last executing test programs: 17.682920765s ago: executing program 1 (id=487): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x80002, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000014001f000000000000000000000000000000000014002000000000000000000000000000000000000600210000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) 13.424618245s ago: executing program 1 (id=503): r0 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$auto_HPET_IRQFREQ(r0, 0x40086806, &(0x7f00000001c0)=0x6238) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy9/hwsim/ps\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd70e7fbdbdf25250000b605983f2fef83160eda2ebdecf7471c00240026800800020001000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x200680c0}, 0x881) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd700000dcdf250200000004000800200001801c001080060009"], 0x38}, 0x1, 0x0, 0x0, 0x20048070}, 0x800) mmap$auto(0x1, 0x6, 0x9, 0x12, 0xffffffffffffffff, 0xa) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000000)="3472517ba627406abace9316e710d991c746f687463425a2d87292fac8088ccb1a4f4224db8d7eea0be97e0f7769ad3c5c08c9afd2f6813edd10f2298d1bb8d68fa1bbee48298185a27c7df5bf14cb42d3e04043dc196947726f5b9ef993a899bda3f124ae958b3877de0b77adf421d35c5680b32660a8ed0e1bf1f249b26355f969144b03769e506b05c884b9422f9175148e812940299918ca9aba7b963f36fedcd5a9328d81ce4ded63cf", 0x5}, 0x3) seccomp$auto(0x7, 0x6, &(0x7f0000000200)="1cf2588c33f723e6975d02437e5ac2fd7bb25a4572cf5084175635b4652bd166f7a4eb078fe467d771276507eab8c5d4ab5abad03924bc4a9fcbe5ace67a325f3deb5933ed86a30e7c5868aa5ee3951c407da460bfed4d39735d741dceb9369cb262ad0fa9124be22a3d30dec6cd45d146478a5ac4c653278e769e5cd8c083cf1f1fcbd05a8a5186869eb10b099676687d8c8b7a19a47bbc95e0c12cc797f4c43e523e1d96bd83e4e3bc35") 11.322997006s ago: executing program 1 (id=514): mount$auto(0x0, 0x0, 0x0, 0x6, 0x0) (async) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto(r0, 0x0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x3, 0xffffffffffff0004, 0x15) (async) madvise$auto(0xe, 0xe30, 0x8) socket(0x10, 0x2, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0xd8a314cfb8756eef, 0x0) ioctl$auto_BLKSSZGET(r1, 0x1268, 0x0) 9.087036372s ago: executing program 2 (id=520): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0xfffffffffffffffd) 8.88477888s ago: executing program 1 (id=522): unshare$auto(0x40000080) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x6) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/event0\x00', 0x309600, 0x0) ioctl$auto_EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port4/over_current_count\x00', 0x50080, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)="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", 0x8) read$auto(r4, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r5, 0x0, 0x400007ffff000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) read$auto(r6, 0x0, 0x20) pipe$auto(0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r8 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x80044943, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(r9, r9, 0x0, 0xfffffffffffffffe) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r10, &(0x7f0000000ec0)=""/4096, 0x300) 8.883959761s ago: executing program 2 (id=523): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) close_range$auto(0x2, 0x8, 0x0) ftruncate$auto(0xffffffffffffffff, 0x3) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket(0x1e, 0x1, 0x0) syz_clone3(&(0x7f0000000600)={0x100, &(0x7f0000000280), &(0x7f0000000340)=0x0, 0x0, {0x24}, &(0x7f0000000440)=""/213, 0xd5, &(0x7f0000000540)=""/136, &(0x7f00000003c0)=[0x0], 0x1, {r4}}, 0x58) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f00000019c0)={&(0x7f0000000040), 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="f4120000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="d9da3c3337beebc7918b07636ccfc1a9c951333857c313e216285eb3327c7a0c0009007e00", @ANYBLOB, @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB], 0x12f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x6, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x400000000009, 0x1, 0x948b, 0x3, 0x15f4da0c, 0x1, 0x2000000000000004, 0x62, 0x80000001, 0x6, 0xffff, 0x9, 0x40000000002, 0xfffffffffffffffe]}, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x3c3842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) 7.68244976s ago: executing program 3 (id=527): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) 7.476614633s ago: executing program 3 (id=529): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) close_range$auto(0x2, 0x8, 0x0) ftruncate$auto(0xffffffffffffffff, 0x3) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket(0x1e, 0x1, 0x0) syz_clone3(&(0x7f0000000600)={0x100, &(0x7f0000000280), &(0x7f0000000340)=0x0, 0x0, {0x24}, &(0x7f0000000440)=""/213, 0xd5, &(0x7f0000000540)=""/136, &(0x7f00000003c0)=[0x0], 0x1, {r4}}, 0x58) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f00000019c0)={&(0x7f0000000040), 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="f4120000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="d9da3c3337beebc7918b07636ccfc1a9c951333857c313e216285eb3327c7a0c0009007e00000000009b25", @ANYBLOB, @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB], 0x12f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x6, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x400000000009, 0x1, 0x948b, 0x3, 0x15f4da0c, 0x1, 0x2000000000000004, 0x62, 0x80000001, 0x6, 0xffff, 0x9, 0x40000000002, 0xfffffffffffffffe]}, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x3c3842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) 4.880598834s ago: executing program 0 (id=530): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0xa, 0x801, 0x84) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x403, 0x0) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async, rerun: 64) unshare$auto(0x40000080) (async) socket(0xf, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0xfffffffd) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0x6) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4895) r2 = socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (rerun: 32) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xffc3, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x2, 0x0) (async, rerun: 64) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x1001, 0x0) (async, rerun: 32) socket(0x2, 0x5, 0x1100) (rerun: 32) connect$auto(0x3, &(0x7f00000000c0), 0x55) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4d7}, 0x6, 0x0, 0x8, 0x10007fe}, 0x1000}, 0xffffffff, 0x4, 0x0) 4.832035593s ago: executing program 2 (id=531): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$auto(r0, 0x0, 0x100000e3d9) r1 = socket(0x1d, 0x1, 0x0) getsockopt$auto(r1, 0x65, 0x7, 0x0, 0x0) pivot_root$auto(0x0, 0x0) r2 = open(0x0, 0x407ffd, 0x128) madvise$auto(0x0, 0x2000040080000000, 0xe) unshare$auto(0x40000080) mprotect$auto(0x110c230000, 0x1, 0x2) close_range$auto(0x2, r2, 0xc2) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) io_uring_setup$auto(0x8, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000140)=""/240, 0xf0) timer_create$auto(0x3, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000040)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{}, {0x0, 0x87}}, 0x0) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) mmap$auto(0xfffffffffffffffd, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x2, 0x0) socket(0xa, 0x801, 0x84) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.701854213s ago: executing program 3 (id=532): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x4, 0x100000) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r2, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x80) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r3, 0xc0844123, 0x0) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000040)={&(0x7f0000000000)="e99bd8ebda06035f460de2", 0x7fff}, 0x5, 0x5, 0x32cdb8df) close_range$auto(0xffffffffffffffff, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x1, 0xffffffffffff0006, 0xffff1770) process_madvise$auto(r4, &(0x7f0000000180)={&(0x7f00000000c0)="56c94c7f47280c1172d55b63f7a730b1a98d9daee61b5c4f4e2b930516aa82f6ec0937252dcfe7d6651338a4ef416e27a95efb92ecd7acd2ac19e7ab823737912abb605d68109b96a42433b4a3c18bd53115bdc3a4177fb8fbc918ad330bd2c7b68dbc651fd4789b0cec1df18d89acadf31397f3a2641218998e18f6b5aa0ce324b33c378dbf050be493"}, 0x5f33, 0x5, 0xfffffff7) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x83) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x90400, 0x0) 4.56809867s ago: executing program 1 (id=533): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x5, 0x84) getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4687600da2bb6900490ab2afff04b0a728e981ada9d0557476b12b0fcbdc699fc62e21b0d01a006e97bc3eff801e1e9370860e6e2e21600e2eedf9293c432e2117b852825ca5387b60a2b1ba520ebae5efe4f16cd490e3141be14410ce264458e71de770fa9d935c8d18b304817e6b04fab09", @ANYRES16=r2, @ANYBLOB="04002cbd7000fbdbdf250300000005000400050000000a0003009b7d2e40210000000500010000000000050002000000000005000400000000000d0002006f76735f666c6f770000000005000400030000000d0002006f76735f666c6f7700000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x8010) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20000840) 3.706559656s ago: executing program 2 (id=534): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$auto_TUNSETVNETBE(r0, 0x400454de, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r1, 0x2271, 0x38) r2 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x9) msgsnd$auto(0xc0a, &(0x7f0000000040)={0x3, 0x4}, 0x8, 0xfffffff7) 3.382124396s ago: executing program 0 (id=535): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x40100, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) fsconfig$auto_FSCONFIG_CMD_CREATE(r0, 0x6, &(0x7f0000000100)='/dev/ubi_ctrl\x00', &(0x7f0000000140)="f2b88a00b1dad85f238f78ba02f756aa8b89bb2d613e07c5035529b61bf27ecddc30c097761d323e2aa0eaefed1213536ea7723b052ceaaa105e90b603ae71bfadd1d79a15f7826d7185db4e0c58beeab3191bd6a4a6cc4b91be2904150e6c6f5f9a5d22b4a99d55", 0xaf4) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x4100c0, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8000, 0x0) ioctl$auto_MEMLOCK(r1, 0x40084d05, &(0x7f0000000080)={0x1, 0x8}) 3.317944757s ago: executing program 3 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0x4, 0xa6ad, 0x7, 0xca4b, @prog_cnt=0x40, 0x0, 0x4, 0x0, 0x100, 0x2}, 0x122) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x9, @next_key=0x7, 0x6}, 0x6b) socket(0xb, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) 3.20690508s ago: executing program 0 (id=537): syslog$auto(0x2, &(0x7f0000000000)='\x00', 0xda) (async) r0 = io_uring_setup$auto(0x5, &(0x7f0000000040)={0x400, 0x0, 0x6, 0x0, 0x5d, 0xc8, 0xffffffffffffffff, [0x6, 0x100, 0x4e], {0x1, 0x0, 0x839, 0x9, 0xc, 0x8, 0x0, 0x4, 0x7fff}, {0x8, 0xa9, 0x2, 0x9, 0x7, 0xff, 0x101, 0x7, 0x2}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'caif0\x00', 0x0}) (async) r3 = getpgid$auto(0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)=@link_create={@map_fd=r1, @target_ifindex=r2, 0xe, 0x1000, @uprobe_multi={0x7fffffff, 0xa, 0x1fc000000000000, 0x40, 0x5f, 0x0, r3}}, 0x6) read$auto_vhci_fops_hci_vhci(r4, &(0x7f00000001c0)=""/224, 0xe0) (async) ioctl$auto_SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000002c0)={0x2, 0x6, 0x1, 0x9, 0x3, 0x2, 0x1, 0x2, 0x9, 0x6, 0x7, 0x8, 0x7, 0xfffffffc, 0x4, 0x4, 0x3, 0x3fffc, "5047efd489685ab636c33b4a8d60ecd0d3afe2620d3b8ddbe07b964cb84bb3d6f3a2cedd"}) fcntl$auto_F_SETFD(r1, 0x2, 0x2) r7 = prctl$auto_PR_SET_MM_ENV_END(0x4, 0xb, r3, 0x6, 0x60bd) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r7) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2cc, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf}, @NL80211_ATTR_MAC_ADDRS={0x287, 0xa6, 0x0, 0x1, [@nested={0x1bd, 0x39, 0x0, 0x1, [@generic="0ab54271d8423ee9a83f50ba655dc0026e1de70e9c172e83a348adec8f7c91eac89c18838ca7c4130716a86cbef8e991c67054", @nested={0x4, 0x4e}, @nested={0x4, 0xb}, @generic="7aeb6bb21e5298f00d4935e3747882b0d8452b5d13362b61e4dede45c890b97103cd7bf0560b0b4ed25e4aff56d0d074c8fd8b592a48f52d3418e20792eb0d43984334faeed1154e1f27727363e5947bd6cf08e7b1219883c56f8a73de3c0bbdcc7ca1eaaee58a1673244a3031b75c8c320285fec11c081800c5782159e7865900c753e246f8567114d69945b382", @typed={0xf0, 0x135, 0x0, 0x0, @binary="2775bdb1ff07d402709c059f63c45e35e4921866df04b15a9a9223f5e36c44a89423912deb89b9898c844863701a9ec613ba975363978da5000e35fcd23662b9ec2747a43f9d970cac7b1d18cb033db330c3cc7a9b7bf6cb649af2244cf4749d3326368659a7d73fab00859f47d6657e7eaa3495b199524081228f7255dd8506ce0518ee592a1a34fd7c14b3e0931053ecc502bb708cde8d8a480c984e709ebe46c00744f1af9c8f6e5fcd4a2d7246c2226225b4573f48d123c727c6ac2ae0a598154aa0ef91a8177116634bbb028d295d6de662393a72e11ba3b6fadbdb5d63f8d4998b6e934f6d4c135eae"}]}, @generic="67d597140b2ef9ce4913e2b3ce4989cf8b20af134f1f89cf9f0fe60a5866f6bd6afe5c2e89a3240dd5939c181b77679f627c81f813fa2182ae37389b57bc329d3ff2d977effa8f6e0135b6822f154a28063fea4b84f8e2e0fa34c2abd9fac6e05f00414cb2feff3de3c64231343979ca0a3ae06ac9506fa2e01f8846de80339eeadae2f4ee725de285c00dbece6499f3729bc05e68302b8a8460284f7bf2a76bea14e2d01600a15aa5a7186a9532c1b35a1da5fede21c754de6668d8747673cf0545f4"]}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9c}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80000000}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7a09}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40001}, 0x4000050) (async, rerun: 32) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000740), 0x840, 0x0) (async, rerun: 32) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r7, &(0x7f00000018c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f00000007c0)={0x10b0, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_COORDINATOR={0x1092, 0x1e, 0x0, 0x1, [@nested={0x18, 0xa3, 0x0, 0x1, [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="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", @nested={0x11, 0x80, 0x0, 0x1, [@generic="6127be", @generic="cf725a6ded15a5ba0219"]}, @nested={0x10, 0x14b, 0x0, 0x1, [@nested={0x4, 0x140}, @typed={0x4, 0xdf}, @nested={0x4, 0xbe}]}, @generic="660f742a14081ceeac2ab4880ae034d4e01239e0a485ca03b98f6dcdb313804f43e948a44141056d52eb1c9606194ae75b9e22bf0b8fb2abb76aca568554c82b1b8802d3478727d27da4876c83dcf5f22cc8"]}]}, 0x10b0}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xf}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) bind$auto(r0, &(0x7f0000001a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0x4) (async) ptrace$auto_PTRACE_OLDSETOPTIONS(0x15, r3, 0x1, 0x4) (async) write$auto_random_fops_random(r7, &(0x7f0000001a40)="6510b02141fa129e392c88e25df011ee894f75c01589f2aca402cf3f2e272fc636bc7849df06654eb1c6aa48ffdc95c6f58283309c499ad1b03769f5640cad96a3af64582f0b", 0x46) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/thread-self/numa_maps\x00', 0x10300, 0x0) (async, rerun: 32) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000001b00)="698425604e6190734d") (async, rerun: 32) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/devices/virtual/bluetooth/hci5/hci5:200/power/runtime_active_time\x00', 0x20000, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/devices/virtual/tty/ptyt4/power/runtime_active_time\x00', 0x10000, 0x0) (async) kill$auto(r6, 0xd) ptrace$auto_ARCH_SHSTK_LOCK(0x3, r3, 0x1ff, 0x5003) (async) r10 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/snd/controlC1\x00', 