last executing test programs: 7.163123608s ago: executing program 3 (id=71): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x107, 0x11, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) ioctl$auto_TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0xcad) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000140)="b34d2a90", 0x7115}, 0x7) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r5, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xc044) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r6) 6.758565098s ago: executing program 1 (id=73): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14804) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) ioctl$auto(0x3, 0x4020565a, 0x38) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x22001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/netdevsim2/disable_policy\x00', 0x541a01, 0x0) 4.908479927s ago: executing program 3 (id=78): mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) pread64$auto(r0, 0x0, 0x3eb, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x208001, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r1, 0x0, 0x4, 0x6}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7fffffffffffffff, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) 4.810926618s ago: executing program 1 (id=79): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) chdir$auto(&(0x7f0000000040)='./cgroup\x00') setsockopt$auto(0xffffffffffffffff, 0x4, 0x7, 0x0, 0xd4) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x4000010) r0 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirtytime_expire_seconds\x00', 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24000091) close_range$auto(r0, r2, 0xfe9) socket(0xa, 0x2, 0xffffffee) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x48c00, 0x41) fchmod$auto(r3, 0x7439) socket(0x8, 0x4, 0x8000005) setreuid$auto(0x4, 0x8) madvise$auto(0x0, 0x2000040080000004, 0xa) shmat$auto(0x0, &(0x7f0000000000)='\xfb\x83/\xf2!\xdb\xcf4A\xb9\xf8\x1b\xcd\xb8}\xb85', 0xfffffffa) 4.54472563s ago: executing program 2 (id=80): bpf$auto(0x5, &(0x7f0000000000)=@link_create={@map_fd=0xffffffffffffffff, @target_fd, 0x1, 0x7, @tracing={0x1000, 0x7fffffff}}, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/notes\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/cmdline\x00', 0x201, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r2, 0x7ff, &(0x7f00000000c0)='/dev/net/tun\x00', &(0x7f0000000100)="9d559b657f98bdb2bc51193434f3dc9313cbd2ab84e64ea7992698d9e3dac1040eefe502163430b1efed252196f6719949391e77c4ec170c42454355897208f00a84c1e8269a7a06ccda258bc0c94888644c804452ccbd5a6ee46e6d8f3ee43c1aceb3ad1e1e3ff864379fc1bec0c5ecd392377d3f1fb0ec073af22a05b2cc410e", 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xb60) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000001040)="0b3a2e306907ef654f41f7ad5a081d19a166893f142e3f7e8b421a9a0335f3d27151aef99a3cb577cc0a7c7154dd29babb3659a21ac1a8cfb9c21c7630b49c90b3eaeea0d4b9e93e904590f1486696f847709344c56867a4843e4c87b8edd6f88ee00806bdb35c1feab25b92eb1cfed8459b56d645b23b0f28d7b8d4986888a3e96352949baf8dcb2f4aa0cc63") mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x8800) fanotify_mark$auto(r2, 0xfffffff9, 0x9, r3, &(0x7f0000000240)='./file0/file0\x00') rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 4.146553275s ago: executing program 2 (id=81): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040)="6524b5aac083b05c1173a1174ad8f5246cdc9552bbdffc095f2e", 0x1a) socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x888) mmap$auto(0x0, 0x2020009, 0x3, 0x400f8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0xfffffffffffffffe, 0x4000000400008, 0x8000, 0x9b72, r1, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) r2 = socket(0x7, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x5ca02, 0x0) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(r2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 3.960811652s ago: executing program 1 (id=82): close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x10001, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0c, 0x7, 0x7fffffffffffffff, 0x4, 0x28, 0x7, 0x1, 0x7f, 0x100, 0x19]}, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50150000", @ANYBLOB="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"/4686, @ANYRES32=0x0, @ANYBLOB="140047000000000000000000000000000000000108004b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000900e80000000500020081000000050007000900000005000600140000000500060001000000"], 0x1550}, 0x1, 0x0, 0x0, 0x5}, 0xc000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b73, 0x2, 0x800) socket(0x10, 0x2, 0xffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x20000000000008b, r3, 0x4, 0x100) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0x4, 0x8) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x2, 0x20a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) 3.934432698s ago: executing program 0 (id=83): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14804) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) ioctl$auto(0x3, 0x4020565a, 0x38) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x22001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/netdevsim2/disable_policy\x00', 0x541a01, 0x0) 3.745942172s ago: executing program 3 (id=84): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xc00009}, 0x5, 0x20000000) mmap$auto(0x5, 0x210001, 0x1000000000df, 0x10011, r0, 0x8000) io_uring_setup$auto(0x1, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = open_by_handle_at$auto(r0, &(0x7f0000000480)={0xe5, 0x1, "c292b0bcc2136c38e30baae6690e8d7c8506ba8f41a3e671f2d166cf15d22ee3c1e3b6ae574fb04763b2dbe35d0690ace6f82b2bf708da4594feb193165fbfd4afcecb85145b6e296dbb81f9c12b1d077022a2becb349ed2446e6b5b8cd72ad833a699b5decc85edcb8398820d6f182047d021b8db94a92cf637c62272bce33ae832c238a3eab7530dfde6bc44f8971bee68b3ee34ac47eb2e14dcc6631eab60970790d193c147797a589738a7605e46b957a55a73041ec9aad5546b20d67647f7a16015633df3ea919f04e161aca18666b05fe94c72663f763bba872fb8156e1ce4319265"}, 0x80000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r2, 0x80085502, &(0x7f0000000440)=ANY=[@ANYRES64=r1]) madvise$auto(0x0, 0xffffffffffff0006, 0x55) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/12, 0xc) r4 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) mmap$auto(0x5, 0x8, 0x280, 0x100000011, 0xffffffffffffffff, 0x8) writev$auto(r4, &(0x7f0000000000)={&(0x7f0000000240)="9be3df59904dca5271fa4d25086c96e3b9e182928dfc69277d334fc20f97578be5a8b235474bf12f8c5fa7ed738e2742aa92a166ae57eb928dc8a8917ca9de977749aa178e9184c8a968b1f67dbb616ecfa0b4f156d1acd4ecedb06023991d97000000000000000000", 0x9}, 0x1) mmap$auto(0x0, 0x3ff, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x800, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x1, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) 3.684980917s ago: executing program 2 (id=85): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x8000, 0xffffffff, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000340)='3\x00', 0x6) mmap$auto(0x7fffffff, 0x400008, 0x4, 0x9b72, 0x2, 0x8003) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x46a2, @remote}, 0x6) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x7f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x40001) kill$auto(0x80000007, 0x24) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000340)='/proc/scsi/s\x01\x00devices\x00M3\xa2\xeds\x84\xcd\x0e\x17qK\xd7B\x8c\xfc\xc8n\x88\xcf\x9c\x7f\x19C\xad\v\xe6(\x8dQ\xa3\x8e\x8b\xd5\xeb\x99\xc20b\xa8\xbf\xc1W\xc6\a\xd3\x1f1>', 0xffff, 0x100) r1 = prctl$auto(0x73, 0x3, 0x4, 0x5, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/controlC0\x00', 0x10840, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) close_range$auto(0x2, 0x8, 0x0) r2 = userfaultfd$auto(0x80) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) r3 = fsopen$auto(&(0x7f0000000180)='\x00', 0x5) r4 = waitid$auto(0x8, r2, &(0x7f00000002c0)={@siginfo_0_0={0xf6, 0x6, 0xfffffffd, @_sigchld={0xffffffffffffffff, 0x0, 0x9f38, 0x7, 0x8000000000000000}}}, 0x9, &(0x7f0000000400)={{0x4, 0x7}, {0x0, 0x250d}, 0x2, 0x2, 0x4, 0x5, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x7, 0x10, 0x283}) ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2504, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) 3.57396351s ago: executing program 0 (id=86): socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000240)={0xffffffff, 0x0, 0x2000000, 0x7, 0x6, 0xff, 0x1ff, 0x0, 0x1, 0x4, 0xfffffffffffffffb, {0x0, 0x6}, 0x9b, 0x9, 0x6, 0x624, 0x0, 0x6, 0x4, 0x7, 0x9, 0xfffffffffffffffa, 0xfffffff9}) ioctl$auto(r0, 0x9000643c, 0xc35) io_uring_setup$auto(0x1, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r3, 0x0, 0x100082) 3.304784214s ago: executing program 3 (id=87): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14804) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) ioctl$auto(0x3, 0x4020565a, 0x38) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x22001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/netdevsim2/disable_policy\x00', 0x541a01, 0x0) 2.780330132s ago: executing program 2 (id=88): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14804) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10044010) ioctl$auto(0x3, 0x4020565a, 0x38) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x22001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/netdevsim2/disable_policy\x00', 0x541a01, 0x0) 2.551470285s ago: executing program 0 (id=89): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x40880, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x100, 0x1000}, 0xfffffffe, 0x3) r2 = socket(0x18, 0x80000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, 0x0) connect$auto(r2, 0x0, 0x1e) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r5, 0xae03, 0xd4) socket(0x2000000000000021, 0x2, 0x10000000000002) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x68a80, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) write$auto(0xca, &(0x7f00000002c0)='\x04=\x01\r\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\xccb\xc9\x19AWL\x00\b2\xa7e\xbd\x97\x9c\x05z\xccs\xba\xa2,&\xe9\x11\xfe{ai\x8a\x86V \x8eb=OJC\xaf.D\x8f\x97\x03g*\x1c\x98~\x15\xc3\\\xcbed\xff\xb1\x92~\x89S\"\xdac\x99\xf7!