last executing test programs: 8.201299255s ago: executing program 1 (id=396): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x591c82, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x5b, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff007) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r3, &(0x7f0000000180)=""/22, 0x16) socket(0x2c, 0x80003, 0x0) unshare$auto(0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) 6.896212293s ago: executing program 1 (id=400): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40045564, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(r0, 0x0, 0x20100000) prctl$auto_PR_SCHED_CORE_GET(0x2, 0x0, 0x0, 0x401, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/platform/drivers/snd_dummy/uevent\x00', 0x406182, 0x0) r1 = gettid() r2 = prctl$auto(0x3e, 0x1, r1, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x727d, 0xfffffffffffffffa, 0x2008000) close_range$auto(0x2, 0x8, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresgid$auto(0x81, 0x800000a0, 0x8) mmap$auto(0x0, 0x20409, 0xd11b, 0x7fffffffffffffff, r2, 0x203) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) mkdirat$auto(r3, &(0x7f0000000080)='./cgroup\x00', 0x9) socket(0xa, 0x2, 0x3a) mremap$auto(0x200000, 0x7, 0x3fd6, 0x3, 0x20000000) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0x10000000000402) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x200480, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x1, 0x8000000008012, r5, 0x8000) 6.753425778s ago: executing program 3 (id=401): r0 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/tty/ttypd/dev\x00', 0x200640, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000004c0)=""/190, 0xbe) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) write$auto(r0, &(0x7f0000000180)='-\x00\xcfm\x91\xbf\xbd\x8cT\x11s`.\xd2V)Wr\x06\t\xd1\xe4k\xfd\xadv5\xe4r\xf9\xf9)\x96x\xf2G\xc3\x0f0(V\xee|\x8ay4\x89W\xf3\xd0\xb8\xb7\xa9\xfb\xd3\x86i\x90p\x19\x0e\x99#\xa2\x1f\xee[\xf0\x8b\xa8\x97\x88\x1d', 0x1d30) symlink$auto(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r6 = getsid$auto(0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMK(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "34889caf7bee44da985517d7"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x95}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/4/name\x00', 0x200, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) sendfile$auto(r8, r8, 0x0, 0x200) r9 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) vmsplice$auto(r9, &(0x7f0000000100)={&(0x7f0000000000)="fd595189e4955c1c5cedb487f057fc344976384e8530966427bc98f74d3013fab15d4105d217584f73fc15155d0569e28c99a1be15098bba31b20ecdd902c8e1b6ef303030e5f690f13d1a19efe5a364988da8efb61c7dcb3ec0abda56d961feb824afd0eb0de38e1b2790dca8fce65a48cffc3fb320a965b07ba2eb6f96a4181030f5f921a20bc99ce62d39305ea44abf4e355605257325f85e1d90a6a0f2d1f7af7dadb9a8cc04d96228e62ce0941805efc405f920d5f984831ff16dd1feeaff5b7343ebdf3160e9f760fc60d81b9ca3a6f9b1b685a060eea40b822c6822702188997c8bb5", 0x3802}, 0x7cfd6eb0, 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x40090) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x25c, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x4b}, @NL802154_ATTR_SEC_KEY={0x220, 0x30, 0x0, 0x1, [@typed={0x12, 0x114, 0x0, 0x0, @str='}#-\x97#\xbf:*#.\\]\xf8\x00'}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r9}, @nested={0x1fe, 0xe7, 0x0, 0x1, [@generic="7a485eb370349fe8300245046eb3624dd2dca13dacb94ac055fcb81a52a549b17832c0f51b44cafba39cbc5f9a0cd14238767630ddd0096fdde7d4d952a50c4b48f0405d7de8ed402b07f304c96ec681813765", @generic="3e83f06f84f3e15a60360abf092cdcca0cddb70ddc2f3954a9cc6c941f0d52cf7d49e4c1ebc8f404f93061461f0cc7051701febcc4e8a01580fa9e38aa834f3bc8e9ff342e11d0ee47c40f8d66068a9187b116357b0d87ed1422361cac4f803b8db7988dfbf296899a998ba3f5aff688d8599b35b35b569023cef6dbbb7c9f71896b79dabc42f2dd42cc21b7c0c0656b930a598fbd49b5e4d837eeee7dbabac6186f4cd568fc2c19b7a996016900c22498b33de380240c618be809493ae4a60cb0b7fb1d2967f59929127245178aa923b6bd1826bd2c5f91d4", @typed={0x1f, 0x51, 0x0, 0x0, @binary="bdc02091e2d076786cf67ea8d8e2604675aab31aa11c423ea88d1a"}, @nested={0x4, 0x14f}, @nested={0x4, 0x37}, @generic, @generic="193286d2599e143e16a9096303b603b55251b7003984d2c84fcbc153bb625d6dd7bc7d6e0bf3bb3ad06fee591dc70b724aef05dd779cf382aea5b961d4e504dc477aeb589e3d7fd8c1183d16874e51216502578386620cb0e1c0bf5b164f45cb6ad6aa2e81cf09984a4e53904e9f9061d36621bea9ad644a3cadac46f4645361ea2fb269833b9cf9a91f0662744e000acb7e285d971d321146c2a46b67bd78757aee4412efcf"]}]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x40808) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r11, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xfffffffffffffffd}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000012c0)=""/4128, 0x1020) 6.289749422s ago: executing program 3 (id=403): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x9, 0x6, 0x1) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x2) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x20280, 0x0, 0x64, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x7ff) ptrace$auto_PTRACE_SETSIGINFO(0x4203, r2, 0x2, 0x3) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x54) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/remaddr\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0xad2, 0x4000fd) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) sendfile$auto(0x1, r1, 0x0, 0x40000000c07) fcntl$auto(0x3, 0x6, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x3a) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x200180, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000001d00)=0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 5.965153193s ago: executing program 1 (id=405): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'nr0\x00'}) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x7) lseek$auto(0x3, 0x8, 0x3) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, 0x0, 0x40) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) landlock_restrict_self$auto(r3, 0x1) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_detach={r3}, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.771272264s ago: executing program 0 (id=406): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) write$auto(0xca, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x80000, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r4, 0x1276, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8002) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1000) mremap$auto(0x1ff000, 0xfc, 0x847, 0x7, 0x6) rseq$auto(0x0, 0x8000, 0x0, 0x6) clock_gettime$auto(0x8, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, &(0x7f0000000180)={0x1, 0x7, 0x6, 0x3, 0x400, 0x1, 0x8001, 0x1, 0x65021801, "b94086959a4f44c2f795f67486e29175f7472a35e7b7a17823bb209709d88131882bd38c9594ce22c1be3346b234b1f645e0bfabe501526e79eadea233e74acc"}) write$auto(0x1, 0x0, 0x80000000) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r5, &(0x7f0000000200)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a", 0x18) sendfile$auto(r1, r0, 0x0, 0x5) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="cc0fa2", @ANYRES16, @ANYBLOB="00022bbd7000fedbdf2505000000da110380adcfd85647b00c05eb113bdccf7ef95a990fba3fc1aa3137e647287c3208a0d81877ec17d996b2f04dbfd058d9ab7df71db1576b01e7459a7e6c9c63fec556f59ae9c510c71e85a9f35c282a347afe37d83067ceb2c6a6226fb53763dfa388bae24338c3a4d63bd84d805baa58f6c796a368b56e76e35488171bce75d7f313850df2cef64a098360dd2ae71c994e9d81af50585841a74df0b42730a672d10e29a99b57759a4d48573af9cca14f26e6a1d3089a71196f7d04f5ffd1b12f3e4e2fac83e98e30dc84f503277cc7fb862f8427b59ef28a5b2db5285295f033caee1a5f83786c4b7c0bd2918402ea40044ae4be2ef237ea172db21d5e74cd2b4baca4b9edda0a26ecb2da6df388754a33d31ddda2e53cbf6e6d6cdfe6ba0e41c69d3c3514a47fa1ffe7602a778a0b550b21b5fbbc11606dc35eb27dda3f49f4a420fff5ee003b408f38dace7f9a1538af5b95aaba11bbe1a54142b4201a3fd439371096f7b7946713df9d4cab7cdf0dac42259fa4aa8723326e3752be1c4466c23cba5002d64d357903e83358e218dc74c58edccc737da3d0c2b2bafd7839181972ea6a3c774ec95746c57bbde720454a101bca7af42812d4032325effc956e1acc9c9b13de28f6356d611f62bbaec8b2af95cc1e3d5cf54bd2a87a48f069d0653a931460e4640590c017834eac716c8c928c2906af3a101b79f9d41d0d0dee0d89bf53b354d87a57d2be0aecb5173dccabbe621e02cf6b327f2ff57013b4d4460b492b65486ea5efafcd295d0b0f9e2b2b8050157b9b099d2f38309a99320c19346f88c4a0beb586d35941a260337f66d802a3d8b1c65c48aecfb1576587c20887b1dc5ac616a6f3e01e11331975d8e3f376d24128ef7baf3b5bcf544b54f884995afe36569ad5e202c611fe3c1362181aa7bc384770cba11666e6f9afd8b3c639d656fa511d71fff9ede735fbaf114881419d30e29abd7f8faaa41f46a1028883d3bfa1b6cd75932fad7c1bb79339d6cf3b127f67663f1204e239137640bcba80a6dfd6a19e3a1f33ee42c9e5711821be93d4bbaed4182dc0678a545cd51b08e40727774e07740ae81b48fb04afe1f7a8fad9c23158cd7a2884ed483be5c4c0b639ee3ea2f7d393ae462b7ba098db8ae5fed38693fd96f884a000f34c256f22a398cbcc214e2d8d9f1978c548203756fdf39e7afc8ad5e239f1b8b5708c7e2b0a92ef7de2d8b30e221cc339cdb0bb96266553c1968584145fc004cc415b3b761f298b77c1caee621066d2595fa15f193a94171096c45e339580a0514731b782170f95bd7487ff047ce4e5810ee7870e5be49067b533c3b241ae0d0274cfe94959173855c549ae9c1cdb5521fe534e45ae22776a28d900e3ca826c98601e567591203de8cc9ce043fa373a1c2c52b582495c725354446efdd2eeecba02fd8b8b0c28cf4c0a782c5ff23c257274a2202b24ae821c9f60db782d0d0b459073c9ad93430db7eb278e3adc48e7a9f60497735583572c9b9743a53c298e1be571fe151df95fb7eb988e571007eead65b9b101aecc9e7b063269a787743786d3362dc01551a7f25276e2a8a143de6dcdad582aea6cb0f24c4e0a333e188dd7eea2f6c7e051cb9c303c7434e2881e10dce08666f76f3f0612ca671d9a40016b8c6cbb9489c259b7cf4c4a328dd6220184c7979084bbe84784d0cfaed42d3c4b09d1ef0ebf383e567e5c26a4d053e127774cb2dcbf2c58614440f9eaf8ec30a176f7d7e79fac59cd04febc03a9dc80a9abc236701c4e588459983ef6a9e131eaf4df19ef589f57c471c54468ebba23e76a14460ccca959b1e6c8f7bc09975c6b13772ba4fee44f38ea15f30b26a929c3d9ca4a99e9a5c3751e2a39921d155b5deab3bf18193559f9cad6b777947ef2748dfd93bca8f1b50d8c04c64fbf9b5b4a8380c19508d644ec827b3d52c2d06f3b35b42dd6bbee13d84b1ff10a2d8e8b1952916e0f63d9ab52ea1fe1b97969932e6fca2cdbc5b3d85e9ac735f9d5e37b6a354b022affc33c6155405807371306498cc3c2b987283c5542a52f8423458c938d03f3a1227438ca1f37dff2ca97670afbc468157413fad5db03718664d51f2383b3c3d2064aa31a2b32a20951ca468f42d611117bb7bdef92633251834a2dc7da63444d80b20bcd0c589cbadb8f623fd27bed75d3e8070df734788617f8bd98b7535d9f2305fe1efb956513975fb95bbe62bdd9c7764e7811eaf9be8d934289e12f40dbb9268e9012fe6e34ca583187b09f3508758c88ad3e39d38a668139f47118889fe5783ec085b963b88be40dd0eca3ace5448af2e34d5df46a5fce1500afff62c019c8a5ff00d95acd521438811eea05c492bb0646ea2dc51de20885789f6de04ad5246bc3f7281e4601c390e023e74cb1f79d3e4393bfe8e07c6e99d97fba84d70a2e1a8fcb244dd0c701b35a40e62edd0ed26685192a6a1d0a576f55acf18b48673fb02a125037530e82e6fb030a1aba424651b6e492503c495236d2fbfd6b9ad4d46f8c3cdc95c028a64cb28f71f3c90868fa8f9ddc0770e717da6c11c28aadad113e85691ed849d9f82034e569301dcb7c66425ef47f5effc8012f5296495d8620445277ceeea39a0e3cee4b179f5d2912abe72850f41816fb422566c98f8da8cc50fa7382a2be458a68a409b72455493e2a25897d766d50e84f21481848aac994c2dcf841691a148991efcbf9994b66dd3ec42a396c77e2ad712235dd021ff9ecb5d11da2a55a9cd47d1276332a893c8b32f8c8bd77dde15d0e1360e57d55873b89c1bfd011aab0ecaacf8dac903fc61e0766aebd2e7b5f531b05ecaef592b7ba2551a5fae3e4879e86de1fd9cd51fc3f9d4af148490c3689ed1b460634197d7ea7a6f73d9a87504f9bc396beb6f2c2102ab1316b61b805b539d9b58213163e41331ac77dced1084e22d63079d8fec1a7e71a88daa43d1ff81ca3e8a83c37686f97917501fed0284658440663a8c5144310d6b5a92071edc8d5165190651f0f35e0b740c50acfa7793b14a1543f6276afd9472eeb08b9b702221ff86757475a475c25baef900dcd09430e8305f10f21170dd4c7f100f6ae5613721e0bd55271f46d50c2986e37cf143522c26ae577ab829af30bf12c0bdbd5c9ee2afed20f017a4cb8b22c7603c2ee2dfbb70dcac1df791ed61fb33b7178c6ec59cff06daa086b1d073f098a818f97d539f0f173884dbd000f7e6b17c5ed0d17264c0023a37568039573108e4ad0c769110393b72bb6bcc23a65df1d16f6e9281b7d1b95c121dd9ff6d67f3c28b9b90f7ac0e45f22e8a5c74c44329ad92977a3cec7bcc13f3d71d2f96bc02eb2c005f420ad02627e7db9257c24c53e47225f19534171fe7c9983d04cb34b6948173a7a6588455a6e8809c47d934735f1e782e54dd62b02ed74b43543660734e1b2d8370789288523c4c08abb1a394d90d6ce3896a4cc63772f656a84a2b5949a04ea445f8abd68ff651ddb96a0b7b08432123a9bec51f78e44fb7c0d75adb07295447ad3a64e541b4e2b9fd5352899c6eb110f7613ffb79456a256171888ce50fa09b5b853683bd388462f4740ac816d2e01ba0a16f2116d74028f1eb124c6b3996a1f8d597789602ea860cb52ebee6fa8dedacaf680e83e66407d820b778ace02a0b9b6c70e5a5bdf28434eb305fa9b7bd5befb29b67617dc0df66d4728172278af56c3a8950dbd7fdbbcc341b4cc653cad203a26e11ce0fd24601db9be4d8e97be23af12f864c08dc43501b814036ffe51132fe79b5b99b0bb238cfb62183e40095915c6ae2ac4945ccfbd1e0b4454dacf7b1fb0c560ed925b5100bc180a76d72e123ef94d9177bb3f3b202ec2278262da0196f0f0dd783445d41c5baa8758fd6d26dbf02bb46d3e1e43abf97d676774b764723afe96ae63ab515ac4c63667cf2f1f927c040ed9ac63771e09187f7ca60e7cd3c328bbadc8f596f2e0afe3518163237d74fc6abdef0ef59a0fde2fa28963594a8c2b878ada7a6013f7c9eeb05ed6da92d7c141c8b885179c3546e80394effa88a635b863c7fc3083573d868933500eafed9c3ec3d4dd1c75d85eee042f8fd6a2c4cb38832582702fd4d0ff9d2ca6be23cede0dd39cbf5fc6fcd7d44378bfd9a1caa7ba859d2dba0c81f43cbd280ecbd31447bd443e770868be963c42b5e4d821d188ed673666553a7d4dbe0459ceef29221343dda7b8d775c6fa602dd5f08254b0f8c92bfb8b8bee6b980b3fbcdd3f8adc4a5e6582f9c36863919c6fdbe3bbfc07f31829227361aab22e5f193fabbfed9bc0215b6eed666c9411570c3608c6c45fdf7c3d3e16e81ad49eb38367eb6d06912c2721caa48c37a990331663bcff0fcf6b8aaeb96c1c6b47bf50c5e603360099e046d5b67a50963b918fdac26e4ced918f55976b0f9d2f250497e20d4aa74df1e20940a9f744712fd9aab48bee5a24a1ff09b3c664fbce9a9f12876f4f1d2f1a4d2b672b864ec31ac240a77c0770b5a3b61c741319416a3d86a5d7e43176a1af250399aee17b6d117b90b892e70af48a8a5e9a5135e54f91d5b8b4f20ba780b6df466d43f22a97ef4ab2fab27a09160b3ef3400207d591341388f7ebf99f944d14b857ef318c43026f080990d00d262538e40f20a585beca7ccfdc7834f881aa31b7", @ANYRES32], 0x22ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 5.498057622s ago: executing program 3 (id=407): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000080)="7a0a82b4a658635d206745778de6a48c53844f8b8e3dcbba610e2af6c72589cc5a431ab3a6fa381497bd7d0a4b5ea0612087e1d75aa1a77850579b5ce86b9e10679d9396e155a90f", 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0x1) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r1, 0x0, 0x4) socket(0xa, 0x5, 0x84) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) 5.430050606s ago: executing program 2 (id=408): sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 5.186548938s ago: executing program 2 (id=409): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, 0x0, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) ioctl$auto_VHOST_SET_VRING_ADDR2(r1, 0x4028af11, &(0x7f00000001c0)={0x4, 0xcbce, 0x40, 0x5, 0x6, 0x9b0}) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x1, 0x0, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r5, 