last executing test programs: 10.573278892s ago: executing program 2 (id=315): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000900f500000000000000000001", 0x11) 10.371697029s ago: executing program 2 (id=317): mmap$auto(0x0, 0x6, 0x80000000, 0x10010, 0xfffffffffffffffa, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x3) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fdd, 0x3, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/tls_stat\x00', 0x80c1, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0x8000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r1, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r2) r5 = socket(0x29, 0x5, 0x0) write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 8.015360838s ago: executing program 0 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x300000000000000, 0x48000}, 0x4000) 7.797195819s ago: executing program 0 (id=324): unshare$auto(0x40000080) socket(0x1e, 0x4, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10e, 0x81, 0x0, 0x2001) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x0, 0x8, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42200, 0x0) capset$auto(0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff00c}}) r1 = openat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x10) write$auto(r1, &(0x7f0000000100)='/dev/mixer\x00', 0xfffffffffffffffe) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/ip_vti0/arp_announce\x00', 0xa0202, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer1\x00', 0x214800, 0x0) ioctl$auto(r3, 0x80004508, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(r1, &(0x7f0000000000)={0x0, 0x100010001}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x400000600007e, 0x44800004) listmount$auto(0xfffffffffffffffd, 0x0, 0x8001, 0x0) remap_file_pages$auto(0x6a27, 0x4, 0xfffffffffffffffc, 0x7, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0xffffffffffffffff, 0x2, 0x2, r4, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) 7.123471567s ago: executing program 0 (id=325): mmap$auto(0x0, 0x3, 0x80000000000df, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(0x200000003, 0x1) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0x10, 0x2, 0xc) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r1, 0x0, 0xe) unlink$auto(&(0x7f0000000380)='./file0\x00') 6.985213279s ago: executing program 2 (id=327): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 6.539751967s ago: executing program 1 (id=328): mmap$auto(0x5, 0x8, 0x6, 0x393f, 0xb, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)={0xbb, 0xfd38, "9f9dd863649f927043325794f5839948cdb40f5332dfe2a8e2f5f5db2129c8104bc45c46b13ab6fcada7266c71b7a430d2e5cb99f3120b8c2dd15dcff53bdbf970884effaa0b265036ccc971aee3fb3b95f9b8facc2b8b562117309bdff92ad934857ce496f8dc04af2e163ad384465777db719611c4ac95b132fcc4dabacc427462c80e56a6dd617fc5028c56780cbcf26d151104c84bb831e536ab00535a6872861c334ae6763f3641471fe0278bf9db29cfe7136285896f943e"}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x603, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)="e769ffff91a9bccbf2a814c2b1c2da6a4642e71e42496c6bac2cd2cc3aa9633c36df13128be76976577ef8b494eb27dd7c5c300903663e1e87c15519219ff691bef8e8162e8a841e0b720ba4c432a0b5e1e6ce3fba9b6c4462c74f701a8daaf2a07cdcee8ef120a79f8ecfef3532373fcfc0602284e9ecfab10a02", 0x7b) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, 0x0, 0x40040) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500032001bd91af598f4324217171676c6ac876322829ac1848292c394cacaf85810c638d5a79c65cd888159b6e643b971abcace3e14386470974c981cb80a93b08abbe9044ef361883dd2806af93bad51ccfd3852383df955eee864f8e2bd187b276c698ed2b028012e1e23402d5ef83d1526210f5f17f12d8e9b9e3c3db8d0b04112453e54ac613982bf204da0916a5056a191f7dd26ba42e010bc16133a2626c7f89c7eb76f1a9c56b701034574a078ca4edc4aaf6d7211788efd9127125312a405c70833a32916693b330e04bcc0b9b48c7813e83a765800baa3586d85c3d73e3aa6e0f80bf0ab8bf432d159c6945e06ca97b6bd63fe26039bfb94a1580c50ba053d5b6c819996848294a65fd9c78886a010ec6cc3f854a9483b840b46187855b76282f0e3814a46352a6a1365e86c47953112295f7fc89ccaac995b8d46c2de061aa4731ad776be36a0586b952df453b9e84c012b", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf250700000006000100090000000400060006000100dd0f0000060001000300000004000600060001000000000006000100f6060000040006000800040003000000"], 