\a\xfb\xf8Vf\x18\xc8\xbbu\xcd\xf6\x80\x92\xa9\xda(\xa2\x93p\n\xe5t\x1b$\x9f\xa3\x1a\x82\x06\x12\xa6\a\"\xba\x8a\x88t\xf2A\xb9g$H\xcc\xc7\x8eoi\xf5\x02\n\"\xdf9\xa5>\x91\xf2\xde\xa8\xd3\x9f\x9d\xba6\xc0\xcb!w\a\xdd\xbb\xf1kox\x04\xe8a\x93\xf3\x12eE]\f\a\xf7N\xb7\x85\a\xf1+\x05\xe7\xb5\xa9m-+(\xaf\xf9\xa4r\x0fX~\v\xa7\xf3\x9cD\t\x80\x8b\x9d6\x1f\xdc\xc4y\x1d\x9a\xff\x0e\xbb\x8c^\xb9\x06\xcd\xa1\xf9\xec\xc1\xc3\xd7\x0fr\x16Hf\xb5\x17\x10\xf9\x03H\x19\x1a\xa8\xd1\xad\xa2\xd3\xe7\xa7\x883Y\x7fS\x80|\x9e\x91O\xca@\xe45\x80\x95\xdf\xdbn\x01\xde\xfd\vH\xfc\xe6o\xf5\x1c\x034\xf5\xd8\xb1}JX{\xf0\x89\x1d\xb5P`j\x10I\xf2\x16PQ\x85\xa7\t\x98\x1c\xe2Y\xa1\x03\x9b\xdd4VQF\x8d\xc9\xa5\fm\xca\xfd\x92\n\\\xf8\xb5C\xce\xa9\xdc\xddg\x8e2x\xde\xdf\x14zd\x01s\xaa\xd7v\xfa\xe3\x99\v|2', 0x2d9) ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d}) 2.508997558s ago: executing program 1 (id=90): bpf$auto(0x5, &(0x7f0000000000)=@link_create={@map_fd=0xffffffffffffffff, @target_fd, 0x1, 0x7, @tracing={0x1000, 0x7fffffff}}, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/notes\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r3 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/cmdline\x00', 0x201, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r3, 0x7ff, &(0x7f00000000c0)='/dev/net/tun\x00', &(0x7f0000000100)="9d559b657f98bdb2bc51193434f3dc9313cbd2ab84e64ea7992698d9e3dac1040eefe502163430b1efed252196f6719949391e77c4ec170c42454355897208f00a84c1e8269a7a06ccda258bc0c94888644c804452ccbd5a6ee46e6d8f3ee43c1aceb3ad1e1e3ff864379fc1bec0c5ecd392377d3f1fb0ec073af22a05b2cc410e", 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xb60) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000001040)="0b3a2e306907ef654f41f7ad5a081d19a166893f142e3f7e8b421a9a0335f3d27151aef99a3cb577cc0a7c7154dd29babb3659a21ac1a8cfb9c21c7630b49c90b3eaeea0d4b9e93e904590f1486696f847709344c56867a4843e4c87b8edd6f88ee00806bdb35c1feab25b92eb1cfed8459b56d645b23b0f28d7b8d4986888a3e96352949baf8dcb2f4aa0cc63") mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x8800) fanotify_mark$auto(r3, 0xfffffff9, 0x9, r4, &(0x7f0000000240)='./file0/file0\x00') rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 2.334730403s ago: executing program 0 (id=91): r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_last_time_ms\x00', 0x2240, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/105, 0x69) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000100)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) getsid$auto(r5) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x4, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000000, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x401, 0x22000, 0x9, 0xfffffffc, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe]}, 0x9, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r7 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r7, 0x4, 0x1, 0x0, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd04, &(0x7f00000001c0)) 1.878134699s ago: executing program 2 (id=92): openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000000), r0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_flowlabel\x00', 0x400002, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/10, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) mmap$auto(0x87e0, 0x80000000, 0x3, 0x12, 0xffffffffffffffff, 0x168d) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r5, 0x0, 0x7) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x149802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x100000001) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000180)={r2, 0x6}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'dvmrp1\x00'}) 1.633360856s ago: executing program 3 (id=93): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0x6, 0x3) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x226c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x840, 0x152) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x2100, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0xc2500, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x7, 0x10001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x40204706, 0x0) 1.095063838s ago: executing program 1 (id=94): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x14804) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) ioctl$auto(0x3, 0x4020565a, 0x38) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x22001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/netdevsim2/disable_policy\x00', 0x541a01, 0x0) 1.082582707s ago: executing program 0 (id=95): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040)="6524b5aac083b05c1173a1174ad8f5246cdc9552bbdffc095f2e", 0x1a) socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x888) mmap$auto(0x0, 0x2020009, 0x3, 0x400f8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0xfffffffffffffffe, 0x4000000400008, 0x8000, 0x9b72, r1, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/hid/drivers/belkin/unbind\x00', 0x478280, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x5ca02, 0x0) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8000000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 857.383108ms ago: executing program 1 (id=96): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x8, 0x7fff, 0x916a, 0x10, 0xffffffffffffffff, 0x10400037e2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x44400, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x2, 0x5, 0x9, 0x2, 0x0}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r2, 0x900064b6, 0x6162) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1ff, 0xa, 0x8fd6, 0x948b, 0x5, 0x15f4da0a, 0x3, 0x75, 0x62, 0x80000001, 0xcf, 0x1, 0x9, 0x1, 0x7ffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) socket(0xa, 0x3, 0x73) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x10f, 0x4, 0xfffffffffffffffe, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, 0x0, 0x4d) socket(0x1, 0x1, 0x5) r5 = gettid() process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x5c00000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x18000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) 762.179132ms ago: executing program 3 (id=97): bpf$auto(0x5, &(0x7f0000000000)=@link_create={@map_fd, @target_fd, 0x1, 0x7, @tracing={0x1000, 0x7fffffff}}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/notes\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/cmdline\x00', 0x201, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r2, 0x7ff, &(0x7f00000000c0)='/dev/net/tun\x00', &(0x7f0000000100)="9d559b657f98bdb2bc51193434f3dc9313cbd2ab84e64ea7992698d9e3dac1040eefe502163430b1efed252196f6719949391e77c4ec170c42454355897208f00a84c1e8269a7a06ccda258bc0c94888644c804452ccbd5a6ee46e6d8f3ee43c1aceb3ad1e1e3ff864379fc1bec0c5ecd392377d3f1fb0ec073af22a05b2cc410e", 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xb60) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x8800) fanotify_mark$auto(r2, 0xfffffff9, 0x9, r3, &(0x7f0000000240)='./file0/file0\x00') rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 130.297392ms ago: executing program 0 (id=98): socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008003) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000240)={0xffffffff, 0x0, 0x2000000, 0x7, 0x6, 0xff, 0x1ff, 0x0, 0x1, 0x4, 0xfffffffffffffffb, {0x0, 0x6}, 0x9b, 0x9, 0x6, 0x624, 0x0, 0x6, 0x4, 0x7, 0x9, 0xfffffffffffffffa, 0xfffffff9}) ioctl$auto(r0, 0x9000643c, 0xc35) io_uring_setup$auto(0x1, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r3, 0x0, 0x100082) 0s ago: executing program 2 (id=99): close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x10001, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0c, 0x7, 0x7fffffffffffffff, 0x4, 0x28, 0x7, 0x1, 0x7f, 0x100, 0x19]}, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50150000", @ANYBLOB="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"/4686, @ANYRES32=0x0, @ANYBLOB="140047000000000000000000000000000000000108004b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000900e80000000500020081000000050007000900000005000600140000000500060001000000"], 0x1550}, 0x1, 0x0, 0x0, 0x5}, 0xc000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b73, 0x2, 0x800) socket(0x10, 0x2, 0xffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x20000000000008b, r3, 0x4, 0x100) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0x4, 0x8) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x2, 0x20a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 81.017084][ T5855] cgroup: Unknown subsys