net:caif_netlink_parms(): no params data found [ 1791.221440][T30521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.231246][T30521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.240766][T30521] bridge_slave_0: entered allmulticast mode [ 1791.251161][T30521] bridge_slave_0: entered promiscuous mode [ 1791.278665][T10977] Bluetooth: hci1: command tx timeout [ 1791.309213][T30521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.318171][T30521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.325983][T30521] bridge_slave_1: entered allmulticast mode [ 1791.335737][T30521] bridge_slave_1: entered promiscuous mode [ 1791.399500][T30521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1791.420723][T30521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1791.666167][T30521] team0: Port device team_slave_0 added [ 1791.689735][T30521] team0: Port device team_slave_1 added [ 1791.709055][T30543] synth uevent: /module/button: unknown uevent action string [ 1791.736423][T30544] synth uevent: /module/button: unknown uevent action string [ 1791.788780][T30543] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1791.831166][T30521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.839480][T30521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1791.885948][T30521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.921588][T30521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.930381][T30521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1792.007135][T30521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1792.060812][T30543] PCI: Can't parse resource_alignment parameter: B [ 1792.251561][T30521] hsr_slave_0: entered promiscuous mode [ 1792.286338][T30521] hsr_slave_1: entered promiscuous mode [ 1792.325413][T30521] debugfs: 'hsr0' already exists in 'hsr' [ 1792.331620][T30521] Cannot create hsr debugfs directory [ 1792.703608][T30557] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1793.331754][T10977] Bluetooth: hci1: command tx timeout [ 1793.592621][T30521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.002693][T30521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.404349][T30521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.697271][T30521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.147590][T30521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1795.190197][T30521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1795.227088][T30521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1795.269644][T30521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1795.401334][T10977] Bluetooth: hci1: command tx timeout [ 1795.651625][T30521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.733614][T30521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.762873][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.770156][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.874146][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.881433][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.019711][T30584] FAULT_INJECTION: forcing a failure. [ 1796.019711][T30584] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.075932][T30584] CPU: 0 UID: 0 PID: 30584 Comm: syz.0.4901 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1796.076002][T30584] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1796.076017][T30584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1796.076031][T30584] Call Trace: [ 1796.076040][T30584] [ 1796.076049][T30584] dump_stack_lvl+0x16c/0x1f0 [ 1796.076093][T30584] should_fail_ex+0x512/0x640 [ 1796.076120][T30584] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1796.076153][T30584] should_failslab+0xc2/0x120 [ 1796.076189][T30584] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1796.076220][T30584] ? __d_alloc+0x35/0xa80 [ 1796.076246][T30584] ? __d_alloc+0x35/0xa80 [ 1796.076264][T30584] __d_alloc+0x35/0xa80 [ 1796.076282][T30584] ? stack_depot_save_flags+0x29/0x9b0 [ 1796.076309][T30584] ? stack_trace_save+0x8e/0xc0 [ 1796.076349][T30584] d_alloc_parallel+0x111/0x1510 [ 1796.076378][T30584] ? kasan_save_stack+0x33/0x60 [ 1796.076409][T30584] ? kasan_save_track+0x14/0x30 [ 1796.076440][T30584] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1796.076467][T30584] ? security_file_alloc+0x34/0x2b0 [ 1796.076497][T30584] ? init_file+0x93/0x4c0 [ 1796.076519][T30584] ? path_openat+0xde/0x3140 [ 1796.076563][T30584] ? register_lock_class+0x41/0x4b0 [ 1796.076588][T30584] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1796.076621][T30584] ? lockdep_init_map_type+0x5c/0x270 [ 1796.076646][T30584] ? lockdep_init_map_type+0x5c/0x270 [ 1796.076675][T30584] __lookup_slow+0x193/0x460 [ 1796.076702][T30584] ? __pfx___lookup_slow+0x10/0x10 [ 1796.076753][T30584] lookup_slow+0x50/0x70 [ 1796.076780][T30584] path_lookupat+0x5e9/0xc40 [ 1796.076817][T30584] path_openat+0x1884/0x3140 [ 1796.076851][T30584] ? do_syscall_64+0xcd/0xf80 [ 1796.076871][T30584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.076904][T30584] ? __pfx_path_openat+0x10/0x10 [ 1796.076944][T30584] ? __lock_acquire+0x436/0x2890 [ 1796.076969][T30584] do_filp_open+0x20b/0x470 [ 1796.077005][T30584] ? __pfx_do_filp_open+0x10/0x10 [ 1796.077062][T30584] ? _raw_spin_unlock+0x28/0x50 [ 1796.077095][T30584] ? alloc_fd+0x471/0x7d0 [ 1796.077137][T30584] do_sys_openat2+0x121/0x290 [ 1796.077163][T30584] ? __pfx_do_sys_openat2+0x10/0x10 [ 1796.077201][T30584] __x64_sys_open+0x153/0x1e0 [ 1796.077228][T30584] ? __pfx___x64_sys_open+0x10/0x10 [ 1796.077298][T30584] ? rcu_is_watching+0x12/0xc0 [ 1796.077345][T30584] do_syscall_64+0xcd/0xf80 [ 1796.077378][T30584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.077410][T30584] RIP: 0033:0x7faba458f7c9 [ 1796.077438][T30584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.077470][T30584] RSP: 002b:00007faba5392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1796.077498][T30584] RAX: ffffffffffffffda RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1796.077520][T30584] RDX: 0000000000000502 RSI: 0000000000591182 RDI: 00002000000000c0 [ 1796.077548][T30584] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1796.077568][T30584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.077589][T30584] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1796.077632][T30584] [ 1796.767463][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.776798][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.917156][T30521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.086932][T30521] veth0_vlan: entered promiscuous mode [ 1797.173122][T30521] veth1_vlan: entered promiscuous mode [ 1797.270894][T30521] veth0_macvtap: entered promiscuous mode [ 1797.299725][T30521] veth1_macvtap: entered promiscuous mode [ 1797.353460][T30521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.412464][T30521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1797.472057][T10977] Bluetooth: hci1: command tx timeout [ 1797.488687][T26333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.504990][T26333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.522148][T26333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.536870][T26333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.181173][T16740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.219607][T16740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.532060][T10743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.559179][T10743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.865729][T30602] device-mapper: ioctl: Invalid ioctl structure: uuid z, name , dev 3000000000 [ 1802.102670][T30645] FAULT_INJECTION: forcing a failure. [ 1802.102670][T30645] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.123925][T30645] CPU: 0 UID: 0 PID: 30645 Comm: syz.1.4910 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1802.124005][T30645] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1802.124025][T30645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1802.124044][T30645] Call Trace: [ 1802.124055][T30645] [ 1802.124068][T30645] dump_stack_lvl+0x16c/0x1f0 [ 1802.124126][T30645] should_fail_ex+0x512/0x640 [ 1802.124163][T30645] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1802.124211][T30645] should_failslab+0xc2/0x120 [ 1802.124259][T30645] __kmalloc_cache_noprof+0x80/0x800 [ 1802.124298][T30645] ? snd_seq_port_connect+0x61/0x580 [ 1802.124355][T30645] ? snd_seq_port_connect+0x61/0x580 [ 1802.124406][T30645] snd_seq_port_connect+0x61/0x580 [ 1802.124457][T30645] ? _raw_read_unlock+0x28/0x50 [ 1802.124505][T30645] ? check_subscription_permission.isra.0+0xf5/0x240 [ 1802.124565][T30645] snd_seq_ioctl_subscribe_port+0x209/0x4b0 [ 1802.124610][T30645] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1802.124647][T30645] ? do_raw_spin_lock+0x12c/0x2b0 [ 1802.124698][T30645] call_seq_client_ctl+0xa3/0x130 [ 1802.124752][T30645] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 1802.124807][T30645] snd_seq_oss_midi_open+0x489/0x6a0 [ 1802.124867][T30645] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1802.124907][T30645] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 1802.124960][T30645] ? __mutex_lock+0x27b/0x1ca0 [ 1802.125002][T30645] snd_seq_oss_synth_reset+0x437/0x900 [ 1802.125044][T30645] ? __pfx___mutex_lock+0x10/0x10 [ 1802.125077][T30645] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 1802.125121][T30645] ? __pfx___fsnotify_parent+0x10/0x10 [ 1802.125182][T30645] snd_seq_oss_reset+0x73/0x290 [ 1802.125223][T30645] ? __pfx_odev_release+0x10/0x10 [ 1802.125273][T30645] snd_seq_oss_release+0x7c/0x180 [ 1802.125307][T30645] odev_release+0x56/0xa0 [ 1802.125356][T30645] __fput+0x402/0xb70 [ 1802.125400][T30645] task_work_run+0x150/0x240 [ 1802.125438][T30645] ? __pfx_task_work_run+0x10/0x10 [ 1802.125471][T30645] ? __do_sys_close_range+0x278/0x730 [ 1802.125534][T30645] exit_to_user_mode_loop+0xfb/0x540 [ 1802.125580][T30645] do_syscall_64+0x4ee/0xf80 [ 1802.125615][T30645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.125649][T30645] RIP: 0033:0x7f9f41d8f7c9 [ 1802.125675][T30645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1802.125707][T30645] RSP: 002b:00007f9f42c1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1802.125738][T30645] RAX: 0000000000000000 RBX: 00007f9f41fe5fa0 RCX: 00007f9f41d8f7c9 [ 1802.125759][T30645] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1802.125779][T30645] RBP: 00007f9f41e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1802.125799][T30645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1802.125847][T30645] R13: 00007f9f41fe6038 R14: 00007f9f41fe5fa0 R15: 00007ffe67fde258 [ 1802.125888][T30645] [ 1803.266287][T30657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1803.872622][T30676] zswap: compressor not available [ 1807.880021][T30735] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 1808.880351][T30741] FAULT_INJECTION: forcing a failure. [ 1808.880351][T30741] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.934400][T30741] CPU: 0 UID: 0 PID: 30741 Comm: syz.0.4928 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1808.934481][T30741] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1808.934501][T30741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1808.934521][T30741] Call Trace: [ 1808.934533][T30741] [ 1808.934547][T30741] dump_stack_lvl+0x16c/0x1f0 [ 1808.934608][T30741] should_fail_ex+0x512/0x640 [ 1808.934645][T30741] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1808.934691][T30741] should_failslab+0xc2/0x120 [ 1808.934741][T30741] kmem_cache_alloc_noprof+0x83/0x770 [ 1808.934781][T30741] ? stack_depot_save_flags+0x29/0x9b0 [ 1808.934821][T30741] ? alloc_empty_file+0x55/0x1e0 [ 1808.934864][T30741] ? alloc_empty_file+0x55/0x1e0 [ 1808.934896][T30741] ? kasan_save_track+0x14/0x30 [ 1808.934939][T30741] alloc_empty_file+0x55/0x1e0 [ 1808.934976][T30741] path_openat+0xde/0x3140 [ 1808.935022][T30741] ? do_syscall_64+0xcd/0xf80 [ 1808.935051][T30741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.935093][T30741] ? __pfx_path_openat+0x10/0x10 [ 1808.935157][T30741] do_filp_open+0x20b/0x470 [ 1808.935207][T30741] ? __pfx_do_filp_open+0x10/0x10 [ 1808.935278][T30741] ? alloc_fd+0x471/0x7d0 [ 1808.935335][T30741] do_sys_openat2+0x121/0x290 [ 1808.935387][T30741] ? __pfx_do_sys_openat2+0x10/0x10 [ 1808.935430][T30741] ? __sys_sendmsg+0x18c/0x220 [ 1808.935495][T30741] __x64_sys_openat+0x174/0x210 [ 1808.935534][T30741] ? __pfx___x64_sys_openat+0x10/0x10 [ 1808.935587][T30741] do_syscall_64+0xcd/0xf80 [ 1808.935622][T30741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.935654][T30741] RIP: 0033:0x7faba458f7c9 [ 1808.935683][T30741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1808.935715][T30741] RSP: 002b:00007faba5392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1808.935752][T30741] RAX: ffffffffffffffda RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1808.935775][T30741] RDX: 00000000000c0002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1808.935797][T30741] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1808.935817][T30741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1808.935837][T30741] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1808.935881][T30741] [ 1811.739009][T30783] FAULT_INJECTION: forcing a failure. [ 1811.739009][T30783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.839675][T30783] CPU: 0 UID: 0 PID: 30783 Comm: syz.0.4935 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1811.839728][T30783] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1811.839741][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1811.839756][T30783] Call Trace: [ 1811.839764][T30783] [ 1811.839774][T30783] dump_stack_lvl+0x16c/0x1f0 [ 1811.839852][T30783] should_fail_ex+0x512/0x640 [ 1811.839897][T30783] _copy_to_iter+0x29f/0x1710 [ 1811.839937][T30783] ? __mutex_unlock_slowpath+0x161/0x790 [ 1811.839976][T30783] ? __pfx__copy_to_iter+0x10/0x10 [ 1811.840011][T30783] ? kernfs_seq_stop+0xcd/0x120 [ 1811.840064][T30783] ? kernfs_put_active+0x86/0xe0 [ 1811.840108][T30783] seq_read_iter+0xd02/0x12d0 [ 1811.840166][T30783] kernfs_fop_read_iter+0x46c/0x610 [ 1811.840214][T30783] ? rw_verify_area+0xcf/0x6c0 [ 1811.840256][T30783] vfs_read+0x8bf/0xcf0 [ 1811.840306][T30783] ? __pfx_vfs_read+0x10/0x10 [ 1811.840373][T30783] ksys_read+0x12a/0x250 [ 1811.840425][T30783] ? __pfx_ksys_read+0x10/0x10 [ 1811.840477][T30783] do_syscall_64+0xcd/0xf80 [ 1811.840508][T30783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.840541][T30783] RIP: 0033:0x7faba458f7c9 [ 1811.840567][T30783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1811.840597][T30783] RSP: 002b:00007faba5392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1811.840625][T30783] RAX: ffffffffffffffda RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1811.840647][T30783] RDX: 0000000000400006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1811.840665][T30783] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1811.840684][T30783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1811.840702][T30783] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1811.840744][T30783] [ 1812.172392][T10977] Bluetooth: hci4: unexpected event 0x31 length: 19 > 6 [ 1812.655928][T30786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1813.045821][T30786] bond0: (slave bond_slave_0): Releasing backup interface [ 1814.146044][T30805] input: f as /devices/virtual/input/input81 [ 1814.242133][T30804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4942'. [ 1816.681797][T30839] usb usb2: usbfs: process 30839 (syz.5.4949) did not claim interface 0 before use [ 1821.931065][T30899] ptp ptp0: new virtual clock ptp1 [ 1821.936436][T30899] ptp ptp0: guarantee physical clock free running [ 1821.945200][T30899] ptp ptp0: guarantee physical clock free running [ 1821.998411][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4964'. [ 1823.143710][T30937] zswap: compressor  not available [ 1824.003119][T30954] could not allocate digest TFM handle [ 1824.133702][T30963] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input83 [ 