0x50}, 0x1, 0x0, 0x0, 0x2400c084}, 0x24044090) unshare$auto(0x8) mmap$auto(0x0, 0x40009, 0x2000000000100df, 0x9b70, 0xffffffffffffffff, 0xd4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(0x0, 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01032dbd7086fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) r6 = syz_genetlink_get_family_id$auto_nl802154(0x0, r3) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000003340)=ANY=[@ANYBLOB="b0160000e737fd144d21cfa384849c915bbbe9004d375a8f26677d46980a49613b08411abc794cfc9a9aa9099070849edc060be9", @ANYRES16=r6, @ANYBLOB="000429bd7000fedbdf251f00000005001f0081000000080021000300000006000a0006e900000500250007000000c00019800800d68004005780b40013800e0003002f6465762f7474793000000008002900100000007c0e0a6a30094ad012955de26d6dd248fffe61517fae1d25b1e6c54c97c544c41927e8a8e8b253330ffe46867a18120dfedfc0c71427f8f53a6c49a9a56d111a14cfbe7ceaf797ee37273f4deec4f30e8bcc8066cdc5cab5200500fc53fe71bdfd8124007c7837812013c44ffa6c5a4597a6925e80a69a4021a02eff040076800600f1007b00000008009e00e000000108001b00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ceb0a79c79b5b290eaa0f52993484d8ce4fb9ea7f1052022153e32dd2282a292d5e5ddf281304db655e9406c0b57ce6ecd97d98cacd5bf91bc78f922fa6820c1d0558fe4bfcf825fda6c807ddd6c5bbd70d5aaa6cabc8251ee40273c8385fa15746876bc99660587213b36babe0e0ffed2065c5c4f6309967c188d47ef3ce1cd0ec9ca79e8a2010ce8f6c8d60a1f490516a7b0009653fd040037800e00bf00795ff022b9d8144d1e1500007000740005c60f6137c9a33733efc0fe07d7c3ac96960a1ccf39c112db0d59832a83111f01eb0277e393d202101de1dfe00d6985735d649b9a1506b7595d98084adec3ba6744c041f6fc9fa3fac07f1487c24eb792cf156d59cd764ad2d24898795c2c0e971b93b32a0a1ccfa392699c0008007500640101001300658008af051714fb8a58503f09935d0ec7002b1b731ee4f13cb079f2799489f1818e269c3cef1f8ccb8a1dff3b145487c7f8da63913156afc3ffc4bfeac3a66a152b85c5a11bdeb04115c65168a923f0bb4cafc1b9a05c69e385e70d96e72ce0dbe90e67b200c11632999cbd621531f57b34dd9ddd67d9aa73b0a2d8638170070e1935bdf0b921c95825e6f08fe0154809687bb37761791c5ce99127efeca63912727d54d3fce271eed110b428f0996e71a5ae2404c685fa42210e2a645b4b907e9c1b735fd05b127c9ddbbde590bb87f88416f3cb267f9cbf1b2b813efd43150802f6edd74cc093d3530f3c6af25dfbd23a877f5af5a20a4ebb661d03b0db09f88c67a6d9263c0ab79bc2989aa60c3d8fd2a5dc2305320400cc2e15f4e124af4d9e16b0b9d619a2fb23c74bdedac1fa32f40b5eed24a516cad4faa610ffc11bd5ccb1f2260453e4848e6c2380d795a96331fdd84e85ecbc910debfa1231e2893346b3b5d0d1594280749b6f4d1b12a4cd75c1fe941d8ff6ec216bacae0e087cccdabe34e7733e2a8a7b648e58fed7ef40dc39be387009267d438d8b4b5b87a79aacd83636913e66b26dc92ea7611decdc44f5b61800108004003880080059002a7b3a000400198004001d806642155de6ca8fb162bca6ab9b880d1329f491b80c1f25f48f0ee478df86274b0209329c4d97b3f73831c385b718eaa314f23265c3e0560a80e4ffc2e9225b5c6853fc192d4e688cbb228855b934e4d72788944239f38c3e723a95d21f01b471076cab94b4cb84ec8eece45dfdfd512ba5f1814b4cbc14fd8cf0db41aee0bd954eca1f3b7500"], 0x16b0}, 0x1, 0x0, 0x0, 0x2004800c}, 0x4801) 5.227505027s ago: executing program 1 (id=329): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x113000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) mmap$auto(0x201, 0x477, 0x80000000000db, 0x11, 0x2, 0x100000000) r1 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r1, 0x6d, 0xcd63, 0xfffffffffffffffe, 0x0) prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410) madvise$auto(0x8, 0x6, 0x8) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) personality$auto(0xffffffffffffffff) statmount$auto(&(0x7f0000000140)={0x9, @raw=0x8, 0x9, 0x7, 0x3}, &(0x7f0000000500)={0x0, 0x1, 0x8, 0x401, 0xd, 0x10001, 0x401, 0x9, 0x8, 0x5, 0x6f16, 0x1, 0x8, 0x3, 0x5, 0x154d, 0x3, 0x7, 0x0, 0x9, 0xd, 0x1, 0x7, 0x3, 0x5, 0x812e, 0x5, 0x2, 0x1, 0x6a5d, 0x1, [0xffffffff, 0x2b6, 0x1, 0x8, 0x1, 0xffe00000000000, 0x10, 0x7, 0x7, 0x8, 0xffff, 0x36a, 0x5, 0x9, 0x0, 0x7fff, 0xfffffffffffffe00, 0x7, 0xf978, 0x80000001, 0x80000001, 0x2, 