last executing test programs: 10.415994984s ago: executing program 3 (id=1537): close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x5, &(0x7f0000000000)={{0xa, 0x22ee}, {0x6, 0x1}}, &(0x7f0000000080)={{0x482871c6, 0x7}, {0x0, 0x80}}) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d37c, 0x33b) socket(0x2, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0xf13f, 0x3, 0x0, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 9.507253624s ago: executing program 2 (id=1539): close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x5, &(0x7f0000000000)={{0xa, 0x22ee}, {0x6, 0x1}}, 0x0) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d37c, 0x33b) socket(0x2, 0x2, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0xf13f, 0x3, 0x0, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 8.102690009s ago: executing program 2 (id=1543): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd70", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 8.03914142s ago: executing program 3 (id=1544): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(0x0, 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 7.974023264s ago: executing program 1 (id=1545): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 6.450330498s ago: executing program 2 (id=1546): socket(0x2, 0x3, 0x1008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x200) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2401, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, 0x0, 0x80) socket(0xf, 0xa, 0x5) ioperm$auto(0x7, 0x75, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0xc0982, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r3, 0x4b66, 0x1) 6.210245495s ago: executing program 0 (id=1547): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000081, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000504010f26fcb0f125df1d380b05b246819a63a10fe0a3a6a7d2ee15de0a11bf19043e72434438bc9bc12fc1748ad2a79b41350ed2a3a0dade165b5d070d1b320bbed0d01cd086658b0303badf1273bd6b6364fb8050030f4f5811dd5eb1ac9aea40805ee8669a09a9e8aee5004abc2331581e4b697cbe04606d01c522c49a3bd2865c4b4a130f1df613eed2539", @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf25040000000c000180080002003827000010000a800c0001800800010002000000"], 0xfffffd4b}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf257e0000000088a5cd5c95f378433574ede152d2d648077b925af91b9870c2840d680b779cf778bae59f330956285eeda8b5ebb445c178c810fb4b76eb172a16ee83c71a15873ce59b5248da9c06b8aaceb2e05fed6d1bc32338652010162b894df565abe850fbcfb8f030e77d32d9f2bb90c89762add386352e2379f957f4caf106cd272527caba4a62f73b22b60b0111717d721c"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socketpair$auto(0x1, 0xffff812b, 0xfff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec14/power/runtime_suspended_time\x00', 0x220080, 0x0) r8 = io_uring_setup$auto(0x5, 0x0) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY2(r8, 0xc0506617, &(0x7f00000001c0)={{0x1, 0x0, @descriptor="ef468928639b7581"}, 0x9, 0x1, '\x00', "8733d93f746c67d97aaf5ad7d65eaf011a8da39983efb62af4074e85a1fc4eec9829da693a463ad339fd290e81e2357d6fe868a619b5ce6ab3a840fdb08e4c5f1c3cfae2f3808090b79c937c43c21c1ede4e0a805a099fa1a480ccdee2acb5a87b19abd4893ca1ae5fc774f371186ccbe17d"}) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)=""/55, 0x37) write$auto_console_fops_tty_io(r7, &(0x7f0000000340)="c80c1b5d399b588143e12632e16841dd73450e32ce65e99407334a998d5a7a5d14d75346a0f32c6924197ec30526fcb61c0b29024ebecfb9b357e5cd53c73d8692e5ae6aff889cf259f55be3697ee2428c633014880178d7f4fbeb2aacfb3a122387d3b9f3711d53b58246c61bfa7121f130194ec2808698195c2cdf9f6979df65efbb516b537ef1a005f87e6396a801ba8ddded61811d2d21c60d4c0d0074182bb38777fd", 0xa5) 6.156350541s ago: executing program 3 (id=1548): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf25010000000800", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x48800) futex$auto(0x0, 0x5, 0x8, 0x0, 0x0, 0x80000001) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b640f", 0x26) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x1) prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) msgctl$auto_IPC_STAT(0x25, 0x2, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x7ffffffd, 0x7fff, 0x5}, 0x0, 0x0, 0x3, 0xff, 0x506, 0x2, 0x10001, 0x3b5d, 0x7ff, 0x2, @raw=0x8}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) read$auto(r4, 0x0, 0x1000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 5.807557421s ago: executing program 1 (id=1549): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 4.960465994s ago: executing program 2 (id=1550): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf25010000000800", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x48800) futex$auto(0x0, 0x5, 0x8, 0x0, 0x0, 0x80000001) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b640f", 0x26) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x1) prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) msgctl$auto_IPC_STAT(0x25, 0x2, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x7ffffffd, 0x7fff, 0x5}, 0x0, 0x0, 0x3, 0xff, 0x506, 0x2, 0x10001, 0x3b5d, 0x7ff, 0x2, @raw=0x8}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) read$auto(r4, 0x0, 0x1000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, 0x0, 0x4000084) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 4.897806315s ago: executing program 0 (id=1551): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)=""/199, 0xc7) r1 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000040)={@_si_pad}, 0x1ff, &(0x7f0000000100)={{0x8, 0xdc}, {0x4, 0x9}, 0x1ae, 0x1, 0x1, 0x5, 0x3, 0x2, 0x96c, 0xc6c1, 0x69, 0x400, 0x8, 0xfffffffffffff12f, 0x0, 0x7}) process_vm_writev$auto(r1, &(0x7f0000000200)={&(0x7f00000001c0)="f887562d73e5", 0x8}, 0x3c, &(0x7f00000002c0)={&(0x7f0000000240)="fda2bad196948d4c4917666531481d3b596041c8d9316de5eea99de8255c1d7b7ed370a54c57193252d5a930203e0216febf340741ac850e6302deea2e33dfd44e0cd1ee1ee462fc646e07ad5edd2c392cb42657c3a0491e53475fe263e828cf92e773ce745737657e76", 0x7}, 0xfffffffffffffff2, 0xfffffffffffffffb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x4, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x24, 0x0, 0x40020000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r2) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r2, 0x0, 0x40c0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, &(0x7f0000000100)={0x0, 0x3f00, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) r6 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r7 = socket(0x1d, 0x2, 0x7) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r10}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r11, 0xfd}, 0x6a) 4.725819576s ago: executing program 0 (id=1552): close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x5, &(0x7f0000000000)={{0xa, 0x22ee}, {0x6, 0x1}}, 0x0) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d37c, 0x33b) socket(0x2, 0x2, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0xf13f, 0x3, 0x0, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 4.631490946s ago: executing program 1 (id=1553): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x2, 0x80, 0x1) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) signalfd$auto(r0, &(0x7f0000000040)={0x6}, 0xfffffffffffffff8) ioctl$auto_SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000180)={0x1ff, 0x0, 0xff, 0x7, 0x8, 0x0, 0x10, 0x0, 0x2, 0x2, 0x1f6a, {0x0, 0x3}, 0x9, 0x88, 0x2, 0x80000001, 0x0, 0x8, 0x545, 0x1, 0x0, 0x8}) ioctl$auto(0x3, 0x40085400, 0x38) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.440864484s ago: executing program 1 (id=1554): close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x5, &(0x7f0000000000)={{0xa, 0x22ee}, {0x6, 0x1}}, &(0x7f0000000080)={{0x482871c6, 0x7}, {0x0, 0x80}}) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d37c, 0x33b) socket(0x2, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0xf13f, 0x3, 0x0, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 4.350680523s ago: executing program 3 (id=1555): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x3ad6, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(0x0, 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 3.990380128s ago: executing program 0 (id=1556): socket(0x2, 0x3, 0x1008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x200) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) readv$auto(0x3, 0x0, 0x400) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2401, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, 0x0, 0x80) socket(0xf, 0xa, 0x5) ioperm$auto(0x7, 0x75, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0xc0982, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r3, 0x4b66, 0x1) 2.538510753s ago: executing program 1 (id=1557): socket(0x2, 0x3, 0x1008) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x200) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2401, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, 0x0, 0x80) socket(0xf, 0xa, 0x5) ioperm$auto(0x7, 0x75, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0xc0982, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r3, 0x4b66, 0x1) 2.486433235s ago: executing program 0 (id=1558): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/flags\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) read$auto(r1, 0x0, 0x1) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) writev$auto(r2, 0x0, 0x3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x4) unlinkat$auto(0xffffffffffffffff, 0x0, 0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x8, 0x1ff, 0x7, 0x562, 0x4909b6f5, 0x1, 0x7, 0x3, 0x9, 0x5df, 0x3, 0x4, 0x2, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x3, 0x80, 0xa, 0x22000, 0x200, 0x7, 0x84, 0x0, 0x9, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f, 0x0, 0x2, 0x100000000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0x800d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x4}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r6 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) read$auto_check_wx_fops_(r6, &(0x7f0000000080)=""/228, 0xe4) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000240)=ANY=[@ANYBLOB="39e6941af1418de9cc745b6b6ff3c2049c6f8fe02ca9e005be1563f0dfb45c1205f5813d9d85b12f980a0cd49e8d5bef8dfea5a2a41e3b79920cc5dba92cc42964e50097505becad21aa134400c8880dd04d60958051668f067dea976dc13f601ef991f549b8c28c9216b7bc2fd74b7cf285f48eb3fda0fe4b295db5dc8b6ed46b3d", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf25010000000800090039abc0b36c66ecf824b619101ea610a4d4ea417204520362791fb1a5e8de21aa2844d77737aada999d83c1b0c3d6b36bcc669181932fcf77b8776671aeb3e1992821ef0a863756d5616ed3314ab8ede27e42482f1bc8b9db4c2d4c369a4065235d1cbfaab6806e6bb90dccdc491ae5691a347710d9bc758653caf27165e81798140c9c08d6dcb009ab716f709bb3b9845ad69fd5a3c862e52b6f00bee8c44a1399533d5797b55c5c6cfe4025dee583c906724fc9461aa09e7b993797b7bc1171268c8221f3ad1cefce1bca4fe3eedfeb912d", @ANYRES32=r5, @ANYBLOB="0800050006000000110001006f76735f12fffe02fffe3f000200000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 2.245796411s ago: executing program 3 (id=1559): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netpci0\x00'}) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x48800) futex$auto(0x0, 0x5, 0x8, 0x0, 0x0, 0x80000001) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b640f", 0x26) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x1) prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) read$auto(r2, 0x0, 0x1000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r4, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 