1824.821543][T30984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1825.840858][T10977] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 1826.579473][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'. [ 1828.338492][T31035] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1828.373976][T31035] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1828.429153][T31035] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1828.436808][T31035] page_type: f5(slab) [ 1828.522141][T31035] raw: 00fff00000000040 ffff888140407640 dead000000000122 0000000000000000 [ 1828.576238][T31035] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 1828.598380][T31035] head: 00fff00000000040 ffff888140407640 dead000000000122 0000000000000000 [ 1828.669346][T31035] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 1828.737809][T31035] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1828.746633][T31035] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1828.823950][T31035] page dumped because: unmovable page [ 1828.855763][T31035] page_owner tracks the page as allocated [ 1828.923077][T31035] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27847, tgid 27847 (syz-executor), ts 1824307443512, free_ts 1824297799509 [ 1828.994879][T31035] post_alloc_hook+0x1af/0x220 [ 1829.015292][T31035] get_page_from_freelist+0xd0b/0x31a0 [ 1829.029340][T31035] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1829.045846][T31035] alloc_pages_mpol+0x1fb/0x550 [ 1829.062325][T31035] new_slab+0x2c3/0x430 [ 1829.080174][T31035] ___slab_alloc+0xe18/0x1c90 [ 1829.095274][T31035] __slab_alloc.constprop.0+0x63/0x110 [ 1829.107807][T31035] kmem_cache_alloc_noprof+0x44d/0x770 [ 1829.123627][T31035] getname_flags.part.0+0x4c/0x550 [ 1829.136310][T31035] getname_flags+0x93/0xf0 [ 1829.161273][T31035] user_path_at+0x24/0x60 [ 1829.176387][T31035] __x64_sys_umount+0x10a/0x1a0 [ 1829.196486][T31035] do_syscall_64+0xcd/0xf80 [ 1829.225378][T31035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.231382][T31035] page last free pid 5819 tgid 5819 stack trace: [ 1829.284068][T31035] __free_frozen_pages+0x7df/0x1170 [ 1829.294243][T31035] __folio_put+0x329/0x450 [ 1829.314533][T31035] skb_release_data+0x81a/0x9e0 [ 1829.335036][T31035] __kfree_skb+0x4f/0x70 [ 1829.350397][T31035] tcp_ack+0x1d41/0x6150 [ 1829.366907][T31035] tcp_rcv_established+0x10b6/0x36e0 [ 1829.403060][T31035] tcp_v4_do_rcv+0xc65/0x10a0 [ 1829.423730][T31035] __release_sock+0x361/0x450 [ 1829.433933][T31035] release_sock+0x5a/0x220 [ 1829.438608][T31035] tcp_sendmsg+0x38/0x50 [ 1829.493393][T31035] inet_sendmsg+0xb9/0x140 [ 1829.501932][T31035] sock_write_iter+0x509/0x610 [ 1829.532433][T31035] vfs_write+0x7d3/0x11d0 [ 1829.542579][T31035] ksys_write+0x1f8/0x250 [ 1829.562754][T31035] do_syscall_64+0xcd/0xf80 [ 1829.583137][T31035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.214211][T31062] zswap: compressor not available [ 1831.455277][T31071] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 1834.580695][T31093] Format for deleting device is "id" (uint). [ 1835.275146][T31117] netlink: zone id is out of range [ 1835.280344][T31117] netlink: zone id is out of range [ 1835.333419][T31117] netlink: zone id is out of range [ 1835.338608][T31117] netlink: zone id is out of range [ 1835.410682][T31117] netlink: zone id is out of range [ 1835.442687][T31117] netlink: zone id is out of range [ 1835.447876][T31117] netlink: get zone limit has 4 unknown bytes [ 1836.253619][ T30] audit: type=1800 audit(4294971303.065:89): pid=31134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5014" name="lu_gp_id" dev="configfs" ino=158724 res=0 errno=0 [ 1837.499814][T31153] zswap: compressor not available [ 1840.511779][T31208] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 1841.088322][T31228] futex_wake_op: syz.2.5037 tries to shift op by -2048; fix this program [ 1841.605829][T31235] zswap: compressor not available [ 1841.810044][T31243] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1841.825620][T31243] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1843.073735][T31264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5045'. [ 1843.093643][T31258] FAULT_INJECTION: forcing a failure. [ 1843.093643][T31258] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.199263][T31258] CPU: 1 UID: 0 PID: 31258 Comm: syz.1.5044 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1843.199333][T31258] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1843.199353][T31258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1843.199373][T31258] Call Trace: [ 1843.199383][T31258] [ 1843.199396][T31258] dump_stack_lvl+0x16c/0x1f0 [ 1843.199453][T31258] should_fail_ex+0x512/0x640 [ 1843.199493][T31258] ? __kmalloc_noprof+0xca/0x910 [ 1843.199533][T31258] should_failslab+0xc2/0x120 [ 1843.199589][T31258] __kmalloc_noprof+0xeb/0x910 [ 1843.199627][T31258] ? __register_sysctl_table+0xb3/0x1900 [ 1843.199681][T31258] ? __register_sysctl_table+0xb3/0x1900 [ 1843.199727][T31258] __register_sysctl_table+0xb3/0x1900 [ 1843.199774][T31258] ? is_module_address+0x5f/0xf0 [ 1843.199820][T31258] ? __pfx___register_sysctl_table+0x10/0x10 [ 1843.199864][T31258] ? is_module_address+0x69/0xf0 [ 1843.199902][T31258] ? register_net_sysctl_sz+0x222/0x450 [ 1843.199951][T31258] __devinet_sysctl_register+0x1b9/0x360 [ 1843.199993][T31258] ? rcu_is_watching+0x12/0xc0 [ 1843.200039][T31258] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1843.200075][T31258] ? __kmalloc_node_track_caller_noprof+0x370/0x930 [ 1843.200134][T31258] ? __asan_memcpy+0x3c/0x60 [ 1843.200179][T31258] devinet_init_net+0x347/0x910 [ 1843.200219][T31258] ? __pfx_devinet_init_net+0x10/0x10 [ 1843.200265][T31258] ops_init+0x1e2/0x5f0 [ 1843.200317][T31258] setup_net+0x11d/0x3a0 [ 1843.200366][T31258] ? __pfx_setup_net+0x10/0x10 [ 1843.200412][T31258] ? lockdep_init_map_type+0x5c/0x270 [ 1843.200447][T31258] ? mutex_init_lockep+0x110/0x150 [ 1843.200487][T31258] copy_net_ns+0x351/0x7c0 [ 1843.200522][T31258] create_new_namespaces+0x3ea/0xab0 [ 1843.200579][T31258] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1843.200630][T31258] ksys_unshare+0x45b/0xa40 [ 1843.200661][T31258] ? __pfx_ksys_unshare+0x10/0x10 [ 1843.200716][T31258] ? xfd_validate_state+0x61/0x180 [ 1843.200760][T31258] __x64_sys_unshare+0x31/0x40 [ 1843.200790][T31258] do_syscall_64+0xcd/0xf80 [ 1843.200826][T31258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.200859][T31258] RIP: 0033:0x7f9f41d8f7c9 [ 1843.200888][T31258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.200921][T31258] RSP: 002b:00007f9f42c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1843.200953][T31258] RAX: ffffffffffffffda RBX: 00007f9f41fe5fa0 RCX: 00007f9f41d8f7c9 [ 1843.200977][T31258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1843.200997][T31258] RBP: 00007f9f41e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1843.201018][T31258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1843.201040][T31258] R13: 00007f9f41fe6038 R14: 00007f9f41fe5fa0 R15: 00007ffe67fde258 [ 1843.201084][T31258] [ 1843.682813][T31267] FAULT_INJECTION: forcing a failure. [ 1843.682813][T31267] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1843.699864][T31267] CPU: 0 UID: 0 PID: 31267 Comm: syz.1.5044 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1843.699929][T31267] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1843.699942][T31267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1843.699957][T31267] Call Trace: [ 1843.699965][T31267] [ 1843.699975][T31267] dump_stack_lvl+0x16c/0x1f0 [ 1843.700019][T31267] should_fail_ex+0x512/0x640 [ 1843.700052][T31267] get_futex_key+0x1d0/0x15f0 [ 1843.700081][T31267] ? __pfx_get_futex_key+0x10/0x10 [ 1843.700116][T31267] futex_wait_setup+0x9d/0x570 [ 1843.700159][T31267] __futex_wait+0x193/0x2f0 [ 1843.700192][T31267] ? __pfx___futex_wait+0x10/0x10 [ 1843.700237][T31267] ? __pfx_futex_wake_mark+0x10/0x10 [ 1843.700274][T31267] ? futex_hash+0x2c5/0x380 [ 1843.700301][T31267] ? futex_private_hash_put+0x160/0x1b0 [ 1843.700329][T31267] futex_wait+0xe8/0x380 [ 1843.700361][T31267] ? __pfx_futex_wait+0x10/0x10 [ 1843.700401][T31267] ? preempt_schedule_thunk+0x16/0x30 [ 1843.700430][T31267] do_futex+0x229/0x350 [ 1843.700457][T31267] ? __pfx_do_futex+0x10/0x10 [ 1843.700488][T31267] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1843.700526][T31267] __x64_sys_futex+0x1e0/0x4c0 [ 1843.700557][T31267] ? __pfx___x64_sys_futex+0x10/0x10 [ 1843.700585][T31267] ? xfd_validate_state+0x61/0x180 [ 1843.700605][T31267] ? __pfx___do_sys_prctl+0x10/0x10 [ 1843.700640][T31267] do_syscall_64+0xcd/0xf80 [ 1843.700666][T31267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.700692][T31267] RIP: 0033:0x7f9f41d8f7c9 [ 1843.700713][T31267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.700735][T31267] RSP: 002b:00007f9f42bf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1843.700758][T31267] RAX: ffffffffffffffda RBX: 00007f9f41fe6098 RCX: 00007f9f41d8f7c9 [ 1843.700774][T31267] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f41fe6098 [ 1843.700788][T31267] RBP: 00007f9f41fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.700803][T31267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1843.700817][T31267] R13: 00007f9f41fe6128 R14: 00007ffe67fde170 R15: 00007ffe67fde258 [ 1843.700848][T31267] [ 1846.537289][T31317] zswap: compressor TyEZӉه|q,q:3cVPRljrP not available [ 1847.039794][T31338] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1847.238217][T31340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5061'. [ 1847.282309][T31340] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5061'. [ 1847.844007][T31353] [U] ^\ [ 1848.011432][T31370] zswap: compressor not available [ 1852.603080][T31451] random: crng reseeded on system resumption [ 1853.320350][T31451] kexec: Could not allocate control_code_buffer [ 1854.250761][ T30] audit: type=1800 audit(4294971321.159:90): pid=31494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5095" name="members" dev="configfs" ino=160051 res=0 errno=0 [ 1854.695912][T31508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5095'. [ 1857.880398][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.887139][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.074526][T31557] zswap: compressor not available [ 1858.621075][T31581] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1858.649928][ T30] audit: type=1804 audit(4294971325.582:91): pid=31581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5110" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1859.627502][T31608] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 1862.007722][T31637] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1863.680783][T31676] random: crng reseeded on system resumption [ 1863.859908][T31673] sp0: Synchronizing with TNC [ 1865.074151][T10977] Bluetooth: hci4: command 0x0406 tx timeout [ 1865.102963][T31701] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1866.166745][T31716] netlink: 146 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1867.163332][T16703] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1867.710278][T31731] zswap: compressor not available [ 1871.330619][T31772] netlink: 146 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1871.717036][T31783] FAULT_INJECTION: forcing a failure. [ 1871.717036][T31783] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.793640][T31783] CPU: 0 UID: 0 PID: 31783 Comm: syz.1.5153 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1871.793701][T31783] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1871.793718][T31783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1871.793734][T31783] Call Trace: [ 1871.793744][T31783] [ 1871.793756][T31783] dump_stack_lvl+0x16c/0x1f0 [ 1871.793805][T31783] should_fail_ex+0x512/0x640 [ 1871.793835][T31783] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1871.793868][T31783] should_failslab+0xc2/0x120 [ 1871.793908][T31783] kmem_cache_alloc_noprof+0x83/0x770 [ 1871.793946][T31783] ? __proc_create+0x2c8/0x8d0 [ 1871.793987][T31783] ? __proc_create+0x2c8/0x8d0 [ 1871.794020][T31783] __proc_create+0x2c8/0x8d0 [ 1871.794054][T31783] ? __pfx___proc_create+0x10/0x10 [ 1871.794092][T31783] ? __pfx_netdev_run_todo+0x10/0x10 [ 1871.794136][T31783] proc_create_reg+0x7d/0x180 [ 1871.794172][T31783] ? __pfx_psched_show+0x10/0x10 [ 1871.794212][T31783] proc_create_single_data+0x86/0x130 [ 1871.794248][T31783] ? __pfx_proc_create_single_data+0x10/0x10 [ 1871.794286][T31783] ? __pfx_netdev_debug_event+0x10/0x10 [ 1871.794331][T31783] ? __pfx_psched_net_init+0x10/0x10 [ 1871.794368][T31783] psched_net_init+0x4a/0x70 [ 1871.794406][T31783] ops_init+0x1e2/0x5f0 [ 1871.794449][T31783] setup_net+0x11d/0x3a0 [ 1871.794489][T31783] ? __pfx_setup_net+0x10/0x10 [ 1871.794523][T31783] ? lockdep_init_map_type+0x5c/0x270 [ 1871.794548][T31783] ? mutex_init_lockep+0x110/0x150 [ 1871.794577][T31783] copy_net_ns+0x351/0x7c0 [ 1871.794604][T31783] create_new_namespaces+0x3ea/0xab0 [ 1871.794646][T31783] copy_namespaces+0x468/0x570 [ 1871.794690][T31783] copy_process+0x2a70/0x7430 [ 1871.794727][T31783] ? __pfx___schedule+0x10/0x10 [ 1871.794775][T31783] ? __pfx_copy_process+0x10/0x10 [ 1871.794821][T31783] ? _copy_from_user+0x59/0xd0 [ 1871.794852][T31783] kernel_clone+0xfc/0x910 [ 1871.794890][T31783] ? __pfx_kernel_clone+0x10/0x10 [ 1871.794923][T31783] ? futex_private_hash_put+0x160/0x1b0 [ 1871.794957][T31783] ? __pfx_futex_wake+0x10/0x10 [ 1871.794993][T31783] __do_sys_clone3+0x212/0x290 [ 1871.795031][T31783] ? __pfx___do_sys_clone3+0x10/0x10 [ 1871.795086][T31783] ? __sys_sendmsg+0x18c/0x220 [ 1871.795142][T31783] do_syscall_64+0xcd/0xf80 [ 1871.795166][T31783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.795190][T31783] RIP: 0033:0x7f9f41d8f7c9 [ 1871.795211][T31783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1871.795234][T31783] RSP: 002b:00007f9f42bf8f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1871.795257][T31783] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9f41d8f7c9 [ 1871.795272][T31783] RDX: 00007f9f42bf8f20 RSI: 0000000000000058 RDI: 00007f9f42bf8f20 [ 1871.795287][T31783] RBP: 00007f9f41e13f91 R08: 0000000000000000 R09: 0000000000000058 [ 1871.795302][T31783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.795316][T31783] R13: 00007f9f41fe6128 R14: 00007f9f41fe6090 R15: 00007ffe67fde258 [ 1871.795347][T31783] [ 1872.696079][T31792] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1877.094434][T31861] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1877.534852][T31861] PCI: Can't parse resource_alignment parameter: B [ 1877.995174][T31878] FAULT_INJECTION: forcing a failure. [ 1877.995174][T31878] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.010635][T31878] CPU: 1 UID: 0 PID: 31878 Comm: syz.0.5171 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1878.010709][T31878] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1878.010724][T31878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1878.010738][T31878] Call Trace: [ 1878.010746][T31878] [ 1878.010756][T31878] dump_stack_lvl+0x16c/0x1f0 [ 1878.010799][T31878] should_fail_ex+0x512/0x640 [ 1878.010827][T31878] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1878.010860][T31878] should_failslab+0xc2/0x120 [ 1878.010897][T31878] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1878.010928][T31878] ? __d_alloc+0x35/0xa80 [ 1878.010954][T31878] ? __d_alloc+0x35/0xa80 [ 1878.010996][T31878] __d_alloc+0x35/0xa80 [ 1878.011026][T31878] ? __pfx_from_vfsgid+0x10/0x10 [ 1878.011059][T31878] d_alloc_pseudo+0x1c/0xc0 [ 1878.011087][T31878] alloc_file_pseudo+0xcf/0x230 [ 1878.011115][T31878] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1878.011163][T31878] ? hugetlbfs_get_inode+0x31f/0x700 [ 1878.011202][T31878] hugetlb_file_setup+0x4ce/0x620 [ 1878.011241][T31878] ksys_mmap_pgoff+0x189/0x5c0 [ 1878.011294][T31878] __x64_sys_mmap+0x125/0x190 [ 1878.011333][T31878] do_syscall_64+0xcd/0xf80 [ 1878.011358][T31878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.011382][T31878] RIP: 0033:0x7faba458f7c9 [ 