last executing test programs: 8m10.025723728s ago: executing program 2 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), r0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x230, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x219, 0x9, 0x0, 0x1, [@generic="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", @generic="bdc35aa38ec245157be3e1a3641ec190d471055bb3351e0499b554b9fdfc070d86c1114a66703c39f70a6d131f2aacbebca8e0a5fdb78a40752d7cbd59b2692e1ee068733de9ac55c10858f9a967c8136aa4a1bb1c85ff29e60f50f59a7b6d3aeb5b186d207cb7f3ab1cafd4a0b0eec1571cd1213aeed9f4cb09baff9692b6b151e955da145a63b2226a3606ed5b", @generic="fc3a373ed08c08f2231dc3d0037e118433e5ed569eec4eec29d9c26722619714", @typed={0x14, 0x142, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x9, 0xaf, 0x0, 0x0, @str='\x13*-$\x00'}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0xe}, @typed={0x43, 0x11a, 0x0, 0x0, @binary="d2ba52ca072686808b1d381d8b8ae6daae69c7a78405ae57ab0b0d8cbeb0467a9b0f88e7eab93e6f82cbc6947b8792f479284ff42f27c72fe731e5a871c228"}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x8c4}, 0x800) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250300000008000400000000000800050000000000080002000d000000080001000300000008000700", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 8m9.839420413s ago: executing program 2 (id=1359): timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x11) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) 8m8.007089526s ago: executing program 2 (id=1362): timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8", 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) 8m5.843683111s ago: executing program 2 (id=1369): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x18, 0xa, 0x1) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x3, 0x3, 0x15, 0xfffffffffffffffa, 0x8) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) unshare$auto(0x8000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000000, 0x400008, 0xdf, 0x11, 0x2, 0x8004) eventfd$auto(0x6) io_uring_setup$auto(0xc, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/trace/end_lba\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/008/001\x00', 0x204080, 0x0) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fsconfig$auto_FSCONFIG_CMD_CREATE(r0, 0x6, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f0000000080)="88dc5801e5811b34d22e043d086175a82caef0f52e", 0x6) unshare$auto(0x40000080) mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 8m4.994805078s ago: executing program 2 (id=1374): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb/drivers/peak_usb/new_id\x00', 0x101000, 0x0) statmount$auto(0x0, &(0x7f00000013c0)={0x7, 0x2, 0x6, 0x7, 0x84, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xfffffffeffffffff, 0xffff, 0x2008000001, 0x10000, 0x80, 0x8, 0x6d7d01bf, 0x7, 0x0, 0x9, 0x4, 0x3, 0x3, 0xff, 0x0, 0x4, 0xffffffe0, [0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0xffffffffffffffff, 0x0, 0x80000001, 0x0, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x5, 0x7, 0x0, 0x4, 0x8000000000, 0x400000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200a) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100000000000038, 0x0) r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r4, 0x0, 0x20) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000003580)={0x9d8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_PACKAGE_LIST={0x118, 0x2, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @u32=0x7}, @nested={0x100, 0x141, 0x0, 0x1, [@generic="b4333336ded4a4fb3b62ecb45041d780a1a17e08e11eff93cd8e0a63b6c153d79c9bca6abf28dcaf920d5a1ab5f9422c5983fba45430fef970f7f8e36994f0a7cb79864af8ce52dbc62acda0b89e5b32f06b057477121cd0738286c8c59a915d5f03773e33c1909343e1b3f7823425d243fe00ccc9f5d0c4", @generic="fb7a23eb4efff9c976fab007c32c77f8e0089187f11a49dee8623cb070ce73829a544c8edb9d69e391de69892e3d31e1120e373e36095f1f1e200bfaee933b1594f11912e93c6585f2dd1d6a491053280c9c61073ae9b9d6106f031fa17808d67bab54c37f62221b4558ede61fbf290f9ef7fc99c0c6cc7e", @typed={0x8, 0x5, 0x0, 0x0, @pid}, @typed={0x4, 0x4d}]}, @nested={0x4, 0x6c}, @typed={0x8, 0x5f, 0x0, 0x0, @pid}]}, @NCSI_ATTR_DATA={0x6db, 0x5, "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"}, @NCSI_ATTR_PACKAGE_LIST={0x1c5, 0x2, 0x0, 0x1, [@generic="56dfaf45f85d6b16fb4f0a8f9e1bff0d81c51bc134edc346a72b87dd80576e50e548c5744424c0cbe5b9555fd9fece113d36619fb3dce1f31ae6d81b2d15590530ce66b1c283a32b8cb45c0f144436d6fdc9e12dc7df0b08f094cf16b81c9d6780ac38f1e875d44d7997e516ecaaa83f67b5f7087e1c77752c60dcfdf8ebf907f15c4461ae9aea0978029868b92c88309344977475622b42b4c073daf3967b0bd34154c8b3230149fc62b7322ccc1d33c61e6d18b40b081427a99254ed7e3b04cc896b67e2faf29a990da866192c61cb5049", @generic="4e559fce883f786f15d8cb52bf4ac75fb955bd3759c9edc2d3639fc562d87d370b226fefdcf648b600e4bf4b74bdf226dd1f2e9dfecc72a8460286d7cfa87633bc7ef149c26f53a8adb6ad38b8507edd62609de69a2852ccf7ad6827ff273117fc6ff2a794d3244a1b07e294b91665b138c9414b", @generic="e66bdce2e04d4b8347e187e41b43a5e201bf482fb403ca62002955cb495d557171735b6add25d3afd0eedac25437c4510ff399439f49427d300b129618d4131b7058ea2563d29f065ae628fa79c44b6589bd3e0f36621839b0db1c681d19ce6e1435944be88cebe9562038a1b656ec9a605d9812976f8093809450"]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x4}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) bind$auto(0x3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) 8m4.244256819s ago: executing program 2 (id=1378): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x7fffffff, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r2, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) 7m48.895065567s ago: executing program 32 (id=1378): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x7fffffff, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r2, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) 1m25.695340061s ago: executing program 3 (id=2634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0d0) mmap$auto(0x6, 0xe983, 0xdf, 0xeb1, r0, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) madvise$auto(0x80000008, 0x9, 0x1c) madvise$auto(0x1, 0x4, 0x1) 1m25.151540819s ago: executing program 3 (id=2637): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyeb\x00', 0xa0102, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/xps_cpus\x00', 0x8382, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mouse0\x00', 0x42000, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0xe4, 0x2}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xfcfe, 0x7) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x40482, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r0, 0x0, 0x0, 0x9) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) 1m21.195928937s ago: executing program 3 (id=2649): mmap$auto(0x9, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m20.433445835s ago: executing program 3 (id=2652): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) sendmsg$auto_TIPC_NL_MON_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x3710}, 0x1, 0x0, 0x0, 0x4010}, 0x4840) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xd) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xaf) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0xff, 0x30, &(0x7f0000000000)='\\\x00', &(0x7f0000000040)=0x4) setresuid$auto(0x8, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x1e) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/input/event0\x00', 0x200, 0x0) ioctl$auto_EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000002f40)=0x7e) 1m20.039751605s ago: executing program 3 (id=2653): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000040)="0b00000055137c0800000800000000090262a3506388ef17d603c4900000000000000000fb6a1abe36ba95d203a6e8f06514cd67225d1bac855b5576e61fbcf2ae560d9265c16fe00f74b760544348cf06bfe0910b02a82b59971a75fd9f5cb2c2cbfdc6e3cb281b4e", 0x69) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r1) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), r1) r4 = getpgrp(0x0) statmount$auto(&(0x7f0000000040)={0x18, @raw=0x4, 0x40000008000002b, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0x0) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f0000004dc0)={0x18b8, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x1110, 0x3, 0x0, 0x1, [@typed={0xc, 0x85, 0x0, 0x0, @u64=0x308}, @nested={0x1100, 0xc3, 0x0, 0x1, [@generic="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", @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@local}, @generic="b5d97fdb4a2628a92d272a79750cc0648c65e6d373f9d1566bbec954bdb94a6330e4d1b787bc994d06c95b319a9c4069c8d452f0296ab1c98a7d5104b932daf9260b4e7ff2fb79072641fb689a7b6d4cfd36f51e1c883c4196ae2fdb3678442a05ebce1e9ae79eb55ee1b396de753ad5cea4c58c8ff15cedde20a3143a4455b7ecfe0dd8b74971631861b721968a0629058333fe03b9be4a3ae0eb8834e727172e2db12908659fb251609c83ccf82a8bc1f1e05daa9dab2b3a1c5eed5df587a0b7e21f9f48940ab6460f927613feeb58a4f41d8297ec9a6692162703a5c9f10e11ffdd50d6168c5f"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x1c2, 0x2, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @generic="890bd0f8b95aff603aef810cce6396fb674b8705d4f4cb143dcf9b0afa3b8a", @generic="efe43051c4f9228a2788ec1dcde5fa4b1d1bb8922e905e53d1dbf764bd90b28b14f6e002e2dcaeb73599c289bf8488ff9a233c", @typed={0x8, 0x94, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0x144, 0x0, 0x0, @u64=0x569a}, @nested={0x145, 0xd2, 0x0, 0x1, [@generic="db0e34b32092e283116c1e0130d1edb4b9686c236ae06fc1c0111616aa62c809607d62b5f5407a65591a8a0a4a93efa8b75bf3b4a30ff7ca02ce2b72b9d1528a4b8d4fdeec4262ce2194ea63337240417294cb06a7bc5afd4e674d9807d38d517a8b223671d09ba393941ba79e00b5f639ec7935b09362bdb5701f0b3da14a84f4a4f8fc39e0517a3f40f15719f62157dfd794354c3b3a97d56992b1265ddab350f7a318ff178123c105a84be99b26e41d18dfd8a95b106a35cbff64216bb2545a8f006d9b949a51fdd02cab45aeb5dfe146723b9d144e737a4dc6ca20d00fdd09d3fdf29caffe3e4737202497094be58401", @generic="0c2daf0616d7e9e0417ae80f4678aaf362e04c43b28dc1616f32f38988672927d19797a7d7b43d9849ed7574978e7ae7f04e427d53055a4b8375b941482427fe9c2a5cdf88f43b8ca31503", @nested={0x4, 0x1c}]}]}, @MACSEC_ATTR_SA_CONFIG={0x1aa, 0x3, 0x0, 0x1, [@nested={0xac, 0x140, 0x0, 0x1, [@typed={0xa6, 0x11a, 0x0, 0x0, @binary="3c81d86a68cc240dc6c028394735604d563d9ea42f4f251626dc138f3c3df75799c150359d3232c3f4a1010a8b76e957f745101c07c3e52385c0cb9c18add5546b65ad21d18b2ef268be10f0d5ca1eb93060e5ef4e759e0375aaf01a365f9879500e9648839e9365f6901fa56fccdcf0a3d1ec19521d5a387b3d680fdf428062bcaae3b20a75b5125226a404a81d10cd8da6a939c8d0ef53137c3a9da97d2412dad4"}]}, @generic="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"]}, @MACSEC_ATTR_OFFLOAD={0x19e, 0x9, 0x0, 0x1, [@generic="8955cd6deb3e2d167c50328eb950549c170d406016215715367faac78b36317a47a1d433ad350d6f1df68184e798908af45d692ce8848d6a189a58c28b4ba6c145eafc1a00608da7911d7a6dbc221b7e2c973c83c418a59d84668c36d6e4a760da445ae3c06506833c29d039581faeb3387aed7ed1eec0ed80d82d52e5480bd1dcd0e9f2b82d8281b2f4e613bf191bcd1477303dfee51bdc6248af1891ab13cb89713fb03474df69708ae39ff70695205486f0ffe930", @nested={0xe4, 0xe7, 0x0, 0x1, [@generic="4456cd287033c8a981431917bade67fe062e0a5de8697eeb669e72084ba08a33bfbf5be11152ef3f67fa34fb3aadf5bdc7e3324b1913444a8f8f99801cafbf1a056770cafe18e0dd749284df5496b64f02a5dc0433c2ccaae146c2ae5fbf217807b1114c2f73756f6ffbe8309b1573faaa5e7e165f3f83243048a829ec41ad9bc1eb0fd6224d5d596caed4fc29f423e658c4d0134cdd79b8b5237668c938bb23f9130cdd092279029e3ce3860bba0d97f9a31b77e2bc32e4f0018bbf0f161980b56534c304e637ae39189375a6064281eaa39a7949e7b61bdf37201f", @nested={0x4, 0x11}]}]}, @MACSEC_ATTR_SA_CONFIG={0x73, 0x3, 0x0, 0x1, [@generic="de9da6f747e1a33574c6bfcffa119514bdb6c9ae01b27daa26eb13da316f5a3c4d77a5a0e1a70ca382758bbaceaded65fafe1d38761c16f4e7a0f7ed1389010a030c6cc8baaa170e807fad9915a0db31a1c10945d2c7a9a7cbc61109a84b2fcad94cd465bd258f06237981153cbf75"]}, @MACSEC_ATTR_OFFLOAD={0xa8, 0x9, 0x0, 0x1, [@generic="78c076e600ac32d22770202fed22192b599ee2a50d58986dc096afec3124d7fbe59f55e27bdf09591a6e14c3441659fdbf35396b91a83ad8a99447a232697f5584a90c98a6c0aa8f3374438283fd1a77bd25095c464b990f57a850ec64767be987d7c2a927e98fd8a65c7889b7e9e49e997d788288ebc74855c0cf7bdcab00a075821ee78de4aba6fad94161be7a335be93554e07e79b3c5b00f4062", @nested={0x8, 0x13, 0x0, 0x1, [@nested={0x4, 0xb5}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x15d, 0x2, 0x0, 0x1, [@typed={0x4f, 0xb7, 0x0, 0x0, @str='\x004C\xeb\xb5\xe4\xb0Y\x1a\xe0+t\xcc\x88\xa0\xca@\xda6\xc5\x93/\xfd\x8f\xa6 \x91\xf3H\xdf5Qfp\x9e\x87;\xc7z\x02\xe2\xd5\xed\xda\b\xa3~\x9c/\xaf\x03\b\xa3r\x83M\xda\x8a\xd7\x83;\xe7\xf8\xf0\x8fn\x81\x8f\xbc\x87\x97-\xb13\xee'}, @generic="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", @generic="710e9dd465fe36cd63f8b8"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}]}, 0x18b8}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) statmount$auto(0x0, &(0x7f0000000300)={0x7, 0x6, 0x1, 0xf0dd, 0x2, 0x1, 0xff, 0xbab, 0xd0, 0xae0000000000, 0x8001, 0x1e2b, 0x8, 0x46fa, 0x9, 0x46c8ace, 0x80000001, 0x400000, 0x3ff, 0x69, 0xc2a, 0x2, 0xbf64, 0x4, 0x8, 0x4, 0x9, 0x8, 0x8001, 0xa, 0x9, [0x101, 0xe3, 0x5, 0x1, 0x7, 0x40000000000000e, 0x2000000000003, 0x8, 0xe, 0xffffffffffffa7e2, 0x2000000000000000, 0x3ff, 0x4b, 0x5, 0x9, 0x8, 0x1040, 0x7fffffff, 0xa1a4, 0xcf, 0x7fffffffffffffff, 0xffffffffffffff40, 0x8, 0x1a, 0x800, 0x2c4, 0x9, 0xe, 0x3c, 0x9, 0x4, 0xfffffffffffffff8, 0x6, 0x1, 0x9, 0x3, 0x7fffffff, 0xc, 0x142, 0xe29, 0x2, 0x7, 0x7]}, 0x2, 0xef) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r8, 0x4400ae8f, &(0x7f0000000100)={0xdd}) r10 = wait4$auto(r4, &(0x7f0000001b80)=0x5, 0x8, &(0x7f0000001bc0)={{0x3, 0x9}, {0x8, 0x3}, 0x3, 0x401, 0x58a, 0x9, 0x68000000, 0x2, 0x401, 0x7, 0xcd72, 0x1, 0x70a, 0x7, 0x8, 0xc1}) r11 = socket(0x11, 0x2, 0xe) sendmmsg$auto(r11, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) kcmp$auto_KCMP_EPOLL_TFD(r4, r10, 0x7, r11, 0x40) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200025bd7000fcdbdf25030000000c000b00090000000000d71200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x498c5) 1m19.614188887s ago: executing program 3 (id=2657): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socket(0xa, 0x2, 0x0) cachestat$auto(r1, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x2, 0x4, 0xd6, 0x1, 0x3}, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0xee, 0x6, 0x3}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x1440039) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) capset$auto(&(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x2c, 0x7, 0x1}) r3 = getpid() prctl$auto(0x69b, 0x5, r3, 0x722, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/numa/demotion_enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000020c0)=""/4123, 0x8f8) r5 = open(0x0, 0x0, 0x408) r6 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, r6, 0x1ff) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) getdents$auto(r5, 0x0, 0x400018) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x401, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400000000000005, 0xfff, 0x44eb2, 0x10006, 0x300000000000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x400) readv$auto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x8}, 0x8) 1m4.432096301s ago: executing program 33 (id=2657): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socket(0xa, 0x2, 0x0) cachestat$auto(r1, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x2, 0x4, 0xd6, 0x1, 0x3}, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0xee, 0x6, 0x3}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x1440039) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) capset$auto(&(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x2c, 0x7, 0x1}) r3 = getpid() prctl$auto(0x69b, 0x5, r3, 0x722, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/numa/demotion_enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000020c0)=""/4123, 0x8f8) r5 = open(0x0, 0x0, 0x408) r6 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, r6, 0x1ff) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) getdents$auto(r5, 0x0, 0x400018) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x401, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x400000000000005, 0xfff, 0x44eb2, 0x10006, 0x300000000000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x400) readv$auto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x8}, 0x8) 12.194979941s ago: executing program 1 (id=2834): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0x3, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 10.081416806s ago: executing program 1 (id=2837): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd14\x00', 0x18fa82, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/004/001\x00', 0x80142, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)=0x81) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cb5b28bd7000ffdb9f251f00000005000600090000000c00018008000100", @ANYRES32=r5, @ANYBLOB="08000300070000000500040080486c96"], 0x38}}, 0x8082) close$auto(r2) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000fddbdfa3ce0ae1bef354dcf9eb659c3c7208acedde6cd320446dcf458b84250200010008a45d5854605960305c8200010002000000146929fed2bd56c1ca914752b8100c5792b63bb9"], 0x1c}}, 0x4000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r8, 0x8) r9 = open(0x0, 0x0, 0x408) getdents$auto(r9, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 9.63832903s ago: executing program 1 (id=2840): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) poll$auto(&(0x7f0000000000)={r0, 0xffff, 0x4}, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getuid() sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x288, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_KEY={0x269, 0x1, 0x0, 0x1, [@nested={0x27, 0x17, 0x0, 0x1, [@generic="1a4b099fa38051ce775ed405a48cb773cb2ead47c9fa34ccbb93c8a70a734b037a1ea9"]}, @generic="da9b8c888266e423498b2a534deffe0b06efdd237927bc52ed2b274e454542087570b8daac6f98286f55e006d09ef9b0879dbf4d8376bf4fc64bfc2da8dba627d0fb1ac912aabd763767637ab784a174addd2289079537b015c1382b4cb19b7df3582b7963dfb7082dba3041a8467f0f7e85b7a1c9a217a1c63f5f26f3df0ae539cb92debe89a9e9ec01832811d94b2a719e2515b13c1b9264c3103a13086a757fe3943cf46fa1d5d3f625cd", @typed={0xc, 0x99, 0x0, 0x0, @u64=0x8}, @typed={0x29, 0xbe, 0x0, 0x0, @binary="c473c49a733bf900b38125e8d4f61bf8c9e17ffe4c425cb005dcce07d3006e6db6228c098d"}, @generic="c2fa4b15641f60f56f03cfc41c136bd05e387648da604104a0a9607590a9b13311b38587e35690fb2396b23845ffcaf3d14147fe660c522b5ff065", @generic="192c2c1cbededfeb0bd630ddf003545de5607d91c2b0b0aba6bfd5e42f977704884f1875a637aba575fd957a4ec14a58095b271ef52925fc5601", @typed={0xd, 0x92, 0x0, 0x0, @str='\\%@@:&H@\x00'}, @nested={0xb5, 0x4c, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @ipv4=@local}, @generic="c062d049ad5b4f3edec750fd332c5379050e639d07c1a90f66c9491e7e57625674d41bb13e8a2452bd1b777df9909643b029242d06edbde2574ce21d6e8e707ddaf87e4d5955e000ac687a67ca8ec191cef0c9dfd2a45fbf4a2b35b6413df46b18b116f2cfe042334cdb0f1ed0b8d431a90e9852a02b12bdbfe8268c6bf0ddc62ace54db88bce3ac43519f15d89bdb8b5af430a050e3694dcd5147e77fa146b27c13277d4f5a4d1524"]}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@mcast1}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r4, 