last executing test programs: 7.529426477s ago: executing program 1 (id=3960): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) get_mempolicy$auto(&(0x7f0000000080)=0x800, &(0x7f00000000c0)=0x2, 0x7, 0x5, 0x0) mmap$auto(0x4, 0x5, 0x9, 0x40eb2, 0x4, 0x100000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socketpair$auto(0x7b, 0xfffffffd, 0xff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, 0x5) ioctl$auto(0x3, 0x400c4d05, 0x5) close_range$auto(0x2, 0x8, 0x0) rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x8400, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 6.007945765s ago: executing program 1 (id=3964): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/pci_bus/0000:00/cpulistaffinity\x00', 0xc0200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) fanotify_init$auto(0x104f5, 0xde9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) chdir$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getdents64$auto(0x0, 0x0, 0x41) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) setresuid$auto(0x0, 0x7, 0x8080) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x15, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) recvmmsg$auto(r3, &(0x7f00000002c0)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0xc}, 0x801}, 0x3, 0x6, 0x0) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x20) 5.868681015s ago: executing program 0 (id=3965): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x72, 0x3, 0x0, 0x401, 0x1) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10801, 0xc) renameat2$auto(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x5) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r2) setsockopt$auto_SO_PASSCRED(r0, 0xf2, 0x10, &(0x7f0000000100)='wireguard\x00', 0x40) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_vht_mcs_mask_5ghz\x00', 0x40000, 0x0) r4 = ioctl$auto_TUNDETACHFILTER(r2, 0x401054d6, &(0x7f0000000200)={0x1, &(0x7f00000001c0)={0xafc, 0x9, 0x8, @inferred=r3}}) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/limits\x00', 0x0, 0x0) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000002c0), r5) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000000300)={0x1044, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x7}, @L2TP_ATTR_STATS={0x1008, 0x1e, 0x0, 0x1, [@generic="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", @generic="3116214d"]}]}, 0x1044}, 0x1, 0x0, 0x0, 0x10}, 0x810) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001440), r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001480)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'dvmrp0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(r0, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x800) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000015c0)={@inferred=r5, "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"}) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7ff, 0x7fffffffffffffff, 0x40, 0xa) madvise$auto(0x3, 0x8, 0x1) ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0x81) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x767, 0x2, 0x1ff, 0xe) ioctl$auto_PPPIOCSMRU(r0, 0x40047452, &(0x7f00000025c0)=0x100) pread64$auto(r1, &(0x7f0000002600)='netdev\x00', 0x5, 0x9) mknod$auto(&(0x7f0000002640)='./file0\x00', 0x0, 0x5) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002680)=@enable_stats={0x3ff}, 0x674a) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r2, &(0x7f0000002fc0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002780)={0x7c4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xb7, 0xcd, "1d3910692995b7644806a0e41f876c11e7fad495cf5daecf1ef65aab01d587c34c3d5be95e32d88a8ebeec037ff6611100222338aefb17e38b6e3517d757c21ed8425473d4eaa2e7b04342a07de2a528cb7d302c2fb63948e6c2a45de0b2af25278eee1dda8186bfad3da67b382a0b0109b7a06b52c06668609836fa6dc546ff6ac41836b16d9b6b002afec6065c0596edf930fa56f9c9d15e0038c4957bb8a5bc2ec45473c17515c1e694b0d93e1310a8cc73"}, @NL80211_ATTR_SAR_SPEC={0x14, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6721}]}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5e}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2e, 0xbe, "0c10526d9e754020be10e44c28d94373fa607746f850198e68d726b8ee047f294fa089bd9cc7d25c3d33"}, @NL80211_ATTR_IE_PROBE_RESP={0x55b, 0x7f, "21e74af664f820586a94c40516c188883e963ad6ef4e6c64d3e55754153935c338912567ff86f16ce928eacfb95a1a1a25410f6d491745dd0582a9c5ec05893456fd99aa5ffd591566f58388066d2cccc421cde91063dcb1893c11bf78c6da4861eb7f3584273de984690c8a75542e1508d787471f413e93c904bc73b2b410972ae7c49d93c3a9ce7e2098dede223724544a4b47db3e2025107a44e611c9c02dcf1ec2e2f1bd7c9875446ca133e0f6da4a4a6f129ac310326bf9d82d3159201f56ba89121ec1009dcd15e8d7da1d13645a4e9768c08ff87af08c6c52377a024870dbc924cb16539052bbe281872d00e09b69a7350087edf503162dee133d0f4336c1cc455ac354ec2df775fb621f9194c2dd7ef98bcb02e7a297116e2abc8d20edfa27fac3ba97c198588a92008c67f314ee4fb5a02bab041f0762fa39e3efd17f6e47b052689fb2eeec7d7d5bbc62380375f4f35561d3e0d9b332de71649f045652e0baec90593ec3895f34f827c1f12ced59b44d5b7eff075cab60fe4a3fd0fdb81bcae89d24e4bc9582ed9fe16a4ae011aa69fa747658f3a5ae87fcb9a4bde40188f2c313692b261a31e452648a27962fb6f8dd5e83c397e00884d7e44e91454b746dd8a02016c859f309278752e9f0b4bbc2d6b33db8438a43ad2c4ddf89791c342c1999ce0b8b9859df67c1a32516f9206883de1d8e95bab2eb807e041960508c6dd393b99b82baea580693df4621c81e925b4911ebc2785b78e8100279fcd8b1ef0284622f4ea39abe6154c89e725b999c3ae479a8a5e58063d67486c86b5ae79fce2f94832bd7f5667a62338f5a3d0b0f82afa5d298fcf90b56b781831f4e6c59ec76ba3e759eb849a0faedde9a9128cf0859f42d231ade756e2deafa835155593b3ec76728f12c65bb186464120d2664e12d7a2966655a6ff22915c14879bc0a665489dc4e772eb5f4298568dfb2ea9855a0c5f26838daaaaa2cadeb1216643b1f1b48072ca36a7ed906fa5669cc9393af1734e91b85cca5bd381e7dd1b5524f857f82bbd9db6921cf647233d4c5640f6b39bedf86d07f6ba927ef7343d8dc1126ff7793d2025ce5cc77594f63cf622631e4c624955be81bb127b23501aadb3d535be7df00ab503696fc745dc79441717ffafe52bbbbf5d238639d397a3c7f64b38e74cb6387670790d6542232138fe727bc24989a58c509a38aa66951278365d2d69cd3ca0df85b2ae84b43619e47f724ee5d5cd5870ce2052d1adbd9c28cec89a01a8d85adadde01d621ffe9d206f584e743e76f8aec6549aae9e4d25abd79cd80df6816e3e3b52c546118363c6d126b3934638f8056a01a942ddcbabf6cd728afde887cc76dd2d16c1dd9d96ccbb2969e1a4f64d80468c818d7f70f84967b31d3fbf17e9e726c872883ff8f7b1e4dc3fbd87660876265db732156355cb72823d565e5f9b8b5d1d0334f86a3fad1b970a9c20e73da8734ca1a089e9bd73d3bc751fb8f7e886410a30310a3eabc6db1f091142a6943597c847585ee79fcc05a0a4d068aeb159a5c93dc88b3329aa50342d01c0a861672e88695f0b572be80637be158a75284b0cc9c82d0c7326fb9deaee4c25e4b2686e06b2c61471c128d4a7b861dabff70456d37cecb8d36725fc7d00248bf7206118352879e8c5ad072d525196a6ebe64f067c87c3a4421de693f287353786510ef3a6dadd88166a39659882577aa0147caf69a0772c86de38f75301ddd02a35a3cdbffbc67a12a2ec506f05e064241903dbf812c7de90436e978a8abfd6256d90e64959de9cb784b8585a14dd726ed8e3c578e60dc01081ff40dc8e8c8cd1dd36260fd7d1f629c0835f0d5b9b0efb2de59603ac471726b2e6bec53fc3a16144b2e2148c181e1593c0bf231734ced06d26528e0f6a959b3dd0c2c94c92d"}, @NL80211_ATTR_REG_RULES={0x13e, 0x22, 0x0, 0x1, [@generic="cc8b0eaccb02b963ef0ce2fc3f5fe0e55385d4e5b1474106ed023ba061f34fb7d2720dac0d3a96c3c20a9c5c1cdde08929db5e830c447ad9d966f4427ed0d40845cab6d6125645cdac47d90ea15aa7a9", @generic="b89a914ab105c6846e93f26ee58b6ba4433c16c5461e855e6b1922b8f1391fae9aba48e6824d310d2acf23b5e34b8afacf19154aaa63af50383eb121bb507431244aee334575cc2ef6866a6a105043c1afb6f9881414463a8f3ab9f7b62007e65ef1bfd5b067a7432f56ecbc3d96c175f61dbca77144958aa634cc1b57f9cf67bacc8ff00815c7b746217911bc81f702aa9cc04fedb9b586b7b64acbc0105d7789cfed0ae9ad756938419c024ddeb66a052f01f9ae27440f3c5078d309f3c75cc81c74c5c8d7c99316c659677f802bc210ad0242d08476674b436504f3a18edfbf9d9e4ec02c066319e0"]}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x48000}, 0x4000841) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x40, 0x1, 0x14}, 0x18) faccessat2$auto(r10, &(0x7f0000003080)='./file0\x00', 0x1, 0x6) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r4, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x40) 5.598748602s ago: executing program 0 (id=3967): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) landlock_create_ruleset$auto(0x0, 0x9, 0x0) r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0x1, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 5.418921745s ago: executing program 1 (id=3968): r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r0, 0xc008aec1, &(0x7f0000000300)={0x81, 0x0, [{0x80, 0x971, 0xa0, 0xb62, 0xc5e, 0x80, 0x5}, {0x6, 0x1, 0x1, 0xb54e, 0xcf7, 0x0, 0xe4}, {0x4, 0x4, 0x6, 0x22, 0x7, 0x3, 0x6}, {0x2, 0x4c8dac9c, 0x86, 0xc0000000, 0x4, 0x7, 0xe}, {0x8, 0x7, 0x6, 0x0, 0xffffffff, 0x1ea}, {0x0, 0xe86, 0x4, 0x2, 0x8016, 0x0, 0x7}, {0xe, 0x2, 0x5, 0xfffff801, 0x1, 0x6, 0x1}, {0x7, 0x2, 0x4, 0xbf, 0x2, 0x2, 0x7f}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(r1, &(0x7f0000000040)={0x0, 0x8000000000024}, 0x6) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(r2, 0x10001, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x10000, 0x0) read$auto_tk_debug_sleep_time_fops_(0xffffffffffffffff, &(0x7f00000004c0)=""/182, 0xb6) io_uring_register$auto(r3, 0x18, 0x0, 0x20000000) mmap$auto(0xeb6, 0xa, 0xdf, 0x9b72, r2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0xd, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000580)="5c55a2dfc3e41cd33c9c97353152bd45666ff96cf267fcb3462ae9b53911256571b3d7b7a6cfd555a235debe70823ec1f1972d9304380b2c82875cc5ecb9aac149a8038cea35ad05677251fb939905fa5ce27338959255528a2c49d95a510eb57d58a65575f1088b6c5b58989da6b0b6a8f280957ff4a9d832780c", 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x40802, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x0) 4.822521747s ago: executing program 0 (id=3971): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x183801, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) socket(0xa, 0x1, 0x100) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121902, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x2, 0x1, 0xfffffffffffffffe]}, 0x0) 4.380009248s ago: executing program 0 (id=3973): mmap$auto(0xfffffffffffffffc, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x3cb081, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x3cb081, 0x0) write$auto(r0, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) (async) write$auto(r0, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) fcntl$auto_F_DUPFD_QUERY(r1, 0x403, 0x0) socket(0xa, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x8080) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x8080) getpeername$auto(0x3, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_LIST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x70bda6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi21/power/runtime_status\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi21/power/runtime_status\x00', 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r5, 0x40084504, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r7 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2c008015) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2c008015) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa3\x04|\x03\xcb\x12\xf2\b\x1c\xc7k', 0x9) write$auto(r6, 0x0, 0x8000098c6) socket(0x10, 0x2, 0x1) (async) socket(0x10, 0x2, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r8 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r8, 0xfff, 0x0) (async) fcntl$auto(r8, 0xfff, 0x0) 3.411586393s ago: executing program 3 (id=3974): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) setreuid$auto(0x0, 0xee00) socket(0x2d, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2d, 0x3, @empty}, 0x6a) setresuid$auto(0x8, 0x8, 0x0) ioctl$auto(0xc8, 0x894c, 0x5c8d) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x0, 0x806121, 0x6) recvmsg$auto(r0, &(0x7f00000002c0)={&(0x7f0000000080)="0c3d9dbc077c75812a3b0c557719f4aedbcec34c50f56e8ae6c5c98014a24f4f40fc83dd0513702b3b6f60b6c6d44aad7ee2c279ce13ddd92d680b2fc7d5182322a26f91b95e48e1273ee598620e26143b3d568965f840f2af2b880a0aa875bcc04491d1c407cc59826d32b84f0c16ee6d9f3ac3f00f9f24bd2455431ea5022ee7f2aac1b3806b60b1162c063af70e37416077a506bcc36adf", 0x49, &(0x7f00000001c0)={&(0x7f0000000140)="a7ff1a0d5f96a0490d42ade98a554905dd"}, 0x0, &(0x7f0000000200)="fe3ad6d51da3e4258d957351351446fe6f64b02e9eb7a1bbb43886e2568f3400767af5539964417c23c90f3be693ff74b2fc460b7edbb6e4f69bdeac521bd8bbda6ad3a367d4e1a789e39cd6d6616ae117aea48b251bfcf287d3c6b51088cd3518a4bf2143ee7ae44df703fa30c9891a873f41c95baa3dbaf9de8b43054d8a3db219c484f961ca023e84b8b40a74e9a1c735530d1a99d208cd2cfc41d9ca18e289a95f96f8ee063c31ce0964b2919b1ed66bbda28f8e", 0x1, 0xe2}, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x6}, 0xa, 0x0) capset$auto(&(0x7f0000000000)={0x2, r1}, &(0x7f0000000040)={0xe, 0x3, 0x9}) 3.279953347s ago: executing program 2 (id=3975): socket(0xf, 0x3, 0x2) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) (async, rerun: 64) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) (async) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x52a480, 0x0) (async) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000080)=0x6) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async, rerun: 32) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x2205, 0x0) 2.862454414s ago: executing program 2 (id=3976): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x80047437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x7352, 0x3f, 0x7ffc, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x1, 0x0, 0x40, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x5, 0x2, 0x0, 0x0, 0x200000000000000, 0x0, 0x1000000, 0x10000, 0x40000000000, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x5]}, 0x1fe, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x83) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xc8, 0x4020940d, 0x5c8d) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(0x3, 0x40081271, 0x38) sendfile$auto(r0, r0, 0x0, 0x3) 2.752713092s ago: executing program 3 (id=3977): mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) mkdir$auto(&(0x7f0000000000)='./file0\x00', 0xff) write$auto(r0, 0x0, 0x40db) 2.510249866s ago: executing program 3 (id=3978): mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffffa}, 0x1000) 2.388346678s ago: executing program 2 (id=3979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x30, r1, 0x1, 0x70bc2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x76}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x200408d8}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES16=r8, @ANYBLOB="010027bd24aa5854129748ead78f9c7000fedbdf250d00983a5af6348feeefc5000008000100", @ANYRES32=r9, @ANYBLOB="00010000", @ANYBLOB="a3e80af0cb2f986d1acd216cc51596d4409de5cb7db9bc9e58d5ec64196990a184ceea266b76dbe00fc3b50d74c7c932c6f2adcf0505df361e59d2fbe6fe497a7ba095308cbf49ede279ad8ae2f5e302d0d63e70cff6331815bf48f392a8d08227200fa34fd8833d12bf7a710a063d74a7bfbe84c22715151d32d88b9dced0679cc391a72bfb38f8214e643e5abfe9daad1eb7259699ddffee4f86bc63d31f4c35aed3590d9f9a9e92762d", @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES16=r8, @ANYBLOB="010027bd24aa5854129748ead78f9c7000fedbdf250d00983a5af6348feeefc5000008000100", @ANYRES32=r9, @ANYBLOB="00010000", @ANYBLOB="a3e80af0cb2f986d1acd216cc51596d4409de5cb7db9bc9e58d5ec64196990a184ceea266b76dbe00fc3b50d74c7c932c6f2adcf0505df361e59d2fbe6fe497a7ba095308cbf49ede279ad8ae2f5e302d0d63e70cff6331815bf48f392a8d08227200fa34fd8833d12bf7a710a063d74a7bfbe84c22715151d32d88b9dced0679cc391a72bfb38f8214e643e5abfe9daad1eb7259699ddffee4f86bc63d31f4c35aed3590d9f9a9e92762d", @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3300d1ff", @ANYRES16=r5, @ANYBLOB="10002cbd7000fcdbdf25530000000400ae00"], 0x18}, 0x1, 0x0, 0x0, 0x40002}, 0x4008000) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f0000000200)={{0x6, 0xffffffffffffffff, 0xee01, 0x800, 0xe9, 0x200, 0x81}, 0x7f, 0x7866, 0x9, 0x7, @raw=0x8, @inferred, 0x7, 0x0, &(0x7f0000000040)="0153a6b3789a69095b10", &(0x7f0000000100)="aefd422501fb00288540657ca4194af0b37fe596cbc78f261113091ea6c66493d3658ab675fd6d181a2da1a9720a043a892c40da36d8b415e5dd7473b5caba50188364eaaa188b9224ca14a7c22b4f991b8b60510a993d7d8293a7feaa4c25787e788fc2c1953dc63a23dd2dce58b6cb7ce52fdb6e55edb9367233994c60b6561e35b933fa016f3ab674f7768ac517069851e6fc92295fe289215527ee2825182fc4b44ad17872b4b9fe1f02a16b72ce37b8201202aea605d99a6d18857cec6fcd672c99d4ac203cea97c3251166227f16bd1816fb055bbf61650f03804f805cf8cb7732ea7ad6c8e363eaba50"}) (async) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f0000000200)={{0x6, 0xffffffffffffffff, 0xee01, 0x800, 0xe9, 0x200, 0x81}, 0x7f, 0x7866, 0x9, 0x7, @raw=0x8, @inferred, 0x7, 0x0, &(0x7f0000000040)="0153a6b3789a69095b10", &(0x7f0000000100)="aefd422501fb00288540657ca4194af0b37fe596cbc78f261113091ea6c66493d3658ab675fd6d181a2da1a9720a043a892c40da36d8b415e5dd7473b5caba50188364eaaa188b9224ca14a7c22b4f991b8b60510a993d7d8293a7feaa4c25787e788fc2c1953dc63a23dd2dce58b6cb7ce52fdb6e55edb9367233994c60b6561e35b933fa016f3ab674f7768ac517069851e6fc92295fe289215527ee2825182fc4b44ad17872b4b9fe1f02a16b72ce37b8201202aea605d99a6d18857cec6fcd672c99d4ac203cea97c3251166227f16bd1816fb055bbf61650f03804f805cf8cb7732ea7ad6c8e363eaba50"}) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f00000002c0)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0x8, 0x1}, &(0x7f0000000080)=0x5, &(0x7f0000000280)=0xb, 0x9, 0x2, 0xa, 0xffffffffffffffff, 0x8, 0xfff9, 0x8, 0x101, @raw=0x7, @raw=0x400}) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x678, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x420, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x419, 