2.19408551s ago: executing program 2 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209b, 0x80000e9e, 0x1, 0x11, 0xfffffffffffffff9, 0x100000000, 0x2c2, 0x40800002017d, 0x4, 0x8, 0xd, 0xd59, 0xfb, 0xff, 0x69, 0x100000005]}, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fcdbdf25020000001a0004002f6465762f62696e64657266732f62696e64657230000000080003001e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40814) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x129200, 0x0) prctl$auto(0x51, 0x1, 0x0, 0x40, 0x100000000080000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x16, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/8-0:1.0/usb8-port1/uevent\x00', 0x12b140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.098917702s ago: executing program 0 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x1, 0xd, 0xfffffffffffffff9, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x8, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fcdbdf25020000001a0004002f6465762f62696e64657266732f62696e64657230000000080003001e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000080), 0x4}, 0x2) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40814) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000600), r1) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x129200, 0x0) prctl$auto(0x51, 0x1, 0x0, 0x40, 0x100000000080000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0xe1693fe33a3633eb, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x10001) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x0, 0x8, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd00490000080000000008f75b1f6de0d6d51768a257a97ca5e9ca6310ea"}) read$auto_long_retry_limit_ops_(0xffffffffffffffff, &(0x7f0000000380)=""/212, 0xffffffffffffffbf) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8004) 520.392395ms ago: executing program 2 (id=1562): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x1, 0x800, 0x4e7) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) statmount$auto(0x0, 0x0, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x20000) bpf$auto(0xf, 0x0, 0xf) write$auto(0x3, 0x0, 0xfffffdef) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0b45545, 0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) r4 = syz_clone3(&(0x7f00000004c0)={0x188000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x39}, &(0x7f00000002c0)=""/210, 0xd2, &(0x7f00000003c0)=""/186, &(0x7f0000000480)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) move_pages$auto(r4, 0x0, &(0x7f0000000640)=&(0x7f0000000540)="fcaff3c5c02963fb18fc557242f75b3944ff2904d282de3b3e7096c4dc5a36a95a1d4e3adb4f11035f46121b0150525dbb50e6a78e2f8c99ba7752e813fea95a026f2f0606fbc3c47b0b6c9cc393f55f83001bab7830819e693e4ab2bad47495a6fb13e07477f7a4e79a8d79feb47ab87560fa684fe782ab1123039612bd3c73dbe74a8b74d31d9c1500779e409a469eb239cda7968a2fdf2ef759767d01a395228d2ed63984608d2c3d7ef616a9343ad10ca47bf533f11f4cad2506306cdda7a267d3ec2211185b897d50729f5b9a29d765e579f7ffbfb655b9398e27d277", &(0x7f0000000680)=0x2, &(0x7f00000006c0)=0x1, 0x5) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) 457.346201ms ago: executing program 3 (id=1563): close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x5, &(0x7f0000000000)={{0xa, 0x22ee}, {0x6, 0x1}}, &(0x7f0000000080)={{0x482871c6, 0x7}, {0x0, 0x80}}) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d37c, 0x33b) socket(0x2, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0xf13f, 0x3, 0x0, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 0s ago: executing program 1 (id=1564): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf25010000000800", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x48800) futex$auto(0x0, 0x5, 0x8, 0x0, 0x0, 0x80000001) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b640f", 0x26) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x1) prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) msgctl$auto_IPC_STAT(0x25, 0x2, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x7ffffffd, 0x7fff, 0x5}, 0x0, 0x0, 0x3, 0xff, 0x506, 0x2, 0x10001, 0x3b5d, 0x7ff, 0x2, @raw=0x8}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) read$auto(r4, 0x0, 0x1000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 81.443044][ T5817] cgroup: Unknown subsys name 'net' [ 81.612068][ T5817] cgroup: Unknown subsys name 'cpuset' [ 81.621182][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.114056][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.109763][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.118024][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.126989][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.134828][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.143292][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.151068][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.159821][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.160066][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.168089][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.176385][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.181629][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.190146][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.199472][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.204887][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.218004][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.226461][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.229368][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.241887][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.251415][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.251737][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.791713][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.857258][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.912338][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 86.049043][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.056283][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.064196][ T5830] bridge_slave_0: entered allmulticast mode [ 86.072056][ T5830] bridge_slave_0: entered promiscuous mode [ 86.089825][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.107451][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.114643][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.121976][ T5830] bridge_slave_1: entered allmulticast mode [ 86.129205][ T5830] bridge_slave_1: entered promiscuous mode [ 86.231045][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.238249][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.246360][ T5828] bridge_slave_0: entered allmulticast mode [ 86.254265][ T5828] bridge_slave_0: entered promiscuous mode [ 86.269179][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.292439][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.300084][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.307281][ T5828] bridge_slave_1: entered allmulticast mode [ 86.314620][ T5828] bridge_slave_1: entered promiscuous mode [ 86.328176][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.337509][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.345461][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.352759][ T5826] bridge_slave_0: entered allmulticast mode [ 86.359909][ T5826] bridge_slave_0: entered promiscuous mode [ 86.401326][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.408745][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.416155][ T5826] bridge_slave_1: entered allmulticast mode [ 86.423796][ T5826] bridge_slave_1: entered promiscuous mode [ 86.482078][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.492116][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.499855][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.507023][ T5827] bridge_slave_0: entered allmulticast mode [ 86.514371][ T5827] bridge_slave_0: entered promiscuous mode [ 86.523873][ T5830] team0: Port device team_slave_0 added [ 86.544019][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.553429][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.561038][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.568231][ T5827] bridge_slave_1: entered allmulticast mode [ 86.575826][ T5827] bridge_slave_1: entered promiscuous mode [ 86.584661][ T5830] team0: Port device team_slave_1 added [ 86.593492][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.652354][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.715221][ T5828] team0: Port device team_slave_0 added [ 86.724947][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.746604][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.754102][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.780683][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.794188][ T5828] team0: Port device team_slave_1 added [ 86.802398][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.813420][ T5826] team0: Port device team_slave_0 added [ 86.820866][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.827840][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.855312][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.905865][ T5826] team0: Port device team_slave_1 added [ 86.957446][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.965608][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.002821][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.067947][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.075789][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.103379][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.116963][ T5827] team0: Port device team_slave_0 added [ 87.167855][ T5827] team0: Port device team_slave_1 added [ 87.176537][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.184284][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.210297][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.219323][ T5832] Bluetooth: hci1: command tx timeout [ 87.221196][ T5844] Bluetooth: hci3: command tx timeout [ 87.233934][ T5830] hsr_slave_0: entered promiscuous mode [ 87.240855][ T5830] hsr_slave_1: entered promiscuous mode [ 87.275798][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.283080][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.309637][ T5844] Bluetooth: hci2: command tx timeout [ 87.309790][ T5832] Bluetooth: hci0: command tx timeout [ 87.315407][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.390416][ T5828] hsr_slave_0: entered promiscuous mode [ 87.396681][ T5828] hsr_slave_1: entered promiscuous mode [ 87.403049][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 87.409300][ T5828] Cannot create hsr debugfs directory [ 87.415549][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.422990][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.449271][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.462095][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.469334][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.495927][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.589259][ T5826] hsr_slave_0: entered promiscuous mode [ 87.595588][ T5826] hsr_slave_1: entered promiscuous mode [ 87.602382][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 87.608151][ T5826] Cannot create hsr debugfs directory [ 87.706219][ T5827] hsr_slave_0: entered promiscuous mode [ 87.712618][ T5827] hsr_slave_1: entered promiscuous mode [ 87.719000][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 87.724833][ T5827] Cannot create hsr debugfs directory [ 