0x0, 0x6000000000, 0x100000004) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) r6 = io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x81, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10004, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x18001, 0x77b1, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r6, 0x9, 0x820e, 0x6, 0x0, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.996973151s ago: executing program 0 (id=410): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x110c230000, 0x1, 0x3) write$auto(r0, 0x0, 0x10007c) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000640)={{0x5, 0x0, 0x0, 0xa8f1, 0x3, 0x6, 0x7}, 0x0, 0x0, 0xfffffffffffffffd, 0x20000080000001, 0x80000001, 0x3, 0x4, 0x8003, 0xf, 0xfff8}) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020007, 0x2000000000000959, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000180)="213a2d75b4214607bd4ce3e3e92f", 0xe) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x3fffffffff, 0x3}, 0x6f4) syz_open_procfs$namespace(r4, 0x0) select$auto(0xffffffff, &(0x7f0000001080)={[0xd, 0xfffffffffffffff9, 0x8, 0x2, 0x0, 0x146f, 0x80, 0x7, 0x3, 0xff, 0x3, 0xffff, 0x1, 0x7, 0x6, 0x4]}, &(0x7f0000001100)={[0x6, 0xe89, 0xee, 0x7, 0x1, 0x0, 0x0, 0x10000, 0x6, 0x80000001, 0x8000000000000000, 0x1, 0x3, 0x0, 0x3, 0x5]}, &(0x7f0000001180)={[0xf417, 0x80, 0x1000002, 0x3, 0x7ff, 0x3, 0x40, 0x4, 0xffffffffc162659a, 0x6, 0x7, 0x8, 0x9, 0x9, 0x1, 0x80]}, &(0x7f0000001200)={0x7, 0x8000000000000000}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r5, 0x1, 0x39, 0x0, &(0x7f0000005b00)=0x7) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS2\x00', 0x280, 0x0) ioctl$auto_TIOCSTI2(r6, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) futex$auto(&(0x7f0000001d00)=0x4, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/018/001\x00', 0x440100, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x2c, 0x0, 0xfff8, 0x1, 0x0}) 4.451296319s ago: executing program 2 (id=411): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) mmap$auto(0xf5e, 0x2020001, 0x80000002, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) r4 = socket(0x25, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6c) msgctl$auto_IPC_SET(0x3e54, 0x1, &(0x7f0000000300)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x3ff}, &(0x7f0000000240)=0x3, &(0x7f00000002c0)=0x76, 0x1, 0x85d, 0x3, 0x1, 0x8, 0x5, 0x3, 0xb, @inferred=0xffffffffffffffff, @raw=0x3}) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0) close_range$auto(0x2, r4, 0x7) 4.00304299s ago: executing program 1 (id=412): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b48, r0) fcntl$auto(0x3, 0x4, 0xa553) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={r1}, 0x90) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000540)={{0x7fffffffffffffff, 0x6}, {0x1, 0x6}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r2) sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c92522f5ad583e12ec8f36805f65ffa226ca797ea76640ebfc41fb5c9cac71a04ff9e0a23b5c9323c82e7c599a765a74a915857692d7e8f68d3eefe972f894961f66d919404bace9ff9cbcf20aa45f805c84af35164cb537256fe8bab4a8626d395cb4047b6534acbcdcf0432da9b7dee2047168438456064d772399bcfd113043d2f58bc964130ae892795bd70ba606584eab4f910d60fe1f36de1c9e056330708a0c84c512e9edd0982f82774a8797079bc2ee2a223eb6fb8ebc9a947ca23b74506366e0", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf252b0000000500070000000000050002000100000008000900fffffeff0500030000000000080005000600000008000900fffeffff0800050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf8}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9cca2e1196e5d16434355712d80422c6a42fa8d6e4c55d480900b995b7887b8b066e9085635e2d3947fc9d", @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf251100000008002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40000, 0x84) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0x6) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000280)="20056e823adee8a5e350c13bf4491ef375b91e644326f5ffc7cc83860dad119d80f3347b454248bf7f89a33ca43b41b079767a671b1a055fc51818d9c83ccf97c0e36277608c8f0955d6ed35cf4c5aaaaa0dec6be2054519d65eaa8ce553d7f69307bbaed6339ae1252c614f61186bdda715016f965293e9db6f1f273994b7ca195592a5355e1998cc8fc2b4e5ebd8b904ae10e519c7fa5ffe3f", 0x9a) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) 3.647317872s ago: executing program 3 (id=413): madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(r2, &(0x7f0000000280)={&(0x7f0000000140)="7cd5f762bf2301e06a1423", 0x2}, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'vlan0\x00'}) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x5}, 0x7) ioctl$auto_I2C_RDWR(r3, 0x707, &(0x7f0000000180)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_BUSY_POLL(r2, 0x8, 0x2e, 0x0, 0x0) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) write$auto(r1, 0x0, 0x47ffffdf2) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x6, 0x0) unshare$auto(0x1) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x921064a3, r4) ioctl$auto_EVIOCGMASK(r1, 0x80104592, 0x0) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101041, 0x0) write$auto(r5, &(0x7f0000000180)='/sys/kernel/se\x06\x00rity\xee\xa1\x00\x00rity/\xefvL/evm_xattss\x00\x00\x00z\x01t\x7f\xedn1\xc9?\x8a{T\xad#*\xe5<\xe40\xb3\x82\x1d\x18\xfa{F\xd4\xd8rUI\xe2B!\xd5U\xfb\x17\x92\xd4\x83aQ\xc5\xfc\x96R\xb4\x943?\x98\xe3\xd4\x12W/`\x1a$\xe8\xeaA\xe0\xd0\xa3J\x02\x00\x00\x005\xe6mD\x94\xfbr\x88\xad\x9f\xe3\xd9\xd1\x10\x0fZ\xbeM\x8b\b\xfe|M\xc3\xec\xa4\xff\xf0\x83\x885\x9ax\xbb\xf1\x95>\x82\x01\xead\xf5\xeb\x1c_\xab=\t\x00\xc6CZ\x901\x84A!\xccjoW\xeae\x92\xb7\x86\xf1\xe7i~KD\xdaG0:\xfe\x98\xe2\x8aS\x80\x00\x00\x02\x00\x00\x00\x00\x00\x00\x86$\xd21\x1d\xfd\x00\x86\x94_[\\\x15\x03\x00\x88\xf4\x15t\xa17#\\', 0x20000002) getsockopt$auto_SO_ZEROCOPY(r0, 0x100, 0x3c, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x3) 3.134916774s ago: executing program 0 (id=414): madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(r2, &(0x7f0000000280)={&(0x7f0000000140)="7cd5f762bf2301e06a1423", 0x2}, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'vlan0\x00'}) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x5}, 0x7) ioctl$auto_I2C_RDWR(r3, 0x707, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_BUSY_POLL(r2, 0x8, 0x2e, 0x0, 0x0) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) write$auto(r1, 0x0, 0x47ffffdf2) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x6, &(0x7f00000002c0)) unshare$auto(0x1) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x921064a3, r4) ioctl$auto_EVIOCGMASK(r1, 0x80104592, 0x0) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101041, 0x0) write$auto(r5, &(0x7f0000000180)='/sys/kernel/se\x06\x00rity\xee\xa1\x00\x00rity/\xefvL/evm_xattss\x00\x00\x00z\x01t\x7f\xedn1\xc9?\x8a{T\xad#*\xe5<\xe40\xb3\x82\x1d\x18\xfa{F\xd4\xd8rUI\xe2B!\xd5U\xfb\x17\x92\xd4\x83aQ\xc5\xfc\x96R\xb4\x943?\x98\xe3\xd4\x12W/`\x1a$\xe8\xeaA\xe0\xd0\xa3J\x02\x00\x00\x005\xe6mD\x94\xfbr\x88\xad\x9f\xe3\xd9\xd1\x10\x0fZ\xbeM\x8b\b\xfe|M\xc3\xec\xa4\xff\xf0\x83\x885\x9ax\xbb\xf1\x95>\x82\x01\xead\xf5\xeb\x1c_\xab=\t\x00\xc6CZ\x901\x84A!\xccjoW\xeae\x92\xb7\x86\xf1\xe7i~KD\xdaG0:\xfe\x98\xe2\x8aS\x80\x00\x00\x02\x00\x00\x00\x00\x00\x00\x86$\xd21\x1d\xfd\x00\x86\x94_[\\\x15\x03\x00\x88\xf4\x15t\xa17#\\', 0x20000002) getsockopt$auto_SO_ZEROCOPY(r0, 0x100, 0x3c, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x3) 2.513193611s ago: executing program 0 (id=415): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) epoll_wait$auto(0xffffffffffffffff, 0x0, 0xe007, 0xe8a4e409) add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/tracing/buffer_size_kb\x00', 0x2, 0x0) preadv$auto(r1, &(0x7f0000000a40)={0x0, 0x80}, 0x9, 0x6, 0x5) r2 = syz_open_procfs$namespace(0x0, 0x0) fchdir$auto(r2) mount$auto(0x0, 0x0, &(0x7f0000000080)='nfsd\x0ee\x98K\n\x14\xd5\x00\xee\x1a\x8f\xa2~?\xe2\x82\xad\xc2U\xde\x0f\xbd\"\xe9\xc3\xc0@[\x99\x04\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xf5\x00\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5', 0x5, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x600, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/disable_policy\x00', 0x80000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x800000080000000, 0xe983, 0x10, 0xf0, 0x401, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020006, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f00000003c0)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0xf) syslog$auto(0x3, 0x0, 0x5) syz_open_procfs$namespace(0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20080, 0x0) unshare$auto(0x10) 2.48111981s ago: executing program 1 (id=416): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x9, 0x6, 0x1) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x2) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x20280, 0x0, 0x64, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x7ff) ptrace$auto_PTRACE_SETSIGINFO(0x4203, r2, 0x2, 0x3) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x54) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/remaddr\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0xad2, 0x4000fd) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) sendfile$auto(0x1, r1, 0x0, 0x40000000c07) fcntl$auto(0x3, 0x6, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x3a) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x200180, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000001d00)=0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 2.233087265s ago: executing program 3 (id=417): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) epoll_wait$auto(0xffffffffffffffff, 0x0, 0xe007, 0xe8a4e409) add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/tracing/buffer_size_kb\x00', 0x2, 0x0) preadv$auto(r1, &(0x7f0000000a40)={0x0, 0x80}, 0x9, 0x6, 0x5) r2 = syz_open_procfs$namespace(0x0, 0x0) fchdir$auto(r2) mount$auto(0x0, 0x0, &(0x7f0000000080)='nfsd\x0ee\x98K\n\x14\xd5\x00\xee\x1a\x8f\xa2~?\xe2\x82\xad\xc2U\xde\x0f\xbd\"\xe9\xc3\xc0@[\x99\x04\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xf5\x00\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5', 0x5, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x600, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/disable_policy\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x800000080000000, 0xe983, 0x10, 0xf0, 0x401, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020006, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f00000003c0)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0xf) syslog$auto(0x3, 0x0, 0x5) syz_open_procfs$namespace(0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20080, 0x0) unshare$auto(0x10) 1.159537363s ago: executing program 2 (id=418): sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.033056544s ago: executing program 1 (id=419): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x24000050) ioctl$auto(0xc8, 0x800454e1, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sg0\x00', 0x1c403, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) inotify_add_watch$auto(r3, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0) read$auto(0x3, 0x0, 0x8080) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ttyy5\x00', 0x400, 0x0) write$auto(0x3, 0x0, 0x100082) 975.762296ms ago: executing program 2 (id=420): openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) socket(0xa, 0x801, 0x84) socket(0x80000000000000a, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/tunl0/addr_assign_type\x00', 0x40c00, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0xc) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x6f) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 971.76126ms ago: executing program 0 (id=421): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/capcache/hard_limit\x00', 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="2dc2", 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') listen$auto(0x3, 0x81) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\t/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3f, 0x200001000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x3, 0x8) getsockopt$auto(r4, 0x3a, 0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xd63) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) 874.128674ms ago: executing program 3 (id=422): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x18, 0x4, 0x41) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r2, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x80002, 0x73) getsockopt$auto(r3, 0x0, 0x2, 0x0, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec21\x00', 0x100500, 0x0) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000000)={0x1f, 0x0, 0x202, 0x9, 0x1}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) r7 = pidfd_open$auto(0x1, 0x0) signalfd4$auto(r4, &(0x7f00000019c0)={0x795e}, 0x9, 0x6) setns(r7, 0x4000000) 647.69935ms ago: executing program 2 (id=423): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x405, 0x200000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cpu.max.burst\x00', 0x22001, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x8081, 0x0) madvise$auto(0xc0, 0x3, 0xf) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x2, @raw, @enumerated={0x2, 0x4, "23f7b11944d233964b2a5f32b66b0fe18e5b2d4edd0d9d16061791173f5412f21386d28cc66faa7a2336ad4b912a17fed2d89f48eefdf686b94fbc1bd2580477", 0x1, 0x2}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) rt_sigqueueinfo$auto(r1, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000001080)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2809c0, 0x0) pread64$auto(r2, 0x0, 0x200000000097f9, 0x9) ioctl$auto_SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000002140)=""/4101, 0x1005) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x3b, 0x9, 0x0, 0x12, 0x402, 0x300000000000) epoll_ctl$auto(0xffffffffffffffff, 0x7, 0x8000000000000000, 0x0) 0s ago: executing program 0 (id=424): madvise$auto(0x0, 0x2003f2, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(r2, &(0x7f0000000280)={&(0x7f0000000140)="7cd5f762bf2301e06a1423", 0x2}, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'vlan0\x00'}) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0x5}, 0x7) ioctl$auto_I2C_RDWR(r3, 0x707, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto_SO_BUSY_POLL(r2, 0x8, 0x2e, 0x0, 0x0) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) write$auto(r1, 0x0, 0x47ffffdf2) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x6, &(0x7f00000002c0)) unshare$auto(0x1) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x921064a3, r4) ioctl$auto_EVIOCGMASK(r1, 0x80104592, 0x0) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101041, 0x0) write$auto(r5, &(0x7f0000000180)='/sys/kernel/se\x06\x00rity\xee\xa1\x00\x00rity/\xefvL/evm_xattss\x00\x00\x00z\x01t\x7f\xedn1\xc9?