0x0, 0x0, 0x2000000000040007) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800300b0800c000200657468746f6f6c001800018014000200776c616e30"], 0x44}}, 0x24048084) 8.421352618s ago: executing program 1 (id=2842): mmap$auto(0x9, 0x202000a, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) r0 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000080)=@query={@target_ifindex, 0x1ff, 0x1, 0x4, 0x9, @count=0x1, 0x0, 0x0, 0x3ff, 0x4, 0x8}, 0x1c00000) fsconfig$auto_HIDEPID_NO_ACCESS(r0, 0x5, &(0x7f0000000000)='\x00', &(0x7f0000000140)="b6e057ad278990cc9ae362cb3ba3444be663b54d52172dd2dab46a9bd5e5df4a204f3aceae980de4d1b57dbc7197c18722e090d796f36840d3f9f84fbfeef3b90a4e1a17a14d061175ee812af8b3124f76a275ba8a47eb50f8a71a79cb12d1180e3b35ab99d95eeccf9aec022bb8ba687ab6cc4a48e431e11313", 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004054}, 0x80b4) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x10000, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) unshare$auto(0x40000080) stat$auto(0x0, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x40001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r2, 0x40084146, 0x0) mmap$auto(0x10000, 0x5, 0xc, 0x14, r1, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r3, 0x0, 0x10000, 0x7) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 6.77959861s ago: executing program 4 (id=2845): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0xa, 0x3, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "1a10f1ffffffffffffff00"}, 0x58) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) ioctl$auto(0x3, 0x40106f52, 0xffffffffffffffff) semop$auto(0x100, 0x0, 0x7) 5.799791009s ago: executing program 0 (id=2848): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x40482, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r0, 0x0, 0x0, 0x9) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 5.539307943s ago: executing program 5 (id=2849): mmap$auto(0x0, 0x2a, 0xd8, 0x18, 0xffffffffffffffff, 0x27ffd) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = socket(0x11, 0x80003, 0x4) sendfile$auto(0x1, r1, 0x0, 0x3) mmap$auto(0x0, 0x4005, 0x7, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x2, 0x0) r2 = socket(0x1e, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7f}, 0x8000000000000001, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) connect$auto(r2, &(0x7f0000000100)=@can, 0xa) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x0, 0x0) 5.399865997s ago: executing program 4 (id=2850): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop2/integrity/write_generate\x00', 0x2b02, 0x0) sendfile$auto(r0, r0, 0x0, 0xb2d) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x12b742, 0x0) r2 = gettid() mmap$auto(0x0, 0x400, 0x200df, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) kill$auto(r2, 0x11) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r7, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x5c8) pwrite64$auto(r1, 0x0, 0x9, 0x8) 5.219013896s ago: executing program 1 (id=2851): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x7) r0 = socket(0x23, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x9, 0x2, 0x5) ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000240)=',-\t', 0x2000008008) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) getsockopt$auto(0xffffffffffffffff, 0x84, 0x42, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) sendfile$auto(0x3, r1, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) 3.804508369s ago: executing program 0 (id=2852): madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x73) socket(0x2, 0x1, 0x84) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8915, 0x24) socket(0x1, 0x5, 0x2) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40102, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x2, 0x2, 0x5, 0x14, 0x401, 0xf96) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-touch3\x00', 0x18a041, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc018aa3f, 0xc) mmap$auto(0x0, 0x20009, 0x20000000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) 3.323016266s ago: executing program 5 (id=2853): mmap$auto(0x0, 0x5, 0xf633, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sysfs$auto(0x102, 0x9, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) socket(0xa, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, 0x0, 0x0, 0x7, 0x0) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\xbc\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x5231) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mprotect$auto(0x110c230000, 0x1, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/mode\x00', 0x181002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) 2.894092623s ago: executing program 4 (id=2854): pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/223, 0xfffffffffffffffd, 0x82) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) write$auto(r2, 0x0, 0xa50f) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rr_timeslice_ms\x00', 0x2, 0x0) pwrite64$auto(r3, &(0x7f0000000080)='+\\#', 0x3747, 0x100) mprotect$auto(0x200000000000, 0x806121, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) close_range$auto(0x2, 0x8000, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) ioctl$auto_FS_IOC_GETFSUUID(r4, 0x80111500, 0x7) sendfile$auto(r0, r0, &(0x7f0000000000)=0x6400, 0x9e) 2.682940779s ago: executing program 1 (id=2855): openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyeb\x00', 0xa0102, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mouse0\x00', 0x42000, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0xe4, 0x2}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x3, 0x7, 0x400b, r0, [], {0x6, 0x3, 0x8c48, 0x29a, 0x9, 0x81, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x8}}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xfcfe, 0x7) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x40482, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r1, 0x0, 0x0, 0x9) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) 2.328083823s ago: executing program 0 (id=2856): r0 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x74) r1 = fcntl$auto(0x3, 0x4, 0xa553) fcntl$auto(0x3, 0x4, 0xa553) socket(0x2c, 0xa, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) adjtimex$auto(&(0x7f0000000500)={0x3ffa34bb, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x3, 0x9, 0x26ab, 0x0, 0x8, 0xa, 0x0, {0x9, 0x3}, 0x10, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x5, 0x8, 0x8001, 0x51b, 0x3}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/plpmtud_probe_interval\x00', 0x88002, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r5 = dup$auto(r4) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r6, 0x81004524, r5) r7 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0x0, 0x0, 0x0) setns(r7, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, 0x0, 0x7ff) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), r5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r8], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff020}}) ioctl$auto(r2, 0x5522, 0xf15) 2.025225179s ago: executing program 4 (id=2857): ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) (async) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x2}, 0x52) (async) mmap$auto(0x0, 0x10000, 0x4000000000df, 0x20000000040eb1, 0x401, 0x300000000000) (async, rerun: 32) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=0x0, 0x0, 0x0, 0x2) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4000, 0x0) r0 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x30, &(0x7f0000000080)='\xef', 0x8000) 1.887592015s ago: executing program 5 (id=2858): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) (async) getsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x2) (async) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) (async) r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r2, &(0x7f0000000140)={0x0, 0x3}, 0x1) r3 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, 0x0) r4 = openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/rts_threshold\x00', 0xc28040, 0x0) (async) r5 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) write$auto_tracing_mark_fops_trace(r5, 0x0, 0x0) (async) pread64$auto(r4, 0x0, 0x440, 0xf25) (async) write$auto(0x3, 0x0, 0xfdef) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) (async) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00'}) (async) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[], 0x560}, 0x1, 0x0, 0x0, 0x28000}, 0x8800) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x6, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xf, 0xf, 0xfffffffffffffffc, 0x40, 0xc4, 0xd59, 0x2, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa40, 0x0) ioctl$auto(0x3, 0x5521, 0x1) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) (async) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000001c0)) 1.569080088s ago: executing program 4 (id=2859): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x3800000, 0x0, 0x3, 0x0, 0xffffffffffffffec, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x10001, 0x9, &(0x7f0000000080)=@generic={0x1e, "e2e18340b5a800"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r3, r4, 0x0, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) 1.458427402s ago: executing program 5 (id=2860): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x340000000000) write$auto(0x3, 0x0, 0xfffffdef) read$auto_snd_timer_f_ops_timer(r1, &(0x7f0000000080)=""/188, 0xbc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xffd8) 1.126070133s ago: executing program 0 (id=2861): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xab09, r1) ioctl$auto_OSS_ALSAEMULVER2(0xffffffffffffffff, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4dc8e2f56ac8a0bc5866") (async) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x11, 0x0) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) landlock_restrict_self$auto(r0, 0xfffffffe) (async, rerun: 32) mmap$auto(0xc8, 0xb, 0xfffffffffffffffb, 0x13, r2, 0x2) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) mmap$auto(0x0, 0x4020009, 0xdd, 0xb1c, 0x401, 0x8000) (async) mmap$auto(0xffffffffffffffed, 0x4, 0x4000000000df, 0x40eb0, r0, 0x2ffffffffffc) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/231, 0xe7) (async) mbind$auto(0x6, 0x8d, 0x100000000, 0x0, 0x6, 0x2) (async) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x11b280, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram6\x00', 0x101202, 0x0) 919.155412ms ago: executing program 0 (id=2862): r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="000028bd7000fddbdf2510000000080011000d00000008000a000300000008000f00080000000800110005000000500001801400020069703665727370616e3000000000000008000100", @ANYRES32=r2, @ANYBLOB="140002006d61637674617030000000000000000008000100", @ANYRES32=r3, @ANYBLOB="14000200776731000000000000000000000000002c000180140002007465616d300000000000000000000000140002006970365f767469300000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x9, 0x0) r4 = fsopen$auto(0x0, 0x1) r5 = socket(0x23, 0x80805, 0x0) listen$auto(r5, 0x4) sendmsg$auto_NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) 647.082801ms ago: executing program 0 (id=2863): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) (async) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) mmap$auto(0xfffffffffffffe01, 0x10000000002000a, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) mmap$auto(0xfffffffffffffe01, 0x10000000002000a, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) write$auto(0x3, 0x0, 0xfdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mmap$auto(0x5380, 0x20009, 0x4000000000df, 0x200000000000eb1, r0, 0x8000) io_uring_setup$auto(0xb, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) (async) open(0x0, 0x161342, 0x100) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0) read$auto(r1, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000000)='][.\x1f![%\x00', 0x7) (async) write$auto(r2, &(0x7f0000000000)='][.\x1f![%\x00', 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0xc}, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwritev$auto(r3, 0x0, 0x4, 0xcee, 0x18a) unshare$auto(0x40000080) 400.467651ms ago: executing program 5 (id=2864): r0 = socket(0xa, 0x5, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r2, 0x29, 0x4e, 0x0, 0x2) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) fchown$auto(r0, r1, r3) 205.725344ms ago: executing program 5 (id=2865): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x1, 0x18e, 0x8000000000000011, 0xffffffffffffffff, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x121041, 0x0) write$auto(r1, &(0x7f0000000080)='/sys/kernel/security\xf9\x1cntegrity/evm/evm_xat\x99rs\x00B\b\xbd\x9f\x15\x81\x15\xb6h\xae', 0x1000000006) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x4, 0x2) r2 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x103880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 0s ago: executing program 4 (id=2866): setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x18, 0x4, 0x1) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x60000, 0x0) setresuid$auto(0x8, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x181002, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x24040004) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffba}) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8) ioctl$auto_FIOASYNC(r1, 0x5452, 0x0) kernel console output (not intermixed with test programs): R09: 0000000000000058 [ 612.891524][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.891534][T14207] R13: 00007f8c0ae16038 R14: 00007f8c0ae15fa0 R15: 00007ffc602570c8 [ 612.891565][T14207] [ 615.018877][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 615.219567][T14218] zswap: compressor not available [ 616.707756][T14249] NFSD: Failed to start, no listeners configured. [ 618.039072][T14258] binder: 14257:14258 ioctl 4018620d 9 returned -22 [ 622.538361][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 624.784226][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.790649][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.672757][T14376] tipc: Withdrawal distribution failure [ 629.541625][T14409] nvme_fcloop: unknown parameter or missing value '7' [ 630.742393][ T30] audit: type=1800 audit(1774477896.878:10): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1580" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 631.133014][T14441] tipc: Withdrawal distribution failure [ 632.245634][T14478] random: crng reseeded on system resumption [ 633.932149][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 635.994508][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 636.192798][T14544] random: crng reseeded on system resumption [ 636.486270][T14553] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.386546][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 639.601987][T14583] zswap: compressor not available [ 644.125596][T14688] FAULT_INJECTION: forcing a failure. [ 644.125596][T14688] name failslab, interval 1, probability 0, space 0, times 0 [ 644.199280][T14688] CPU: 0 UID: 0 PID: 14688 Comm: syz.3.1622 Tainted: G U L syzkaller #0 PREEMPT(full) [ 644.199312][T14688] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 644.199320][T14688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.199331][T14688] Call Trace: [ 644.199338][T14688] [ 644.199345][T14688] dump_stack_lvl+0x100/0x190 [ 644.199378][T14688] should_fail_ex.cold+0x5/0xa [ 644.199400][T14688] should_failslab+0xc2/0x120 [ 644.199422][T14688] __kmalloc_cache_noprof+0x7a/0x6f0 [ 644.199446][T14688] ? rand_initialize_disk+0x4a/0xb2 [ 644.199476][T14688] rand_initialize_disk+0x4a/0xb2 [ 644.199500][T14688] __alloc_disk_node+0x322/0x6b0 [ 644.199525][T14688] __blk_mq_alloc_disk+0x89/0x120 [ 644.199556][T14688] loop_add+0x498/0xb60 [ 644.199582][T14688] ? __pfx_loop_add+0x10/0x10 [ 644.199619][T14688] ? rcu_is_watching+0x12/0xc0 [ 644.199648][T14688] ? do_sock_setsockopt+0x101/0x1d0 [ 644.199665][T14688] ? kfree+0x2ec/0x6b0 [ 644.199687][T14688] ? ipv6_setsockopt+0xcb/0x170 [ 644.199709][T14688] loop_control_ioctl+0xae/0x620 [ 644.199736][T14688] ? __pfx_loop_control_ioctl+0x10/0x10 [ 644.199763][T14688] ? xfd_validate_state+0x129/0x190 [ 644.199791][T14688] ? __pfx_loop_control_ioctl+0x10/0x10 [ 644.199819][T14688] __x64_sys_ioctl+0x18e/0x210 [ 644.199848][T14688] do_syscall_64+0x106/0xf80 [ 644.199874][T14688] ? clear_bhb_loop+0x40/0x90 [ 644.199897][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.199915][T14688] RIP: 0033:0x7fa257d9c799 [ 644.199931][T14688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.199948][T14688] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.199966][T14688] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 644.199977][T14688] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000001 [ 644.199988][T14688] RBP: 00007fa257e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 644.199998][T14688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.200008][T14688] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 644.200041][T14688] [ 645.879039][T14692] zswap: compressor not available [ 647.858223][T14713] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 648.411239][T14746] FAULT_INJECTION: forcing a failure. [ 648.411239][T14746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.521090][T14746] CPU: 0 UID: 0 PID: 14746 Comm: syz.4.1632 Tainted: G U L syzkaller #0 PREEMPT(full) [ 648.521121][T14746] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 648.521131][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.521142][T14746] Call Trace: [ 648.521148][T14746] [ 648.521155][T14746] dump_stack_lvl+0x100/0x190 [ 648.521187][T14746] should_fail_ex.cold+0x5/0xa [ 648.521209][T14746] _copy_to_iter+0x1f3/0x1720 [ 648.521230][T14746] ? posix_cpu_timer_rearm+0x25d/0x410 [ 648.521253][T14746] ? __pfx__copy_to_iter+0x10/0x10 [ 648.521275][T14746] ? __lock_acquire+0x4a5/0x2630 [ 648.521306][T14746] signalfd_copyinfo+0x404/0x780 [ 648.521328][T14746] ? __pfx_signalfd_copyinfo+0x10/0x10 [ 648.521350][T14746] ? do_raw_spin_lock+0x128/0x260 [ 648.521385][T14746] ? signalfd_read_iter+0x55f/0x750 [ 648.521405][T14746] ? rcu_is_watching+0x12/0xc0 [ 648.521433][T14746] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.521459][T14746] ? signalfd_read_iter+0x55f/0x750 [ 648.521481][T14746] signalfd_read_iter+0x342/0x750 [ 648.521509][T14746] ? __pfx_signalfd_read_iter+0x10/0x10 [ 648.521531][T14746] ? __pfx___might_resched+0x10/0x10 [ 648.521560][T14746] ? __pfx_default_wake_function+0x10/0x10 [ 648.521585][T14746] ? bpf_lsm_file_permission+0x9/0x10 [ 648.521602][T14746] ? security_file_permission+0x76/0x210 [ 648.521626][T14746] ? rw_verify_area+0xce/0x6d0 [ 648.521652][T14746] ? __pfx_signalfd_read_iter+0x10/0x10 [ 648.521676][T14746] vfs_read+0x825/0xb30 [ 648.521695][T14746] ? __pfx_vfs_read+0x10/0x10 [ 648.521710][T14746] ? find_held_lock+0x2b/0x80 [ 648.521741][T14746] ksys_read+0x12a/0x250 [ 648.521757][T14746] ? __pfx_ksys_read+0x10/0x10 [ 648.521780][T14746] do_syscall_64+0x106/0xf80 [ 648.521806][T14746] ? clear_bhb_loop+0x40/0x90 [ 648.521828][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.521846][T14746] RIP: 0033:0x7f8c0ab9c799 [ 648.521861][T14746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.521878][T14746] RSP: 002b:00007f8c0bb3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.521896][T14746] RAX: ffffffffffffffda RBX: 00007f8c0ae15fa0 RCX: 00007f8c0ab9c799 [ 648.521907][T14746] RDX: 0000000000001000 RSI: 0000200000000a40 RDI: 0000000000000005 [ 648.521917][T14746] RBP: 00007f8c0bb3e090 R08: 0000000000000000 R09: 0000000000000000 [ 648.521927][T14746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.521937][T14746] R13: 00007f8c0ae16038 R14: 00007f8c0ae15fa0 R15: 00007ffc602570c8 [ 648.521966][T14746] [ 649.346566][T14743] tipc: Withdrawal distribution failure [ 650.026917][T14758] FAULT_INJECTION: forcing a failure. [ 650.026917][T14758] name failslab, interval 1, probability 0, space 0, times 0 [ 650.073279][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 650.107934][T14758] CPU: 0 UID: 0 PID: 14758 Comm: syz.1.1634 Tainted: G U L syzkaller #0 PREEMPT(full) [ 650.107967][T14758] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 650.107974][T14758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.107993][T14758] Call Trace: [ 650.107999][T14758] [ 650.108006][T14758] dump_stack_lvl+0x100/0x190 [ 650.108040][T14758] should_fail_ex.cold+0x5/0xa [ 650.108062][T14758] should_failslab+0xc2/0x120 [ 650.108083][T14758] __kmalloc_cache_noprof+0x7a/0x6f0 [ 650.108108][T14758] ? device_add+0xd3a/0x1950 [ 650.108136][T14758] device_add+0xd3a/0x1950 [ 650.108157][T14758] ? dev_set_name+0xc7/0x100 [ 650.108232][T14758] ? __pfx_dev_set_name+0x10/0x10 [ 650.108260][T14758] ? __pfx_device_add+0x10/0x10 [ 650.108284][T14758] ? __pfx___might_resched+0x10/0x10 [ 650.108312][T14758] ? lockdep_hardirqs_on+0x78/0x100 [ 650.108347][T14758] __add_disk+0x518/0xe40 [ 650.108371][T14758] add_disk_fwnode+0x118/0x5c0 [ 650.108393][T14758] loop_add+0x90b/0xb60 [ 650.108419][T14758] ? __pfx_loop_add+0x10/0x10 [ 650.108458][T14758] ? rcu_is_watching+0x12/0xc0 [ 650.108485][T14758] ? do_sock_setsockopt+0x101/0x1d0 [ 650.108504][T14758] ? kfree+0x2ec/0x6b0 [ 650.108526][T14758] ? ipv6_setsockopt+0xcb/0x170 [ 650.108548][T14758] loop_control_ioctl+0xae/0x620 [ 650.108576][T14758] ? __pfx_loop_control_ioctl+0x10/0x10 [ 650.108602][T14758] ? xfd_validate_state+0x129/0x190 [ 650.108631][T14758] ? __pfx_loop_control_ioctl+0x10/0x10 [ 650.108660][T14758] __x64_sys_ioctl+0x18e/0x210 [ 650.108688][T14758] do_syscall_64+0x106/0xf80 [ 650.108714][T14758] ? clear_bhb_loop+0x40/0x90 [ 650.108737][T14758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.108755][T14758] RIP: 0033:0x7fd56979c799 [ 650.108771][T14758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.108788][T14758] RSP: 002b:00007fd56a6ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.108806][T14758] RAX: ffffffffffffffda RBX: 00007fd569a15fa0 RCX: 00007fd56979c799 [ 650.108817][T14758] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000001 [ 650.108828][T14758] RBP: 00007fd569832c99 R08: 0000000000000000 R09: 0000000000000000 [ 650.108838][T14758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.108849][T14758] R13: 00007fd569a16038 R14: 00007fd569a15fa0 R15: 00007ffcdf1dbe18 [ 650.108872][T14758] [ 651.280443][T14750] tipc: Withdrawal distribution failure [ 651.960572][T14799] binder: 14784:14799 ioctl 4018620d 9 returned -22 [ 653.411715][T14810] tipc: Withdrawal distribution failure [ 654.125938][T14829] tipc: Withdrawal distribution failure [ 654.604759][T14834] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1646'. [ 654.633787][T14834] Zero length message leads to an empty skb [ 655.457284][T14839] FAULT_INJECTION: forcing a failure. [ 655.457284][T14839] name fail_futex, interval 1, probability 0, space 0, times 0 [ 655.516959][T14839] CPU: 0 UID: 0 PID: 14839 Comm: syz.3.1648 Tainted: G U L syzkaller #0 PREEMPT(full) [ 655.516990][T14839] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 655.516997][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.517007][T14839] Call Trace: [ 655.517013][T14839] [ 655.517020][T14839] dump_stack_lvl+0x100/0x190 [ 655.517051][T14839] should_fail_ex.cold+0x5/0xa [ 655.517070][T14839] ? __fput+0x68a/0xb40 [ 655.517093][T14839] get_futex_key+0x1d2/0x1620 [ 655.517117][T14839] ? __pfx_get_futex_key+0x10/0x10 [ 655.517137][T14839] ? lock_acquire+0x1cf/0x380 [ 655.517169][T14839] futex_wake+0xea/0x530 [ 655.517198][T14839] ? __pfx_futex_wake+0x10/0x10 [ 655.517226][T14839] ? exit_mm_release+0x19/0x30 [ 655.517254][T14839] do_futex+0x32b/0x350 [ 655.517279][T14839] ? __pfx_do_futex+0x10/0x10 [ 655.517301][T14839] ? __might_fault+0xc5/0x140 [ 655.517333][T14839] mm_release+0x24a/0x2f0 [ 655.517352][T14839] do_exit+0x704/0x2b60 [ 655.517374][T14839] ? __pfx___might_resched+0x10/0x10 [ 655.517405][T14839] ? __pfx_do_exit+0x10/0x10 [ 655.517428][T14839] ? do_raw_spin_lock+0x128/0x260 [ 655.517454][T14839] ? find_held_lock+0x2b/0x80 [ 655.517470][T14839] ? get_signal+0x7e0/0x21e0 [ 655.517492][T14839] do_group_exit+0xd5/0x2a0 [ 655.517518][T14839] get_signal+0x1ec7/0x21e0 [ 655.517541][T14839] ? task_work_add+0x201/0x3b0 [ 655.517569][T14839] ? __pfx_get_signal+0x10/0x10 [ 655.517589][T14839] ? __pfx_vfs_read+0x10/0x10 [ 655.517608][T14839] arch_do_signal_or_restart+0x91/0x770 [ 655.517631][T14839] ? __pfx___fput_deferred+0x10/0x10 [ 655.517653][T14839] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 655.517682][T14839] ? ksys_read+0x1ac/0x250 [ 655.517703][T14839] exit_to_user_mode_loop+0x86/0x4a0 [ 655.517729][T14839] do_syscall_64+0x668/0xf80 [ 655.517757][T14839] ? clear_bhb_loop+0x40/0x90 [ 655.517778][T14839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.517797][T14839] RIP: 0033:0x7fa257d9c799 [ 655.517819][T14839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.517836][T14839] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 655.517853][T14839] RAX: fffffffffffffe00 RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 655.517865][T14839] RDX: 0000000000001000 RSI: 0000200000000a40 RDI: 0000000000000005 [ 655.517875][T14839] RBP: 00007fa258bae090 R08: 0000000000000000 R09: 0000000000000000 [ 655.517885][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.517895][T14839] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 655.517917][T14839] [ 655.903705][T14849] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 657.344479][T14881] tipc: Withdrawal distribution failure [ 657.809643][T14894] FAULT_INJECTION: forcing a failure. [ 657.809643][T14894] name failslab, interval 1, probability 0, space 0, times 0 [ 657.938065][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.4.1659 Tainted: G U L syzkaller #0 PREEMPT(full) [ 657.938098][T14894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 657.938106][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.938117][T14894] Call Trace: [ 657.938123][T14894] [ 657.938130][T14894] dump_stack_lvl+0x100/0x190 [ 657.938162][T14894] should_fail_ex.cold+0x5/0xa [ 657.938184][T14894] ? tomoyo_realpath_from_path+0xb6/0x690 [ 657.938211][T14894] should_failslab+0xc2/0x120 [ 657.938231][T14894] __kmalloc_noprof+0xe0/0x850 [ 657.938264][T14894] tomoyo_realpath_from_path+0xb6/0x690 [ 657.938295][T14894] tomoyo_check_open_permission+0x2af/0x3c0 [ 657.938318][T14894] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 657.938362][T14894] ? do_raw_spin_lock+0x128/0x260 [ 657.938391][T14894] ? path_get+0x61/0x80 [ 657.938415][T14894] tomoyo_file_open+0x6b/0x90 [ 657.938444][T14894] security_file_open+0xb5/0x1e0 [ 657.938468][T14894] do_dentry_open+0x5aa/0x1660 [ 657.938489][T14894] ? security_inode_permission+0xbf/0x250 [ 657.938513][T14894] vfs_open+0x82/0x3f0 [ 657.938540][T14894] path_openat+0x208c/0x31a0 [ 657.938567][T14894] ? __pfx_path_openat+0x10/0x10 [ 657.938595][T14894] do_file_open+0x20e/0x430 [ 657.938617][T14894] ? __pfx_do_file_open+0x10/0x10 [ 657.938653][T14894] ? alloc_fd+0x476/0x790 [ 657.938673][T14894] ? do_getname+0x191/0x390 [ 657.938699][T14894] do_sys_openat2+0x10d/0x1e0 [ 657.938724][T14894] ? __pfx_do_sys_openat2+0x10/0x10 [ 657.938758][T14894] __x64_sys_openat+0x12d/0x210 [ 657.938783][T14894] ? __pfx___x64_sys_openat+0x10/0x10 [ 657.938826][T14894] do_syscall_64+0x106/0xf80 [ 657.938853][T14894] ? clear_bhb_loop+0x40/0x90 [ 657.938876][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.938895][T14894] RIP: 0033:0x7f8c0ab9c799 [ 657.938911][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.938929][T14894] RSP: 002b:00007f8c0bb1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 657.938947][T14894] RAX: ffffffffffffffda RBX: 00007f8c0ae16090 RCX: 00007f8c0ab9c799 [ 657.938958][T14894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 657.938969][T14894] RBP: 00007f8c0ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 657.938980][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.938990][T14894] R13: 00007f8c0ae16128 R14: 00007f8c0ae16090 R15: 00007ffc602570c8 [ 657.939013][T14894] [ 657.939325][T14894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 659.042990][T14910] ======================================================= [ 659.042990][T14910] WARNING: The mand mount option has been deprecated and [ 659.042990][T14910] and is ignored by this kernel. Remove the mand [ 659.042990][T14910] option from the mount to silence this warning. [ 659.042990][T14910] ======================================================= [ 659.501642][ T30] audit: type=1800 audit(2147483647.559:11): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1664" name="dbroot" dev="configfs" ino=68699 res=0 errno=0 [ 659.804053][T14931] bond0: invalid ARP target specified [ 661.153953][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 662.297832][T14974] ksmbd: Unknown IPC event: 0, ignore. [ 663.412708][T15004] bond0: invalid ARP target specified [ 663.496975][T15004] FAULT_INJECTION: forcing a failure. [ 663.496975][T15004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 663.588344][T15004] CPU: 0 UID: 0 PID: 15004 Comm: syz.3.1679 Tainted: G U L syzkaller #0 PREEMPT(full) [ 663.588376][T15004] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 663.588383][T15004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.588394][T15004] Call Trace: [ 663.588400][T15004] [ 663.588408][T15004] dump_stack_lvl+0x100/0x190 [ 663.588439][T15004] should_fail_ex.cold+0x5/0xa [ 663.588458][T15004] ? prepare_alloc_pages+0x16d/0x5f0 [ 663.588482][T15004] should_fail_alloc_page+0xeb/0x140 [ 663.588505][T15004] prepare_alloc_pages+0x1f0/0x5f0 [ 663.588535][T15004] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 663.588566][T15004] ? __pfx_stack_trace_save+0x10/0x10 [ 663.588586][T15004] ? stack_depot_save_flags+0x27/0x9d0 [ 663.588661][T15004] ? kasan_save_stack+0x3f/0x50 [ 663.588689][T15004] ? kasan_save_stack+0x30/0x50 [ 663.588716][T15004] ? kasan_save_track+0x14/0x30 [ 663.588744][T15004] ? kasan_save_stack+0x3f/0x50 [ 663.588775][T15004] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 663.588807][T15004] ? __lock_acquire+0x4a5/0x2630 [ 663.588830][T15004] ? look_up_lock_class+0x64/0x120 [ 663.588863][T15004] ? lock_acquire+0x1cf/0x380 [ 663.588887][T15004] ? find_held_lock+0x2b/0x80 [ 663.588904][T15004] ? page_table_check_set+0x49a/0xa10 [ 663.588922][T15004] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.588943][T15004] ? policy_nodemask+0xed/0x4f0 [ 663.588964][T15004] alloc_pages_mpol+0x1fb/0x550 [ 663.588985][T15004] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 663.589012][T15004] folio_alloc_mpol_noprof+0x36/0x340 [ 663.589037][T15004] vma_alloc_folio_noprof+0xed/0x1d0 [ 663.589061][T15004] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 663.589092][T15004] do_anonymous_page+0xb3a/0x1fb0 [ 663.589126][T15004] __handle_mm_fault+0x1d42/0x2b60 [ 663.589159][T15004] ? __pfx___handle_mm_fault+0x10/0x10 [ 663.589185][T15004] ? pte_offset_map_lock+0x174/0x320 [ 663.589205][T15004] ? find_held_lock+0x2b/0x80 [ 663.589230][T15004] ? follow_page_pte+0x5b3/0x1400 [ 663.589255][T15004] handle_mm_fault+0x36d/0xa20 [ 663.589285][T15004] __get_user_pages+0xf9c/0x34d0 [ 663.589315][T15004] ? __pfx___get_user_pages+0x10/0x10 [ 663.589343][T15004] populate_vma_page_range+0x267/0x3f0 [ 663.589367][T15004] ? __pfx_populate_vma_page_range+0x10/0x10 [ 663.589389][T15004] ? __pfx_find_vma_intersection+0x10/0x10 [ 663.589410][T15004] ? do_mmap+0x93f/0x12f0 [ 663.589433][T15004] __mm_populate+0x107/0x3a0 [ 663.589457][T15004] ? __pfx___mm_populate+0x10/0x10 [ 663.589481][T15004] ? up_write+0x290/0x4f0 [ 663.589509][T15004] vm_mmap_pgoff+0x37f/0x470 [ 663.589533][T15004] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 663.589556][T15004] ? do_futex+0x192/0x350 [ 663.589581][T15004] ? __pfx_do_futex+0x10/0x10 [ 663.589609][T15004] ksys_mmap_pgoff+0xe1/0x650 [ 663.589629][T15004] ? __x64_sys_futex+0x34f/0x4d0 [ 663.589652][T15004] ? __x64_sys_futex+0x358/0x4d0 [ 663.589677][T15004] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 663.589696][T15004] ? xfd_validate_state+0x129/0x190 [ 663.589734][T15004] __x64_sys_mmap+0x125/0x190 [ 663.589763][T15004] do_syscall_64+0x106/0xf80 [ 663.589790][T15004] ? clear_bhb_loop+0x40/0x90 [ 663.589812][T15004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.589831][T15004] RIP: 0033:0x7fa257d9c799 [ 663.589848][T15004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.589865][T15004] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 663.589883][T15004] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 663.589894][T15004] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 663.589904][T15004] RBP: 00007fa257e32c99 R08: ffffffffffffffff R09: 0000000000000000 [ 663.589915][T15004] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 663.589926][T15004] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 663.589949][T15004] [ 665.281039][T15012] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 665.504883][T15031] bond0: no command found in slaves file - use +ifname or -ifname [ 665.527158][T15033] ksmbd: Unknown IPC event: 0, ignore. [ 665.537841][T15031] device-mapper: ioctl: Unable to rename non-existent device,  to [ 666.077010][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 668.197249][T15047] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 668.526839][T15075] FAULT_INJECTION: forcing a failure. [ 668.526839][T15075] name failslab, interval 1, probability 0, space 0, times 0 [ 668.539707][T15075] CPU: 0 UID: 0 PID: 15075 Comm: syz.3.1695 Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.539737][T15075] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.539745][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.539756][T15075] Call Trace: [ 668.539762][T15075] [ 668.539769][T15075] dump_stack_lvl+0x100/0x190 [ 668.539801][T15075] should_fail_ex.cold+0x5/0xa [ 668.539824][T15075] should_failslab+0xc2/0x120 [ 668.539845][T15075] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 668.539872][T15075] ? __send_signal_locked+0x155/0x12d0 [ 668.539905][T15075] __send_signal_locked+0x155/0x12d0 [ 668.539938][T15075] group_send_sig_info+0x2a4/0x300 [ 668.539960][T15075] ? __pfx_group_send_sig_info+0x10/0x10 [ 668.539988][T15075] ? kill_pid_info_type+0x1a/0x290 [ 668.540008][T15075] kill_pid_info_type+0x92/0x290 [ 668.540031][T15075] kill_proc_info+0x6f/0x1b0 [ 668.540053][T15075] kill_something_info+0x2a0/0x310 [ 668.540078][T15075] __x64_sys_kill+0x1c4/0x250 [ 668.540101][T15075] ? __pfx___x64_sys_kill+0x10/0x10 [ 668.540134][T15075] do_syscall_64+0x106/0xf80 [ 668.540160][T15075] ? clear_bhb_loop+0x40/0x90 [ 668.540182][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.540200][T15075] RIP: 0033:0x7fa257d9c799 [ 668.540216][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.540233][T15075] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 668.540251][T15075] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 668.540263][T15075] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000721 [ 668.540273][T15075] RBP: 00007fa257e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 668.540283][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.540293][T15075] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 668.540316][T15075] [ 669.155499][T15082] bond0: invalid ARP target specified [ 669.209595][T15082] FAULT_INJECTION: forcing a failure. [ 669.209595][T15082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.241497][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.1.1698 Tainted: G U L syzkaller #0 PREEMPT(full) [ 669.241530][T15082] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 669.241538][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 669.241556][T15082] Call Trace: [ 669.241563][T15082] [ 669.241570][T15082] dump_stack_lvl+0x100/0x190 [ 669.241602][T15082] should_fail_ex.cold+0x5/0xa [ 669.241621][T15082] ? prepare_alloc_pages+0x16d/0x5f0 [ 669.241646][T15082] should_fail_alloc_page+0xeb/0x140 [ 669.241668][T15082] prepare_alloc_pages+0x1f0/0x5f0 [ 669.241693][T15082] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 669.241724][T15082] ? __pfx_stack_trace_save+0x10/0x10 [ 669.241744][T15082] ? stack_depot_save_flags+0x27/0x9d0 [ 669.241767][T15082] ? kasan_save_stack+0x3f/0x50 [ 669.241793][T15082] ? kasan_save_stack+0x30/0x50 [ 669.241821][T15082] ? kasan_save_track+0x14/0x30 [ 669.241839][T15082] ? kasan_save_stack+0x3f/0x50 [ 669.241870][T15082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 669.241902][T15082] ? __lock_acquire+0x4a5/0x2630 [ 669.241925][T15082] ? look_up_lock_class+0x64/0x120 [ 669.241958][T15082] ? lock_acquire+0x1cf/0x380 [ 669.241982][T15082] ? find_held_lock+0x2b/0x80 [ 669.241999][T15082] ? page_table_check_set+0x49a/0xa10 [ 669.242017][T15082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 669.242037][T15082] ? policy_nodemask+0xed/0x4f0 [ 669.242059][T15082] alloc_pages_mpol+0x1fb/0x550 [ 669.242080][T15082] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 669.242107][T15082] folio_alloc_mpol_noprof+0x36/0x340 [ 669.242131][T15082] vma_alloc_folio_noprof+0xed/0x1d0 [ 669.242154][T15082] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 669.242185][T15082] do_anonymous_page+0xb3a/0x1fb0 [ 669.242219][T15082] __handle_mm_fault+0x1d42/0x2b60 [ 669.242252][T15082] ? __pfx___handle_mm_fault+0x10/0x10 [ 669.242279][T15082] ? pte_offset_map_lock+0x174/0x320 [ 669.242298][T15082] ? find_held_lock+0x2b/0x80 [ 669.242323][T15082] ? follow_page_pte+0x5b3/0x1400 [ 669.242348][T15082] handle_mm_fault+0x36d/0xa20 [ 669.242378][T15082] __get_user_pages+0xf9c/0x34d0 [ 669.242407][T15082] ? __pfx___get_user_pages+0x10/0x10 [ 669.242435][T15082] populate_vma_page_range+0x267/0x3f0 [ 669.242459][T15082] ? __pfx_populate_vma_page_range+0x10/0x10 [ 669.242481][T15082] ? __pfx_find_vma_intersection+0x10/0x10 [ 669.242502][T15082] ? do_mmap+0x93f/0x12f0 [ 669.242525][T15082] __mm_populate+0x107/0x3a0 [ 669.242554][T15082] ? __pfx___mm_populate+0x10/0x10 [ 669.242579][T15082] ? up_write+0x290/0x4f0 [ 669.242607][T15082] vm_mmap_pgoff+0x37f/0x470 [ 669.242631][T15082] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 669.242654][T15082] ? do_futex+0x192/0x350 [ 669.242679][T15082] ? __pfx_do_futex+0x10/0x10 [ 669.242707][T15082] ksys_mmap_pgoff+0xe1/0x650 [ 669.242727][T15082] ? __x64_sys_futex+0x34f/0x4d0 [ 669.242750][T15082] ? __x64_sys_futex+0x358/0x4d0 [ 669.242775][T15082] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 669.242795][T15082] ? xfd_validate_state+0x129/0x190 [ 669.242826][T15082] __x64_sys_mmap+0x125/0x190 [ 669.242856][T15082] do_syscall_64+0x106/0xf80 [ 669.242881][T15082] ? clear_bhb_loop+0x40/0x90 [ 669.242904][T15082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.242923][T15082] RIP: 0033:0x7fd56979c799 [ 669.242939][T15082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.242956][T15082] RSP: 002b:00007fd56a6ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 669.242974][T15082] RAX: ffffffffffffffda RBX: 00007fd569a15fa0 RCX: 00007fd56979c799 [ 669.242985][T15082] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 669.242996][T15082] RBP: 00007fd569832c99 R08: ffffffffffffffff R09: 0000000000000000 [ 669.243006][T15082] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 669.243016][T15082] R13: 00007fd569a16038 R14: 00007fd569a15fa0 R15: 00007ffcdf1dbe18 [ 669.243040][T15082] [ 670.293175][T15080] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 672.963747][T15151] random: crng reseeded on system resumption [ 673.800759][T15130] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 675.542012][T15164] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 676.585575][T15224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 678.326354][T15241] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 678.447850][T15241] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 678.683163][T15250] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 678.949372][ T5830] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 680.969127][T12742] Bluetooth: hci0: command 0x0c1a tx timeout [ 681.117191][T15263] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 681.918689][T15268] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 683.048658][T15283] Bluetooth: hci0: command 0x0c1a tx timeout [ 683.211074][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 685.081710][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 685.928430][T15338] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 685.939896][T15350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 686.028891][T15350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.140004][T15350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 686.145989][T15350] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 686.258729][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.270238][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.871598][ T30] audit: type=1800 audit(2147483674.916:12): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1751" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 686.950508][T15368] capability: warning: `syz.0.1750' uses 32-bit capabilities (legacy support in use) [ 687.016417][T15368] sd 0:0:1:0: PR command failed: 1026 [ 687.075498][T15368] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 687.115126][T15368] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 687.471642][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 687.850996][T12742] Bluetooth: hci0: command 0x0c1a tx timeout [ 687.890347][T15395] hub 1-0:1.0: USB hub found [ 687.986373][T15395] hub 1-0:1.0: 1 port detected [ 688.011079][T12742] Bluetooth: hci1: command 0x0c1a tx timeout [ 688.165565][T15383] kexec: Could not allocate control_code_buffer [ 688.173964][T12742] Bluetooth: hci4: command 0x0406 tx timeout [ 690.251933][T12742] Bluetooth: hci4: command 0x0406 tx timeout [ 690.433263][T15440] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 690.547824][T15440] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 690.820707][T15450] futex_wake_op: syz.1.1767 tries to shift op by -2048; fix this program [ 690.860835][T15450] 0x000400000001-0x000400420598 : "" [ 690.880187][T15450] mtd: partition "" is out of reach -- disabled [ 690.937980][T15450] ftl_cs: FTL header not found. [ 691.011235][T15455] sock: sock_timestamping_bind_phc: sock not bind to device [ 692.822699][T15485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 694.010662][T15471] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 695.590960][T15504] netlink: 'syz.4.1776': attribute type 19 has an invalid length. [ 695.694406][T15504] netlink: 226 bytes leftover after parsing attributes in process `syz.4.1776'. [ 697.397848][T15536] block nbd0: shutting down sockets [ 697.562549][T15535] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.891506][T15544] futex_wake_op: syz.3.1784 tries to shift op by -2048; fix this program [ 697.932410][T15544] futex_wake_op: syz.3.1784 tries to shift op by -2048; fix this program [ 697.972882][T15544] FAULT_INJECTION: forcing a failure. [ 697.972882][T15544] name fail_futex, interval 1, probability 0, space 0, times 0 [ 698.066543][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.3.1784 Tainted: G U L syzkaller #0 PREEMPT(full) [ 698.066577][T15544] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 698.066584][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.066594][T15544] Call Trace: [ 698.066601][T15544] [ 698.066608][T15544] dump_stack_lvl+0x100/0x190 [ 698.066640][T15544] should_fail_ex.cold+0x5/0xa [ 698.066662][T15544] get_futex_key+0x1d2/0x1620 [ 698.066688][T15544] ? __pfx_get_futex_key+0x10/0x10 [ 698.066709][T15544] ? futex_hash+0x2c5/0x380 [ 698.066737][T15544] futex_wake+0xea/0x530 [ 698.066766][T15544] ? __pfx_futex_wait+0x10/0x10 [ 698.066795][T15544] ? __pfx_futex_wake+0x10/0x10 [ 698.066827][T15544] ? is_valid_madvise+0x34/0xd0 [ 698.066850][T15544] do_futex+0x32b/0x350 [ 698.066875][T15544] ? __pfx_do_futex+0x10/0x10 [ 698.066906][T15544] __x64_sys_futex+0x34f/0x4d0 [ 698.066934][T15544] ? __pfx___x64_sys_futex+0x10/0x10 [ 698.066968][T15544] do_syscall_64+0x106/0xf80 [ 698.066995][T15544] ? clear_bhb_loop+0x40/0x90 [ 698.067017][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.067036][T15544] RIP: 0033:0x7fa257d9c799 [ 698.067051][T15544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.067068][T15544] RSP: 002b:00007fa258b8d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 698.067086][T15544] RAX: ffffffffffffffda RBX: 00007fa258016098 RCX: 00007fa257d9c799 [ 698.067098][T15544] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa25801609c [ 698.067108][T15544] RBP: 00007fa258016090 R08: 0000000000000000 R09: 0000000000000000 [ 698.067119][T15544] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 698.067129][T15544] R13: 00007fa258016128 R14: 00007ffd8916df90 R15: 00007ffd8916e078 [ 698.067152][T15544] [ 698.067636][T15544] 0x000000000001-0x000000020000 : "" [ 698.889526][T12855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.116105][T15544] ftl_cs: FTL header corrupt! [ 699.472669][T15571] nvme_fcloop: unknown parameter or missing value '' [ 699.485077][T12855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.571420][T12855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.743971][T12855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.317150][T12855] bridge_slave_0: left allmulticast mode [ 700.323042][T12855] bridge_slave_0: left promiscuous mode [ 700.417813][T12855] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.634516][ T30] audit: type=1800 audit(2147483691.657:13): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1795" name="dummy_udc" dev="gadgetfs" ino=6815 res=0 errno=0 [ 704.795187][T15664] futex_wake_op: syz.3.1799 tries to shift op by -2048; fix this program [ 704.835910][T15664] futex_wake_op: syz.3.1799 tries to shift op by -2048; fix this program [ 705.629618][T12742] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 710.558370][T15733] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 710.574262][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1809'. [ 710.797697][T15756] hsr_slave_0: left promiscuous mode [ 710.866573][T15756] hsr_slave_1: left promiscuous mode [ 715.590190][T12855] hsr_slave_0: left promiscuous mode [ 715.614091][T12855] hsr_slave_1: left promiscuous mode [ 715.630298][T12855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.654832][T12855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.678947][T12855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.703795][T12855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.775494][T12855] veth1_macvtap: left promiscuous mode [ 715.781181][T12855] veth0_macvtap: left promiscuous mode [ 715.819052][T12855] veth1_vlan: left promiscuous mode [ 715.824409][T12855] veth0_vlan: left promiscuous mode [ 716.251356][T12855] team0 (unregistering): Port device team_slave_1 removed [ 716.282193][T12855] team0 (unregistering): Port device team_slave_0 removed [ 717.128117][T15846] FAULT_INJECTION: forcing a failure. [ 717.128117][T15846] name failslab, interval 1, probability 0, space 0, times 0 [ 717.220531][T15846] CPU: 0 UID: 0 PID: 15846 Comm: syz.3.1821 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.220563][T15846] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.220569][T15846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.220580][T15846] Call Trace: [ 717.220586][T15846] [ 717.220593][T15846] dump_stack_lvl+0x100/0x190 [ 717.220624][T15846] should_fail_ex.cold+0x5/0xa [ 717.220647][T15846] should_failslab+0xc2/0x120 [ 717.220667][T15846] __kvmalloc_node_noprof+0xfa/0xa00 [ 717.220695][T15846] ? seq_read_iter+0x819/0x1270 [ 717.220730][T15846] seq_read_iter+0x819/0x1270 [ 717.220768][T15846] kernfs_fop_read_iter+0x46c/0x610 [ 717.220789][T15846] ? rw_verify_area+0xce/0x6d0 [ 717.220815][T15846] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 717.220845][T15846] vfs_read+0x825/0xb30 [ 717.220865][T15846] ? __pfx_vfs_read+0x10/0x10 [ 717.220896][T15846] ksys_read+0x12a/0x250 [ 717.220913][T15846] ? __pfx_ksys_read+0x10/0x10 [ 717.220937][T15846] do_syscall_64+0x106/0xf80 [ 717.220964][T15846] ? clear_bhb_loop+0x40/0x90 [ 717.220986][T15846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.221005][T15846] RIP: 0033:0x7fa257d9c799 [ 717.221020][T15846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.221037][T15846] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.221054][T15846] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 717.221066][T15846] RDX: 0000000000000056 RSI: 0000200000000080 RDI: 0000000000000003 [ 717.221076][T15846] RBP: 00007fa258bae090 R08: 0000000000000000 R09: 0000000000000000 [ 717.221086][T15846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.221096][T15846] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 717.221119][T15846] [ 721.703628][T15911] FAULT_INJECTION: forcing a failure. [ 721.703628][T15911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.792287][T15911] CPU: 0 UID: 0 PID: 15911 Comm: syz.3.1835 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.792318][T15911] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.792325][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.792335][T15911] Call Trace: [ 721.792341][T15911] [ 721.792348][T15911] dump_stack_lvl+0x100/0x190 [ 721.792380][T15911] should_fail_ex.cold+0x5/0xa [ 721.792403][T15911] _copy_to_iter+0x1f3/0x1720 [ 721.792426][T15911] ? sysfs_file_kobj+0xe4/0x290 [ 721.792450][T15911] ? __pfx__copy_to_iter+0x10/0x10 [ 721.792471][T15911] ? kernfs_seq_stop+0xcd/0x120 [ 721.792494][T15911] ? kernfs_put_active+0x93/0xe0 [ 721.792525][T15911] seq_read_iter+0xdab/0x1270 [ 721.792564][T15911] kernfs_fop_read_iter+0x46c/0x610 [ 721.792585][T15911] ? rw_verify_area+0xce/0x6d0 [ 721.792611][T15911] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 721.792633][T15911] vfs_read+0x825/0xb30 [ 721.792653][T15911] ? __pfx_vfs_read+0x10/0x10 [ 721.792684][T15911] ksys_read+0x12a/0x250 [ 721.792700][T15911] ? __pfx_ksys_read+0x10/0x10 [ 721.792731][T15911] do_syscall_64+0x106/0xf80 [ 721.792758][T15911] ? clear_bhb_loop+0x40/0x90 [ 721.792780][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.792798][T15911] RIP: 0033:0x7fa257d9c799 [ 721.792814][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.792831][T15911] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.792848][T15911] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 721.792859][T15911] RDX: 0000000000000056 RSI: 0000200000000080 RDI: 0000000000000003 [ 721.792869][T15911] RBP: 00007fa258bae090 R08: 0000000000000000 R09: 0000000000000000 [ 721.792879][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.792889][T15911] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 721.792912][T15911] [ 722.083659][T15900] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 722.430233][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 722.439872][T15919] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1837'. [ 723.404171][T15934] tipc: Withdrawal distribution failure [ 726.690094][T15981] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 727.811860][T15984] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 731.164470][T16056] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 731.969235][ T30] audit: type=1800 audit(2147483719.993:14): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1867" name="dbroot" dev="configfs" ino=76707 res=0 errno=0 [ 732.315465][T16122] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.436172][T16127] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 734.942889][T16146] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 737.135421][T16217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 737.521079][T16224] process 'syz.0.1889' launched '/dev/fd/6' with NULL argv: empty string added [ 739.527067][T16237] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 739.755441][T16258] vivid-007: ================= START STATUS ================= [ 739.791876][T16258] vivid-007: Generate PTS: true [ 739.807254][T16258] vivid-007: Generate SCR: true [ 739.827954][T16258] tpg source WxH: 320x240 (Y'CbCr) [ 739.833098][T16258] tpg field: 1 [ 739.857775][T16258] tpg crop: (0,0)/320x240 [ 739.873525][T16258] tpg compose: (0,0)/320x240 [ 739.913234][T16258] tpg colorspace: 8 [ 739.939667][T16258] tpg transfer function: 0/0 [ 739.944284][T16258] tpg Y'CbCr encoding: 0/0 [ 740.013205][T16258] tpg quantization: 0/0 [ 740.076861][T16258] tpg RGB range: 0/2 [ 740.080816][T16258] vivid-007: ================== END STATUS ================== [ 743.013652][T16301] bonding: no command found in bonding_masters - use +ifname or -ifname [ 743.130353][T16301] lo: entered allmulticast mode [ 743.193009][T16300] lo: left allmulticast mode [ 744.579681][T16327] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1917'. [ 744.946881][T16341] ubi0: attaching mtd0 [ 744.965905][T16341] FAULT_INJECTION: forcing a failure. [ 744.965905][T16341] name failslab, interval 1, probability 0, space 0, times 0 [ 745.026267][T16341] CPU: 0 UID: 0 PID: 16341 Comm: syz.3.1922 Tainted: G U L syzkaller #0 PREEMPT(full) [ 745.026299][T16341] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 745.026306][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.026318][T16341] Call Trace: [ 745.026324][T16341] [ 745.026331][T16341] dump_stack_lvl+0x100/0x190 [ 745.026376][T16341] should_fail_ex.cold+0x5/0xa [ 745.026399][T16341] should_failslab+0xc2/0x120 [ 745.026420][T16341] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 745.026448][T16341] ? __kernfs_new_node+0xd2/0x960 [ 745.026479][T16341] __kernfs_new_node+0xd2/0x960 [ 745.026509][T16341] ? __pfx___kernfs_new_node+0x10/0x10 [ 745.026542][T16341] ? find_held_lock+0x2b/0x80 [ 745.026559][T16341] ? kernfs_root+0xee/0x2a0 [ 745.026584][T16341] ? kernfs_root+0xee/0x2a0 [ 745.026615][T16341] kernfs_new_node+0x11b/0x1a0 [ 745.026636][T16341] __kernfs_create_file+0x53/0x350 [ 745.026662][T16341] sysfs_add_file_mode_ns+0x207/0x3c0 [ 745.026693][T16341] internal_create_group+0x593/0xf40 [ 745.026726][T16341] ? __pfx_internal_create_group+0x10/0x10 [ 745.026764][T16341] sysfs_slab_add+0x1a4/0x1f0 [ 745.026783][T16341] do_kmem_cache_create+0x472/0x540 [ 745.026807][T16341] __kmem_cache_create_args+0x386/0x420 [ 745.026836][T16341] ubi_attach+0x32a/0x4d30 [ 745.026863][T16341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 745.026887][T16341] ? ubi_msg+0x114/0x159 [ 745.026913][T16341] ? __pfx_ubi_msg+0x10/0x10 [ 745.026943][T16341] ? __pfx_ubi_attach+0x10/0x10 [ 745.026959][T16341] ? lockdep_init_map_type+0x5c/0x250 [ 745.026987][T16341] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 745.027007][T16341] ? __vmalloc_node_noprof+0xad/0xf0 [ 745.027030][T16341] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 745.027051][T16341] ubi_attach_mtd_dev+0x139f/0x32a0 [ 745.027081][T16341] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 745.027100][T16341] ? __pfx_get_mtd_device+0x10/0x10 [ 745.027131][T16341] ctrl_cdev_ioctl+0x36a/0x400 [ 745.027151][T16341] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 745.027175][T16341] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 745.027196][T16341] __x64_sys_ioctl+0x18e/0x210 [ 745.027225][T16341] do_syscall_64+0x106/0xf80 [ 745.027252][T16341] ? clear_bhb_loop+0x40/0x90 [ 745.027274][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.027297][T16341] RIP: 0033:0x7fa257d9c799 [ 745.027312][T16341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.027329][T16341] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.027347][T16341] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 745.027359][T16341] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 000000000000000a [ 745.027376][T16341] RBP: 00007fa257e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 745.027387][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.027397][T16341] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 745.027422][T16341] [ 745.352000][T16341] SLUB: Unable to add cache ubi_aeb_slab_cache to sysfs [ 745.359336][T16341] ubi0: scanning is finished [ 745.364083][T16341] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 745.854250][T16341] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 745.892398][T16355] program syz.1.1925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.724089][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.730774][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.096157][T16402] syz.3.1933 uses obsolete (PF_INET,SOCK_PACKET) [ 749.231865][T16424] nbd: must specify at least one socket [ 750.060381][T16411] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 750.712127][T16415] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 751.113070][T16447] netlink: 'syz.0.1944': attribute type 3 has an invalid length. [ 751.151725][T16447] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1944'. [ 751.453881][T16426] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 752.026887][T16463] FAULT_INJECTION: forcing a failure. [ 