1878.011408][T31878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1878.011431][T31878] RSP: 002b:00007faba5371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1878.011453][T31878] RAX: ffffffffffffffda RBX: 00007faba47e6090 RCX: 00007faba458f7c9 [ 1878.011470][T31878] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1878.011484][T31878] RBP: 00007faba4613f91 R08: 0000000000000003 R09: 0000300000000000 [ 1878.011499][T31878] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1878.011514][T31878] R13: 00007faba47e6128 R14: 00007faba47e6090 R15: 00007fffbd210308 [ 1878.011544][T31878] [ 1878.401311][T31878] IPVS: length: 7562853 != 24 [ 1880.900210][T31925] Process accounting resumed [ 1881.425479][T31954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1881.442074][T31954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1881.450405][T31954] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1881.457143][T31954] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1881.472492][T31954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1881.483420][T31954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1881.492750][T31954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1881.602684][T31950] sp0: Synchronizing with TNC [ 1881.750379][T31960] random: crng reseeded on system resumption [ 1882.795378][T16703] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1882.795423][T16703] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 1882.811635][T16703] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1882.811718][T16703] Bluetooth: hci4: adv larger than maximum supported [ 1882.820578][T16703] Bluetooth: hci4: adv larger than maximum supported [ 1882.827824][T16703] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1883.162698][T31986] nfs: Unknown parameter 'BlY 7wEɮHs[ؐu`]e6zcޕ[$(uҞ%EtO2*p[OugrtsQZ׀z' [ 1883.425455][T16703] Bluetooth: hci2: command 0x0c1a tx timeout [ 1883.503559][T10977] Bluetooth: hci4: command 0x0406 tx timeout [ 1883.509741][T31996] Bluetooth: hci3: command 0x0c1a tx timeout [ 1883.516840][T16703] Bluetooth: hci1: command 0x0c1a tx timeout [ 1884.617569][T32018] FAULT_INJECTION: forcing a failure. [ 1884.617569][T32018] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.814872][T32018] CPU: 0 UID: 0 PID: 32018 Comm: syz.1.5202 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1884.814922][T32018] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1884.814935][T32018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1884.814949][T32018] Call Trace: [ 1884.814957][T32018] [ 1884.814966][T32018] dump_stack_lvl+0x16c/0x1f0 [ 1884.815008][T32018] should_fail_ex+0x512/0x640 [ 1884.815036][T32018] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1884.815068][T32018] should_failslab+0xc2/0x120 [ 1884.815105][T32018] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1884.815134][T32018] ? __d_lookup+0x25c/0x4a0 [ 1884.815161][T32018] ? __d_alloc+0x35/0xa80 [ 1884.815186][T32018] ? __d_alloc+0x35/0xa80 [ 1884.815205][T32018] __d_alloc+0x35/0xa80 [ 1884.815229][T32018] d_alloc+0x4a/0x1e0 [ 1884.815251][T32018] lookup_one_qstr_excl+0x175/0x250 [ 1884.815281][T32018] start_dirop+0x59/0xb0 [ 1884.815313][T32018] simple_start_creating+0xf4/0x100 [ 1884.815347][T32018] ? __pfx_simple_start_creating+0x10/0x10 [ 1884.815378][T32018] ? do_raw_spin_unlock+0x172/0x230 [ 1884.815408][T32018] ? simple_pin_fs+0xa3/0x190 [ 1884.815438][T32018] debugfs_start_creating.part.0+0x86/0x1c0 [ 1884.815474][T32018] debugfs_create_dir+0x72/0x470 [ 1884.815501][T32018] drm_debugfs_clients_add+0x6f/0x200 [ 1884.815529][T32018] drm_file_alloc+0x5c6/0xb40 [ 1884.815562][T32018] drm_open_helper+0x204/0x550 [ 1884.815594][T32018] drm_open+0x1a0/0x3e0 [ 1884.815620][T32018] ? __pfx_drm_open+0x10/0x10 [ 1884.815647][T32018] drm_stub_open+0x20f/0x380 [ 1884.815676][T32018] ? __pfx_drm_stub_open+0x10/0x10 [ 1884.815703][T32018] chrdev_open+0x234/0x6a0 [ 1884.815741][T32018] ? __pfx_apparmor_file_open+0x10/0x10 [ 1884.815805][T32018] ? __pfx_chrdev_open+0x10/0x10 [ 1884.815867][T32018] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1884.815911][T32018] do_dentry_open+0x748/0x1590 [ 1884.815946][T32018] ? __pfx_chrdev_open+0x10/0x10 [ 1884.815989][T32018] vfs_open+0x82/0x3f0 [ 1884.816017][T32018] path_openat+0x2078/0x3140 [ 1884.816060][T32018] ? __pfx_path_openat+0x10/0x10 [ 1884.816106][T32018] do_filp_open+0x20b/0x470 [ 1884.816141][T32018] ? __pfx_do_filp_open+0x10/0x10 [ 1884.816197][T32018] ? alloc_fd+0x471/0x7d0 [ 1884.816238][T32018] do_sys_openat2+0x121/0x290 [ 1884.816264][T32018] ? __pfx_do_sys_openat2+0x10/0x10 [ 1884.816301][T32018] __x64_sys_openat+0x174/0x210 [ 1884.816328][T32018] ? __pfx___x64_sys_openat+0x10/0x10 [ 1884.816367][T32018] do_syscall_64+0xcd/0xf80 [ 1884.816391][T32018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.816414][T32018] RIP: 0033:0x7f9f41d8f7c9 [ 1884.816432][T32018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.816455][T32018] RSP: 002b:00007f9f42c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1884.816481][T32018] RAX: ffffffffffffffda RBX: 00007f9f41fe5fa0 RCX: 00007f9f41d8f7c9 [ 1884.816496][T32018] RDX: 0000000000000040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1884.816511][T32018] RBP: 00007f9f41e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1884.816525][T32018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1884.816539][T32018] R13: 00007f9f41fe6038 R14: 00007f9f41fe5fa0 R15: 00007ffe67fde258 [ 1884.816570][T32018] [ 1885.572161][T31996] Bluetooth: hci4: command 0x0406 tx timeout [ 1885.578440][T16703] Bluetooth: hci1: command 0x0c1a tx timeout [ 1886.021016][T32038] zswap: compressor not available [ 1887.428889][T32072] Invalid ELF header magic: != ELF [ 1887.480658][T32073] Invalid ELF header magic: != ELF [ 1887.641769][T16703] Bluetooth: hci1: command 0x0c1a tx timeout [ 1890.116978][T32111] FAULT_INJECTION: forcing a failure. [ 1890.116978][T32111] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.147537][T32111] CPU: 1 UID: 0 PID: 32111 Comm: syz.0.5224 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1890.147608][T32111] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1890.147627][T32111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1890.147647][T32111] Call Trace: [ 1890.147659][T32111] [ 1890.147673][T32111] dump_stack_lvl+0x16c/0x1f0 [ 1890.147733][T32111] should_fail_ex+0x512/0x640 [ 1890.147771][T32111] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1890.147827][T32111] should_failslab+0xc2/0x120 [ 1890.147879][T32111] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1890.147927][T32111] ? simple_offset_add+0xfe/0x180 [ 1890.147983][T32111] ? shmem_symlink+0x256/0x960 [ 1890.148022][T32111] ? __pfx_simple_offset_add+0x10/0x10 [ 1890.148083][T32111] ? kmemdup_noprof+0x29/0x60 [ 1890.148118][T32111] kmemdup_noprof+0x29/0x60 [ 1890.148158][T32111] shmem_symlink+0x256/0x960 [ 1890.148201][T32111] ? __pfx_shmem_symlink+0x10/0x10 [ 1890.148248][T32111] ? bpf_lsm_inode_permission+0x9/0x10 [ 1890.148284][T32111] ? security_inode_permission+0xbf/0x260 [ 1890.148327][T32111] ? inode_permission+0x37b/0x640 [ 1890.148370][T32111] vfs_symlink+0x4b5/0x800 [ 1890.148414][T32111] do_symlinkat+0x353/0x4b0 [ 1890.148450][T32111] ? __pfx_do_symlinkat+0x10/0x10 [ 1890.148486][T32111] ? getname_flags.part.0+0x1c5/0x550 [ 1890.148532][T32111] __x64_sys_symlink+0x75/0x90 [ 1890.148565][T32111] do_syscall_64+0xcd/0xf80 [ 1890.148599][T32111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.148630][T32111] RIP: 0033:0x7faba458f7c9 [ 1890.148658][T32111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1890.148689][T32111] RSP: 002b:00007faba5392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1890.148719][T32111] RAX: ffffffffffffffda RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1890.148739][T32111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1890.148758][T32111] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1890.148778][T32111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1890.148796][T32111] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1890.148854][T32111] [ 