88.100908][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.115035][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.125869][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.145653][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.205723][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.219969][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.230929][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.242491][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.347293][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.360617][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.376980][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.393322][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.541420][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.551877][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.571432][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.582599][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.605853][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.623583][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.648183][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.655644][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.682644][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.693016][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.700174][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.755213][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.790366][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.797523][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.824114][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.831271][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.876454][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.962148][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.003215][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.010624][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.037675][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.045063][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.147083][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.197616][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.237116][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.244450][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.274977][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.282243][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.305044][ T5832] Bluetooth: hci1: command tx timeout [ 89.305245][ T5844] Bluetooth: hci3: command tx timeout [ 89.355866][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.379125][ T5844] Bluetooth: hci2: command tx timeout [ 89.381916][ T5832] Bluetooth: hci0: command tx timeout [ 89.457881][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.583422][ T5830] veth0_vlan: entered promiscuous mode [ 89.640553][ T5828] veth0_vlan: entered promiscuous mode [ 89.655693][ T5830] veth1_vlan: entered promiscuous mode [ 89.680693][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.704046][ T5828] veth1_vlan: entered promiscuous mode [ 89.771334][ T5830] veth0_macvtap: entered promiscuous mode [ 89.783401][ T5830] veth1_macvtap: entered promiscuous mode [ 89.820219][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.843973][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.879490][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.886990][ T5828] veth0_macvtap: entered promiscuous mode [ 89.894150][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903933][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.922354][ T5827] veth0_vlan: entered promiscuous mode [ 89.930083][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.939932][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.969946][ T5828] veth1_macvtap: entered promiscuous mode [ 90.008073][ T5827] veth1_vlan: entered promiscuous mode [ 90.046589][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.107220][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.137833][ T5826] veth0_vlan: entered promiscuous mode [ 90.159614][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.168969][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.178143][ T5827] veth0_macvtap: entered promiscuous mode [ 90.188872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.196841][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.201144][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.213650][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.234053][ T5827] veth1_macvtap: entered promiscuous mode [ 90.245758][ T5826] veth1_vlan: entered promiscuous mode [ 90.291827][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.324602][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.338197][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.348650][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.387631][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397411][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.437349][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.446694][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.474361][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.484350][ T5826] veth0_macvtap: entered promiscuous mode [ 90.509071][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.516933][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.547892][ T5826] veth1_macvtap: entered promiscuous mode [ 90.629547][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.641670][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.665455][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.718890][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.732507][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.743067][ T5921] Zero length message leads to an empty skb [ 90.761468][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.792418][ T2915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.801604][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.823005][ T2915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.849287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.986860][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.998372][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036343][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.074747][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.276605][ T5925] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 91.378542][ T5832] Bluetooth: hci1: command tx timeout [ 91.380656][ T5844] Bluetooth: hci3: command tx timeout [ 91.459403][ T5844] Bluetooth: hci0: command tx timeout [ 91.460584][ T5832] Bluetooth: hci2: command tx timeout [ 91.482586][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.498682][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.623234][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.641343][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.863239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.939028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.960416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.969589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 91.978092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 92.053457][ T24] cfg80211: failed to load regulatory.db [ 92.138680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.147314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.229078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.271805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.460317][ T5832] Bluetooth: hci1: command tx timeout [ 93.462296][ T5844] Bluetooth: hci3: command tx timeout [ 93.542319][ T5844] Bluetooth: hci2: command tx timeout [ 93.542332][ T5832] Bluetooth: hci0: command tx timeout [ 95.585854][ T5974] syz.1.10 (5974) used greatest stack depth: 17720 bytes left [ 96.702011][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.913781][ T6002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.001566][ T6004] netlink: 25 bytes leftover after parsing attributes in process `syz.0.18'. [ 97.100771][ T6005] mmap: syz.0.18 (6005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.436918][ T6007] zswap: compressor not available [ 97.498992][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 99.100909][ T6028] zswap: compressor not available [ 99.638452][ T6042] FAULT_INJECTION: forcing a failure. [ 99.638452][ T6042] name failslab, interval 1, probability 0, space 0, times 1 [ 99.675536][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 99.675562][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.675571][ T6042] Call Trace: [ 99.675576][ T6042] [ 99.675582][ T6042] dump_stack_lvl+0x16c/0x1f0 [ 99.675608][ T6042] should_fail_ex+0x512/0x640 [ 99.675629][ T6042] ? fs_reclaim_acquire+0xae/0x150 [ 99.675650][ T6042] should_failslab+0xc2/0x120 [ 99.675669][ T6042] __kmalloc_noprof+0xdd/0x880 [ 99.675689][ T6042] ? kfree+0x252/0x6d0 [ 99.675701][ T6042] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 99.675720][ T6042] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 99.675735][ T6042] tomoyo_realpath_from_path+0xc2/0x6e0 [ 99.675760][ T6042] tomoyo_check_open_permission+0x2ab/0x3c0 [ 99.675783][ T6042] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 99.675824][ T6042] ? do_raw_spin_lock+0x12c/0x2b0 [ 99.675850][ T6042] tomoyo_file_open+0x6b/0x90 [ 99.675868][ T6042] security_file_open+0x84/0x1e0 [ 99.675883][ T6042] do_dentry_open+0x596/0x1530 [ 99.675905][ T6042] vfs_open+0x82/0x3f0 [ 99.675926][ T6042] path_openat+0x1de4/0x2cb0 [ 99.675947][ T6042] ? __pfx_path_openat+0x10/0x10 [ 99.675963][ T6042] ? __lock_acquire+0xb8a/0x1c90 [ 99.675983][ T6042] do_filp_open+0x20b/0x470 [ 99.675997][ T6042] ? __pfx_do_filp_open+0x10/0x10 [ 99.676026][ T6042] ? alloc_fd+0x471/0x7d0 [ 99.676044][ T6042] do_sys_openat2+0x11b/0x1d0 [ 99.676063][ T6042] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.676089][ T6042] __x64_sys_openat+0x174/0x210 [ 99.676108][ T6042] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.676135][ T6042] do_syscall_64+0xcd/0xfa0 [ 99.676152][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.676166][ T6042] RIP: 0033:0x7fa322f8efc9 [ 99.676181][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.676204][ T6042] RSP: 002b:00007fa323ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.676218][ T6042] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f8efc9 [ 99.676227][ T6042] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 99.676236][ T6042] RBP: 00007fa323011f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.676244][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.676253][ T6042] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007ffc98766018 [ 99.676272][ T6042] [ 99.676280][ T6042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.113566][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 102.672420][ T6075] zswap: compressor not available [ 103.239951][ T6093] process 'syz.3.35' launched ':,' with NULL argv: empty string added [ 103.793933][ T6097] zswap: compressor not available [ 103.924259][ T6103] FAULT_INJECTION: forcing a failure. [ 103.924259][ T6103] name failslab, interval 1, probability 0, space 0, times 0 [ 104.019560][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT(full) [ 104.019597][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.019613][ T6103] Call Trace: [ 104.019621][ T6103] [ 104.019627][ T6103] dump_stack_lvl+0x16c/0x1f0 [ 104.019651][ T6103] should_fail_ex+0x512/0x640 [ 