0x43, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r10, 0x81785501, &(0x7f0000001c40)={0x965, 0x0, "e1eed738b958fe2c170349be3ca1a66a", "b3996fcd4b3f0bf358cb724f6afb1994", "8965001604735a0db287c6f20a66df77557c4f474e4e91fe5f7e1c97529c5147", "455ccd92130663f5c5437e44f0db4dc496ca88ca475ba297bfda719d4b9158803904b5edf23b81f89cc8781d452e0ae00de8c19de5ea46e1fdd6e03d78b9b67913abdaba6938abfc37a9ca6ffa32dce6", "09073180c8074baa429dd68b6fc28ba5", "4da28dcfa2260314975aa06b5e102c3b3abdc881be2c235433f6e1cb857bc2f1f9a520c60ac6ad264f91093bedba83f269e5251240215743a9b78625275bf6802d2436affd25aa3f075a2eb9b09b19bc", "540009cdcbc517770c955bc47a2f33a8ea062253c38287b6fe354ed3256f67018be3186695d8132b68788bc10253bc3cc725a8eb815c6a26fde172331334770e3f14974eae30c584abade3390407af735e53e5047674d5e4d4bac0f7c6f96301ba0567c6e7b144270fff2fdae149c49593f2515cee002fa675a9b5cff431f1c4"}) (async, rerun: 64) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000001dc0)=0xf) (async, rerun: 64) madvise$auto(0x20, 0x9, 0x2) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)=@test={r9, 0x0, 0x4, 0x2e, 0x4, 0x6e7, 0x9, 0x101, 0x0, 0x1, 0x7, 0x5, 0x1, 0xffffff07, 0x2}, 0xe8) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x58, 0x0, 0x21, 0x70bd29, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x3, 0x0, 0x8000000000000001, 0xffffffffffffffaa, 0x401, 0x5, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.128441592s ago: executing program 3 (id=538): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0xf8, 0x0, 0x1, 0x418, "00000f00ea0200"}) r4 = socket(0x11, 0x3, 0x9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x2400, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x4, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r4, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) 3.030132462s ago: executing program 0 (id=539): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) close_range$auto(0x2, 0x8, 0x0) ftruncate$auto(0xffffffffffffffff, 0x3) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket(0x1e, 0x1, 0x0) syz_clone3(&(0x7f0000000600)={0x100, &(0x7f0000000280), &(0x7f0000000340)=0x0, 0x0, {0x24}, &(0x7f0000000440)=""/213, 0xd5, &(0x7f0000000540)=""/136, &(0x7f00000003c0)=[0x0], 0x1, {r4}}, 0x58) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f00000019c0)={&(0x7f0000000040), 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="f4120000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="d9da3c3337beebc7918b07636ccfc1a9c951333857c313e216285eb3327c7a0c0009007e00000000009b25", @ANYBLOB, @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB], 0x12f4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x6, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x400000000009, 0x1, 0x948b, 0x3, 0x15f4da0c, 0x1, 0x2000000000000004, 0x62, 0x80000001, 0x6, 0xffff, 0x9, 0x40000000002, 0xfffffffffffffffe]}, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x3c3842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) 2.444153816s ago: executing program 2 (id=540): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000000)='\x00', 0x6) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080004000900000008000200", @ANYRES32=0x0, @ANYBLOB="08000400f3"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) (async) r1 = socket(0x2, 0x3, 0x100) listen$auto(r1, 0x9) r2 = fsopen$auto(0x0, 0x1) ioctl$auto_BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000000)={{0x1, 0x5, 0x400, 0x8, 0xe, 0x6, 0x401, 0x2, 0x907093a, 0x6}, 0xffff, [0x7]}) (async) futex_wait$auto(0x0, 0x2, 0x7, 0x2, &(0x7f0000000080)={0x80000000005, 0x7fff}, 0x1) socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4014) mmap$auto(0x0, 0xe8e, 0x7, 0x9b72, 0x5, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) mincore$auto(0x1000, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.955759281s ago: executing program 0 (id=541): unshare$auto(0x40000080) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x6) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/event0\x00', 0x309600, 0x0) ioctl$auto_EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port4/over_current_count\x00', 0x50080, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)="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", 0x8) read$auto(r4, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r5, 0x0, 0x400007ffff000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) read$auto(r6, 0x0, 0x20) pipe$auto(0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r8 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x80044943, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(r9, r9, 0x0, 0xfffffffffffffffe) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r10, &(0x7f0000000ec0)=""/4096, 0x300) 1.953737763s ago: executing program 1 (id=542): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0x9fc) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)='7', 0x1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002300)={0x0, 0xffffffffffffff6d, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r3) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) 1.826231247s ago: executing program 3 (id=543): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x640a00, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x3, 0x20105, 0x4000008000df, 0xeb1, r0, 0x8000) socket(0x10, 0x80000, 0x109) ioctl$auto_SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000040)="117b16ab2c45e54b2a5a06c58d4b445496f167a1ab2a7f8005") r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev\x04O\x00\x00o\x033\x00', 0x100000a3da) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) futex$auto(0x0, 0x3, 0x8, 0x0, 0x0, 0x80000001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/usb/drivers/conex/unbind\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r3 = open(0x0, 0x26142, 0x4b) write$auto(r3, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES64, @ANYBLOB='\b\x00', @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0xc000000008011, 0x3, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) mseal$auto(0x1ffff000, 0xfffffffffffffff3, 0x0) mmap$auto(0x3, 0xe8, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r5) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r6, 0x5404, 0x0) 1.698087714s ago: executing program 2 (id=544): mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) r0 = socket(0xa, 0x5, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r0) r1 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000280), 0xe080, 0x0) pread64$auto(r1, 0x0, 0xc, 0x1) writev$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x82200, 0x0) socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x4, 0xfffffff6) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socket(0x2, 0x1, 0x0) madvise$auto(0x0, 0x2003f0, 0x11) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="06"], 0x1ac}, 0x1, 0x0, 0x0, 0x48000}, 0x4004) 0s ago: executing program 0 (id=545): mmap$auto(0xa, 0x0, 0xa, 0x809b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mmap$auto(0xcc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x6) (async, rerun: 32) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0x7, 0x6}, {0x2}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x6, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 32) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (rerun: 32) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x8001af85, &(0x7f0000000000)={0x6}) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) (async) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x202, 0x0) (async, rerun: 64) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) (async, rerun: 64) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) read$auto_ima_ascii_measurements_ops_ima_fs(r4, 0x0, 0x0) (async) fcntl$auto_F_UNLCK(r3, 0x8, 0x2) (async) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socket(0x3b, 0x3, 0x20000008) (async) socket(0x27, 0x3, 0x3a) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) io_uring_setup$auto(0x7e1b, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) (async) ioctl$auto(0x3, 0x5420, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 98.030996][ T5818] cgroup: Unknown subsys name 'net' [ 98.227640][ T5818] cgroup: Unknown subsys name 'cpuset' [ 98.237526][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.192824][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.285020][ T24] cfg80211: failed to load regulatory.db [ 102.815323][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.826102][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.834000][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.846745][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.862611][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.903711][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.912041][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.925982][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.935102][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.944245][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.952275][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.960687][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.968766][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.001714][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.010044][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.048801][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.057615][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.065667][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.074832][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.094856][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.573562][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.652078][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 103.792575][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 103.828206][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 103.925751][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.933220][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.940647][ T5834] bridge_slave_0: entered allmulticast mode [ 103.948622][ T5834] bridge_slave_0: entered promiscuous mode [ 103.997076][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.004326][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.011496][ T5834] bridge_slave_1: entered allmulticast mode [ 104.019611][ T5834] bridge_slave_1: entered promiscuous mode [ 104.033012][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.040159][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.047985][ T5837] bridge_slave_0: entered allmulticast mode [ 104.055501][ T5837] bridge_slave_0: entered promiscuous mode [ 104.088565][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.095777][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.103075][ T5837] bridge_slave_1: entered allmulticast mode [ 104.110503][ T5837] bridge_slave_1: entered promiscuous mode [ 104.179998][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.233910][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.243725][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.250902][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.258651][ T5840] bridge_slave_0: entered allmulticast mode [ 104.266099][ T5840] bridge_slave_0: entered promiscuous mode [ 104.276274][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.289443][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.299148][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.306553][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.314146][ T5845] bridge_slave_0: entered allmulticast mode [ 104.321536][ T5845] bridge_slave_0: entered promiscuous mode [ 104.356872][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.365050][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.372225][ T5840] bridge_slave_1: entered allmulticast mode [ 104.379873][ T5840] bridge_slave_1: entered promiscuous mode [ 104.399590][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.407311][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.414694][ T5845] bridge_slave_1: entered allmulticast mode [ 104.422246][ T5845] bridge_slave_1: entered promiscuous mode [ 104.443613][ T5834] team0: Port device team_slave_0 added [ 104.495605][ T5834] team0: Port device team_slave_1 added [ 104.504861][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.529023][ T5837] team0: Port device team_slave_0 added [ 104.550576][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.562765][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.573783][ T5837] team0: Port device team_slave_1 added [ 104.582112][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.669832][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.677243][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.703882][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.718024][ T5845] team0: Port device team_slave_0 added [ 104.738847][ T5840] team0: Port device team_slave_0 added [ 104.745799][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.752848][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.779259][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.800396][ T5845] team0: Port device team_slave_1 added [ 104.807016][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.814248][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.841121][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.855303][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.862282][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.888481][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.901606][ T5840] team0: Port device team_slave_1 added [ 104.923264][ T52] Bluetooth: hci0: command tx timeout [ 105.003405][ T52] Bluetooth: hci2: command tx timeout [ 105.007582][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.016083][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.042115][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.059563][ T5834] hsr_slave_0: entered promiscuous mode [ 105.066268][ T5834] hsr_slave_1: entered promiscuous mode [ 105.073644][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.080616][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.107057][ T52] Bluetooth: hci1: command tx timeout [ 105.112657][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.137507][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.144632][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.170829][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.172775][ T52] Bluetooth: hci3: command tx timeout [ 105.194405][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.201386][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.227662][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.266155][ T5837] hsr_slave_0: entered promiscuous mode [ 105.272776][ T5837] hsr_slave_1: entered promiscuous mode [ 105.278980][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 105.285352][ T5837] Cannot create hsr debugfs directory [ 105.338845][ T5840] hsr_slave_0: entered promiscuous mode [ 105.346200][ T5840] hsr_slave_1: entered promiscuous mode [ 105.352310][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 105.358675][ T5840] Cannot create hsr debugfs directory [ 105.504638][ T5845] hsr_slave_0: entered promiscuous mode [ 105.511048][ T5845] hsr_slave_1: entered promiscuous mode [ 105.517966][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 105.524050][ T5845] Cannot create hsr