\x8a{T\xad#*\xe5<\xe40\xb3\x82\x1d\x18\xfa{F\xd4\xd8rUI\xe2B!\xd5U\xfb\x17\x92\xd4\x83aQ\xc5\xfc\x96R\xb4\x943?\x98\xe3\xd4\x12W/`\x1a$\xe8\xeaA\xe0\xd0\xa3J\x02\x00\x00\x005\xe6mD\x94\xfbr\x88\xad\x9f\xe3\xd9\xd1\x10\x0fZ\xbeM\x8b\b\xfe|M\xc3\xec\xa4\xff\xf0\x83\x885\x9ax\xbb\xf1\x95>\x82\x01\xead\xf5\xeb\x1c_\xab=\t\x00\xc6CZ\x901\x84A!\xccjoW\xeae\x92\xb7\x86\xf1\xe7i~KD\xdaG0:\xfe\x98\xe2\x8aS\x80\x00\x00\x02\x00\x00\x00\x00\x00\x00\x86$\xd21\x1d\xfd\x00\x86\x94_[\\\x15\x03\x00\x88\xf4\x15t\xa17#\\', 0x20000002) getsockopt$auto_SO_ZEROCOPY(r0, 0x100, 0x3c, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 80.838226][ T5615] cgroup: Unknown subsys name 'net' [ 80.947615][ T5615] cgroup: Unknown subsys name 'cpuset' [ 80.956877][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.419210][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.357802][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.396863][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.404476][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.418257][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.425164][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.426544][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.441702][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.442178][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.449913][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.467157][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.467857][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.476166][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.482307][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.491557][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.496637][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.505657][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.510777][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.527129][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.533293][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.541031][ T4944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.067303][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.074626][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.082002][ T5626] bridge_slave_0: entered allmulticast mode [ 86.089587][ T5626] bridge_slave_0: entered promiscuous mode [ 86.126708][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.133994][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.141157][ T5626] bridge_slave_1: entered allmulticast mode [ 86.149185][ T5626] bridge_slave_1: entered promiscuous mode [ 86.219997][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.227288][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.235139][ T5627] bridge_slave_0: entered allmulticast mode [ 86.242582][ T5627] bridge_slave_0: entered promiscuous mode [ 86.258841][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.266213][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.273425][ T5628] bridge_slave_0: entered allmulticast mode [ 86.281520][ T5628] bridge_slave_0: entered promiscuous mode [ 86.289101][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.296299][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.303516][ T5631] bridge_slave_0: entered allmulticast mode [ 86.310807][ T5631] bridge_slave_0: entered promiscuous mode [ 86.320131][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.327419][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.334715][ T5627] bridge_slave_1: entered allmulticast mode [ 86.341804][ T5627] bridge_slave_1: entered promiscuous mode [ 86.351974][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.361314][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.369335][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.376596][ T5628] bridge_slave_1: entered allmulticast mode [ 86.383794][ T5628] bridge_slave_1: entered promiscuous mode [ 86.390869][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.398129][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.406695][ T5631] bridge_slave_1: entered allmulticast mode [ 86.414015][ T5631] bridge_slave_1: entered promiscuous mode [ 86.433252][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.517842][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.539407][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.551509][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.563452][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.575218][ T5626] team0: Port device team_slave_0 added [ 86.582891][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.594429][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.605459][ T50] Bluetooth: hci3: command tx timeout [ 86.611653][ T5630] Bluetooth: hci0: command tx timeout [ 86.617672][ T5635] Bluetooth: hci1: command tx timeout [ 86.617679][ T4944] Bluetooth: hci2: command tx timeout [ 86.620267][ T5626] team0: Port device team_slave_1 added [ 86.693462][ T5627] team0: Port device team_slave_0 added [ 86.712461][ T5628] team0: Port device team_slave_0 added [ 86.721212][ T5628] team0: Port device team_slave_1 added [ 86.728612][ T5631] team0: Port device team_slave_0 added [ 86.737327][ T5627] team0: Port device team_slave_1 added [ 86.743970][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.750961][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.777283][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.801495][ T5631] team0: Port device team_slave_1 added [ 86.818037][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.825146][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.851656][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.899585][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.906736][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.935730][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.968868][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.976976][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.003078][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.024504][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.037234][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.063421][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.075470][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.082775][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.109562][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.123804][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.132028][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.159572][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.182846][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.190861][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.217312][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.316357][ T5626] hsr_slave_0: entered promiscuous mode [ 87.323140][ T5626] hsr_slave_1: entered promiscuous mode [ 87.336594][ T5628] hsr_slave_0: entered promiscuous mode [ 87.342909][ T5628] hsr_slave_1: entered promiscuous mode [ 87.349698][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 87.355662][ T5628] Cannot create hsr debugfs directory [ 87.407703][ T5627] hsr_slave_0: entered promiscuous mode [ 87.414182][ T5627] hsr_slave_1: entered promiscuous mode [ 87.420225][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 87.426135][ T5627] Cannot create hsr debugfs directory [ 87.480508][ T5631] hsr_slave_0: entered promiscuous mode [ 87.486878][ T5631] hsr_slave_1: entered promiscuous mode [ 87.492886][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 87.498681][ T5631] Cannot create hsr debugfs directory [ 87.916908][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.933321][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.942421][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.953052][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.965752][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.976649][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.984812][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.997232][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.073610][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.090263][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.107115][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.118598][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.127060][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.137103][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.146567][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.156968][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.270175][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.280522][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.289597][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.305539][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.326019][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.336562][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.346114][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.358174][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.448136][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.475337][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.488338][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.498103][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.507682][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.522085][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.532543][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.541068][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.550943][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.607576][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.643275][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.651051][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.683794][ T5630] Bluetooth: hci1: command tx timeout [ 88.689988][ T50] Bluetooth: hci0: command tx timeout [ 88.690355][ T4944] Bluetooth: hci3: command tx timeout [ 88.696551][ T5635] Bluetooth: hci2: command tx timeout [ 88.705737][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.714833][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.751545][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.822423][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.843487][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.860813][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.867998][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.908059][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.915298][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.952302][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.993240][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.000494][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.040038][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.047563][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.077034][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.201717][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.238636][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.245868][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.281441][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.288672][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.875171][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.092002][ T5628] veth0_vlan: entered promiscuous mode [ 90.124755][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.169060][ T5628] veth1_vlan: entered promiscuous mode [ 90.319467][ T5628] veth0_macvtap: entered promiscuous mode [ 90.339147][ T5626] veth0_vlan: entered promiscuous mode [ 90.360349][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.388919][ T5628] veth1_macvtap: entered promiscuous mode [ 90.416785][ T5626] veth1_vlan: entered promiscuous mode [ 90.429337][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.471938][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.507264][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.537635][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.547432][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.565759][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.574702][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.629769][ T5626] veth0_macvtap: entered promiscuous mode [ 90.654765][ T5627] veth0_vlan: entered promiscuous mode [ 90.675033][ T5631] veth0_vlan: entered promiscuous mode [ 90.682874][ T5626] veth1_macvtap: entered promiscuous mode [ 90.704845][ T5627] veth1_vlan: entered promiscuous mode [ 90.729258][ T5631] veth1_vlan: entered promiscuous mode [ 90.764522][ T50] Bluetooth: hci2: command tx timeout [ 90.770520][ T5630] Bluetooth: hci0: command tx timeout [ 90.770579][ T4944] Bluetooth: hci1: command tx timeout [ 90.776221][ T5635] Bluetooth: hci3: command tx timeout [ 90.795891][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.807541][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.827545][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.839515][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.891572][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.900708][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.921852][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.930636][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.941121][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.950521][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.969124][ T5631] veth0_macvtap: entered promiscuous mode [ 91.004097][ T5627] veth0_macvtap: entered promiscuous mode [ 91.017119][ T5631] veth1_macvtap: entered promiscuous mode [ 91.050640][ T5627] veth1_macvtap: entered promiscuous mode [ 91.097193][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.109344][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.126848][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.169618][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.178217][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.194160][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.208717][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.231826][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.257598][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.316289][ T1122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.341587][ T1122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.368749][ T1122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.401832][ T1122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.428635][ T5784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.450904][ T1122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.465104][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.481832][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.500707][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.881743][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.905204][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.073621][ T9] cfg80211: failed to load regulatory.db [ 92.123655][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.149942][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.307257][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.329127][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.407935][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.431507][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.844172][ T5635] Bluetooth: hci3: command tx timeout [ 92.844320][ T50] Bluetooth: hci2: command tx timeout [ 92.850015][ T5635] Bluetooth: hci1: command tx timeout [ 92.855670][ T5630] Bluetooth: hci0: command tx timeout [ 93.203256][ T5806] ubi0: attaching mtd0 [ 93.280611][ T5806] ubi0: scanning is finished [ 93.286194][ T5806] ubi0: empty MTD device detected [ 93.928648][ T5806] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 93.973188][ T5806] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 93.990941][ T5806] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.010003][ T5806] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 94.022443][ T5806] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.035804][ T5806] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.059186][ T5806] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1976476137 [ 94.071960][ T5806] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.113604][ T5816] ubi0: background thread "ubi_bgt0d" started, PID 5816 [ 94.356505][ T5814] mmap: syz.0.1 (5814) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.291647][ T5825] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.422958][ T29] audit: type=1807 audit(1783056114.582:2): UNKNOWN=nl80211 res=0 [ 95.478224][ T29] audit: type=1802 audit(1783056114.622:3): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.7" res=0 errno=0 [ 95.940000][ T5817] ima: policy update failed [ 95.960013][ T29] audit: type=1802 audit(1783056115.122:4): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7" res=0 errno=0 [ 97.762215][ T5881] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.939206][ T5930] ubi: mtd0 is already attached to ubi0 [ 100.698042][ T5921] bond0: no command found in slaves file - use +ifname or -ifname [ 102.115030][ T5962] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 102.313868][ T29] audit: type=1804 audit(1783056121.472:5): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.26" name="/newroot/6/file0" dev="tmpfs" ino=50 res=1 errno=0 [ 102.445789][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.393242][ T5984] kexec: Could not allocate control_code_buffer [ 107.817060][ T6022] Process accounting resumed [ 109.007838][ T6043] FAULT_INJECTION: forcing a failure. [ 109.007838][ T6043] name failslab, interval 1, probability 0, space 0, times 1 [ 109.174312][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 109.174352][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.174369][ T6043] Call Trace: [ 109.174375][ T6043] [ 109.174382][ T6043] dump_stack_lvl+0x100/0x190 [ 109.174404][ T6043] should_fail_ex.cold+0x5/0xa [ 109.174423][ T6043] should_failslab+0xc2/0x120 [ 109.174442][ T6043] __kmalloc_noprof+0xfc/0x820 [ 109.174459][ T6043] ? __memcg_list_lru_alloc+0x418/0x680 [ 109.174487][ T6043] __memcg_list_lru_alloc+0x418/0x680 [ 109.174510][ T6043] ? xa_load+0x149/0x2c0 [ 109.174529][ T6043] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 109.174556][ T6043] ? rcu_read_unlock+0x17/0x60 [ 109.174580][ T6043] memcg_list_lru_alloc+0xd3/0x100 [ 109.174597][ T6043] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 109.174625][ T6043] ? kasan_save_track+0x14/0x30 [ 109.174643][ T6043] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 109.174660][ T6043] ? aio_alloc_inode+0x25/0x70 [ 109.174682][ T6043] ? __pfx_aio_alloc_inode+0x10/0x10 [ 109.174703][ T6043] aio_alloc_inode+0x25/0x70 [ 109.174723][ T6043] alloc_inode+0x68/0x250 [ 109.174740][ T6043] alloc_anon_inode+0x2a/0x3e0 [ 109.174765][ T6043] ioctx_alloc+0x4dc/0x21a0 [ 109.174794][ T6043] ? find_held_lock+0x2b/0x80 [ 109.174819][ T6043] ? __pfx_ioctx_alloc+0x10/0x10 [ 109.174849][ T6043] __x64_sys_io_setup+0xc9/0x220 [ 109.174865][ T6043] do_syscall_64+0x115/0x840 [ 109.174886][ T6043] ? clear_bhb_loop+0x40/0x90 [ 109.174905][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.174920][ T6043] RIP: 0033:0x7f8ee1d9de59 [ 109.174943][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.174960][ T6043] RSP: 002b:00007f8ee2cdd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 109.174975][ T6043] RAX: ffffffffffffffda RBX: 00007f8ee2026180 RCX: 00007f8ee1d9de59 [ 109.174985][ T6043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 109.174995][ T6043] RBP: 00007f8ee1e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 109.175004][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.175013][ T6043] R13: 00007f8ee2026218 R14: 00007f8ee2026180 R15: 00007ffc89bb57a8 [ 109.175033][ T6043] [ 112.780773][ T5635] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 115.015977][ T6145] process 'syz.2.66' launched './file0' with NULL argv: empty string added [ 116.544205][ T6162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.628694][ T6176] Zero length message leads to an empty skb [ 117.983286][ T6186] block nbd0: NBD_DISCONNECT [ 118.321798][ T6200] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.324099][ T6221] FAULT_INJECTION: forcing a failure. [ 120.324099][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 120.337243][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 120.337283][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.337304][ T6221] Call Trace: [ 120.337313][ T6221] [ 120.337324][ T6221] dump_stack_lvl+0x100/0x190 [ 120.337374][ T6221] should_fail_ex.cold+0x5/0xa [ 120.337409][ T6221] should_failslab+0xc2/0x120 [ 120.337443][ T6221] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 120.337478][ T6221] ? kasprintf+0xc7/0x100 [ 120.337514][ T6221] kvasprintf+0xbc/0x150 [ 120.337547][ T6221] ? __pfx_kvasprintf+0x10/0x10 [ 120.337592][ T6221] kasprintf+0xc7/0x100 [ 120.337636][ T6221] ? __pfx_kasprintf+0x10/0x10 [ 120.337672][ T6221] ? __is_module_percpu_address+0x1c2/0x430 [ 120.337720][ T6221] wq_init_lockdep+0x3f/0xe0 [ 120.337752][ T6221] alloc_workqueue_noprof+0xdc/0x130 [ 120.337781][ T6221] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 120.337818][ T6221] ? lockdep_init_map_type+0x5c/0x250 [ 120.337861][ T6221] ? lockdep_init_map_type+0x5c/0x250 [ 120.337908][ T6221] __rds_conn_create+0x1234/0x25a0 [ 120.337969][ T6221] ? __pfx___rds_conn_create+0x10/0x10 [ 120.338014][ T6221] ? __kasan_kmalloc+0xaa/0xb0 [ 120.338047][ T6221] ? lockdep_init_map_type+0x5c/0x250 [ 120.338094][ T6221] rds_conn_create_outgoing+0x44/0x60 [ 120.338144][ T6221] rds_sendmsg+0x10da/0x34a0 [ 120.338194][ T6221] ? __pfx_rds_sendmsg+0x10/0x10 [ 120.338231][ T6221] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.338262][ T6221] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 120.338322][ T6221] ? ____sys_sendmsg+0xa4d/0xbe0 [ 120.338359][ T6221] ____sys_sendmsg+0xa4d/0xbe0 [ 120.338395][ T6221] ? __pfx_rds_sendmsg+0x10/0x10 [ 120.338432][ T6221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.338487][ T6221] ___sys_sendmsg+0x190/0x1e0 [ 120.338529][ T6221] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.338566][ T6221] ? __lock_acquire+0x49f/0x1a40 [ 120.338657][ T6221] __sys_sendmsg+0x160/0x210 [ 120.338688][ T6221] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.338733][ T6221] do_syscall_64+0x115/0x840 [ 120.338773][ T6221] ? clear_bhb_loop+0x40/0x90 [ 120.338808][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.338837][ T6221] RIP: 0033:0x7f077479de59 [ 120.338873][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.338900][ T6221] RSP: 002b:00007f07755ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.338932][ T6221] RAX: ffffffffffffffda RBX: 00007f0774a25fa0 RCX: 00007f077479de59 [ 120.338951][ T6221] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 120.338968][ T6221] RBP: 00007f0774833e6f R08: 0000000000000000 R09: 0000000000000000 [ 120.338985][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.339000][ T6221] R13: 00007f0774a26038 R14: 00007f0774a25fa0 R15: 00007ffffa761098 [ 120.339033][ T6221] [ 121.210847][ T6237] random: crng reseeded on system resumption [ 123.380600][ T6272] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 123.420369][ T6272] audit: out of memory in audit_log_start [ 123.585793][ T6274] FAULT_INJECTION: forcing a failure. [ 123.585793][ T6274] name failslab, interval 1, probability 0, space 0, times 0 [ 123.599960][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 123.600000][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.600019][ T6274] Call Trace: [ 123.600028][ T6274] [ 123.600039][ T6274] dump_stack_lvl+0x100/0x190 [ 123.600078][ T6274] should_fail_ex.cold+0x5/0xa [ 123.600112][ T6274] should_failslab+0xc2/0x120 [ 123.600146][ T6274] kmem_cache_alloc_noprof+0x91/0x6a0 [ 123.600182][ T6274] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 123.600228][ T6274] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 123.600275][ T6274] idr_get_free+0x52e/0xa00 [ 123.600329][ T6274] idr_alloc_u32+0x1ac/0x320 [ 123.600374][ T6274] ? __pfx_idr_alloc_u32+0x10/0x10 [ 123.600429][ T6274] idr_alloc+0xc0/0x130 [ 123.600470][ T6274] ? __pfx_idr_alloc+0x10/0x10 [ 123.600510][ T6274] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 123.600550][ T6274] tipc_conn_alloc+0x337/0x590 [ 123.600593][ T6274] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 123.600643][ T6274] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 123.600690][ T6274] ? net_generic+0xea/0x2a0 [ 123.600749][ T6274] tipc_group_create+0x4ab/0x660 [ 123.600803][ T6274] tipc_setsockopt+0x611/0xe30 [ 123.600841][ T6274] ? __pfx_tipc_setsockopt+0x10/0x10 [ 123.600890][ T6274] ? __pfx_tipc_setsockopt+0x10/0x10 [ 123.600924][ T6274] do_sock_setsockopt+0xf3/0x1d0 [ 123.600964][ T6274] __sys_setsockopt+0x119/0x190 [ 123.601002][ T6274] __x64_sys_setsockopt+0xbd/0x160 [ 123.601031][ T6274] ? do_syscall_64+0x90/0x840 [ 123.601071][ T6274] ? lockdep_hardirqs_on+0x78/0x100 [ 123.601111][ T6274] do_syscall_64+0x115/0x840 [ 123.601150][ T6274] ? clear_bhb_loop+0x40/0x90 [ 123.601191][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.601222][ T6274] RIP: 0033:0x7ffac039de59 [ 123.601248][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.601275][ T6274] RSP: 002b:00007ffabe5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.601306][ T6274] RAX: ffffffffffffffda RBX: 00007ffac0626180 RCX: 00007ffac039de59 [ 123.601325][ T6274] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 123.601344][ T6274] RBP: 00007ffac0433e6f R08: 0000000000000014 R09: 0000000000000000 [ 123.601362][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.601379][ T6274] R13: 00007ffac0626218 R14: 00007ffac0626180 R15: 00007fff4c34c238 [ 123.601416][ T6274] [ 125.278102][ T6292] bond0: option packets_per_slave: invalid value ( Xn) [ 125.305979][ T6292] bond0: option packets_per_slave: allowed values 0 - 65535 [ 125.833293][ T6303] smpboot: CPU 1 is now offline [ 125.854157][ T6300] FAULT_INJECTION: forcing a failure. [ 125.854157][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 125.970860][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 125.970884][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.970894][ T6300] Call Trace: [ 125.970899][ T6300] [ 125.970906][ T6300] dump_stack_lvl+0x100/0x190 [ 125.970928][ T6300] should_fail_ex.cold+0x5/0xa [ 125.970946][ T6300] should_failslab+0xc2/0x120 [ 125.970966][ T6300] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 125.970985][ T6300] ? __alloc_workqueue+0x912/0x1940 [ 125.971006][ T6300] __alloc_workqueue+0x912/0x1940 [ 125.971027][ T6300] alloc_workqueue_noprof+0xc7/0x130 [ 125.971043][ T6300] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 125.971072][ T6300] ? lockdep_init_map_type+0x5c/0x250 [ 125.971097][ T6300] ? lockdep_init_map_type+0x5c/0x250 [ 125.971131][ T6300] __rds_conn_create+0x1234/0x25a0 [ 125.971165][ T6300] ? __pfx___rds_conn_create+0x10/0x10 [ 125.971187][ T6300] ? __kasan_kmalloc+0xaa/0xb0 [ 125.971205][ T6300] ? lockdep_init_map_type+0x5c/0x250 [ 125.971229][ T6300] rds_conn_create_outgoing+0x44/0x60 [ 125.971256][ T6300] rds_sendmsg+0x10da/0x34a0 [ 125.971282][ T6300] ? __pfx_rds_sendmsg+0x10/0x10 [ 125.971301][ T6300] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.971320][ T6300] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 125.971351][ T6300] ? ____sys_sendmsg+0xa4d/0xbe0 [ 125.971371][ T6300] ____sys_sendmsg+0xa4d/0xbe0 [ 125.971389][ T6300] ? __pfx_rds_sendmsg+0x10/0x10 [ 125.971408][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.971436][ T6300] ___sys_sendmsg+0x190/0x1e0 [ 125.971459][ T6300] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.971478][ T6300] ? __lock_acquire+0x49f/0x1a40 [ 125.971521][ T6300] __sys_sendmsg+0x160/0x210 [ 125.971537][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.971562][ T6300] do_syscall_64+0x115/0x840 [ 125.971583][ T6300] ? clear_bhb_loop+0x40/0x90 [ 125.971601][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.971617][ T6300] RIP: 0033:0x7f8ee1d9de59 [ 125.971631][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.971645][ T6300] RSP: 002b:00007f8ee2d1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.971660][ T6300] RAX: ffffffffffffffda RBX: 00007f8ee2025fa0 RCX: 00007f8ee1d9de59 [ 125.971670][ T6300] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 125.971679][ T6300] RBP: 00007f8ee1e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 125.971688][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.971696][ T6300] R13: 00007f8ee2026038 R14: 00007f8ee2025fa0 R15: 00007ffc89bb57a8 [ 125.971715][ T6300] [ 126.997724][ T6311] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 127.033903][ T29] audit: type=1800 audit(1783056146.142:6): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.86" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 127.131156][ T6311] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 127.212759][ T6311] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 127.846865][ T6324] bond0: option packets_per_slave: invalid value ( Xnp) [ 127.846949][ T6324] bond0: option packets_per_slave: allowed values 0 - 65535 [ 128.964301][ T6337] FAULT_INJECTION: forcing a failure. [ 128.964301][ T6337] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 128.964404][ T6337] CPU: 0 UID: 0 PID: 6337 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 128.964423][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.964432][ T6337] Call