752.026887][T16463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.088093][T16463] CPU: 0 UID: 0 PID: 16463 Comm: syz.3.1950 Tainted: G U L syzkaller #0 PREEMPT(full) [ 752.088130][T16463] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 752.088136][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.088146][T16463] Call Trace: [ 752.088152][T16463] [ 752.088160][T16463] dump_stack_lvl+0x100/0x190 [ 752.088194][T16463] should_fail_ex.cold+0x5/0xa [ 752.088216][T16463] _copy_to_iter+0x1f3/0x1720 [ 752.088251][T16463] ? __pfx__copy_to_iter+0x10/0x10 [ 752.088272][T16463] ? kernfs_seq_stop+0xcd/0x120 [ 752.088295][T16463] ? kernfs_put_active+0x93/0xe0 [ 752.088327][T16463] seq_read_iter+0xdab/0x1270 [ 752.088366][T16463] kernfs_fop_read_iter+0x46c/0x610 [ 752.088387][T16463] ? rw_verify_area+0xce/0x6d0 [ 752.088413][T16463] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 752.088436][T16463] vfs_read+0x825/0xb30 [ 752.088456][T16463] ? __pfx_vfs_read+0x10/0x10 [ 752.088487][T16463] ksys_read+0x12a/0x250 [ 752.088504][T16463] ? __pfx_ksys_read+0x10/0x10 [ 752.088528][T16463] do_syscall_64+0x106/0xf80 [ 752.088555][T16463] ? clear_bhb_loop+0x40/0x90 [ 752.088577][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.088595][T16463] RIP: 0033:0x7fa257d9c799 [ 752.088610][T16463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.088627][T16463] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.088644][T16463] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 752.088655][T16463] RDX: 00000000000000fa RSI: 0000200000001240 RDI: 0000000000000003 [ 752.088666][T16463] RBP: 00007fa258bae090 R08: 0000000000000000 R09: 0000000000000000 [ 752.088676][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.088686][T16463] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 752.088709][T16463] [ 753.442803][T16480] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.408823][T16502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 754.765929][T16508] FAULT_INJECTION: forcing a failure. [ 754.765929][T16508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.830668][T16508] CPU: 0 UID: 0 PID: 16508 Comm: syz.1.1962 Tainted: G U L syzkaller #0 PREEMPT(full) [ 754.830700][T16508] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 754.830707][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 754.830717][T16508] Call Trace: [ 754.830723][T16508] [ 754.830731][T16508] dump_stack_lvl+0x100/0x190 [ 754.830763][T16508] should_fail_ex.cold+0x5/0xa [ 754.830781][T16508] ? prepare_alloc_pages+0x16d/0x5f0 [ 754.830805][T16508] should_fail_alloc_page+0xeb/0x140 [ 754.830827][T16508] prepare_alloc_pages+0x1f0/0x5f0 [ 754.830849][T16508] ? is_bpf_text_address+0x8a/0x1a0 [ 754.830880][T16508] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 754.830908][T16508] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 754.830929][T16508] ? is_bpf_text_address+0x94/0x1a0 [ 754.830957][T16508] ? kernel_text_address+0x8d/0x100 [ 754.830984][T16508] ? __kernel_text_address+0xd/0x30 [ 754.831010][T16508] ? unwind_get_return_address+0x59/0xa0 [ 754.831035][T16508] ? __lock_acquire+0x4a5/0x2630 [ 754.831058][T16508] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 754.831088][T16508] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 754.831111][T16508] ? stack_trace_save+0x8e/0xc0 [ 754.831130][T16508] ? look_up_lock_class+0x55/0x120 [ 754.831159][T16508] ? find_held_lock+0x2b/0x80 [ 754.831176][T16508] ? ima_match_policy+0x8c4/0x2350 [ 754.831265][T16508] ? ima_match_policy+0x8c4/0x2350 [ 754.831289][T16508] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.831309][T16508] ? policy_nodemask+0xed/0x4f0 [ 754.831356][T16508] alloc_pages_mpol+0x1fb/0x550 [ 754.831377][T16508] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 754.831404][T16508] folio_alloc_mpol_noprof+0x36/0x340 [ 754.831428][T16508] vma_alloc_folio_noprof+0xed/0x1d0 [ 754.831451][T16508] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 754.831481][T16508] do_anonymous_page+0xb3a/0x1fb0 [ 754.831515][T16508] __handle_mm_fault+0x1d42/0x2b60 [ 754.831543][T16508] ? mt_find+0x45e/0x8e0 [ 754.831561][T16508] ? __pfx___handle_mm_fault+0x10/0x10 [ 754.831585][T16508] ? __pfx_mt_find+0x10/0x10 [ 754.831614][T16508] ? find_vma+0xbf/0x140 [ 754.831630][T16508] ? __pfx_find_vma+0x10/0x10 [ 754.831651][T16508] handle_mm_fault+0x36d/0xa20 [ 754.831681][T16508] do_user_addr_fault+0x74c/0x12f0 [ 754.831710][T16508] exc_page_fault+0x6f/0xd0 [ 754.831737][T16508] asm_exc_page_fault+0x26/0x30 [ 754.831754][T16508] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 754.831776][T16508] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f [ 754.831793][T16508] RSP: 0018:ffffc90004007ae8 EFLAGS: 00050202 [ 754.831808][T16508] RAX: 0000000000000039 RBX: 0000200000001240 RCX: 0000000000000004 [ 754.831820][T16508] RDX: 0000000000000001 RSI: ffff88807de9a000 RDI: 0000200000001240 [ 754.831830][T16508] RBP: ffffc90004007d80 R08: 0000000000000000 R09: ffffed100fbd3400 [ 754.831841][T16508] R10: ffff88807de9a003 R11: 0000000000000000 R12: 0000200000001244 [ 754.831851][T16508] R13: 00007ffffffff000 R14: ffff88807de9a000 R15: 0000000000000004 [ 754.831874][T16508] _copy_to_iter+0x391/0x1720 [ 754.831901][T16508] ? __pfx__copy_to_iter+0x10/0x10 [ 754.831922][T16508] ? kernfs_seq_stop+0xcd/0x120 [ 754.831946][T16508] ? kernfs_put_active+0x93/0xe0 [ 754.831977][T16508] seq_read_iter+0xdab/0x1270 [ 754.832015][T16508] kernfs_fop_read_iter+0x46c/0x610 [ 754.832037][T16508] ? rw_verify_area+0xce/0x6d0 [ 754.832063][T16508] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 754.832085][T16508] vfs_read+0x825/0xb30 [ 754.832112][T16508] ? __pfx_vfs_read+0x10/0x10 [ 754.832215][T16508] ksys_read+0x12a/0x250 [ 754.832248][T16508] ? __pfx_ksys_read+0x10/0x10 [ 754.832283][T16508] do_syscall_64+0x106/0xf80 [ 754.832310][T16508] ? clear_bhb_loop+0x40/0x90 [ 754.832332][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.832351][T16508] RIP: 0033:0x7fd56979c799 [ 754.832367][T16508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.832384][T16508] RSP: 002b:00007fd56a6ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.832400][T16508] RAX: ffffffffffffffda RBX: 00007fd569a15fa0 RCX: 00007fd56979c799 [ 754.832411][T16508] RDX: 00000000000000fa RSI: 0000200000001240 RDI: 0000000000000003 [ 754.832422][T16508] RBP: 00007fd56a6ed090 R08: 0000000000000000 R09: 0000000000000000 [ 754.832432][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.832442][T16508] R13: 00007fd569a16038 R14: 00007fd569a15fa0 R15: 00007ffcdf1dbe18 [ 754.832465][T16508] [ 755.390139][T16490] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 757.700665][T16542] can: request_module (can-proto-0) failed. [ 758.559765][T16530] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 759.154935][T16556] Invalid ELF header magic: != ELF [ 761.881805][T16613] binder: 16610:16613 ioctl 1dae 5 returned -22 [ 763.190280][ T30] audit: type=1804 audit(2147483751.197:15): pid=16632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1991" name="/newroot/499/file0" dev="tmpfs" ino=2686 res=1 errno=0 [ 763.311534][ T30] audit: type=1804 audit(2147483751.197:16): pid=16633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1991" name="/newroot/499/file0" dev="tmpfs" ino=2686 res=1 errno=0 [ 763.631913][T16629] block nbd8: shutting down sockets [ 764.288924][T12742] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 764.976680][T16662] bridge0: port 3(team0) entered blocking state [ 765.069455][T16662] bridge0: port 3(team0) entered disabled state [ 765.176677][T16662] team0: entered allmulticast mode [ 765.290128][T16662] team_slave_0: entered allmulticast mode [ 765.334742][T16648] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 765.392038][T16662] team_slave_1: entered allmulticast mode [ 765.491999][T16662] team0: entered promiscuous mode [ 765.558039][T16662] team_slave_0: entered promiscuous mode [ 765.646810][T16662] team_slave_1: entered promiscuous mode [ 765.697209][T16662] bridge0: port 3(team0) entered blocking state [ 765.703599][T16662] bridge0: port 3(team0) entered forwarding state [ 768.338506][T16737] zswap: compressor not available [ 771.934954][T16791] zswap: compressor not available [ 772.450075][T16812] GUP no longer grows the stack in syz.3.2027 (16812): 14000-41000 (4000) [ 772.476919][T16802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 772.516223][T16812] CPU: 0 UID: 0 PID: 16812 Comm: syz.3.2027 Tainted: G U L syzkaller #0 PREEMPT(full) [ 772.516257][T16812] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 772.516264][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.516275][T16812] Call Trace: [ 772.516281][T16812] [ 772.516288][T16812] dump_stack_lvl+0x100/0x190 [ 772.516320][T16812] gup_vma_lookup.cold+0x83/0x96 [ 772.516347][T16812] __get_user_pages+0x241/0x34d0 [ 772.516376][T16812] ? down_read_killable+0x30e/0x4c0 [ 772.516395][T16812] ? __lock_acquire+0x4a5/0x2630 [ 772.516429][T16812] ? __pfx___get_user_pages+0x10/0x10 [ 772.516456][T16812] __gup_longterm_locked+0x87d/0x16f0 [ 772.516485][T16812] ? __pfx___gup_longterm_locked+0x10/0x10 [ 772.516510][T16812] ? try_get_folio+0x262/0x750 [ 772.516529][T16812] ? find_held_lock+0x2b/0x80 [ 772.516548][T16812] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 772.516575][T16812] gup_fast_fallback+0x18c6/0x2460 [ 772.516614][T16812] ? __pfx_gup_fast_fallback+0x10/0x10 [ 772.516636][T16812] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.516658][T16812] ? is_bpf_text_address+0x94/0x1a0 [ 772.516688][T16812] ? __kernel_text_address+0xd/0x30 [ 772.516715][T16812] ? unwind_get_return_address+0x59/0xa0 [ 772.516740][T16812] pin_user_pages_fast+0xa7/0xf0 [ 772.516762][T16812] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 772.516790][T16812] iov_iter_extract_pages+0xa0d/0x1ef0 [ 772.516819][T16812] ? __blkdev_direct_IO_simple+0x112/0x890 [ 772.516905][T16812] ? kasan_save_stack+0x3f/0x50 [ 772.516933][T16812] ? kasan_save_stack+0x30/0x50 [ 772.516960][T16812] ? kasan_save_track+0x14/0x30 [ 772.516976][T16812] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 772.516999][T16812] ? blkdev_direct_IO+0xc76/0x1fb0 [ 772.517025][T16812] ? blkdev_write_iter+0x703/0xd70 [ 772.517051][T16812] ? vfs_write+0x6ac/0x1070 [ 772.517071][T16812] ? __lock_acquire+0x4a5/0x2630 [ 772.517100][T16812] iov_iter_extract_bvecs+0x10e/0xf40 [ 772.517128][T16812] ? find_held_lock+0x2b/0x80 [ 772.517146][T16812] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 772.517174][T16812] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 772.517199][T16812] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 772.517230][T16812] bio_iov_iter_get_pages+0x26a/0x970 [ 772.517259][T16812] __blkdev_direct_IO_simple+0x3a7/0x890 [ 772.517292][T16812] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 772.517339][T16812] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 772.517363][T16812] ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300 [ 772.517393][T16812] blkdev_direct_IO+0xc76/0x1fb0 [ 772.517437][T16812] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 772.517463][T16812] ? rcu_is_watching+0x12/0xc0 [ 772.517491][T16812] ? __mark_inode_dirty+0x55c/0x1790 [ 772.517518][T16812] ? filemap_check_errors+0xa9/0x150 [ 772.517546][T16812] blkdev_write_iter+0x703/0xd70 [ 772.517578][T16812] vfs_write+0x6ac/0x1070 [ 772.517597][T16812] ? __pfx_blkdev_write_iter+0x10/0x10 [ 772.517626][T16812] ? __pfx_vfs_write+0x10/0x10 [ 772.517642][T16812] ? find_held_lock+0x2b/0x80 [ 772.517674][T16812] ksys_write+0x12a/0x250 [ 772.517691][T16812] ? __pfx_ksys_write+0x10/0x10 [ 772.517716][T16812] do_syscall_64+0x106/0xf80 [ 772.517742][T16812] ? clear_bhb_loop+0x40/0x90 [ 772.517764][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.517783][T16812] RIP: 0033:0x7fa257d9c799 [ 772.517799][T16812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.517817][T16812] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.517835][T16812] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 772.517847][T16812] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000004 [ 772.517857][T16812] RBP: 00007fa257e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 772.517868][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.517878][T16812] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 772.517902][T16812] [ 773.550958][T16813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 773.577010][T16823] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 774.130504][T16802] HfR: entered promiscuous mode [ 774.417283][T16842] blktrace: Concurrent blktraces are not allowed on loop2 [ 775.168411][T16866] Invalid ELF header magic: != ELF [ 775.509525][T16874] futex_wake_op: syz.1.2041 tries to shift op by -2048; fix this program [ 775.548990][T16874] futex_wake_op: syz.1.2041 tries to shift op by -2048; fix this program [ 775.602265][T16872] 0x000000000001-0x000000020000 : "" [ 775.653956][T16872] ftl_cs: FTL header corrupt! [ 777.411459][T16880] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 777.532291][T16917] net_ratelimit: 18 callbacks suppressed [ 777.532308][T16917] openvswitch: netlink: IPv4 tunnel dst address is zero [ 777.771007][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2051'. [ 777.849928][T16928] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 779.042633][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 779.961902][T16981] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 780.998148][T16966] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 782.194806][T17030] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 782.330104][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2074'. [ 782.402962][T17026] HfR: entered promiscuous mode [ 785.975293][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'. [ 786.061923][T17101] openvswitch: HfR: Dropping previously announced user features [ 788.225988][T17147] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 788.277581][T17147] FAULT_INJECTION: forcing a failure. [ 788.277581][T17147] name failslab, interval 1, probability 0, space 0, times 0 [ 788.371122][T17147] CPU: 0 UID: 0 PID: 17147 Comm: syz.3.2104 Tainted: G U L syzkaller #0 PREEMPT(full) [ 788.371155][T17147] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 788.371162][T17147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.371173][T17147] Call Trace: [ 788.371179][T17147] [ 788.371187][T17147] dump_stack_lvl+0x100/0x190 [ 788.371219][T17147] should_fail_ex.cold+0x5/0xa [ 788.371241][T17147] ? tomoyo_realpath_from_path+0xb6/0x690 [ 788.371267][T17147] should_failslab+0xc2/0x120 [ 788.371287][T17147] __kmalloc_noprof+0xe0/0x850 [ 788.371320][T17147] tomoyo_realpath_from_path+0xb6/0x690 [ 788.371351][T17147] tomoyo_path_number_perm+0x23c/0x580 [ 788.371371][T17147] ? tomoyo_path_number_perm+0x22e/0x580 [ 788.371395][T17147] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 788.371440][T17147] ? find_held_lock+0x2b/0x80 [ 788.371457][T17147] ? current_check_access_path+0x281/0x460 [ 788.371483][T17147] ? __pfx_current_check_access_path+0x10/0x10 [ 788.371509][T17147] ? d_alloc_parallel+0x864/0x14e0 [ 788.371541][T17147] tomoyo_path_mknod+0x164/0x190 [ 788.371569][T17147] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 788.371596][T17147] ? find_held_lock+0x2b/0x80 [ 788.371615][T17147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 788.371638][T17147] security_path_mknod+0x161/0x300 [ 788.371726][T17147] may_o_create+0x30/0x3a0 [ 788.371755][T17147] lookup_open.isra.0+0xa0d/0x11b0 [ 788.371788][T17147] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 788.371822][T17147] ? __pfx___might_resched+0x10/0x10 [ 788.371849][T17147] ? mnt_get_write_access+0x52/0x2f0 [ 788.371879][T17147] ? __pfx_down_write+0x10/0x10 [ 788.371897][T17147] ? mnt_get_write_access+0x1e9/0x2f0 [ 788.371926][T17147] path_openat+0x2291/0x31a0 [ 788.371953][T17147] ? __pfx_path_openat+0x10/0x10 [ 788.371982][T17147] do_file_open+0x20e/0x430 [ 788.372003][T17147] ? __pfx_do_file_open+0x10/0x10 [ 788.372040][T17147] ? alloc_fd+0x476/0x790 [ 788.372061][T17147] ? do_getname+0x191/0x390 [ 788.372093][T17147] do_sys_openat2+0x10d/0x1e0 [ 788.372118][T17147] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.372152][T17147] __x64_sys_openat+0x12d/0x210 [ 788.372178][T17147] ? __pfx___x64_sys_openat+0x10/0x10 [ 788.372213][T17147] do_syscall_64+0x106/0xf80 [ 788.372239][T17147] ? clear_bhb_loop+0x40/0x90 [ 788.372262][T17147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.372281][T17147] RIP: 0033:0x7fa257d9c799 [ 788.372297][T17147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.372314][T17147] RSP: 002b:00007fa258bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 788.372333][T17147] RAX: ffffffffffffffda RBX: 00007fa258015fa0 RCX: 00007fa257d9c799 [ 788.372344][T17147] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 788.372355][T17147] RBP: 00007fa257e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 788.372365][T17147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.372375][T17147] R13: 00007fa258016038 R14: 00007fa258015fa0 R15: 00007ffd8916e078 [ 788.372399][T17147] [ 788.372407][T17147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 789.193945][T17157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 791.097876][T17171] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 793.833838][T17254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2123'. [ 794.139611][T17259] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2124'. [ 794.698742][T17279] vivid-003: ================= START STATUS ================= [ 794.747249][T17279] vivid-003: Radio HW Seek Mode: Bounded [ 794.779962][T17279] vivid-003: Radio Programmable HW Seek: false [ 794.863316][T17279] vivid-003: RDS Rx I/O Mode: Block I/O [ 794.888964][T17279] vivid-003: Generate RBDS Instead of RDS: false [ 794.929253][T17279] vivid-003: RDS Reception: true [ 794.959355][T17279] vivid-003: RDS Program Type: 0 inactive [ 795.003044][T17279] vivid-003: RDS PS Name: inactive [ 795.064455][T17279] vivid-003: RDS Radio Text: inactive [ 795.083952][T17279] vivid-003: RDS Traffic Announcement: false inactive [ 795.130744][T17279] vivid-003: RDS Traffic Program: false inactive [ 795.161057][T17279] vivid-003: RDS Music: false inactive [ 795.194406][T17279] vivid-003: ================== END STATUS ================== [ 795.958784][T17317] ima: policy update failed [ 796.006420][ T30] audit: type=1802 audit(2147483783.991:17): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2133" res=0 errno=0 [ 796.275397][T17326] program syz.4.2135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.896981][T17348] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 797.935172][T17348] openvswitch: netlink: Key type 118 is out of range max 32 [ 798.877446][T17380] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13) [ 800.622982][T17391] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 801.237733][T17423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2156'. [ 802.536038][T17446] sysfs_service_op_show: Client not running :-5: [ 805.089471][T17495] zram: Added device: zram1 [ 805.248869][T17453] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 807.622391][T17544] zram: Added device: zram2 [ 807.933622][T17532] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 809.195500][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.201952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.376627][T17589] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 813.837535][T12742] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 814.003848][T17631] usb usb34: usbfs: process 17631 (syz.3.2206) did not claim interface 0 before use [ 816.404796][T17671] zram: Added device: zram3 [ 816.418219][T17656] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 817.189003][T17689] bridge_slave_1: left allmulticast mode [ 817.255101][T17689] bridge_slave_1: left promiscuous mode [ 817.289978][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.059760][T17723] netlink: 122 bytes leftover after parsing attributes in process `syz.0.2226'. [ 820.149997][T17739] ima: policy update failed [ 820.200955][ T30] audit: type=1802 audit(2147483808.169:18): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2229" res=0 errno=0 [ 820.446641][T17716] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 821.766724][T17776] Invalid ELF header magic: != ELF [ 821.818370][T17775] Invalid ELF header magic: != ELF [ 823.120552][T17779] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 824.719830][T17827] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 824.859427][T17830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 824.901136][T17830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 824.941530][T17830] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 825.939242][T17850] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 826.632286][T17843] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 826.880390][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 826.886439][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 826.960257][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 827.520743][T12742] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 830.254995][T17921] zram: Added device: zram4 [ 831.728907][T17904] program syz.1.2268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.506965][T17955] Invalid ELF header magic: != ELF [ 833.935913][T17986] zswap: compressor not available [ 834.298428][T17996] zswap: compressor not available [ 834.674943][T17985] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 834.926626][T18011] zram: Added device: zram5 [ 836.359843][T18032] Invalid ELF header magic: != ELF [ 836.525126][T18034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 836.531204][T18034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 836.700705][T18034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 836.762792][T12742] Bluetooth: hci0: SCO packet too small [ 836.773312][T12742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.783734][T12742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.792451][T12742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 836.800364][T12742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 836.813612][T12742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.654330][T12465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.890991][T12465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.915199][T18066] zram: Added device: zram6 [ 838.016518][T18037] chnl_net:caif_netlink_parms(): no params data found [ 838.128544][T12465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.307130][T12465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.331339][T18048] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 838.528534][T18074] zram: Added device: zram7 [ 838.566170][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 838.572235][T12742] Bluetooth: hci0: command 0x0c1a tx timeout [ 838.687202][T12465] team0: left allmulticast mode [ 838.717272][T12465] team_slave_0: left allmulticast mode [ 838.730338][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 838.776189][T12465] team_slave_1: left allmulticast mode [ 838.791948][T12465] team0: left promiscuous mode [ 838.831955][T12465] team_slave_0: left promiscuous mode [ 838.861336][T12465] team_slave_1: left promiscuous mode [ 838.890898][ T5830] Bluetooth: hci3: command tx timeout [ 838.898958][T12465] bridge0: port 3(team0) entered disabled state [ 838.988059][T12465] bridge_slave_0: left allmulticast mode [ 839.013382][T18087] netlink: 'syz.0.2304': attribute type 4 has an invalid length. [ 839.036727][T12465] bridge_slave_0: left promiscuous mode [ 839.042443][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.719338][T18078] mmap: syz.4.2303 (18078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 839.901947][T12465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.970934][T12465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.083477][T12465] bond0 (unregistering): Released all slaves [ 840.256018][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.323012][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.367658][T18037] bridge_slave_0: entered allmulticast mode [ 840.420704][T18037] bridge_slave_0: entered promiscuous mode [ 840.460052][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.498706][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.533648][T18037] bridge_slave_1: entered allmulticast mode [ 840.559083][T18037] bridge_slave_1: entered promiscuous mode [ 840.672229][T12465] : left promiscuous mode [ 840.939981][T12465] HfR: left promiscuous mode [ 840.967304][ T5830] Bluetooth: hci3: command tx timeout [ 841.064610][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.139306][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.481875][T18037] team0: Port device team_slave_0 added [ 841.504216][T18037] team0: Port device team_slave_1 added [ 841.890034][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.897006][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.003967][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.224779][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.265592][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.412835][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.737626][T18037] hsr_slave_0: entered promiscuous mode [ 842.799090][T18037] hsr_slave_1: entered promiscuous mode [ 842.838805][T18037] debugfs: 'hsr0' already exists in 'hsr' [ 842.844559][T18037] Cannot create hsr debugfs directory [ 843.052842][ T5830] Bluetooth: hci3: command tx timeout [ 843.504737][T18155] zram: Added device: zram8 [ 844.106762][T18143] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 845.132455][ T5830] Bluetooth: hci3: command tx timeout [ 845.213455][T18037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 845.360258][T18037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 845.425366][T18037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 845.506634][T18037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 846.057208][T18037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.452978][T18037] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.595588][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.602830][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.650706][T18171] program syz.3.2313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.723605][T12856] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.730762][T12856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.299106][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.732709][T18242] zram: Added device: zram9 [ 849.040403][T18037] veth0_vlan: entered promiscuous mode [ 849.485024][T18037] veth1_vlan: entered promiscuous mode [ 850.048228][T18037] veth0_macvtap: entered promiscuous mode [ 850.096012][T18037] veth1_macvtap: entered promiscuous mode [ 850.576721][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.814103][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.898744][ T8727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.987011][ T8727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.141055][ T8727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.213783][ T8727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.370581][ T372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.422945][ T372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.082210][T11500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.112174][T11500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.368640][T18037] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 854.178201][T18323] zram: Added device: zram10 [ 855.079514][T12742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.090893][T12742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.098870][T12742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.108789][T12742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.116505][T12742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 856.459497][T18334] chnl_net:caif_netlink_parms(): no params data found [ 857.214462][T18334] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.223912][T12742] Bluetooth: hci2: command tx timeout [ 857.255804][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.290482][T18334] bridge_slave_0: entered allmulticast mode [ 857.316837][T18334] bridge_slave_0: entered promiscuous mode [ 857.467040][T18334] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.474154][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.531738][T18334] bridge_slave_1: entered allmulticast mode [ 857.553508][T18334] bridge_slave_1: entered promiscuous mode [ 857.919091][T18334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.974923][T18334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.231426][T18334] team0: Port device team_slave_0 added [ 858.262829][T18334] team0: Port device team_slave_1 added [ 858.402472][T18334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.459696][T18334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.564532][T18334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.799443][T18334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.837073][T18334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.930362][T18334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.296483][T12742] Bluetooth: hci2: command tx timeout [ 859.562011][T18393] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 859.730170][T18334] hsr_slave_0: entered promiscuous mode [ 859.738049][T18393] File: /dev/nullb0 PID: 18393 Comm: syz.1.2344 [ 859.760449][T18334] hsr_slave_1: entered promiscuous mode [ 859.794214][T18334] debugfs: 'hsr0' already exists in 'hsr' [ 859.821147][T18334] Cannot create hsr debugfs directory [ 860.837411][T12465] hsr_slave_1: left promiscuous mode [ 860.867727][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.899102][T12465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.982476][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.009418][T12465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.037645][T12465] veth1_macvtap: left promiscuous mode [ 861.045972][T18412] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 861.066144][T12465] veth0_macvtap: left promiscuous mode [ 861.080080][T12465] veth1_vlan: left promiscuous mode [ 861.099540][T12465] veth0_vlan: left promiscuous mode [ 861.313935][T12465] pim6reg (unregistering): left allmulticast mode [ 861.377750][T12742] Bluetooth: hci2: command tx timeout [ 861.679206][T12465] team0 (unregistering): Port device team_slave_1 removed [ 861.705604][T12465] team0 (unregistering): Port device team_slave_0 removed [ 862.083979][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 862.255689][T18428] veth0_macvtap: left promiscuous mode [ 862.267909][T18428] macvtap0: entered promiscuous mode [ 862.284389][T18428] macvtap0: entered allmulticast mode [ 862.779779][T18334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.883349][T18334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.967925][T18334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.047894][T18334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.462527][T12742] Bluetooth: hci2: command tx timeout [ 864.506855][T12465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.546832][T12465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.600241][T12465] bond0 (unregistering): Released all slaves [ 865.581254][T12465] HfR: left promiscuous mode [ 865.690293][T12465] tipc: Left network mode [ 865.827380][T18334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.852926][T18334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.985385][T18334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 866.018459][T18334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 866.889167][T18334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.118452][T18334] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.237829][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.244989][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.353522][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.360675][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.497792][ T30] audit: type=1400 audit(2147483856.455:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18501 comm="syz.1.2366" [ 868.948960][T18334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.307835][T18513] input: jJǸ-9%vJ86 as /devices/virtual/input/input108 [ 869.380392][T18334] veth0_vlan: entered promiscuous mode [ 869.555127][T18334] veth1_vlan: entered promiscuous mode [ 870.137732][T18334] veth0_macvtap: entered promiscuous mode [ 870.286740][T18334] veth1_macvtap: entered promiscuous mode [ 870.359013][T18334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.493927][T18334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.600464][ T372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.632163][ T372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.664546][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.670886][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.725842][ T372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.772248][ T372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.279531][ T8727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.314766][ T8727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.604197][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.636583][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.956995][T18621] input: jJǸ-9%vJ86 as /devices/virtual/input/input109 [ 879.683511][T18694] nvme_fcloop: unknown parameter or missing value '7' [ 879.874801][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 879.884976][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 879.893256][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 879.903416][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 879.912620][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 879.986944][T12465] hsr_slave_0: left promiscuous mode [ 880.043497][T12465] hsr_slave_1: left promiscuous mode [ 880.062688][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.109433][T12465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.171158][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.229000][T12465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.336507][T12465] veth1_macvtap: left promiscuous mode [ 880.378399][T12465] veth0_macvtap: left promiscuous mode [ 880.398617][T12465] veth1_vlan: left allmulticast mode [ 880.431921][T12465] veth1_vlan: left promiscuous mode [ 880.850660][T12465] pim6reg (unregistering): left allmulticast mode [ 881.183095][T12465] team0 (unregistering): Port device team_slave_1 removed [ 881.201717][T12465] team0 (unregistering): Port device team_slave_0 removed [ 881.947745][ T5830] Bluetooth: hci0: command tx timeout [ 882.845840][T18701] chnl_net:caif_netlink_parms(): no params data found [ 883.273891][T18759] FAULT_INJECTION: forcing a failure. [ 883.273891][T18759] name failslab, interval 1, probability 0, space 0, times 0 [ 883.349716][T18701] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.378098][T18701] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.386034][T18759] CPU: 0 UID: 0 PID: 18759 Comm: syz.0.2414 Tainted: G U L syzkaller #0 PREEMPT(full) [ 883.386066][T18759] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 883.386073][T18759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 883.386085][T18759] Call Trace: [ 883.386091][T18759] [ 883.386098][T18759] dump_stack_lvl+0x100/0x190 [ 883.386130][T18759] should_fail_ex.cold+0x5/0xa [ 883.386153][T18759] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 883.386191][T18759] should_failslab+0xc2/0x120 [ 883.386213][T18759] __kmalloc_noprof+0xe0/0x850 [ 883.386241][T18759] ? stack_trace_save+0x8e/0xc0 [ 883.386264][T18759] inotify_handle_inode_event+0x1a5/0x6a0 [ 883.386296][T18759] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 883.386322][T18759] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 883.386346][T18759] fsnotify+0x187d/0x3550 [ 883.386370][T18759] ? __pfx_fsnotify+0x10/0x10 [ 883.386399][T18759] __fsnotify_parent+0x704/0xca0 [ 883.386424][T18759] ? __pfx___fsnotify_parent+0x10/0x10 [ 883.386449][T18759] ? __pfx___might_resched+0x10/0x10 [ 883.386481][T18759] ? __fput+0x30d/0xb40 [ 883.386501][T18759] __fput+0x30d/0xb40 [ 883.386528][T18759] task_work_run+0x150/0x240 [ 883.386556][T18759] ? __pfx_task_work_run+0x10/0x10 [ 883.386590][T18759] exit_to_user_mode_loop+0x100/0x4a0 [ 883.386616][T18759] do_syscall_64+0x668/0xf80 [ 883.386643][T18759] ? clear_bhb_loop+0x40/0x90 [ 883.386665][T18759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.386684][T18759] RIP: 0033:0x7f7228f9c799 [ 883.386700][T18759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.386718][T18759] RSP: 002b:00007f7229f28028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 883.386736][T18759] RAX: 0000000000000000 RBX: 00007f7229215fa0 RCX: 00007f7228f9c799 [ 883.386748][T18759] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 883.386759][T18759] RBP: 00007f7229032c99 R08: 0000000000000000 R09: 0000000000000000 [ 883.386770][T18759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.386781][T18759] R13: 00007f7229216038 R14: 00007f7229215fa0 R15: 00007ffda196a338 [ 883.386804][T18759] [ 883.768265][T18701] bridge_slave_0: entered allmulticast mode [ 883.775486][T18701] bridge_slave_0: entered promiscuous mode [ 883.783066][T18701] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.791030][T18701] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.798201][T18701] bridge_slave_1: entered allmulticast mode [ 883.805363][T18701] bridge_slave_1: entered promiscuous mode [ 883.831950][T18701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.854424][T18701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.092967][ T5830] Bluetooth: hci0: command tx timeout [ 884.152456][T18701] team0: Port device team_slave_0 added [ 884.333561][T12465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.374313][T18787] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input110 [ 884.413331][T18701] team0: Port device team_slave_1 added [ 884.557090][T18701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.589462][T18701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.694093][T18701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.739651][T12465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.797827][T18701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.809122][T18701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.848369][T18701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.912100][T12465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.030208][T12465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.140069][T18701] hsr_slave_0: entered promiscuous mode [ 885.156967][T18701] hsr_slave_1: entered promiscuous mode [ 886.110940][ T5830] Bluetooth: hci0: command tx timeout [ 886.714132][T12465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.770509][T12465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.862697][T12465] bond0 (unregistering): Released all slaves [ 888.190891][ T5830] Bluetooth: hci0: command tx timeout [ 888.678656][T12465] HSR: left promiscuous mode [ 888.751539][T12465] ovs_?: left promiscuous mode [ 888.944880][T12465] HfR: left promiscuous mode [ 889.128900][T18884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2430'. [ 889.191071][T18884] veth1_macvtap: left promiscuous mode [ 889.398153][T18884] nvme_fcloop: unknown parameter or missing value '1' [ 890.417361][T18701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 890.480458][T18701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 890.641487][T18701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 890.691653][T18701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 892.124229][T18701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.256383][T18701] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.787487][T18835] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.794649][T18835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.976660][T18835] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.983806][T18835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.396258][T18701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.839825][T19006] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 894.978491][T19006] File: /dev/nullb0 PID: 19006 Comm: syz.0.2448 [ 895.056511][T18701] veth0_vlan: entered promiscuous mode [ 895.213970][T18701] veth1_vlan: entered promiscuous mode [ 895.456539][T18701] veth0_macvtap: entered promiscuous mode [ 895.513215][T18701] veth1_macvtap: entered promiscuous mode [ 895.642020][T18701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.722296][T18701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.786776][T18835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.815005][T18835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.887500][T18835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.934176][T18835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.998134][T18832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.035766][T18832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.711798][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.748181][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.967521][T19060] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2461'. [ 902.851368][T19153] FAULT_INJECTION: forcing a failure. [ 902.851368][T19153] name failslab, interval 1, probability 0, space 0, times 0 [ 902.921013][T19153] CPU: 0 UID: 0 PID: 19153 Comm: syz.0.2482 Tainted: G U L syzkaller #0 PREEMPT(full) [ 902.921046][T19153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 902.921053][T19153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 902.921064][T19153] Call Trace: [ 902.921070][T19153] [ 902.921077][T19153] dump_stack_lvl+0x100/0x190 [ 902.921109][T19153] should_fail_ex.cold+0x5/0xa [ 902.921132][T19153] should_failslab+0xc2/0x120 [ 902.921153][T19153] __kmalloc_cache_noprof+0x7a/0x6f0 [ 902.921177][T19153] ? wakeup_source_device_create+0x46/0x2e0 [ 902.921255][T19153] wakeup_source_device_create+0x46/0x2e0 [ 902.921280][T19153] wakeup_source_sysfs_add+0x1c/0x90 [ 902.921303][T19153] wakeup_source_register+0x154/0x3e0 [ 902.921323][T19153] ep_create_wakeup_source+0x1df/0x2e0 [ 902.921343][T19153] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 902.921366][T19153] ? do_epoll_ctl+0x1012/0x36a0 [ 902.921385][T19153] ? do_epoll_ctl+0x1012/0x36a0 [ 902.921410][T19153] do_epoll_ctl+0x1eee/0x36a0 [ 902.921440][T19153] ? __pfx_do_epoll_ctl+0x10/0x10 [ 902.921459][T19153] ? find_held_lock+0x2b/0x80 [ 902.921476][T19153] ? __might_fault+0xc5/0x140 [ 902.921501][T19153] ? __might_fault+0xc5/0x140 [ 902.921536][T19153] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 902.921555][T19153] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 902.921576][T19153] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 902.921603][T19153] do_syscall_64+0x106/0xf80 [ 902.921630][T19153] ? clear_bhb_loop+0x40/0x90 [ 902.921652][T19153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.921671][T19153] RIP: 0033:0x7f7228f9c799 [ 902.921686][T19153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.921703][T19153] RSP: 002b:00007f7229f28028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 902.921720][T19153] RAX: ffffffffffffffda RBX: 00007f7229215fa0 RCX: 00007f7228f9c799 [ 902.921732][T19153] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 902.921742][T19153] RBP: 00007f7229032c99 R08: 0000000000000000 R09: 0000000000000000 [ 902.921753][T19153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.921763][T19153] R13: 00007f7229216038 R14: 00007f7229215fa0 R15: 00007ffda196a338 [ 902.921786][T19153] [ 903.254860][T19147] Invalid ELF header magic: != ELF [ 903.610959][T19150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 903.627053][T19150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 903.647337][T19150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 904.201528][T19150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 904.292163][T19150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 904.330992][T19150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 904.399296][T19170] vivid-007: ================= START STATUS ================= [ 904.406957][T19170] vivid-007: Generate PTS: true [ 904.415284][T19150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 904.476775][T19150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 904.501992][T19150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 904.508847][T19178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 904.549236][T19170] vivid-007: Generate SCR: true [ 904.571032][T19150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 904.581275][T19170] tpg source WxH: 320x240 (Y'CbCr) [ 904.613605][T19170] tpg field: 1 [ 904.656386][T19170] tpg crop: (0,0)/320x240 [ 904.737422][T19170] tpg compose: (0,0)/320x240 [ 904.787521][T19170] tpg colorspace: 8 [ 904.860094][T19170] tpg transfer function: 0/0 [ 904.894641][T19170] tpg Y'CbCr encoding: 0/0 [ 904.922708][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 904.965038][T19170] tpg quantization: 0/0 [ 905.027812][T19170] tpg RGB range: 0/2 [ 905.070410][T19170] vivid-007: ================== END STATUS ================== [ 905.642757][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 906.360225][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 906.522486][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 906.654540][T19211] zswap: compressor not available [ 907.721690][T12742] Bluetooth: hci3: command 0x0c1a tx timeout [ 907.750398][T19238] block nbd0: Unsupported socket: should be TCP or UNIX. [ 908.443346][T12742] Bluetooth: hci2: command 0x0c1a tx timeout [ 908.519383][T19261] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 908.602126][T12742] Bluetooth: hci0: command 0x0c1a tx timeout [ 908.745476][T19261] File: /dev/nullb0 PID: 19261 Comm: syz.3.2504 [ 908.790902][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.830518][T12465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.886369][T12465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.935315][T12465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.061076][T12465] veth1_macvtap: left promiscuous mode [ 909.095357][T12465] veth0_macvtap: left promiscuous mode [ 909.152017][T12465] veth1_vlan: left promiscuous mode [ 909.157280][T12465] veth0_vlan: left promiscuous mode [ 909.804929][T12742] Bluetooth: hci3: command 0x0c1a tx timeout [ 909.856250][T19287] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2510'. [ 910.272350][T19295] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 910.522382][T12742] Bluetooth: hci2: command 0x0c1a tx timeout [ 910.646579][T12465] team0 (unregistering): Port device team_slave_1 removed [ 910.684720][T12742] Bluetooth: hci0: command 0x0c1a tx timeout [ 910.740242][T12465] team0 (unregistering): Port device team_slave_0 removed [ 911.009297][T12742] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 911.935248][T19314] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 912.089037][T19314] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 912.144291][T19314] pci 0000:00:01.3: PCI INT A: no GSI [ 914.389045][T19359] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 922.688890][T19507] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2568'. [ 926.365222][T19593] vhci_hcd vhci_hcd.2: invalid port number 194 [ 926.418208][T19593] vhci_hcd vhci_hcd.2: invalid port number 194 [ 931.529191][T12742] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 932.149291][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.160236][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.695590][T19687] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 932.871788][T19688] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 933.545657][T19706] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 933.571148][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 934.628082][T19725] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 935.151608][T19725] File: /dev/nullb0 PID: 19725 Comm: syz.0.2614 [ 935.656567][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 941.926684][T19857] bridge0: port 3(team0) entered blocking state [ 941.993183][T19857] bridge0: port 3(team0) entered disabled state [ 942.069966][T19857] team0: entered allmulticast mode [ 942.096968][T19857] team_slave_0: entered allmulticast mode [ 942.150736][T19857] team_slave_1: entered allmulticast mode [ 942.261854][T19857] team0: entered promiscuous mode [ 942.287718][T19857] team_slave_0: entered promiscuous mode [ 942.313152][T19857] team_slave_1: entered promiscuous mode [ 942.345700][T19857] bridge0: port 3(team0) entered blocking state [ 942.352089][T19857] bridge0: port 3(team0) entered forwarding state [ 949.758728][T19995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 949.783498][T19995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 949.806932][T19995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 949.824315][T19995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 951.170936][T12742] Bluetooth: hci4: command 0x0406 tx timeout [ 951.810191][T12742] Bluetooth: hci2: command 0x0c1a tx timeout [ 951.816334][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 951.890265][T12742] Bluetooth: hci0: command 0x0c1a tx timeout [ 960.396502][T20137] [U] ^@ [ 961.004739][T20142] zswap: compressor not available [ 961.270972][T20153] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 961.590309][T20155] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 961.675266][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 961.685487][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 961.693225][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 961.701081][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 961.708503][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 961.869275][T20155] File: /dev/nullb0 PID: 20155 Comm: syz.0.2695 [ 962.714705][T20160] chnl_net:caif_netlink_parms(): no params data found [ 962.929053][T20170] ubi0: attaching mtd0 [ 963.033435][T20170] ubi0: scanning is finished [ 963.038078][T20170] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 963.109020][T20160] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.143746][T20160] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.185846][T20160] bridge_slave_0: entered allmulticast mode [ 963.220276][T20160] bridge_slave_0: entered promiscuous mode [ 963.268591][T20160] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.320431][T20160] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.366729][T20160] bridge_slave_1: entered allmulticast mode [ 963.409255][T20170] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 963.419299][T20160] bridge_slave_1: entered promiscuous mode [ 963.563407][T20160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.634055][T20160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.803992][T20160] team0: Port device team_slave_0 added [ 963.812092][ T5830] Bluetooth: hci1: command tx timeout [ 963.880873][T20160] team0: Port device team_slave_1 added [ 964.096089][T20160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.147911][T20160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.233992][ T5830] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 964.241988][ T5830] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 964.344634][T20160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.431757][T20160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.483111][T20160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.706914][T20160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.775615][T20190] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1216 (2432 ns) > initial count (1664 ns). Using initial count to start timer. [ 965.136325][T20160] hsr_slave_0: entered promiscuous mode [ 965.177033][T20160] hsr_slave_1: entered promiscuous mode [ 965.234241][T20160] debugfs: 'hsr0' already exists in 'hsr' [ 965.348008][T20160] Cannot create hsr debugfs directory [ 965.603757][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'. [ 965.890721][ T5830] Bluetooth: hci1: command tx timeout [ 967.024906][T20160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 967.137608][T20160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 967.233703][T20160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 967.291433][T20160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 967.467234][ T5830] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 967.551865][T20224] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 967.908068][T20160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.973961][ T5830] Bluetooth: hci1: command tx timeout [ 968.161481][T20160] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.217934][T18838] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.225086][T18838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.598443][T20252] FAULT_INJECTION: forcing a failure. [ 968.598443][T20252] name (null), interval 1, probability 0, space 0, times 1 [ 968.808817][T20252] CPU: 0 UID: 0 PID: 20252 Comm: syz.1.2711 Tainted: G U L syzkaller #0 PREEMPT(full) [ 968.808848][T20252] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 968.808855][T20252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 968.808865][T20252] Call Trace: [ 968.808872][T20252] [ 968.808878][T20252] dump_stack_lvl+0x100/0x190 [ 968.808910][T20252] should_fail_ex.cold+0x5/0xa [ 968.808940][T20252] null_queue_rq+0x24d/0xfb0 [ 968.809016][T20252] null_queue_rqs+0xe9/0x2f0 [ 968.809034][T20252] ? __pfx_null_queue_rqs+0x10/0x10 [ 968.809059][T20252] __blk_mq_flush_list+0x9a/0xc0 [ 968.809081][T20252] blk_mq_dispatch_queue_requests+0x184/0x7c0 [ 968.809112][T20252] blk_mq_flush_plug_list+0x1f2/0x600 [ 968.809140][T20252] ? trace_block_plug+0x6e/0x240 [ 968.809158][T20252] ? blk_add_rq_to_plug+0x30a/0x540 [ 968.809185][T20252] ? __pfx_wbt_track+0x10/0x10 [ 968.809269][T20252] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 968.809298][T20252] ? blk_mq_submit_bio+0x9aa/0x2bf0 [ 968.809330][T20252] __blk_flush_plug+0x2c4/0x4b0 [ 968.809384][T20252] ? __lock_acquire+0x4a5/0x2630 [ 968.809410][T20252] ? __pfx___blk_flush_plug+0x10/0x10 [ 968.809435][T20252] ? stack_depot_save_flags+0x27/0x9d0 [ 968.809463][T20252] __submit_bio+0x584/0x6c0 [ 968.809489][T20252] ? __pfx___submit_bio+0x10/0x10 [ 968.809534][T20252] ? submit_bio_noacct_nocheck+0x562/0xc10 [ 968.809561][T20252] submit_bio_noacct_nocheck+0x562/0xc10 [ 968.809591][T20252] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 968.809620][T20252] ? __pfx___might_resched+0x10/0x10 [ 968.809655][T20252] submit_bio_noacct+0xd17/0x2010 [ 968.809685][T20252] submit_bio_wait+0x110/0x250 [ 968.809714][T20252] ? __pfx_submit_bio_wait+0x10/0x10 [ 968.809747][T20252] ? ocfs2_commit_truncate+0x670/0x2030 [ 968.809797][T20252] __blkdev_direct_IO_simple+0x49c/0x890 [ 968.809829][T20252] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 968.809862][T20252] ? __pfx_submit_bio_wait_endio+0x10/0x10 [ 968.809898][T20252] ? __filemap_fdatawait_range+0x1af/0x230 [ 968.809940][T20252] blkdev_direct_IO+0xc76/0x1fb0 [ 968.809977][T20252] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 968.810008][T20252] ? filemap_check_errors+0xa9/0x150 [ 968.810029][T20252] ? filemap_write_and_wait_range.part.0+0xea/0x110 [ 968.810060][T20252] blkdev_read_iter+0x225/0x4f0 [ 968.810091][T20252] copy_splice_read+0x4ba/0xb90 [ 968.810119][T20252] ? __pfx_copy_splice_read+0x10/0x10 [ 968.810139][T20252] ? look_up_lock_class+0x55/0x120 [ 968.810170][T20252] ? lockdep_init_map_type+0x5c/0x250 [ 968.810196][T20252] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 968.810227][T20252] ? __pfx_filemap_splice_read+0x10/0x10 [ 968.810245][T20252] do_splice_read+0x2bd/0x370 [ 968.810266][T20252] splice_direct_to_actor+0x2a1/0xa30 [ 968.810286][T20252] ? __pfx_direct_splice_actor+0x10/0x10 [ 968.810309][T20252] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 968.810335][T20252] do_splice_direct+0x174/0x240 [ 968.810354][T20252] ? __pfx_do_splice_direct+0x10/0x10 [ 968.810373][T20252] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 968.810405][T20252] ? bpf_lsm_file_permission+0x9/0x10 [ 968.810421][T20252] ? security_file_permission+0x76/0x210 [ 968.810446][T20252] ? rw_verify_area+0xce/0x6d0 [ 968.810475][T20252] do_sendfile+0xadc/0xe20 [ 968.810508][T20252] ? __pfx_do_sendfile+0x10/0x10 [ 968.810542][T20252] ? __fget_files+0x21f/0x3d0 [ 968.810565][T20252] __x64_sys_sendfile64+0x1d8/0x220 [ 968.810586][T20252] ? ksys_write+0x1ac/0x250 [ 968.810602][T20252] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 968.810630][T20252] do_syscall_64+0x106/0xf80 [ 968.810656][T20252] ? clear_bhb_loop+0x40/0x90 [ 968.810678][T20252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.810695][T20252] RIP: 0033:0x7f46d959c799 [ 