0x2, "fb12db00d47e237ddcaa2e1b1b60eec90972c6f630dc2f505c969148d1fb0767b9a07b9fc946c83302906918c0ac5d3a86290d5f94d600f3332b266ea3795d59f11da9fbcc65606f7cc3726f422eedf3f022852e71d10ad59714127a5607c10679a10cc6970506e3e5285812596c094a74c7b16009c2a3108536971487a74c9b51dd9d9bc3960264eb397a73a70352685d6fd28fcd3442ed70f96a0618d6e4b6ebf82d8800f680d700a3803dfcde3e1bd10e820203edfbd748c8121c4757d33f84236226d49bbf2a8c479e2f633af0d72ae27e501f9d7d0dfc2f5453b99d9f228f95022366e5bc80e65e6fb8fde0743ec3d52858ffdfa1b4e1196246651e1f4ed6e29589a67a1a5acfc3a5551d8ffba0f5a14468d826526016b956edf50e34a498569f9250d4155b6d406186f341410e508edfcf1c1bef56ba70f74fc31b8e300a13b5a2018cf7633ccbb127ed1adc7fe4626f5325099fb7ef5ae5085dc93b2e0720c45c5b5152acb9af208944d8ee95658c5d828a799cd20b1a07e947379a6934dca4eff92c2c0541cd946a20fd8ddac9041c43d3d204a8e30639355258cb53607bbe28dd2ba0887c85bc7a496fb6e712c20baa589212ecb4b74aab80d71460a6d1b5bb289a17af91e78e563c391a0a255b6808ea5d983b723c19f18869c793be2beb8963ce985ea9b70b6052df2deb4c2482b5f463eb86d7e5ac2dabf030b7cd35f739a64689a87efc2096eea2e3960d8470323c8f13719e3674803b043f125431b612d6ceca1f95b779193b63c4dd1beb8a0453e54d1190d5e31adcfb8502f444cba1b391f718517c4830db93afbf8873ca04b4c90129d4b7f93c86fc6ed891bf6243d248867c621d7600694b9245a1cd17f4398ba2ae424bf7f2854b3fa835e12c27c853ac9e637433c895a5712092413c39c6fa206030673c38e37e567ef87300e8a83342816c55767b633f4cbc76e6aa2ffae701379c8f0012820b762f891e89a3af5f75f8140dc9a4178a2188275731bf7dccaa9ce529fb15fd88d46ce8c2f62c9fedc28374ecafc0f5dbd2240290bab8bea5bb085813be2337369519e47aac82ab743bec2a5723a80cea0b01c65038fb26a11dd170901867edc1e267ba6fab44cefbba9fb83d66d8bb2cdb6af5d381d6af53dcc74ee90a32b6da8553731d0ef1ea10663370008de1fb513a48d71d9dcb805445d831b3c3ad4efae286a21dfc707fcf24d1ed790c16cc819c6379d6273a6a24a99d35b80b6c0f9eef2b9b405f68c84ee60fefa3d1ea34c659903615b04842b8aa670f5ac3f6e323d57c3448e33ec5bd5e5d2ce18f2a53c0fd3ae167c626f248ea32dc515ed3449f6d53dc3a4305804c94bae6bd1844ea71a0dbbce6a0131c4b3281131cf611dbb2f35565cc472becaad1eb6a7a941c128b639d700406c9ffa495a58aad210119c02e32a0c0b997e45e2e388e148e0893ee1da7dbef240514"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20e, 0x75, 0x0, 0x1, [@typed={0x6, 0xda, 0x0, 0x0, @str='/\x00'}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="191d2e39d12b08077ecf56431109fdc4d45249b1503191f00b125039ff9341c30862fa471b0b94f1952fe8fd0935433f54afd246cfd37b0b162645b34e", @typed={0x8, 0xf1, 0x0, 0x0, @uid=r10}, @generic="f9f0b93dc7b08cc906cf7adfcbcb836937e3e2d0073898a4ebc3d797e0f7e774025359d46d24aeb859df5d4f71ff139f7d", @nested={0x7c, 0x14f, 0x0, 0x1, [@generic="b01f970bc992f47ef4cc21f70e3e512f2633fd2b44b16cd128704112e4bad0844fbc18097558398dabe5f9474783e4e77d7aba98e01e28451070b04fd99a702a8c3cd87f653697e1465b6d90ff4a631661ba36de946d3c425a3e3f3a5d70d94bf9856ce50fcc315e7c3933910b6b22fdaae1036c7cec73bc"]}, @generic="fa286d055bf264efa6ab86e507278170c1b5e041b6e5e754f758550a2b5d2398cd266f60a9efa136a76858f62bb5bb414e20884b01576baad7a18f35e11a19a79434ab0f2cef17bd3884ae9d2d388f53a2d20c8af20d14517b59c75a94eab9051c13e793b2b57e5c02f7f7c9d0289e2f6f700659bc34c355a521f34409bdd94d0fd9e094faeaa45b387d643b9b8aa2c39acfe0790a2d010f768034419ea88eb0445f55333eff7eeb64e46c927a9c2255a77f8191e21a057680bfce11619e60917397676211855f6f4539591a8e57153e2d449017f24e7cd34fb10ee804e09a0484ec43a1", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xa1, 0x0, 0x0, @uid=r11}]}, @NL80211_ATTR_FILS_ERP_RRK={0xe, 0xfc, "ea7b132c86629e99ec8e"}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x9}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x678}, 0x1, 0x0, 0x0, 0x20000800}, 0x20) 2.266608882s ago: executing program 3 (id=3980): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xc, 0x20005, 0x5, 0x14, 0xffffffffffffffff, 0x5) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 2.121418542s ago: executing program 2 (id=3981): openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) rt_sigprocmask$auto(0x2, &(0x7f0000000000)={0x8}, 0x0, 0x8) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) setresuid$auto(0x0, 0x8, 0x8000) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) lseek$auto(r0, 0x9, 0xfc06) fcntl$auto(0xffffffffffffffff, 0x80000000, 0x1) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) arch_prctl$auto(0x1021, 0x3) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/5s\x00', 0x5012c0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.073881726s ago: executing program 1 (id=3982): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC_MASK={0x4}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "fa85f035234647bd04e9d9850f7d73d740cdbed9d74b5552be86fb8aa41245060712b09770733fbfbac9fa04c07ce6aaf05c4834e81da0d3b1855653fa7509e73f278b829181c22f3a6ffdd8a1417572a13d0f51af2a55bee5bf7dc87d681c64b5b4ed450931fcce5b4b887d95444932595e6241c0bd8de7f95036cd5f2ff74a1c3eae16e6d618c1b191e52671675adc2b8fcbab27a736e9e31a1241dbb75004f1f976cb54ce92fa0a73819aa6bcc7ee8b83155b260502e00040305aae8ea4950d94434d9f8b"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x522e}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r1 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x800) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xb}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x7ff}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x6}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf2}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x40) write$auto_ftrace_set_event_pid_fops_trace_events(r1, &(0x7f0000000340)="b449c7f0c468fef820faa28f34a379fb7a6d845166b3db645e8be6261cd6d17da3eab29d90ce08311a6a8dd2889e1e1b46c7cf939ab5cdb32da5d598e51ed2530fa62f4a0432ab527ff7a472279dab7b426ad5f8b0b025d1a5726891d3e55586ad2be1720da2f8bce0ad92b0b851c400c551cdcc7901be3a97092db7f44d3e360daaf8a15489529e82c878d77ef4f7dc5184b43bca06898e04872e11ac7f8231503eaa20a941ef66467ced710f72f0d80f29d0cf81ec222ddf37", 0xba) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r0, 0x81, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SAE_PASSWORD={0x44, 0x115, "e6277a459228ad8bfa790872a9ecd75f40fa7fd5fbbdcdbbbf8cae0f06074eeb4e0d113d2602b440cb14ed3a39284e4c6b73574a097b436e50beef1e779c38f3"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xaa5}]}, 0x60}}, 0x81) r2 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000540)=0x8000000000000000) r3 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/gid_map\x00', 0x24041, 0x0) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r3, 0x1, &(0x7f00000005c0)="5fce389b1886035eb1a07326947435bc829f74e66df68e13b4956409ee87ba724e4a48c66e4b8f28bd64ad4656f213b12708a58833313fea5103f07d0bdb8981b45c117cf1b67468c5bd4a571c5405ca32f5c3326a4362d09c4075da13ddefee3f051dde5a997bb0f27fc14be87217ef4dd7a11c85db7921f7e6252bcf80786c3d62d7767779526ee8868eb395f51fd42c0c409b8336ebc28b96e76bb4848beb7407b8890a996a39c69db18949758a83c8d6130dfd7971c8579d75eb5727a1d1cab361fed033bb28a6408893ab629d6e0a", 0x1000) r4 = geteuid() stat$auto(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0xffffffffffffff0d, 0x7e6, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45, 0x8000000, 0x3ff, 0x7, 0x4, 0x9, 0x8, 0x3e9fcb5}) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2f4, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0xec, 0x0, 0x0, @str='+\x00'}]}, @MACSEC_ATTR_OFFLOAD={0x2d2, 0x9, 0x0, 0x1, [@typed={0xc, 0xdf, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0xf2, 0x5f, 0x0, 0x1, [@generic="3553b8bf83e6977d8e53b315a44d8c49c0d02b9d8c41d3795dd6cebe82ee6984f8e260490bf918712cd0dd63e4b659eedef7a38bb56ee237e16e620fd445b77c0ec5d21684c46ed009f25a2ffc2263e64c6ca8bdf188df2d3be69f4848d35b0ab46eeaeb57a4821444e24233c16a7d9c07a4fc4a4a77144026a359d77356467659e30d077ccd3fba8771808ff44c307e5dae66cd0d33bee33f317fc4f14e0fcebacd25d41029688427a8c573a45bfe2412ab7749f558eb54b901894ebfaa9f64d802f611c5b4ac11c5a25b734baf9747b3dcae71456d395cb4b1c09afd259ac73047", @nested={0x4, 0xf3}, @typed={0x8, 0x76, 0x0, 0x0, @uid=r4}]}, @generic="f564c46d1e4c502b848677fb3c91a1e8d8464d288e7174fbf56eec100b15755dd11d338edcaa8d5795068e988d5799c76b76994cbef8cd7f5dfe03b82bfd50baf23792aa64c265b8e5c8accc14583d239a1a4d2653635747313ea6e4f0aa2c9c14b10e91a562d0c2f0b68a9a4547af25a5045daaf2771a82eb398a7d311f813cd58766d508c2425625f6caa5e0d70d4df9b0eb3356aa2d2edf3a4a96", @typed={0x8, 0xaf, 0x0, 0x0, @uid=r5}, @generic="b8d9223cff21381f00c341532a6d233c8d868f661a8e46ff35aa04b6f848dd6afa8a785d776f31b2e27d76f764b0e1e38b11", @generic="febbf835a2f96079", @typed={0xe4, 0x84, 0x0, 0x0, @binary="b77b243bcc5f295a680b52c7e7a797e6248ef5d473111f42c778eb1f021a928a88c21acde9cffcc61525120a5c5d4b89ea1aa6375a1bc15fa08190111b3ee2e3cd9458daea659aaed2313d491c13d27fc252ea1f671977d17cf9fff3a68ee4890c6c3c1be92a517a8a62dea01bb3ccf98a8c107b7949aa8647379b0e4acefca134fb29f44ed44912319f5211196d22aabb99d8118301f35fccda4ad5cad27220f081afbae51285a03d7f18394b217551935e629b352a9a7944b6e8cbbc0947a826bd932ef13af9f85b359688aeb980d2dd71b39897a67ff13e472a6440290e2f"}, @nested={0xc, 0x67, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x884}, 0x8045) mmap$auto(0x9, 0xfffffffffffff498, 0x6, 0x13, r1, 0x1) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000bc0), r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x85}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2014}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x1) r7 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) read$auto(r7, &(0x7f0000000d40)='*-\x00', 0x3ff) r8 = epoll_create$auto(0x1) read$auto_state_fops_(r2, &(0x7f0000000d80)=""/2, 0x2) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000e00), r2) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x24004015) madvise$auto(0x3, 0x200, 0x2) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040}, 0x804) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r1) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r10, 0x1, 0x70bd2a, 0x12, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xab}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x20000003) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x18, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) sendmsg$auto_NL80211_CMD_EPCS_CFG(r1, &(0x7f0000002340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f0000001280)={0x1060, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x68}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7f}]}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_PMKID={0x1004, 0x55, "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"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "6c7df376bfd32538921e24cdd892081823c76a"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f00000024c0)={@config_section=&(0x7f0000002440)={"88f9233cc6a0d5238f38918f0745dad051c4c2f88f33888c5c6f944cf44dee0b14224b5a30d335eb670241573120414d9afde4d8e3cb6567cdb436a96aef9e19", @params=&(0x7f0000002380)={"c7e0ee001594a9c0582472f4c48bd51443bf6a99218c27d1cff0a0759cbe80737c066242abf2ca6ba3dac5a9b12aeb482212fa18cd6252eea0b4433054a6ac1d", "9609978d6fbdba2a67163cf808b463b27e8e40947f952c0fd6930fe6e669e33eb9918d345be7f3509176055aa57da785b23314e27cd14f21354884dc718ec117", @next, 0x1}, @padding3}, 0xa}) read$auto_proc_page_owner_threshold_(r8, &(0x7f0000002500)=""/4096, 0x1000) ioctl$auto_SW_SYNC_GET_DEADLINE(r8, 0xc0105702, &(0x7f0000003500)={0x0, 0x0, r3}) 1.946583091s ago: executing program 0 (id=3983): socket(0x10, 0x2, 0x4) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10014, 0x80200000008, 0x2, 0x5f, 0x20000000000803}, 0x6f0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0x40000080) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x100, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x400000001, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @raw=0x1}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async, rerun: 32) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async, rerun: 32) madvise$auto(0x2, 0x5c61fa2c, 0xf) (async, rerun: 32) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) (async) write$auto(0x3, 0x0, 0xffd8) 1.763503607s ago: executing program 1 (id=3984): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port7/power/runtime_suspended_time\x00', 0x612262, 0x0) write$auto(r1, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) write$auto(r1, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0)="f98fd098ee741065d9f96157679767c34ca0f25ed200e0ad0eba6acc6975617bed08b1962d6214ce71a8239604548a50851b6da80663be61eabbdbf848657841a86470c1b77ea4c4453c2d28736680caf218883c1e1e49ba93148dc75c8a19", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0), 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x400, 0x1000000005, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f00000003c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x1000087) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r6, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x301802, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0880, 0x0) 819.165977ms ago: executing program 3 (id=3987): r0 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000140)=0x80000001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020005, 0x2, 0x100eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/sctp/snmp\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x7, 0x407ffc) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x802040, 0x0) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x9, 0x0) io_uring_register$auto(0x2, 0x17, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0xf, 0x7d, &(0x7f0000000100)={0x2000f, 0x5, 0x9, 0x7a18}) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x59, 0x2, 0x1, 0x1ff, 0x1, 0xc, 0x0}) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x5}, 0x1) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) socket(0x2, 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x400008, 0x400000000000000a, 0x9b72, 0x2, 0xdd) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x129283, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x3f, 0x9, 0x89}) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40043d04, 0x0) 78.581015ms ago: executing program 0 (id=3988): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) pwritev$auto(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0x100000000}, 0x9, 0x4, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x121082, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 9.730997ms ago: executing program 3 (id=3989): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) mmap$auto(0xa, 0x20009, 0xc, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x800000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(r0, 0x0, 0x10000, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffff8, 0x5, 0xffffffff80000000, 0x5, 0x61, 0x103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) write$auto(0x3, 0x0, 0x3f00) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2c, 0x4, 0xd6) bind$auto(0x3, 0x0, 0x6a) 0s ago: executing program 2 (id=3990): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) prctl$auto(0x3a, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mbind$auto(0xffffffff80000000, 0x3fe0000000, 0x10, &(0x7f0000000040)=0x68, 0x6, 0xf4e) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r1, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev6\x00', 0x80382, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r1, 0x6) socket(0x2, 0x80002, 0x73) r3 = io_uring_setup$auto(0x406, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r4, 0x0, 0x20) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0xffffffff, 0xa, 0x0, 0x7) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket(0x10, 0x2, 0xc) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/rose13/statistics/rx_missed_errors\x00', 0xe3102, 0x0) kernel console output (not intermixed with test programs): entered disabled state [ 166.310598][ T6834] bridge_slave_1: entered allmulticast mode [ 166.319791][ T6834] bridge_slave_1: entered promiscuous mode [ 166.386238][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.403611][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.441809][ T5878] Bluetooth: hci1: command tx timeout [ 166.559101][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 166.786901][ T3004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.870494][ T6834] team0: Port device team_slave_0 added [ 166.925613][ T6834] team0: Port device team_slave_1 added [ 167.061004][ T3004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.291114][ T3004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.470229][ T3004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.515552][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.530210][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.565242][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.581711][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.588965][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.628431][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.675739][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 167.881854][ T5878] Bluetooth: hci2: command tx timeout [ 167.894641][ T6834] hsr_slave_0: entered promiscuous mode [ 167.909534][ T6834] hsr_slave_1: entered promiscuous mode [ 168.279759][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.326140][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.350755][ T6876] bridge_slave_0: entered allmulticast mode [ 168.365414][ T6876] bridge_slave_0: entered promiscuous mode [ 168.425407][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.433484][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.447033][ T6876] bridge_slave_1: entered allmulticast mode [ 168.457716][ T6876] bridge_slave_1: entered promiscuous mode [ 168.521838][ T5878] Bluetooth: hci1: command tx timeout [ 168.877002][ T3004] bridge_slave_1: left allmulticast mode [ 168.889025][ T3004] bridge_slave_1: left promiscuous mode [ 168.921746][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.985877][ T3004] bridge_slave_0: left allmulticast mode [ 168.998244][ T3004] bridge_slave_0: left promiscuous mode [ 169.015529][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.392450][ T6959] FAULT_INJECTION: forcing a failure. [ 169.392450][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 169.464761][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) [ 169.464802][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.464818][ T6959] Call Trace: [ 169.464829][ T6959] [ 169.464839][ T6959] dump_stack_lvl+0x16c/0x1f0 [ 169.464890][ T6959] should_fail_ex+0x512/0x640 [ 169.464936][ T6959] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 169.464970][ T6959] should_failslab+0xc2/0x120 [ 169.465010][ T6959] __kmalloc_cache_noprof+0x6a/0x3e0 [ 169.465039][ T6959] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 169.465080][ T6959] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 169.465122][ T6959] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 169.465166][ T6959] hugetlb_reserve_pages+0x151/0xf40 [ 169.465215][ T6959] ? __vma_enter_locked+0x163/0x3f0 [ 169.465250][ T6959] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 169.465302][ T6959] ? atime_needs_update+0x8b/0x710 [ 169.465358][ T6959] hugetlbfs_file_mmap+0x4a1/0x730 [ 169.465414][ T6959] __mmap_region+0x1311/0x27b0 [ 169.465458][ T6959] ? __pfx___mmap_region+0x10/0x10 [ 169.465506][ T6959] ? is_bpf_text_address+0x94/0x1a0 [ 169.465546][ T6959] ? kernel_text_address+0x8d/0x100 [ 169.465576][ T6959] ? __kernel_text_address+0xd/0x40 [ 169.465603][ T6959] ? unwind_get_return_address+0x59/0xa0 [ 169.465637][ T6959] ? arch_stack_walk+0xa6/0x100 [ 169.465746][ T6959] ? trace_cap_capable+0x18d/0x200 [ 169.465795][ T6959] mmap_region+0x32b/0x3f0 [ 169.465840][ T6959] do_mmap+0xa3e/0x1210 [ 169.465892][ T6959] ? __pfx_do_mmap+0x10/0x10 [ 169.465938][ T6959] ? __pfx_down_write_killable+0x10/0x10 [ 169.465978][ T6959] vm_mmap_pgoff+0x29e/0x470 [ 169.466029][ T6959] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 169.466068][ T6959] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.466114][ T6959] ? hugetlbfs_get_inode+0x31f/0x730 [ 169.466166][ T6959] ksys_mmap_pgoff+0x1c8/0x5c0 [ 169.466217][ T6959] __x64_sys_mmap+0x125/0x190 [ 169.466270][ T6959] do_syscall_64+0xcd/0x490 [ 169.466321][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.466353][ T6959] RIP: 0033:0x7fe66fd8ebe9 [ 169.466379][ T6959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.466407][ T6959] RSP: 002b:00007fe66dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.466434][ T6959] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 169.466452][ T6959] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 169.466469][ T6959] RBP: 00007fe66fe11e19 R08: 0000000000000602 R09: 0000300000000000 [ 169.466488][ T6959] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 169.466505][ T6959] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffc53aa29b8 [ 169.466545][ T6959] [ 169.466557][ T6959] HugeTLB: unable to allocate vma specific lock [ 169.929986][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 170.139070][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.160228][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.181831][ T3004] bond0 (unregistering): Released all slaves [ 170.208882][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.229971][ T6959] bridge_slave_1: left allmulticast mode [ 170.238524][ T6959] bridge_slave_1: left promiscuous mode [ 170.245519][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.287588][ T6959] bridge_slave_0: left allmulticast mode [ 170.293528][ T6959] bridge_slave_0: left promiscuous mode [ 170.303791][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.422467][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.602235][ T5878] Bluetooth: hci1: command tx timeout [ 170.711478][ T6876] team0: Port device team_slave_0 added [ 170.729139][ T6876] team0: Port device team_slave_1 added [ 170.731770][ T6971] capability: warning: `syz.2.187' uses 32-bit capabilities (legacy support in use) [ 170.906072][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.927897][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.973975][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.096056][ T3004] hsr_slave_0: left promiscuous mode [ 171.116813][ T3004] hsr_slave_1: left promiscuous mode [ 171.132818][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.140284][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.167810][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.197714][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.269563][ T3004] veth1_macvtap: left promiscuous mode [ 171.292067][ T3004] veth0_macvtap: left promiscuous mode [ 171.305123][ T3004] veth1_vlan: left promiscuous mode [ 171.305318][ T3004] veth0_vlan: left promiscuous mode [ 171.488850][ T30] audit: type=1800 audit(1757449418.787:4): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.189" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 172.338875][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 172.373929][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 172.683781][ T5878] Bluetooth: hci1: command tx timeout [ 172.714567][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.722103][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.748672][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.948109][ T6876] hsr_slave_0: entered promiscuous mode [ 172.956425][ T6876] hsr_slave_1: entered promiscuous mode [ 172.973657][ T6876] debugfs: 'hsr0' already exists in 'hsr' [ 172.979452][ T6876] Cannot create hsr debugfs directory [ 173.873512][ T6834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.990108][ T6834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.029571][ T6834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.074438][ T6834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.320375][ T7028] zswap: compressor @ not available [ 174.590299][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.643959][ T6876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.660353][ T6876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.681563][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.691158][ T6876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.705537][ T6876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.736516][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.743841][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.767590][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.774896][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.277044][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.318749][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.370835][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.378210][ T6983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.467204][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.474468][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.606696][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.734863][ T6834] veth0_vlan: entered promiscuous mode [ 175.847130][ T6834] veth1_vlan: entered promiscuous mode [ 175.874090][ T7063] netlink: 268 bytes leftover after parsing attributes in process `syz.0.194'. [ 176.156926][ T6834] veth0_macvtap: entered promiscuous mode [ 176.188924][ T6834] veth1_macvtap: entered promiscuous mode [ 176.400342][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.445392][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.536360][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.561971][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.570765][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.620539][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.803545][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.891556][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.904492][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.093961][ T7084] netlink: 206 bytes leftover after parsing attributes in process `syz.2.195'. [ 177.116901][ T6983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.133634][ T6983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.476343][ T7102] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 177.497737][ T6876] veth0_vlan: entered promiscuous mode [ 177.559583][ T6876] veth1_vlan: entered promiscuous mode [ 177.694520][ T6876] veth0_macvtap: entered promiscuous mode [ 177.744183][ T6876] veth1_macvtap: entered promiscuous mode [ 177.815003][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.858444][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.917430][ T3014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.933434][ T3014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.975172][ T3014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.002005][ T3014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.024338][ T6979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.066812][ T6979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.200892][ T6979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.301725][ T6979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.746309][ T7118] kexec: Could not allocate control_code_buffer [ 182.768372][ T7175] FAULT_INJECTION: forcing a failure. [ 182.768372][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 182.784653][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT(full) [ 182.784692][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.784707][ T7175] Call Trace: [ 182.784716][ T7175] [ 182.784725][ T7175] dump_stack_lvl+0x16c/0x1f0 [ 182.784772][ T7175] should_fail_ex+0x512/0x640 [ 182.784814][ T7175] ? fs_reclaim_acquire+0xae/0x150 [ 182.784859][ T7175] should_failslab+0xc2/0x120 [ 182.784894][ T7175] __kmalloc_node_noprof+0xd8/0x500 [ 182.784928][ T7175] ? lockdep_init_map_type+0x5c/0x280 [ 182.784964][ T7175] ? mempool_init_node+0x11f/0x6e0 [ 182.785017][ T7175] ? __init_waitqueue_head+0xca/0x150 [ 182.785059][ T7175] ? __pfx_mempool_kmalloc+0x10/0x10 [ 182.785097][ T7175] ? __pfx_mempool_kfree+0x10/0x10 [ 182.785133][ T7175] mempool_init_node+0x11f/0x6e0 [ 182.785182][ T7175] ? __pfx_mempool_kmalloc+0x10/0x10 [ 182.785218][ T7175] ? __pfx_mempool_kfree+0x10/0x10 [ 182.785258][ T7175] mempool_init_noprof+0x3a/0x50 [ 182.785288][ T7175] do_fanotify_mark+0x2db2/0x3600 [ 182.785328][ T7175] ? __pfx_do_fanotify_mark+0x10/0x10 [ 182.785359][ T7175] ? __x64_sys_futex+0x1e9/0x4c0 [ 182.785387][ T7175] ? xfd_validate_state+0x61/0x180 [ 182.785413][ T7175] ? __pfx_ksys_write+0x10/0x10 [ 182.785438][ T7175] __x64_sys_fanotify_mark+0xbd/0x160 [ 182.785467][ T7175] ? do_syscall_64+0x91/0x490 [ 182.785494][ T7175] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.785519][ T7175] do_syscall_64+0xcd/0x490 [ 182.785548][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.785567][ T7175] RIP: 0033:0x7fe97d18ebe9 [ 182.785582][ T7175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.785600][ T7175] RSP: 002b:00007fe97e0ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 182.785617][ T7175] RAX: ffffffffffffffda RBX: 00007fe97d3c5fa0 RCX: 00007fe97d18ebe9 [ 182.785629][ T7175] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 182.785639][ T7175] RBP: 00007fe97d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 182.785649][ T7175] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 182.785660][ T7175] R13: 00007fe97d3c6038 R14: 00007fe97d3c5fa0 R15: 00007ffd77297968 [ 182.785682][ T7175] [ 185.031298][ T7212] vivid-003: ================= START STATUS ================= [ 185.089377][ T7212] vivid-003: Radio HW Seek Mode: Bounded [ 185.096988][ T7212] vivid-003: Radio Programmable HW Seek: false [ 185.103503][ T7212] vivid-003: RDS Rx I/O Mode: Block I/O [ 185.124175][ T7212] vivid-003: Generate RBDS Instead of RDS: false [ 185.124316][ T7217] vivid-007: ================= START STATUS ================= [ 185.130683][ T7212] vivid-003: RDS Reception: true [ 185.258124][ T7217] vivid-007: Generate PTS: [ 185.299171][ T7212] vivid-003: RDS Program Type: 0 inactive [ 185.392148][ T7212] vivid-003: RDS PS Name: inactive [ 185.499090][ T7212] vivid-003: RDS Radio Text: [ 185.499122][ T7217] true [ 185.507443][ T7217] vivid-007: Generate SCR: [ 185.507453][ T7212] inactive [ 185.515248][ T7212] vivid-003: RDS Traffic Announcement: false [ 185.515279][ T7217] true [ 185.521266][ T7212] inactive [ 185.521287][ T7212] vivid-003: RDS Traffic Program: false inactive [ 185.521326][ T7212] vivid-003: RDS Music: [ 185.524803][ T7217] tpg source WxH: 320x240 (Y'CbCr) [ 185.527362][ T7212] false inactive [ 185.543666][ T7217] tpg field: 1 [ 185.543683][ T7217] tpg crop: (0,0)/320x240 [ 185.547225][ T7212] vivid-003: ================== END STATUS ================== [ 185.570698][ T7217] tpg compose: (0,0)/320x240 [ 185.625059][ T7217] tpg colorspace: 8 [ 185.630074][ T7217] tpg transfer function: 0/0 [ 185.850162][ T7217] tpg Y'CbCr encoding: 0/0 [ 185.854825][ T7217] tpg quantization: 0/0 [ 185.859553][ T7217] tpg RGB range: 0/2 [ 185.866460][ T7217] vivid-007: ================== END STATUS ================== [ 187.048891][ T7228] syz.2.209 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.952268][ T7256] Invalid ELF header magic: != ELF [ 188.607032][ T7263] netlink: 338 bytes leftover after parsing attributes in process `syz.3.215'. [ 188.652334][ T7268] netlink: 338 bytes leftover after parsing attributes in process `syz.3.215'. [ 189.878714][ T7282] blktrace: Concurrent blktraces are not allowed on ram7 [ 192.694078][ T7311] Invalid ELF header magic: != ELF [ 192.891167][ T7317] FAULT_INJECTION: forcing a failure. [ 192.891167][ T7317] name fail_futex, interval 1, probability 0, space 0, times 1 [ 192.904503][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) [ 192.904530][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.904540][ T7317] Call Trace: [ 192.904546][ T7317] [ 192.904554][ T7317] dump_stack_lvl+0x16c/0x1f0 [ 192.904588][ T7317] should_fail_ex+0x512/0x640 [ 192.904620][ T7317] get_futex_key+0x1d0/0x1560 [ 192.904645][ T7317] ? __pfx_get_futex_key+0x10/0x10 [ 192.904665][ T7317] ? rcu_is_watching+0x12/0xc0 [ 192.904684][ T7317] ? kfree+0x24f/0x4d0 [ 192.904707][ T7317] futex_wake+0xea/0x530 [ 192.904735][ T7317] ? __pfx_futex_wake+0x10/0x10 [ 192.904764][ T7317] ? kmem_cache_free+0x2d1/0x4d0 [ 192.904799][ T7317] do_futex+0x1e3/0x350 [ 192.904823][ T7317] ? __pfx_do_futex+0x10/0x10 [ 192.904848][ T7317] ? __fget_files+0x20e/0x3c0 [ 192.904871][ T7317] __x64_sys_futex+0x1e0/0x4c0 [ 192.904898][ T7317] ? __pfx___x64_sys_futex+0x10/0x10 [ 192.904924][ T7317] ? __pfx_do_preadv+0x10/0x10 [ 192.904950][ T7317] do_syscall_64+0xcd/0x490 [ 192.904981][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.905000][ T7317] RIP: 0033:0x7f74ed38ebe9 [ 192.905015][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.905032][ T7317] RSP: 002b:00007f74ee1ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.905050][ T7317] RAX: ffffffffffffffda RBX: 00007f74ed5c5fa8 RCX: 00007f74ed38ebe9 [ 192.905061][ T7317] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f74ed5c5fac [ 192.905072][ T7317] RBP: 00007f74ed5c5fa0 R08: 00007f74ee1f0000 R09: 0000000000000000 [ 192.905082][ T7317] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 192.905093][ T7317] R13: 00007f74ed5c6038 R14: 00007ffe03536820 R15: 00007ffe03536908 [ 192.905114][ T7317] [ 193.333039][ T7317] FAULT_INJECTION: forcing a failure. [ 193.333039][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 193.404526][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) [ 193.404665][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.404679][ T7317] Call Trace: [ 193.404689][ T7317] [ 193.404697][ T7317] dump_stack_lvl+0x16c/0x1f0 [ 193.404741][ T7317] should_fail_ex+0x512/0x640 [ 193.404799][ T7317] ? fs_reclaim_acquire+0xae/0x150 [ 193.404829][ T7317] ? ima_alloc_init_template+0xb5/0x720 [ 193.404856][ T7317] should_failslab+0xc2/0x120 [ 193.404880][ T7317] __kmalloc_noprof+0xd2/0x510 [ 193.404908][ T7317] ima_alloc_init_template+0xb5/0x720 [ 193.404931][ T7317] ? __pfx_d_absolute_path+0x10/0x10 [ 193.404957][ T7317] ? rcu_is_watching+0x12/0xc0 [ 193.404979][ T7317] ima_store_measurement+0x1eb/0x5c0 [ 193.405007][ T7317] ? __pfx_ima_store_measurement+0x10/0x10 [ 193.405032][ T7317] ? vfs_getxattr_alloc+0xec/0x340 [ 193.405059][ T7317] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 193.405089][ T7317] process_measurement+0x1ddb/0x23e0 [ 193.405122][ T7317] ? __pfx_process_measurement+0x10/0x10 [ 193.405145][ T7317] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 193.405171][ T7317] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.405201][ T7317] ? tracing_open+0xb13/0xdf0 [ 193.405243][ T7317] ? tracing_open+0x1d6/0xdf0 [ 193.405262][ T7317] ? inode_to_bdi+0x9e/0x160 [ 193.405290][ T7317] ima_file_check+0xc5/0x110 [ 193.405310][ T7317] ? __pfx_ima_file_check+0x10/0x10 [ 193.405335][ T7317] security_file_post_open+0x8e/0x210 [ 193.405361][ T7317] path_openat+0x1404/0x2cb0 [ 193.405390][ T7317] ? __pfx_path_openat+0x10/0x10 [ 193.405418][ T7317] do_filp_open+0x20b/0x470 [ 193.405441][ T7317] ? __pfx_do_filp_open+0x10/0x10 [ 193.405504][ T7317] ? alloc_fd+0x471/0x7d0 [ 193.405531][ T7317] do_sys_openat2+0x11b/0x1d0 [ 193.405560][ T7317] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.405597][ T7317] __x64_sys_openat+0x174/0x210 [ 193.405626][ T7317] ? __pfx___x64_sys_openat+0x10/0x10 [ 193.405664][ T7317] do_syscall_64+0xcd/0x490 [ 193.405695][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.405714][ T7317] RIP: 0033:0x7f74ed38ebe9 [ 193.405729][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.405747][ T7317] RSP: 002b:00007f74ee1ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.405773][ T7317] RAX: ffffffffffffffda RBX: 00007f74ed5c5fa0 RCX: 00007f74ed38ebe9 [ 193.405785][ T7317] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 193.405796][ T7317] RBP: 00007f74ed411e19 R08: 0000000000000000 R09: 0000000000000000 [ 193.405806][ T7317] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000000 [ 193.405817][ T7317] R13: 00007f74ed5c6038 R14: 00007f74ed5c5fa0 R15: 00007ffe03536908 [ 193.405841][ T7317] [ 193.407569][ T30] audit: type=1804 audit(1757449440.707:5): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.226" name="/newroot/sys/kernel/debug/tracing/trace" dev="tracefs" ino=1127 res=0 errno=0 [ 194.030888][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 194.054519][ T7316] veth0_vlan: entered allmulticast mode [ 194.524181][ T7330] zero sized request [ 195.966262][ T7366] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 196.268242][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 196.278532][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 197.082692][ T7367] nvme_fabrics: missing parameter 'transport=%s' [ 197.089352][ T7367] nvme_fabrics: missing parameter 'nqn=%s' [ 198.113184][ T30] audit: type=1804 audit(1757449445.397:6): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.238" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=26 res=1 errno=0 [ 198.637880][ T7397] Invalid ELF header magic: != ELF [ 199.644938][ T7408] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 199.717294][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'. [ 199.727188][ T7404] veth0_vlan: entered allmulticast mode [ 200.125375][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.125474][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.873648][ T7427] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 201.478638][ T7421] serio: Serial port pty6 [ 202.101950][ T7440] warning: `syz.2.