Trace: [ 128.964437][ T6337] [ 128.964444][ T6337] dump_stack_lvl+0x100/0x190 [ 128.964467][ T6337] should_fail_ex.cold+0x5/0xa [ 128.964484][ T6337] ? prepare_alloc_pages+0x16d/0x5f0 [ 128.964507][ T6337] should_fail_alloc_page+0xeb/0x140 [ 128.964526][ T6337] prepare_alloc_pages+0x1f0/0x5f0 [ 128.964548][ T6337] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 128.964572][ T6337] ? folio_batch_move_lru+0x37c/0xc00 [ 128.964595][ T6337] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.964618][ T6337] ? folio_batch_move_lru+0x3a9/0xc00 [ 128.964639][ T6337] ? __pfx_lru_add+0x10/0x10 [ 128.964662][ T6337] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 128.964684][ T6337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 128.964714][ T6337] ? __lock_acquire+0x49f/0x1a40 [ 128.964735][ T6337] ? __lock_acquire+0x49f/0x1a40 [ 128.964761][ T6337] ? lock_acquire+0x1b9/0x370 [ 128.964781][ T6337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.964802][ T6337] ? policy_nodemask+0xed/0x4f0 [ 128.964822][ T6337] alloc_pages_mpol+0x1fb/0x540 [ 128.964841][ T6337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 128.964864][ T6337] folio_alloc_mpol_noprof+0x36/0x260 [ 128.964887][ T6337] vma_alloc_folio_noprof+0xed/0x1d0 [ 128.964907][ T6337] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 128.964934][ T6337] do_anonymous_page+0xb2b/0x2080 [ 128.964957][ T6337] ? rcu_read_unlock+0x2d/0xb0 [ 128.964983][ T6337] __handle_mm_fault+0x1d2c/0x2a00 [ 128.965008][ T6337] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.965025][ T6337] ? __pfx___handle_mm_fault+0x10/0x10 [ 128.965048][ T6337] ? pte_offset_map_lock+0x174/0x320 [ 128.965064][ T6337] ? find_held_lock+0x2b/0x80 [ 128.965086][ T6337] ? follow_page_pte+0x4d0/0x13f0 [ 128.965107][ T6337] handle_mm_fault+0x37b/0xa30 [ 128.965133][ T6337] __get_user_pages+0x1178/0x32a0 [ 128.965159][ T6337] ? __pfx___get_user_pages+0x10/0x10 [ 128.965182][ T6337] populate_vma_page_range+0x267/0x3f0 [ 128.965202][ T6337] ? __pfx_populate_vma_page_range+0x10/0x10 [ 128.965221][ T6337] ? __pfx_find_vma_intersection+0x10/0x10 [ 128.965244][ T6337] __mm_populate+0x107/0x3a0 [ 128.965266][ T6337] ? __pfx___mm_populate+0x10/0x10 [ 128.965287][ T6337] ? up_write+0x4a6/0x5c0 [ 128.965302][ T6337] vm_mmap_pgoff+0x37f/0x470 [ 128.965323][ T6337] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 128.965351][ T6337] ksys_mmap_pgoff+0xe4/0x610 [ 128.965370][ T6337] ? restore_signal_shadow_stack+0x6d/0x490 [ 128.965399][ T6337] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 128.965419][ T6337] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 128.965443][ T6337] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 128.965470][ T6337] __x64_sys_mmap+0x125/0x190 [ 128.965488][ T6337] do_syscall_64+0x115/0x840 [ 128.965509][ T6337] ? clear_bhb_loop+0x40/0x90 [ 128.965527][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.965542][ T6337] RIP: 0033:0x7f8ee1d9de59 [ 128.965556][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.965570][ T6337] RSP: 002b:00007f8ee2d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.965585][ T6337] RAX: ffffffffffffffda RBX: 00007f8ee2025fa0 RCX: 00007f8ee1d9de59 [ 128.965596][ T6337] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 128.965605][ T6337] RBP: 00007f8ee1e33e6f R08: ffffffffffffffff R09: 0000000000000000 [ 128.965614][ T6337] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 128.965624][ T6337] R13: 00007f8ee2026038 R14: 00007f8ee2025fa0 R15: 00007ffc89bb57a8 [ 128.965645][ T6337] [ 131.732444][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.732519][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.624417][ T6401] FAULT_INJECTION: forcing a failure. [ 133.624417][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 133.669430][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 133.669454][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.669464][ T6401] Call Trace: [ 133.669470][ T6401] [ 133.669476][ T6401] dump_stack_lvl+0x100/0x190 [ 133.669499][ T6401] should_fail_ex.cold+0x5/0xa [ 133.669517][ T6401] should_failslab+0xc2/0x120 [ 133.669538][ T6401] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 133.669555][ T6401] ? __alloc_skb+0x5b7/0x710 [ 133.669569][ T6401] ? __alloc_skb+0x140/0x710 [ 133.669585][ T6401] __alloc_skb+0x140/0x710 [ 133.669599][ T6401] ? __alloc_skb+0x5b7/0x710 [ 133.669612][ T6401] ? __pfx___alloc_skb+0x10/0x10 [ 133.669628][ T6401] ? lockdep_init_map_type+0x5c/0x250 [ 133.669654][ T6401] audit_log_start+0x350/0x930 [ 133.669672][ T6401] ? __pfx_audit_log_start+0x10/0x10 [ 133.669691][ T6401] ? arch_do_signal_or_restart+0x1f9/0x7a0 [ 133.669714][ T6401] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 133.669742][ T6401] audit_seccomp+0x60/0x190 [ 133.669755][ T6401] ? exc_general_protection+0x120/0x240 [ 133.669773][ T6401] __secure_computing+0x26d/0x2c0 [ 133.669790][ T6401] do_syscall_64+0x5ce/0x840 [ 133.669812][ T6401] ? clear_bhb_loop+0x40/0x90 [ 133.669831][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.669846][ T6401] RIP: 0033:0x7f8ee1d9de59 [ 133.669859][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.669873][ T6401] RSP: 002b:00007f8ee2d1e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 133.669888][ T6401] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f8ee1d9de59 [ 133.669898][ T6401] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 133.669906][ T6401] RBP: 00007f8ee2d1f030 R08: 0000000000000001 R09: 000000000000000b [ 133.669915][ T6401] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 133.669923][ T6401] R13: 00007f8ee2026038 R14: 00007f8ee2025fa0 R15: 00007ffc89bb57a8 [ 133.669942][ T6401] [ 133.671577][ T6401] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 133.995828][ T6382] ubi0: detaching mtd0 [ 134.251007][ T6382] ubi0: mtd0 is detached [ 134.755305][ T6416] FAULT_INJECTION: forcing a failure. [ 134.755305][ T6416] name failslab, interval 1, probability 0, space 0, times 0 [ 134.769018][ T6416] CPU: 0 UID: 0 PID: 6416 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 134.769041][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.769051][ T6416] Call Trace: [ 134.769057][ T6416] [ 134.769063][ T6416] dump_stack_lvl+0x100/0x190 [ 134.769085][ T6416] should_fail_ex.cold+0x5/0xa [ 134.769103][ T6416] should_failslab+0xc2/0x120 [ 134.769123][ T6416] __kmalloc_cache_noprof+0x91/0x6c0 [ 134.769146][ T6416] ? net_generic+0xea/0x2a0 [ 134.769167][ T6416] ? tipc_topsrv_queue_evt+0x125/0x3f0 [ 134.769192][ T6416] tipc_topsrv_queue_evt+0x125/0x3f0 [ 134.769217][ T6416] tipc_sub_report_overlap+0x54c/0x9b0 [ 134.769245][ T6416] tipc_nametbl_insert_publ+0xd5a/0x1570 [ 134.769274][ T6416] tipc_nametbl_publish+0x137/0x260 [ 134.769292][ T6416] tipc_sk_publish+0x1d8/0x430 [ 134.769309][ T6416] ? __pfx_tipc_sk_publish+0x10/0x10 [ 134.769327][ T6416] ? tipc_group_create+0x4c0/0x660 [ 134.769351][ T6416] tipc_setsockopt+0x7af/0xe30 [ 134.769369][ T6416] ? __pfx_tipc_setsockopt+0x10/0x10 [ 134.769394][ T6416] ? __pfx_tipc_setsockopt+0x10/0x10 [ 134.769411][ T6416] do_sock_setsockopt+0xf3/0x1d0 [ 134.769433][ T6416] __sys_setsockopt+0x119/0x190 [ 134.769451][ T6416] __x64_sys_setsockopt+0xbd/0x160 [ 134.769465][ T6416] ? do_syscall_64+0x90/0x840 [ 134.769485][ T6416] ? lockdep_hardirqs_on+0x78/0x100 [ 134.769506][ T6416] do_syscall_64+0x115/0x840 [ 134.769526][ T6416] ? clear_bhb_loop+0x40/0x90 [ 134.769544][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.769563][ T6416] RIP: 0033:0x7f8ee1d9de59 [ 134.769577][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.769592][ T6416] RSP: 002b:00007f8ee2cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.769607][ T6416] RAX: ffffffffffffffda RBX: 00007f8ee2026180 RCX: 00007f8ee1d9de59 [ 134.769618][ T6416] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 134.769627][ T6416] RBP: 00007f8ee1e33e6f R08: 0000000000000014 R09: 0000000000000000 [ 134.769636][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.769645][ T6416] R13: 00007f8ee2026218 R14: 00007f8ee2026180 R15: 00007ffc89bb57a8 [ 134.769666][ T6416] [ 135.025611][ T6401] audit: out of memory in audit_log_start [ 137.767958][ T6465] FAULT_INJECTION: forcing a failure. [ 137.767958][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 137.829803][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT(full) [ 137.829826][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.829836][ T6465] Call Trace: [ 137.829841][ T6465] [ 137.829848][ T6465] dump_stack_lvl+0x100/0x190 [ 137.829869][ T6465] should_fail_ex.cold+0x5/0xa [ 137.829887][ T6465] should_failslab+0xc2/0x120 [ 137.829906][ T6465] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 137.829924][ T6465] ? __alloc_skb+0x5b7/0x710 [ 137.829938][ T6465] ? __alloc_skb+0x140/0x710 [ 137.829955][ T6465] __alloc_skb+0x140/0x710 [ 137.829967][ T6465] ? __alloc_skb+0x5b7/0x710 [ 137.829980][ T6465] ? __pfx___alloc_skb+0x10/0x10 [ 137.829995][ T6465] ? lockdep_init_map_type+0x5c/0x250 [ 137.830020][ T6465] audit_log_start+0x350/0x930 [ 137.830038][ T6465] ? __pfx_audit_log_start+0x10/0x10 [ 137.830062][ T6465] audit_seccomp+0x60/0x190 [ 137.830078][ T6465] __secure_computing+0x26d/0x2c0 [ 137.830094][ T6465] do_syscall_64+0x5ce/0x840 [ 137.830115][ T6465] ? clear_bhb_loop+0x40/0x90 [ 137.830134][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.830150][ T6465] RIP: 0033:0x7f077479de59 [ 137.830164][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.830177][ T6465] RSP: 002b:00007f07755ec9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 137.830192][ T6465] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f077479de59 [ 137.830202][ T6465] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 137.830210][ T6465] RBP: 00007f07755ed030 R08: 0000000000000001 R09: 000000000000000b [ 137.830219][ T6465] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 137.830228][ T6465] R13: 00007f0774a26038 R14: 00007f0774a25fa0 R15: 00007ffffa761098 [ 137.830247][ T6465] [ 137.830265][ T6465] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 138.865125][ T6473] FAULT_INJECTION: forcing a failure. [ 138.865125][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 138.879410][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT(full) [ 138.879436][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.879447][ T6473] Call Trace: [ 138.879456][ T6473] [ 138.879465][ T6473] dump_stack_lvl+0x100/0x190 [ 138.879494][ T6473] should_fail_ex.cold+0x5/0xa [ 138.879514][ T6473] should_failslab+0xc2/0x120 [ 138.879536][ T6473] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 138.879558][ T6473] ? __alloc_skb+0x140/0x710 [ 138.879577][ T6473] __alloc_skb+0x140/0x710 [ 138.879592][ T6473] ? __pfx___alloc_skb+0x10/0x10 [ 138.879615][ T6473] ? do_raw_write_lock+0x11e/0x260 [ 138.879635][ T6473] tipc_buf_acquire+0x26/0xe0 [ 138.879661][ T6473] named_prepare_buf+0x29/0x170 [ 138.879688][ T6473] tipc_named_publish+0x1f2/0x760 [ 138.879717][ T6473] tipc_nametbl_publish+0x17b/0x260 [ 138.879736][ T6473] tipc_sk_publish+0x1d8/0x430 [ 138.879757][ T6473] ? __pfx_tipc_sk_publish+0x10/0x10 [ 138.879775][ T6473] ? tipc_group_create+0x4c0/0x660 [ 138.879799][ T6473] tipc_setsockopt+0x7af/0xe30 [ 138.879818][ T6473] ? __pfx_tipc_setsockopt+0x10/0x10 [ 138.879842][ T6473] ? __pfx_tipc_setsockopt+0x10/0x10 [ 138.879860][ T6473] do_sock_setsockopt+0xf3/0x1d0 [ 138.879881][ T6473] __sys_setsockopt+0x119/0x190 [ 138.879900][ T6473] __x64_sys_setsockopt+0xbd/0x160 [ 138.879915][ T6473] ? do_syscall_64+0x90/0x840 [ 138.879936][ T6473] ? lockdep_hardirqs_on+0x78/0x100 [ 138.879957][ T6473] do_syscall_64+0x115/0x840 [ 138.879977][ T6473] ? clear_bhb_loop+0x40/0x90 [ 138.879996][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.880012][ T6473] RIP: 0033:0x7f077479de59 [ 138.880029][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.880044][ T6473] RSP: 002b:00007f07755ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.880059][ T6473] RAX: ffffffffffffffda RBX: 00007f0774a26180 RCX: 00007f077479de59 [ 138.880070][ T6473] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 138.880081][ T6473] RBP: 00007f0774833e6f R08: 0000000000000014 R09: 0000000000000000 [ 138.880091][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.880100][ T6473] R13: 00007f0774a26218 R14: 00007f0774a26180 R15: 00007ffffa761098 [ 138.880122][ T6473] [ 138.880735][ T6473] tipc: Publication distribution failure [ 140.027714][ T6465] audit: out of memory in audit_log_start [ 140.516573][ T6463] Process accounting paused [ 141.987204][ T29] audit: type=1326 audit(1783056161.152:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.0.127" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ee1d9de59 code=0x0 [ 144.325197][ T6532] FAULT_INJECTION: forcing a failure. [ 144.325197][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 144.388475][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 144.388499][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.388509][ T6532] Call Trace: [ 144.388515][ T6532] [ 144.388522][ T6532] dump_stack_lvl+0x100/0x190 [ 144.388547][ T6532] should_fail_ex.cold+0x5/0xa [ 144.388566][ T6532] should_failslab+0xc2/0x120 [ 144.388587][ T6532] __kmalloc_noprof+0xfc/0x820 [ 144.388606][ T6532] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 144.388634][ T6532] apply_wqattrs_prepare+0xfe/0xbb0 [ 144.388656][ T6532] ? __alloc_workqueue+0xafd/0x1940 [ 144.388678][ T6532] apply_workqueue_attrs_locked+0x64/0xe0 [ 144.388702][ T6532] __alloc_workqueue+0xf55/0x1940 [ 144.388726][ T6532] alloc_workqueue_noprof+0xc7/0x130 [ 144.388745][ T6532] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 144.388766][ T6532] ? lockdep_init_map_type+0x5c/0x250 [ 144.388789][ T6532] ? lockdep_init_map_type+0x5c/0x250 [ 144.388813][ T6532] __rds_conn_create+0x1234/0x25a0 [ 144.388845][ T6532] ? __pfx___rds_conn_create+0x10/0x10 [ 144.388867][ T6532] ? __kasan_kmalloc+0xaa/0xb0 [ 144.388885][ T6532] ? lockdep_init_map_type+0x5c/0x250 [ 144.388913][ T6532] rds_conn_create_outgoing+0x44/0x60 [ 144.388943][ T6532] rds_sendmsg+0x10da/0x34a0 [ 144.388969][ T6532] ? __pfx_rds_sendmsg+0x10/0x10 [ 144.388988][ T6532] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.389004][ T6532] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 144.389038][ T6532] ? ____sys_sendmsg+0xa4d/0xbe0 [ 144.389059][ T6532] ____sys_sendmsg+0xa4d/0xbe0 [ 144.389077][ T6532] ? __pfx_rds_sendmsg+0x10/0x10 [ 144.389099][ T6532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.389130][ T6532] ___sys_sendmsg+0x190/0x1e0 [ 144.389155][ T6532] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.389176][ T6532] ? __lock_acquire+0x49f/0x1a40 [ 144.389219][ T6532] __sys_sendmsg+0x160/0x210 [ 144.389235][ T6532] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.389261][ T6532] do_syscall_64+0x115/0x840 [ 144.389282][ T6532] ? clear_bhb_loop+0x40/0x90 [ 144.389301][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.389317][ T6532] RIP: 0033:0x7f05eed9de59 [ 144.389339][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.389355][ T6532] RSP: 002b:00007f05efd20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.389372][ T6532] RAX: ffffffffffffffda RBX: 00007f05ef025fa0 RCX: 00007f05eed9de59 [ 144.389383][ T6532] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 144.389394][ T6532] RBP: 00007f05eee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 144.389404][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.389413][ T6532] R13: 00007f05ef026038 R14: 00007f05ef025fa0 R15: 00007fffa3c0c0f8 [ 144.389435][ T6532] [ 151.386756][ T6636] netlink: 338 bytes leftover after parsing attributes in process `syz.1.147'. [ 151.575283][ T6635] netlink: 338 bytes leftover after parsing attributes in process `syz.1.147'. [ 153.551965][ T6660] WARNING! power/level is deprecated; use power/control instead [ 154.429538][ T6685] bond0: option packets_per_slave: invalid value ( Xnp) [ 154.508999][ T6685] bond0: option packets_per_slave: allowed values 0 - 65535 [ 155.662804][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 158.519833][ T6758] bond0: option packets_per_slave: invalid value ( Xnp) [ 158.557814][ T6758] bond0: option packets_per_slave: allowed values 0 - 65535 [ 158.928838][ T5635] Bluetooth: hci1: unexpected event 0x10 length: 124 > 1 [ 158.930298][ T5635] Bluetooth: hci1: hardware error 0x00 [ 161.172874][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 161.245710][ T5635] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 161.354133][ T6807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.392508][ T6807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.546813][ T6807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.634302][ T6806] syz.1.172 (6806) used greatest stack depth: 19552 bytes left [ 161.643411][ T6807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.667473][ T6807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.770608][ T6807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.849026][ T6807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.878484][ T6807] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.898440][ T6807] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.242254][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 163.083944][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.643964][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.851156][ T6872] openvswitch: netlink: Missing valid actions attribute. [ 163.885267][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.901120][ T6872] FAULT_INJECTION: forcing a failure. [ 163.901120][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 163.914930][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT(full) [ 163.914953][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.914964][ T6872] Call Trace: [ 163.914970][ T6872] [ 163.914976][ T6872] dump_stack_lvl+0x100/0x190 [ 163.915000][ T6872] should_fail_ex.cold+0x5/0xa [ 163.915017][ T6872] ? pcpu_block_update+0x20b/0x690 [ 163.915043][ T6872] should_failslab+0xc2/0x120 [ 163.915064][ T6872] kmem_cache_alloc_noprof+0x91/0x6a0 [ 163.915084][ T6872] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 163.915108][ T6872] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 163.915130][ T6872] idr_get_free+0x52e/0xa00 [ 163.915157][ T6872] idr_alloc_u32+0x1ac/0x320 [ 163.915183][ T6872] ? __pfx_idr_alloc_u32+0x10/0x10 [ 163.915207][ T6872] ? lock_acquire+0x1b9/0x370 [ 163.915232][ T6872] idr_alloc_cyclic+0x10b/0x230 [ 163.915254][ T6872] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 163.915275][ T6872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.915290][ T6872] ? kfree+0x1e5/0x6c0 [ 163.915313][ T6872] map_create+0x1476/0x3120 [ 163.915342][ T6872] ? __pfx_map_create+0x10/0x10 [ 163.915367][ T6872] ? __might_fault+0xc5/0x140 [ 163.915397][ T6872] __sys_bpf+0x2a6e/0x4e80 [ 163.915426][ T6872] ? __pfx___sys_bpf+0x10/0x10 [ 163.915450][ T6872] ? find_held_lock+0x2b/0x80 [ 163.915466][ T6872] ? futex_wake+0x4ea/0x5e0 [ 163.915485][ T6872] ? futex_private_hash_put+0x115/0x1c0 [ 163.915512][ T6872] ? __pfx_futex_wake+0x10/0x10 [ 163.915531][ T6872] ? rcu_read_lock_any_held+0x6a/0xa0 [ 163.915548][ T6872] ? find_held_lock+0x2b/0x80 [ 163.915564][ T6872] ? ksys_write+0x190/0x250 [ 163.915584][ T6872] ? ksys_write+0x190/0x250 [ 163.915615][ T6872] ? __x64_sys_futex+0x34f/0x4d0 [ 163.915629][ T6872] ? __x64_sys_futex+0x358/0x4d0 [ 163.915643][ T6872] ? __x64_sys_openat+0x12d/0x210 [ 163.915660][ T6872] ? xfd_validate_state+0x129/0x190 [ 163.915678][ T6872] ? __x64_sys_bpf+0xce/0x140 [ 163.915691][ T6872] __x64_sys_bpf+0xce/0x140 [ 163.915713][ T6872] ? do_syscall_64+0x90/0x840 [ 163.915739][ T6872] do_syscall_64+0x115/0x840 [ 163.915763][ T6872] ? clear_bhb_loop+0x40/0x90 [ 163.915784][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.915802][ T6872] RIP: 0033:0x7f05eed9de59 [ 163.915817][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.915832][ T6872] RSP: 002b:00007f05efd20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.915849][ T6872] RAX: ffffffffffffffda RBX: 00007f05ef025fa0 RCX: 00007f05eed9de59 [ 163.915861][ T6872] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 163.915871][ T6872] RBP: 00007f05eee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 163.915882][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.915891][ T6872] R13: 00007f05ef026038 R14: 00007f05ef025fa0 R15: 00007fffa3c0c0f8 [ 163.915912][ T6872] [ 165.276254][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.725316][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.964579][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.929484][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 167.029758][ T6911] batadv0: entered promiscuous mode [ 167.060028][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 167.323995][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.805671][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.043963][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.889698][ T6930] zswap: compressor 000 not available [ 170.356045][ T6953] bond0: option packets_per_slave: invalid value ( Xnp) [ 170.388151][ T6953] bond0: option packets_per_slave: allowed values 0 - 65535 [ 171.334691][ T6969] Process accounting resumed [ 172.365174][ T6989] syz.1.205 uses obsolete (PF_INET,SOCK_PACKET) [ 173.209438][ T6997] vivid-007: ================= START STATUS ================= [ 173.285460][ T6997] vivid-007: Generate PTS: true [ 173.354367][ T6997] vivid-007: Generate SCR: true [ 173.408469][ T6997] tpg source WxH: 320x240 (Y'CbCr) [ 173.447361][ T6997] tpg field: 1 [ 173.465340][ T6997] tpg crop: (0,0)/320x240 [ 173.483231][ T6997] tpg compose: (0,0)/320x240 [ 173.546593][ T6997] tpg colorspace: 8 [ 173.590966][ T6997] tpg transfer function: 0/0 [ 173.618453][ T6997] tpg Y'CbCr encoding: 0/0 [ 173.635439][ T6997] tpg quantization: 0/0 [ 173.655038][ T6997] tpg RGB range: 0/2 [ 173.698968][ T6997] vivid-007: ================== END STATUS ================== [ 174.577005][ T7013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.300454][ T7123] netlink: 338 bytes leftover after parsing attributes in process `syz.0.225'. [ 180.440638][ T7123] netlink: 338 bytes leftover after parsing attributes in process `syz.0.225'. [ 181.403064][ T5635] Bluetooth: hci0: unexpected event 0x10 length: 124 > 1 [ 181.404364][ T5635] Bluetooth: hci0: hardware error 0x00 [ 181.772409][ T7137] bond0: option packets_per_slave: invalid value ( Xnp) [ 181.772440][ T7137] bond0: option packets_per_slave: allowed values 0 - 65535 [ 182.986583][ T7167] FAULT_INJECTION: forcing a failure. [ 182.986583][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 183.217489][ T7167] CPU: 0 UID: 0 PID: 7167 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) [ 183.217523][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.217536][ T7167] Call Trace: [ 183.217542][ T7167] [ 183.217548][ T7167] dump_stack_lvl+0x100/0x190 [ 183.217571][ T7167] should_fail_ex.cold+0x5/0xa [ 183.217589][ T7167] should_failslab+0xc2/0x120 [ 183.217608][ T7167] kmem_cache_alloc_noprof+0x91/0x6a0 [ 183.217624][ T7167] ? __pfx_map_id_range_down+0x10/0x10 [ 183.217643][ T7167] ? rcu_is_watching+0x12/0xc0 [ 183.217658][ T7167] ? security_inode_alloc+0x3b/0x2c0 [ 183.217685][ T7167] security_inode_alloc+0x3b/0x2c0 [ 183.217709][ T7167] inode_init_always_gfp+0xc77/0xfb0 [ 183.217734][ T7167] alloc_inode+0x8e/0x250 [ 183.217750][ T7167] alloc_anon_inode+0x2a/0x3e0 [ 183.217775][ T7167] ioctx_alloc+0x4dc/0x21a0 [ 183.217805][ T7167] ? find_held_lock+0x2b/0x80 [ 183.217822][ T7167] ? __pfx_ioctx_alloc+0x10/0x10 [ 183.217850][ T7167] __x64_sys_io_setup+0xc9/0x220 [ 183.217865][ T7167] do_syscall_64+0x115/0x840 [ 183.217886][ T7167] ? clear_bhb_loop+0x40/0x90 [ 183.217904][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.217919][ T7167] RIP: 0033:0x7ffac039de59 [ 183.217933][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.217947][ T7167] RSP: 002b:00007ffabe5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 183.217964][ T7167] RAX: ffffffffffffffda RBX: 00007ffac0626180 RCX: 00007ffac039de59 [ 183.217974][ T7167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 183.217983][ T7167] RBP: 00007ffac0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 183.217991][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.218000][ T7167] R13: 00007ffac0626218 R14: 00007ffac0626180 R15: 00007fff4c34c238 [ 183.218019][ T7167] [ 183.615995][ T5635] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 183.913936][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 184.603619][ T7197] capability: warning: `syz.2.239' uses 32-bit capabilities (legacy support in use) [ 185.998037][ T7221] random: crng reseeded on system resumption [ 186.117844][ T7221] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 189.530017][ T7279] netlink: 342 bytes leftover after parsing attributes in process `syz.2.260'. [ 189.540024][ T7270] vivid-007: ================= START STATUS ================= [ 189.567586][ T7270] vivid-007: Generate PTS: true [ 189.612968][ T7270] vivid-007: Generate SCR: true [ 189.685610][ T7270] tpg source WxH: 320x240 (Y'CbCr) [ 189.721593][ T7270] tpg field: 1 [ 189.743013][ T7270] tpg crop: (0,0)/320x240 [ 189.759548][ T7270] tpg compose: (0,0)/320x240 [ 189.795390][ T7270] tpg colorspace: 8 [ 189.827371][ T7270] tpg transfer function: 0/0 [ 189.874448][ T7270] tpg Y'CbCr encoding: 0/0 [ 189.907953][ T7270] tpg quantization: 0/0 [ 189.937403][ T7270] tpg RGB range: 0/2 [ 189.957733][ T7270] vivid-007: ================== END STATUS ================== [ 192.500241][ T7325] warning: `syz.1.268' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.593557][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 192.904581][ T7330] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.960829][ T7325] bond0: (slave bond_slave_0): Releasing backup interface [ 192.986489][ T7321] zswap: compressor 000 not available [ 193.336255][ T7333] netlink: 338 bytes leftover after parsing attributes in process `syz.3.269'. [ 193.413970][ T7333] netlink: 338 bytes leftover after parsing attributes in process `syz.3.269'. [ 194.447791][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.454860][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.246055][ T29] audit: type=1804 audit(1783074560.413:8): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.278" name="/newroot/63/file0" dev="tmpfs" ino=351 res=1 errno=0 [ 197.364408][ T29] audit: type=1804 audit(1783074560.413:9): pid=7385 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.278" name="/newroot/63/file0" dev="tmpfs" ino=351 res=1 errno=0 [ 197.948578][ T7394] hub 1-0:1.0: USB hub found [ 197.992876][ T7394] hub 1-0:1.0: 1 port detected [ 198.630080][ T7409] random: crng reseeded on system resumption [ 198.936461][ T7413] netlink: 338 bytes leftover after parsing attributes in process `syz.2.281'. [ 199.003533][ T7413] netlink: 338 bytes leftover after parsing attributes in process `syz.2.281'. [ 200.164240][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 200.614787][ T7431] batadv0: entered promiscuous mode [ 200.696807][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 201.394904][ T7452] FAULT_INJECTION: forcing a failure. [ 201.394904][ T7452] name failslab, interval 1, probability 0, space 0, times 0 [ 201.470712][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 201.470736][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.470746][ T7452] Call Trace: [ 201.470751][ T7452] [ 201.470758][ T7452] dump_stack_lvl+0x100/0x190 [ 201.470780][ T7452] should_fail_ex.cold+0x5/0xa [ 201.470799][ T7452] should_failslab+0xc2/0x120 [ 201.470819][ T7452] __kmalloc_cache_noprof+0x91/0x6c0 [ 201.470848][ T7452] ? rcu_is_watching+0x12/0xc0 [ 201.470866][ T7452] ? __request_module+0x2b7/0x6a0 [ 201.470894][ T7452] __request_module+0x2b7/0x6a0 [ 201.470920][ T7452] ? __pfx___request_module+0x10/0x10 [ 201.470952][ T7452] ? find_held_lock+0x2b/0x80 [ 201.470969][ T7452] ? inet6_create+0xb9f/0x12b0 [ 201.470993][ T7452] inet6_create+0xd65/0x12b0 [ 201.471014][ T7452] ? inet6_create+0x7f/0x12b0 [ 201.471036][ T7452] __sock_create+0x339/0x860 [ 201.471060][ T7452] __sys_socket+0x14d/0x260 [ 201.471080][ T7452] ? __pfx___sys_socket+0x10/0x10 [ 201.471106][ T7452] __x64_sys_socket+0x72/0xb0 [ 201.471126][ T7452] ? lockdep_hardirqs_on+0x78/0x100 [ 201.471147][ T7452] do_syscall_64+0x115/0x840 [ 201.471168][ T7452] ? clear_bhb_loop+0x40/0x90 [ 201.471187][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.471203][ T7452] RIP: 0033:0x7f8ee1d9de59 [ 201.471217][ T7452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.471231][ T7452] RSP: 002b:00007f8ee2d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 201.471246][ T7452] RAX: ffffffffffffffda RBX: 00007f8ee2025fa0 RCX: 00007f8ee1d9de59 [ 201.471256][ T7452] RDX: 0000000000000003 RSI: 000000000000000a RDI: 000000000000000a [ 201.471264][ T7452] RBP: 00007f8ee1e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 201.471273][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.471281][ T7452] R13: 00007f8ee2026038 R14: 00007f8ee2025fa0 R15: 00007ffc89bb57a8 [ 201.471300][ T7452] [ 202.149929][ T7447] Process accounting paused [ 204.576472][ T7492] FAULT_INJECTION: forcing a failure. [ 204.576472][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 204.576539][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(full) [ 204.576559][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.576568][ T7492] Call Trace: [ 204.576573][ T7492] [ 204.576579][ T7492] dump_stack_lvl+0x100/0x190 [ 204.576599][ T7492] should_fail_ex.cold+0x5/0xa [ 204.576618][ T7492] should_failslab+0xc2/0x120 [ 204.576646][ T7492] kmem_cache_alloc_noprof+0x91/0x6a0 [ 204.576664][ T7492] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 204.576692][ T7492] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 204.576717][ T7492] ext4_do_writepages+0x171c/0x3ed0 [ 204.576735][ T7492] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 204.576758][ T7492] ? timerqueue_linked_add+0x260/0x430 [ 204.576784][ T7492] ? __pfx_ext4_do_writepages+0x10/0x10 [ 204.576812][ T7492] ? ext4_writepages+0x347/0x750 [ 204.576830][ T7492] ext4_writepages+0x347/0x750 [ 204.576850][ T7492] ? __pfx_ext4_writepages+0x10/0x10 [ 204.576875][ T7492] ? do_writepages+0x4b5/0x600 [ 204.576892][ T7492] ? do_writepages+0x4b5/0x600 [ 204.576909][ T7492] ? __pfx_ext4_writepages+0x10/0x10 [ 204.576929][ T7492] do_writepages+0x278/0x600 [ 204.576947][ T7492] ? __pfx_do_writepages+0x10/0x10 [ 204.576962][ T7492] ? do_raw_spin_unlock+0x145/0x1e0 [ 204.576978][ T7492] ? _raw_spin_unlock+0x28/0x50 [ 204.576997][ T7492] filemap_writeback+0x22d/0x2e0 [ 204.577015][ T7492] ? __pfx_filemap_writeback+0x10/0x10 [ 204.577054][ T7492] ? mt_find+0x45e/0x8e0 [ 204.577069][ T7492] ? __pfx_mt_find+0x10/0x10 [ 204.577085][ T7492] file_write_and_wait_range+0xcd/0x140 [ 204.577106][ T7492] ext4_sync_file+0x358/0xb60 [ 204.577125][ T7492] ? __pfx_ext4_sync_file+0x10/0x10 [ 204.577142][ T7492] ? __up_read+0x300/0x980 [ 204.577156][ T7492] ? __pfx___up_read+0x10/0x10 [ 204.577169][ T7492] ? __do_sys_msync+0x39b/0x590 [ 204.577184][ T7492] ? __pfx_ext4_sync_file+0x10/0x10 [ 204.577200][ T7492] vfs_fsync_range+0x9b/0x190 [ 204.577217][ T7492] __do_sys_msync+0x3ca/0x590 [ 204.577235][ T7492] do_syscall_64+0x115/0x840 [ 204.577255][ T7492] ? clear_bhb_loop+0x40/0x90 [ 204.577273][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.577289][ T7492] RIP: 0033:0x7f8ee1d9de59 [ 204.577302][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.577317][ T7492] RSP: 002b:00007f8ee2d1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 204.577331][ T7492] RAX: ffffffffffffffda RBX: 00007f8ee2025fa0 RCX: 00007f8ee1d9de59 [ 204.577341][ T7492] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 204.577351][ T7492] RBP: 00007f8ee1e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.577361][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.577371][ T7492] R13: 00007f8ee2026038 R14: 00007f8ee2025fa0 R15: 00007ffc89bb57a8 [ 204.577393][ T7492] [ 204.636524][ T7493] openvswitch: netlink: Message has 4 unknown bytes. [ 207.943118][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 208.022047][ T7544] netlink: 354 bytes leftover after parsing attributes in process `syz.3.308'. [ 208.041265][ T7548] FAULT_INJECTION: forcing a failure. [ 208.041265][ T7548] name fail_futex, interval 1, probability 0, space 0, times 1 [ 208.143409][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 208.143433][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.143443][ T7548] Call Trace: [ 208.143448][ T7548] [ 208.143455][ T7548] dump_stack_lvl+0x100/0x190 [ 208.143478][ T7548] should_fail_ex.cold+0x5/0xa [ 208.143496][ T7548] get_futex_key+0x1d2/0x14f0 [ 208.143521][ T7548] ? __pfx_get_futex_key+0x10/0x10 [ 208.143549][ T7548] futex_wake+0xf4/0x5e0 [ 208.143569][ T7548] ? __pfx_futex_wake+0x10/0x10 [ 208.143585][ T7548] ? kasan_quarantine_put+0x104/0x240 [ 208.143604][ T7548] ? putname+0xb1/0x110 [ 208.143616][ T7548] ? kmem_cache_free+0x127/0x6b0 [ 208.143644][ T7548] do_futex+0x2b2/0x440 [ 208.143664][ T7548] ? __pfx_do_futex+0x10/0x10 [ 208.143677][ T7548] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.143703][ T7548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.143734][ T7548] __x64_sys_futex+0x34f/0x4d0 [ 208.143758][ T7548] ? __x64_sys_openat+0x12d/0x210 [ 208.143786][ T7548] ? __pfx___x64_sys_futex+0x10/0x10 [ 208.143815][ T7548] do_syscall_64+0x115/0x840 [ 208.143837][ T7548] ? clear_bhb_loop+0x40/0x90 [ 208.143857][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.143872][ T7548] RIP: 0033:0x7f8ee1d9de59 [ 208.143886][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.143900][ T7548] RSP: 002b:00007f8ee2d1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.143914][ T7548] RAX: ffffffffffffffda RBX: 00007f8ee2025fa8 RCX: 00007f8ee1d9de59 [ 208.143924][ T7548] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ee2025fac [ 208.143933][ T7548] RBP: 00007f8ee2025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 208.143941][ T7548] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 208.143950][ T7548] R13: 00007f8ee2026038 R14: 00007ffc89bb56c0 R15: 00007ffc89bb57a8 [ 208.143968][ T7548] [ 208.492127][ T7553] netlink: 334 bytes leftover after parsing attributes in process `syz.3.312'. [ 208.565496][ T7557] ubi31: attaching mtd0 [ 208.566507][ T7557] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 208.566541][ T7557] ubi31 error: validate_ec_hdr: bad EC header [ 208.566562][ T7557] Erase counter header dump: [ 208.566567][ T7557] magic 0x55424923 [ 208.566573][ T7557] version 1 [ 208.566579][ T7557] ec 1 [ 208.566585][ T7557] vid_hdr_offset 64 [ 208.566591][ T7557] data_offset 128 [ 208.566596][ T7557] image_seq 1976476137 [ 208.566602][ T7557] hdr_crc 0x40066fe4 [ 208.566608][ T7557] erase counter header hexdump: [ 208.566661][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 208.566678][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.566687][ T7557] Call Trace: [ 208.566692][ T7557] [ 208.566698][ T7557] dump_stack_lvl+0x100/0x190 [ 208.566716][ T7557] validate_ec_hdr+0x2d0/0x330 [ 208.566741][ T7557] ubi_io_read_ec_hdr+0x656/0x6d0 [ 208.566767][ T7557] ubi_attach+0x601/0x4d30 [ 208.566790][ T7557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 208.566812][ T7557] ? ubi_msg+0x114/0x159 [ 208.566826][ T7557] ? __pfx_ubi_msg+0x10/0x10 [ 208.566840][ T7557] ? __pfx_ubi_attach+0x10/0x10 [ 208.566856][ T7557] ? lockdep_init_map_type+0x5c/0x250 [ 208.566881][ T7557] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 208.566899][ T7557] ? __vmalloc_node_noprof+0xad/0xf0 [ 208.566919][ T7557] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 208.566939][ T7557] ubi_attach_mtd_dev+0x139f/0x32a0 [ 208.566965][ T7557] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 208.566983][ T7557] ? __pfx_get_mtd_device+0x10/0x10 [ 208.567010][ T7557] ctrl_cdev_ioctl+0x36a/0x400 [ 208.567029][ T7557] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 208.567052][ T7557] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 208.567071][ T7557] __x64_sys_ioctl+0x18e/0x210 [ 208.567091][ T7557] do_syscall_64+0x115/0x840 [ 208.567112][ T7557] ? clear_bhb_loop+0x40/0x90 [ 208.567130][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.567145][ T7557] RIP: 0033:0x7f05eed9de59 [ 208.567158][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.567172][ T7557] RSP: 002b:00007f05efcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.567186][ T7557] RAX: ffffffffffffffda RBX: 00007f05ef026180 RCX: 00007f05eed9de59 [ 208.567196][ T7557] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000008 [ 208.567205][ T7557] RBP: 00007f05eee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 208.567214][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.567222][ T7557] R13: 00007f05ef026218 R14: 00007f05ef026180 R15: 00007fffa3c0c0f8 [ 208.567241][ T7557] [ 208.567247][ T7557] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 208.570991][ T7551] FAULT_INJECTION: forcing a failure. [ 208.570991][ T7551] name failslab, interval 1, probability 0, space 0, times 0 [ 208.571060][ T7551] CPU: 0 UID: 0 PID: 7551 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 208.571079][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.571088][ T7551] Call Trace: [ 208.571093][ T7551] [ 208.571099][ T7551] dump_stack_lvl+0x100/0x190 [ 208.571120][ T7551] should_fail_ex.cold+0x5/0xa [ 208.571138][ T7551] should_failslab+0xc2/0x120 [ 208.571157][ T7551] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 208.571175][ T7551] ? sock_alloc_inode+0x26/0x2c0 [ 208.571196][ T7551] ? __pfx_sock_alloc_inode+0x10/0x10 [ 208.571215][ T7551] sock_alloc_inode+0x26/0x2c0 [ 208.571232][ T7551] ? __pfx_sock_alloc_inode+0x10/0x10 [ 208.571249][ T7551] alloc_inode+0x68/0x250 [ 208.571267][ T7551] sock_alloc+0x44/0x280 [ 208.571282][ T7551] ? security_socket_create+0x7f/0x250 [ 208.571306][ T7551] sock_create_lite+0x82/0x120 [ 208.571324][ T7551] __netlink_kernel_create+0xbd/0x750 [ 208.571344][ T7551] ? __kvmalloc_node_noprof+0x36d/0x970 [ 208.571361][ T7551] ? __pfx___netlink_kernel_create+0x10/0x10 [ 208.571387][ T7551] fib_net_init+0x2ab/0x440 [ 208.571406][ T7551] ? is_module_address+0x69/0xf0 [ 208.571428][ T7551] ? __pfx_fib_net_init+0x10/0x10 [ 208.571447][ T7551] ? timer_init_key+0x150/0x310 [ 208.571467][ T7551] ? __pfx_nl_fib_input+0x10/0x10 [ 208.571488][ T7551] ? devinet_init_net+0x56c/0x8d0 [ 208.571512][ T7551] ? __pfx_fib_net_init+0x10/0x10 [ 208.571530][ T7551] ops_init+0x1e2/0x5f0 [ 208.571548][ T7551] setup_net+0x118/0x3a0 [ 208.571564][ T7551] ? __pfx_setup_net+0x10/0x10 [ 208.571580][ T7551] ? mutex_init_lockdep+0xf1/0x120 [ 208.571605][ T7551] copy_net_ns+0x46f/0x7c0 [ 208.571634][ T7551] create_new_namespaces+0x3ea/0xac0 [ 208.571664][ T7551] unshare_nsproxy_namespaces+0xf2/0x220 [ 208.571690][ T7551] ksys_unshare+0x438/0xab0 [ 208.571710][ T7551] ? __pfx_ksys_unshare+0x10/0x10 [ 208.571734][ T7551] __x64_sys_unshare+0x31/0x40 [ 208.571750][ T7551] do_syscall_64+0x115/0x840 [ 208.571771][ T7551] ? clear_bhb_loop+0x40/0x90 [ 208.571789][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.571804][ T7551] RIP: 0033:0x7f05eed9de59 [ 208.571819][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.571832][ T7551] RSP: 002b:00007f05efd20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 208.571847][ T7551] RAX: ffffffffffffffda RBX: 00007f05ef025fa0 RCX: 00007f05eed9de59 [ 208.571856][ T7551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 208.571865][ T7551] RBP: 00007f05eee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 208.571874][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.571882][ T7551] R13: 00007f05ef026038 R14: 00007f05ef025fa0 R15: 00007fffa3c0c0f8 [ 208.571902][ T7551] [ 208.694301][ T7553] sg_write: data in/out 8156/3992 bytes for SCSI command 0x0-- guessing data in; [ 208.694301][ T7553] program syz.3.312 not setting count and/or reply_len properly [ 208.893765][ T7557] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 209.768814][ T7548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.770654][ T7548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.041043][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 210.898967][ T7584] netlink: 'syz.3.317': attribute type 11 has an invalid length. [ 210.898989][ T7584] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 210.898999][ T7584] netlink: 9 bytes leftover after parsing attributes in process `syz.3.317'. [ 211.644430][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.804433][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.133733][ T7600] FAULT_INJECTION: forcing a failure. [ 212.133733][ T7600] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.177107][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(full) [ 212.177131][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.177141][ T7600] Call Trace: [ 212.177147][ T7600] [ 212.177153][ T7600] dump_stack_lvl+0x100/0x190 [ 212.177175][ T7600] should_fail_ex.cold+0x5/0xa [ 212.177192][ T7600] _copy_from_user+0x2e/0xd0 [ 212.177213][ T7600] copy_msqid_from_user.constprop.0+0x1d/0x50 [ 212.177237][ T7600] ksys_msgctl.constprop.0+0x16a/0x340 [ 212.177258][ T7600] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 212.177288][ T7600] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 212.177315][ T7600] do_syscall_64+0x115/0x840 [ 212.177336][ T7600] ? clear_bhb_loop+0x40/0x90 [ 212.177354][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.177369][ T7600] RIP: 0033:0x7f05eed9de59 [ 212.177382][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.177397][ T7600] RSP: 002b:00007f05efd20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 212.177412][ T7600] RAX: ffffffffffffffda RBX: 00007f05ef025fa0 RCX: 00007f05eed9de59 [ 212.177422][ T7600] RDX: 0000200000000740 RSI: 0000000000000001 RDI: 0000000000000005 [ 212.177430][ T7600] RBP: 00007f05eee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 212.177439][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.177447][ T7600] R13: 00007f05ef026038 R14: 00007f05ef025fa0 R15: 00007fffa3c0c0f8 [ 212.177466][ T7600] [ 213.349135][ T7617] blktrace: Concurrent blktraces are not allowed on nbd8 [ 213.389852][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'. [ 213.441183][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.325'. [ 213.457061][ T7619] bond0: (slave bond_slave_0): Releasing backup interface [ 213.633234][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.646308][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.488360][ T7643] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 216.092854][ T29] audit: type=1804 audit(1783074579.253:10): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.340" name="/newroot/82/file0" dev="tmpfs" ino=444 res=1 errno=0 [ 216.225179][ T29] audit: type=1804 audit(1783074579.293:11): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.340" name="/newroot/82/file0" dev="tmpfs" ino=444 res=1 errno=0 [ 216.315604][ T7665] binder: 7649:7665 ioctl c00c620f 200000000c40 returned -22 [ 216.780852][ T7670] netlink: 334 bytes leftover after parsing attributes in process `syz.0.335'. [ 216.958418][ T7673] sg_write: data in/out 8156/3992 bytes for SCSI command 0x0-- guessing data in; [ 216.958418][ T7673] program syz.0.335 not setting count and/or reply_len properly [ 217.809254][ T5635] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 218.149561][ T7697] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.188660][ T7697] netlink: 310 bytes leftover after parsing attributes in process `syz.2.342'. [ 219.144059][ T7711] openvswitch: netlink: Message has 4 unknown bytes. [ 226.138971][ T7830] vivid-007: ================= START STATUS ================= [ 226.238188][ T7830] vivid-007: Generate PTS: true [ 226.275584][ T7830] vivid-007: Generate SCR: true [ 226.335052][ T7830] tpg source WxH: 320x240 (Y'CbCr) [ 226.429421][ T7830] tpg field: 1 [ 226.477785][ T7830] tpg crop: (0,0)/320x240 [ 226.527352][ T7830] tpg compose: (0,0)/320x240 [ 226.561139][ T7830] tpg colorspace: 8 [ 226.610536][ T7830] tpg transfer function: 0/0 [ 226.669933][ T7830] tpg Y'CbCr encoding: 0/0 [ 226.727312][ T7830] tpg quantization: 0/0 [ 226.768877][ T7848] ubi0: attaching