968.810712][T20252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.810728][T20252] RSP: 002b:00007f46da4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 968.810746][T20252] RAX: ffffffffffffffda RBX: 00007f46d9816090 RCX: 00007f46d959c799 [ 968.810757][T20252] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 968.810767][T20252] RBP: 00007f46da4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 968.810777][T20252] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 968.810788][T20252] R13: 00007f46d9816128 R14: 00007f46d9816090 R15: 00007ffd7ed272c8 [ 968.810810][T20252] [ 970.100234][ T5830] Bluetooth: hci1: command tx timeout [ 970.658814][T18838] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.665960][T18838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.619907][T20160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.365015][T20160] veth0_vlan: entered promiscuous mode [ 972.430321][T20160] veth1_vlan: entered promiscuous mode [ 972.536957][T20160] veth0_macvtap: entered promiscuous mode [ 972.575894][T20160] veth1_macvtap: entered promiscuous mode [ 972.658089][T20160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.711061][T20160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.756466][T18832] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.771443][T18832] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.834142][T18832] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.870303][T18832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.279027][T18835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.307629][T18835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.426939][T18835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.472537][T18835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.944244][ T5830] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 974.944270][ T5830] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 974.960917][ T5830] Bluetooth: hci4: Dropping invalid advertising data [ 974.967812][ T5830] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 974.967866][ T5830] Bluetooth: hci4: Dropping invalid advertising data [ 974.983301][ T5830] Bluetooth: hci4: Malformed LE Event: 0x02 [ 974.999771][T20324] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.035474][T20324] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.229650][T20330] netlink: 130 bytes leftover after parsing attributes in process `syz.0.2724'. [ 975.732090][ T6165] null_blk: rq ffff888027ae3c00 timed out [ 975.738144][ T6165] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 976.948294][T20350] hugetlbfs: syz.5.2727 (20350): Using mlock ulimits for SHM_HUGETLB is obsolete [ 978.392026][T20391] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 978.600611][T20391] PCI: Can't parse resource_alignment parameter:  [ 979.389881][T20410] Invalid ELF header magic: != ELF [ 979.457614][T20402] zswap: compressor not available [ 981.077341][T20438] netlink: del zone limit has 4 unknown bytes [ 981.886635][T20446] futex_wake_op: syz.4.2743 tries to shift op by -2048; fix this program [ 982.369209][ T30] audit: type=1400 audit(4294967352.300:20): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=20456 comm="syz.5.2745" [ 982.617891][T20466] NFSD: Failed to start, no listeners configured. [ 984.311958][T20479] kexec: Could not allocate control_code_buffer [ 984.583751][T20503] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 984.643596][T20503] vivid-007: ================= START STATUS ================= [ 984.701586][T20503] vivid-007: Generate PTS: true [ 984.706481][T20503] vivid-007: Generate SCR: true [ 984.810436][T20503] tpg source WxH: 320x240 (Y'CbCr) [ 984.970771][T20503] tpg field: 1 [ 984.974172][T20503] tpg crop: (0,0)/320x240 [ 985.054498][T20503] tpg compose: (0,0)/320x240 [ 985.059123][T20503] tpg colorspace: 8 [ 985.150875][T20503] tpg transfer function: 0/0 [ 985.155516][T20503] tpg Y'CbCr encoding: 0/0 [ 985.159929][T20503] tpg quantization: 0/0 [ 985.350391][T20503] tpg RGB range: 0/2 [ 985.400375][T20503] vivid-007: ================== END STATUS ================== [ 986.778353][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 993.576920][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.584610][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.074761][T20635] sd 0:0:1:0: PR command failed: 1026 [ 994.113284][T20635] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 994.130265][T20635] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 994.529802][T20643] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 994.686523][T20643] FAULT_INJECTION: forcing a failure. [ 994.686523][T20643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 994.806704][T20645] random: crng reseeded on system resumption [ 994.869074][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.5.2784 Tainted: G U L syzkaller #0 PREEMPT(full) [ 994.869108][T20643] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 994.869115][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 994.869126][T20643] Call Trace: [ 994.869132][T20643] [ 994.869139][T20643] dump_stack_lvl+0x100/0x190 [ 994.869171][T20643] should_fail_ex.cold+0x5/0xa [ 994.869190][T20643] ? prepare_alloc_pages+0x16d/0x5f0 [ 994.869214][T20643] should_fail_alloc_page+0xeb/0x140 [ 994.869236][T20643] prepare_alloc_pages+0x1f0/0x5f0 [ 994.869259][T20643] ? mas_find+0x2dd/0x740 [ 994.869277][T20643] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 994.869310][T20643] ? __pfx_validate_mm+0x10/0x10 [ 994.869334][T20643] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 994.869366][T20643] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 994.869392][T20643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 994.869411][T20643] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 994.869447][T20643] ? __mt_destroy+0xa6/0x390 [ 994.869476][T20643] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 994.869510][T20643] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 994.869536][T20643] ? vma_wants_writenotify+0x10b/0x390 [ 994.869565][T20643] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 994.869596][T20643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 994.869615][T20643] ? policy_nodemask+0xed/0x4f0 [ 994.869637][T20643] alloc_pages_mpol+0x1fb/0x550 [ 994.869658][T20643] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 994.869680][T20643] ? mas_ascend+0x53d/0xb30 [ 994.869708][T20643] alloc_pages_noprof+0x131/0x390 [ 994.869730][T20643] pte_alloc_one+0x1c/0x3d0 [ 994.869751][T20643] __pte_alloc+0x6d/0x3e0 [ 994.869770][T20643] ? __pfx___pte_alloc+0x10/0x10 [ 994.869788][T20643] ? __lock_acquire+0x4a5/0x2630 [ 994.869816][T20643] do_anonymous_page+0x13cc/0x1fb0 [ 994.869850][T20643] __handle_mm_fault+0x1d42/0x2b60 [ 994.869879][T20643] ? mt_find+0x45e/0x8e0 [ 994.869897][T20643] ? __pfx___handle_mm_fault+0x10/0x10 [ 994.869921][T20643] ? __pfx_mt_find+0x10/0x10 [ 994.869955][T20643] handle_mm_fault+0x36d/0xa20 [ 994.869985][T20643] __get_user_pages+0xf9c/0x34d0 [ 994.870014][T20643] ? __pfx___get_user_pages+0x10/0x10 [ 994.870042][T20643] populate_vma_page_range+0x267/0x3f0 [ 994.870067][T20643] ? __pfx_populate_vma_page_range+0x10/0x10 [ 994.870093][T20643] ? __pfx_find_vma_intersection+0x10/0x10 [ 994.870114][T20643] ? do_mmap+0x93f/0x12f0 [ 994.870137][T20643] __mm_populate+0x107/0x3a0 [ 994.870160][T20643] ? __pfx___mm_populate+0x10/0x10 [ 994.870184][T20643] ? up_write+0x290/0x4f0 [ 994.870213][T20643] vm_mmap_pgoff+0x37f/0x470 [ 994.870236][T20643] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 994.870259][T20643] ? do_futex+0x192/0x350 [ 994.870283][T20643] ? __pfx_do_futex+0x10/0x10 [ 994.870312][T20643] ksys_mmap_pgoff+0xe1/0x650 [ 994.870332][T20643] ? __x64_sys_futex+0x34f/0x4d0 [ 994.870355][T20643] ? __x64_sys_futex+0x358/0x4d0 [ 994.870379][T20643] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 994.870400][T20643] ? xfd_validate_state+0x129/0x190 [ 994.870437][T20643] __x64_sys_mmap+0x125/0x190 [ 994.870468][T20643] do_syscall_64+0x106/0xf80 [ 994.870494][T20643] ? clear_bhb_loop+0x40/0x90 [ 994.870516][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.870535][T20643] RIP: 0033:0x7f9d39b9c799 [ 994.870551][T20643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.870568][T20643] RSP: 002b:00007f9d3aad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 994.870587][T20643] RAX: ffffffffffffffda RBX: 00007f9d39e16090 RCX: 00007f9d39b9c799 [ 994.870598][T20643] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 994.870609][T20643] RBP: 00007f9d39c32c99 R08: 0000000000000002 R09: 0000000000008000 [ 994.870620][T20643] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 994.870630][T20643] R13: 00007f9d39e16128 R14: 00007f9d39e16090 R15: 00007ffe64d85ba8 [ 994.870654][T20643] [ 995.794136][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 996.828277][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'. [ 996.884493][T20653] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2786'. [ 997.296910][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 997.434740][T20657] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 1000.432417][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2798'. [ 1003.333527][T20735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1005.406724][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1007.634542][ T30] audit: type=1800 audit(4294967377.560:21): pid=20801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2816" name="dbroot" dev="configfs" ino=103328 res=0 errno=0 [ 1008.039585][T20809] can: request_module (can-proto-0) failed. [ 1008.901644][T20825] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2819'. [ 1009.254893][T20832] udc dummy_udc.0: soft-connect without a gadget driver [ 1012.050729][T20878] FAULT_INJECTION: forcing a failure. [ 1012.050729][T20878] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.200308][T20878] CPU: 0 UID: 0 PID: 20878 Comm: syz.5.2831 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1012.200341][T20878] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1012.200349][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.200359][T20878] Call Trace: [ 1012.200366][T20878] [ 1012.200374][T20878] dump_stack_lvl+0x100/0x190 [ 1012.200406][T20878] should_fail_ex.cold+0x5/0xa [ 1012.200430][T20878] should_failslab+0xc2/0x120 [ 1012.200451][T20878] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1012.200475][T20878] ? snd_seq_pool_new+0x44/0x230 [ 1012.200501][T20878] ? __pfx_snd_seq_open+0x10/0x10 [ 1012.200519][T20878] snd_seq_pool_new+0x44/0x230 [ 1012.200542][T20878] seq_create_client1+0x66/0x640 [ 1012.200563][T20878] ? __pfx_snd_seq_open+0x10/0x10 [ 1012.200581][T20878] snd_seq_open+0x59/0x590 [ 1012.200600][T20878] ? __pfx_snd_seq_open+0x10/0x10 [ 1012.200616][T20878] snd_open+0x22d/0x4c0 [ 1012.200637][T20878] ? __pfx_snd_open+0x10/0x10 [ 1012.200656][T20878] chrdev_open+0x234/0x6a0 [ 1012.200675][T20878] ? __pfx_apparmor_file_open+0x10/0x10 [ 1012.200695][T20878] ? __pfx_chrdev_open+0x10/0x10 [ 1012.200716][T20878] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1012.200741][T20878] do_dentry_open+0x6d8/0x1660 [ 1012.200759][T20878] ? __pfx_chrdev_open+0x10/0x10 [ 1012.200783][T20878] vfs_open+0x82/0x3f0 [ 1012.200810][T20878] path_openat+0x208c/0x31a0 [ 1012.200837][T20878] ? __pfx_path_openat+0x10/0x10 [ 1012.200865][T20878] do_file_open+0x20e/0x430 [ 1012.200886][T20878] ? __pfx_do_file_open+0x10/0x10 [ 1012.200922][T20878] ? alloc_fd+0x476/0x790 [ 1012.200944][T20878] ? do_getname+0x191/0x390 [ 1012.200969][T20878] do_sys_openat2+0x10d/0x1e0 [ 1012.200994][T20878] ? __pfx_do_sys_openat2+0x10/0x10 [ 1012.201021][T20878] ? __fget_files+0x21f/0x3d0 [ 1012.201043][T20878] __x64_sys_openat+0x12d/0x210 [ 1012.201069][T20878] ? __pfx___x64_sys_openat+0x10/0x10 [ 1012.201103][T20878] do_syscall_64+0x106/0xf80 [ 1012.201128][T20878] ? clear_bhb_loop+0x40/0x90 [ 1012.201150][T20878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.201169][T20878] RIP: 0033:0x7f9d39b9c799 [ 1012.201184][T20878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.201208][T20878] RSP: 002b:00007f9d3aaf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1012.201226][T20878] RAX: ffffffffffffffda RBX: 00007f9d39e15fa0 RCX: 00007f9d39b9c799 [ 1012.201238][T20878] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1012.201248][T20878] RBP: 00007f9d39c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1012.201259][T20878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.201268][T20878] R13: 00007f9d39e16038 R14: 00007f9d39e15fa0 R15: 00007ffe64d85ba8 [ 1012.201291][T20878] [ 1015.700786][T20903] usb usb4: usbfs: process 20903 (syz.1.2837) did not claim interface 0 before use [ 1016.172642][T20912] netlink: 584 bytes leftover after parsing attributes in process `syz.1.2840'. [ 1016.226584][T20912] openvswitch: netlink: Flow key attr not present in new flow. [ 1016.587899][T20914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1018.233793][T20930] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1020.453606][T20962] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1022.847335][T20981] bond0: option mode: unable to set because the bond device is up [ 1023.060977][T20986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2854'. [ 1023.253419][T20986] mac80211_hwsim hwsim189 wlan1: entered promiscuous mode [ 1023.338138][T20986] mac80211_hwsim hwsim189 wlan1: entered allmulticast mode [ 1023.896923][T21006] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1024.060589][T21010] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1024.594675][T21026] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1025.920219][ T9] ================================================================== [ 1025.920255][ T9] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1025.920344][ T9] Write of size 8 at addr ffffc90004409be0 by task kworker/0:0/9 [ 1025.920358][ T9] [ 1025.920369][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1025.920394][ T9] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1025.920401][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1025.920414][ T9] Workqueue: events_power_efficient fb_flashcursor [ 1025.920434][ T9] Call Trace: [ 1025.920440][ T9] [ 1025.920446][ T9] dump_stack_lvl+0x100/0x190 [ 1025.920473][ T9] print_report+0x156/0x4c9 [ 1025.920497][ T9] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1025.920522][ T9] ? __virt_addr_valid+0x81/0x620 [ 1025.920546][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 1025.920571][ T9] kasan_report+0xdf/0x1e0 [ 1025.920589][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 1025.920617][ T9] sys_imageblit+0x19fb/0x1d60 [ 1025.920645][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 1025.920672][ T9] ? update_cfs_rq_load_avg+0x51/0x550 [ 1025.920694][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1025.920715][ T9] soft_cursor+0x524/0xa10 [ 1025.920738][ T9] ? fb_get_color_depth+0x120/0x250 [ 1025.920775][ T9] bit_cursor+0xe58/0x16f0 [ 1025.920798][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 1025.920822][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1025.920841][ T9] ? get_color+0x1da/0x450 [ 1025.920857][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 1025.920877][ T9] fb_flashcursor+0x338/0x430 [ 1025.920895][ T9] process_one_work+0xa23/0x19a0 [ 1025.920932][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1025.920962][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 1025.920980][ T9] worker_thread+0x5ef/0xe50 [ 1025.921009][ T9] ? kthread+0x13a/0x450 [ 1025.921031][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1025.921056][ T9] kthread+0x370/0x450 [ 1025.921078][ T9] ? __pfx_kthread+0x10/0x10 [ 1025.921102][ T9] ret_from_fork+0x754/0xd80 [ 1025.921128][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1025.921155][ T9] ? __switch_to+0x7b4/0x1120 [ 1025.921174][ T9] ? __pfx_kthread+0x10/0x10 [ 1025.921198][ T9] ret_from_fork_asm+0x1a/0x30 [ 1025.921222][ T9] [ 1025.921228][ T9] [ 1025.921233][ T9] The buggy address belongs to a vmalloc virtual mapping [ 1025.921245][ T9] Memory state around the buggy address: [ 1025.921254][ T9] ffffc90004409a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1025.921273][ T9] ffffc90004409b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1025.921286][ T9] >ffffc90004409b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1025.921295][ T9] ^ [ 1025.921306][ T9] ffffc90004409c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1025.921317][ T9] ffffc90004409c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1025.921327][ T9] ================================================================== [ 1025.921363][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1025.921376][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1025.921401][ T9] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1025.921408][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1025.921419][ T9] Workqueue: events_power_efficient fb_flashcursor [ 1025.921437][ T9] Call Trace: [ 1025.921443][ T9] [ 1025.921449][ T9] dump_stack_lvl+0x100/0x190 [ 1025.921475][ T9] vpanic+0x552/0x970 [ 1025.921492][ T9] ? __pfx_vpanic+0x10/0x10 [ 1025.921509][ T9] ? mark_held_locks+0x40/0x70 [ 1025.921533][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 1025.921558][ T9] panic+0xd1/0xe0 [ 1025.921573][ T9] ? __pfx_panic+0x10/0x10 [ 1025.921593][ T9] ? check_panic_on_warn+0x1f/0x90 [ 1025.921620][ T9] check_panic_on_warn.cold+0x19/0x34 [ 1025.921639][ T9] end_report.part.0+0x3a/0x90 [ 1025.921663][ T9] kasan_report.cold+0xe/0x18 [ 1025.921688][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 1025.921716][ T9] sys_imageblit+0x19fb/0x1d60 [ 1025.921745][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 1025.921772][ T9] ? update_cfs_rq_load_avg+0x51/0x550 [ 1025.921794][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1025.921813][ T9] soft_cursor+0x524/0xa10 [ 1025.921836][ T9] ? fb_get_color_depth+0x120/0x250 [ 1025.921856][ T9] bit_cursor+0xe58/0x16f0 [ 1025.921879][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 1025.921909][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1025.921927][ T9] ? get_color+0x1da/0x450 [ 1025.921944][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 1025.921964][ T9] fb_flashcursor+0x338/0x430 [ 1025.921982][ T9] process_one_work+0xa23/0x19a0 [ 1025.922011][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1025.922041][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 1025.922059][ T9] worker_thread+0x5ef/0xe50 [ 1025.922088][ T9] ? kthread+0x13a/0x450 [ 1025.922110][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1025.922135][ T9] kthread+0x370/0x450 [ 1025.922157][ T9] ? __pfx_kthread+0x10/0x10 [ 1025.922182][ T9] ret_from_fork+0x754/0xd80 [ 1025.922208][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1025.922236][ T9] ? __switch_to+0x7b4/0x1120 [ 1025.922255][ T9] ? __pfx_kthread+0x10/0x10 [ 1025.922279][ T9] ret_from_fork_asm+0x1a/0x30 [ 1025.922303][ T9] [ 1025.922373][ T9] Kernel Offset: disabled