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.422020][ T7427] netlink: zone id is out of range [ 202.431260][ T7427] netlink: zone id is out of range [ 202.547752][ T7427] netlink: zone id is out of range [ 202.584732][ T7427] netlink: zone id is out of range [ 202.604692][ T7427] netlink: zone id is out of range [ 202.623149][ T7447] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 202.695470][ T7427] netlink: zone id is out of range [ 202.724902][ T7427] netlink: zone id is out of range [ 202.743861][ T7427] netlink: zone id is out of range [ 202.788840][ T7427] netlink: zone id is out of range [ 202.823073][ T7427] netlink: zone id is out of range [ 203.515309][ T7463] Invalid ELF header magic: != ELF [ 203.652219][ T7475] random: crng reseeded on system resumption [ 205.531471][ T7503] vivid-007: ================= START STATUS ================= [ 205.539705][ T7503] vivid-007: Generate PTS: true [ 205.554033][ T7503] vivid-007: Generate SCR: true [ 205.605697][ T7503] tpg source WxH: 320x240 (Y'CbCr) [ 205.610971][ T7503] tpg field: 1 [ 205.614473][ T7503] tpg crop: (0,0)/320x240 [ 205.619248][ T7503] tpg compose: (0,0)/320x240 [ 205.717907][ T7503] tpg colorspace: 8 [ 205.768866][ T7503] tpg transfer function: 0/0 [ 205.791499][ T7503] tpg Y'CbCr encoding: 0/0 [ 205.807739][ T7503] tpg quantization: 0/0 [ 205.827637][ T7503] tpg RGB range: 0/2 [ 205.868126][ T7503] vivid-007: ================== END STATUS ================== [ 208.212853][ T5878] Bluetooth: hci0: unexpected subevent 0x05 length: 123 > 12 [ 208.846638][ T30] audit: type=1800 audit(1757449456.147:7): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.269" name="members" dev="configfs" ino=17417 res=0 errno=0 [ 210.291870][ T5878] Bluetooth: hci0: command tx timeout [ 211.943147][ T7589] random: crng reseeded on system resumption [ 212.983163][ T7598] netlink: 184 bytes leftover after parsing attributes in process `syz.2.282'. [ 213.052801][ T7598] FAULT_INJECTION: forcing a failure. [ 213.052801][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 213.192452][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(full) [ 213.192493][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.192511][ T7598] Call Trace: [ 213.192521][ T7598] [ 213.192534][ T7598] dump_stack_lvl+0x16c/0x1f0 [ 213.192585][ T7598] should_fail_ex+0x512/0x640 [ 213.192627][ T7598] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 213.192664][ T7598] should_failslab+0xc2/0x120 [ 213.192692][ T7598] __kmalloc_cache_node_noprof+0x6d/0x420 [ 213.192715][ T7598] ? __get_vm_area_node+0x101/0x330 [ 213.192755][ T7598] __get_vm_area_node+0x101/0x330 [ 213.192787][ T7598] __vmalloc_node_range_noprof+0x271/0x14b0 [ 213.192807][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.192829][ T7598] ? do_syscall_64+0xcd/0x490 [ 213.192857][ T7598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.192882][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.192910][ T7598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.192936][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.192958][ T7598] __vmalloc_node_noprof+0xad/0xf0 [ 213.192979][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.193003][ T7598] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.193029][ T7598] bpf_prog_alloc+0x3b/0x230 [ 213.193051][ T7598] bpf_prog_create+0xa5/0x240 [ 213.193084][ T7598] get_filter+0x122/0x1b0 [ 213.193109][ T7598] ? __pfx_get_filter+0x10/0x10 [ 213.193139][ T7598] ? _copy_from_user+0x59/0xd0 [ 213.193159][ T7598] ppp_ioctl+0xb96/0x2670 [ 213.193189][ T7598] ? find_held_lock+0x2b/0x80 [ 213.193207][ T7598] ? __pfx_ppp_ioctl+0x10/0x10 [ 213.193239][ T7598] ? __fget_files+0x20e/0x3c0 [ 213.193263][ T7598] ? __pfx_ppp_ioctl+0x10/0x10 [ 213.193292][ T7598] __x64_sys_ioctl+0x18e/0x210 [ 213.193323][ T7598] do_syscall_64+0xcd/0x490 [ 213.193352][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.193370][ T7598] RIP: 0033:0x7fe66fd8ebe9 [ 213.193386][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.193403][ T7598] RSP: 002b:00007fe66dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.193421][ T7598] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 213.193433][ T7598] RDX: 0000200000000040 RSI: 0000000040107447 RDI: 0000000000000003 [ 213.193444][ T7598] RBP: 00007fe66fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.193454][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.193464][ T7598] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffc53aa29b8 [ 213.193490][ T7598] [ 213.193659][ T7598] syz.2.282: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.502697][ T7600] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 213.529045][ T7598] [ 213.531436][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(full) [ 213.531478][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.531503][ T7598] Call Trace: [ 213.531513][ T7598] [ 213.531525][ T7598] dump_stack_lvl+0x16c/0x1f0 [ 213.531578][ T7598] warn_alloc+0x248/0x3a0 [ 213.531619][ T7598] ? __pfx_warn_alloc+0x10/0x10 [ 213.531662][ T7598] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 213.531706][ T7598] ? __kasan_kmalloc+0x8a/0xb0 [ 213.531738][ T7598] ? __get_vm_area_node+0x208/0x330 [ 213.531792][ T7598] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 213.531820][ T7598] ? do_syscall_64+0xcd/0x490 [ 213.531863][ T7598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.531905][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.531953][ T7598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.531999][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.532036][ T7598] __vmalloc_node_noprof+0xad/0xf0 [ 213.532065][ T7598] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.532107][ T7598] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 213.532150][ T7598] bpf_prog_alloc+0x3b/0x230 [ 213.532189][ T7598] bpf_prog_create+0xa5/0x240 [ 213.532241][ T7598] get_filter+0x122/0x1b0 [ 213.532282][ T7598] ? __pfx_get_filter+0x10/0x10 [ 213.532333][ T7598] ? _copy_from_user+0x59/0xd0 [ 213.532368][ T7598] ppp_ioctl+0xb96/0x2670 [ 213.532419][ T7598] ? find_held_lock+0x2b/0x80 [ 213.532448][ T7598] ? __pfx_ppp_ioctl+0x10/0x10 [ 213.532512][ T7598] ? __fget_files+0x20e/0x3c0 [ 213.532553][ T7598] ? __pfx_ppp_ioctl+0x10/0x10 [ 213.532602][ T7598] __x64_sys_ioctl+0x18e/0x210 [ 213.532653][ T7598] do_syscall_64+0xcd/0x490 [ 213.532702][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.532732][ T7598] RIP: 0033:0x7fe66fd8ebe9 [ 213.532757][ T7598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.532786][ T7598] RSP: 002b:00007fe66dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.532815][ T7598] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 213.532834][ T7598] RDX: 0000200000000040 RSI: 0000000040107447 RDI: 0000000000000003 [ 213.532853][ T7598] RBP: 00007fe66fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.532870][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.532888][ T7598] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffc53aa29b8 [ 213.532929][ T7598] [ 213.995639][ T7598] Mem-Info: [ 213.999004][ T7598] active_anon:10298 inactive_anon:0 isolated_anon:0 [ 213.999004][ T7598] active_file:11576 inactive_file:50555 isolated_file:0 [ 213.999004][ T7598] unevictable:768 dirty:415 writeback:0 [ 213.999004][ T7598] slab_reclaimable:11214 slab_unreclaimable:93990 [ 213.999004][ T7598] mapped:26212 shmem:1360 pagetables:1205 [ 213.999004][ T7598] sec_pagetables:0 bounce:0 [ 213.999004][ T7598] kernel_misc_reclaimable:0 [ 213.999004][ T7598] free:1303806 free_pcp:23374 free_cma:0 [ 214.046321][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.081778][ T7598] Node 0 active_anon:35192kB inactive_anon:0kB active_file:37856kB inactive_file:211664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102216kB dirty:11852kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11748kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.126349][ T7608] __vm_enough_memory: pid: 7608, comm: syz.0.284, bytes: 4398046511104 not enough memory for the allocation [ 214.198196][ T7598] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:532kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.228493][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.240836][ T7598] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.323294][ T7598] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 214.372001][ T7598] Node 0 DMA32 free:1348944kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34544kB inactive_anon:0kB active_file:37856kB inactive_file:212404kB unevictable:1536kB writepending:13332kB present:3129332kB managed:2539556kB mlocked:0kB bounce:0kB free_pcp:40192kB local_pcp:22760kB free_cma:0kB [ 214.756566][ T7603] zswap: compressor not available [ 214.885364][ T7620] netlink: 330 bytes leftover after parsing attributes in process `syz.0.286'. [ 214.913240][ T7598] lowmem_reserve[]: 0 0 1 1 1 [ 214.918243][ T7598] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 215.032067][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 215.037090][ T7598] Node 1 Normal free:3851644kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:668kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51760kB local_pcp:22504kB free_cma:0kB [ 215.068820][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.088110][ T7598] lowmem_reserve[]: 0 0 0 0 0 [ 215.093042][ T7598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.112012][ T7598] Node 0 DMA32: 2189*4kB (UME) 1222*8kB (UME) 873*16kB (UME) 880*32kB (UME) 450*64kB (UME) 282*128kB (UME) 99*256kB (UME) 27*512kB (UME) 16*1024kB (M) 5*2048kB (UME) 286*4096kB (M) = 1362804kB [ 215.227110][ T7598] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 215.288407][ T7598] Node 1 Normal: 7*4kB (UE) 8*8kB (UE) 8*16kB (UE) 31*32kB (UE) 15*64kB (UME) 6*128kB (UE) 4*256kB (UE) 5*512kB (UE) 1*1024kB (U) 3*2048kB (UM) 937*4096kB (UM) = 3851644kB [ 215.326798][ T7598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.337218][ T7598] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 215.347000][ T7598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.372350][ T7598] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 215.394314][ T7598] 61347 total pagecache pages [ 215.422691][ T7598] 5 pages in swap cache [ 215.426915][ T7598] Free swap = 122800kB [ 215.431205][ T7598] Total swap = 124996kB [ 215.437491][ T7598] 2097051 pages RAM [ 215.442843][ T7598] 0 pages HighMem/MovableOnly [ 215.464069][ T7598] 430200 pages reserved [ 215.500184][ T7598] 0 pages cma reserved [ 216.660548][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 216.854025][ T7661] FAULT_INJECTION: forcing a failure. [ 216.854025][ T7661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.890714][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(full) [ 216.890753][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.890769][ T7661] Call Trace: [ 216.890779][ T7661] [ 216.890790][ T7661] dump_stack_lvl+0x16c/0x1f0 [ 216.890839][ T7661] should_fail_ex+0x512/0x640 [ 216.890891][ T7661] _copy_to_user+0x32/0xd0 [ 216.890926][ T7661] simple_read_from_buffer+0xcb/0x170 [ 216.890960][ T7661] proc_fail_nth_read+0x197/0x240 [ 216.890994][ T7661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.891030][ T7661] ? rw_verify_area+0xcf/0x6c0 [ 216.891060][ T7661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.891092][ T7661] vfs_read+0x1e4/0xcf0 [ 216.891142][ T7661] ? __pfx___mutex_lock+0x10/0x10 [ 216.891187][ T7661] ? __pfx_vfs_read+0x10/0x10 [ 216.891234][ T7661] ? __fget_files+0x20e/0x3c0 [ 216.891281][ T7661] ksys_read+0x12a/0x250 [ 216.891314][ T7661] ? __pfx_ksys_read+0x10/0x10 [ 216.891348][ T7661] ? fput+0x9b/0xd0 [ 216.891402][ T7661] do_syscall_64+0xcd/0x490 [ 216.891457][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.891486][ T7661] RIP: 0033:0x7fe97d18d5fc [ 216.891511][ T7661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.891538][ T7661] RSP: 002b:00007fe97e0ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.891565][ T7661] RAX: ffffffffffffffda RBX: 00007fe97d3c5fa0 RCX: 00007fe97d18d5fc [ 216.891582][ T7661] RDX: 000000000000000f RSI: 00007fe97e0ed0a0 RDI: 0000000000000004 [ 216.891599][ T7661] RBP: 00007fe97e0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 216.891615][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.891631][ T7661] R13: 00007fe97d3c6038 R14: 00007fe97d3c5fa0 R15: 00007ffd77297968 [ 216.891669][ T7661] [ 217.411278][ T7669] Invalid ELF header magic: != ELF [ 217.564097][ T5187] Bluetooth: hci3: command 0x0406 tx timeout [ 217.570277][ T5187] Bluetooth: hci0: command 0x0406 tx timeout [ 218.900796][ T7703] syz.0.298 uses obsolete (PF_INET,SOCK_PACKET) [ 220.552236][ T7721] random: crng reseeded on system resumption [ 222.248063][ T7777] binder: 7775:7777 ioctl 40046210 0 returned -14 [ 223.206116][ T7791] Invalid ELF header magic: != ELF [ 223.525935][ T5868] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12 [ 223.538363][ T7801] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    getty: ttyS0: read error: Resource temporarily unavailable syzkaller syzkaller login: [ 241.021953][ T8116] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 242.680972][ T8144] Invalid ELF header magic: != ELF [ 244.568294][ T8158] ima: policy update failed [ 244.626421][ T30] audit: type=1802 audit(41982.834:8): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.384" res=0 errno=0 [ 245.149412][ T8183] sysfs_service_op_show: Client not running :-5: [ 246.380463][ T8199] netlink: 'syz.1.391': attribute type 11 has an invalid length. [ 251.723877][ T8257] Invalid ELF header magic: != ELF [ 253.726084][ T5868] Bluetooth: hci0: Malformed Event: 0x02 [ 254.514522][ T8294] mkiss: ax0: crc mode is auto. [ 255.284226][ T8300] mtrr: base(0x100000000) is not aligned on a size(0x0000) boundary [ 259.971133][ T30] audit: type=1400 audit(41998.193:9): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8394 comm="syz.2.430" [ 260.291798][ T8407] FAULT_INJECTION: forcing a failure. [ 260.291798][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 260.320473][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) [ 260.320514][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.320529][ T8407] Call Trace: [ 260.320537][ T8407] [ 260.320549][ T8407] dump_stack_lvl+0x16c/0x1f0 [ 260.320598][ T8407] should_fail_ex+0x512/0x640 [ 260.320642][ T8407] ? fs_reclaim_acquire+0xae/0x150 [ 260.320689][ T8407] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 260.320728][ T8407] should_failslab+0xc2/0x120 [ 260.320764][ T8407] __kmalloc_noprof+0xd2/0x510 [ 260.320805][ T8407] tomoyo_realpath_from_path+0xc2/0x6e0 [ 260.320860][ T8407] tomoyo_check_open_permission+0x2ab/0x3c0 [ 260.320900][ T8407] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 260.320978][ T8407] ? do_raw_spin_lock+0x12c/0x2b0 [ 260.321038][ T8407] tomoyo_file_open+0x6b/0x90 [ 260.321070][ T8407] security_file_open+0x84/0x1e0 [ 260.321113][ T8407] do_dentry_open+0x596/0x1530 [ 260.321163][ T8407] vfs_open+0x82/0x3f0 [ 260.321224][ T8407] path_openat+0x1de4/0x2cb0 [ 260.321275][ T8407] ? __pfx_path_openat+0x10/0x10 [ 260.321323][ T8407] do_filp_open+0x20b/0x470 [ 260.321360][ T8407] ? __pfx_do_filp_open+0x10/0x10 [ 260.321426][ T8407] ? alloc_fd+0x471/0x7d0 [ 260.321472][ T8407] do_sys_openat2+0x11b/0x1d0 [ 260.321517][ T8407] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.321579][ T8407] __x64_sys_openat+0x174/0x210 [ 260.321629][ T8407] ? __pfx___x64_sys_openat+0x10/0x10 [ 260.321687][ T8407] do_syscall_64+0xcd/0x490 [ 260.321733][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.321762][ T8407] RIP: 0033:0x7fe97d18ebe9 [ 260.321786][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.321813][ T8407] RSP: 002b:00007fe97e0cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.321839][ T8407] RAX: ffffffffffffffda RBX: 00007fe97d3c6090 RCX: 00007fe97d18ebe9 [ 260.321857][ T8407] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 260.321874][ T8407] RBP: 00007fe97d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 260.321891][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.321907][ T8407] R13: 00007fe97d3c6128 R14: 00007fe97d3c6090 R15: 00007ffd77297968 [ 260.321946][ T8407] [ 260.667247][ T8407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.571026][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.577676][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.105593][ T8451] futex_wake_op: syz.2.439 tries to shift op by -2048; fix this program [ 263.165863][ T8451] futex_wake_op: syz.2.439 tries to shift op by -2048; fix this program [ 263.369090][ T8460] FAULT_INJECTION: forcing a failure. [ 263.369090][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 263.444590][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.1.440 Not tainted syzkaller #0 PREEMPT(full) [ 263.444621][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.444632][ T8460] Call Trace: [ 263.444641][ T8460] [ 263.444649][ T8460] dump_stack_lvl+0x16c/0x1f0 [ 263.444686][ T8460] should_fail_ex+0x512/0x640 [ 263.444717][ T8460] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 263.444744][ T8460] should_failslab+0xc2/0x120 [ 263.444768][ T8460] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 263.444790][ T8460] ? kcm_create+0x11e/0x690 [ 263.444815][ T8460] kcm_create+0x11e/0x690 [ 263.444839][ T8460] __sock_create+0x335/0x8d0 [ 263.444867][ T8460] __sys_socket+0x14d/0x260 [ 263.444889][ T8460] ? __pfx___sys_socket+0x10/0x10 [ 263.444918][ T8460] ? xfd_validate_state+0x61/0x180 [ 263.444946][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 263.444974][ T8460] __x64_sys_socket+0x72/0xb0 [ 263.444994][ T8460] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.445022][ T8460] do_syscall_64+0xcd/0x490 [ 263.445056][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.445080][ T8460] RIP: 0033:0x7f74ed38ebe9 [ 263.445095][ T8460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.445112][ T8460] RSP: 002b:00007f74ee1ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 263.445130][ T8460] RAX: ffffffffffffffda RBX: 00007f74ed5c5fa0 RCX: 00007f74ed38ebe9 [ 263.445143][ T8460] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 263.445155][ T8460] RBP: 00007f74ed411e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.445166][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.445176][ T8460] R13: 00007f74ed5c6038 R14: 00007f74ed5c5fa0 R15: 00007ffe03536908 [ 263.445198][ T8460] [ 269.198436][ T8510] Invalid ELF header magic: != ELF [ 269.885039][ T8499] kexec: Could not allocate control_code_buffer [ 273.445672][ T8539] netlink: 268 bytes leftover after parsing attributes in process `syz.3.456'. [ 274.332677][ T8549] Invalid ELF header magic: != ELF [ 277.905838][ T8596] syz.2.466(8596): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 281.131070][ T8642] Invalid ELF header magic: != ELF [ 284.126190][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 286.215932][ T8725] FAULT_INJECTION: forcing a failure. [ 286.215932][ T8725] name failslab, interval 1, probability 0, space 0, times 0 [ 286.246536][ T8725] CPU: 0 UID: 0 PID: 8725 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT(full) [ 286.246580][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.246598][ T8725] Call Trace: [ 286.246607][ T8725] [ 286.246619][ T8725] dump_stack_lvl+0x16c/0x1f0 [ 286.246672][ T8725] should_fail_ex+0x512/0x640 [ 286.246718][ T8725] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 286.246761][ T8725] should_failslab+0xc2/0x120 [ 286.246803][ T8725] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 286.246841][ T8725] ? kcm_create+0x11e/0x690 [ 286.246891][ T8725] kcm_create+0x11e/0x690 [ 286.246930][ T8725] __sock_create+0x335/0x8d0 [ 286.246975][ T8725] __sys_socket+0x14d/0x260 [ 286.247013][ T8725] ? __pfx___sys_socket+0x10/0x10 [ 286.247050][ T8725] ? xfd_validate_state+0x61/0x180 [ 286.247095][ T8725] ? __pfx_ksys_write+0x10/0x10 [ 286.247140][ T8725] __x64_sys_socket+0x72/0xb0 [ 286.247175][ T8725] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.247217][ T8725] do_syscall_64+0xcd/0x490 [ 286.247265][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.247293][ T8725] RIP: 0033:0x7fe66fd8ebe9 [ 286.247318][ T8725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.247346][ T8725] RSP: 002b:00007fe66dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 286.247375][ T8725] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 286.247394][ T8725] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 286.247411][ T8725] RBP: 00007fe66fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 286.247428][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.247453][ T8725] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffc53aa29b8 [ 286.247495][ T8725] [ 286.623698][ T8719] Invalid ELF header magic: != ELF [ 286.849095][ T8725] FAULT_INJECTION: forcing a failure. [ 286.849095][ T8725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.862839][ T8725] CPU: 0 UID: 0 PID: 8725 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT(full) [ 286.862875][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.862886][ T8725] Call Trace: [ 286.862893][ T8725] [ 286.862900][ T8725] dump_stack_lvl+0x16c/0x1f0 [ 286.862936][ T8725] should_fail_ex+0x512/0x640 [ 286.862972][ T8725] _copy_to_iter+0x29f/0x1710 [ 286.862997][ T8725] ? chacha_block_generic+0x211/0x330 [ 286.863024][ T8725] ? __pfx__copy_to_iter+0x10/0x10 [ 286.863049][ T8725] ? __pfx___might_resched+0x10/0x10 [ 286.863069][ T8725] ? crng_make_state+0x48e/0x6d0 [ 286.863093][ T8725] get_random_bytes_user+0x17f/0x3c0 [ 286.863116][ T8725] ? __pfx_get_random_bytes_user+0x10/0x10 [ 286.863142][ T8725] ? do_futex+0x122/0x350 [ 286.863172][ T8725] ? import_ubuf+0x1b6/0x220 [ 286.863192][ T8725] __x64_sys_getrandom+0x183/0x290 [ 286.863215][ T8725] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 286.863241][ T8725] ? syscall_user_dispatch+0x78/0x140 [ 286.863279][ T8725] do_syscall_64+0xcd/0x490 [ 286.863310][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.863329][ T8725] RIP: 0033:0x7fe66fd8ebe9 [ 286.863346][ T8725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.863368][ T8725] RSP: 002b:00007fe66dff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 286.863387][ T8725] RAX: ffffffffffffffda RBX: 00007fe66ffc5fa0 RCX: 00007fe66fd8ebe9 [ 286.863399][ T8725] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 286.863409][ T8725] RBP: 00007fe66fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 286.863420][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.863430][ T8725] R13: 00007fe66ffc6038 R14: 00007fe66ffc5fa0 R15: 00007ffc53aa29b8 [ 286.863453][ T8725] [ 289.244403][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 289.519471][ T8756] ptp ptp0: only physical clock in use now [ 290.556426][ T8770] block nbd8: NBD_DISCONNECT [ 290.589142][ T8772] block nbd8: NBD_DISCONNECT [ 291.227423][ T8781] Invalid ELF header magic: != ELF [ 292.650413][ T8805] syz.0.512: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.751861][ T8805] CPU: 0 UID: 0 PID: 8805 Comm: syz.0.512 Not tainted syzkaller #0 PREEMPT(full) [ 292.751904][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.751921][ T8805] Call Trace: [ 292.751931][ T8805] [ 292.751944][ T8805] dump_stack_lvl+0x16c/0x1f0 [ 292.751998][ T8805] warn_alloc+0x248/0x3a0 [ 292.752042][ T8805] ? __pfx_warn_alloc+0x10/0x10 [ 292.752109][ T8805] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 292.752140][ T8805] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 292.752175][ T8805] ? __pfx___might_resched+0x10/0x10 [ 292.752209][ T8805] ? rcu_is_watching+0x12/0xc0 [ 292.752242][ T8805] ? trace_contention_end+0xdd/0x130 [ 292.752286][ T8805] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 292.752318][ T8805] ? tomoyo_path_number_perm+0x295/0x580 [ 292.752365][ T8805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.752393][ T8805] ? __pfx___mutex_lock+0x10/0x10 [ 292.752461][ T8805] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.752510][ T8805] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 292.752541][ T8805] __vmalloc_node_noprof+0xad/0xf0 [ 292.752571][ T8805] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 292.752608][ T8805] dvb_dvr_do_ioctl+0x15d/0x290 [ 292.752656][ T8805] dvb_usercopy+0x164/0x340 [ 292.752685][ T8805] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 292.752718][ T8805] ? __pfx_dvb_usercopy+0x10/0x10 [ 292.752766][ T8805] ? __fget_files+0x20e/0x3c0 [ 292.752811][ T8805] dvb_dvr_ioctl+0x29/0x40 [ 292.752839][ T8805] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 292.752870][ T8805] __x64_sys_ioctl+0x18e/0x210 [ 292.752923][ T8805] do_syscall_64+0xcd/0x490 [ 292.752974][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.753005][ T8805] RIP: 0033:0x7fe97d18ebe9 [ 292.753040][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.753075][ T8805] RSP: 002b:00007fe97e0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.753105][ T8805] RAX: ffffffffffffffda RBX: 00007fe97d3c5fa0 RCX: 00007fe97d18ebe9 [ 292.753125][ T8805] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 292.753144][ T8805] RBP: 00007fe97d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.753162][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.753179][ T8805] R13: 00007fe97d3c6038 R14: 00007fe97d3c5fa0 R15: 00007ffd77297968 [ 292.753222][ T8805] [ 292.753235][ T8805] Mem-Info: [ 293.009040][ T8805] active_anon:16632 inactive_anon:0 isolated_anon:0 [ 293.009040][ T8805] active_file:16493 inactive_file:42630 isolated_file:0 [ 293.009040][ T8805] unevictable:768 dirty:563 writeback:0 [ 293.009040][ T8805] slab_reclaimable:11234 slab_unreclaimable:95667 [ 293.009040][ T8805] mapped:32846 shmem:8250 pagetables:1220 [ 293.009040][ T8805] sec_pagetables:0 bounce:0 [ 293.009040][ T8805] kernel_misc_reclaimable:0 [ 293.009040][ T8805] free:1309385 free_pcp:12132 free_cma:0 [ 293.164153][ T8805] Node 0 active_anon:67752kB inactive_anon:0kB active_file:65912kB inactive_file:170328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133168kB dirty:2244kB writeback:0kB shmem:33364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:4848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.311910][ T8805] Node 1 active_anon:76kB inactive_anon:0kB active_file:60kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.343748][ T8805] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.376049][ T8805] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 293.385714][ T8805] Node 0 DMA32 free:1322108kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68304kB inactive_anon:0kB active_file:65912kB inactive_file:169024kB unevictable:1536kB writepending:2244kB present:3129332kB managed:2539556kB mlocked:0kB bounce:0kB free_pcp:44788kB local_pcp:23240kB free_cma:0kB [ 293.428322][ T8805] lowmem_reserve[]: 0 0 1 1 1 [ 293.489051][ T8805] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 293.651855][ T8805] lowmem_reserve[]: 0 0 0 0 0 [ 293.682598][ T8805] Node 1 Normal free:3897496kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:192kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4916kB local_pcp:4260kB free_cma:0kB [ 293.762578][ T8805] lowmem_reserve[]: 0 0 0 0 0 [ 293.767476][ T8805] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 293.811773][ T8805] Node 0 DMA32: 640*4kB (UME) 1083*8kB (UME) 576*16kB (UME) 583*32kB (UM) 381*64kB (UME) 337*128kB (UME) 174*256kB (UME) 53*512kB (UME) 15*1024kB (UME) 3*2048kB (UM) 273*4096kB (UM) = 1318008kB [ 293.882362][ T8805] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 293.952962][ T8805] Node 1 Normal: 130*4kB (UE) 42*8kB (UE) 22*16kB (UME) 161*32kB (UME) 103*64kB (UME) 28*128kB (UME) 22*256kB (UME) 9*512kB (UE) 0*1024kB 2*2048kB (M) 944*4096kB (UM) = 3897496kB [ 293.953232][ T8805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.953257][ T8805] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 293.953281][ T8805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.953304][ T8805] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 293.953327][ T8805] 70251 total pagecache pages [ 293.953339][ T8805] 5 pages in swap cache [ 293.953350][ T8805] Free swap = 122800kB [ 293.953361][ T8805] Total swap = 124996kB [ 293.953373][ T8805] 2097051 pages RAM [ 293.953384][ T8805] 0 pages HighMem/MovableOnly [ 293.953395][ T8805] 430200 pages reserved [ 293.953416][ T8805] 0 pages cma reserved [ 294.664753][ T5878] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 295.582526][ T8834] netlink: 334 bytes leftover after parsing attributes in process `syz.2.518'. [ 296.330010][ T8856] Invalid ELF header magic: != ELF [ 296.681805][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 297.144813][ T8860] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 297.144813][ T8860] The task syz.2.523 (8860) triggered the difference, watch for misbehavior. [ 298.016152][ T8888] FAULT_INJECTION: forcing a failure. [ 298.016152][ T8888] name failslab, interval 1, probability 0, space 0, times 0 [ 298.056430][ T8888] CPU: 1 UID: 0 PID: 8888 Comm: syz.2.531 Not tainted syzkaller #0 PREEMPT(full) [ 298.056475][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.056492][ T8888] Call Trace: [ 298.056501][ T8888] [ 298.056513][ T8888] dump_stack_lvl+0x16c/0x1f0 [ 298.056562][ T8888] should_fail_ex+0x512/0x640 [ 298.056602][ T8888] ? __kmalloc_node_noprof+0xc5/0x500 [ 298.056640][ T8888] should_failslab+0xc2/0x120 [ 298.056678][ T8888] __kmalloc_node_noprof+0xd8/0x500 [ 298.056711][ T8888] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 298.056744][ T8888] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 298.056769][ T8888] ? local_lock_release+0x99/0x140 [ 298.056814][ T8888] ? kernel_clone+0xfc/0x930 [ 298.056850][ T8888] ? rcu_read_unlock+0x17/0x60 [ 298.056892][ T8888] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.056934][ T8888] ? kernel_clone+0xfc/0x930 [ 298.056967][ T8888] __vmalloc_node_noprof+0xad/0xf0 [ 298.056992][ T8888] ? kernel_clone+0xfc/0x930 [ 298.057033][ T8888] copy_process+0x2c70/0x7690 [ 298.057065][ T8888] ? page_table_check_set+0x627/0x750 [ 298.057116][ T8888] ? __pfx_copy_process+0x10/0x10 [ 298.057161][ T8888] ? _copy_from_user+0x59/0xd0 [ 298.057197][ T8888] kernel_clone+0xfc/0x930 [ 298.057235][ T8888] ? __pfx_kernel_clone+0x10/0x10 [ 298.057283][ T8888] ? __lock_acquire+0xb97/0x1ce0 [ 298.057328][ T8888] __do_sys_clone3+0x212/0x290 [ 298.057364][ T8888] ? __pfx___do_sys_clone3+0x10/0x10 [ 298.057463][ T8888] do_syscall_64+0xcd/0x490 [ 298.057510][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.057539][ T8888] RIP: 0033:0x7fe66fdc3449 [ 298.057563][ T8888] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 298.057590][ T8888] RSP: 002b:00007ffc53aa2888 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 298.057618][ T8888] RAX: ffffffffffffffda RBX: 00007fe66fd45830 RCX: 00007fe66fdc3449 [ 298.057637][ T8888] RDX: 00007fe66fd45830 RSI: 0000000000000058 RDI: 00007ffc53aa28d0 [ 298.057654][ T8888] RBP: 00007fe66df726c0 R08: 00007fe66df726c0 R09: 00007ffc53aa29b7 [ 298.057671][ T8888] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 298.057687][ T8888] R13: 000000000000006e R14: 00007ffc53aa28d0 R15: 00007ffc53aa29b8 [ 298.057722][ T8888] [ 299.141160][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 299.576479][ T8913] Invalid ELF header magic: != ELF [ 299.939120][ T8898] kexec: Could not allocate control_code_buffer [ 300.094537][ T8915] netlink: 342 bytes leftover after parsing attributes in process `syz.3.537'. [ 300.835282][ T8921] ima: policy update failed [ 300.869199][ T30] audit: type=1802 audit(42099.107:10): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.537" res=0 errno=0 [ 303.597072][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 303.648144][ T8994] Invalid ELF header magic: != ELF [ 306.001467][ T9043] blktrace: Concurrent blktraces are not allowed on ram7 [ 307.389893][ T9085] Invalid ELF header magic: != ELF [ 323.015560][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.022445][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.580908][ T6981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.724770][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.739909][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.754655][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.766958][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.793811][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.954979][ T6981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.204508][ T6981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.908463][ T6981] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.477428][ T6981] bridge_slave_1: left allmulticast mode [ 348.501304][ T6981] bridge_slave_1: left promiscuous mode [ 348.525160][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.626363][ T6981] bridge_slave_0: left allmulticast mode [ 348.655833][ T6981] bridge_slave_0: left promiscuous mode [ 348.664448][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.841804][ T5868] Bluetooth: hci0: command tx timeout [ 350.255649][ T6981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.278795][ T6981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.317649][ T6981] bond0 (unregistering): Released all slaves [ 350.413539][T11423] chnl_net:caif_netlink_parms(): no params data found [ 350.924977][ T5868] Bluetooth: hci0: command tx timeout [ 351.304661][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.337050][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.357537][T11423] bridge_slave_0: entered allmulticast mode [ 351.382476][T11423] bridge_slave_0: entered promiscuous mode [ 351.445674][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.466469][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.487573][T11423] bridge_slave_1: entered