debugfs directory [ 105.910607][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.927559][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.939170][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.960207][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.031889][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.054188][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.066496][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.091215][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.145333][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.163460][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.177925][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.215009][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.281373][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.299181][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.310339][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.322350][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.457474][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.501301][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.516756][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.557986][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.565337][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.576703][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.583955][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.617370][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.661640][ T755] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.668867][ T755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.680805][ T755] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.687990][ T755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.705618][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.731239][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.787109][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.808095][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.878971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.886230][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.899612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.906844][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.956062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.963309][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.979192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.986439][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.005822][ T52] Bluetooth: hci0: command tx timeout [ 107.083049][ T52] Bluetooth: hci2: command tx timeout [ 107.167119][ T52] Bluetooth: hci1: command tx timeout [ 107.230626][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.242816][ T52] Bluetooth: hci3: command tx timeout [ 107.389645][ T5837] veth0_vlan: entered promiscuous mode [ 107.426745][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.441073][ T5837] veth1_vlan: entered promiscuous mode [ 107.539753][ T5837] veth0_macvtap: entered promiscuous mode [ 107.570879][ T5834] veth0_vlan: entered promiscuous mode [ 107.604965][ T5837] veth1_macvtap: entered promiscuous mode [ 107.645313][ T5834] veth1_vlan: entered promiscuous mode [ 107.690299][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.705141][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.718633][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.743772][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.767481][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.779023][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.791285][ T5834] veth0_macvtap: entered promiscuous mode [ 107.803986][ T5834] veth1_macvtap: entered promiscuous mode [ 107.811269][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.820246][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.926737][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.959376][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.008993][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.022983][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.031430][ T5840] veth0_vlan: entered promiscuous mode [ 108.047765][ T5845] veth0_vlan: entered promiscuous mode [ 108.062161][ T755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.071621][ T755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.098350][ T755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.107531][ T755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.119366][ T5840] veth1_vlan: entered promiscuous mode [ 108.147471][ T5845] veth1_vlan: entered promiscuous mode [ 108.153431][ T755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.161283][ T755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.236500][ T5845] veth0_macvtap: entered promiscuous mode [ 108.277845][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.280789][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.310584][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.313670][ T5845] veth1_macvtap: entered promiscuous mode [ 108.357029][ T5840] veth0_macvtap: entered promiscuous mode [ 108.409987][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.431679][ T5840] veth1_macvtap: entered promiscuous mode [ 108.433229][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.447593][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.461916][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.497620][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.513615][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.524162][ T755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.547465][ T755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.560047][ T1340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.574248][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.664850][ T755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.680199][ T755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.696402][ T755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.706448][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.722893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.742847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.904095][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.938922][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.082598][ T52] Bluetooth: hci0: command tx timeout [ 109.125771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.150426][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.170971][ T52] Bluetooth: hci2: command tx timeout [ 109.243448][ T52] Bluetooth: hci1: command tx timeout [ 109.277317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.322635][ T52] Bluetooth: hci3: command tx timeout [ 109.350484][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.417869][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.439490][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.447445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.781635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.007346][ T5933] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.144264][ T5927] zswap: compressor not available [ 110.702585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.710895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.720103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.769680][ T5932] process 'syz.1.5' launched '/dev/fd/9/./file0' with NULL argv: empty string added [ 110.922874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.162825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.172610][ T52] Bluetooth: hci0: command tx timeout [ 111.262762][ T52] Bluetooth: hci2: command tx timeout [ 111.333861][ T52] Bluetooth: hci1: command tx timeout [ 111.415481][ T52] Bluetooth: hci3: command tx timeout [ 112.162165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.624009][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.566995][ T5989] random: crng reseeded on system resumption [ 118.819761][ T6037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 119.603154][ T52] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 119.657794][ T6050] random: crng reseeded on system resumption [ 119.705505][ T6038] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 121.823664][ T6060] [U] [ 121.826614][ T6060] [U] [ 121.829323][ T6060] [U] [ 121.832035][ T6060] [U] [ 121.867127][ T6060] [U] [ 121.869881][ T6060] [U] [ 121.872592][ T6060] [U] [ 121.875324][ T6060] [U] [ 121.900874][ T6060] [U] [ 121.904379][ T6060] [U] [ 121.904455][ T6060] [U] [ 121.904519][ T6060] [U] [ 121.905147][ T6060] [U] [ 121.905206][ T6060] [U] [ 121.905263][ T6060] [U] [ 121.905317][ T6060] [U] [ 121.905501][ T6060] [U] [ 121.905554][ T6060] [U] [ 121.905608][ T6060] [U] [ 121.905674][ T6060] [U] [ 121.905734][ T6060] [U] [ 121.905789][ T6060] [U] [ 121.905848][ T6060] [U] [ 121.905904][ T6060] [U] [ 121.906058][ T6060] [U] [ 121.949918][ T6060] [U] [ 121.949977][ T6060] [U] [ 121.950021][ T6060] [U] [ 121.951473][ T6060] [U] [ 121.951525][ T6060] [U] [ 121.951569][ T6060] [U] [ 121.951611][ T6060] [U] [ 122.053846][ T6060] [U] [ 122.067026][ T6060] [U] [ 122.067089][ T6060] [U] [ 122.067130][ T6060] [U] [ 122.211955][ T6060] [U] [ 122.214714][ T6060] [U] [ 122.217458][ T6060] [U] [ 122.220197][ T6060] [U] [ 122.223082][ T6060] [U] [ 122.225826][ T6060] [U] [ 122.228552][ T6060] [U] [ 122.231286][ T6060] [U] [ 122.358237][ T6060] [U] [ 122.361026][ T6060] [U] [ 122.363752][ T6060] [U] [ 122.366465][ T6060] [U] [ 122.569723][ T6060] [U] [ 122.572522][ T6060] [U] [ 122.575258][ T6060] [U] [ 122.577981][ T6060] [U] [ 122.592131][ T6060] [U] [ 122.594915][ T6060] [U] [ 122.597674][ T6060] [U] [ 122.600420][ T6060] [U] [ 122.726862][ T6060] [U] [ 122.729653][ T6060] [U] [ 122.732406][ T6060] [U] [ 122.735164][ T6060] [U] [ 122.795502][ T6060] [U] [ 122.798299][ T6060] [U] [ 122.801055][ T6060] [U] [ 122.803829][ T6060] [U] [ 122.807213][ T6060] [U] [ 122.809980][ T6060] [U] [ 122.812735][ T6060] [U] [ 122.815494][ T6060] [U] [ 122.819086][ T6060] [U] [ 122.821856][ T6060] [U] [ 122.824617][ T6060] [U] [ 122.827373][ T6060] [U] [ 122.830669][ T6060] [U] [ 122.833425][ T6060] [U] [ 122.836167][ T6060] [U] [ 122.838918][ T6060] [U] [ 122.842705][ T6060] [U] [ 122.845464][ T6060] [U] [ 122.848212][ T6060] [U] [ 122.850958][ T6060] [U] [ 122.855496][ T6060] [U] [ 122.858269][ T6060] [U] [ 122.861017][ T6060] [U] [ 122.863765][ T6060] [U] [ 122.868942][ T6060] [U] [ 122.871730][ T6060] [U] [ 122.874474][ T6060] [U] [ 122.877217][ T6060] [U] [ 122.884772][ T6060] [U] [ 122.887524][ T6060] [U] [ 122.890268][ T6060] [U] [ 122.893034][ T6060] [U] [ 122.904605][ T6060] [U] [ 122.907379][ T6060] [U] [ 122.910135][ T6060] [U] [ 122.912880][ T6060] [U] [ 122.916447][ T6060] [U] [ 122.919209][ T6060] [U] [ 122.921944][ T6060] [U] [ 122.924670][ T6060] [U] [ 122.928277][ T6060] [U] [ 122.931045][ T6060] [U] [ 122.933787][ T6060] [U] [ 122.936536][ T6060] [U] [ 122.958518][ T6060] [U] [ 122.961297][ T6060] [U] [ 122.964015][ T6060] [U] [ 122.966723][ T6060] [U] [ 122.969846][ T6060] [U] [ 122.972598][ T6060] [U] [ 122.975354][ T6060] [U] [ 122.978100][ T6060] [U] [ 122.983528][ T6060] [U] [ 122.986301][ T6060] [U] [ 122.989055][ T6060] [U] [ 122.991807][ T6060] [U] [ 123.001199][ T6088] QAT: Device 0 not found [ 123.030370][ T6060] [U] [ 123.033159][ T6060] [U] [ 123.035906][ T6060] [U] [ 123.038661][ T6060] [U] [ 123.050938][ T6060] [U] [ 123.052567][ T6088] Zero length message leads to an empty skb [ 123.053713][ T6060] [U] [ 123.062297][ T6060] [U] [ 123.065012][ T6060] [U] [ 123.067993][ T6060] [U] [ 123.070740][ T6060] [U] [ 123.073476][ T6060] [U] [ 123.122146][ T6058] [U] [ 124.327806][ T6105] random: crng reseeded on system resumption [ 125.267908][ T6108] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.430585][ T6128] random: crng reseeded on system resumption [ 128.043652][ T6143] random: crng reseeded on system resumption [ 128.330306][ T6145] random: crng reseeded on system resumption [ 129.036127][ T6163] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.184366][ T30] audit: type=1804 audit(1761808391.215:2): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.44" name="/newroot/9/file0" dev="tmpfs" ino=68 res=1 errno=0 [ 129.219571][ T30] audit: type=1804 audit(1761808391.215:3): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.44" name="/newroot/9/file0" dev="tmpfs" ino=68 res=1 errno=0 [ 129.832435][ T6163] syz.0.45 (6163) used greatest stack depth: 17240 bytes left [ 132.893482][ T6220] netlink: 5 bytes leftover after parsing attributes in process `syz.0.55'. [ 136.325646][ T6251] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=1569308806 (25108940896 ns) > initial count (13698835952 ns). Using initial count to start timer. [ 140.092582][ T6288] random: crng reseeded on system resumption [ 142.151287][ T6318] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 142.163037][ T6318] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 143.256446][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.264525][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.704833][ T6352] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 146.931494][ T52] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 150.496867][ T6419] blktrace: Concurrent blktraces are not allowed on loop2 [ 152.964187][ T6450] random: crng reseeded on system resumption [ 154.950960][ T6474] random: crng reseeded on system resumption [ 155.614124][ T6486] Console: switching to colour VGA+ 80x25 [ 155.648811][ T6483] random: crng reseeded on system resumption [ 156.187991][ T6489] Console: switching to colour frame buffer device 128x48 [ 158.764633][ T6515] random: crng reseeded on system resumption [ 164.330973][ T5836] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 164.331017][ T5836] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 164.346037][ T5836] Bluetooth: hci0: Dropping invalid advertising data [ 164.353105][ T5836] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 164.353132][ T5836] Bluetooth: hci0: Dropping invalid advertising data [ 164.369879][ T5836] Bluetooth: hci0: Malformed LE Event: 0x02 [ 166.264405][ T6584] random: crng reseeded on system resumption [ 166.302945][ T6586] ======================================================= [ 166.302945][ T6586] WARNING: The mand mount option has been deprecated and [ 166.302945][ T6586] and is ignored by this kernel. Remove the mand [ 166.302945][ T6586] option from the mount to silence this warning. [ 166.302945][ T6586] ======================================================= [ 169.594770][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 169.773219][ T6630] hub 8-0:1.0: USB hub found [ 169.834384][ T6630] hub 8-0:1.0: 1 port detected [ 170.279157][ T6641] random: crng reseeded on system resumption [ 173.486911][ T6681] vhci_hcd: invalid port number 16 [ 173.519174][ T6681] vhci_hcd: invalid port number 16 [ 174.839987][ T6696] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 175.102559][ T6697] futex_wake_op: syz.1.144 tries to shift op by -2048; fix this program [ 178.398208][ T6732] random: crng reseeded on system resumption [ 179.589397][ T6708] syz.1.144: vmalloc error: size 8003584, failed to allocated page array size 15632, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.638006][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT(full) [ 179.638036][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.638052][ T6708] Call Trace: [ 179.638059][ T6708] [ 179.638068][ T6708] dump_stack_lvl+0x16c/0x1f0 [ 179.638105][ T6708] warn_alloc+0x248/0x3a0 [ 179.638138][ T6708] ? __pfx_warn_alloc+0x10/0x10 [ 179.638184][ T6708] ? __do_sys_listmount+0x280/0xeb0 [ 179.638228][ T6708] ? __vmalloc_node_noprof+0xad/0xf0 [ 179.638268][ T6708] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 179.638311][ T6708] ? __do_sys_listmount+0x280/0xeb0 [ 179.638353][ T6708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.638392][ T6708] ? ___kmalloc_large_node+0xed/0x160 [ 179.638429][ T6708] __kvmalloc_node_noprof+0x431/0x9c0 [ 179.638456][ T6708] ? __do_sys_listmount+0x280/0xeb0 [ 179.638494][ T6708] ? __do_sys_listmount+0x280/0xeb0 [ 179.638542][ T6708] ? _copy_from_user+0x59/0xd0 [ 179.638583][ T6708] ? __do_sys_listmount+0x280/0xeb0 [ 179.638617][ T6708] __do_sys_listmount+0x280/0xeb0 [ 179.638661][ T6708] ? __pfx___do_sys_listmount+0x10/0x10 [ 179.638716][ T6708] do_syscall_64+0xcd/0xfa0 [ 179.638743][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.638766][ T6708] RIP: 0033:0x7ff2d1f8efc9 [ 179.638787][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.638816][ T6708] RSP: 002b:00007ff2d2e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 179.638844][ T6708] RAX: ffffffffffffffda RBX: 00007ff2d21e6180 RCX: 00007ff2d1f8efc9 [ 179.638864][ T6708] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 179.638878][ T6708] RBP: 00007ff2d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.638891][ T6708] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 179.638904][ T6708] R13: 00007ff2d21e6218 R14: 00007ff2d21e6180 R15: 00007ffe79e1a178 [ 179.638933][ T6708] [ 179.638941][ T6708] Mem-Info: [ 179.885781][ T6708] active_anon:7288 inactive_anon:22 isolated_anon:0 [ 179.885781][ T6708] active_file:10515 inactive_file:39617 isolated_file:0 [ 179.885781][ T6708] unevictable:768 dirty:534 writeback:0 [ 179.885781][ T6708] slab_reclaimable:10535 slab_unreclaimable:91645 [ 179.885781][ T6708] mapped:31042 shmem:1426 pagetables:1141 [ 179.885781][ T6708] sec_pagetables:0 bounce:0 [ 179.885781][ T6708] kernel_misc_reclaimable:0 [ 179.885781][ T6708] free:1333655 free_pcp:15702 free_cma:0 [ 179.931206][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.073155][ T6747] random: crng reseeded on system resumption [ 180.182842][ T6708] Node 0 active_anon:27248kB inactive_anon:56kB active_file:42060kB inactive_file:158332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128260kB dirty:2140kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11492kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.216013][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.383672][ T6708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.581044][ T6708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.837014][ T6708] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 180.872499][ T6708] Node 0 DMA32 free:1427388kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26072kB inactive_anon:1368kB active_file:42060kB inactive_file:158332kB unevictable:1536kB writepending:2140kB zspages:804kB present:3129332kB managed:2545108kB mlocked:0kB bounce:0kB free_pcp:44208kB local_pcp:18436kB free_cma:0kB [ 181.006023][ T6708] lowmem_reserve[]: 0 0 1 1 1 [ 181.010910][ T6708] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.058327][ T6708] lowmem_reserve[]: 0 0 0 0 0 [ 181.084523][ T6708] Node 1 Normal free:3890420kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20584kB local_pcp:13056kB free_cma:0kB [ 181.179327][ T6708] lowmem_reserve[]: 0 0 0 0 0 [ 181.263509][ T6708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.362432][ T6708] Node 0 DMA32: 827*4kB (UE) 1096*8kB (UME) 665*16kB (UME) 513*32kB (UME) 222*64kB (UME) 102*128kB (UME) 12*256kB (UM) 15*512kB (ME) 6*1024kB (UM) 5*2048kB (UM) 326*4096kB (UM) = 1428828kB [ 181.554851][ T6708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 181.569580][ T6708] Node 1 Normal: 207*4kB (UME) 63*8kB (UME) 42*16kB (UME) 59*32kB (UME) 23*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3890420kB [ 181.589787][ T6708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.601410][ T6708] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 181.630475][ T6708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.711172][ T6708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.779712][ T6708] 52309 total pagecache pages [ 181.793008][ T6708] 14 pages in swap cache [ 181.803756][ T6708] Free swap = 56340kB [ 181.832568][ T6708] Total swap = 124996kB [ 181.836965][ T6708] 2097051 pages RAM [ 181.856460][ T6708] 0 pages HighMem/MovableOnly [ 181.906419][ T6708] 428684 pages reserved [ 181.948021][ T6708] 0 pages cma reserved [ 182.523595][ T6777] bridge0: port 3(hsr0) entered blocking state [ 182.529963][ T6777] bridge0: port 3(hsr0) entered disabled state [ 182.536631][ T6777] hsr0: entered allmulticast mode [ 182.541713][ T6777] hsr_slave_0: entered allmulticast mode [ 182.547924][ T6777] hsr_slave_1: entered allmulticast mode [ 182.555662][ T6777] hsr0: entered promiscuous mode [ 182.561874][ T6777] bridge0: port 3(hsr0) entered blocking state [ 182.568346][ T6777] bridge0: port 3(hsr0) entered forwarding state [ 186.985270][ T6821] random: crng reseeded on system resumption [ 187.822473][ T30] audit: type=1800 audit(4294967304.660:4): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.171" name="lu_gp_id" dev="configfs" ino=14440 res=0 errno=0 [ 192.066542][ T6881] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 192.066542][ T6881] [ 193.077304][ T6890] zswap: compressor not available [ 193.254251][ T6900] size and base must be multiples of 4 kiB [ 193.260390][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 193.260419][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.260433][ T6900] Call Trace: [ 193.260440][ T6900] [ 193.260448][ T6900] dump_stack_lvl+0x16c/0x1f0 [ 193.260477][ T6900] mtrr_del+0xd1/0x110 [ 193.260510][ T6900] mtrr_ioctl+0x922/0xcf0 [ 193.260556][ T6900] ? __pfx_mtrr_ioctl+0x10/0x10 [ 193.260594][ T6900] ? find_held_lock+0x2b/0x80 [ 193.260624][ T6900] ? __fget_files+0x20e/0x3c0 [ 193.260648][ T6900] ? __pfx_mtrr_ioctl+0x10/0x10 [ 193.260679][ T6900] proc_reg_unlocked_ioctl+0x229/0x320 [ 193.260710][ T6900] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 193.260745][ T6900] __x64_sys_ioctl+0x18e/0x210 [ 193.260781][ T6900] do_syscall_64+0xcd/0xfa0 [ 193.260828][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.260852][ T6900] RIP: 0033:0x7fed2518efc9 [ 193.260869][ T6900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.260891][ T6900] RSP: 002b:00007fed26061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.260912][ T6900] RAX: ffffffffffffffda RBX: 00007fed253e6180 RCX: 00007fed2518efc9 [ 193.260927][ T6900] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 193.260940][ T6900] RBP: 00007fed25211f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.260954][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.260967][ T6900] R13: 00007fed253e6218 R14: 00007fed253e6180 R15: 00007fff547e56b8 [ 193.260998][ T6900] [ 193.421639][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.671980][ T6915] random: crng reseeded on system resumption [ 199.033895][ T6934] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 200.202789][ T6970] random: crng reseeded on system resumption [ 204.689414][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.695908][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.195298][ T7004] random: crng reseeded on system resumption [ 207.341355][ T7022] random: crng reseeded on system resumption [ 210.262773][ T7067] size and base must be multiples of 4 kiB [ 210.268604][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.0.213 Not tainted syzkaller #0 PREEMPT(full) [ 210.268631][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.268644][ T7067] Call Trace: [ 210.268651][ T7067] [ 210.268659][ T7067] dump_stack_lvl+0x16c/0x1f0 [ 210.268687][ T7067] mtrr_del+0xd1/0x110 [ 210.268724][ T7067] mtrr_ioctl+0x922/0xcf0 [ 210.268757][ T7067] ? __pfx_mtrr_ioctl+0x10/0x10 [ 210.268793][ T7067] ? find_held_lock+0x2b/0x80 [ 210.268824][ T7067] ? __fget_files+0x20e/0x3c0 [ 210.268848][ T7067] ? __pfx_mtrr_ioctl+0x10/0x10 [ 210.268879][ T7067] proc_reg_unlocked_ioctl+0x229/0x320 [ 210.268910][ T7067] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 210.268945][ T7067] __x64_sys_ioctl+0x18e/0x210 [ 210.268981][ T7067] do_syscall_64+0xcd/0xfa0 [ 210.269008][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.269030][ T7067] RIP: 0033:0x7fed2518efc9 [ 210.269047][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.269069][ T7067] RSP: 002b:00007fed26082038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.269089][ T7067] RAX: ffffffffffffffda RBX: 00007fed253e6090 RCX: 00007fed2518efc9 [ 210.269103][ T7067] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 210.269116][ T7067] RBP: 00007fed25211f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.269130][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.269142][ T7067] R13: 00007fed253e6128 R14: 00007fed253e6090 R15: 00007fff547e56b8 [ 210.269171][ T7067] [ 211.065149][ T7071] random: crng reseeded on system resumption [ 213.408694][ T7105] syz.0.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 213.532684][ T7095] zswap: compressor not available [ 214.082294][ T7103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.365359][ T7103] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.503813][ T7103] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.601615][ T7103] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.736306][ T7103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.766596][ T7103] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 214.858847][ T7120] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 214.932309][ T7103] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 215.066719][ T7103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.103521][ T7103] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 215.332794][ T7103] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 215.375087][ T7103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.381469][ T7103] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 215.435838][ T7103] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 216.042653][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.614103][ T7147] FAULT_INJECTION: forcing a failure. [ 216.614103][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 216.627519][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) [ 216.627562][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.627581][ T7147] Call Trace: [ 216.627591][ T7147] [ 216.627603][ T7147] dump_stack_lvl+0x16c/0x1f0 [ 216.627645][ T7147] should_fail_ex+0x512/0x640 [ 216.627696][ T7147] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 216.627734][ T7147] ? __pfx_filemap_map_pages+0x10/0x10 [ 216.627766][ T7147] should_failslab+0xc2/0x120 [ 216.627810][ T7147] kmem_cache_alloc_noprof+0x75/0x6e0 [ 216.627843][ T7147] ? __lock_acquire+0xb8a/0x1c90 [ 216.627886][ T7147] ? ptlock_alloc+0x1f/0x70 [ 216.627950][ T7147] ? __pfx_filemap_map_pages+0x10/0x10 [ 216.627980][ T7147] ? ptlock_alloc+0x1f/0x70 [ 216.628029][ T7147] ptlock_alloc+0x1f/0x70 [ 216.628079][ T7147] pte_alloc_one+0x84/0x350 [ 216.628119][ T7147] __do_fault+0x320/0x490 [ 216.628151][ T7147] ? do_raw_spin_lock+0x12c/0x2b0 [ 216.628208][ T7147] ? __pfx_filemap_map_pages+0x10/0x10 [ 216.628238][ T7147] do_pte_missing+0x1a6/0x3ba0 [ 216.628291][ T7147] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 216.628343][ T7147] ? __pmd_alloc+0x64f/0x8b0 [ 216.628391][ T7147] __handle_mm_fault+0x1556/0x2aa0 [ 216.628451][ T7147] ? mt_find+0x3e2/0xa20 [ 216.628493][ T7147] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.628541][ T7147] ? __pfx_mt_find+0x10/0x10 [ 216.628604][ T7147] ? find_vma+0xbf/0x140 [ 216.628642][ T7147] ? __pfx_find_vma+0x10/0x10 [ 216.628686][ T7147] handle_mm_fault+0x589/0xd10 [ 216.628739][ T7147] ? __pkru_allows_pkey+0x11/0xb0 [ 216.628794][ T7147] do_user_addr_fault+0x7a6/0x1370 [ 216.628830][ T7147] ? rcu_is_watching+0x12/0xc0 [ 216.628869][ T7147] exc_page_fault+0x64/0xc0 [ 216.628905][ T7147] asm_exc_page_fault+0x26/0x30 [ 216.628943][ T7147] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 216.628993][ T7147] Code: e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f [ 216.629025][ T7147] RSP: 0018:ffffc9000b15fda0 EFLAGS: 00050202 [ 216.629052][ T7147] RAX: 000000000000002f RBX: 0000000000000004 RCX: 0000000000000004 [ 216.629071][ T7147] RDX: ffffed1004473860 RSI: ffff88802239c2fc RDI: 0000000000000000 [ 216.629093][ T7147] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100447385f [ 216.629113][ T7147] R10: ffff88802239c2ff R11: 0000000000000001 R12: ffff88802239c2fc [ 216.629134][ T7147] R13: 0000000000000004 R14: 00007ffffffff000 R15: 0000000000000000 [ 216.629176][ T7147] _copy_to_user+0xbb/0xd0 [ 216.629232][ T7147] __do_sys_getcwd+0x483/0x930 [ 216.629289][ T7147] ? __pfx___do_sys_getcwd+0x10/0x10 [ 216.629333][ T7147] ? fput+0x9b/0xd0 [ 216.629378][ T7147] ? xfd_validate_state+0x61/0x180 [ 216.629422][ T7147] ? __pfx_ksys_write+0x10/0x10 [ 216.629477][ T7147] do_syscall_64+0xcd/0xfa0 [ 216.629516][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.629552][ T7147] RIP: 0033:0x7faeb058efc9 [ 216.629581][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.629617][ T7147] RSP: 002b:00007faeb140f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 216.629646][ T7147] RAX: ffffffffffffffda RBX: 00007faeb07e5fa0 RCX: 00007faeb058efc9 [ 216.629665][ T7147] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 216.629683][ T7147] RBP: 00007faeb0611f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.629701][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.629719][ T7147] R13: 00007faeb07e6038 R14: 00007faeb07e5fa0 R15: 00007fff2317fac8 [ 216.629761][ T7147] [ 217.001792][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.047592][ T7147] FAULT_INJECTION: forcing a failure. [ 217.047592][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 217.082882][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.293601][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.2.229 Not tainted syzkaller #0 PREEMPT(full) [ 217.293634][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.293648][ T7147] Call Trace: [ 217.293655][ T7147] [ 217.293664][ T7147] dump_stack_lvl+0x16c/0x1f0 [ 217.293707][ T7147] should_fail_ex+0x512/0x640 [ 217.293741][ T7147] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 217.293768][ T7147] should_failslab+0xc2/0x120 [ 217.293799][ T7147] kmem_cache_alloc_noprof+0x75/0x6e0 [ 217.293822][ T7147] ? __kernfs_new_node+0xd2/0x8e0 [ 217.293856][ T7147] ? __kernfs_new_node+0xd2/0x8e0 [ 217.293910][ T7147] __kernfs_new_node+0xd2/0x8e0 [ 217.293944][ T7147] ? __pfx___kernfs_new_node+0x10/0x10 [ 217.293982][ T7147] ? find_held_lock+0x2b/0x80 [ 217.294008][ T7147] ? kernfs_root+0xee/0x2a0 [ 217.294044][ T7147] kernfs_new_node+0x13c/0x1e0 [ 217.294083][ T7147] __kernfs_create_file+0x53/0x350 [ 217.294111][ T7147] sysfs_add_file_mode_ns+0x207/0x3c0 [ 217.294146][ T7147] internal_create_group+0x578/0xf30 [ 217.294185][ T7147] ? __pfx_internal_create_group+0x10/0x10 [ 217.294222][ T7147] ? kernfs_create_link+0x1bd/0x240 [ 217.294250][ T7147] internal_create_groups+0x9d/0x150 [ 217.294284][ T7147] device_add+0x77f/0x1aa0 [ 217.294325][ T7147] ? __pfx_device_add+0x10/0x10 [ 217.294361][ T7147] ? lockdep_init_map_type+0x5c/0x280 [ 217.294395][ T7147] ? __init_waitqueue_head+0xca/0x150 [ 217.294440][ T7147] netdev_register_kobject+0x1a9/0x3d0 [ 217.294473][ T7147] register_netdevice+0x13dc/0x2270 [ 217.294505][ T7147] ? __pfx_register_netdevice+0x10/0x10 [ 217.294540][ T7147] ppp_dev_configure+0xa1e/0xd40 [ 217.294581][ T7147] ppp_ioctl+0x170e/0x2880 [ 217.294616][ T7147] ? find_held_lock+0x2b/0x80 [ 217.294639][ T7147] ? __pfx_ppp_ioctl+0x10/0x10 [ 217.294677][ T7147] ? __fget_files+0x20e/0x3c0 [ 217.294704][ T7147] ? __pfx_ppp_ioctl+0x10/0x10 [ 217.294738][ T7147] __x64_sys_ioctl+0x18e/0x210 [ 217.294775][ T7147] do_syscall_64+0xcd/0xfa0 [ 217.294803][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.294827][ T7147] RIP: 0033:0x7faeb058efc9 [ 217.294845][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.294872][ T7147] RSP: 002b:00007faeb140f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.294895][ T7147] RAX: ffffffffffffffda RBX: 00007faeb07e5fa0 RCX: 00007faeb058efc9 [ 217.294910][ T7147] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 217.294923][ T7147] RBP: 00007faeb0611f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.294937][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.294950][ T7147] R13: 00007faeb07e6038 R14: 00007faeb07e5fa0 R15: 00007fff2317fac8 [ 217.294981][ T7147] [ 217.593529][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.124862][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.085862][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.168424][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.636510][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.193456][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.906024][ T30] audit: type=1800 audit(4294969385.754:5): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.232" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 221.148405][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.227976][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.705821][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.272276][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.662921][ T7215] WARNING! power/level is deprecated; use power/control instead [ 224.838059][ T30] audit: type=1800 audit(4294969389.714:6): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="dbroot" dev="configfs" ino=16866 res=0 errno=0 [ 225.915744][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 226.558155][ T7263] FAULT_INJECTION: forcing a failure. [ 226.558155][ T7263] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 226.601994][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 226.602042][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.602068][ T7263] Call Trace: [ 226.602080][ T7263] [ 226.602093][ T7263] dump_stack_lvl+0x16c/0x1f0 [ 226.602135][ T7263] should_fail_ex+0x512/0x640 [ 226.602191][ T7263] should_fail_alloc_page+0xe7/0x130 [ 226.602238][ T7263] prepare_alloc_pages+0x3c2/0x610 [ 226.602281][ T7263] ? rcu_is_watching+0x12/0xc0 [ 226.602321][ T7263] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 226.602356][ T7263] ? css_rstat_updated+0x1c2/0x510 [ 226.602395][ T7263] ? __pfx_css_rstat_updated+0x10/0x10 [ 226.602431][ T7263] ? lock_acquire+0x179/0x350 [ 226.602472][ T7263] ? find_held_lock+0x2b/0x80 [ 226.602507][ T7263] ? rcu_is_watching+0x12/0xc0 [ 226.602542][ T7263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 226.602575][ T7263] ? __mod_zone_page_state+0xcc/0x1a0 [ 226.602638][ T7263] ? __lock_acquire+0x622/0x1c90 [ 226.602685][ T7263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.602741][ T7263] ? policy_nodemask+0xea/0x4e0 [ 226.602787][ T7263] alloc_pages_mpol+0x1fb/0x550 [ 226.602830][ T7263] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 226.602886][ T7263] folio_alloc_mpol_noprof+0x36/0x2f0 [ 226.602938][ T7263] vma_alloc_folio_noprof+0xed/0x1e0 [ 226.602989][ T7263] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 226.603058][ T7263] do_pte_missing+0x2202/0x3ba0 [ 226.603112][ T7263] ? find_held_lock+0x2b/0x80 [ 226.603156][ T7263] __handle_mm_fault+0x1556/0x2aa0 [ 226.603217][ T7263] ? __pfx___handle_mm_fault+0x10/0x10 [ 226.603272][ T7263] ? __pte_offset_map_lock+0x174/0x310 [ 226.603314][ T7263] ? find_held_lock+0x2b/0x80 [ 226.603359][ T7263] ? follow_page_pte+0x5cf/0x1390 [ 226.603410][ T7263] handle_mm_fault+0x589/0xd10 [ 226.603469][ T7263] __get_user_pages+0x54e/0x3530 [ 226.603532][ T7263] ? __pfx___get_user_pages+0x10/0x10 [ 226.603589][ T7263] populate_vma_page_range+0x267/0x3f0 [ 226.603638][ T7263] ? __pfx_populate_vma_page_range+0x10/0x10 [ 226.603682][ T7263] ? __pfx_find_vma_intersection+0x10/0x10 [ 226.603726][ T7263] ? do_mmap+0x69c/0x1210 [ 226.603772][ T7263] __mm_populate+0x1d8/0x380 [ 226.603820][ T7263] ? __pfx___mm_populate+0x10/0x10 [ 226.603869][ T7263] ? up_write+0x1b2/0x520 [ 226.603922][ T7263] vm_mmap_pgoff+0x37f/0x470 [ 226.603968][ T7263] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 226.604021][ T7263] ? __x64_sys_futex+0x1e0/0x4c0 [ 226.604070][ T7263] ? __x64_sys_futex+0x1e9/0x4c0 [ 226.604121][ T7263] ksys_mmap_pgoff+0x7d/0x5c0 [ 226.604160][ T7263] ? xfd_validate_state+0x61/0x180 [ 226.604205][ T7263] ? __pfx_do_writev+0x10/0x10 [ 226.604241][ T7263] __x64_sys_mmap+0x125/0x190 [ 226.604295][ T7263] do_syscall_64+0xcd/0xfa0 [ 226.604335][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.604367][ T7263] RIP: 0033:0x7ff2d1f8efc9 [ 226.604393][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.604424][ T7263] RSP: 002b:00007ff2d2eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 226.604455][ T7263] RAX: ffffffffffffffda RBX: 00007ff2d21e5fa0 RCX: 00007ff2d1f8efc9 [ 226.604478][ T7263] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 226.604498][ T7263] RBP: 00007ff2d2011f91 R08: 0000000000000002 R09: 0000000000008000 [ 226.604519][ T7263] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 226.604539][ T7263] R13: 00007ff2d21e6038 R14: 00007ff2d21e5fa0 R15: 00007ffe79e1a178 [ 226.604584][ T7263] [ 227.130019][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 227.183406][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 227.250355][ T7259] netlink: 342 bytes leftover after parsing attributes in process `syz.3.247'. [ 227.667342][ T5836] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 227.667384][ T5836] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 227.683175][ T5836] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 227.683229][ T5836] Bluetooth: hci3: adv larger than maximum supported [ 227.692692][ T5836] Bluetooth: hci3: Malformed LE Event: 0x0d [ 229.481395][ T7298] QAT: Invalid ioctl 1074028801 [ 230.698595][ T7314] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 231.282931][ T7297] syz.1.257 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 231.323743][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 231.323779][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.323795][ T7297] Call Trace: [ 231.323804][ T7297] [ 231.323814][ T7297] dump_stack_lvl+0x16c/0x1f0 [ 231.323849][ T7297] dump_header+0x101/0x930 [ 231.323882][ T7297] oom_kill_process+0x272/0xa40 [ 231.323914][ T7297] out_of_memory+0x350/0x1700 [ 231.323951][ T7297] ? __pfx_out_of_memory+0x10/0x10 [ 231.323993][ T7297] mem_cgroup_out_of_memory+0x118/0x130 [ 231.324039][ T7297] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 231.324095][ T7297] ? do_raw_spin_unlock+0x172/0x230 [ 231.324152][ T7297] try_charge_memcg+0x695/0xd30 [ 231.324199][ T7297] ? __pfx_try_charge_memcg+0x10/0x10 [ 231.324238][ T7297] ? __print_lock_name+0xa1/0xe0 [ 231.324270][ T7297] ? rcu_read_unlock+0x17/0x60 [ 231.324321][ T7297] charge_memcg+0x8a/0x230 [ 231.324361][ T7297] __mem_cgroup_charge+0x2b/0x1e0 [ 231.324407][ T7297] filemap_add_folio+0xe6/0x610 [ 231.324442][ T7297] ? __pfx_filemap_add_folio+0x10/0x10 [ 231.324487][ T7297] __filemap_get_folio+0x510/0xc30 [ 231.324533][ T7297] filemap_fault+0x661/0x29a0 [ 231.324606][ T7297] ? __pfx_filemap_fault+0x10/0x10 [ 231.324658][ T7297] ? rcu_is_watching+0x12/0xc0 [ 231.324702][ T7297] ? __pfx_filemap_map_pages+0x10/0x10 [ 231.324731][ T7297] __do_fault+0x10d/0x490 [ 231.324768][ T7297] ? __pfx_filemap_map_pages+0x10/0x10 [ 231.324795][ T7297] do_pte_missing+0x1a6/0x3ba0 [ 231.324846][ T7297] ? find_held_lock+0x2b/0x80 [ 231.324877][ T7297] ? __handle_mm_fault+0x1529/0x2aa0 [ 231.324927][ T7297] __handle_mm_fault+0x1556/0x2aa0 [ 231.324984][ T7297] ? __pfx___handle_mm_fault+0x10/0x10 [ 231.325039][ T7297] ? lock_vma_under_rcu+0x176/0x530 [ 231.325102][ T7297] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 231.325161][ T7297] handle_mm_fault+0x589/0xd10 [ 231.325212][ T7297] ? __pkru_allows_pkey+0x11/0xb0 [ 231.325263][ T7297] do_user_addr_fault+0x60c/0x1370 [ 231.325297][ T7297] ? rcu_is_watching+0x12/0xc0 [ 231.325334][ T7297] exc_page_fault+0x64/0xc0 [ 231.325370][ T7297] asm_exc_page_fault+0x26/0x30 [ 231.325400][ T7297] RIP: 0033:0x7ff2d1e6f01a [ 231.325425][ T7297] Code: 01 4c 89 44 24 10 4c 89 54 24 08 e8 c0 a0 fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 <48> 89 68 f8 45 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00 [ 231.325455][ T7297] RSP: 002b:00007ffe79e1a200 EFLAGS: 00010202 [ 231.325480][ T7297] RAX: 0000001b315dd000 RBX: 00007ff2d2d15720 RCX: 0000001b315dcff8 [ 231.325501][ T7297] RDX: 0000001b31224220 RSI: 0000000000000008 RDI: 00007ff2d2d15720 [ 231.325522][ T7297] RBP: ffffffff81fd5d1d R08: 00007ff2d21e6128 R09: 00007ff2d21d2000 [ 231.325543][ T7297] R10: 00007ff2d15fd008 R11: 000000000000001b R12: 000000000000001b [ 231.325563][ T7297] R13: 000000000000050c R14: ffffffff81fd59d1 R15: 000000000004315c [ 231.325585][ T7297] ? try_to_free_mem_cgroup_pages+0x1c1/0x790 [ 231.325621][ T7297] ? try_to_free_mem_cgroup_pages+0x50d/0x790 [ 231.325682][ T7297] [ 231.618952][ T7297] memory: usage 3072kB, limit 3072kB, failcnt 49415 [ 231.630182][ T7297] memory+swap: usage 3120kB, limit 9007199254740988kB, failcnt 0 [ 231.782107][ T7297] kmem: usage 556kB, limit 9007199254740988kB, failcnt 0 [ 231.836432][ T7297] Memory cgroup stats for /syz1: [ 231.836676][ T7297] cache 122880 [ 231.848416][ T7297] rss 2441216 [ 231.851788][ T7297] rss_huge 0 [ 231.858689][ T7297] shmem 0 [ 231.861677][ T7297] mapped_file 122880 [ 231.876326][ T7297] dirty 106496 [ 231.885679][ T7297] writeback 0 [ 231.889107][ T7297] workingset_refault_anon 3211 [ 231.894312][ T7297] workingset_refault_file 13442 [ 231.899380][ T7297] swap 49152 [ 231.909462][ T7297] swapcached 131072 [ 231.913374][ T7297] pgpgin 81719 [ 231.916849][ T7297] pgpgout 81090 [ 231.920403][ T7297] pgfault 77176 [ 231.928997][ T7297] pgmajfault 1845 [ 231.932950][ T7297] inactive_anon 12288 [ 231.936981][ T7297] active_anon 0 [ 231.940586][ T7297] inactive_file 0 [ 231.944574][ T7297] active_file 0 [ 231.948066][ T7297] unevictable 2564096 [ 231.956990][ T7297] hierarchical_memory_limit 3145728 [ 232.031600][ T7297] hierarchical_memsw_limit 9223372036854771712 [ 232.037814][ T7297] total_cache 122880 [ 232.062641][ T7297] total_rss 2441216 [ 232.075666][ T7297] total_rss_huge 0 [ 232.100846][ T7297] total_shmem 0 [ 232.115332][ T7297] total_mapped_file 122880 [ 232.119800][ T7297] total_dirty 106496 [ 232.127499][ T7297] total_writeback 0 [ 232.135043][ T7297] total_workingset_refault_anon 3211 [ 232.149685][ T7297] total_workingset_refault_file 13442 [ 232.155533][ T7297] total_swap 49152 [ 232.194323][ T7297] total_swapcached 131072 [ 232.198863][ T7297] total_pgpgin 81719 [ 232.203986][ T7297] total_pgpgout 81090 [ 232.209236][ T7297] total_pgfault 77176 [ 232.215027][ T7297] total_pgmajfault 1845 [ 232.229394][ T7297] total_inactive_anon 12288 [ 232.236563][ T7297] total_active_anon 0 [ 232.242213][ T7297] total_inactive_file 0 [ 232.252693][ T7297] total_active_file 0 [ 232.261793][ T7297] total_unevictable 2564096 [ 232.271117][ T7297] anon_cost 0 [ 232.277046][ T7297] file_cost 0 [ 232.287236][ T7297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.257,pid=7297,uid=0 [ 232.302100][ T7344] netlink: 346 bytes leftover after parsing attributes in process `syz.0.265'. [ 232.318072][ T7297] Memory cgroup out of memory: Killed process 7297 (syz.1.257) total-vm:135112kB, anon-rss:3540kB, file-rss:21940kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 234.091302][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 234.105292][ T7378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 234.156628][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.233998][ T7381] bridge_slave_1 (unregistering): left allmulticast mode [ 234.261178][ T7381] bridge_slave_1 (unregistering): left promiscuous mode [ 234.310354][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.401738][ T7439] kexec: Could not allocate control_code_buffer [ 240.692069][ T7507] bond0: invalid ARP target specified [ 241.661143][ T7550] mmap: syz.1.312 (7550) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.170792][ T7565] zswap: compressor 0 not available [ 245.168625][ T30] audit: type=1804 audit(4294969410.150:7): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.325" name="/newroot/90/file0" dev="tmpfs" ino=517 res=1 errno=0 [ 245.761780][ T5834] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 245.774002][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 245.774044][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.774063][ T5834] Call Trace: [ 245.774073][ T5834] [ 245.774086][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 245.774127][ T5834] dump_header+0x101/0x930 [ 245.774164][ T5834] oom_kill_process+0x272/0xa40 [ 245.774203][ T5834] out_of_memory+0x350/0x1700 [ 245.774244][ T5834] ? __pfx_out_of_memory+0x10/0x10 [ 245.774286][ T5834] mem_cgroup_out_of_memory+0x118/0x130 [ 245.774346][ T5834] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 245.774405][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 245.774463][ T5834] try_charge_memcg+0x695/0xd30 [ 245.774510][ T5834] ? __pfx_try_charge_memcg+0x10/0x10 [ 245.774559][ T5834] ? find_held_lock+0x2b/0x80 [ 245.774597][ T5834] charge_memcg+0x8a/0x230 [ 245.774637][ T5834] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 245.774689][ T5834] __read_swap_cache_async+0x397/0x500 [ 245.774727][ T5834] ? __pfx___read_swap_cache_async+0x10/0x10 [ 245.774766][ T5834] ? lock_acquire+0x179/0x350 [ 245.774808][ T5834] ? find_held_lock+0x2b/0x80 [ 245.774845][ T5834] swap_cluster_readahead+0x432/0x770 [ 245.774877][ T5834] ? mark_held_locks+0x49/0x80 [ 245.774927][ T5834] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 245.774957][ T5834] ? rcu_is_watching+0x12/0xc0 [ 245.774991][ T5834] ? trace_sched_exit_tp+0x10/0x120 [ 245.775043][ T5834] ? __schedule+0x11a3/0x5de0 [ 245.775091][ T5834] ? __lock_acquire+0x622/0x1c90 [ 245.775131][ T5834] ? get_vma_policy+0x242/0x3c0 [ 245.775179][ T5834] swapin_readahead+0x13a/0xd60 [ 245.775222][ T5834] ? __pfx_swapin_readahead+0x10/0x10 [ 245.775251][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 245.775280][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 245.775306][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 245.775349][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 245.775379][ T5834] ? swap_cache_get_folio+0x1f/0x8e0 [ 245.775404][ T5834] ? swap_cache_get_folio+0x293/0x8e0 [ 245.775433][ T5834] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 245.775459][ T5834] ? __pfx_get_swap_device+0x10/0x10 [ 245.775497][ T5834] ? do_swap_page+0x232/0x6340 [ 245.775533][ T5834] ? do_swap_page+0x241/0x6340 [ 245.775574][ T5834] do_swap_page+0x86c/0x6340 [ 245.775629][ T5834] ? __pfx_do_swap_page+0x10/0x10 [ 245.775671][ T5834] ? __pfx_default_wake_function+0x10/0x10 [ 245.775702][ T5834] ? __lock_acquire+0x622/0x1c90 [ 245.775744][ T5834] ? rcu_is_watching+0x12/0xc0 [ 245.775774][ T5834] ? ___pte_offset_map+0x2ad/0x4f0 [ 245.775815][ T5834] __handle_mm_fault+0x17d1/0x2aa0 [ 245.775870][ T5834] ? __pfx___handle_mm_fault+0x10/0x10 [ 245.775926][ T5834] ? lock_vma_under_rcu+0x176/0x530 [ 245.775990][ T5834] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 245.776038][ T5834] ? get_timespec64+0x136/0x1b0 [ 245.776087][ T5834] handle_mm_fault+0x589/0xd10 [ 245.776139][ T5834] ? __pkru_allows_pkey+0x11/0xb0 [ 245.776191][ T5834] do_user_addr_fault+0x60c/0x1370 [ 245.776226][ T5834] ? rcu_is_watching+0x12/0xc0 [ 245.776265][ T5834] exc_page_fault+0x64/0xc0 [ 245.776300][ T5834] asm_exc_page_fault+0x26/0x30 [ 245.776338][ T5834] RIP: 0033:0x7ff2d1fc1888 [ 245.776363][ T5834] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 245.776394][ T5834] RSP: 002b:00007ffe79e1a490 EFLAGS: 00010293 [ 245.776420][ T5834] RAX: 0000000000000000 RBX: 00000000000000fc RCX: 00007ff2d1fc1885 [ 245.776439][ T5834] RDX: 00007ffe79e1a4d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.776459][ T5834] RBP: 00007ffe79e1a53c R08: 0000000000000000 R09: 0000000000000000 [ 245.776479][ T5834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 245.776498][ T5834] R13: 00000000000927c0 R14: 000000000003bfbd R15: 00007ffe79e1a590 [ 245.776543][ T5834] [ 245.776555][ T5834] memory: usage 3072kB, limit 3072kB, failcnt 52826 [ 246.262183][ T7630] openvswitch: netlink: Duplicate key (type 15). [ 246.310016][ T5834] memory+swap: usage 3092kB, limit 9007199254740988kB, failcnt 0 [ 246.340317][ T5834] kmem: usage 544kB, limit 9007199254740988kB, failcnt 0 [ 246.363043][ T5834] Memory cgroup stats for /syz1: [ 246.364960][ T5834] cache 20480 [ 246.406759][ T5834] rss 2543616 [ 246.418753][ T5834] rss_huge 0 [ 246.444910][ T5834] shmem 0 [ 246.489478][ T5834] mapped_file 20480 [ 246.503550][ T5834] dirty 0 [ 246.513572][ T5834] writeback 0 [ 246.525597][ T5834] workingset_refault_anon 3315 [ 246.543736][ T5834] workingset_refault_file 13466 [ 246.557683][ T5834] swap 20480 [ 246.568420][ T5834] swapcached 0 [ 246.575390][ T5834] pgpgin 88691 [ 246.582600][ T5834] pgpgout 88065 [ 246.589432][ T5834] pgfault 86142 [ 246.602488][ T5834] pgmajfault 1915 [ 246.609694][ T5834] inactive_anon 0 [ 246.622069][ T5834] active_anon 0 [ 246.636787][ T5834] inactive_file 0 [ 246.640544][ T5834] active_file 0 [ 246.650973][ T5834] unevictable 2564096 [ 246.660744][ T5834] hierarchical_memory_limit 3145728 [ 246.667721][ T5834] hierarchical_memsw_limit 9223372036854771712 [ 246.674006][ T5834] total_cache 20480 [ 246.678655][ T5834] total_rss 2543616 [ 246.682616][ T5834] total_rss_huge 0 [ 246.686795][ T5834] total_shmem 0 [ 246.692651][ T5834] total_mapped_file 20480 [ 246.702423][ T5834] total_dirty 0 [ 246.711391][ T5834] total_writeback 0 [ 246.722249][ T5834] total_workingset_refault_anon 3315 [ 246.737221][ T5834] total_workingset_refault_file 13466 [ 246.751130][ T5834] total_swap 20480 [ 246.763365][ T5834] total_swapcached 0 [ 246.771903][ T5834] total_pgpgin 88691 [ 246.784556][ T5834] total_pgpgout 88065 [ 246.795456][ T5834] total_pgfault 86142 [ 246.803659][ T5834] total_pgmajfault 1915 [ 246.813518][ T5834] total_inactive_anon 0 [ 246.828963][ T5834] total_active_anon 0 [ 246.837009][ T5834] total_inactive_file 0 [ 246.841285][ T5834] total_active_file 0 [ 246.845895][ T5834] total_unevictable 2564096 [ 246.852047][ T5834] anon_cost 0 [ 246.856182][ T5834] file_cost 0 [ 246.860273][ T5834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.329,pid=7629,uid=0 [ 246.877148][ T5834] Memory cgroup out of memory: Killed process 7629 (syz.1.329) total-vm:131272kB, anon-rss:3444kB, file-rss:21532kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 246.894403][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.958495][ T7655] binder: 7653:7655 ioctl c0306201 2000000002c0 returned -14 [ 247.466929][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 247.517175][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 250.207698][ T7709] [U] [ 250.210575][ T7709] [U] [ 250.213309][ T7709] [U] [ 250.216024][ T7709] [U] [ 250.237070][ T7709] [U] [ 250.239826][ T7709] [U] [ 250.242539][ T7709] [U] [ 250.245252][ T7709] [U] [ 250.272490][ T7709] [U] [ 250.275282][ T7709] [U] [ 250.278015][ T7709] [U] [ 250.280736][ T7709] [U] [ 250.327246][ T7709] [U] [ 250.330042][ T7709] [U] [ 250.332766][ T7709] [U] [ 250.335483][ T7709] [U] [ 250.338972][ T7709] [U] [ 250.341837][ T7709] [U] [ 250.344595][ T7709] [U] [ 250.347355][ T7709] [U] [ 250.350562][ T7709] [U] [ 250.353320][ T7709] [U] [ 250.356064][ T7709] [U] [ 250.358818][ T7709] [U] [ 250.363557][ T7709] [U] [ 250.366340][ T7709] [U] [ 250.369189][ T7709] [U] [ 250.371927][ T7709] [U] [ 250.376507][ T7709] [U] [ 250.379274][ T7709] [U] [ 250.382028][ T7709] [U] [ 250.384745][ T7709] [U] [ 250.387675][ T7709] [U] [ 250.390416][ T7709] [U] [ 250.393146][ T7709] [U] [ 250.395869][ T7709] [U] [ 250.398803][ T7709] [U] [ 250.401541][ T7709] [U] [ 250.404258][ T7709] [U] [ 250.406974][ T7709] [U] [ 250.409807][ T7709] [U] [ 250.412530][ T7709] [U] [ 250.415262][ T7709] [U] [ 250.417981][ T7709] [U] [ 250.422278][ T7709] [U] [ 250.425046][ T7709] [U] [ 250.427797][ T7709] [U] [ 250.430547][ T7709] [U] [ 250.434964][ T7709] [U] [ 250.437727][ T7709] [U] [ 250.440476][ T7709] [U] [ 250.443233][ T7709] [U] [ 250.459612][ T7709] [U] [ 250.462398][ T7709] [U] [ 250.465134][ T7709] [U] [ 250.467865][ T7709] [U] [ 250.510578][ T7709] [U] [ 250.513448][ T7709] [U] [ 250.516188][ T7709] [U] [ 250.518930][ T7709] [U] [ 250.533099][ T7709] [U] [ 250.535893][ T7709] [U] [ 250.538643][ T7709] [U] [ 250.541369][ T7709] [U] [ 250.563629][ T7709] [U] [ 250.566421][ T7709] [U] [ 250.569182][ T7709] [U] [ 250.571942][ T7709] [U] [ 250.631773][ T7709] [U] [ 250.634546][ T7709] [U] [ 250.637295][ T7709] [U] [ 250.640061][ T7709] [U] [ 250.665234][ T7709] [U] [ 250.667999][ T7709] [U] [ 250.670713][ T7709] [U] [ 250.673421][ T7709] [U] [ 250.714565][ T7709] [U] [ 250.717325][ T7709] [U] [ 250.720060][ T7709] [U] [ 250.722789][ T7709] [U] [ 250.745182][ T7709] [U] [ 250.748020][ T7709] [U] [ 250.750756][ T7709] [U] [ 250.753472][ T7709] [U] [ 250.794163][ T7709] [U] [ 250.796957][ T7709] [U] [ 250.799690][ T7709] [U] [ 250.802414][ T7709] [U] [ 250.844388][ T7709] [U] [ 250.847188][ T7709] [U] [ 250.849922][ T7709] [U] [ 250.852636][ T7709] [U] [ 250.920305][ T7709] [U] [ 251.368762][ T7734] FAULT_INJECTION: forcing a failure. [ 251.368762][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 251.381683][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) [ 251.381723][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.381742][ T7734] Call Trace: [ 251.381753][ T7734] [ 251.381765][ T7734] dump_stack_lvl+0x16c/0x1f0 [ 251.381808][ T7734] should_fail_ex+0x512/0x640 [ 251.381859][ T7734] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 251.381897][ T7734] should_failslab+0xc2/0x120 [ 251.381944][ T7734] kmem_cache_alloc_noprof+0x75/0x6e0 [ 251.381978][ T7734] ? getname_flags.part.0+0x4c/0x550 [ 251.382034][ T7734] ? getname_flags.part.0+0x4c/0x550 [ 251.382081][ T7734] getname_flags.part.0+0x4c/0x550 [ 251.382146][ T7734] getname_flags+0x93/0xf0 [ 251.382181][ T7734] do_sys_openat2+0xb8/0x1d0 [ 251.382231][ T7734] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.382283][ T7734] ? __sys_sendmsg+0x18c/0x220 [ 251.382325][ T7734] __x64_sys_openat+0x174/0x210 [ 251.382376][ T7734] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.382444][ T7734] do_syscall_64+0xcd/0xfa0 [ 251.382485][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.382518][ T7734] RIP: 0033:0x7faeb058d810 [ 251.382543][ T7734] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 251.382574][ T7734] RSP: 002b:00007faeb140ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 251.382604][ T7734] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faeb058d810 [ 251.382625][ T7734] RDX: 0000000000000002 RSI: 00007faeb140efa0 RDI: 00000000ffffff9c [ 251.382646][ T7734] RBP: 00007faeb140efa0 R08: 0000000000000000 R09: 0000000000000000 [ 251.382666][ T7734] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.382685][ T7734] R13: 00007faeb07e6038 R14: 00007faeb07e5fa0 R15: 00007fff2317fac8 [ 251.382730][ T7734] [ 252.261139][ T7727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.270743][ T7727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.289027][ T7727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.317862][ T7727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.983908][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.189113][ T7752] kexec: Could not allocate control_code_buffer [ 254.335585][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.341736][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.341788][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.334646][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 257.129962][ T7806] zswap: compressor 0 not available [ 257.560551][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 258.372399][ T7833] openvswitch: netlink: Duplicate key (type 15). [ 260.003748][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 261.402982][ T7877] FAULT_INJECTION: forcing a failure. [ 261.402982][ T7877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.420786][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.1.378 Not tainted syzkaller #0 PREEMPT(full) [ 261.420833][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.420853][ T7877] Call Trace: [ 261.420863][ T7877] [ 261.420875][ T7877] dump_stack_lvl+0x16c/0x1f0 [ 261.420916][ T7877] should_fail_ex+0x512/0x640 [ 261.420965][ T7877] should_fail_alloc_page+0xe7/0x130 [ 261.420999][ T7877] prepare_alloc_pages+0x3c2/0x610 [ 261.421035][ T7877] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 261.421063][ T7877] ? lock_acquire+0x179/0x350 [ 261.421102][ T7877] ? lock_acquire+0x179/0x350 [ 261.421141][ T7877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 261.421170][ T7877] ? __lock_acquire+0xb8a/0x1c90 [ 261.421205][ T7877] ? kernel_text_address+0x8d/0x100 [ 261.421243][ T7877] ? __kernel_text_address+0xd/0x40 [ 261.421268][ T7877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.421309][ T7877] ? policy_nodemask+0xea/0x4e0 [ 261.421342][ T7877] alloc_pages_mpol+0x1fb/0x550 [ 261.421375][ T7877] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 261.421405][ T7877] ? _raw_spin_unlock+0x28/0x50 [ 261.421426][ T7877] ? swap_entry_swapped+0xf4/0x160 [ 261.421455][ T7877] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 261.421482][ T7877] folio_alloc_mpol_noprof+0x36/0x2f0 [ 261.421520][ T7877] __read_swap_cache_async+0x20a/0x500 [ 261.421547][ T7877] ? __pfx___read_swap_cache_async+0x10/0x10 [ 261.421583][ T7877] swap_cluster_readahead+0x432/0x770 [ 261.421615][ T7877] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 261.421640][ T7877] ? __lock_acquire+0x622/0x1c90 [ 261.421685][ T7877] ? __lock_acquire+0x622/0x1c90 [ 261.421714][ T7877] ? get_vma_policy+0x242/0x3c0 [ 261.421750][ T7877] swapin_readahead+0x13a/0xd60 [ 261.421771][ T7877] ? lock_acquire+0x179/0x350 [ 261.421811][ T7877] ? __pfx_swapin_readahead+0x10/0x10 [ 261.421833][ T7877] ? swap_cache_get_folio+0x267/0x8e0 [ 261.421854][ T7877] ? swap_cache_get_folio+0x267/0x8e0 [ 261.421888][ T7877] ? swap_cache_get_folio+0x267/0x8e0 [ 261.421912][ T7877] ? swap_cache_get_folio+0x267/0x8e0 [ 261.421933][ T7877] ? swap_cache_get_folio+0x1f/0x8e0 [ 261.421953][ T7877] ? swap_cache_get_folio+0x293/0x8e0 [ 261.421976][ T7877] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 261.421997][ T7877] ? __pfx_get_swap_device+0x10/0x10 [ 261.422027][ T7877] ? do_swap_page+0x125/0x6340 [ 261.422062][ T7877] do_swap_page+0x86c/0x6340 [ 261.422103][ T7877] ? kasan_save_stack+0x42/0x60 [ 261.422133][ T7877] ? kasan_save_stack+0x33/0x60 [ 261.422158][ T7877] ? kasan_record_aux_stack+0xa7/0xc0 [ 261.422196][ T7877] ? __pfx_do_swap_page+0x10/0x10 [ 261.422229][ T7877] ? __pfx_default_wake_function+0x10/0x10 [ 261.422261][ T7877] ? rcu_is_watching+0x12/0xc0 [ 261.422286][ T7877] ? ___pte_offset_map+0x2ad/0x4f0 [ 261.422320][ T7877] __handle_mm_fault+0x17d1/0x2aa0 [ 261.422361][ T7877] ? mt_find+0x3e2/0xa20 [ 261.422390][ T7877] ? __pfx___handle_mm_fault+0x10/0x10 [ 261.422424][ T7877] ? __pfx_mt_find+0x10/0x10 [ 261.422467][ T7877] ? find_vma+0xbf/0x140 [ 261.422494][ T7877] ? __pfx_find_vma+0x10/0x10 [ 261.422524][ T7877] handle_mm_fault+0x589/0xd10 [ 261.422562][ T7877] ? __pkru_allows_pkey+0x11/0xb0 [ 261.422602][ T7877] do_user_addr_fault+0x7a6/0x1370 [ 261.422626][ T7877] ? rcu_is_watching+0x12/0xc0 [ 261.422654][ T7877] exc_page_fault+0x64/0xc0 [ 261.422679][ T7877] asm_exc_page_fault+0x26/0x30 [ 261.422701][ T7877] RIP: 0010:__get_user_8+0x14/0x30 [ 261.422736][ T7877] Code: ca e9 00 35 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 cf 34 04 00 66 66 2e 0f 1f 84 00 00 00 [ 261.422758][ T7877] RSP: 0018:ffffc9000b1f7b28 EFLAGS: 00050287 [ 261.422776][ T7877] RAX: 00007ff2d2e989a0 RBX: ffff88805cde8000 RCX: ffffc9000b1f7acc [ 261.422790][ T7877] RDX: 00007ffffffff000 RSI: ffffffff81af261a RDI: ffffffff8bf073c0 [ 261.422804][ T7877] RBP: ffff88805cde9468 R08: 37164add03f77b78 R09: 0000000000000000 [ 261.422818][ T7877] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88805cde93b0 [ 261.422831][ T7877] R13: ffff88805cde93d8 R14: ffff8880263be5c0 R15: 00007ff2d2e989a0 [ 261.422855][ T7877] ? exit_robust_list+0x5a/0x280 [ 261.422891][ T7877] exit_robust_list+0x62/0x280 [ 261.422918][ T7877] ? mark_held_locks+0x49/0x80 [ 261.422950][ T7877] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.422975][ T7877] futex_exit_release+0x187/0x220 [ 261.423008][ T7877] exit_mm_release+0x19/0x30 [ 261.423036][ T7877] do_exit+0x68e/0x2bf0 [ 261.423075][ T7877] ? __pfx_do_exit+0x10/0x10 [ 261.423106][ T7877] ? do_raw_spin_lock+0x12c/0x2b0 [ 261.423148][ T7877] ? find_held_lock+0x2b/0x80 [ 261.423176][ T7877] do_group_exit+0xd3/0x2a0 [ 261.423212][ T7877] get_signal+0x2671/0x26d0 [ 261.423251][ T7877] ? __pfx_get_signal+0x10/0x10 [ 261.423277][ T7877] ? do_futex+0x122/0x350 [ 261.423308][ T7877] ? __pfx_do_futex+0x10/0x10 [ 261.423342][ T7877] arch_do_signal_or_restart+0x8f/0x790 [ 261.423373][ T7877] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 261.423410][ T7877] ? xfd_validate_state+0x61/0x180 [ 261.423442][ T7877] ? __pfx___do_sys_close_range+0x10/0x10 [ 261.423474][ T7877] exit_to_user_mode_loop+0x85/0x130 [ 261.423511][ T7877] do_syscall_64+0x426/0xfa0 [ 261.423539][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.423562][ T7877] RIP: 0033:0x7ff2d1f8efc9 [ 261.423581][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.423602][ T7877] RSP: 002b:00007ff2d2e980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 261.423622][ T7877] RAX: fffffffffffffe00 RBX: 00007ff2d21e6098 RCX: 00007ff2d1f8efc9 [ 261.423636][ T7877] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff2d21e6098 [ 261.423650][ T7877] RBP: 00007ff2d21e6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.423663][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.423676][ T7877] R13: 00007ff2d21e6128 R14: 00007ffe79e1a090 R15: 00007ffe79e1a178 [ 261.423706][ T7877] [ 262.218924][ T7894] netlink: 330 bytes leftover after parsing attributes in process `syz.2.382'. [ 262.228298][ T7894] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 263.515850][ T7921] netlink: 186 bytes leftover after parsing attributes in process `syz.1.386'. [ 265.272752][ T7944] FAULT_INJECTION: forcing a failure. [ 265.272752][ T7944] name fail_futex, interval 1, probability 0, space 0, times 1 [ 265.338543][ T7944] CPU: 0 UID: 0 PID: 7944 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) [ 265.338589][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.338608][ T7944] Call Trace: [ 265.338619][ T7944] [ 265.338631][ T7944] dump_stack_lvl+0x16c/0x1f0 [ 265.338673][ T7944] should_fail_ex+0x512/0x640 [ 265.338729][ T7944] get_futex_key+0x1d0/0x1560 [ 265.338777][ T7944] ? __pfx_get_futex_key+0x10/0x10 [ 265.338833][ T7944] futex_wake+0xea/0x530 [ 265.338878][ T7944] ? kasan_quarantine_put+0x10a/0x240 [ 265.338921][ T7944] ? __pfx_futex_wake+0x10/0x10 [ 265.338971][ T7944] ? getname_flags.part.0+0x376/0x550 [ 265.339028][ T7944] ? getname_flags.part.0+0x376/0x550 [ 265.339074][ T7944] ? getname_flags.part.0+0x1c5/0x550 [ 265.339126][ T7944] do_futex+0x1e3/0x350 [ 265.339170][ T7944] ? __pfx_do_futex+0x10/0x10 [ 265.339219][ T7944] ? __fget_files+0x20e/0x3c0 [ 265.339255][ T7944] __x64_sys_futex+0x1e0/0x4c0 [ 265.339301][ T7944] ? __x64_sys_openat+0x174/0x210 [ 265.339349][ T7944] ? __pfx___x64_sys_futex+0x10/0x10 [ 265.339409][ T7944] do_syscall_64+0xcd/0xfa0 [ 265.339448][ T7944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.339481][ T7944] RIP: 0033:0x7fed2518efc9 [ 265.339506][ T7944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.339548][ T7944] RSP: 002b:00007fed260820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 265.339580][ T7944] RAX: ffffffffffffffda RBX: 00007fed253e6098 RCX: 00007fed2518efc9 [ 265.339602][ T7944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed253e609c [ 265.339622][ T7944] RBP: 00007fed253e6090 R08: 00007fed260a4000 R09: 0000000000000000 [ 265.339641][ T7944] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 265.339661][ T7944] R13: 00007fed253e6128 R14: 00007fff547e55d0 R15: 00007fff547e56b8 [ 265.339702][ T7944] [ 265.668088][ T7953] FAULT_INJECTION: forcing a failure. [ 265.668088][ T7953] name failslab, interval 1, probability 0, space 0, times 0 [ 265.683500][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 265.683543][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.683562][ T7953] Call Trace: [ 265.683572][ T7953] [ 265.683585][ T7953] dump_stack_lvl+0x16c/0x1f0 [ 265.683624][ T7953] should_fail_ex+0x512/0x640 [ 265.683674][ T7953] ? __kmalloc_cache_noprof+0x5f/0x780 [ 265.683735][ T7953] should_failslab+0xc2/0x120 [ 265.683787][ T7953] __kmalloc_cache_noprof+0x72/0x780 [ 265.683842][ T7953] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 265.683887][ T7953] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 265.683923][ T7953] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 265.683962][ T7953] hugetlb_reserve_pages+0x151/0xf40 [ 265.684013][ T7953] ? __vma_enter_locked+0x163/0x3f0 [ 265.684065][ T7953] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 265.684120][ T7953] ? atime_needs_update+0x8b/0x710 [ 265.684179][ T7953] hugetlbfs_file_mmap+0x4a1/0x730 [ 265.684221][ T7953] __mmap_region+0x1309/0x27a0 [ 265.684260][ T7953] ? __pfx___mmap_region+0x10/0x10 [ 265.684291][ T7953] ? find_held_lock+0x2b/0x80 [ 265.684327][ T7953] ? is_bpf_text_address+0x8a/0x1a0 [ 265.684378][ T7953] ? bpf_ksym_find+0x124/0x1c0 [ 265.684415][ T7953] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 265.684456][ T7953] ? is_bpf_text_address+0x94/0x1a0 [ 265.684536][ T7953] ? __pfx_stack_trace_save+0x10/0x10 [ 265.684629][ T7953] ? trace_cap_capable+0x18d/0x200 [ 265.684691][ T7953] mmap_region+0x32b/0x3f0 [ 265.684731][ T7953] do_mmap+0xa3e/0x1210 [ 265.684789][ T7953] ? __pfx_do_mmap+0x10/0x10 [ 265.684832][ T7953] ? __pfx_down_write_killable+0x10/0x10 [ 265.684886][ T7953] vm_mmap_pgoff+0x29e/0x470 [ 265.684937][ T7953] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 265.684976][ T7953] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 265.685026][ T7953] ? hugetlbfs_get_inode+0x31f/0x730 [ 265.685077][ T7953] ksys_mmap_pgoff+0x1c8/0x5c0 [ 265.685126][ T7953] __x64_sys_mmap+0x125/0x190 [ 265.685182][ T7953] do_syscall_64+0xcd/0xfa0 [ 265.685223][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.685256][ T7953] RIP: 0033:0x7ff2d1f8efc9 [ 265.685281][ T7953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.685311][ T7953] RSP: 002b:00007ff2d2eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 265.685342][ T7953] RAX: ffffffffffffffda RBX: 00007ff2d21e5fa0 RCX: 00007ff2d1f8efc9 [ 265.685363][ T7953] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 265.685383][ T7953] RBP: 00007ff2d2011f91 R08: 0000000000000602 R09: 0000300000000000 [ 265.685404][ T7953] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 265.685425][ T7953] R13: 00007ff2d21e6038 R14: 00007ff2d21e5fa0 R15: 00007ffe79e1a178 [ 265.685470][ T7953] [ 265.685561][ T7953] HugeTLB: unable to allocate vma specific lock [ 265.980142][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.987184][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.610058][ T7962] sp0: Synchronizing with TNC [ 268.856499][ T7998] __vm_enough_memory: pid: 7998, comm: syz.3.405, bytes: 4398046511104 not enough memory for the allocation [ 268.887968][ T7998] FAULT_INJECTION: forcing a failure. [ 268.887968][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 268.937916][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.3.405 Not tainted syzkaller #0 PREEMPT(full) [ 268.937968][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.937987][ T7998] Call Trace: [ 268.937998][ T7998] [ 268.938011][ T7998] dump_stack_lvl+0x16c/0x1f0 [ 268.938053][ T7998] should_fail_ex+0x512/0x640 [ 268.938102][ T7998] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 268.938140][ T7998] should_failslab+0xc2/0x120 [ 268.938186][ T7998] kmem_cache_alloc_noprof+0x75/0x6e0 [ 268.938219][ T7998] ? security_file_alloc+0x34/0x2b0 [ 268.938262][ T7998] ? security_file_alloc+0x34/0x2b0 [ 268.938294][ T7998] security_file_alloc+0x34/0x2b0 [ 268.938330][ T7998] init_file+0x93/0x4c0 [ 268.938374][ T7998] alloc_empty_file+0x73/0x1e0 [ 268.938422][ T7998] path_openat+0xda/0x2cb0 [ 268.938481][ T7998] ? __pfx_path_openat+0x10/0x10 [ 268.938531][ T7998] ? __lock_acquire+0xb8a/0x1c90 [ 268.938583][ T7998] do_filp_open+0x20b/0x470 [ 268.938620][ T7998] ? __pfx_do_filp_open+0x10/0x10 [ 268.938712][ T7998] ? alloc_fd+0x471/0x7d0 [ 268.938758][ T7998] do_sys_openat2+0x11b/0x1d0 [ 268.938807][ T7998] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.938871][ T7998] __x64_sys_openat+0x174/0x210 [ 268.938921][ T7998] ? __pfx___x64_sys_openat+0x10/0x10 [ 268.938988][ T7998] do_syscall_64+0xcd/0xfa0 [ 268.939026][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.939059][ T7998] RIP: 0033:0x7f417d38efc9 [ 268.939085][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.939117][ T7998] RSP: 002b:00007f417e1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.939147][ T7998] RAX: ffffffffffffffda RBX: 00007f417d5e5fa0 RCX: 00007f417d38efc9 [ 268.939169][ T7998] RDX: 0000000000002802 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 268.939190][ T7998] RBP: 00007f417d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.939210][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.939230][ T7998] R13: 00007f417d5e6038 R14: 00007f417d5e5fa0 R15: 00007ffec8f13b58 [ 268.939274][ T7998] [ 274.304403][ T8086] i2c i2c-0: new_device: Missing parameters [ 274.505313][ T8084] [U]  [ 274.508156][ T8084] [U] [ 274.510875][ T8084] [U] [ 274.513586][ T8084] [U] [ 274.531557][ T8084] [U] [ 274.534311][ T8084] [U] [ 274.537025][ T8084] [U] [ 274.539738][ T8084] [U] [ 274.567177][ T8084] [U] [ 274.569925][ T8084] [U] [ 274.572637][ T8084] [U] [ 274.575349][ T8084] [U] [ 274.710271][ T8084] [U] [ 274.713033][ T8084] [U] [ 274.715777][ T8084] [U] [ 274.718533][ T8084] [U] [ 274.732119][ T8084] [U] [ 274.734913][ T8084] [U] [ 274.737625][ T8084] [U] [ 274.740346][ T8084] [U] [ 274.819267][ T8084] [U] [ 274.822031][ T8084] [U] [ 274.824761][ T8084] [U] [ 274.827471][ T8084] [U] [ 274.950934][ T8084] [U] [ 274.953751][ T8084] [U] [ 274.956512][ T8084] [U] [ 274.959258][ T8084] [U] [ 274.998380][ T8084] [U] [ 275.001187][ T8084] [U] [ 275.003959][ T8084] [U] [ 275.006706][ T8084] [U] [ 275.039420][ T8084] [U] [ 275.698048][ T8108] netlink: 330 bytes leftover after parsing attributes in process `syz.3.430'. [ 275.821246][ T8108] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 276.352965][ T8113] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 276.401662][ T8113] ep_00: uevent: failed to send synthetic uevent: -22 [ 280.459280][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.459415][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.466984][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.474149][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.482816][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.490050][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.497175][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.504397][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.511500][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 280.518529][ T5844] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 281.962971][ T8192] openvswitch: netlink: Key type 29 is not supported [ 283.278356][ T24] Process accounting resumed [ 283.819794][ T8226] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 283.845597][ T8226] ep_00: uevent: failed to send synthetic uevent: -22 [ 284.119591][ T8233] binder: 8230:8233 ioctl c018620c 0 returned -1 [ 284.188914][ T8235] netlink: 342 bytes leftover after parsing attributes in process `syz.3.457'. [ 284.408228][ T8244] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 284.521907][ T8244] usb usb24: usbfs: process 8244 (syz.2.459) did not claim interface 0 before use [ 286.776833][ T8288] syz.0.467 uses obsolete (PF_INET,SOCK_PACKET) [ 287.106937][ T8298] FAULT_INJECTION: forcing a failure. [ 287.106937][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 287.224505][ T8298] CPU: 0 UID: 0 PID: 8298 Comm: syz.2.469 Not tainted syzkaller #0 PREEMPT(full) [ 287.224547][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.224566][ T8298] Call Trace: [ 287.224576][ T8298] [ 287.224596][ T8298] dump_stack_lvl+0x16c/0x1f0 [ 287.224637][ T8298] should_fail_ex+0x512/0x640 [ 287.224685][ T8298] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 287.224723][ T8298] should_failslab+0xc2/0x120 [ 287.224767][ T8298] kmem_cache_alloc_noprof+0x75/0x6e0 [ 287.224800][ T8298] ? security_file_alloc+0x34/0x2b0 [ 287.224841][ T8298] ? security_file_alloc+0x34/0x2b0 [ 287.224873][ T8298] security_file_alloc+0x34/0x2b0 [ 287.224908][ T8298] init_file+0x93/0x4c0 [ 287.224951][ T8298] alloc_empty_file+0x73/0x1e0 [ 287.224998][ T8298] path_openat+0xda/0x2cb0 [ 287.225048][ T8298] ? __pfx_path_openat+0x10/0x10 [ 287.225085][ T8298] ? __lock_acquire+0xb8a/0x1c90 [ 287.225135][ T8298] do_filp_open+0x20b/0x470 [ 287.225172][ T8298] ? __pfx_do_filp_open+0x10/0x10 [ 287.225237][ T8298] ? alloc_fd+0x471/0x7d0 [ 287.225281][ T8298] do_sys_openat2+0x11b/0x1d0 [ 287.225328][ T8298] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.225376][ T8298] ? find_held_lock+0x2b/0x80 [ 287.225419][ T8298] __x64_sys_openat+0x174/0x210 [ 287.225467][ T8298] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.225533][ T8298] do_syscall_64+0xcd/0xfa0 [ 287.225572][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.225613][ T8298] RIP: 0033:0x7faeb058efc9 [ 287.225638][ T8298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.225668][ T8298] RSP: 002b:00007faeb140f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.225698][ T8298] RAX: ffffffffffffffda RBX: 00007faeb07e5fa0 RCX: 00007faeb058efc9 [ 287.225720][ T8298] RDX: 0000000000080000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 287.225740][ T8298] RBP: 00007faeb0611f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.225759][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.225778][ T8298] R13: 00007faeb07e6038 R14: 00007faeb07e5fa0 R15: 00007fff2317fac8 [ 287.225822][ T8298] [ 287.448185][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.455021][ T8298] syz.2.469(8298): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 288.147023][ T8315] FAULT_INJECTION: forcing a failure. [ 288.147023][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 288.209841][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.3.472 Not tainted syzkaller #0 PREEMPT(full) [ 288.209889][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.209908][ T8315] Call Trace: [ 288.209919][ T8315] [ 288.209932][ T8315] dump_stack_lvl+0x16c/0x1f0 [ 288.209974][ T8315] should_fail_ex+0x512/0x640 [ 288.210024][ T8315] ? __kmalloc_cache_noprof+0x5f/0x780 [ 288.210082][ T8315] should_failslab+0xc2/0x120 [ 288.210127][ T8315] __kmalloc_cache_noprof+0x72/0x780 [ 288.210182][ T8315] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 288.210241][ T8315] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 288.210276][ T8315] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 288.210318][ T8315] hugetlb_reserve_pages+0x151/0xf40 [ 288.210370][ T8315] ? __vma_enter_locked+0x163/0x3f0 [ 288.210422][ T8315] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 288.210475][ T8315] ? atime_needs_update+0x8b/0x710 [ 288.210534][ T8315] hugetlbfs_file_mmap+0x4a1/0x730 [ 288.210581][ T8315] __mmap_region+0x1309/0x27a0 [ 288.210621][ T8315] ? __pfx___mmap_region+0x10/0x10 [ 288.210652][ T8315] ? find_held_lock+0x2b/0x80 [ 288.210686][ T8315] ? is_bpf_text_address+0x8a/0x1a0 [ 288.210733][ T8315] ? bpf_ksym_find+0x124/0x1c0 [ 288.210770][ T8315] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.210810][ T8315] ? is_bpf_text_address+0x94/0x1a0 [ 288.210886][ T8315] ? __pfx_stack_trace_save+0x10/0x10 [ 288.210977][ T8315] ? trace_cap_capable+0x18d/0x200 [ 288.211039][ T8315] mmap_region+0x32b/0x3f0 [ 288.211092][ T8315] do_mmap+0xa3e/0x1210 [ 288.211141][ T8315] ? __pfx_do_mmap+0x10/0x10 [ 288.211182][ T8315] ? __pfx_down_write_killable+0x10/0x10 [ 288.211233][ T8315] vm_mmap_pgoff+0x29e/0x470 [ 288.211282][ T8315] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 288.211320][ T8315] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 288.211388][ T8315] ? hugetlbfs_get_inode+0x31f/0x730 [ 288.211438][ T8315] ksys_mmap_pgoff+0x1c8/0x5c0 [ 288.211488][ T8315] __x64_sys_mmap+0x125/0x190 [ 288.211543][ T8315] do_syscall_64+0xcd/0xfa0 [ 288.211591][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.211625][ T8315] RIP: 0033:0x7f417d38efc9 [ 288.211651][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.211683][ T8315] RSP: 002b:00007f417e1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 288.211713][ T8315] RAX: ffffffffffffffda RBX: 00007f417d5e5fa0 RCX: 00007f417d38efc9 [ 288.211735][ T8315] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 288.211754][ T8315] RBP: 00007f417d411f91 R08: 0000000000000602 R09: 0000300000000000 [ 288.211775][ T8315] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 