104.019675][ T6103] ? fs_reclaim_acquire+0xae/0x150 [ 104.019695][ T6103] should_failslab+0xc2/0x120 [ 104.019714][ T6103] __kmalloc_noprof+0xdd/0x880 [ 104.019737][ T6103] ? kfree+0x252/0x6d0 [ 104.019749][ T6103] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.019771][ T6103] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.019791][ T6103] tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.019816][ T6103] tomoyo_check_open_permission+0x2ab/0x3c0 [ 104.019839][ T6103] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 104.019893][ T6103] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.019920][ T6103] tomoyo_file_open+0x6b/0x90 [ 104.019939][ T6103] security_file_open+0x84/0x1e0 [ 104.019955][ T6103] do_dentry_open+0x596/0x1530 [ 104.019977][ T6103] vfs_open+0x82/0x3f0 [ 104.019998][ T6103] path_openat+0x1de4/0x2cb0 [ 104.020019][ T6103] ? __pfx_path_openat+0x10/0x10 [ 104.020035][ T6103] ? __lock_acquire+0xb8a/0x1c90 [ 104.020054][ T6103] do_filp_open+0x20b/0x470 [ 104.020069][ T6103] ? __pfx_do_filp_open+0x10/0x10 [ 104.020097][ T6103] ? alloc_fd+0x471/0x7d0 [ 104.020120][ T6103] do_sys_openat2+0x11b/0x1d0 [ 104.020142][ T6103] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.020176][ T6103] __x64_sys_openat+0x174/0x210 [ 104.020199][ T6103] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.020228][ T6103] do_syscall_64+0xcd/0xfa0 [ 104.020251][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.020265][ T6103] RIP: 0033:0x7fb88818efc9 [ 104.020277][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.020292][ T6103] RSP: 002b:00007fb888ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.020308][ T6103] RAX: ffffffffffffffda RBX: 00007fb8883e5fa0 RCX: 00007fb88818efc9 [ 104.020317][ T6103] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 104.020326][ T6103] RBP: 00007fb888211f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.020335][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.020344][ T6103] R13: 00007fb8883e6038 R14: 00007fb8883e5fa0 R15: 00007ffeec017c48 [ 104.020364][ T6103] [ 104.020370][ T6103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.936969][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 106.883596][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 108.889788][ T6157] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.098432][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 114.181143][ T6208] zswap: compressor not available [ 116.220718][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 117.903068][ T6242] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.140381][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 121.897312][ T6311] zram: Removed device: zram0 [ 122.405396][ T6318] FAULT_INJECTION: forcing a failure. [ 122.405396][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 122.477255][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full) [ 122.477277][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.477286][ T6318] Call Trace: [ 122.477291][ T6318] [ 122.477297][ T6318] dump_stack_lvl+0x16c/0x1f0 [ 122.477317][ T6318] should_fail_ex+0x512/0x640 [ 122.477348][ T6318] ? fs_reclaim_acquire+0xae/0x150 [ 122.477368][ T6318] should_failslab+0xc2/0x120 [ 122.477387][ T6318] __kmalloc_noprof+0xdd/0x880 [ 122.477407][ T6318] ? kfree+0x252/0x6d0 [ 122.477418][ T6318] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.477437][ T6318] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.477452][ T6318] tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.477472][ T6318] tomoyo_check_open_permission+0x2ab/0x3c0 [ 122.477495][ T6318] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 122.477534][ T6318] ? do_raw_spin_lock+0x12c/0x2b0 [ 122.477561][ T6318] tomoyo_file_open+0x6b/0x90 [ 122.477582][ T6318] security_file_open+0x84/0x1e0 [ 122.477597][ T6318] do_dentry_open+0x596/0x1530 [ 122.477618][ T6318] vfs_open+0x82/0x3f0 [ 122.477639][ T6318] path_openat+0x1de4/0x2cb0 [ 122.477660][ T6318] ? __pfx_path_openat+0x10/0x10 [ 122.477676][ T6318] ? __lock_acquire+0xb8a/0x1c90 [ 122.477696][ T6318] do_filp_open+0x20b/0x470 [ 122.477710][ T6318] ? __pfx_do_filp_open+0x10/0x10 [ 122.477738][ T6318] ? alloc_fd+0x471/0x7d0 [ 122.477757][ T6318] do_sys_openat2+0x11b/0x1d0 [ 122.477775][ T6318] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.477801][ T6318] __x64_sys_openat+0x174/0x210 [ 122.477821][ T6318] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.477848][ T6318] do_syscall_64+0xcd/0xfa0 [ 122.477865][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.477879][ T6318] RIP: 0033:0x7fbb2ad8efc9 [ 122.477890][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.477903][ T6318] RSP: 002b:00007fbb2bb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.477921][ T6318] RAX: ffffffffffffffda RBX: 00007fbb2afe5fa0 RCX: 00007fbb2ad8efc9 [ 122.477930][ T6318] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 122.477939][ T6318] RBP: 00007fbb2ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.477948][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.477956][ T6318] R13: 00007fbb2afe6038 R14: 00007fbb2afe5fa0 R15: 00007ffd1af5eb08 [ 122.477976][ T6318] [ 122.717959][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.724021][ T6318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.565699][ T6376] zswap: compressor not available [ 128.018430][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 128.293474][ T6399] zswap: compressor not available [ 128.952751][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 129.321003][ T6422] FAULT_INJECTION: forcing a failure. [ 129.321003][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 129.336177][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 129.336212][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.336227][ T6422] Call Trace: [ 129.336236][ T6422] [ 129.336246][ T6422] dump_stack_lvl+0x16c/0x1f0 [ 129.336281][ T6422] should_fail_ex+0x512/0x640 [ 129.336319][ T6422] ? fs_reclaim_acquire+0xae/0x150 [ 129.336358][ T6422] should_failslab+0xc2/0x120 [ 129.336393][ T6422] __kmalloc_noprof+0xdd/0x880 [ 129.336433][ T6422] ? kfree+0x252/0x6d0 [ 129.336453][ T6422] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 129.336491][ T6422] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 129.336520][ T6422] tomoyo_realpath_from_path+0xc2/0x6e0 [ 129.336560][ T6422] tomoyo_check_open_permission+0x2ab/0x3c0 [ 129.336603][ T6422] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 129.336683][ T6422] ? do_raw_spin_lock+0x12c/0x2b0 [ 129.336732][ T6422] tomoyo_file_open+0x6b/0x90 [ 129.336776][ T6422] security_file_open+0x84/0x1e0 [ 129.336806][ T6422] do_dentry_open+0x596/0x1530 [ 129.336850][ T6422] vfs_open+0x82/0x3f0 [ 129.336892][ T6422] path_openat+0x1de4/0x2cb0 [ 129.336933][ T6422] ? __pfx_path_openat+0x10/0x10 [ 129.336965][ T6422] ? __lock_acquire+0xb8a/0x1c90 [ 129.337004][ T6422] do_filp_open+0x20b/0x470 [ 129.337033][ T6422] ? __pfx_do_filp_open+0x10/0x10 [ 129.337089][ T6422] ? alloc_fd+0x471/0x7d0 [ 129.337130][ T6422] do_sys_openat2+0x11b/0x1d0 [ 129.337167][ T6422] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.337218][ T6422] __x64_sys_openat+0x174/0x210 [ 129.337255][ T6422] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.337308][ T6422] do_syscall_64+0xcd/0xfa0 [ 129.337341][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.337367][ T6422] RIP: 0033:0x7fa322f8efc9 [ 129.337389][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.337413][ T6422] RSP: 002b:00007fa323ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.337438][ T6422] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f8efc9 [ 129.337455][ T6422] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 129.337472][ T6422] RBP: 00007fa323011f91 R08: 0000000000000000 R09: 0000000000000000 [ 129.337488][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.337504][ T6422] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007ffc98766018 [ 129.337542][ T6422] [ 129.577748][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.643466][ T6422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.968745][ T6435] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.926400][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938375][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.046717][ T6459] zswap: compressor not available [ 134.180121][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 134.547564][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 137.569520][ T6509] FAULT_INJECTION: forcing a failure. [ 137.569520][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 137.680796][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) [ 137.680834][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.680850][ T6509] Call Trace: [ 137.680859][ T6509] [ 137.680868][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 137.680903][ T6509] should_fail_ex+0x512/0x640 [ 137.680943][ T6509] ? fs_reclaim_acquire+0xae/0x150 [ 137.680981][ T6509] should_failslab+0xc2/0x120 [ 137.681016][ T6509] __kmalloc_noprof+0xdd/0x880 [ 137.681055][ T6509] ? kfree+0x252/0x6d0 [ 137.681076][ T6509] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.681113][ T6509] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.681142][ T6509] tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.681183][ T6509] tomoyo_check_open_permission+0x2ab/0x3c0 [ 137.681226][ T6509] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 137.681305][ T6509] ? do_raw_spin_lock+0x12c/0x2b0 [ 137.681363][ T6509] tomoyo_file_open+0x6b/0x90 [ 137.681399][ T6509] security_file_open+0x84/0x1e0 [ 137.681434][ T6509] do_dentry_open+0x596/0x1530 [ 137.681477][ T6509] vfs_open+0x82/0x3f0 [ 137.681519][ T6509] path_openat+0x1de4/0x2cb0 [ 137.681561][ T6509] ? __pfx_path_openat+0x10/0x10 [ 137.681592][ T6509] ? __lock_acquire+0xb8a/0x1c90 [ 137.681631][ T6509] do_filp_open+0x20b/0x470 [ 137.681660][ T6509] ? __pfx_do_filp_open+0x10/0x10 [ 137.681715][ T6509] ? alloc_fd+0x471/0x7d0 [ 137.681756][ T6509] do_sys_openat2+0x11b/0x1d0 [ 137.681793][ T6509] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.681844][ T6509] __x64_sys_openat+0x174/0x210 [ 137.681881][ T6509] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.681934][ T6509] do_syscall_64+0xcd/0xfa0 [ 137.681966][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.681993][ T6509] RIP: 0033:0x7fa322f8efc9 [ 137.682014][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.682039][ T6509] RSP: 002b:00007fa323ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.682064][ T6509] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f8efc9 [ 137.682082][ T6509] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 137.682097][ T6509] RBP: 00007fa323011f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.682113][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.682128][ T6509] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007ffc98766018 [ 137.682165][ T6509] [ 137.683917][ T6509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.626507][ T6518] zswap: compressor not available [ 142.296268][ T6570] FAULT_INJECTION: forcing a failure. [ 142.296268][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 142.344229][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT(full) [ 142.344265][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.344281][ T6570] Call Trace: [ 142.344290][ T6570] [ 142.344300][ T6570] dump_stack_lvl+0x16c/0x1f0 [ 142.344335][ T6570] should_fail_ex+0x512/0x640 [ 142.344373][ T6570] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 142.344405][ T6570] should_failslab+0xc2/0x120 [ 142.344440][ T6570] kmem_cache_alloc_noprof+0x75/0x6e0 [ 142.344467][ T6570] ? security_file_alloc+0x34/0x2b0 [ 142.344501][ T6570] ? security_file_alloc+0x34/0x2b0 [ 142.344526][ T6570] security_file_alloc+0x34/0x2b0 [ 142.344554][ T6570] init_file+0x93/0x4c0 [ 142.344577][ T6570] alloc_empty_file+0x73/0x1e0 [ 142.344596][ T6570] path_openat+0xda/0x2cb0 [ 142.344631][ T6570] ? __pfx_path_openat+0x10/0x10 [ 142.344660][ T6570] ? __lock_acquire+0xb8a/0x1c90 [ 142.344698][ T6570] do_filp_open+0x20b/0x470 [ 142.344724][ T6570] ? __pfx_do_filp_open+0x10/0x10 [ 142.344777][ T6570] ? alloc_fd+0x471/0x7d0 [ 142.344811][ T6570] do_sys_openat2+0x11b/0x1d0 [ 142.344846][ T6570] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.344897][ T6570] __x64_sys_openat+0x174/0x210 [ 142.344935][ T6570] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.344988][ T6570] do_syscall_64+0xcd/0xfa0 [ 142.345028][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.345055][ T6570] RIP: 0033:0x7fbb2ad8efc9 [ 142.345076][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.345100][ T6570] RSP: 002b:00007fbb2bb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.345126][ T6570] RAX: ffffffffffffffda RBX: 00007fbb2afe5fa0 RCX: 00007fbb2ad8efc9 [ 142.345144][ T6570] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 142.345161][ T6570] RBP: 00007fbb2ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.345177][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.345192][ T6570] R13: 00007fbb2afe6038 R14: 00007fbb2afe5fa0 R15: 00007ffd1af5eb08 [ 142.345229][ T6570] [ 149.348660][ T6635] zswap: compressor not available [ 157.378729][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 158.724600][ T6757] zswap: compressor not available [ 163.426995][ T6812] netlink: 25 bytes leftover after parsing attributes in process `syz.2.189'. [ 166.498361][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 171.049239][ T6890] zswap: compressor not available [ 171.941112][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.138525][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.378470][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 178.518971][ T6993] zswap: compressor not available [ 179.829187][ T7008] zswap: compressor not available [ 181.843966][ T7028] zswap: compressor not available [ 188.201726][ T7097] zswap: compressor not available [ 191.308277][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.538379][ T5844] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 194.341687][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348114][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.188198][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 199.698342][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 199.730561][ T7232] zswap: compressor not available [ 200.423323][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 200.533187][ T7242] zswap: compressor not available [ 200.974229][ T7256] FAULT_INJECTION: forcing a failure. [ 200.974229][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 201.008300][ T7256] CPU: 0 UID: 0 PID: 7256 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 201.008321][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.008329][ T7256] Call Trace: [ 201.008335][ T7256] [ 201.008341][ T7256] dump_stack_lvl+0x16c/0x1f0 [ 201.008362][ T7256] should_fail_ex+0x512/0x640 [ 201.008383][ T7256] ? fs_reclaim_acquire+0xae/0x150 [ 201.008403][ T7256] should_failslab+0xc2/0x120 [ 201.008422][ T7256] __kmalloc_noprof+0xdd/0x880 [ 201.008443][ T7256] ? kfree+0x252/0x6d0 [ 201.008454][ T7256] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 201.008473][ T7256] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 201.008488][ T7256] tomoyo_realpath_from_path+0xc2/0x6e0 [ 201.008508][ T7256] tomoyo_check_open_permission+0x2ab/0x3c0 [ 201.008530][ T7256] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 201.008570][ T7256] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.008595][ T7256] tomoyo_file_open+0x6b/0x90 [ 201.008613][ T7256] security_file_open+0x84/0x1e0 [ 201.008628][ T7256] do_dentry_open+0x596/0x1530 [ 201.008649][ T7256] vfs_open+0x82/0x3f0 [ 201.008670][ T7256] path_openat+0x1de4/0x2cb0 [ 201.008691][ T7256] ? __pfx_path_openat+0x10/0x10 [ 201.008707][ T7256] ? __lock_acquire+0xb8a/0x1c90 [ 201.008727][ T7256] do_filp_open+0x20b/0x470 [ 201.008741][ T7256] ? __pfx_do_filp_open+0x10/0x10 [ 201.008769][ T7256] ? alloc_fd+0x471/0x7d0 [ 201.008788][ T7256] do_sys_openat2+0x11b/0x1d0 [ 201.008806][ T7256] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.008832][ T7256] __x64_sys_openat+0x174/0x210 [ 201.008852][ T7256] ? __pfx___x64_sys_openat+0x10/0x10 [ 201.008879][ T7256] do_syscall_64+0xcd/0xfa0 [ 201.008895][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.008916][ T7256] RIP: 0033:0x7fbb2ad8efc9 [ 201.008929][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.008942][ T7256] RSP: 002b:00007fbb2bb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.008956][ T7256] RAX: ffffffffffffffda RBX: 00007fbb2afe5fa0 RCX: 00007fbb2ad8efc9 [ 201.008965][ T7256] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 201.008974][ T7256] RBP: 00007fbb2ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.008982][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.008991][ T7256] R13: 00007fbb2afe6038 R14: 00007fbb2afe5fa0 R15: 00007ffd1af5eb08 [ 201.009010][ T7256] [ 201.009016][ T7256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.818344][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 206.791937][ T7314] zswap: compressor not available [ 211.779215][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.785315][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 211.792494][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.798621][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 220.448396][ T7478] zswap: compressor not available [ 224.658326][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 227.218606][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 233.353547][ T7623] FAULT_INJECTION: forcing a failure. [ 233.353547][ T7623] name fail_futex, interval 1, probability 0, space 0, times 1 [ 233.380479][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(full) [ 233.380525][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.380539][ T7623] Call Trace: [ 233.380547][ T7623] [ 233.380557][ T7623] dump_stack_lvl+0x16c/0x1f0 [ 233.380594][ T7623] should_fail_ex+0x512/0x640 [ 233.380637][ T7623] get_futex_key+0x1d0/0x1560 [ 233.380675][ T7623] ? __pfx_get_futex_key+0x10/0x10 [ 233.380713][ T7623] ? __pfx_free_one_page+0x10/0x10 [ 233.380756][ T7623] futex_wake+0xea/0x530 [ 233.380796][ T7623] ? do_getxattr+0x1fc/0x360 [ 233.380821][ T7623] ? __pfx_futex_wake+0x10/0x10 [ 233.380860][ T7623] ? path_getxattrat+0x139/0x2d0 [ 233.380891][ T7623] ? __pfx_path_getxattrat+0x10/0x10 [ 233.380928][ T7623] do_futex+0x1e3/0x350 [ 233.380964][ T7623] ? __pfx_do_futex+0x10/0x10 [ 233.381007][ T7623] __x64_sys_futex+0x1e0/0x4c0 [ 233.381047][ T7623] ? __pfx___x64_sys_futex+0x10/0x10 [ 233.381083][ T7623] ? xfd_validate_state+0x61/0x180 [ 233.381117][ T7623] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 233.381153][ T7623] do_syscall_64+0xcd/0xfa0 [ 233.381183][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.381209][ T7623] RIP: 0033:0x7fb88818efc9 [ 233.381230][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.381255][ T7623] RSP: 002b:00007fb888ff70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.381280][ T7623] RAX: ffffffffffffffda RBX: 00007fb8883e5fa8 RCX: 00007fb88818efc9 [ 233.381299][ T7623] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8883e5fac [ 233.381316][ T7623] RBP: 00007fb8883e5fa0 R08: 00007fb888ff8000 R09: 0000000000000000 [ 233.381333][ T7623] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 233.381349][ T7623] R13: 00007fb8883e6038 R14: 00007ffeec017b60 R15: 00007ffeec017c48 [ 233.381385][ T7623] [ 234.157528][ T7631] zswap: compressor not available [ 246.980791][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 248.619698][ T7798] zswap: compressor not available [ 248.842045][ T7792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.848135][ T7792] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 248.973599][ T7792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.998612][ T7792] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.024809][ T7792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.056091][ T7792] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 249.105572][ T7792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.118363][ T7792] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 250.560955][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 250.978460][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 251.068252][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 251.138327][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 252.578358][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 253.088388][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 253.151150][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 253.238264][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 254.582460][ T7873] zswap: compressor not available [ 255.818942][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825271][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.858557][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 255.948272][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 258.718698][ T7914] netlink: 25 bytes leftover after parsing attributes in process `syz.2.415'. [ 261.898325][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 265.462458][ T7975] zswap: compressor not available [ 277.469865][ T8108] zswap: compressor not available [ 277.703748][ T8104] zswap: compressor not available [ 280.279975][ T8150] zswap: compressor not available [ 281.551334][ T8164] netlink: 25 bytes leftover after parsing attributes in process `syz.1.465'. [ 284.670084][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 289.680334][ T8224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.686452][ T8224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.700741][ T8224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.706855][ T8224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.996825][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 291.698472][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 291.785827][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 291.791901][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 296.657611][ T8311] zswap: compressor not available [ 300.230890][ T8353] zswap: compressor not available [ 301.184038][ T8372] zswap: compressor not available [ 302.428421][ T8373] kexec: Could not allocate control_code_buffer [ 303.513233][ T8393] zswap: compressor not available [ 307.555886][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 316.378362][ T8516] zswap: compressor not available [ 317.225039][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.231512][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.978944][ T8545] zswap: compressor not available [ 319.058255][ T8560] zswap: compressor not available [ 321.203656][ T8579] zswap: compressor not available [ 322.903099][ T8610] zswap: compressor not available [ 324.341953][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 