allmulticast mode [ 351.528524][T11423] bridge_slave_1: entered promiscuous mode [ 351.870964][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.128344][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.402469][T11423] team0: Port device team_slave_0 added [ 352.471809][ T6981] hsr_slave_0: left promiscuous mode [ 352.495002][ T6981] hsr_slave_1: left promiscuous mode [ 352.509488][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.537647][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.614155][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.636449][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.739628][ T6981] veth1_macvtap: left promiscuous mode [ 352.754472][ T6981] veth0_macvtap: left promiscuous mode [ 352.760363][ T6981] veth1_vlan: left promiscuous mode [ 352.781367][ T6981] veth0_vlan: left promiscuous mode [ 353.001856][ T5868] Bluetooth: hci0: command tx timeout [ 354.914164][ T6981] team0 (unregistering): Port device team_slave_1 removed [ 355.082222][ T5868] Bluetooth: hci0: command tx timeout [ 355.090261][ T6981] team0 (unregistering): Port device team_slave_0 removed [ 357.329199][T11423] team0: Port device team_slave_1 added [ 357.675406][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.695615][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.743614][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.776676][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.821795][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.931659][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.317212][T11423] hsr_slave_0: entered promiscuous mode [ 358.347738][T11423] hsr_slave_1: entered promiscuous mode [ 358.373756][T11423] debugfs: 'hsr0' already exists in 'hsr' [ 358.379641][T11423] Cannot create hsr debugfs directory [ 359.834170][T11423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 359.873319][T11423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.931866][T11423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 359.959347][T11423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.306511][T11423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.367097][T11423] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.418424][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.425776][ T6979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.470968][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.478320][ T6979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.295548][T11423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.468118][T11423] veth0_vlan: entered promiscuous mode [ 361.517339][T11423] veth1_vlan: entered promiscuous mode [ 361.700622][T11423] veth0_macvtap: entered promiscuous mode [ 361.751951][T11423] veth1_macvtap: entered promiscuous mode [ 361.837750][T11423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.897166][T11423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.933998][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.981508][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.994591][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.020813][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.327206][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.365732][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.516844][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.543124][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.475941][T12284] zswap: compressor not available [ 363.959131][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.981022][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.992077][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.023460][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.037867][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.048133][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 364.814224][ T6981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.170525][ T6981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.637370][ T6981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.010921][ T6981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.126714][ T5868] Bluetooth: hci1: command tx timeout [ 366.930882][T12317] chnl_net:caif_netlink_parms(): no params data found [ 366.988682][ T6981] bridge_slave_1: left allmulticast mode [ 367.007846][ T6981] bridge_slave_1: left promiscuous mode [ 367.045805][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.138245][ T6981] bridge_slave_0: left allmulticast mode [ 367.161823][ T6981] bridge_slave_0: left promiscuous mode [ 367.203530][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.201887][ T5868] Bluetooth: hci1: command tx timeout [ 370.282624][ T5868] Bluetooth: hci1: command tx timeout [ 370.630674][ T6981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.737138][ T6981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.768354][ T6981] bond0 (unregistering): Released all slaves [ 371.233709][T12549] FAULT_INJECTION: forcing a failure. [ 371.233709][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 371.252013][T12549] CPU: 0 UID: 0 PID: 12549 Comm: syz.0.3214 Not tainted syzkaller #0 PREEMPT(full) [ 371.252058][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.252077][T12549] Call Trace: [ 371.252087][T12549] [ 371.252100][T12549] dump_stack_lvl+0x16c/0x1f0 [ 371.252158][T12549] should_fail_ex+0x512/0x640 [ 371.252209][T12549] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 371.252248][T12549] should_failslab+0xc2/0x120 [ 371.252301][T12549] __kmalloc_cache_noprof+0x6a/0x3e0 [ 371.252337][T12549] ? refill_pi_state_cache+0x89/0x250 [ 371.252390][T12549] refill_pi_state_cache+0x89/0x250 [ 371.252436][T12549] futex_lock_pi+0x175/0x7c0 [ 371.252485][T12549] ? futex_unqueue+0x13d/0x2c0 [ 371.252521][T12549] ? __pfx_futex_lock_pi+0x10/0x10 [ 371.252565][T12549] ? __futex_wait+0x24c/0x2f0 [ 371.252644][T12549] ? futex_private_hash_put+0x18a/0x300 [ 371.252688][T12549] ? __pfx_futex_wake_mark+0x10/0x10 [ 371.252746][T12549] ? __pfx_child_wait_callback+0x10/0x10 [ 371.252802][T12549] do_futex+0x11a/0x350 [ 371.252842][T12549] ? __pfx_do_futex+0x10/0x10 [ 371.252883][T12549] ? __pfx___do_sys_wait4+0x10/0x10 [ 371.252929][T12549] ? __might_fault+0xe3/0x190 [ 371.252963][T12549] ? __might_fault+0x13b/0x190 [ 371.253004][T12549] __x64_sys_futex+0x1e0/0x4c0 [ 371.253049][T12549] ? __pfx___x64_sys_futex+0x10/0x10 [ 371.253090][T12549] ? xfd_validate_state+0x61/0x180 [ 371.253135][T12549] ? __pfx___do_sys_prctl+0x10/0x10 [ 371.253197][T12549] do_syscall_64+0xcd/0x490 [ 371.253249][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.253290][T12549] RIP: 0033:0x7f2e8bb8ebe9 [ 371.253315][T12549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.253345][T12549] RSP: 002b:00007f2e8c954038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 371.253375][T12549] RAX: ffffffffffffffda RBX: 00007f2e8bdc6270 RCX: 00007f2e8bb8ebe9 [ 371.253395][T12549] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 371.253412][T12549] RBP: 00007f2e8bc11e19 R08: 0000000000000000 R09: 000000008000fff2 [ 371.253431][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.253449][T12549] R13: 00007f2e8bdc6308 R14: 00007f2e8bdc6270 R15: 00007fff204818e8 [ 371.253490][T12549] [ 372.362268][ T5868] Bluetooth: hci1: command tx timeout [ 372.588113][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.637019][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.656878][T12317] bridge_slave_0: entered allmulticast mode [ 372.676822][T12317] bridge_slave_0: entered promiscuous mode [ 372.859159][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.911237][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.985814][T12317] bridge_slave_1: entered allmulticast mode [ 372.997103][T12317] bridge_slave_1: entered promiscuous mode [ 373.386168][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.441094][ T6981] hsr_slave_0: left promiscuous mode [ 373.489712][ T6981] hsr_slave_1: left promiscuous mode [ 373.519649][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.537570][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.578849][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.620425][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.737236][ T6981] veth1_macvtap: left promiscuous mode [ 373.754046][ T6981] veth0_macvtap: left promiscuous mode [ 373.759934][ T6981] veth1_vlan: left promiscuous mode [ 373.799346][ T6981] veth0_vlan: left promiscuous mode [ 376.593717][ T6981] team0 (unregistering): Port device team_slave_1 removed [ 376.777446][ T6981] team0 (unregistering): Port device team_slave_0 removed [ 379.116638][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.546589][T12317] team0: Port device team_slave_0 added [ 379.609424][T12317] team0: Port device team_slave_1 added [ 379.996265][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.079480][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.176560][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.208246][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.226083][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.309303][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.799109][T12317] hsr_slave_0: entered promiscuous mode [ 380.826675][T12317] hsr_slave_1: entered promiscuous mode [ 380.856122][T12317] debugfs: 'hsr0' already exists in 'hsr' [ 380.900737][T12317] Cannot create hsr debugfs directory [ 380.930913][T12866] FAULT_INJECTION: forcing a failure. [ 380.930913][T12866] name failslab, interval 1, probability 0, space 0, times 0 [ 381.003611][T12866] CPU: 1 UID: 0 PID: 12866 Comm: syz.0.3451 Not tainted syzkaller #0 PREEMPT(full) [ 381.003655][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.003674][T12866] Call Trace: [ 381.003684][T12866] [ 381.003696][T12866] dump_stack_lvl+0x16c/0x1f0 [ 381.003748][T12866] should_fail_ex+0x512/0x640 [ 381.003795][T12866] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 381.003837][T12866] should_failslab+0xc2/0x120 [ 381.003877][T12866] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 381.003914][T12866] ? ima_match_policy+0x7f9/0x22e0 [ 381.003953][T12866] ? vm_area_dup+0x27/0x8d0 [ 381.003993][T12866] vm_area_dup+0x27/0x8d0 [ 381.004028][T12866] __split_vma+0x18e/0x1070 [ 381.004069][T12866] ? __pfx___split_vma+0x10/0x10 [ 381.004113][T12866] ? __pfx_mas_prev+0x10/0x10 [ 381.004169][T12866] vms_gather_munmap_vmas+0x3b1/0x1340 [ 381.004210][T12866] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 381.004252][T12866] ? mas_walk+0x6f5/0x980 [ 381.004307][T12866] __mmap_region+0x436/0x27b0 [ 381.004346][T12866] ? lock_acquire+0x179/0x350 [ 381.004387][T12866] ? __pfx___mmap_region+0x10/0x10 [ 381.004444][T12866] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.004489][T12866] ? finish_task_switch.isra.0+0x221/0xc10 [ 381.004525][T12866] ? rcu_is_watching+0x12/0xc0 [ 381.004557][T12866] ? trace_sched_exit_tp+0xd1/0x120 [ 381.004605][T12866] ? __schedule+0x11a3/0x5de0 [ 381.004720][T12866] ? trace_cap_capable+0x18d/0x200 [ 381.004769][T12866] mmap_region+0x1ab/0x3f0 [ 381.004806][T12866] ? __get_unmapped_area+0x267/0x440 [ 381.004856][T12866] do_mmap+0xa3e/0x1210 [ 381.004908][T12866] ? __pfx_do_mmap+0x10/0x10 [ 381.004953][T12866] ? __pfx_down_write_killable+0x10/0x10 [ 381.004993][T12866] vm_mmap_pgoff+0x29e/0x470 [ 381.005045][T12866] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 381.005100][T12866] ? __x64_sys_futex+0x1e0/0x4c0 [ 381.005139][T12866] ? __x64_sys_futex+0x1e9/0x4c0 [ 381.005184][T12866] ksys_mmap_pgoff+0x7d/0x5c0 [ 381.005225][T12866] ? xfd_validate_state+0x61/0x180 [ 381.005268][T12866] ? __pfx_ksys_write+0x10/0x10 [ 381.005310][T12866] __x64_sys_mmap+0x125/0x190 [ 381.005363][T12866] do_syscall_64+0xcd/0x490 [ 381.005413][T12866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.005456][T12866] RIP: 0033:0x7f2e8bb8ebe9 [ 381.005482][T12866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.005512][T12866] RSP: 002b:00007f2e8c996038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 381.005562][T12866] RAX: ffffffffffffffda RBX: 00007f2e8bdc6090 RCX: 00007f2e8bb8ebe9 [ 381.005591][T12866] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 381.005610][T12866] RBP: 00007f2e8bc11e19 R08: 0000000000000401 R09: 0000000000008000 [ 381.005629][T12866] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 381.005647][T12866] R13: 00007f2e8bdc6128 R14: 00007f2e8bdc6090 R15: 00007fff204818e8 [ 381.005699][T12866] [ 383.549530][T12317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.705897][T12317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.815130][T12317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.920425][T12317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.452437][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.458833][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.865876][T12317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.039231][T12317] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.090041][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.097257][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.208154][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.215407][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.826450][T12317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.915794][T12317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.135319][T12317] veth0_vlan: entered promiscuous mode [ 387.179669][T12317] veth1_vlan: entered promiscuous mode [ 387.263718][T12317] veth0_macvtap: entered promiscuous mode [ 387.304912][T12317] veth1_macvtap: entered promiscuous mode [ 387.411911][T12317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.427384][T12317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.486640][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.536744][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.568563][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.632204][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.977394][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.041278][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.183797][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.301772][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.712803][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.736607][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.753209][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.771052][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.780158][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.781025][T13165] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 390.911459][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.148436][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.289940][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.408400][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.775738][T13198] chnl_net:caif_netlink_parms(): no params data found [ 391.882452][ T5868] Bluetooth: hci4: command tx timeout [ 392.578383][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.609394][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.633292][T13198] bridge_slave_0: entered allmulticast mode [ 392.655476][T13198] bridge_slave_0: entered promiscuous mode [ 393.216319][ T5868] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 393.970424][ T5868] Bluetooth: hci4: command tx timeout [ 394.054268][ T30] audit: type=1800 audit(42192.297:11): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3690" name="dbroot" dev="configfs" ino=46288 res=0 errno=0 [ 394.290682][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.367603][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.403937][ T49] bond0 (unregistering): Released all slaves [ 394.764424][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.779108][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.803745][T13198] bridge_slave_1: entered allmulticast mode [ 394.816305][T13198] bridge_slave_1: entered promiscuous mode [ 396.044220][ T5868] Bluetooth: hci4: command tx timeout [ 396.233627][T13381] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 396.713873][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.739346][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.078387][T13198] team0: Port device team_slave_0 added [ 397.108079][T13198] team0: Port device team_slave_1 added [ 397.371872][ T49] hsr_slave_0: left promiscuous mode [ 397.384968][ T49] hsr_slave_1: left promiscuous mode [ 397.402175][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.440471][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.466152][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.491717][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.667920][ T49] veth1_macvtap: left promiscuous mode [ 397.678684][ T49] veth0_macvtap: left promiscuous mode [ 397.687095][ T49] veth1_vlan: left promiscuous mode [ 397.692639][ T49] veth0_vlan: left promiscuous mode [ 398.122120][ T5868] Bluetooth: hci4: command tx timeout [ 399.318804][ T49] team0 (unregistering): Port device team_slave_1 removed [ 399.405962][ T49] team0 (unregistering): Port device team_slave_0 removed [ 400.473567][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.507681][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.581230][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.604803][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.620289][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.658112][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.970137][T13198] hsr_slave_0: entered promiscuous mode [ 400.987071][T13198] hsr_slave_1: entered promiscuous mode [ 401.005313][T13198] debugfs: 'hsr0' already exists in 'hsr' [ 401.011215][T13198] Cannot create hsr debugfs directory [ 