1891.337408][T32133] netlink: 330 bytes leftover after parsing attributes in process `syz.5.5229'. [ 1892.254534][T32161] FAULT_INJECTION: forcing a failure. [ 1892.254534][T32161] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.277676][T32161] CPU: 1 UID: 0 PID: 32161 Comm: syz.2.5234 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1892.277728][T32161] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1892.277743][T32161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1892.277757][T32161] Call Trace: [ 1892.277766][T32161] [ 1892.277775][T32161] dump_stack_lvl+0x16c/0x1f0 [ 1892.277818][T32161] should_fail_ex+0x512/0x640 [ 1892.277847][T32161] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1892.277887][T32161] should_failslab+0xc2/0x120 [ 1892.277945][T32161] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1892.277980][T32161] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1892.278021][T32161] ? kstrdup+0x53/0x100 [ 1892.278047][T32161] kstrdup+0x53/0x100 [ 1892.278076][T32161] apply_subsystem_event_filter+0x47f/0x17e0 [ 1892.278126][T32161] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1892.278167][T32161] ? _copy_from_user+0x59/0xd0 [ 1892.278198][T32161] subsystem_filter_write+0x95/0x120 [ 1892.278232][T32161] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1892.278264][T32161] vfs_write+0x2a0/0x11d0 [ 1892.278300][T32161] ? __pfx___mutex_lock+0x10/0x10 [ 1892.278331][T32161] ? __pfx_vfs_write+0x10/0x10 [ 1892.278378][T32161] ? __fget_files+0x20e/0x3c0 [ 1892.278421][T32161] ksys_write+0x12a/0x250 [ 1892.278455][T32161] ? __pfx_ksys_write+0x10/0x10 [ 1892.278499][T32161] do_syscall_64+0xcd/0xf80 [ 1892.278523][T32161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.278548][T32161] RIP: 0033:0x7f899a98f7c9 [ 1892.278568][T32161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1892.278590][T32161] RSP: 002b:00007f899b89b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1892.278612][T32161] RAX: ffffffffffffffda RBX: 00007f899abe6180 RCX: 00007f899a98f7c9 [ 1892.278628][T32161] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1892.278642][T32161] RBP: 00007f899aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1892.278656][T32161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1892.278670][T32161] R13: 00007f899abe6218 R14: 00007f899abe6180 R15: 00007fff67889c98 [ 1892.278702][T32161] [ 1894.555529][T32203] zswap: compressor not available [ 1894.566503][T32201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1896.310044][T32235] FAULT_INJECTION: forcing a failure. [ 1896.310044][T32235] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1896.467036][T32235] CPU: 1 UID: 0 PID: 32235 Comm: syz.2.5249 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1896.467088][T32235] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1896.467102][T32235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1896.467117][T32235] Call Trace: [ 1896.467125][T32235] [ 1896.467135][T32235] dump_stack_lvl+0x16c/0x1f0 [ 1896.467180][T32235] should_fail_ex+0x512/0x640 [ 1896.467213][T32235] get_futex_key+0x1d0/0x15f0 [ 1896.467243][T32235] ? __pfx_get_futex_key+0x10/0x10 [ 1896.467265][T32235] ? kasan_save_track+0x14/0x30 [ 1896.467298][T32235] ? __kasan_slab_free+0x5f/0x80 [ 1896.467329][T32235] ? kfree+0x2f8/0x6e0 [ 1896.467352][T32235] ? kernfs_fop_write_iter+0x1f2/0x570 [ 1896.467386][T32235] ? vfs_write+0x7d3/0x11d0 [ 1896.467418][T32235] ? ksys_write+0x12a/0x250 [ 1896.467450][T32235] ? do_syscall_64+0xcd/0xf80 [ 1896.467478][T32235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.467508][T32235] futex_wait_setup+0x9d/0x570 [ 1896.467550][T32235] __futex_wait+0x193/0x2f0 [ 1896.467584][T32235] ? __pfx___futex_wait+0x10/0x10 [ 1896.467622][T32235] ? __pfx_futex_wake_mark+0x10/0x10 [ 1896.467658][T32235] ? futex_hash+0x2c5/0x380 [ 1896.467686][T32235] ? futex_private_hash_put+0x160/0x1b0 [ 1896.467713][T32235] futex_wait+0xe8/0x380 [ 1896.467751][T32235] ? __pfx_futex_wait+0x10/0x10 [ 1896.467793][T32235] ? ksys_write+0x190/0x250 [ 1896.467825][T32235] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1896.467867][T32235] do_futex+0x229/0x350 [ 1896.467895][T32235] ? __pfx_do_futex+0x10/0x10 [ 1896.467930][T32235] __x64_sys_futex+0x1e0/0x4c0 [ 1896.467960][T32235] ? fput+0x70/0xf0 [ 1896.467981][T32235] ? __pfx___x64_sys_futex+0x10/0x10 [ 1896.468008][T32235] ? ksys_write+0x1ac/0x250 [ 1896.468045][T32235] ? __pfx_ksys_write+0x10/0x10 [ 1896.468088][T32235] do_syscall_64+0xcd/0xf80 [ 1896.468111][T32235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.468135][T32235] RIP: 0033:0x7f899a98f7c9 [ 1896.468155][T32235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1896.468179][T32235] RSP: 002b:00007f899b8dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1896.468201][T32235] RAX: ffffffffffffffda RBX: 00007f899abe5fa8 RCX: 00007f899a98f7c9 [ 1896.468217][T32235] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f899abe5fa8 [ 1896.468232][T32235] RBP: 00007f899abe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.468247][T32235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1896.468262][T32235] R13: 00007f899abe6038 R14: 00007fff67889bb0 R15: 00007fff67889c98 [ 1896.468292][T32235] [ 1898.491584][T32271] zswap: compressor not available [ 1899.948027][T32301] zswap: compressor not available [ 1901.855890][ T30] audit: type=1800 audit(4294971369.007:92): pid=32327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5267" name="features" dev="configfs" ino=165856 res=0 errno=0 [ 1901.897255][T16703] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1902.678906][T32327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1902.686243][T32327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1902.693758][T32327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1902.742323][T32327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1904.037542][T16703] Bluetooth: hci2: command 0x0c1a tx timeout [ 1904.425211][T32366] sd 0:0:1:0: PR command failed: 1026 [ 1904.430724][T32366] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1904.443533][T32366] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1904.752830][T10977] Bluetooth: hci3: command 0x0c1a tx timeout [ 1904.760640][T31996] Bluetooth: hci4: command 0x0406 tx timeout [ 1904.768029][T16703] Bluetooth: hci1: command 0x0c1a tx timeout [ 1905.300321][T32383] udevd[32383]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 1906.429019][T32404] GUP no longer grows the stack in syz.0.5283 (32404): 200000-401000 (1f0000) [ 1906.440768][T32404] CPU: 1 UID: 0 PID: 32404 Comm: syz.0.5283 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1906.440849][T32404] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1906.440868][T32404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1906.440888][T32404] Call Trace: [ 1906.440899][T32404] [ 1906.440912][T32404] dump_stack_lvl+0x16c/0x1f0 [ 1906.440970][T32404] gup_vma_lookup+0x1d2/0x220 [ 1906.441020][T32404] __get_user_pages+0x241/0x3590 [ 1906.441086][T32404] ? __pfx___get_user_pages+0x10/0x10 [ 1906.441149][T32404] get_dump_page+0x257/0x3d0 [ 1906.441201][T32404] ? __pfx_get_dump_page+0x10/0x10 [ 1906.441254][T32404] ? __pfx___might_resched+0x10/0x10 [ 1906.441299][T32404] ? dump_user_range+0x8e0/0xb70 [ 1906.441356][T32404] dump_user_range+0x195/0xb70 [ 1906.441416][T32404] ? __pfx_dump_user_range+0x10/0x10 [ 1906.441470][T32404] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 1906.441514][T32404] ? __pfx_writenote+0x10/0x10 [ 1906.441556][T32404] elf_core_dump+0x29c3/0x3c10 [ 1906.441608][T32404] ? __pfx_elf_core_dump+0x10/0x10 [ 1906.441636][T32404] ? kasan_save_stack+0x33/0x60 [ 1906.441677][T32404] ? kasan_save_track+0x14/0x30 [ 1906.441716][T32404] ? __kasan_kmalloc+0xaa/0xb0 [ 1906.441754][T32404] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 1906.441803][T32404] ? vfs_coredump+0x1dd9/0x55e0 [ 1906.441846][T32404] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 1906.441887][T32404] ? irqentry_exit+0x38a/0x8c0 [ 1906.441914][T32404] ? asm_exc_page_fault+0x26/0x30 [ 1906.441955][T32404] ? 