288.211795][ T8315] R13: 00007f417d5e6038 R14: 00007f417d5e5fa0 R15: 00007ffec8f13b58 [ 288.211839][ T8315] [ 288.493011][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.608872][ T8339] netlink: 334 bytes leftover after parsing attributes in process `syz.0.477'. [ 290.360728][ T8320] kexec: Could not allocate control_code_buffer [ 291.745831][ T8383] FAULT_INJECTION: forcing a failure. [ 291.745831][ T8383] name failslab, interval 1, probability 0, space 0, times 0 [ 291.786434][ T8383] CPU: 1 UID: 0 PID: 8383 Comm: syz.0.484 Not tainted syzkaller #0 PREEMPT(full) [ 291.786467][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.786481][ T8383] Call Trace: [ 291.786488][ T8383] [ 291.786496][ T8383] dump_stack_lvl+0x16c/0x1f0 [ 291.786526][ T8383] should_fail_ex+0x512/0x640 [ 291.786562][ T8383] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 291.786596][ T8383] should_failslab+0xc2/0x120 [ 291.786629][ T8383] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 291.786660][ T8383] ? snd_timer_instance_new+0x65/0x2e0 [ 291.786696][ T8383] ? kstrdup+0x53/0x100 [ 291.786718][ T8383] kstrdup+0x53/0x100 [ 291.786744][ T8383] snd_timer_instance_new+0x65/0x2e0 [ 291.786775][ T8383] snd_seq_timer_open+0x1cc/0x600 [ 291.786799][ T8383] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 291.786824][ T8383] ? find_held_lock+0x2b/0x80 [ 291.786853][ T8383] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 291.786877][ T8383] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.786902][ T8383] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.786930][ T8383] queue_use+0xe3/0x250 [ 291.786962][ T8383] snd_seq_queue_alloc+0x2e5/0x5a0 [ 291.787001][ T8383] snd_seq_ioctl_create_queue+0xa9/0x390 [ 291.787032][ T8383] call_seq_client_ctl+0x9f/0x110 [ 291.787058][ T8383] snd_seq_kernel_client_ctl+0x77/0xd0 [ 291.787085][ T8383] alloc_seq_queue+0xda/0x180 [ 291.787113][ T8383] ? __pfx_alloc_seq_queue+0x10/0x10 [ 291.787161][ T8383] ? mark_held_locks+0x49/0x80 [ 291.787193][ T8383] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.787215][ T8383] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.787244][ T8383] snd_seq_oss_open+0x38c/0xa20 [ 291.787279][ T8383] odev_open+0x79/0xc0 [ 291.787303][ T8383] ? __pfx_odev_open+0x10/0x10 [ 291.787329][ T8383] soundcore_open+0x40c/0x580 [ 291.787363][ T8383] ? __pfx_soundcore_open+0x10/0x10 [ 291.787395][ T8383] chrdev_open+0x234/0x6a0 [ 291.787425][ T8383] ? __pfx_apparmor_file_open+0x10/0x10 [ 291.787461][ T8383] ? __pfx_chrdev_open+0x10/0x10 [ 291.787492][ T8383] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 291.787526][ T8383] do_dentry_open+0x982/0x1530 [ 291.787554][ T8383] ? __pfx_chrdev_open+0x10/0x10 [ 291.787588][ T8383] vfs_open+0x82/0x3f0 [ 291.787625][ T8383] path_openat+0x1de4/0x2cb0 [ 291.787661][ T8383] ? __pfx_path_openat+0x10/0x10 [ 291.787688][ T8383] ? __lock_acquire+0xb8a/0x1c90 [ 291.787723][ T8383] do_filp_open+0x20b/0x470 [ 291.787749][ T8383] ? __pfx_do_filp_open+0x10/0x10 [ 291.787796][ T8383] ? alloc_fd+0x471/0x7d0 [ 291.787827][ T8383] do_sys_openat2+0x11b/0x1d0 [ 291.787862][ T8383] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.787898][ T8383] ? __pfx___might_resched+0x10/0x10 [ 291.787930][ T8383] __x64_sys_openat+0x174/0x210 [ 291.787966][ T8383] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.788013][ T8383] do_syscall_64+0xcd/0xfa0 [ 291.788041][ T8383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.788065][ T8383] RIP: 0033:0x7fed2518efc9 [ 291.788084][ T8383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.788106][ T8383] RSP: 002b:00007fed260a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.788128][ T8383] RAX: ffffffffffffffda RBX: 00007fed253e5fa0 RCX: 00007fed2518efc9 [ 291.788143][ T8383] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 291.788158][ T8383] RBP: 00007fed25211f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.788172][ T8383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.788185][ T8383] R13: 00007fed253e6038 R14: 00007fed253e5fa0 R15: 00007fff547e56b8 [ 291.788216][ T8383] [ 294.656395][ T8415] hub 8-0:1.0: USB hub found [ 294.671664][ T8415] hub 8-0:1.0: 1 port detected [ 297.439135][ T8458] zswap: compressor not available [ 297.445914][ T8460] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 298.110477][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 298.150524][ T8488] netlink: 330 bytes leftover after parsing attributes in process `syz.2.508'. [ 298.273777][ T8488] : renamed from bond0 (while UP) [ 298.976675][ T8499] openvswitch: netlink: IPv4 tunnel dst address is zero [ 299.006705][ T79] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.299895][ T8497] [U] [ 299.302739][ T8497] [U] [ 299.305450][ T8497] [U] [ 299.308158][ T8497] [U] [ 299.351716][ T8497] [U] [ 299.354522][ T8497] [U] [ 299.357283][ T8497] [U] [ 299.360037][ T8497] [U] [ 299.374214][ T8497] [U] [ 299.377016][ T8497] [U] [ 299.377077][ T8497] [U] [ 299.377134][ T8497] [U] [ 299.401712][ T8497] [U] [ 299.404481][ T8497] [U] [ 299.407204][ T8497] [U] [ 299.409916][ T8497] [U] [ 299.417872][ T8497] [U] [ 299.420614][ T8497] [U] [ 299.423332][ T8497] [U] [ 299.426049][ T8497] [U] [ 299.481310][ T8497] [U] [ 299.484181][ T8497] [U] [ 299.486928][ T8497] [U] [ 299.489686][ T8497] [U] [ 299.492882][ T8497] [U] [ 299.495648][ T8497] [U] [ 299.498403][ T8497] [U] [ 299.501171][ T8497] [U] [ 299.506012][ T8497] [U] [ 299.508783][ T8497] [U] [ 299.511542][ T8497] [U] [ 299.514298][ T8497] [U] [ 299.518137][ T8497] [U] [ 299.520907][ T8497] [U] [ 299.523655][ T8497] [U] [ 299.526408][ T8497] [U] [ 299.530145][ T8497] [U] [ 299.532914][ T8497] [U] [ 299.535676][ T8497] [U] [ 299.538465][ T8497] [U] [ 299.618102][ T8497] [U] [ 299.620900][ T8497] [U] [ 299.623653][ T8497] [U] [ 299.626406][ T8497] [U] [ 299.661383][ T8497] [U] [ 299.664141][ T8497] [U] [ 299.666853][ T8497] [U] [ 299.669566][ T8497] [U] [ 299.760075][ T8497] [U] [ 299.762875][ T8497] [U] [ 299.765609][ T8497] [U] [ 299.768324][ T8497] [U] [ 299.777905][ T8497] [U] [ 299.780678][ T8497] [U] [ 299.783412][ T8497] [U] [ 299.786147][ T8497] [U] [ 299.789574][ T8497] [U] [ 299.792316][ T8497] [U] [ 299.795026][ T8497] [U] [ 299.797742][ T8497] [U] [ 299.802853][ T8497] [U] [ 299.805682][ T8497] [U] [ 299.808395][ T8497] [U] [ 299.811108][ T8497] [U] [ 299.814651][ T8497] [U] [ 299.817376][ T8497] [U] [ 299.820104][ T8497] [U] [ 299.822831][ T8497] [U] [ 299.826552][ T8497] [U] [ 299.829287][ T8497] [U] [ 299.832022][ T8497] [U] [ 299.834801][ T8497] [U] [ 299.912444][ T8497] [U] [ 299.915248][ T8497] [U] [ 299.917994][ T8497] [U] [ 299.920737][ T8497] [U] [ 299.966191][ T8497] [U] [ 299.968988][ T8497] [U] [ 299.971742][ T8497] [U] [ 299.974481][ T8497] [U] [ 300.132043][ T8504] [U] [ 300.215208][ T8512] netlink: 330 bytes leftover after parsing attributes in process `syz.0.516'. [ 300.236904][ T8512] : renamed from gre0 (while UP) [ 300.289226][ T8514] vivid-003: ================= START STATUS ================= [ 300.338210][ T8514] vivid-003: Radio HW Seek Mode: Bounded [ 300.344232][ T8514] vivid-003: Radio Programmable HW Seek: false [ 300.445264][ T8514] vivid-003: RDS Rx I/O Mode: Block I/O [ 300.469378][ T8514] vivid-003: Generate RBDS Instead of RDS: false [ 300.490055][ T8514] vivid-003: RDS Reception: true [ 300.495178][ T8514] vivid-003: RDS Program Type: 0 inactive [ 300.501144][ T8514] vivid-003: RDS PS Name: inactive [ 300.506900][ T8514] vivid-003: RDS Radio Text: inactive [ 300.513649][ T8514] vivid-003: RDS Traffic Announcement: false inactive [ 300.520610][ T8514] vivid-003: RDS Traffic Program: false inactive [ 300.527468][ T8514] vivid-003: RDS Music: false inactive [ 300.533156][ T8514] vivid-003: ================== END STATUS ================== [ 302.629179][ T8553] netlink: 354 bytes leftover after parsing attributes in process `syz.0.524'. [ 306.418794][ T8587] can: request_module (can-proto-0) failed. [ 307.697869][ T8610] netlink: 186 bytes leftover after parsing attributes in process `syz.3.536'. [ 308.615919][ T8599] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.039129][ T8633] netlink: 330 bytes leftover after parsing attributes in process `syz.2.540'. [ 310.563539][ T8639] zram: Added device: zram1 [ 310.939757][ T8652] ================================================================== [ 310.939777][ T8652] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 310.939826][ T8652] Write of size 8 at addr ffffc900035093e0 by task syz.1.542/8652 [ 310.939855][ T8652] [ 310.939869][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 310.939906][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.939930][ T8652] Call Trace: [ 310.939940][ T8652] [ 310.939953][ T8652] dump_stack_lvl+0x116/0x1f0 [ 310.939990][ T8652] print_report+0xcd/0x630 [ 310.940033][ T8652] ? __virt_addr_valid+0x81/0x610 [ 310.940080][ T8652] ? sys_imageblit+0x1a6f/0x1e60 [ 310.940116][ T8652] kasan_report+0xe0/0x110 [ 310.940160][ T8652] ? sys_imageblit+0x1a6f/0x1e60 [ 310.940202][ T8652] sys_imageblit+0x1a6f/0x1e60 [ 310.940245][ T8652] ? __pfx_sys_imageblit+0x10/0x10 [ 310.940281][ T8652] ? __pfx__prb_read_valid+0x10/0x10 [ 310.940330][ T8652] ? find_held_lock+0x2b/0x80 [ 310.940363][ T8652] ? up+0xcb/0x140 [ 310.940401][ T8652] ? do_raw_spin_unlock+0x172/0x230 [ 310.940459][ T8652] ? prb_read_valid+0x78/0xa0 [ 310.940509][ T8652] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 310.940546][ T8652] soft_cursor+0x524/0xa10 [ 310.940603][ T8652] ? fb_get_color_depth+0x120/0x250 [ 310.940652][ T8652] bit_cursor+0xe8c/0x17e0 [ 310.940714][ T8652] ? __pfx_bit_cursor+0x10/0x10 [ 310.940772][ T8652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.940829][ T8652] ? get_color+0x1da/0x450 [ 310.940872][ T8652] ? __pfx_bit_cursor+0x10/0x10 [ 310.940922][ T8652] fbcon_cursor+0x40c/0x5a0 [ 310.940967][ T8652] ? add_softcursor+0x1/0x290 [ 310.941020][ T8652] set_cursor+0x1db/0x250 [ 310.941047][ T8652] con_write+0x89/0xb0 [ 310.941086][ T8652] n_tty_write+0x41e/0x11e0 [ 310.941137][ T8652] ? __pfx_n_tty_write+0x10/0x10 [ 310.941182][ T8652] ? trace_kmalloc+0x2b/0xd0 [ 310.941223][ T8652] ? __pfx_woken_wake_function+0x10/0x10 [ 310.941279][ T8652] ? kfree+0x252/0x6d0 [ 310.941307][ T8652] ? __pfx_n_tty_write+0x10/0x10 [ 310.941353][ T8652] file_tty_write.constprop.0+0x503/0x9b0 [ 310.941396][ T8652] redirected_tty_write+0xd4/0x150 [ 310.941432][ T8652] vfs_write+0x7d3/0x11d0 [ 310.941468][ T8652] ? __pfx_redirected_tty_write+0x10/0x10 [ 310.941507][ T8652] ? __pfx_vfs_write+0x10/0x10 [ 310.941540][ T8652] ? find_held_lock+0x2b/0x80 [ 310.941587][ T8652] ksys_write+0x12a/0x250 [ 310.941621][ T8652] ? __pfx_ksys_write+0x10/0x10 [ 310.941663][ T8652] do_syscall_64+0xcd/0xfa0 [ 310.941708][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.941743][ T8652] RIP: 0033:0x7ff2d1f8efc9 [ 310.941768][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.941800][ T8652] RSP: 002b:00007ff2d2e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.941831][ T8652] RAX: ffffffffffffffda RBX: 00007ff2d21e6090 RCX: 00007ff2d1f8efc9 [ 310.941853][ T8652] RDX: 00000000000009fc RSI: 0000200000001bc0 RDI: 0000000000000003 [ 310.941874][ T8652] RBP: 00007ff2d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.941895][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.941915][ T8652] R13: 00007ff2d21e6128 R14: 00007ff2d21e6090 R15: 00007ffe79e1a178 [ 310.941949][ T8652] [ 310.941960][ T8652] [ 310.941969][ T8652] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc9000350a000 allocated at vivid_probe+0x1aac/0xb890 [ 310.942031][ T8652] Memory state around the buggy address: [ 310.942056][ T8652] ffffc90003509280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.942080][ T8652] ffffc90003509300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.942105][ T8652] >ffffc90003509380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.942123][ T8652] ^ [ 310.942142][ T8652] ffffc90003509400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.942166][ T8652] ffffc90003509480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 310.942184][ T8652] ================================================================== [ 311.580662][ T8652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 311.580691][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 311.580748][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.580767][ T8652] Call Trace: [ 311.580778][ T8652] [ 311.580791][ T8652] dump_stack_lvl+0x3d/0x1f0 [ 311.580833][ T8652] vpanic+0x640/0x6f0 [ 311.580881][ T8652] panic+0xca/0xd0 [ 311.580940][ T8652] ? __pfx_panic+0x10/0x10 [ 311.580989][ T8652] ? sys_imageblit+0x1a6f/0x1e60 [ 311.581025][ T8652] ? preempt_schedule_common+0x44/0xc0 [ 311.581060][ T8652] ? preempt_schedule_thunk+0x16/0x30 [ 311.581114][ T8652] check_panic_on_warn+0xab/0xb0 [ 311.581162][ T8652] end_report+0x107/0x170 [ 311.581204][ T8652] kasan_report+0xee/0x110 [ 311.581246][ T8652] ? sys_imageblit+0x1a6f/0x1e60 [ 311.581287][ T8652] sys_imageblit+0x1a6f/0x1e60 [ 311.581329][ T8652] ? __pfx_sys_imageblit+0x10/0x10 [ 311.581365][ T8652] ? __pfx__prb_read_valid+0x10/0x10 [ 311.581441][ T8652] ? find_held_lock+0x2b/0x80 [ 311.581475][ T8652] ? up+0xcb/0x140 [ 311.581512][ T8652] ? do_raw_spin_unlock+0x172/0x230 [ 311.581568][ T8652] ? prb_read_valid+0x78/0xa0 [ 311.581616][ T8652] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 311.581654][ T8652] soft_cursor+0x524/0xa10 [ 311.581709][ T8652] ? fb_get_color_depth+0x120/0x250 [ 311.581759][ T8652] bit_cursor+0xe8c/0x17e0 [ 311.581813][ T8652] ? __pfx_bit_cursor+0x10/0x10 [ 311.581871][ T8652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 311.581928][ T8652] ? get_color+0x1da/0x450 [ 311.581970][ T8652] ? __pfx_bit_cursor+0x10/0x10 [ 311.582017][ T8652] fbcon_cursor+0x40c/0x5a0 [ 311.582061][ T8652] ? add_softcursor+0x1/0x290 [ 311.582115][ T8652] set_cursor+0x1db/0x250 [ 311.582143][ T8652] con_write+0x89/0xb0 [ 311.582179][ T8652] n_tty_write+0x41e/0x11e0 [ 311.582233][ T8652] ? __pfx_n_tty_write+0x10/0x10 [ 311.582277][ T8652] ? trace_kmalloc+0x2b/0xd0 [ 311.582318][ T8652] ? __pfx_woken_wake_function+0x10/0x10 [ 311.582381][ T8652] ? kfree+0x252/0x6d0 [ 311.582410][ T8652] ? __pfx_n_tty_write+0x10/0x10 [ 311.582455][ T8652] file_tty_write.constprop.0+0x503/0x9b0 [ 311.582499][ T8652] redirected_tty_write+0xd4/0x150 [ 311.582537][ T8652] vfs_write+0x7d3/0x11d0 [ 311.582573][ T8652] ? __pfx_redirected_tty_write+0x10/0x10 [ 311.582613][ T8652] ? __pfx_vfs_write+0x10/0x10 [ 311.582648][ T8652] ? find_held_lock+0x2b/0x80 [ 311.582694][ T8652] ksys_write+0x12a/0x250 [ 311.582729][ T8652] ? __pfx_ksys_write+0x10/0x10 [ 311.582771][ T8652] do_syscall_64+0xcd/0xfa0 [ 311.582809][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.582843][ T8652] RIP: 0033:0x7ff2d1f8efc9 [ 311.582869][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.582903][ T8652] RSP: 002b:00007ff2d2e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.582936][ T8652] RAX: ffffffffffffffda RBX: 00007ff2d21e6090 RCX: 00007ff2d1f8efc9 [ 311.582959][ T8652] RDX: 00000000000009fc RSI: 0000200000001bc0 RDI: 0000000000000003 [ 311.582980][ T8652] RBP: 00007ff2d2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.583001][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.583022][ T8652] R13: 00007ff2d21e6128 R14: 00007ff2d21e6090 R15: 00007ffe79e1a178 [ 311.583056][ T8652] [ 311.583475][ T8652] Kernel Offset: disabled