401.554223][T13527] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 402.725199][T13198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.812921][T13198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.875985][T13198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.920126][T13198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.405966][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.530330][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.610829][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.617998][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.059075][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.066285][ T6979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.186904][T13602] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 404.210286][T13198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.509158][T13603] cgroup: fork rejected by pids controller in /syz3 [ 405.165614][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.363555][T13198] veth0_vlan: entered promiscuous mode [ 405.385794][T13198] veth1_vlan: entered promiscuous mode [ 405.515731][T13198] veth0_macvtap: entered promiscuous mode [ 405.545735][T13198] veth1_macvtap: entered promiscuous mode [ 405.609506][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.629967][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.757854][ T8456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.791121][ T8456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.804770][ T8456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.816386][ T8456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.419033][T13786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.426339][T13786] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 406.579647][T13786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.586863][T13786] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 406.616578][T13803] kexec: Could not allocate control_code_buffer [ 406.626759][T13786] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 406.655989][T13786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.669799][T13786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 406.703196][T13786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 406.726717][T13786] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.746017][T13786] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 406.787647][T13786] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 406.940409][ T8456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.034402][ T8456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.137789][ T6979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.181958][ T6979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.801673][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 407.809223][T13838] FAULT_INJECTION: forcing a failure. [ 407.809223][T13838] name failslab, interval 1, probability 0, space 0, times 0 [ 407.872108][T13838] CPU: 1 UID: 0 PID: 13838 Comm: syz.3.3878 Not tainted syzkaller #0 PREEMPT(full) [ 407.872138][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.872148][T13838] Call Trace: [ 407.872155][T13838] [ 407.872163][T13838] dump_stack_lvl+0x16c/0x1f0 [ 407.872197][T13838] should_fail_ex+0x512/0x640 [ 407.872248][T13838] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 407.872274][T13838] should_failslab+0xc2/0x120 [ 407.872308][T13838] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 407.872331][T13838] ? __kernfs_new_node+0xd2/0x8e0 [ 407.872359][T13838] __kernfs_new_node+0xd2/0x8e0 [ 407.872386][T13838] ? __pfx___kernfs_new_node+0x10/0x10 [ 407.872416][T13838] ? find_held_lock+0x2b/0x80 [ 407.872436][T13838] ? kernfs_root+0xee/0x2a0 [ 407.872464][T13838] kernfs_new_node+0x13c/0x1e0 [ 407.872496][T13838] __kernfs_create_file+0x53/0x350 [ 407.872518][T13838] sysfs_add_file_mode_ns+0x207/0x3c0 [ 407.872546][T13838] internal_create_group+0x578/0xf30 [ 407.872576][T13838] ? __pfx_internal_create_group+0x10/0x10 [ 407.872610][T13838] sysfs_slab_add+0x1a3/0x1e0 [ 407.872631][T13838] do_kmem_cache_create+0x529/0x720 [ 407.872654][T13838] ? __kmem_cache_create_args+0x205/0x390 [ 407.872678][T13838] __kmem_cache_create_args+0x225/0x390 [ 407.872701][T13838] mon_text_open+0x313/0x4f0 [ 407.872727][T13838] ? __pfx_mon_text_open+0x10/0x10 [ 407.872748][T13838] ? __debugfs_file_get+0x1fe/0x840 [ 407.872778][T13838] ? __pfx_mon_text_ctor+0x10/0x10 [ 407.872801][T13838] ? __pfx_apparmor_file_open+0x10/0x10 [ 407.872820][T13838] ? lockdown_is_locked_down+0x3f/0x130 [ 407.872842][T13838] ? bpf_lsm_locked_down+0x9/0x10 [ 407.872863][T13838] ? __pfx_mon_text_open+0x10/0x10 [ 407.872885][T13838] full_proxy_open_regular+0x1b9/0x360 [ 407.872906][T13838] do_dentry_open+0x97f/0x1530 [ 407.872930][T13838] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 407.872953][T13838] vfs_open+0x82/0x3f0 [ 407.872984][T13838] path_openat+0x1de4/0x2cb0 [ 407.873014][T13838] ? __pfx_path_openat+0x10/0x10 [ 407.873042][T13838] do_filp_open+0x20b/0x470 [ 407.873066][T13838] ? __pfx_do_filp_open+0x10/0x10 [ 407.873114][T13838] ? alloc_fd+0x471/0x7d0 [ 407.873141][T13838] do_sys_openat2+0x11b/0x1d0 [ 407.873168][T13838] ? __pfx_do_sys_openat2+0x10/0x10 [ 407.873199][T13838] ? __pfx___might_resched+0x10/0x10 [ 407.873225][T13838] __x64_sys_openat+0x174/0x210 [ 407.873254][T13838] ? __pfx___x64_sys_openat+0x10/0x10 [ 407.873295][T13838] do_syscall_64+0xcd/0x490 [ 407.873326][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.873346][T13838] RIP: 0033:0x7f371f78ebe9 [ 407.873361][T13838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.873378][T13838] RSP: 002b:00007f371d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.873397][T13838] RAX: ffffffffffffffda RBX: 00007f371f9c5fa0 RCX: 00007f371f78ebe9 [ 407.873409][T13838] RDX: 0000000000101080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 407.873421][T13838] RBP: 00007f371f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 407.873432][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.873443][T13838] R13: 00007f371f9c6038 R14: 00007f371f9c5fa0 R15: 00007ffce2f5f2c8 [ 407.873466][T13838] [ 408.212163][T13838] SLUB: Unable to add cache mon_text_ffff888053c5b400 to sysfs [ 408.333633][T13843] zswap: compressor not available [ 408.556285][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.570239][T13854] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 408.578328][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.591888][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.610624][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 408.622786][ T5187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.642214][ T5187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.681701][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 408.764555][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 409.114306][ T6979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.388918][ T6979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.506954][T13869] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 409.579090][T13871] FAULT_INJECTION: forcing a failure. [ 409.579090][T13871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 409.610523][ T6979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.763261][T13871] CPU: 1 UID: 0 PID: 13871 Comm: syz.0.3887 Not tainted syzkaller #0 PREEMPT(full) [ 409.763307][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.763327][T13871] Call Trace: [ 409.763337][T13871] [ 409.763350][T13871] dump_stack_lvl+0x16c/0x1f0 [ 409.763403][T13871] should_fail_ex+0x512/0x640 [ 409.763458][T13871] get_futex_key+0x1d0/0x1560 [ 409.763504][T13871] ? __pfx_get_futex_key+0x10/0x10 [ 409.763554][T13871] futex_wake+0xea/0x530 [ 409.763601][T13871] ? rcu_is_watching+0x12/0xc0 [ 409.763634][T13871] ? __pfx_futex_wake+0x10/0x10 [ 409.763683][T13871] ? kmem_cache_free+0x2d1/0x4d0 [ 409.763718][T13871] ? fd_install+0x225/0x750 [ 409.763748][T13871] ? putname+0x154/0x1a0 [ 409.763806][T13871] do_futex+0x1e3/0x350 [ 409.763848][T13871] ? __pfx_do_futex+0x10/0x10 [ 409.763894][T13871] ? __pfx___might_resched+0x10/0x10 [ 409.763933][T13871] __x64_sys_futex+0x1e0/0x4c0 [ 409.763978][T13871] ? __x64_sys_openat+0x174/0x210 [ 409.764027][T13871] ? __pfx___x64_sys_futex+0x10/0x10 [ 409.764086][T13871] do_syscall_64+0xcd/0x490 [ 409.764138][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.764170][T13871] RIP: 0033:0x7f2e8bb8ebe9 [ 409.764195][T13871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.764225][T13871] RSP: 002b:00007f2e8c9960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 409.764256][T13871] RAX: ffffffffffffffda RBX: 00007f2e8bdc6098 RCX: 00007f2e8bb8ebe9 [ 409.764276][T13871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2e8bdc609c [ 409.764295][T13871] RBP: 00007f2e8bdc6090 R08: 00007f2e8c9b8000 R09: 0000000000000000 [ 409.764314][T13871] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 409.764332][T13871] R13: 00007f2e8bdc6128 R14: 00007fff20481800 R15: 00007fff204818e8 [ 409.764372][T13871] [ 410.173903][ T6979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.681949][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.692366][ T5187] Bluetooth: hci3: command tx timeout [ 410.771806][ T5187] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.842445][ T5187] Bluetooth: hci4: command 0x0c1a tx timeout [ 410.862029][T13850] chnl_net:caif_netlink_parms(): no params data found [ 410.988097][ T6979] bridge_slave_1: left allmulticast mode [ 410.995347][ T6979] bridge_slave_1: left promiscuous mode [ 411.001202][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.134512][ T6979] bridge_slave_0: left allmulticast mode [ 411.140383][ T6979] bridge_slave_0: left promiscuous mode [ 411.157511][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.426373][T13906] warn_alloc: 1 callbacks suppressed [ 412.426398][T13906] syz.2.3894: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 412.512067][T13906] CPU: 0 UID: 0 PID: 13906 Comm: syz.2.3894 Not tainted syzkaller #0 PREEMPT(full) [ 412.512113][T13906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.512132][T13906] Call Trace: [ 412.512142][T13906] [ 412.512152][T13906] dump_stack_lvl+0x16c/0x1f0 [ 412.512205][T13906] warn_alloc+0x248/0x3a0 [ 412.512245][T13906] ? __pfx_warn_alloc+0x10/0x10 [ 412.512310][T13906] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 412.512345][T13906] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 412.512379][T13906] ? __pfx___might_resched+0x10/0x10 [ 412.512414][T13906] ? rcu_is_watching+0x12/0xc0 [ 412.512445][T13906] ? trace_contention_end+0xdd/0x130 [ 412.512489][T13906] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 412.512529][T13906] ? tomoyo_path_number_perm+0x295/0x580 [ 412.512571][T13906] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 412.512600][T13906] ? __pfx___mutex_lock+0x10/0x10 [ 412.512660][T13906] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 412.512693][T13906] __vmalloc_node_noprof+0xad/0xf0 [ 412.512722][T13906] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 412.512760][T13906] dvb_demux_do_ioctl+0x54e/0x12f0 [ 412.512806][T13906] ? do_vfs_ioctl+0x128/0x14f0 [ 412.512860][T13906] dvb_usercopy+0x164/0x340 [ 412.512887][T13906] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 412.512924][T13906] ? __pfx_dvb_usercopy+0x10/0x10 [ 412.512970][T13906] ? __fget_files+0x20e/0x3c0 [ 412.513013][T13906] dvb_demux_ioctl+0x29/0x40 [ 412.513038][T13906] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 412.513075][T13906] __x64_sys_ioctl+0x18e/0x210 [ 412.513126][T13906] do_syscall_64+0xcd/0x490 [ 412.513178][T13906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.513208][T13906] RIP: 0033:0x7f8bf938ebe9 [ 412.513234][T13906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.513264][T13906] RSP: 002b:00007f8bfa14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.513293][T13906] RAX: ffffffffffffffda RBX: 00007f8bf95c6090 RCX: 00007f8bf938ebe9 [ 412.513313][T13906] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 412.513332][T13906] RBP: 00007f8bf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 412.513351][T13906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.513367][T13906] R13: 00007f8bf95c6128 R14: 00007f8bf95c6090 R15: 00007ffd7d1e81b8 [ 412.513409][T13906] [ 412.517188][T13907] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 412.561905][T13906] Mem-Info: [ 412.781445][ T5187] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.787734][ T5187] Bluetooth: hci3: command tx timeout [ 412.846924][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.871767][T13906] active_anon:22084 inactive_anon:0 isolated_anon:0 [ 412.871767][T13906] active_file:17287 inactive_file:41076 isolated_file:0 [ 412.871767][T13906] unevictable:776 dirty:406 writeback:0 [ 412.871767][T13906] slab_reclaimable:11487 slab_unreclaimable:93789 [ 412.871767][T13906] mapped:36060 shmem:12977 pagetables:1251 [ 412.871767][T13906] sec_pagetables:0 bounce:0 [ 412.871767][T13906] kernel_misc_reclaimable:0 [ 412.871767][T13906] free:1295905 free_pcp:18863 free_cma:0 [ 412.927260][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.953595][T13906] Node 0 active_anon:89636kB inactive_anon:0kB active_file:69148kB inactive_file:164108kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:145580kB dirty:1616kB writeback:0kB shmem:51772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11792kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 413.078829][T13906] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 413.219963][T13906] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 413.322275][T13906] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 413.329344][T13906] Node 0 DMA32 free:1264456kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89688kB inactive_anon:0kB active_file:66524kB inactive_file:162804kB unevictable:1568kB writepending:1616kB present:3129332kB managed:2539556kB mlocked:32kB bounce:0kB free_pcp:79016kB local_pcp:33476kB free_cma:0kB [ 413.407828][T13906] lowmem_reserve[]: 0 0 1 1 1 [ 413.424281][T13906] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:24kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 413.471710][T13906] lowmem_reserve[]: 0 0 0 0 0 [ 413.478201][T13906] Node 1 Normal free:3903604kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:200kB free_cma:0kB [ 413.495339][ T6979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.551644][T13906] lowmem_reserve[]: 0 0 0 0 0 [ 413.556611][T13906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 413.582310][T13906] Node 0 DMA32: 556*4kB (U) 43*8kB (UM) 6*16kB (UE) 19*32kB (UME) 74*64kB (UME) 414*128kB (UME) 199*256kB (UME) 73*512kB (UME) 17*1024kB (UM) 2*2048kB (UM) 267*4096kB (M) = 1264456kB [ 413.611916][ T6979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.654043][ T6979] bond0 (unregistering): Released all slaves [ 413.708704][T13906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 413.738568][T13906] Node 1 Normal: 208*4kB (UME) 46*8kB (UE) 29*16kB (UE) 238*32kB (UE) 102*64kB (UME) 27*128kB (UME) 19*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 1*2048kB (M) 945*4096kB (UM) = 3903552kB [ 413.779509][T13906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.792077][T13906] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 413.861225][T13906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.927208][T13906] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 413.962146][T13906] 75118 total pagecache pages [ 413.966936][T13906] 0 pages in swap cache [ 413.971221][T13906] Free swap = 124996kB [ 413.978053][T13906] Total swap = 124996kB [ 413.987692][T13906] 2097051 pages RAM [ 413.998022][T13906] 0 pages HighMem/MovableOnly [ 414.017111][T13906] 430200 pages reserved [ 414.058779][T13906] 0 pages cma reserved [ 414.501935][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.509992][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.551845][T13850] bridge_slave_0: entered allmulticast mode [ 414.577959][T13850] bridge_slave_0: entered promiscuous mode [ 414.605023][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.661745][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.669425][T13850] bridge_slave_1: entered allmulticast mode [ 414.743149][T13850] bridge_slave_1: entered promiscuous mode [ 414.797022][T13930] mkiss: ax0: crc mode is auto. [ 414.861845][T13938] Bluetooth: hci3: command tx timeout [ 415.342431][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.384388][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.708338][T13850] team0: Port device team_slave_0 added [ 415.738494][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'. [ 415.819050][T13850] team0: Port device team_slave_1 added [ 415.923271][ T6979] hsr_slave_0: left promiscuous mode [ 415.978086][ T6979] hsr_slave_1: left promiscuous mode [ 416.042460][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.234155][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.297520][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.381634][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.499122][ T6979] veth1_macvtap: left promiscuous mode [ 416.534705][ T6979] veth0_macvtap: left promiscuous mode [ 416.581001][ T6979] veth1_vlan: left promiscuous mode [ 416.610106][ T6979] veth0_vlan: left promiscuous mode [ 416.923269][T13946] Bluetooth: hci3: command tx timeout [ 419.041001][ T6979] team0 (unregistering): Port device team_slave_1 removed [ 419.094257][ T6979] team0 (unregistering): Port device team_slave_0 removed [ 420.930622][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.937984][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.020900][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.035009][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.051672][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.098973][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.360706][T13850] hsr_slave_0: entered promiscuous mode [ 421.404672][T13850] hsr_slave_1: entered promiscuous mode [ 425.698558][T14062] ptrace attach of "./syz-executor exec"[12317] was attempted by ""[14062] [ 425.771314][T13850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 426.058088][T13850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.123507][T13850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.212315][T13850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.594143][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.689527][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.751054][T13945] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.758871][T13945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.856168][T13945] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.863507][T13945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.662426][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.835622][T13850] veth0_vlan: entered promiscuous mode [ 427.879773][T13850] veth1_vlan: entered promiscuous mode [ 428.039227][T13850] veth0_macvtap: entered promiscuous mode [ 428.086291][T13850] veth1_macvtap: entered promiscuous mode [ 428.146364][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3923'. [ 428.621644][T14116] can0: slcan on ptm0. [ 429.072356][T14112] can0 (unregistered): slcan off ptm0. [ 429.076023][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.844832][T13937] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 429.847358][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.908882][T13940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.971458][T13940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.031710][T13940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.482542][T13940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.229211][T13945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.262188][T13945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.392836][T13945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.411886][T13945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.421793][T14178] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 432.434231][T14178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.475067][T14178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 432.488909][T14178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.521853][T14178] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.572931][T14178] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 433.062140][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 434.461802][T13946] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.468004][T13946] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.524952][T13938] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.531170][T13938] Bluetooth: hci4: command 0x0c1a tx timeout [ 436.350250][T14243] netlink: 'syz.2.3938': attribute type 7 has an invalid length. [ 436.602228][T14228] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.521897][T14256] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 438.681716][T14228] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.685013][T14285] FAULT_INJECTION: forcing a failure. [ 438.685013][T14285] name failslab, interval 1, probability 0, space 0, times 0 [ 438.735143][T14285] CPU: 1 UID: 0 PID: 14285 Comm: syz.1.3944 Not tainted syzkaller #0 PREEMPT(full) [ 438.735188][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.735207][T14285] Call Trace: [ 438.735218][T14285] [ 438.735230][T14285] dump_stack_lvl+0x16c/0x1f0 [ 438.735287][T14285] should_fail_ex+0x512/0x640 [ 438.735343][T14285] should_failslab+0xc2/0x120 [ 438.735400][T14285] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 438.735441][T14285] ? skb_clone+0x190/0x3f0 [ 438.735492][T14285] skb_clone+0x190/0x3f0 [ 438.735541][T14285] netlink_deliver_tap+0xabd/0xd30 [ 438.735600][T14285] netlink_unicast+0x64c/0x870 [ 438.735651][T14285] ? __pfx_netlink_unicast+0x10/0x10 [ 438.735697][T14285] ? __asan_memset+0x23/0x50 [ 438.735728][T14285] ? __build_skb_around+0x278/0x3b0 [ 438.735768][T14285] ? is_vmalloc_addr+0x86/0xa0 [ 438.735810][T14285] netlink_sendmsg+0x8d1/0xdd0 [ 438.735864][T14285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.735918][T14285] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 438.735961][T14285] ____sys_sendmsg+0xa95/0xc70 [ 438.736002][T14285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.736049][T14285] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.736100][T14285] ___sys_sendmsg+0x134/0x1d0 [ 438.736151][T14285] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.736218][T14285] ? find_held_lock+0x2b/0x80 [ 438.736279][T14285] __sys_sendmmsg+0x200/0x420 [ 438.736333][T14285] ? __pfx___sys_sendmmsg+0x10/0x10 [ 438.736406][T14285] ? __pfx_do_futex+0x10/0x10 [ 438.736465][T14285] ? __sys_socket+0xac/0x260 [ 438.736505][T14285] ? xfd_validate_state+0x61/0x180 [ 438.736551][T14285] ? __pfx_do_writev+0x10/0x10 [ 438.736595][T14285] __x64_sys_sendmmsg+0x9c/0x100 [ 438.736640][T14285] ? lockdep_hardirqs_on+0x7c/0x110 [ 438.736684][T14285] do_syscall_64+0xcd/0x490 [ 438.736736][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.736768][T14285] RIP: 0033:0x7f3e1cd8ebe9 [ 438.736795][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.736826][T14285] RSP: 002b:00007f3e1dc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.736854][T14285] RAX: ffffffffffffffda RBX: 00007f3e1cfc5fa0 RCX: 00007f3e1cd8ebe9 [ 438.736875][T14285] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 438.736894][T14285] RBP: 00007f3e1ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 438.736913][T14285] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 438.736930][T14285] R13: 00007f3e1cfc6038 R14: 00007f3e1cfc5fa0 R15: 00007ffd3ff1a538 [ 438.736968][T14285] [ 442.067104][T14338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 442.088721][T14338] netlink: 306 bytes leftover after parsing attributes in process `syz.0.3955'. [ 445.017185][T14375] FAULT_INJECTION: forcing a failure. [ 445.017185][T14375] name failslab, interval 1, probability 0, space 0, times 0 [ 445.068132][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.1.3960 Not tainted syzkaller #0 PREEMPT(full) [ 445.068177][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.068196][T14375] Call Trace: [ 445.068207][T14375] [ 445.068231][T14375] dump_stack_lvl+0x16c/0x1f0 [ 445.068285][T14375] should_fail_ex+0x512/0x640 [ 445.068333][T14375] ? fs_reclaim_acquire+0xae/0x150 [ 445.068384][T14375] should_failslab+0xc2/0x120 [ 445.068426][T14375] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 445.068464][T14375] ? security_inode_alloc+0x3b/0x2b0 [ 445.068506][T14375] security_inode_alloc+0x3b/0x2b0 [ 445.068544][T14375] inode_init_always_gfp+0xce4/0x1030 [ 445.068587][T14375] alloc_inode+0x86/0x240 [ 445.068631][T14375] path_from_stashed+0x25b/0x750 [ 445.068667][T14375] ? do_raw_spin_unlock+0x172/0x230 [ 445.068724][T14375] ns_get_path+0x5f/0x80 [ 445.068758][T14375] proc_ns_get_link+0x121/0x230 [ 445.068798][T14375] ? __pfx_proc_ns_get_link+0x10/0x10 [ 445.068842][T14375] ? atime_needs_update+0x8b/0x710 [ 445.068892][T14375] ? __pfx_proc_ns_get_link+0x10/0x10 [ 445.068930][T14375] step_into+0x1a2c/0x2270 [ 445.068972][T14375] ? __pfx_step_into+0x10/0x10 [ 445.069003][T14375] ? find_held_lock+0x2b/0x80 [ 445.069048][T14375] path_openat+0x6db/0x2cb0 [ 445.069099][T14375] ? __pfx_path_openat+0x10/0x10 [ 445.069148][T14375] do_filp_open+0x20b/0x470 [ 445.069186][T14375] ? __pfx_do_filp_open+0x10/0x10 [ 445.069263][T14375] ? alloc_fd+0x471/0x7d0 [ 445.069308][T14375] do_sys_openat2+0x11b/0x1d0 [ 445.069357][T14375] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.069421][T14375] __x64_sys_openat+0x174/0x210 [ 445.069470][T14375] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.069535][T14375] do_syscall_64+0xcd/0x490 [ 445.069586][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.069617][T14375] RIP: 0033:0x7f3e1cd8d550 [ 445.069643][T14375] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 445.069673][T14375] RSP: 002b:00007f3e1dbcdf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 445.069703][T14375] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3e1cd8d550 [ 445.069723][T14375] RDX: 0000000000000002 RSI: 00007f3e1dbcdfa0 RDI: 00000000ffffff9c [ 445.069742][T14375] RBP: 00007f3e1dbcdfa0 R08: 0000000000000000 R09: 0000000000000000 [ 445.069761][T14375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 445.069779][T14375] R13: 00007f3e1cfc6218 R14: 00007f3e1cfc6180 R15: 00007ffd3ff1a538 [ 445.069820][T14375] [ 445.542391][T14384] random: crng reseeded on system resumption [ 445.888877][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.905589][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.654810][T14433] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 449.007320][T14462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3976'. [ 449.206278][T14462] veth0_macvtap: left promiscuous mode [ 449.214460][T14462] macvtap0: entered promiscuous mode [ 449.220023][T14462] macvtap0: entered allmulticast mode [ 451.146541][T14520] vhci_hcd: invalid port number 255 [ 451.152143][T14520] vhci_hcd: default hub control req: 5902 v0001 i00ff l1 [ 451.893323][T14533] ================================================================== [ 451.893343][T14533] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 451.893396][T14533] Write of size 8 at addr ffffc90003609000 by task syz.3.3989/14533 [ 451.893421][T14533] [ 451.893434][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.3.3989 Not tainted syzkaller #0 PREEMPT(full) [ 451.893469][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.893488][T14533] Call Trace: [ 451.893497][T14533] [ 451.893509][T14533] dump_stack_lvl+0x116/0x1f0 [ 451.893555][T14533] print_report+0xcd/0x630 [ 451.893594][T14533] ? __virt_addr_valid+0x81/0x610 [ 451.893646][T14533] ? sys_imageblit+0x1a6f/0x1e60 [ 451.893678][T14533] kasan_report+0xe0/0x110 [ 451.893717][T14533] ? sys_imageblit+0x1a6f/0x1e60 [ 451.893757][T14533] sys_imageblit+0x1a6f/0x1e60 [ 451.893795][T14533] ? this_cpu_in_panic+0x5c/0x80 [ 451.893838][T14533] ? __pfx_sys_imageblit+0x10/0x10 [ 451.893874][T14533] ? __pfx__prb_read_valid+0x10/0x10 [ 451.893912][T14533] ? __asan_memcpy+0x3c/0x60 [ 451.893942][T14533] ? this_cpu_in_panic+0x5c/0x80 [ 451.893986][T14533] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 451.894030][T14533] soft_cursor+0x521/0xa10 [ 451.894076][T14533] ? find_held_lock+0x2b/0x80 [ 451.894104][T14533] ? fb_get_color_depth+0x120/0x250 [ 451.894146][T14533] bit_cursor+0xe8c/0x17e0 [ 451.894196][T14533] ? __pfx_bit_cursor+0x10/0x10 [ 451.894247][T14533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.894293][T14533] ? get_color+0x1da/0x450 [ 451.894332][T14533] ? __pfx_bit_cursor+0x10/0x10 [ 451.894375][T14533] fbcon_cursor+0x40c/0x5f0 [ 451.894427][T14533] ? mark_lock+0x591/0x610 [ 451.894466][T14533] hide_cursor+0x84/0x220 [ 451.894507][T14533] do_con_write+0x23f7/0x8280 [ 451.894555][T14533] ? rcu_is_watching+0x12/0xc0 [ 451.894586][T14533] ? trace_contention_end+0xdd/0x130 [ 451.894630][T14533] ? n_tty_write+0x53e/0x11e0 [ 451.894666][T14533] ? __pfx___mutex_lock+0x10/0x10 [ 451.894713][T14533] ? __pfx_do_con_write+0x10/0x10 [ 451.894760][T14533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.894812][T14533] ? con_write+0x93/0xb0 [ 451.894859][T14533] con_write+0x23/0xb0 [ 451.894904][T14533] n_tty_write+0x41c/0x11e0 [ 451.894946][T14533] ? __pfx_n_tty_write+0x10/0x10 [ 451.894978][T14533] ? rcu_is_watching+0x12/0xc0 [ 451.895008][T14533] ? __pfx_woken_wake_function+0x10/0x10 [ 451.895058][T14533] ? kfree+0x24f/0x4d0 [ 451.895084][T14533] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 451.895132][T14533] ? __pfx_n_tty_write+0x10/0x10 [ 451.895164][T14533] file_tty_write.constprop.0+0x504/0x9b0 [ 451.895216][T14533] redirected_tty_write+0xd4/0x150 [ 451.895262][T14533] vfs_write+0x7d0/0x11d0 [ 451.895298][T14533] ? __pfx_redirected_tty_write+0x10/0x10 [ 451.895346][T14533] ? __pfx_vfs_write+0x10/0x10 [ 451.895379][T14533] ? find_held_lock+0x2b/0x80 [ 451.895427][T14533] ksys_write+0x12a/0x250 [ 451.895461][T14533] ? __pfx_ksys_write+0x10/0x10 [ 451.895501][T14533] do_syscall_64+0xcd/0x490 [ 451.895550][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.895580][T14533] RIP: 0033:0x7f371f78ebe9 [ 451.895606][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.895637][T14533] RSP: 002b:00007f371d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.895666][T14533] RAX: ffffffffffffffda RBX: 00007f371f9c5fa0 RCX: 00007f371f78ebe9 [ 451.895687][T14533] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 451.895705][T14533] RBP: 00007f371f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 451.895724][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.895742][T14533] R13: 00007f371f9c6038 R14: 00007f371f9c5fa0 R15: 00007ffce2f5f2c8 [ 451.895772][T14533] [ 451.895784][T14533] [ 451.895792][T14533] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003309000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 451.895859][T14533] Memory state around the buggy address: [ 451.895875][T14533] ffffc90003608f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.895899][T14533] ffffc90003608f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 451.895921][T14533] >ffffc90003609000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.895938][T14533] ^ [ 451.895954][T14533] ffffc90003609080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.895976][T14533] ffffc90003609100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 451.895993][T14533] ================================================================== [ 451.922684][T14533] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 451.922713][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.3.3989 Not tainted syzkaller #0 PREEMPT(full) [ 451.922750][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.922770][T14533] Call Trace: [ 451.922781][T14533] [ 451.922793][T14533] dump_stack_lvl+0x3d/0x1f0 [ 451.922843][T14533] vpanic+0x6e8/0x7a0 [ 451.922883][T14533] ? __pfx_vpanic+0x10/0x10 [ 451.922927][T14533] ? sys_imageblit+0x1a6f/0x1e60 [ 451.922959][T14533] panic+0xca/0xd0 [ 451.922995][T14533] ? __pfx_panic+0x10/0x10 [ 451.923033][T14533] ? sys_imageblit+0x1a6f/0x1e60 [ 451.923065][T14533] ? preempt_schedule_common+0x44/0xc0 [ 451.923114][T14533] ? preempt_schedule_thunk+0x16/0x30 [ 451.923157][T14533] check_panic_on_warn+0xab/0xb0 [ 451.923197][T14533] end_report+0x107/0x170 [ 451.923230][T14533] kasan_report+0xee/0x110 [ 451.923265][T14533] ? sys_imageblit+0x1a6f/0x1e60 [ 451.923301][T14533] sys_imageblit+0x1a6f/0x1e60 [ 451.923338][T14533] ? this_cpu_in_panic+0x5c/0x80 [ 451.923392][T14533] ? __pfx_sys_imageblit+0x10/0x10 [ 451.923433][T14533] ? __pfx__prb_read_valid+0x10/0x10 [ 451.923476][T14533] ? __asan_memcpy+0x3c/0x60 [ 451.923510][T14533] ? this_cpu_in_panic+0x5c/0x80 [ 451.923559][T14533] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 451.923609][T14533] soft_cursor+0x521/0xa10 [ 451.923659][T14533] ? find_held_lock+0x2b/0x80 [ 451.923687][T14533] ? fb_get_color_depth+0x120/0x250 [ 451.923733][T14533] bit_cursor+0xe8c/0x17e0 [ 451.923783][T14533] ? __pfx_bit_cursor+0x10/0x10 [ 451.923834][T14533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.923880][T14533] ? get_color+0x1da/0x450 [ 451.923921][T14533] ? __pfx_bit_cursor+0x10/0x10 [ 451.923965][T14533] fbcon_cursor+0x40c/0x5f0 [ 451.924006][T14533] ? mark_lock+0x591/0x610 [ 451.924046][T14533] hide_cursor+0x84/0x220 [ 451.924086][T14533] do_con_write+0x23f7/0x8280 [ 451.924134][T14533] ? rcu_is_watching+0x12/0xc0 [ 451.924165][T14533] ? trace_contention_end+0xdd/0x130 [ 451.924208][T14533] ? n_tty_write+0x53e/0x11e0 [ 451.924245][T14533] ? __pfx___mutex_lock+0x10/0x10 [ 451.924290][T14533] ? __pfx_do_con_write+0x10/0x10 [ 451.924336][T14533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.924397][T14533] ? con_write+0x93/0xb0 [ 451.924444][T14533] con_write+0x23/0xb0 [ 451.924490][T14533] n_tty_write+0x41c/0x11e0 [ 451.924531][T14533] ? __pfx_n_tty_write+0x10/0x10 [ 451.924563][T14533] ? rcu_is_watching+0x12/0xc0 [ 451.924594][T14533] ? __pfx_woken_wake_function+0x10/0x10 [ 451.924643][T14533] ? kfree+0x24f/0x4d0 [ 451.924671][T14533] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 451.924720][T14533] ? __pfx_n_tty_write+0x10/0x10 [ 451.924755][T14533] file_tty_write.constprop.0+0x504/0x9b0 [ 451.924806][T14533] redirected_tty_write+0xd4/0x150 [ 451.924853][T14533] vfs_write+0x7d0/0x11d0 [ 451.924889][T14533] ? __pfx_redirected_tty_write+0x10/0x10 [ 451.924938][T14533] ? __pfx_vfs_write+0x10/0x10 [ 451.924972][T14533] ? find_held_lock+0x2b/0x80 [ 451.925014][T14533] ksys_write+0x12a/0x250 [ 451.925049][T14533] ? __pfx_ksys_write+0x10/0x10 [ 451.925091][T14533] do_syscall_64+0xcd/0x490 [ 451.925137][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.925168][T14533] RIP: 0033:0x7f371f78ebe9 [ 451.925194][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.925225][T14533] RSP: 002b:00007f371d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.925255][T14533] RAX: ffffffffffffffda RBX: 00007f371f9c5fa0 RCX: 00007f371f78ebe9 [ 451.925277][T14533] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 451.925296][T14533] RBP: 00007f371f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 451.925316][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.925335][T14533] R13: 00007f371f9c6038 R14: 00007f371f9c5fa0 R15: 00007ffce2f5f2c8 [ 451.925366][T14533] [ 451.925778][T14533] Kernel Offset: disabled