326.640932][ T8650] zswap: compressor not available [ 333.464918][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 338.620930][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 339.152948][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 339.972619][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 340.440822][ T8791] zswap: compressor not available [ 341.778699][ T8817] zswap: compressor not available [ 344.530963][ T8854] zswap: compressor not available [ 345.778059][ T8872] zswap: compressor not available [ 348.130494][ T8909] netlink: 25 bytes leftover after parsing attributes in process `syz.3.612'. [ 351.062106][ T8932] zswap: compressor not available [ 351.236815][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 355.099251][ T8979] zswap: compressor not available [ 356.473025][ T8996] zswap: compressor not available [ 359.940617][ T9031] zswap: compressor not available [ 360.505671][ T9041] zswap: compressor not available [ 364.338931][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 366.603217][ T9097] zswap: compressor not available [ 367.705347][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 371.606606][ T9150] zswap: compressor not available [ 376.320376][ T9184] kexec: Could not allocate control_code_buffer [ 377.758584][ T9220] zswap: compressor not available [ 378.705624][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.713049][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.695623][ T9253] kexec: Could not allocate control_code_buffer [ 384.266194][ T9288] zswap: compressor not available [ 385.969844][ T9311] zswap: compressor not available [ 386.854740][ T9322] zswap: compressor not available [ 400.479387][ T9479] netlink: 25 bytes leftover after parsing attributes in process `syz.1.726'. [ 401.938516][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 407.441705][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 407.970624][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 408.493906][ T9555] zswap: compressor not available [ 414.629904][ T9627] zswap: compressor not available [ 416.668527][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 419.253521][ T9679] zswap: compressor not available [ 422.870730][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 423.420450][ T9724] zswap: compressor not available [ 424.446000][ T9731] zswap: compressor not available [ 424.735760][ T9734] zswap: compressor not available [ 425.608848][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 425.808285][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 427.503068][ T9767] zswap: compressor not available [ 429.043476][ T9797] zswap: compressor not available [ 429.493883][ T9796] zswap: compressor not available [ 430.012671][ T9812] zswap: compressor not available [ 433.908685][ T9842] zswap: compressor not available [ 435.245962][ T9858] zswap: compressor not available [ 437.138264][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 437.518086][ T9871] zswap: compressor not available [ 438.482114][ T9882] netlink: 25 bytes leftover after parsing attributes in process `syz.1.802'. [ 440.118538][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.135448][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.628192][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 442.431297][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 446.406435][ T9958] zswap: compressor not available [ 448.032638][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 450.188843][T10009] zswap: compressor not available [ 452.132397][T10034] zswap: compressor not available [ 453.858707][T10053] zswap: compressor not available [ 454.498231][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 455.209598][T10068] zswap: compressor not available [ 457.904666][T10100] zswap: compressor not available [ 461.304864][T10130] zswap: compressor not available [ 464.338290][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 466.118550][T10182] zswap: compressor not available [ 467.688532][T10194] zswap: compressor not available [ 479.671251][T10291] zswap: compressor not available [ 482.333241][T10325] zswap: compressor not available [ 492.594671][T10444] zswap: compressor not available [ 501.397609][T10552] zswap: compressor not available [ 501.541413][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547838][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.888545][T10565] zswap: compressor not available [ 501.982518][T10575] netlink: 25 bytes leftover after parsing attributes in process `syz.1.940'. [ 505.138211][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 507.539305][T10623] zswap: compressor not available [ 509.450612][T10642] zswap: compressor not available [ 512.818187][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 516.268421][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 518.300792][T10712] zswap: compressor not available [ 525.800995][T10785] zswap: compressor not available [ 528.558497][T10812] zswap: compressor not available [ 532.361012][T10845] zswap: compressor not available [ 533.226080][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 538.470893][T10898] netlink: 25 bytes leftover after parsing attributes in process `syz.1.999'. [ 538.712801][T10901] zswap: compressor not available [ 541.618167][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 542.732452][T10939] zswap: compressor not available [ 547.604424][T10987] zswap: compressor not available [ 549.028934][T11004] zswap: compressor not available [ 552.013879][T11041] zswap: compressor not available [ 554.818677][T11071] zswap: compressor not available [ 559.651802][T11120] zswap: compressor not available [ 560.999626][T11137] zswap: compressor not available [ 561.460277][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 563.000764][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.008293][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.579013][T11140] kexec: Could not allocate control_code_buffer [ 564.588567][T11164] zswap: compressor not available [ 564.961041][T11162] zswap: compressor not available [ 566.038266][T11190] zswap: compressor not available [ 567.031398][T11202] zswap: compressor not available [ 572.176124][T11241] zswap: compressor not available [ 573.441351][T11255] zswap: compressor not available [ 575.298181][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 577.879784][T11293] zswap: compressor not available [ 578.578746][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 580.507286][T11312] kexec: Could not allocate control_code_buffer [ 582.666490][T11336] zswap: compressor not available [ 583.348479][T11336] zswap: compressor not available [ 583.690494][T11352] zswap: compressor not available [ 588.048439][T11401] zswap: compressor not available [ 588.449631][T11403] zswap: compressor not available [ 588.944645][T11420] zswap: compressor not available [ 593.728647][T11437] kexec: Could not allocate control_code_buffer [ 595.224878][T11466] zswap: compressor not available [ 597.457173][T11494] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1107'. [ 599.897324][T11510] zswap: compressor not available [ 600.249963][T11501] kexec: Could not allocate control_code_buffer [ 600.597534][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 604.000673][T11549] zswap: compressor not available [ 612.280548][T11635] zswap: compressor not available [ 612.750888][T11642] zswap: compressor not available [ 613.662162][T11660] zswap: compressor not available [ 614.784348][T11677] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1143'. [ 617.938409][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 619.826521][T11713] zswap: compressor not available [ 620.458943][T11718] zswap: compressor not available [ 624.427474][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.434487][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.248440][T11839] zswap: compressor not available [ 632.749603][T11860] zswap: compressor not available [ 634.045626][T11877] zswap: compressor not available [ 635.638869][T11901] zswap: compressor not available [ 636.272627][T11912] zswap: compressor not available [ 637.379272][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 638.928291][T11932] zswap: compressor not available [ 642.818617][T11959] zswap: compressor not available [ 644.382313][T11971] zswap: compressor not available [ 644.810615][T11969] zswap: compressor not available [ 648.577739][T12011] zswap: compressor not available [ 648.933000][T12019] zswap: compressor not available [ 650.544091][T12038] FAULT_INJECTION: forcing a failure. [ 650.544091][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 650.579385][T12038] CPU: 1 UID: 0 PID: 12038 Comm: syz.0.1212 Not tainted syzkaller #0 PREEMPT(full) [ 650.579422][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 650.579436][T12038] Call Trace: [ 650.579454][T12038] [ 650.579465][T12038] dump_stack_lvl+0x16c/0x1f0 [ 650.579501][T12038] should_fail_ex+0x512/0x640 [ 650.579537][T12038] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 650.579555][T12038] should_failslab+0xc2/0x120 [ 650.579573][T12038] kmem_cache_alloc_noprof+0x75/0x6e0 [ 650.579586][T12038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 650.579608][T12038] ? mas_preallocate+0xe6a/0x11f0 [ 650.579627][T12038] ? mas_preallocate+0xe6a/0x11f0 [ 650.579642][T12038] mas_preallocate+0xe6a/0x11f0 [ 650.579661][T12038] ? __pfx_mas_preallocate+0x10/0x10 [ 650.579675][T12038] ? rcu_is_watching+0x12/0xc0 [ 650.579695][T12038] ? anon_vma_name+0x81/0x2f0 [ 650.579717][T12038] __split_vma+0x34a/0x1070 [ 650.579740][T12038] ? __pfx___split_vma+0x10/0x10 [ 650.579765][T12038] ? __pfx_mas_prev+0x10/0x10 [ 650.579785][T12038] vms_gather_munmap_vmas+0x3aa/0x1340 [ 650.579809][T12038] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 650.579830][T12038] ? move_page_tables+0xf9e/0x4230 [ 650.579848][T12038] ? __pfx_copy_vma+0x10/0x10 [ 650.579865][T12038] do_vmi_align_munmap+0x286/0x7e0 [ 650.579880][T12038] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 650.579920][T12038] do_vmi_munmap+0x204/0x3e0 [ 650.579935][T12038] move_vma+0x801/0x1770 [ 650.579952][T12038] ? __pfx_move_vma+0x10/0x10 [ 650.579975][T12038] ? vrm_set_new_addr+0x208/0x290 [ 650.579989][T12038] mremap_to+0x1b7/0x450 [ 650.580003][T12038] do_mremap+0xd89/0x2020 [ 650.580017][T12038] ? futex_private_hash_put+0x18a/0x300 [ 650.580038][T12038] ? __lock_acquire+0xb8a/0x1c90 [ 650.580056][T12038] ? __pfx_do_mremap+0x10/0x10 [ 650.580075][T12038] ? find_held_lock+0x2b/0x80 [ 650.580091][T12038] __do_sys_mremap+0x119/0x170 [ 650.580104][T12038] ? __pfx___do_sys_mremap+0x10/0x10 [ 650.580118][T12038] ? rcu_is_watching+0x12/0xc0 [ 650.580133][T12038] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 650.580162][T12038] do_syscall_64+0xcd/0xfa0 [ 650.580178][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.580195][T12038] RIP: 0033:0x7fbb2ad8efc9 [ 650.580207][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.580219][T12038] RSP: 002b:00007fbb2bb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 650.580233][T12038] RAX: ffffffffffffffda RBX: 00007fbb2afe5fa0 RCX: 00007fbb2ad8efc9 [ 650.580242][T12038] RDX: 0000000000003fd6 RSI: 0000000000000007 RDI: 0000000000000000 [ 650.580251][T12038] RBP: 00007fbb2ae11f91 R08: 0000000020000000 R09: 0000000000000000 [ 650.580260][T12038] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 650.580268][T12038] R13: 00007fbb2afe6038 R14: 00007fbb2afe5fa0 R15: 00007ffd1af5eb08 [ 