mtd0 [ 226.780856][ T7830] tpg RGB range: 0/2 [ 226.826963][ T7830] vivid-007: ================== END STATUS ================== [ 226.871320][ T7848] ubi0: scanning is finished [ 227.605015][ T7848] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 227.740985][ T7848] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 227.881680][ T7848] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 228.004025][ T7848] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 228.117420][ T7848] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 228.237238][ T7848] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 228.328303][ T7848] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1976476137 [ 228.713019][ T7848] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 229.046122][ T7859] ubi0: background thread "ubi_bgt0d" started, PID 7859 [ 229.053274][ T7844] ubi0: detaching mtd0 [ 229.362299][ T7844] ubi0: mtd0 is detached [ 232.047871][ T7884] hub 1-0:1.0: USB hub found [ 232.186720][ T7884] hub 1-0:1.0: 1 port detected [ 232.218599][ T7879] Process accounting resumed [ 239.476249][ T7970] FAULT_INJECTION: forcing a failure. [ 239.476249][ T7970] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.538293][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.2.397 Not tainted syzkaller #0 PREEMPT(full) [ 239.538316][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.538326][ T7970] Call Trace: [ 239.538332][ T7970] [ 239.538338][ T7970] dump_stack_lvl+0x100/0x190 [ 239.538364][ T7970] should_fail_ex.cold+0x5/0xa [ 239.538381][ T7970] get_futex_key+0x1d2/0x14f0 [ 239.538408][ T7970] ? __pfx_get_futex_key+0x10/0x10 [ 239.538431][ T7970] ? find_held_lock+0x2b/0x80 [ 239.538448][ T7970] ? futex_wake+0x4ea/0x5e0 [ 239.538470][ T7970] futex_wake+0xf4/0x5e0 [ 239.538489][ T7970] ? __pfx_futex_wake+0x10/0x10 [ 239.538506][ T7970] ? perf_event_namespaces+0x1ad/0x200 [ 239.538531][ T7970] ? __lock_acquire+0x49f/0x1a40 [ 239.538554][ T7970] do_futex+0x2b2/0x440 [ 239.538569][ T7970] ? __pfx_do_futex+0x10/0x10 [ 239.538585][ T7970] ? find_held_lock+0x2b/0x80 [ 239.538603][ T7970] __x64_sys_futex+0x34f/0x4d0 [ 239.538625][ T7970] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.538654][ T7970] do_syscall_64+0x115/0x840 [ 239.538675][ T7970] ? clear_bhb_loop+0x40/0x90 [ 239.538694][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.538710][ T7970] RIP: 0033:0x7f05eed9de59 [ 239.538724][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.538738][ T7970] RSP: 002b:00007f05efcff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.538753][ T7970] RAX: ffffffffffffffda RBX: 00007f05ef026098 RCX: 00007f05eed9de59 [ 239.538763][ T7970] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05ef02609c [ 239.538772][ T7970] RBP: 00007f05ef026090 R08: 0000000000000001 R09: 0000000000000000 [ 239.538780][ T7970] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 239.538790][ T7970] R13: 00007f05ef026128 R14: 00007fffa3c0c010 R15: 00007fffa3c0c0f8 [ 239.538809][ T7970] [ 240.442087][ T7972] vivid-007: ================= START STATUS ================= [ 240.551346][ T7972] vivid-007: Generate PTS: true [ 240.590618][ T7972] vivid-007: Generate SCR: true [ 240.628973][ T7972] tpg source WxH: 320x240 (Y'CbCr) [ 240.664504][ T7972] tpg field: 1 [ 240.676658][ T7972] tpg crop: (0,0)/320x240 [ 240.695131][ T7972] tpg compose: (0,0)/320x240 [ 240.722552][ T7972] tpg colorspace: 8 [ 240.745439][ T7972] tpg transfer function: 0/0 [ 240.774707][ T7972] tpg Y'CbCr encoding: 0/0 [ 240.802053][ T7972] tpg quantization: 0/0 [ 240.819654][ T7972] tpg RGB range: 0/2 [ 240.846661][ T7972] vivid-007: ================== END STATUS ================== [ 241.638611][ T8005] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 241.918410][ T8005] File: /dev/nullb0 PID: 8005 Comm: syz.1.405 [ 246.435523][ T8093] sysfs_service_op_store: Client not running :-5: [ 246.448469][ T8089] netlink: del zone limit has 4 unknown bytes [ 246.471602][ T8096] FAULT_INJECTION: forcing a failure. [ 246.471602][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 246.560978][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 246.561003][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.561013][ T8096] Call Trace: [ 246.561018][ T8096] [ 246.561025][ T8096] dump_stack_lvl+0x100/0x190 [ 246.561047][ T8096] should_fail_ex.cold+0x5/0xa [ 246.561065][ T8096] should_failslab+0xc2/0x120 [ 246.561085][ T8096] __kmalloc_noprof+0xfc/0x820 [ 246.561101][ T8096] ? __register_sysctl_table+0xbc8/0x1650 [ 246.561124][ T8096] ? __register_sysctl_table+0xbc8/0x1650 [ 246.561146][ T8096] ? __register_sysctl_table+0xbe4/0x1650 [ 246.561171][ T8096] __register_sysctl_table+0xbe4/0x1650 [ 246.561198][ T8096] ? __pfx___register_sysctl_table+0x10/0x10 [ 246.561219][ T8096] ? is_module_address+0x69/0xf0 [ 246.561241][ T8096] ? register_net_sysctl_sz+0x222/0x430 [ 246.561261][ T8096] __devinet_sysctl_register+0x1b9/0x360 [ 246.561287][ T8096] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 246.561312][ T8096] ? __asan_memcpy+0x3c/0x60 [ 246.561336][ T8096] devinet_init_net+0x334/0x8d0 [ 246.561359][ T8096] ? __pfx_devinet_init_net+0x10/0x10 [ 246.561380][ T8096] ops_init+0x1e2/0x5f0 [ 246.561399][ T8096] setup_net+0x118/0x3a0 [ 246.561415][ T8096] ? __pfx_setup_net+0x10/0x10 [ 246.561431][ T8096] ? mutex_init_lockdep+0xf1/0x120 [ 246.561460][ T8096] copy_net_ns+0x46f/0x7c0 [ 246.561480][ T8096] create_new_namespaces+0x3ea/0xac0 [ 246.561508][ T8096] unshare_nsproxy_namespaces+0xf2/0x220 [ 246.561532][ T8096] ksys_unshare+0x438/0xab0 [ 246.561550][ T8096] ? __pfx_ksys_unshare+0x10/0x10 [ 246.561574][ T8096] __x64_sys_unshare+0x31/0x40 [ 246.561590][ T8096] do_syscall_64+0x115/0x840 [ 246.561611][ T8096] ? clear_bhb_loop+0x40/0x90 [ 246.561629][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.561644][ T8096] RIP: 0033:0x7ffac039de59 [ 246.561657][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.561671][ T8096] RSP: 002b:00007ffac11b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 246.561686][ T8096] RAX: ffffffffffffffda RBX: 00007ffac0625fa0 RCX: 00007ffac039de59 [ 246.561695][ T8096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 246.561704][ T8096] RBP: 00007ffac0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.561713][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.561722][ T8096] R13: 00007ffac0626038 R14: 00007ffac0625fa0 R15: 00007fff4c34c238 [ 246.561742][ T8096] [ 246.561779][ T8096] sysctl could not get directory: /net/ipv4/conf/default -12 [ 247.912021][ T8121] ================================================================== [ 247.912035][ T8121] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 247.912059][ T8121] Write of size 8 at addr ffffc90004b191a0 by task syz.3.422/8121 [ 247.912072][ T8121] [ 247.912081][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 247.912099][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.912109][ T8121] Call Trace: [ 247.912114][ T8121] [ 247.912120][ T8121] dump_stack_lvl+0x100/0x190 [ 247.912136][ T8121] print_report+0x13d/0x4b0 [ 247.912157][ T8121] ? _raw_spin_lock_irqsave+0x52/0x60 [ 247.912178][ T8121] ? sys_imageblit+0x19fb/0x1d60 [ 247.912193][ T8121] kasan_report+0xdf/0x1c0 [ 247.912212][ T8121] ? sys_imageblit+0x19fb/0x1d60 [ 247.912231][ T8121] sys_imageblit+0x19fb/0x1d60 [ 247.912248][ T8121] ? _prb_read_valid+0x72a/0x880 [ 247.912269][ T8121] ? __pfx_sys_imageblit+0x10/0x10 [ 247.912286][ T8121] ? __pfx__prb_read_valid+0x10/0x10 [ 247.912308][ T8121] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 247.912334][ T8121] soft_cursor+0x524/0xa10 [ 247.912358][ T8121] ? fb_get_color_depth+0x120/0x250 [ 247.912379][ T8121] bit_cursor+0xca1/0x1490 [ 247.912402][ T8121] ? __pfx_bit_cursor+0x10/0x10 [ 247.912426][ T8121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.912445][ T8121] ? get_color+0x1da/0x450 [ 247.912463][ T8121] ? __pfx_bit_cursor+0x10/0x10 [ 247.912483][ T8121] fbcon_cursor+0x43c/0x5e0 [ 247.912501][ T8121] ? mark_lock+0x9c0/0xa20 [ 247.912521][ T8121] hide_cursor+0x87/0x230 [ 247.912535][ T8121] do_con_write+0x224c/0x4a30 [ 247.912552][ T8121] ? rcu_is_watching+0x12/0xc0 [ 247.912568][ T8121] ? __mutex_lock+0x26d/0x1bd0 [ 247.912588][ T8121] ? n_tty_write+0x4c0/0x1160 [ 247.912607][ T8121] ? find_held_lock+0x2b/0x80 [ 247.912622][ T8121] ? n_tty_write+0x43e/0x1160 [ 247.912641][ T8121] ? n_tty_write+0x43e/0x1160 [ 247.912659][ T8121] ? __pfx_do_con_write+0x10/0x10 [ 247.912682][ T8121] ? __pfx___mutex_lock+0x10/0x10 [ 247.912708][ T8121] con_write+0x23/0xb0 [ 247.912724][ T8121] do_output_char+0x63b/0x850 [ 247.912744][ T8121] n_tty_write+0x4d6/0x1160 [ 247.912767][ T8121] ? __pfx_n_tty_write+0x10/0x10 [ 247.912786][ T8121] ? __kasan_kmalloc+0xaa/0xb0 [ 247.912803][ T8121] ? __pfx_woken_wake_function+0x10/0x10 [ 247.912825][ T8121] ? rcu_is_watching+0x12/0xc0 [ 247.912840][ T8121] ? file_tty_write.isra.0+0x694/0x890 [ 247.912855][ T8121] ? kfree+0x1e5/0x6c0 [ 247.912875][ T8121] ? __pfx_n_tty_write+0x10/0x10 [ 247.912894][ T8121] file_tty_write.isra.0+0x4d2/0x890 [ 247.912913][ T8121] redirected_tty_write+0xd4/0x120 [ 247.912929][ T8121] vfs_write+0x6ac/0x1050 [ 247.912950][ T8121] ? __pfx_redirected_tty_write+0x10/0x10 [ 247.912967][ T8121] ? __pfx_vfs_write+0x10/0x10 [ 247.912986][ T8121] ? find_held_lock+0x2b/0x80 [ 247.913006][ T8121] ksys_write+0x12a/0x250 [ 247.913026][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 247.913049][ T8121] do_syscall_64+0x115/0x840 [ 247.913069][ T8121] ? clear_bhb_loop+0x40/0x90 [ 247.913086][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.913101][ T8121] RIP: 0033:0x7ffac039de59 [ 247.913114][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.913128][ T8121] RSP: 002b:00007ffac1194028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.913143][ T8121] RAX: ffffffffffffffda RBX: 00007ffac0626090 RCX: 00007ffac039de59 [ 247.913153][ T8121] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000a [ 247.913163][ T8121] RBP: 00007ffac0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 247.913172][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.913182][ T8121] R13: 00007ffac0626128 R14: 00007ffac0626090 R15: 00007fff4c34c238 [ 247.913196][ T8121] [ 247.913202][ T8121] [ 247.913206][ T8121] The buggy address belongs to a vmalloc virtual mapping [ 247.913218][ T8121] Memory state around the buggy address: [ 247.913226][ T8121] ffffc90004b19080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.913237][ T8121] ffffc90004b19100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.913248][ T8121] >ffffc90004b19180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.913255][ T8121] ^ [ 247.913264][ T8121] ffffc90004b19200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.913274][ T8121] ffffc90004b19280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 247.913282][ T8121] ================================================================== [ 247.913321][ T8121] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.913332][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.3.422 Not tainted syzkaller #0 PREEMPT(full) [ 247.913350][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.913360][ T8121] Call Trace: [ 247.913365][ T8121] [ 247.913370][ T8121] dump_stack_lvl+0x100/0x190 [ 247.913386][ T8121] vpanic+0x552/0x970 [ 247.913401][ T8121] ? __pfx_vpanic+0x10/0x10 [ 247.913418][ T8121] ? mark_held_locks+0x40/0x70 [ 247.913438][ T8121] ? irqentry_exit+0x24d/0xa00 [ 247.913460][ T8121] ? sys_imageblit+0x19fb/0x1d60 [ 247.913475][ T8121] panic+0xd1/0xe0 [ 247.913488][ T8121] ? __pfx_panic+0x10/0x10 [ 247.913505][ T8121] check_panic_on_warn.cold+0x19/0x34 [ 247.913520][ T8121] end_report.part.0+0x3a/0x90 [ 247.913541][ T8121] kasan_report.cold+0xe/0x18 [ 247.913561][ T8121] ? sys_imageblit+0x19fb/0x1d60 [ 247.913578][ T8121] sys_imageblit+0x19fb/0x1d60 [ 247.913595][ T8121] ? _prb_read_valid+0x72a/0x880 [ 247.913616][ T8121] ? __pfx_sys_imageblit+0x10/0x10 [ 247.913633][ T8121] ? __pfx__prb_read_valid+0x10/0x10 [ 247.913655][ T8121] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 247.913684][ T8121] soft_cursor+0x524/0xa10 [ 247.913708][ T8121] ? fb_get_color_depth+0x120/0x250 [ 247.913729][ T8121] bit_cursor+0xca1/0x1490 [ 247.913753][ T8121] ? __pfx_bit_cursor+0x10/0x10 [ 247.913776][ T8121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.913796][ T8121] ? get_color+0x1da/0x450 [ 247.913814][ T8121] ? __pfx_bit_cursor+0x10/0x10 [ 247.913834][ T8121] fbcon_cursor+0x43c/0x5e0 [ 247.913852][ T8121] ? mark_lock+0x9c0/0xa20 [ 247.913872][ T8121] hide_cursor+0x87/0x230 [ 247.913885][ T8121] do_con_write+0x224c/0x4a30 [ 247.913902][ T8121] ? rcu_is_watching+0x12/0xc0 [ 247.913918][ T8121] ? __mutex_lock+0x26d/0x1bd0 [ 247.913938][ T8121] ? n_tty_write+0x4c0/0x1160 [ 247.913957][ T8121] ? find_held_lock+0x2b/0x80 [ 247.913973][ T8121] ? n_tty_write+0x43e/0x1160 [ 247.913991][ T8121] ? n_tty_write+0x43e/0x1160 [ 247.914010][ T8121] ? __pfx_do_con_write+0x10/0x10 [ 247.914026][ T8121] ? __pfx___mutex_lock+0x10/0x10 [ 247.914050][ T8121] con_write+0x23/0xb0 [ 247.914066][ T8121] do_output_char+0x63b/0x850 [ 247.914084][ T8121] n_tty_write+0x4d6/0x1160 [ 247.914107][ T8121] ? __pfx_n_tty_write+0x10/0x10 [ 247.914125][ T8121] ? __kasan_kmalloc+0xaa/0xb0 [ 247.914141][ T8121] ? __pfx_woken_wake_function+0x10/0x10 [ 247.914164][ T8121] ? rcu_is_watching+0x12/0xc0 [ 247.914178][ T8121] ? file_tty_write.isra.0+0x694/0x890 [ 247.914194][ T8121] ? kfree+0x1e5/0x6c0 [ 247.914214][ T8121] ? __pfx_n_tty_write+0x10/0x10 [ 247.914234][ T8121] file_tty_write.isra.0+0x4d2/0x890 [ 247.914252][ T8121] redirected_tty_write+0xd4/0x120 [ 247.914269][ T8121] vfs_write+0x6ac/0x1050 [ 247.914289][ T8121] ? __pfx_redirected_tty_write+0x10/0x10 [ 247.914306][ T8121] ? __pfx_vfs_write+0x10/0x10 [ 247.914325][ T8121] ? find_held_lock+0x2b/0x80 [ 247.914346][ T8121] ksys_write+0x12a/0x250 [ 247.914366][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 247.914388][ T8121] do_syscall_64+0x115/0x840 [ 247.914409][ T8121] ? clear_bhb_loop+0x40/0x90 [ 247.914425][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.914440][ T8121] RIP: 0033:0x7ffac039de59 [ 247.914452][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.914467][ T8121] RSP: 002b:00007ffac1194028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.914481][ T8121] RAX: ffffffffffffffda RBX: 00007ffac0626090 RCX: 00007ffac039de59 [ 247.914491][ T8121] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000a [ 247.914500][ T8121] RBP: 00007ffac0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 247.914509][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.914519][ T8121] R13: 00007ffac0626128 R14: 00007ffac0626090 R15: 00007fff4c34c238 [ 247.914533][ T8121] [ 247.914601][ T8121] Kernel Offset: disabled