name 'net' [ 81.147910][ T5855] cgroup: Unknown subsys name 'cpuset' [ 81.156701][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.632140][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.152987][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.161015][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.175237][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.194730][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.195993][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.205631][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.211096][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.217709][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.224356][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.232679][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.245095][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.246189][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.254064][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.260193][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.270288][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.275060][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.281860][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.288366][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.320530][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.328693][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.871786][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 85.969373][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.982600][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 86.049159][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 86.117004][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.124239][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.131892][ T5867] bridge_slave_0: entered allmulticast mode [ 86.139787][ T5867] bridge_slave_0: entered promiscuous mode [ 86.148496][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.155715][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.162996][ T5867] bridge_slave_1: entered allmulticast mode [ 86.170231][ T5867] bridge_slave_1: entered promiscuous mode [ 86.279816][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.287113][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.295439][ T5866] bridge_slave_0: entered allmulticast mode [ 86.302424][ T5866] bridge_slave_0: entered promiscuous mode [ 86.312604][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.339240][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.346547][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.353700][ T5866] bridge_slave_1: entered allmulticast mode [ 86.361969][ T5866] bridge_slave_1: entered promiscuous mode [ 86.371483][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.467645][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.474981][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.482288][ T5865] bridge_slave_0: entered allmulticast mode [ 86.489829][ T5865] bridge_slave_0: entered promiscuous mode [ 86.498134][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.505628][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.512789][ T5864] bridge_slave_0: entered allmulticast mode [ 86.520743][ T5864] bridge_slave_0: entered promiscuous mode [ 86.541853][ T5867] team0: Port device team_slave_0 added [ 86.548587][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.555978][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.563141][ T5865] bridge_slave_1: entered allmulticast mode [ 86.570379][ T5865] bridge_slave_1: entered promiscuous mode [ 86.577020][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.584144][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.591580][ T5864] bridge_slave_1: entered allmulticast mode [ 86.598975][ T5864] bridge_slave_1: entered promiscuous mode [ 86.608714][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.621509][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.632465][ T5867] team0: Port device team_slave_1 added [ 86.740236][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.752706][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.764687][ T5866] team0: Port device team_slave_0 added [ 86.778206][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.785375][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.811845][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.825760][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.832821][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.858808][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.873621][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.889220][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.900565][ T5866] team0: Port device team_slave_1 added [ 87.042612][ T5865] team0: Port device team_slave_0 added [ 87.053504][ T5864] team0: Port device team_slave_0 added [ 87.077147][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.084126][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.111333][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.125017][ T5865] team0: Port device team_slave_1 added [ 87.151034][ T5864] team0: Port device team_slave_1 added [ 87.164650][ T5867] hsr_slave_0: entered promiscuous mode [ 87.171713][ T5867] hsr_slave_1: entered promiscuous mode [ 87.199585][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.207330][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.233529][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.303461][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.310841][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.337630][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.337849][ T5870] Bluetooth: hci2: command tx timeout [ 87.348669][ T5878] Bluetooth: hci3: command tx timeout [ 87.355132][ T5188] Bluetooth: hci0: command tx timeout [ 87.362271][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.372341][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.398918][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.409916][ T5188] Bluetooth: hci1: command tx timeout [ 87.456029][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.463008][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.490790][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.515339][ T5866] hsr_slave_0: entered promiscuous mode [ 87.522057][ T5866] hsr_slave_1: entered promiscuous mode [ 87.528582][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 87.534639][ T5866] Cannot create hsr debugfs directory [ 87.559837][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.567170][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.593324][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.680801][ T5865] hsr_slave_0: entered promiscuous mode [ 87.687646][ T5865] hsr_slave_1: entered promiscuous mode [ 87.693664][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 87.699584][ T5865] Cannot create hsr debugfs directory [ 87.749810][ T5864] hsr_slave_0: entered promiscuous mode [ 87.757416][ T5864] hsr_slave_1: entered promiscuous mode [ 87.763752][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 87.769780][ T5864] Cannot create hsr debugfs directory [ 88.147075][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.177383][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.189569][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.219802][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.290692][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.319331][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.342817][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.354004][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.410907][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.424220][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.440028][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.452512][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.571740][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.594141][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.615277][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.625576][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.651064][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.755260][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.778008][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.807747][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.815048][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.836379][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.843487][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.892514][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.911689][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.948542][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.955750][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.969027][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.976156][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.997644][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.034196][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.041415][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.069837][ T5867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.080849][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.098034][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.105233][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.149961][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.213955][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.269021][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.276233][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.298508][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.338600][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.346164][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.404718][ T5188] Bluetooth: hci0: command tx timeout [ 89.407382][ T5878] Bluetooth: hci2: command tx timeout [ 89.415294][ T5870] Bluetooth: hci3: command tx timeout [ 89.487705][ T5188] Bluetooth: hci1: command tx timeout [ 89.518834][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.651704][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.770452][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.858055][ T5867] veth0_vlan: entered promiscuous mode [ 89.921656][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.930650][ T5866] veth0_vlan: entered promiscuous mode [ 89.950023][ T5866] veth1_vlan: entered promiscuous mode [ 89.957728][ T5867] veth1_vlan: entered promiscuous mode [ 90.016223][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.053939][ T5867] veth0_macvtap: entered promiscuous mode [ 90.068155][ T5867] veth1_macvtap: entered promiscuous mode [ 90.105486][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.113107][ T5864] veth0_vlan: entered promiscuous mode [ 90.125081][ T5866] veth0_macvtap: entered promiscuous mode [ 90.136896][ T5866] veth1_macvtap: entered promiscuous mode [ 90.163837][ T5864] veth1_vlan: entered promiscuous mode [ 90.181551][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.202990][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.235501][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259166][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.272081][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.291873][ T5865] veth0_vlan: entered promiscuous mode [ 90.303013][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312661][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.330621][ T5864] veth0_macvtap: entered promiscuous mode [ 90.339167][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.368298][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.379375][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.391795][ T5864] veth1_macvtap: entered promiscuous mode [ 90.401849][ T5865] veth1_vlan: entered promiscuous mode [ 90.409710][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.463322][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.506636][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.532966][ T3520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.543927][ T3520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.563654][ T3520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.590210][ T3596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.619865][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.628378][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.658887][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.669961][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.673058][ T5865] veth0_macvtap: entered promiscuous mode [ 90.720075][ T5865] veth1_macvtap: entered promiscuous mode [ 90.760322][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.771204][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.782708][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.812239][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.845504][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.854895][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.874120][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.919533][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.919734][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.965588][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.986671][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.996604][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.066824][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.211218][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.225074][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.267814][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.289398][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.372441][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.388737][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.485293][ T5188] Bluetooth: hci0: command tx timeout [ 91.490774][ T5870] Bluetooth: hci3: command tx timeout [ 91.491186][ T5878] Bluetooth: hci2: command tx timeout [ 91.534502][ T30] audit: type=1804 audit(1758085685.747:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 91.566898][ T5878] Bluetooth: hci1: command tx timeout [ 91.572641][ T5964] mmap: syz.2.3 (5964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.595043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.603714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.674770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.741027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.750533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 91.966884][ T1758] cfg80211: failed to load regulatory.db [ 92.197747][ T5974] Zero length message leads to an empty skb [ 92.414721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.505536][ T5980] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.358985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.367808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.379504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.388666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.532115][ T5993] dyndbg: bad flag-op §, at start of §Ó™aŠ‡è´ [ 93.564995][ T5878] Bluetooth: hci0: command tx timeout [ 93.566073][ T5188] Bluetooth: hci3: command tx timeout [ 93.576887][ T5188] Bluetooth: hci2: command tx timeout [ 93.644769][ T5878] Bluetooth: hci1: command tx timeout [ 93.653647][ T5993] dyndbg: flags parse failed [ 94.509495][ T6010] FAULT_INJECTION: forcing a failure. [ 94.509495][ T6010] name failslab, interval 1, probability 0, space 0, times 1 [ 94.580635][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 94.580672][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.580692][ T6010] Call Trace: [ 94.580704][ T6010] [ 94.580714][ T6010] dump_stack_lvl+0x16c/0x1f0 [ 94.580759][ T6010] should_fail_ex+0x512/0x640 [ 94.580798][ T6010] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 94.580832][ T6010] should_failslab+0xc2/0x120 [ 94.580866][ T6010] __kmalloc_cache_node_noprof+0x6d/0x420 [ 94.580893][ T6010] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.580929][ T6010] ? __get_vm_area_node+0x101/0x330 [ 94.580992][ T6010] __get_vm_area_node+0x101/0x330 [ 94.581037][ T6010] __vmalloc_node_range_noprof+0x271/0x14b0 [ 94.581064][ T6010] ? kernel_read_file+0x6ff/0x910 [ 94.581097][ T6010] ? do_file_open_root+0x482/0x610 [ 94.581135][ T6010] ? __lock_acquire+0x62e/0x1ce0 [ 94.581168][ T6010] ? kernel_read_file+0x6ff/0x910 [ 94.581212][ T6010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.581242][ T6010] ? ima_read_file+0x142/0x1a0 [ 94.581276][ T6010] ? __pfx_ima_read_file+0x10/0x10 [ 94.581307][ T6010] ? kernel_read_file+0x6ff/0x910 [ 94.581342][ T6010] __vmalloc_node_noprof+0xad/0xf0 [ 94.581367][ T6010] ? kernel_read_file+0x6ff/0x910 [ 94.581407][ T6010] kernel_read_file+0x6ff/0x910 [ 94.581448][ T6010] ? __pfx_kernel_read_file+0x10/0x10 [ 94.581496][ T6010] kernel_read_file_from_path_initns+0x1cf/0x260 [ 94.581537][ T6010] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 94.581574][ T6010] ? trace_kmem_cache_alloc+0x28/0xc0 [ 94.581612][ T6010] ? _request_firmware+0x503/0x1470 [ 94.581653][ T6010] _request_firmware+0x744/0x1470 [ 94.581701][ T6010] ? __pfx__request_firmware+0x10/0x10 [ 94.581735][ T6010] ? __pfx_netdev_run_todo+0x10/0x10 [ 94.581758][ T6010] ? __pfx___mutex_lock+0x10/0x10 [ 94.581807][ T6010] request_firmware+0x35/0x50 [ 94.581842][ T6010] reg_reload_regdb+0x85/0x460 [ 94.581869][ T6010] ? __pfx_reg_reload_regdb+0x10/0x10 [ 94.581895][ T6010] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 94.581925][ T6010] ? nl80211_pre_doit+0x1b0/0xb10 [ 94.581962][ T6010] genl_family_rcv_msg_doit+0x209/0x2f0 [ 94.581993][ T6010] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.582019][ T6010] ? rcu_is_watching+0x12/0xc0 [ 94.582058][ T6010] ? bpf_lsm_capable+0x9/0x10 [ 94.582082][ T6010] ? security_capable+0x7e/0x260 [ 94.582115][ T6010] genl_rcv_msg+0x55c/0x800 [ 94.582146][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.582173][ T6010] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 94.582202][ T6010] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 94.582240][ T6010] ? __pfx_nl80211_post_doit+0x10/0x10 [ 94.582283][ T6010] netlink_rcv_skb+0x158/0x420 [ 94.582323][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.582352][ T6010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.582409][ T6010] ? netlink_deliver_tap+0x1ae/0xd30 [ 94.582452][ T6010] genl_rcv+0x28/0x40 [ 94.582475][ T6010] netlink_unicast+0x5a7/0x870 [ 94.582519][ T6010] ? __pfx_netlink_unicast+0x10/0x10 [ 94.582557][ T6010] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 94.582593][ T6010] ? __lock_acquire+0xb97/0x1ce0 [ 94.582636][ T6010] netlink_sendmsg+0x8d1/0xdd0 [ 94.582681][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.582724][ T6010] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 94.582760][ T6010] ____sys_sendmsg+0xa98/0xc70 [ 94.582791][ T6010] ? copy_msghdr_from_user+0x10a/0x160 [ 94.582827][ T6010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.582866][ T6010] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.582909][ T6010] ___sys_sendmsg+0x134/0x1d0 [ 94.582949][ T6010] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.583033][ T6010] __sys_sendmsg+0x16d/0x220 [ 94.583072][ T6010] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.583109][ T6010] ? __x64_sys_futex+0x1e0/0x4c0 [ 94.583164][ T6010] do_syscall_64+0xcd/0x4c0 [ 94.583205][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.583231][ T6010] RIP: 0033:0x7f3f5ff8eba9 [ 94.583270][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.583300][ T6010] RSP: 002b:00007f3f60ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.583325][ T6010] RAX: ffffffffffffffda RBX: 00007f3f601d5fa0 RCX: 00007f3f5ff8eba9 [ 94.583342][ T6010] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 94.583358][ T6010] RBP: 00007f3f60011e19 R08: 0000000000000000 R09: 0000000000000000 [ 94.583374][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.583389][ T6010] R13: 00007f3f601d6038 R14: 00007f3f601d5fa0 R15: 00007fffa03c1578 [ 94.583426][ T6010] [ 95.112974][ T6012] random: crng reseeded on system resumption [ 95.278688][ T6010] syz.3.13: vmalloc error: size 5980, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.292704][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 95.292735][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.292749][ T6010] Call Trace: [ 95.292758][ T6010] [ 95.292767][ T6010] dump_stack_lvl+0x16c/0x1f0 [ 95.292807][ T6010] warn_alloc+0x248/0x3a0 [ 95.292830][ T6010] ? __pfx_warn_alloc+0x10/0x10 [ 95.292844][ T6010] ? kasan_quarantine_reduce+0x1b9/0x1e0 [ 95.292868][ T6010] ? __kasan_kmalloc+0x8a/0xb0 [ 95.292885][ T6010] ? __get_vm_area_node+0x208/0x330 [ 95.292920][ T6010] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 95.292934][ T6010] ? do_file_open_root+0x482/0x610 [ 95.292955][ T6010] ? __lock_acquire+0x62e/0x1ce0 [ 95.292974][ T6010] ? kernel_read_file+0x6ff/0x910 [ 95.292998][ T6010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.293013][ T6010] ? ima_read_file+0x142/0x1a0 [ 95.293028][ T6010] ? __pfx_ima_read_file+0x10/0x10 [ 95.293044][ T6010] ? kernel_read_file+0x6ff/0x910 [ 95.293062][ T6010] __vmalloc_node_noprof+0xad/0xf0 [ 95.293075][ T6010] ? kernel_read_file+0x6ff/0x910 [ 95.293095][ T6010] kernel_read_file+0x6ff/0x910 [ 95.293116][ T6010] ? __pfx_kernel_read_file+0x10/0x10 [ 95.293141][ T6010] kernel_read_file_from_path_initns+0x1cf/0x260 [ 95.293166][ T6010] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 95.293186][ T6010] ? trace_kmem_cache_alloc+0x28/0xc0 [ 95.293208][ T6010] ? _request_firmware+0x503/0x1470 [ 95.293230][ T6010] _request_firmware+0x744/0x1470 [ 95.293255][ T6010] ? __pfx__request_firmware+0x10/0x10 [ 95.293273][ T6010] ? __pfx_netdev_run_todo+0x10/0x10 [ 95.293286][ T6010] ? __pfx___mutex_lock+0x10/0x10 [ 95.293312][ T6010] request_firmware+0x35/0x50 [ 95.293331][ T6010] reg_reload_regdb+0x85/0x460 [ 95.293345][ T6010] ? __pfx_reg_reload_regdb+0x10/0x10 [ 95.293359][ T6010] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 95.293376][ T6010] ? nl80211_pre_doit+0x1b0/0xb10 [ 95.293395][ T6010] genl_family_rcv_msg_doit+0x209/0x2f0 [ 95.293412][ T6010] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.293426][ T6010] ? rcu_is_watching+0x12/0xc0 [ 95.293446][ T6010] ? bpf_lsm_capable+0x9/0x10 [ 95.293460][ T6010] ? security_capable+0x7e/0x260 [ 95.293484][ T6010] genl_rcv_msg+0x55c/0x800 [ 95.293510][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.293534][ T6010] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 95.293557][ T6010] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 95.293578][ T6010] ? __pfx_nl80211_post_doit+0x10/0x10 [ 95.293597][ T6010] netlink_rcv_skb+0x158/0x420 [ 95.293618][ T6010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.293633][ T6010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.293662][ T6010] ? netlink_deliver_tap+0x1ae/0xd30 [ 95.293685][ T6010] genl_rcv+0x28/0x40 [ 95.293697][ T6010] netlink_unicast+0x5a7/0x870 [ 95.293720][ T6010] ? __pfx_netlink_unicast+0x10/0x10 [ 95.293741][ T6010] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 95.293762][ T6010] ? __lock_acquire+0xb97/0x1ce0 [ 95.293784][ T6010] netlink_sendmsg+0x8d1/0xdd0 [ 95.293808][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.293831][ T6010] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 95.293850][ T6010] ____sys_sendmsg+0xa98/0xc70 [ 95.293867][ T6010] ? copy_msghdr_from_user+0x10a/0x160 [ 95.293886][ T6010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.293930][ T6010] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.293955][ T6010] ___sys_sendmsg+0x134/0x1d0 [ 95.293978][ T6010] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.294022][ T6010] __sys_sendmsg+0x16d/0x220 [ 95.294045][ T6010] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.294064][ T6010] ? __x64_sys_futex+0x1e0/0x4c0 [ 95.294093][ T6010] do_syscall_64+0xcd/0x4c0 [ 95.294115][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.294130][ T6010] RIP: 0033:0x7f3f5ff8eba9 [ 95.294143][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.294156][ T6010] RSP: 002b:00007f3f60ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.294172][ T6010] RAX: ffffffffffffffda RBX: 00007f3f601d5fa0 RCX: 00007f3f5ff8eba9 [ 95.294181][ T6010] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 95.294189][ T6010] RBP: 00007f3f60011e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.294198][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.294205][ T6010] R13: 00007f3f601d6038 R14: 00007f3f601d5fa0 R15: 00007fffa03c1578 [ 95.294224][ T6010] [ 95.294229][ T6010] Mem-Info: [ 95.768387][ T6010] active_anon:5934 inactive_anon:0 isolated_anon:0 [ 95.768387][ T6010] active_file:2953 inactive_file:40223 isolated_file:0 [ 95.768387][ T6010] unevictable:768 dirty:1900 writeback:0 [ 95.768387][ T6010] slab_reclaimable:10278 slab_unreclaimable:91859 [ 95.768387][ T6010] mapped:25872 shmem:1871 pagetables:1069 [ 95.768387][ T6010] sec_pagetables:0 bounce:0 [ 95.768387][ T6010] kernel_misc_reclaimable:0 [ 95.768387][ T6010] free:1330795 free_pcp:25238 free_cma:0 [ 95.844477][ T6010] Node 0 active_anon:23736kB inactive_anon:0kB active_file:11812kB inactive_file:160688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103488kB dirty:7584kB writeback:0kB shmem:5948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11636kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.879576][ T6010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.961383][ T6010] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.994247][ T6010] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 96.000412][ T6010] Node 0 DMA32 free:1425840kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23756kB inactive_anon:0kB active_file:11828kB inactive_file:159380kB unevictable:1536kB writepending:7648kB present:3129332kB managed:2539536kB mlocked:0kB bounce:0kB free_pcp:76212kB local_pcp:48016kB free_cma:0kB [ 96.064606][ T6010] lowmem_reserve[]: 0 0 1 1 1 [ 96.121339][ T6010] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 96.190251][ T6010] lowmem_reserve[]: 0 0 0 0 0 [ 96.242622][ T6010] Node 1 Normal free:3884912kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:20kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21760kB local_pcp:10136kB free_cma:0kB [ 96.305321][ T6010] lowmem_reserve[]: 0 0 0 0 0 [ 96.310101][ T6010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.379487][ T6010] Node 0 DMA32: 10*4kB (UM) 29*8kB (UM) 2*16kB (ME) 3*32kB (UME) 3*64kB (UME) 2*128kB (UE) 5*256kB (UME) 3*512kB (M) 1*1024kB (M) 3*2048kB (ME) 345*4096kB (M) = 1423952kB [ 96.424804][ T6010] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 96.437686][ T6010] Node 1 Normal: 133*4kB (U) 49*8kB (UME) 36*16kB (UME) 63*32kB (UME) 16*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3884860kB [ 96.459131][ T6010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.474004][ T6010] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 96.483654][ T6010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.494026][ T6010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.505949][ T6010] 45055 total pagecache pages [ 96.510649][ T6010] 6 pages in swap cache [ 96.558646][ T6010] Free swap = 124996kB [ 96.562867][ T6010] Total swap = 124996kB [ 96.574794][ T6010] 2097051 pages RAM [ 96.578636][ T6010] 0 pages HighMem/MovableOnly [ 96.595622][ T6010] 430205 pages reserved [ 96.599814][ T6010] 0 pages cma reserved [ 96.629364][ T6010] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 96.654495][ T6010] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 96.707282][ T6010] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 96.904479][ T6010] syz.3.13 (6010) used greatest stack depth: 19960 bytes left [ 97.406888][ T6039] ima: policy update failed [ 97.564850][ T30] audit: type=1802 audit(1758085691.777:3): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.17" res=0 errno=0 [ 98.581122][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.396709][ T6057] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 101.523210][ T6087] zswap: compressor not available [ 101.529238][ T6102] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.406486][ T6128] binder: 6117:6128 unknown command 0 [ 103.412021][ T6128] binder: 6117:6128 ioctl c0306201 2000000000c0 returned -22 [ 104.061172][ T30] audit: type=1800 audit(1758085698.277:4): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="dbroot" dev="configfs" ino=7816 res=0 errno=0 [ 105.247242][ T6146] netlink: 93 bytes leftover after parsing attributes in process `syz.1.37'. [ 105.943288][ T6155] random: crng reseeded on system resumption [ 106.052589][ T5878] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 106.675177][ T6161] XFS: Clearing xfsstats [ 106.915003][ T6170] random: crng reseeded on system resumption [ 106.956136][ T6174] blktrace: Concurrent blktraces are not allowed on loop12 [ 106.963581][ T5878] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 107.073817][ T6168] ima: policy update failed [ 107.089556][ T30] audit: type=1802 audit(1758085701.307:5): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.43" res=0 errno=0 [ 107.319295][ T6166] vivid-003: ================= START STATUS ================= [ 107.339223][ T6166] vivid-003: Radio HW Seek Mode: Bounded [ 107.350344][ T6166] vivid-003: Radio Programmable HW Seek: false [ 107.370224][ T6166] vivid-003: RDS Rx I/O Mode: Block I/O [ 107.380674][ T6166] vivid-003: Generate RBDS Instead of RDS: false [ 107.387982][ T6166] vivid-003: RDS Reception: true [ 107.416405][ T6166] vivid-003: RDS Program Type: 0 inactive [ 107.459925][ T6166] vivid-003: RDS PS Name: inactive [ 107.590691][ T6166] vivid-003: RDS Radio Text: inactive [ 107.604444][ T6166] vivid-003: RDS Traffic Announcement: false inactive [ 107.644102][ T6166] vivid-003: RDS Traffic Program: false inactive [ 107.660906][ T6166] vivid-003: RDS Music: false inactive [ 107.679152][ T6166] vivid-003: ================== END STATUS ================== [ 110.011380][ T6198] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.208583][ T6201] FAULT_INJECTION: forcing a failure. [ 110.208583][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 110.256477][ T6203] random: crng reseeded on system resumption [ 110.268021][ T6201] CPU: 0 UID: 0 PID: 6201 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(full) [ 110.268057][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.268073][ T6201] Call Trace: [ 110.268082][ T6201] [ 110.268092][ T6201] dump_stack_lvl+0x16c/0x1f0 [ 110.268137][ T6201] should_fail_ex+0x512/0x640 [ 110.268175][ T6201] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 110.268211][ T6201] should_failslab+0xc2/0x120 [ 110.268244][ T6201] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 110.268273][ T6201] ? __proc_create+0xc3/0x8e0 [ 110.268309][ T6201] ? __proc_create+0x2ce/0x8e0 [ 110.268347][ T6201] __proc_create+0x2ce/0x8e0 [ 110.268384][ T6201] ? __pfx___proc_create+0x10/0x10 [ 110.268419][ T6201] ? pcpu_chunk_relocate+0x126/0x190 [ 110.268457][ T6201] proc_create_reg+0x7d/0x180 [ 110.268495][ T6201] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 110.268525][ T6201] proc_create_net_single+0x86/0x180 [ 110.268561][ T6201] ? __pfx_proc_create_net_single+0x10/0x10 [ 110.268606][ T6201] ? __pfx_xfrm_net_init+0x10/0x10 [ 110.268630][ T6201] xfrm_proc_init+0x4d/0x70 [ 110.268658][ T6201] xfrm_net_init+0x1f0/0xcc0 [ 110.268694][ T6201] ? __pfx_xfrm_net_init+0x10/0x10 [ 110.268717][ T6201] ops_init+0x1e2/0x5f0 [ 110.268744][ T6201] setup_net+0x10f/0x380 [ 110.268765][ T6201] ? lockdep_init_map_type+0x5c/0x280 [ 110.268803][ T6201] ? __pfx_setup_net+0x10/0x10 [ 110.268829][ T6201] ? debug_mutex_init+0x37/0x70 [ 110.268860][ T6201] copy_net_ns+0x2a6/0x5f0 [ 110.268891][ T6201] create_new_namespaces+0x3ea/0xa90 [ 110.268930][ T6201] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 110.268963][ T6201] ksys_unshare+0x45b/0xa40 [ 110.268999][ T6201] ? __pfx_ksys_unshare+0x10/0x10 [ 110.269034][ T6201] ? xfd_validate_state+0x61/0x180 [ 110.269081][ T6201] __x64_sys_unshare+0x31/0x40 [ 110.269115][ T6201] do_syscall_64+0xcd/0x4c0 [ 110.269155][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.269180][ T6201] RIP: 0033:0x7f3f5ff8eba9 [ 110.269201][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.269225][ T6201] RSP: 002b:00007f3f60ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.269249][ T6201] RAX: ffffffffffffffda RBX: 00007f3f601d5fa0 RCX: 00007f3f5ff8eba9 [ 110.269266][ T6201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 110.269282][ T6201] RBP: 00007f3f60011e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.269298][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.269313][ T6201] R13: 00007f3f601d6038 R14: 00007f3f601d5fa0 R15: 00007fffa03c1578 [ 110.269350][ T6201] [ 112.100698][ T6218] ima: policy update failed [ 112.124711][ T30] audit: type=1802 audit(1758085706.347:6): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.53" res=0 errno=0 [ 112.433506][ T6221] blktrace: Concurrent blktraces are not allowed on loop12 [ 112.444014][ T5878] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14 [ 114.930705][ T6246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.969781][ T6246] netlink: 93 bytes leftover after parsing attributes in process `syz.3.59'. [ 115.050182][ T6255] FAULT_INJECTION: forcing a failure. [ 115.050182][ T6255] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.075238][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 115.075268][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.075277][ T6255] Call Trace: [ 115.075282][ T6255] [ 115.075288][ T6255] dump_stack_lvl+0x16c/0x1f0 [ 115.075315][ T6255] should_fail_ex+0x512/0x640 [ 115.075340][ T6255] get_futex_key+0x1d0/0x1560 [ 115.075361][ T6255] ? __pfx_get_futex_key+0x10/0x10 [ 115.075384][ T6255] futex_wake+0xea/0x530 [ 115.075404][ T6255] ? rcu_is_watching+0x12/0xc0 [ 115.075419][ T6255] ? __pfx_futex_wake+0x10/0x10 [ 115.075442][ T6255] ? kmem_cache_free+0x2d1/0x4d0 [ 115.075458][ T6255] ? fd_install+0x225/0x750 [ 115.075472][ T6255] ? putname+0x154/0x1a0 [ 115.075493][ T6255] do_futex+0x1e3/0x350 [ 115.075511][ T6255] ? __pfx_do_futex+0x10/0x10 [ 115.075533][ T6255] __x64_sys_futex+0x1e0/0x4c0 [ 115.075552][ T6255] ? __x64_sys_openat+0x174/0x210 [ 115.075565][ T6255] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.075582][ T6255] ? xfd_validate_state+0x61/0x180 [ 115.075608][ T6255] do_syscall_64+0xcd/0x4c0 [ 115.075630][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.075645][ T6255] RIP: 0033:0x7fdb7af8eba9 [ 115.075657][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.075673][ T6255] RSP: 002b:00007fdb7bec10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.075688][ T6255] RAX: ffffffffffffffda RBX: 00007fdb7b1d6098 RCX: 00007fdb7af8eba9 [ 115.075697][ T6255] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdb7b1d609c [ 115.075706][ T6255] RBP: 00007fdb7b1d6090 R08: 00007fdb7bee3000 R09: 0000000000000000 [ 115.075714][ T6255] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 115.075723][ T6255] R13: 00007fdb7b1d6128 R14: 00007fff4dc197b0 R15: 00007fff4dc19898 [ 115.075741][ T6255] [ 115.669104][ T6260] random: crng reseeded on system resumption [ 115.787273][ T5878] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 115.787603][ T6260] blktrace: Concurrent blktraces are not allowed on loop12 [ 116.072494][ T6267] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.502639][ T6294] netlink: 'syz.2.74': attribute type 2 has an invalid length. [ 117.543134][ T6294] binder: 6292:6294 unknown command 4294967282 [ 117.553385][ T6296] FAULT_INJECTION: forcing a failure. [ 117.553385][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 117.580896][ T6294] binder: 6292:6294 ioctl c0306201 2000000000c0 returned -22 [ 117.642345][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 117.642374][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.642388][ T6296] Call Trace: [ 117.642394][ T6296] [ 117.642400][ T6296] dump_stack_lvl+0x16c/0x1f0 [ 117.642434][ T6296] should_fail_ex+0x512/0x640 [ 117.642456][ T6296] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 117.642478][ T6296] should_failslab+0xc2/0x120 [ 117.642498][ T6296] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 117.642517][ T6296] ? __kthread_create_on_node+0x186/0x3f0 [ 117.642539][ T6296] kvasprintf+0xbc/0x160 [ 117.642554][ T6296] ? __pfx_kvasprintf+0x10/0x10 [ 117.642576][ T6296] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 117.642600][ T6296] __kthread_create_on_node+0x186/0x3f0 [ 117.642620][ T6296] ? __pfx___kthread_create_on_node+0x10/0x10 [ 117.642644][ T6296] ? __lock_acquire+0xb97/0x1ce0 [ 117.642664][ T6296] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 117.642686][ T6296] kthread_create_on_node+0xc7/0x100 [ 117.642704][ T6296] ? __pfx_kthread_create_on_node+0x10/0x10 [ 117.642726][ T6296] ? mark_held_locks+0x49/0x80 [ 117.642743][ T6296] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 117.642762][ T6296] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.642785][ T6296] dvb_frontend_open+0xf47/0x1730 [ 117.642811][ T6296] ? __pfx_dvb_frontend_open+0x10/0x10 [ 117.642841][ T6296] dvb_device_open+0x26d/0x3b0 [ 117.642856][ T6296] ? __pfx_dvb_device_open+0x10/0x10 [ 117.642869][ T6296] chrdev_open+0x234/0x6a0 [ 117.642889][ T6296] ? __pfx_apparmor_file_open+0x10/0x10 [ 117.642906][ T6296] ? __pfx_chrdev_open+0x10/0x10 [ 117.642925][ T6296] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 117.642944][ T6296] do_dentry_open+0x982/0x1530 [ 117.642962][ T6296] ? __pfx_chrdev_open+0x10/0x10 [ 117.642983][ T6296] vfs_open+0x82/0x3f0 [ 117.643006][ T6296] path_openat+0x1de4/0x2cb0 [ 117.643029][ T6296] ? __pfx_path_openat+0x10/0x10 [ 117.643050][ T6296] do_filp_open+0x20b/0x470 [ 117.643067][ T6296] ? __pfx_do_filp_open+0x10/0x10 [ 117.643097][ T6296] ? alloc_fd+0x471/0x7d0 [ 117.643118][ T6296] do_sys_openat2+0x11b/0x1d0 [ 117.643138][ T6296] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.643166][ T6296] __x64_sys_openat+0x174/0x210 [ 117.643178][ T6296] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.643199][ T6296] do_syscall_64+0xcd/0x4c0 [ 117.643221][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.643235][ T6296] RIP: 0033:0x7ff5ab98eba9 [ 117.643253][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.643267][ T6296] RSP: 002b:00007ff5ac766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.643285][ T6296] RAX: ffffffffffffffda RBX: 00007ff5abbd6090 RCX: 00007ff5ab98eba9 [ 117.643295][ T6296] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 117.643304][ T6296] RBP: 00007ff5aba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 117.643312][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.643320][ T6296] R13: 00007ff5abbd6128 R14: 00007ff5abbd6090 R15: 00007fff78c6e898 [ 117.643340][ T6296] [ 117.643367][ T6296] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 118.007034][ T6300] netlink: 'syz.2.74': attribute type 2 has an invalid length. [ 118.777578][ T6311] random: crng reseeded on system resumption [ 118.915305][ T6311] blktrace: Concurrent blktraces are not allowed on loop12 [ 118.922988][ T5878] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 119.492840][ T6317] ima: policy update failed [ 119.530201][ T30] audit: type=1802 audit(1758085713.747:7): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.79" res=0 errno=0 [ 120.397077][ T6344] FAULT_INJECTION: forcing a failure. [ 120.397077][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 120.429785][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 120.429819][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.429835][ T6344] Call Trace: [ 120.429841][ T6344] [ 120.429847][ T6344] dump_stack_lvl+0x16c/0x1f0 [ 120.429875][ T6344] should_fail_ex+0x512/0x640 [ 120.429898][ T6344] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 120.429920][ T6344] should_failslab+0xc2/0x120 [ 120.429938][ T6344] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 120.429958][ T6344] ? __kthread_create_on_node+0x186/0x3f0 [ 120.429987][ T6344] kvasprintf+0xbc/0x160 [ 120.430004][ T6344] ? __pfx_kvasprintf+0x10/0x10 [ 120.430028][ T6344] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 120.430050][ T6344] __kthread_create_on_node+0x186/0x3f0 [ 120.430069][ T6344] ? __pfx___kthread_create_on_node+0x10/0x10 [ 120.430093][ T6344] ? __lock_acquire+0xb97/0x1ce0 [ 120.430113][ T6344] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 120.430135][ T6344] kthread_create_on_node+0xc7/0x100 [ 120.430153][ T6344] ? __pfx_kthread_create_on_node+0x10/0x10 [ 120.430174][ T6344] ? mark_held_locks+0x49/0x80 [ 120.430191][ T6344] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.430211][ T6344] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.430233][ T6344] dvb_frontend_open+0xf47/0x1730 [ 120.430264][ T6344] ? __pfx_dvb_frontend_open+0x10/0x10 [ 120.430286][ T6344] dvb_device_open+0x26d/0x3b0 [ 120.430300][ T6344] ? __pfx_dvb_device_open+0x10/0x10 [ 120.430312][ T6344] chrdev_open+0x234/0x6a0 [ 120.430331][ T6344] ? __pfx_apparmor_file_open+0x10/0x10 [ 120.430347][ T6344] ? __pfx_chrdev_open+0x10/0x10 [ 120.430365][ T6344] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 120.430385][ T6344] do_dentry_open+0x982/0x1530 [ 120.430402][ T6344] ? __pfx_chrdev_open+0x10/0x10 [ 120.430423][ T6344] vfs_open+0x82/0x3f0 [ 120.430449][ T6344] path_openat+0x1de4/0x2cb0 [ 120.430472][ T6344] ? __pfx_path_openat+0x10/0x10 [ 120.430494][ T6344] do_filp_open+0x20b/0x470 [ 120.430510][ T6344] ? __pfx_do_filp_open+0x10/0x10 [ 120.430541][ T6344] ? alloc_fd+0x471/0x7d0 [ 120.430563][ T6344] do_sys_openat2+0x11b/0x1d0 [ 120.430591][ T6344] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.430624][ T6344] __x64_sys_openat+0x174/0x210 [ 120.430636][ T6344] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.430660][ T6344] do_syscall_64+0xcd/0x4c0 [ 120.430684][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.430698][ T6344] RIP: 0033:0x7ff5ab98eba9 [ 120.430711][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.430725][ T6344] RSP: 002b:00007ff5ac766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.430739][ T6344] RAX: ffffffffffffffda RBX: 00007ff5abbd6090 RCX: 00007ff5ab98eba9 [ 120.430748][ T6344] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 120.430757][ T6344] RBP: 00007ff5aba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 120.430766][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.430774][ T6344] R13: 00007ff5abbd6128 R14: 00007ff5abbd6090 R15: 00007fff78c6e898 [ 120.430793][ T6344] [ 120.430839][ T6344] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 121.176384][ T6353] random: crng reseeded on system resumption [ 121.191302][ T6353] blktrace: Concurrent blktraces are not allowed on loop12 [ 121.201090][ T5878] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 121.526324][ T6346] netlink: 93 bytes leftover after parsing attributes in process `syz.3.87'. [ 122.228717][ T6370] FAULT_INJECTION: forcing a failure. [ 122.228717][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 122.241517][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 122.241553][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.241568][ T6370] Call Trace: [ 122.241577][ T6370] [ 122.241587][ T6370] dump_stack_lvl+0x16c/0x1f0 [ 122.241631][ T6370] should_fail_ex+0x512/0x640 [ 122.241668][ T6370] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 122.241705][ T6370] should_failslab+0xc2/0x120 [ 122.241739][ T6370] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 122.241768][ T6370] ? __proc_create+0xc3/0x8e0 [ 122.241803][ T6370] ? __proc_create+0x2ce/0x8e0 [ 122.241843][ T6370] __proc_create+0x2ce/0x8e0 [ 122.241880][ T6370] ? __pfx___proc_create+0x10/0x10 [ 122.241921][ T6370] ? _raw_write_unlock+0x28/0x50 [ 122.241955][ T6370] ? proc_register+0x559/0x8b0 [ 122.241996][ T6370] proc_create_reg+0x7d/0x180 [ 122.242036][ T6370] proc_create_data+0x86/0x110 [ 122.242074][ T6370] ? __pfx_proc_create_data+0x10/0x10 [ 122.242114][ T6370] ? cache_register_net+0x137/0x5e0 [ 122.242165][ T6370] cache_register_net+0x25a/0x5e0 [ 122.242207][ T6370] nfsd_idmap_init+0xb6/0x250 [ 122.242245][ T6370] ? __pfx_nfsd_net_init+0x10/0x10 [ 122.242274][ T6370] nfsd_net_init+0x69/0x3d0 [ 122.242304][ T6370] ? __pfx_nfsd_net_init+0x10/0x10 [ 122.242333][ T6370] ops_init+0x1e2/0x5f0 [ 122.242361][ T6370] setup_net+0x10f/0x380 [ 122.242382][ T6370] ? lockdep_init_map_type+0x5c/0x280 [ 122.242417][ T6370] ? __pfx_setup_net+0x10/0x10 [ 122.242443][ T6370] ? debug_mutex_init+0x37/0x70 [ 122.242473][ T6370] copy_net_ns+0x2a6/0x5f0 [ 122.242504][ T6370] create_new_namespaces+0x3ea/0xa90 [ 122.242542][ T6370] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 122.242575][ T6370] ksys_unshare+0x45b/0xa40 [ 122.242610][ T6370] ? __pfx_ksys_unshare+0x10/0x10 [ 122.242645][ T6370] ? xfd_validate_state+0x61/0x180 [ 122.242697][ T6370] __x64_sys_unshare+0x31/0x40 [ 122.242730][ T6370] do_syscall_64+0xcd/0x4c0 [ 122.242773][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.242799][ T6370] RIP: 0033:0x7f0f9c98eba9 [ 122.242821][ T6370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.242845][ T6370] RSP: 002b:00007f0f9d7e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.242869][ T6370] RAX: ffffffffffffffda RBX: 00007f0f9cbd6180 RCX: 00007f0f9c98eba9 [ 122.242887][ T6370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 122.242903][ T6370] RBP: 00007f0f9ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 122.242919][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.242935][ T6370] R13: 00007f0f9cbd6218 R14: 00007f0f9cbd6180 R15: 00007ffdc9468958 [ 122.242971][ T6370] [ 123.962512][ T6401] ================================================================== [ 123.970601][ T6401] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 123.978348][ T6401] Read of size 8 at addr ffff88802a6d4018 by task syz.0.98/6401 [ 123.986004][ T6401] [ 123.988351][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.98 Not tainted syzkaller #0 PREEMPT(full) [ 123.988385][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.988401][ T6401] Call Trace: [ 123.988410][ T6401] [ 123.988420][ T6401] dump_stack_lvl+0x116/0x1f0 [ 123.988463][ T6401] print_report+0xcd/0x630 [ 123.988495][ T6401] ? __virt_addr_valid+0x81/0x610 [ 123.988527][ T6401] ? __phys_addr+0xe8/0x180 [ 123.988560][ T6401] ? dvb_device_open+0x36a/0x3b0 [ 123.988582][ T6401] kasan_report+0xe0/0x110 [ 123.988614][ T6401] ? dvb_device_open+0x36a/0x3b0 [ 123.988640][ T6401] ? __pfx_dvb_device_open+0x10/0x10 [ 123.988664][ T6401] dvb_device_open+0x36a/0x3b0 [ 123.988687][ T6401] ? __pfx_dvb_device_open+0x10/0x10 [ 123.988710][ T6401] chrdev_open+0x234/0x6a0 [ 123.988742][ T6401] ? __pfx_apparmor_file_open+0x10/0x10 [ 123.988771][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 123.988803][ T6401] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 123.988836][ T6401] do_dentry_open+0x982/0x1530 [ 123.988867][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 123.988902][ T6401] vfs_open+0x82/0x3f0 [ 123.988940][ T6401] path_openat+0x1de4/0x2cb0 [ 123.988975][ T6401] ? __pfx_path_openat+0x10/0x10 [ 123.989017][ T6401] do_filp_open+0x20b/0x470 [ 123.989047][ T6401] ? __pfx_do_filp_open+0x10/0x10 [ 123.989091][ T6401] ? alloc_fd+0x471/0x7d0 [ 123.989123][ T6401] do_sys_openat2+0x11b/0x1d0 [ 123.989160][ T6401] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.989203][ T6401] __x64_sys_openat+0x174/0x210 [ 123.989227][ T6401] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.989255][ T6401] do_syscall_64+0xcd/0x4c0 [ 123.989294][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.989321][ T6401] RIP: 0033:0x7ff5ab98eba9 [ 123.989341][ T6401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.989365][ T6401] RSP: 002b:00007ff5ac766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.989389][ T6401] RAX: ffffffffffffffda RBX: 00007ff5abbd6090 RCX: 00007ff5ab98eba9 [ 123.989407][ T6401] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 123.989423][ T6401] RBP: 00007ff5aba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 123.989440][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.989456][ T6401] R13: 00007ff5abbd6128 R14: 00007ff5abbd6090 R15: 00007fff78c6e898 [ 123.989482][ T6401] [ 123.989490][ T6401] [ 124.229718][ T6401] Allocated by task 1: [ 124.233790][ T6401] kasan_save_stack+0x33/0x60 [ 124.238486][ T6401] kasan_save_track+0x14/0x30 [ 124.243183][ T6401] __kasan_kmalloc+0xaa/0xb0 [ 124.247807][ T6401] dvb_register_device+0x1e4/0x2370 [ 124.253027][ T6401] dvb_register_frontend+0x5a6/0x880 [ 124.258345][ T6401] vidtv_bridge_probe+0x459/0xa90 [ 124.263404][ T6401] platform_probe+0x103/0x1d0 [ 124.268144][ T6401] really_probe+0x241/0xa90 [ 124.272684][ T6401] __driver_probe_device+0x1de/0x440 [ 124.278065][ T6401] driver_probe_device+0x4c/0x1b0 [ 124.283127][ T6401] __driver_attach+0x283/0x580 [ 124.287938][ T6401] bus_for_each_dev+0x13e/0x1d0 [ 124.292819][ T6401] bus_add_driver+0x2e9/0x690 [ 124.297609][ T6401] driver_register+0x15c/0x4b0 [ 124.302477][ T6401] vidtv_bridge_init+0x45/0x80 [ 124.307347][ T6401] do_one_initcall+0x120/0x6e0 [ 124.312133][ T6401] kernel_init_freeable+0x5c2/0x910 [ 124.317362][ T6401] kernel_init+0x1c/0x2b0 [ 124.321722][ T6401] ret_from_fork+0x56d/0x730 [ 124.326314][ T6401] ret_from_fork_asm+0x1a/0x30 [ 124.331184][ T6401] [ 124.333671][ T6401] Freed by task 6344: [ 124.337641][ T6401] kasan_save_stack+0x33/0x60 [ 124.342343][ T6401] kasan_save_track+0x14/0x30 [ 124.347033][ T6401] kasan_save_free_info+0x3b/0x60 [ 124.352089][ T6401] __kasan_slab_free+0x60/0x70 [ 124.356940][ T6401] kfree+0x2b4/0x4d0 [ 124.360830][ T6401] dvb_device_put.part.0+0x60/0x90 [ 124.365950][ T6401] dvb_device_open+0x2a4/0x3b0 [ 124.370704][ T6401] chrdev_open+0x234/0x6a0 [ 124.375119][ T6401] do_dentry_open+0x982/0x1530 [ 124.379882][ T6401] vfs_open+0x82/0x3f0 [ 124.383959][ T6401] path_openat+0x1de4/0x2cb0 [ 124.388551][ T6401] do_filp_open+0x20b/0x470 [ 124.393055][ T6401] do_sys_openat2+0x11b/0x1d0 [ 124.397746][ T6401] __x64_sys_openat+0x174/0x210 [ 124.402619][ T6401] do_syscall_64+0xcd/0x4c0 [ 124.407126][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.413016][ T6401] [ 124.415328][ T6401] The buggy address belongs to the object at ffff88802a6d4000 [ 124.415328][ T6401] which belongs to the cache kmalloc-256 of size 256 [ 124.429374][ T6401] The buggy address is located 24 bytes inside of [ 124.429374][ T6401] freed 256-byte region [ffff88802a6d4000, ffff88802a6d4100) [ 124.443087][ T6401] [ 124.445404][ T6401] The buggy address belongs to the physical page: [ 124.451813][ T6401] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a6d4 [ 124.460679][ T6401] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 124.469172][ T6401] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.476714][ T6401] page_type: f5(slab) [ 124.480717][ T6401] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 124.489306][ T6401] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 124.497904][ T6401] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 124.506660][ T6401] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 124.515514][ T6401] head: 00fff00000000001 ffffea0000a9b501 00000000ffffffff 00000000ffffffff [ 124.524285][ T6401] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 124.533094][ T6401] page dumped because: kasan: bad access detected [ 124.539514][ T6401] page_owner tracks the page as allocated [ 124.545224][ T6401] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19476792973, free_ts 0 [ 124.565110][ T6401] post_alloc_hook+0x1c0/0x230 [ 124.569884][ T6401] get_page_from_freelist+0x132b/0x38e0 [ 124.575429][ T6401] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 124.581327][ T6401] alloc_pages_mpol+0x1fb/0x550 [ 124.586180][ T6401] new_slab+0x247/0x330 [ 124.590333][ T6401] ___slab_alloc+0xcf2/0x1750 [ 124.595003][ T6401] __slab_alloc.constprop.0+0x56/0xb0 [ 124.600374][ T6401] __kmalloc_cache_noprof+0xfb/0x3e0 [ 124.605655][ T6401] dvb_register_device+0x1e4/0x2370 [ 124.610855][ T6401] dvb_register_frontend+0x5a6/0x880 [ 124.616158][ T6401] vidtv_bridge_probe+0x459/0xa90 [ 124.621363][ T6401] platform_probe+0x103/0x1d0 [ 124.626039][ T6401] really_probe+0x241/0xa90 [ 124.630551][ T6401] __driver_probe_device+0x1de/0x440 [ 124.635841][ T6401] driver_probe_device+0x4c/0x1b0 [ 124.640869][ T6401] __driver_attach+0x283/0x580 [ 124.645641][ T6401] page_owner free stack trace missing [ 124.651026][ T6401] [ 124.653345][ T6401] Memory state around the buggy address: [ 124.658966][ T6401] ffff88802a6d3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.667061][ T6401] ffff88802a6d3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.675118][ T6401] >ffff88802a6d4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.683170][ T6401] ^ [ 124.688007][ T6401] ffff88802a6d4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.696059][ T6401] ffff88802a6d4100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.704115][ T6401] ================================================================== [ 124.712315][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.764101][ T6401] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 124.771342][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.98 Not tainted syzkaller #0 PREEMPT(full) [ 124.780552][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.790622][ T6401] Call Trace: [ 124.793915][ T6401] [ 124.796853][ T6401] dump_stack_lvl+0x3d/0x1f0 [ 124.801485][ T6401] vpanic+0x6e8/0x7a0 [ 124.805490][ T6401] ? __pfx_vpanic+0x10/0x10 [ 124.810047][ T6401] ? __pfx_vprintk_emit+0x10/0x10 [ 124.815092][ T6401] ? dvb_device_open+0x36a/0x3b0 [ 124.820125][ T6401] panic+0xca/0xd0 [ 124.823881][ T6401] ? __pfx_panic+0x10/0x10 [ 124.828326][ T6401] ? dvb_device_open+0x36a/0x3b0 [ 124.833281][ T6401] ? preempt_schedule_common+0x44/0xc0 [ 124.838777][ T6401] ? preempt_schedule_thunk+0x16/0x30 [ 124.844323][ T6401] check_panic_on_warn+0xab/0xb0 [ 124.849298][ T6401] end_report+0x107/0x170 [ 124.853661][ T6401] kasan_report+0xee/0x110 [ 124.858110][ T6401] ? dvb_device_open+0x36a/0x3b0 [ 124.863163][ T6401] ? __pfx_dvb_device_open+0x10/0x10 [ 124.868560][ T6401] dvb_device_open+0x36a/0x3b0 [ 124.873353][ T6401] ? __pfx_dvb_device_open+0x10/0x10 [ 124.878664][ T6401] chrdev_open+0x234/0x6a0 [ 124.883120][ T6401] ? __pfx_apparmor_file_open+0x10/0x10 [ 124.888781][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 124.893759][ T6401] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 124.900133][ T6401] do_dentry_open+0x982/0x1530 [ 124.904933][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 124.909905][ T6401] vfs_open+0x82/0x3f0 [ 124.914046][ T6401] path_openat+0x1de4/0x2cb0 [ 124.918681][ T6401] ? __pfx_path_openat+0x10/0x10 [ 124.923645][ T6401] do_filp_open+0x20b/0x470 [ 124.928163][ T6401] ? __pfx_do_filp_open+0x10/0x10 [ 124.933192][ T6401] ? alloc_fd+0x471/0x7d0 [ 124.937535][ T6401] do_sys_openat2+0x11b/0x1d0 [ 124.942352][ T6401] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.947567][ T6401] __x64_sys_openat+0x174/0x210 [ 124.952432][ T6401] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.957833][ T6401] do_syscall_64+0xcd/0x4c0 [ 124.962371][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.968268][ T6401] RIP: 0033:0x7ff5ab98eba9 [ 124.972702][ T6401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.992303][ T6401] RSP: 002b:00007ff5ac766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.000711][ T6401] RAX: ffffffffffffffda RBX: 00007ff5abbd6090 RCX: 00007ff5ab98eba9 [ 125.008681][ T6401] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 125.016737][ T6401] RBP: 00007ff5aba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 125.024799][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.032770][ T6401] R13: 00007ff5abbd6128 R14: 00007ff5abbd6090 R15: 00007fff78c6e898 [ 125.040768][ T6401] [ 125.044121][ T6401] Kernel Offset: disabled [ 125.048458][ T6401] Rebooting in 86400 seconds..