0xffffffffff600000 [ 1906.442044][T32404] ? vfs_coredump+0x2b85/0x55e0 [ 1906.442090][T32404] vfs_coredump+0x2b85/0x55e0 [ 1906.442150][T32404] ? __pfx_vfs_coredump+0x10/0x10 [ 1906.442194][T32404] ? __lock_acquire+0x436/0x2890 [ 1906.442233][T32404] ? __lock_acquire+0x436/0x2890 [ 1906.442265][T32404] ? lock_acquire+0x179/0x330 [ 1906.442303][T32404] ? lock_acquire+0x179/0x330 [ 1906.442358][T32404] ? arch_stack_walk+0xa6/0x100 [ 1906.442413][T32404] ? stack_trace_save+0x8e/0xc0 [ 1906.442464][T32404] ? __pfx_stack_trace_save+0x10/0x10 [ 1906.442515][T32404] ? stack_depot_save_flags+0x29/0x9b0 [ 1906.442556][T32404] ? __lock_acquire+0x436/0x2890 [ 1906.442591][T32404] ? kasan_save_stack+0x42/0x60 [ 1906.442702][T32404] ? proc_coredump_connector+0x2d1/0x4f0 [ 1906.442737][T32404] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1906.442787][T32404] ? rcu_is_watching+0x12/0xc0 [ 1906.442839][T32404] get_signal+0x22e1/0x26d0 [ 1906.442900][T32404] ? __pfx_get_signal+0x10/0x10 [ 1906.442957][T32404] arch_do_signal_or_restart+0x8f/0x7a0 [ 1906.443006][T32404] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1906.443067][T32404] ? do_user_addr_fault+0x926/0x1370 [ 1906.443115][T32404] irqentry_exit+0x38a/0x8c0 [ 1906.443153][T32404] asm_exc_page_fault+0x26/0x30 [ 1906.443184][T32404] RIP: 0033:0x7faba458f7d1 [ 1906.443209][T32404] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1906.443241][T32404] RSP: 002b:0000080000000002 EFLAGS: 00010217 [ 1906.443267][T32404] RAX: 0000000000000000 RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1906.443288][T32404] RDX: 0000000000000000 RSI: 0000080000000002 RDI: 0100000020003b49 [ 1906.443311][T32404] RBP: 00007faba4613f91 R08: 0000000000000004 R09: 0000000000000000 [ 1906.443330][T32404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1906.443348][T32404] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1906.443389][T32404] [ 1907.382233][T32416] zswap: compressor not available [ 1909.786417][T32482] : Can't lookup blockdev [ 1909.819399][T32482] input: jJǸ-9%vJ86 as /devices/virtual/input/input86 [ 1910.143286][T32489] zswap: compressor not available [ 1910.947941][T32508] FAULT_INJECTION: forcing a failure. [ 1910.947941][T32508] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.109338][T32508] CPU: 0 UID: 0 PID: 32508 Comm: syz.0.5306 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1911.109396][T32508] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1911.109410][T32508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1911.109424][T32508] Call Trace: [ 1911.109433][T32508] [ 1911.109443][T32508] dump_stack_lvl+0x16c/0x1f0 [ 1911.109487][T32508] should_fail_ex+0x512/0x640 [ 1911.109515][T32508] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1911.109545][T32508] should_failslab+0xc2/0x120 [ 1911.109582][T32508] __kmalloc_cache_noprof+0x80/0x800 [ 1911.109610][T32508] ? resv_map_alloc+0x46/0x400 [ 1911.109647][T32508] ? resv_map_alloc+0x46/0x400 [ 1911.109678][T32508] resv_map_alloc+0x46/0x400 [ 1911.109711][T32508] hugetlbfs_get_inode+0x33f/0x700 [ 1911.109733][T32508] ? security_capable+0x7e/0x260 [ 1911.109760][T32508] hugetlb_file_setup+0x38d/0x620 [ 1911.109788][T32508] newseg+0xa74/0xe60 [ 1911.109824][T32508] ? __pfx_newseg+0x10/0x10 [ 1911.109863][T32508] ipcget+0xf6/0xfa0 [ 1911.109896][T32508] ? do_futex+0x122/0x350 [ 1911.109924][T32508] ? __pfx_do_futex+0x10/0x10 [ 1911.109951][T32508] ? sched_setaffinity+0xe0/0x400 [ 1911.109986][T32508] ? __pfx_ipcget+0x10/0x10 [ 1911.110020][T32508] ? __x64_sys_futex+0x1e0/0x4c0 [ 1911.110045][T32508] ? __x64_sys_futex+0x1e9/0x4c0 [ 1911.110077][T32508] __x64_sys_shmget+0x13b/0x1b0 [ 1911.110112][T32508] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1911.110149][T32508] ? rcu_is_watching+0x12/0xc0 [ 1911.110185][T32508] do_syscall_64+0xcd/0xf80 [ 1911.110209][T32508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.110233][T32508] RIP: 0033:0x7faba458f7c9 [ 1911.110253][T32508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1911.110276][T32508] RSP: 002b:00007faba5392038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1911.110298][T32508] RAX: ffffffffffffffda RBX: 00007faba47e5fa0 RCX: 00007faba458f7c9 [ 1911.110314][T32508] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1911.110329][T32508] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1911.110344][T32508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1911.110364][T32508] R13: 00007faba47e6038 R14: 00007faba47e5fa0 R15: 00007fffbd210308 [ 1911.110396][T32508] [ 1912.422488][T32520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5309'. [ 1919.004410][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.011276][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.259452][ T7508] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 881 with max blocks 17 with error 117 [ 1919.273870][ T7508] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1919.273870][ T7508] [ 1920.180274][T32627] block2mtd: illegal erase size [ 1920.270707][T32632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1920.288682][T32633] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1922.105825][T32666] ================================================================== [ 1922.105844][T32666] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1922.105885][T32666] Read of size 256 at addr ffff8880202c3860 by task syz.0.5341/32666 [ 1922.105906][T32666] [ 1922.105920][T32666] CPU: 0 UID: 0 PID: 32666 Comm: syz.0.5341 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1922.105967][T32666] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1922.105981][T32666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1922.105995][T32666] Call Trace: [ 1922.106003][T32666] [ 1922.106012][T32666] dump_stack_lvl+0x116/0x1f0 [ 1922.106052][T32666] print_report+0xcd/0x630 [ 1922.106096][T32666] ? __virt_addr_valid+0x81/0x610 [ 1922.106132][T32666] ? __phys_addr+0xe8/0x180 [ 1922.106171][T32666] ? fbcon_prepare_logo+0xa03/0xc70 [ 1922.106198][T32666] kasan_report+0xe0/0x110 [ 1922.106234][T32666] ? fbcon_prepare_logo+0xa03/0xc70 [ 1922.106264][T32666] kasan_check_range+0x100/0x1b0 [ 1922.106289][T32666] __asan_memcpy+0x23/0x60 [ 1922.106319][T32666] fbcon_prepare_logo+0xa03/0xc70 [ 1922.106354][T32666] fbcon_init+0xda0/0x1930 [ 1922.106381][T32666] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1922.106412][T32666] visual_init+0x320/0x620 [ 1922.106441][T32666] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1922.106478][T32666] store_bind+0x61d/0x760 [ 1922.106511][T32666] ? sysfs_file_kobj+0xe4/0x290 [ 1922.106534][T32666] ? __pfx_store_bind+0x10/0x10 [ 1922.106565][T32666] dev_attr_store+0x58/0x80 [ 1922.106596][T32666] ? __pfx_dev_attr_store+0x10/0x10 [ 1922.106628][T32666] sysfs_kf_write+0xf2/0x150 [ 1922.106651][T32666] kernfs_fop_write_iter+0x3af/0x570 [ 1922.106686][T32666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1922.106710][T32666] iter_file_splice_write+0xa24/0x12b0 [ 1922.106755][T32666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1922.106795][T32666] ? __pfx_copy_splice_read+0x10/0x10 [ 1922.106836][T32666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1922.106873][T32666] direct_splice_actor+0x192/0x6c0 [ 1922.106910][T32666] splice_direct_to_actor+0x345/0xa30 [ 1922.106945][T32666] ? __pfx_direct_splice_actor+0x10/0x10 [ 1922.106984][T32666] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1922.107022][T32666] do_splice_direct+0x174/0x240 [ 1922.107057][T32666] ? __pfx_do_splice_direct+0x10/0x10 [ 1922.107099][T32666] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1922.107142][T32666] ? rw_verify_area+0xcf/0x6c0 [ 1922.107175][T32666] do_sendfile+0xb06/0xe50 [ 1922.107211][T32666] ? __pfx_do_sendfile+0x10/0x10 [ 1922.107246][T32666] ? __x64_sys_futex+0x1e0/0x4c0 [ 1922.107274][T32666] ? __x64_sys_futex+0x1e9/0x4c0 [ 1922.107303][T32666] __x64_sys_sendfile64+0x1d8/0x220 [ 