650.580287][T12038] [ 651.257054][T12038] Invalid ELF header magic: != ELF [ 652.582707][T12048] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1214'. [ 654.527876][T12065] zswap: compressor not available [ 655.763551][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 663.003108][T12130] zswap: compressor not available [ 664.443405][T12147] zswap: compressor not available [ 667.325368][T12184] zswap: compressor not available [ 670.981283][T12218] zswap: compressor not available [ 672.628175][T12235] zswap: compressor not available [ 679.488483][T12301] zswap: compressor not available [ 683.925609][T12347] zswap: compressor not available [ 685.921122][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.927402][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.520898][T12373] zswap: compressor not available [ 689.343894][T12386] kexec: Could not allocate control_code_buffer [ 690.378720][T12409] zswap: compressor not available [ 694.399990][T12458] zswap: compressor not available [ 695.516614][T12476] zswap: compressor not available [ 701.616152][T12543] zswap: compressor not available [ 703.067336][T12568] zswap: compressor not available [ 703.536961][T12552] kexec: Could not allocate control_code_buffer [ 703.986729][T12579] zswap: compressor not available [ 707.075996][T12615] zswap: compressor not available [ 709.778224][T12643] zswap: compressor not available [ 710.034741][T12642] zswap: compressor not available [ 714.442667][T12677] kexec: Could not allocate control_code_buffer [ 715.030216][T12684] zswap: compressor not available [ 717.366791][T12714] zswap: compressor not available [ 719.940931][T12741] zswap: compressor not available [ 720.732480][T12748] zswap: compressor not available [ 721.921500][T12764] zswap: compressor not available [ 726.144747][T12807] zswap: compressor not available [ 732.802041][T12868] zswap: compressor not available [ 734.560266][T12883] zswap: compressor not available [ 735.058317][T12888] zswap: compressor not available [ 735.813017][T12901] zswap: compressor not available [ 745.908253][T12994] zswap: compressor not available [ 747.345484][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.351909][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.883410][T13026] zswap: compressor not available [ 749.756990][T13041] zswap: compressor not available [ 751.131661][T13062] zswap: compressor not available [ 754.431433][T13104] zswap: compressor not available [ 757.135067][T13136] zswap: compressor not available [ 757.731149][T13142] zswap: compressor not available [ 758.590450][T13157] sp0: Synchronizing with TNC [ 758.608908][T13157] sp0: Found TNC [ 759.113144][T13160] zswap: compressor not available [ 762.398181][T13200] zswap: compressor not available [ 762.848640][T13206] zswap: compressor not available [ 764.296355][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1434'. [ 764.761909][T13231] FAULT_INJECTION: forcing a failure. [ 764.761909][T13231] name failslab, interval 1, probability 0, space 0, times 0 [ 764.803011][T13231] CPU: 0 UID: 0 PID: 13231 Comm: syz.1.1436 Not tainted syzkaller #0 PREEMPT(full) [ 764.803044][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 764.803059][T13231] Call Trace: [ 764.803067][T13231] [ 764.803077][T13231] dump_stack_lvl+0x16c/0x1f0 [ 764.803117][T13231] should_fail_ex+0x512/0x640 [ 764.803154][T13231] ? fs_reclaim_acquire+0xae/0x150 [ 764.803186][T13231] should_failslab+0xc2/0x120 [ 764.803214][T13231] __kmalloc_noprof+0xdd/0x880 [ 764.803249][T13231] ? kfree+0x252/0x6d0 [ 764.803269][T13231] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 764.803306][T13231] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 764.803330][T13231] tomoyo_realpath_from_path+0xc2/0x6e0 [ 764.803383][T13231] tomoyo_check_open_permission+0x2ab/0x3c0 [ 764.803424][T13231] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 764.803462][T13231] ? __pfx___d_add+0x10/0x10 [ 764.803520][T13231] ? lock_acquire+0x179/0x350 [ 764.803554][T13231] ? find_held_lock+0x2b/0x80 [ 764.803581][T13231] ? mnt_get_write_access+0x52/0x2f0 [ 764.803617][T13231] tomoyo_file_open+0x6b/0x90 [ 764.803649][T13231] security_file_open+0x84/0x1e0 [ 764.803673][T13231] do_dentry_open+0x596/0x1530 [ 764.803712][T13231] vfs_open+0x82/0x3f0 [ 764.803752][T13231] path_openat+0x1de4/0x2cb0 [ 764.803831][T13231] ? __pfx_path_openat+0x10/0x10 [ 764.803857][T13231] ? __lock_acquire+0xb8a/0x1c90 [ 764.803889][T13231] do_filp_open+0x20b/0x470 [ 764.803916][T13231] ? __pfx_do_filp_open+0x10/0x10 [ 764.803955][T13231] ? __pfx_kfree_link+0x10/0x10 [ 764.803999][T13231] ? alloc_fd+0x471/0x7d0 [ 764.804039][T13231] do_sys_openat2+0x11b/0x1d0 [ 764.804073][T13231] ? __pfx_do_sys_openat2+0x10/0x10 [ 764.804123][T13231] ? __fget_files+0x20e/0x3c0 [ 764.804158][T13231] __x64_sys_openat+0x174/0x210 [ 764.804195][T13231] ? __pfx___x64_sys_openat+0x10/0x10 [ 764.804233][T13231] ? ksys_write+0x1ac/0x250 [ 764.804274][T13231] do_syscall_64+0xcd/0xfa0 [ 764.804309][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.804335][T13231] RIP: 0033:0x7fa322f8efc9 [ 764.804356][T13231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.804384][T13231] RSP: 002b:00007fa323ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 764.804409][T13231] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f8efc9 [ 764.804426][T13231] RDX: 0000000000080002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 764.804442][T13231] RBP: 00007fa323ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 764.804461][T13231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 764.804476][T13231] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007ffc98766018 [ 764.804512][T13231] [ 765.075313][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.285422][T13231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.263423][T13236] zswap: compressor not available [ 766.974221][T13254] zswap: compressor not available [ 772.480358][T13308] zswap: compressor not available [ 773.800925][T13325] zswap: compressor not available [ 774.299563][T13337] FAULT_INJECTION: forcing a failure. [ 774.299563][T13337] name failslab, interval 1, probability 0, space 0, times 0 [ 774.428605][T13337] CPU: 0 UID: 0 PID: 13337 Comm: syz.0.1457 Not tainted syzkaller #0 PREEMPT(full) [ 774.428635][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 774.428643][T13337] Call Trace: [ 774.428648][T13337] [ 774.428654][T13337] dump_stack_lvl+0x16c/0x1f0 [ 774.428674][T13337] should_fail_ex+0x512/0x640 [ 774.428694][T13337] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 774.428710][T13337] should_failslab+0xc2/0x120 [ 774.428729][T13337] kmem_cache_alloc_noprof+0x75/0x6e0 [ 774.428743][T13337] ? mm_alloc+0x1c/0xc0 [ 774.428763][T13337] ? mm_alloc+0x1c/0xc0 [ 774.428777][T13337] mm_alloc+0x1c/0xc0 [ 774.428791][T13337] alloc_bprm+0x2af/0x710 [ 774.428807][T13337] do_execveat_common.isra.0+0x1ce/0x610 [ 774.428824][T13337] __x64_sys_execve+0x8e/0xb0 [ 774.428839][T13337] do_syscall_64+0xcd/0xfa0 [ 774.428856][T13337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.428870][T13337] RIP: 0033:0x7fbb2ad8efc9 [ 774.428881][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.428894][T13337] RSP: 002b:00007fbb2bb55038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 774.428909][T13337] RAX: ffffffffffffffda RBX: 00007fbb2afe6090 RCX: 00007fbb2ad8efc9 [ 774.428918][T13337] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 774.428927][T13337] RBP: 00007fbb2bb55090 R08: 0000000000000000 R09: 0000000000000000 [ 774.428935][T13337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.428943][T13337] R13: 00007fbb2afe6128 R14: 00007fbb2afe6090 R15: 00007ffd1af5eb08 [ 774.428961][T13337] [ 775.615205][T13348] openvswitch: netlink: Key type 261 is out of range max 32 [ 777.608902][T13362] zswap: compressor not available [ 780.121421][ T30] audit: type=1804 audit(1761988508.374:2): pid=13385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1465" name="/newroot/379/file0" dev="tmpfs" ino=2035 res=1 errno=0 [ 780.618791][T13380] zswap: compressor not available [ 783.601736][T13407] zswap: compressor not available [ 787.424173][T13464] zswap: compressor not available [ 787.921485][T13472] zswap: compressor not available [ 790.485469][T13500] sp0: Synchronizing with TNC [ 792.701673][T13515] zswap: compressor not available [ 799.081347][T13568] FAULT_INJECTION: forcing a failure. [ 799.081347][T13568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 799.130537][T13568] CPU: 0 UID: 0 PID: 13568 Comm: syz.1.1503 Not tainted syzkaller #0 PREEMPT(full) [ 799.130576][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 799.130592][T13568] Call Trace: [ 799.130601][T13568] [ 799.130611][T13568] dump_stack_lvl+0x16c/0x1f0 [ 799.130647][T13568] should_fail_ex+0x512/0x640 [ 799.130692][T13568] _copy_from_user+0x2e/0xd0 [ 799.130732][T13568] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 799.130781][T13568] snd_rawmidi_write+0x26e/0xc10 [ 799.130828][T13568] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 799.130868][T13568] ? __pfx_default_wake_function+0x10/0x10 [ 799.130899][T13568] ? bpf_lsm_file_permission+0x9/0x10 [ 799.130930][T13568] ? security_file_permission+0x71/0x210 [ 799.130959][T13568] ? rw_verify_area+0xcf/0x6c0 [ 799.130986][T13568] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 799.131022][T13568] vfs_write+0x2a0/0x11d0 [ 799.131067][T13568] ? __pfx_vfs_write+0x10/0x10 [ 799.131093][T13568] ? find_held_lock+0x2b/0x80 [ 799.131123][T13568] ? __fget_files+0x204/0x3c0 [ 799.131155][T13568] ? __fget_files+0x20e/0x3c0 [ 799.131191][T13568] ksys_write+0x1f8/0x250 [ 799.131221][T13568] ? __pfx_ksys_write+0x10/0x10 [ 799.131261][T13568] do_syscall_64+0xcd/0xfa0 [ 799.131293][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.131320][T13568] RIP: 0033:0x7fa322f8efc9 [ 799.131341][T13568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.131367][T13568] RSP: 002b:00007fa323ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.131392][T13568] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f8efc9 [ 799.131410][T13568] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000005 [ 799.131426][T13568] RBP: 00007fa323011f91 R08: 0000000000000000 R09: 0000000000000000 [ 799.131441][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.131457][T13568] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007ffc98766018 [ 799.131492][T13568] [ 803.146030][T13614] FAULT_INJECTION: forcing a failure. [ 803.146030][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 803.286055][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.3.1511 Not tainted syzkaller #0 PREEMPT(full) [ 803.286090][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 803.286104][T13614] Call Trace: [ 803.286112][T13614] [ 803.286121][T13614] dump_stack_lvl+0x16c/0x1f0 [ 803.286154][T13614] should_fail_ex+0x512/0x640 [ 803.286190][T13614] ? __kmalloc_cache_noprof+0x5f/0x780 [ 803.286232][T13614] should_failslab+0xc2/0x120 [ 803.286264][T13614] __kmalloc_cache_noprof+0x72/0x780 [ 803.286302][T13614] ? alloc_bprm+0x86/0x710 [ 803.286331][T13614] ? alloc_bprm+0x86/0x710 [ 803.286353][T13614] alloc_bprm+0x86/0x710 [ 803.286381][T13614] do_execveat_common.isra.0+0x1ce/0x610 [ 803.286415][T13614] __x64_sys_execve+0x8e/0xb0 [ 803.286442][T13614] do_syscall_64+0xcd/0xfa0 [ 803.286473][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.286498][T13614] RIP: 0033:0x7f47f9b8efc9 [ 803.286518][T13614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.286540][T13614] RSP: 