1922.107329][T32666] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1922.107356][T32666] do_syscall_64+0xcd/0xf80 [ 1922.107379][T32666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.107404][T32666] RIP: 0033:0x7faba458f7c9 [ 1922.107423][T32666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1922.107446][T32666] RSP: 002b:00007faba5371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1922.107468][T32666] RAX: ffffffffffffffda RBX: 00007faba47e6090 RCX: 00007faba458f7c9 [ 1922.107485][T32666] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 1922.107499][T32666] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1922.107514][T32666] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1922.107528][T32666] R13: 00007faba47e6128 R14: 00007faba47e6090 R15: 00007fffbd210308 [ 1922.107552][T32666] [ 1922.107561][T32666] [ 1922.107567][T32666] Allocated by task 5496: [ 1922.107578][T32666] kasan_save_stack+0x33/0x60 [ 1922.107609][T32666] kasan_save_track+0x14/0x30 [ 1922.107638][T32666] __kasan_kmalloc+0xaa/0xb0 [ 1922.107667][T32666] __kmalloc_noprof+0x33d/0x910 [ 1922.107691][T32666] sk_prot_alloc+0x1a8/0x2a0 [ 1922.107711][T32666] sk_alloc+0x36/0xe30 [ 1922.107736][T32666] __netlink_create+0x5e/0x2c0 [ 1922.107764][T32666] netlink_create+0x39e/0x620 [ 1922.107794][T32666] __sock_create+0x339/0x8a0 [ 1922.107815][T32666] __sys_socket+0x14d/0x260 [ 1922.107836][T32666] __x64_sys_socket+0x72/0xb0 [ 1922.107859][T32666] do_syscall_64+0xcd/0xf80 [ 1922.107878][T32666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.107900][T32666] [ 1922.107905][T32666] The buggy address belongs to the object at ffff8880202c3000 [ 1922.107905][T32666] which belongs to the cache kmalloc-2k of size 2048 [ 1922.107924][T32666] The buggy address is located 264 bytes to the right of [ 1922.107924][T32666] allocated 1880-byte region [ffff8880202c3000, ffff8880202c3758) [ 1922.107949][T32666] [ 1922.107955][T32666] The buggy address belongs to the physical page: [ 1922.107966][T32666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x202c0 [ 1922.107987][T32666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1922.108006][T32666] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1922.108028][T32666] page_type: f5(slab) [ 1922.108048][T32666] raw: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1922.108078][T32666] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1922.108100][T32666] head: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1922.108122][T32666] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1922.108144][T32666] head: 00fff00000000003 ffffea000080b001 00000000ffffffff 00000000ffffffff [ 1922.108166][T32666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1922.108180][T32666] page dumped because: kasan: bad access detected [ 1922.108192][T32666] page_owner tracks the page as allocated [ 1922.108200][T32666] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3396606010, free_ts 0 [ 1922.108263][T32666] post_alloc_hook+0x1af/0x220 [ 1922.108287][T32666] get_page_from_freelist+0xd0b/0x31a0 [ 1922.108314][T32666] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1922.108342][T32666] alloc_pages_mpol+0x1fb/0x550 [ 1922.108375][T32666] new_slab+0x2c3/0x430 [ 1922.108397][T32666] ___slab_alloc+0xe18/0x1c90 [ 1922.108419][T32666] __slab_alloc.constprop.0+0x63/0x110 [ 1922.108443][T32666] __kmalloc_cache_noprof+0x485/0x800 [ 1922.108468][T32666] acpi_ds_create_walk_state+0x95/0x300 [ 1922.108497][T32666] acpi_ds_auto_serialize_method+0x1a1/0x3f0 [ 1922.108520][T32666] acpi_ds_init_one_object+0x362/0x450 [ 1922.108540][T32666] acpi_ns_walk_namespace+0x498/0x720 [ 1922.108564][T32666] acpi_ds_initialize_objects+0x171/0x730 [ 1922.108585][T32666] acpi_ns_load_table+0x1b9/0x490 [ 1922.108617][T32666] acpi_tb_load_namespace+0x2a6/0x870 [ 1922.108643][T32666] acpi_load_tables+0x49/0x180 [ 1922.108720][T32666] page_owner free stack trace missing [ 1922.108728][T32666] [ 1922.108734][T32666] Memory state around the buggy address: [ 1922.108746][T32666] ffff8880202c3700: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 1922.108763][T32666] ffff8880202c3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1922.108780][T32666] >ffff8880202c3800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1922.108793][T32666] ^ [ 1922.108807][T32666] ffff8880202c3880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1922.108823][T32666] ffff8880202c3900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1922.108839][T32666] ================================================================== [ 1922.108853][T32666] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1922.108871][T32666] CPU: 0 UID: 0 PID: 32666 Comm: syz.0.5341 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1922.108919][T32666] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1922.108934][T32666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1922.108949][T32666] Call Trace: [ 1922.108957][T32666] [ 1922.108966][T32666] dump_stack_lvl+0x3d/0x1f0 [ 1922.109010][T32666] vpanic+0x640/0x6f0 [ 1922.109034][T32666] panic+0xca/0xd0 [ 1922.109056][T32666] ? __pfx_panic+0x10/0x10 [ 1922.109092][T32666] check_panic_on_warn+0xab/0xb0 [ 1922.109119][T32666] end_report+0x107/0x160 [ 1922.109155][T32666] kasan_report+0xee/0x110 [ 1922.109193][T32666] ? fbcon_prepare_logo+0xa03/0xc70 [ 1922.109225][T32666] kasan_check_range+0x100/0x1b0 [ 1922.109250][T32666] __asan_memcpy+0x23/0x60 [ 1922.109280][T32666] fbcon_prepare_logo+0xa03/0xc70 [ 1922.109314][T32666] fbcon_init+0xda0/0x1930 [ 1922.109342][T32666] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1922.109374][T32666] visual_init+0x320/0x620 [ 1922.109404][T32666] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1922.109444][T32666] store_bind+0x61d/0x760 [ 1922.109479][T32666] ? sysfs_file_kobj+0xe4/0x290 [ 1922.109503][T32666] ? __pfx_store_bind+0x10/0x10 [ 1922.109536][T32666] dev_attr_store+0x58/0x80 [ 1922.109570][T32666] ? __pfx_dev_attr_store+0x10/0x10 [ 1922.109604][T32666] sysfs_kf_write+0xf2/0x150 [ 1922.109629][T32666] kernfs_fop_write_iter+0x3af/0x570 [ 1922.109665][T32666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1922.109691][T32666] iter_file_splice_write+0xa24/0x12b0 [ 1922.109739][T32666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1922.109780][T32666] ? __pfx_copy_splice_read+0x10/0x10 [ 1922.109824][T32666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1922.109862][T32666] direct_splice_actor+0x192/0x6c0 [ 1922.109899][T32666] splice_direct_to_actor+0x345/0xa30 [ 1922.109935][T32666] ? __pfx_direct_splice_actor+0x10/0x10 [ 1922.109974][T32666] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1922.110014][T32666] do_splice_direct+0x174/0x240 [ 1922.110048][T32666] ? __pfx_do_splice_direct+0x10/0x10 [ 1922.110091][T32666] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1922.110128][T32666] ? rw_verify_area+0xcf/0x6c0 [ 1922.110160][T32666] do_sendfile+0xb06/0xe50 [ 1922.110234][T32666] ? __pfx_do_sendfile+0x10/0x10 [ 1922.110282][T32666] ? __x64_sys_futex+0x1e0/0x4c0 [ 1922.110321][T32666] ? __x64_sys_futex+0x1e9/0x4c0 [ 1922.110352][T32666] __x64_sys_sendfile64+0x1d8/0x220 [ 1922.110377][T32666] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1922.110406][T32666] do_syscall_64+0xcd/0xf80 [ 1922.110430][T32666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.110455][T32666] RIP: 0033:0x7faba458f7c9 [ 1922.110473][T32666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1922.110497][T32666] RSP: 002b:00007faba5371038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1922.110521][T32666] RAX: ffffffffffffffda RBX: 00007faba47e6090 RCX: 00007faba458f7c9 [ 1922.110538][T32666] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 1922.110553][T32666] RBP: 00007faba4613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1922.110568][T32666] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1922.110583][T32666] R13: 00007faba47e6128 R14: 00007faba47e6090 R15: 00007fffbd210308 [ 1922.110608][T32666] [ 1922.111139][T32666] Kernel Offset: disabled