002b:00007f47faa97038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 803.286564][T13614] RAX: ffffffffffffffda RBX: 00007f47f9de6090 RCX: 00007f47f9b8efc9 [ 803.286581][T13614] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 803.286596][T13614] RBP: 00007f47faa97090 R08: 0000000000000000 R09: 0000000000000000 [ 803.286611][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.286626][T13614] R13: 00007f47f9de6128 R14: 00007f47f9de6090 R15: 00007fffae7f4138 [ 803.286661][T13614] [ 807.171904][T13660] FAULT_INJECTION: forcing a failure. [ 807.171904][T13660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.208319][T13660] CPU: 1 UID: 0 PID: 13660 Comm: syz.2.1521 Not tainted syzkaller #0 PREEMPT(full) [ 807.208351][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 807.208365][T13660] Call Trace: [ 807.208373][T13660] [ 807.208381][T13660] dump_stack_lvl+0x16c/0x1f0 [ 807.208414][T13660] should_fail_ex+0x512/0x640 [ 807.208455][T13660] _copy_from_iter+0x29f/0x1720 [ 807.208499][T13660] ? __pfx__copy_from_iter+0x10/0x10 [ 807.208536][T13660] ? rcu_is_watching+0x12/0xc0 [ 807.208562][T13660] ? trace_kmalloc+0x2b/0xd0 [ 807.208591][T13660] ? __kmalloc_noprof+0x34f/0x880 [ 807.208636][T13660] ? kernfs_fop_write_iter+0x237/0x570 [ 807.208683][T13660] kernfs_fop_write_iter+0x19a/0x570 [ 807.208726][T13660] vfs_write+0x7d3/0x11d0 [ 807.208754][T13660] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 807.208779][T13660] ? __pfx___mutex_lock+0x10/0x10 [ 807.208796][T13660] ? __pfx_vfs_write+0x10/0x10 [ 807.208822][T13660] ksys_write+0x12a/0x250 [ 807.208837][T13660] ? __pfx_ksys_write+0x10/0x10 [ 807.208857][T13660] do_syscall_64+0xcd/0xfa0 [ 807.208874][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.208888][T13660] RIP: 0033:0x7fb88818efc9 [ 807.208900][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.208913][T13660] RSP: 002b:00007fb888ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.208926][T13660] RAX: ffffffffffffffda RBX: 00007fb8883e5fa0 RCX: 00007fb88818efc9 [ 807.208935][T13660] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 807.208943][T13660] RBP: 00007fb888ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 807.208951][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.208959][T13660] R13: 00007fb8883e6038 R14: 00007fb8883e5fa0 R15: 00007ffeec017c48 [ 807.208978][T13660] [ 807.463075][T13662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 808.709884][T13675] random: crng reseeded on system resumption [ 808.741984][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.748977][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.938406][ T5837] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 809.588541][T13686] FAULT_INJECTION: forcing a failure. [ 809.588541][T13686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.648352][T13686] CPU: 0 UID: 7 PID: 13686 Comm: syz.0.1527 Not tainted syzkaller #0 PREEMPT(full) [ 809.648386][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 809.648400][T13686] Call Trace: [ 809.648408][T13686] [ 809.648418][T13686] dump_stack_lvl+0x16c/0x1f0 [ 809.648451][T13686] should_fail_ex+0x512/0x640 [ 809.648492][T13686] strncpy_from_user+0x3b/0x2e0 [ 809.648529][T13686] getname_flags.part.0+0x8f/0x550 [ 809.648569][T13686] getname_flags+0x93/0xf0 [ 809.648594][T13686] __x64_sys_rename+0x58/0xa0 [ 809.648625][T13686] do_syscall_64+0xcd/0xfa0 [ 809.648655][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.648680][T13686] RIP: 0033:0x7fbb2ad8efc9 [ 809.648700][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.648722][T13686] RSP: 002b:00007fbb2bb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 809.648746][T13686] RAX: ffffffffffffffda RBX: 00007fbb2afe5fa0 RCX: 00007fbb2ad8efc9 [ 809.648763][T13686] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000480 [ 809.648778][T13686] RBP: 00007fbb2bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 809.648793][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.648807][T13686] R13: 00007fbb2afe6038 R14: 00007fbb2afe5fa0 R15: 00007ffd1af5eb08 [ 809.648842][T13686] [ 813.419572][T13732] zswap: compressor not available [ 813.625856][T13738] queue_state_write: operation too long [ 813.644411][T13738] queue_state_write: use 'run', 'start' or 'kick' [ 813.822624][ T30] audit: type=1806 audit(1761988542.084:3): xattr="." res=0 [ 814.578365][T13747] zswap: compressor not available [ 814.715435][T13757] FAULT_INJECTION: forcing a failure. [ 814.715435][T13757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.764616][T13757] CPU: 1 UID: 0 PID: 13757 Comm: syz.0.1541 Not tainted syzkaller #0 PREEMPT(full) [ 814.764649][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.764663][T13757] Call Trace: [ 814.764671][T13757] [ 814.764680][T13757] dump_stack_lvl+0x16c/0x1f0 [ 814.764712][T13757] should_fail_ex+0x512/0x640 [ 814.764765][T13757] strncpy_from_user+0x3b/0x2e0 [ 814.764803][T13757] getname_flags.part.0+0x8f/0x550 [ 814.764843][T13757] getname_flags+0x93/0xf0 [ 814.764872][T13757] do_sys_openat2+0xb8/0x1d0 [ 814.764906][T13757] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.764944][T13757] ? __fget_files+0x20e/0x3c0 [ 814.764975][T13757] __x64_sys_openat+0x174/0x210 [ 814.765009][T13757] ? __pfx___x64_sys_openat+0x10/0x10 [ 814.765042][T13757] ? ksys_write+0x1ac/0x250 [ 814.765078][T13757] do_syscall_64+0xcd/0xfa0 [ 814.765108][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.765136][T13757] RIP: 0033:0x7fbb2ad8efc9 [ 814.765156][T13757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.765178][T13757] RSP: 002b:00007fbb28ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 814.765206][T13757] RAX: ffffffffffffffda RBX: 00007fbb2afe6180 RCX: 00007fbb2ad8efc9 [ 814.765223][T13757] RDX: 0000000000081000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 814.765238][T13757] RBP: 00007fbb28ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 814.765253][T13757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.765269][T13757] R13: 00007fbb2afe6218 R14: 00007fbb2afe6180 R15: 00007ffd1af5eb08 [ 814.765307][T13757] [ 819.297539][T13803] zswap: compressor not available [ 819.923780][T13813] zswap: compressor not available [ 822.225253][T13847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 822.258352][T13847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 822.324971][T13847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 822.368246][T13847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 823.056460][ T30] audit: type=1800 audit(1761988551.316:4): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1561" name="dbroot" dev="configfs" ino=28469 res=0 errno=0 [ 823.768258][T13183] ================================================================== [ 823.768271][T13183] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 823.768292][T13183] Write of size 8 at addr ffffc900039590c0 by task kworker/1:1/13183 [ 823.768304][T13183] [ 823.768313][T13183] CPU: 1 UID: 0 PID: 13183 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 823.768329][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 823.768338][T13183] Workqueue: events_power_efficient fb_flashcursor [ 823.768357][T13183] Call Trace: [ 823.768362][T13183] [ 823.768368][T13183] dump_stack_lvl+0x116/0x1f0 [ 823.768384][T13183] print_report+0xcd/0x630 [ 823.768401][T13183] ? __virt_addr_valid+0x81/0x610 [ 823.768421][T13183] ? sys_imageblit+0x1a6f/0x1e60 [ 823.768435][T13183] kasan_report+0xe0/0x110 [ 823.768452][T13183] ? sys_imageblit+0x1a6f/0x1e60 [ 823.768468][T13183] sys_imageblit+0x1a6f/0x1e60 [ 823.768485][T13183] ? __pfx_sys_imageblit+0x10/0x10 [ 823.768507][T13183] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 823.768523][T13183] soft_cursor+0x524/0xa10 [ 823.768547][T13183] bit_cursor+0xe8c/0x17e0 [ 823.768568][T13183] ? __pfx_bit_cursor+0x10/0x10 [ 823.768591][T13183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.768613][T13183] ? get_color+0x1da/0x450 [ 823.768630][T13183] ? __pfx_bit_cursor+0x10/0x10 [ 823.768649][T13183] fb_flashcursor+0x310/0x400 [ 823.768667][T13183] process_one_work+0x9cf/0x1b70 [ 823.768692][T13183] ? __pfx_process_one_work+0x10/0x10 [ 823.768715][T13183] ? assign_work+0x1a0/0x250 [ 823.768734][T13183] worker_thread+0x6c8/0xf10 [ 823.768756][T13183] ? __kthread_parkme+0x19e/0x250 [ 823.768772][T13183] ? __pfx_worker_thread+0x10/0x10 [ 823.768793][T13183] kthread+0x3c5/0x780 [ 823.768811][T13183] ? __pfx_kthread+0x10/0x10 [ 823.768830][T13183] ? rcu_is_watching+0x12/0xc0 [ 823.768844][T13183] ? __pfx_kthread+0x10/0x10 [ 823.768863][T13183] ret_from_fork+0x675/0x7d0 [ 823.768882][T13183] ? __pfx_kthread+0x10/0x10 [ 823.768901][T13183] ret_from_fork_asm+0x1a/0x30 [ 823.768923][T13183] [ 823.768928][T13183] [ 823.768931][T13183] The buggy address belongs to a vmalloc virtual mapping [ 823.768942][T13183] Memory state around the buggy address: [ 823.768950][T13183] ffffc90003958f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 823.768959][T13183] ffffc90003959000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 823.768968][T13183] >ffffc90003959080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 823.768975][T13183] ^ [ 823.768982][T13183] ffffc90003959100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 823.768991][T13183] ffffc90003959180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 823.768998][T13183] ================================================================== [ 823.769006][T13183] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 823.769014][T13183] CPU: 1 UID: 0 PID: 13183 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 823.769029][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 823.769037][T13183] Workqueue: events_power_efficient fb_flashcursor [ 823.769055][T13183] Call Trace: [ 823.769064][T13183] [ 823.769069][T13183] dump_stack_lvl+0x3d/0x1f0 [ 823.769083][T13183] vpanic+0x640/0x6f0 [ 823.769102][T13183] panic+0xca/0xd0 [ 823.769120][T13183] ? __pfx_panic+0x10/0x10 [ 823.769141][T13183] ? check_panic_on_warn+0x1f/0xb0 [ 823.769161][T13183] check_panic_on_warn+0xab/0xb0 [ 823.769180][T13183] end_report+0x107/0x170 [ 823.769197][T13183] kasan_report+0xee/0x110 [ 823.769214][T13183] ? sys_imageblit+0x1a6f/0x1e60 [ 823.769231][T13183] sys_imageblit+0x1a6f/0x1e60 [ 823.769248][T13183] ? __pfx_sys_imageblit+0x10/0x10 [ 823.769270][T13183] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 823.769285][T13183] soft_cursor+0x524/0xa10 [ 823.769307][T13183] bit_cursor+0xe8c/0x17e0 [ 823.769331][T13183] ? __pfx_bit_cursor+0x10/0x10 [ 823.769354][T13183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.769376][T13183] ? get_color+0x1da/0x450 [ 823.769393][T13183] ? __pfx_bit_cursor+0x10/0x10 [ 823.769412][T13183] fb_flashcursor+0x310/0x400 [ 823.769430][T13183] process_one_work+0x9cf/0x1b70 [ 823.769454][T13183] ? __pfx_process_one_work+0x10/0x10 [ 823.769477][T13183] ? assign_work+0x1a0/0x250 [ 823.769496][T13183] worker_thread+0x6c8/0xf10 [ 823.769519][T13183] ? __kthread_parkme+0x19e/0x250 [ 823.769535][T13183] ? __pfx_worker_thread+0x10/0x10 [ 823.769555][T13183] kthread+0x3c5/0x780 [ 823.769574][T13183] ? __pfx_kthread+0x10/0x10 [ 823.769593][T13183] ? rcu_is_watching+0x12/0xc0 [ 823.769607][T13183] ? __pfx_kthread+0x10/0x10 [ 823.769626][T13183] ret_from_fork+0x675/0x7d0 [ 823.769645][T13183] ? __pfx_kthread+0x10/0x10 [ 823.769664][T13183] ret_from_fork_asm+0x1a/0x30 [ 823.769686][T13183] [ 823.769958][T13183] Kernel Offset: disabled