0x8000, 0x6, 0x1, 0xffffffff, 0x1, 0x1, 0x8, 0x7fff, 0x5, 0xb, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x8, 0x409, 0x0, 0x7, 0x4, 0x4000000000006, 0x7], "e3608b2ab728ece031b8ff6905c3a3bd6926765631b9d0f5724f6a330b5b80b44c005ccd1f8ea117"}, 0x8, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper\x00', 0x80302, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x5393, r3) 4.543720045s ago: executing program 0 (id=330): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) bpf$auto(0x3, &(0x7f00000000c0)=@info={r0, 0x10000, 0x10000}, 0x81) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mprotect$auto(0x8000000000000001, 0x8, 0x80000001) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) io_uring_setup$auto(0x59, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x2d2103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/take_snapshot\x00', 0xc2622, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0xa042, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 3.397521184s ago: executing program 1 (id=332): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRES8=0x0], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000400, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40041, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) msgctl$auto_IPC_INFO(0x45, 0x3, &(0x7f0000000200)={{0xff, 0xee00, 0xee00, 0x7fff, 0xb61, 0xa, 0xe17}, &(0x7f0000000180)=0xbf, &(0x7f00000001c0)=0x1, 0x4, 0x8000000000000001, 0x8000000000000001, 0x3, 0x10, 0x7, 0x7ff, 0x7, @raw=0x55c, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r3, 0x0, 0x4010) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c3, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) 3.14797774s ago: executing program 0 (id=333): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r0, &(0x7f0000000000)='/dev/audio\x00', 0x9) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000140)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.029976025s ago: executing program 3 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb4}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x4}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xfff0}, @CTRL_ATTR_OP={0x8, 0xa, 0x1311}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '[\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) 2.901637681s ago: executing program 3 (id=335): writev$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00', 0xf, 0x0) chdir$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8040, 0x0) socket(0xa, 0x801, 0x84) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(r3, 0x3b8b, r2) r4 = landlock_create_ruleset$auto(0x0, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r4, 0x454f, 0x5f, 0x0, 0x0, r4, 0x80000001}, 0x6d4) 2.091054063s ago: executing program 3 (id=336): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) unshare$auto(0x401) (async) mmap$auto(0x0, 0x2, 0x1000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x9) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, 0x0, 0x6a) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @private=0xa010101}, 0x54) (async, rerun: 32) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/pcm0c/sub2/xrun_injection\x00', 0x0, 0x0) (rerun: 32) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0xfffffe36) (async) setsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, 0x0, 0xda3) (async, rerun: 32) madvise$auto(0x0, 0x2003ec, 0x14) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) socket(0x10, 0x2, 0x4) (async) bpf$auto(0x6, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x20008000) 2.045838864s ago: executing program 0 (id=337): writev$auto(0xffffffffffffffff, 0x0, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0xa, 0x9) mmap$auto(0x2000000000000000, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) mlockall$auto(0x7) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdeb4, 0xeb1, 0x401, 0x8000) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x40100, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, 0x0) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/virt_wifi0/base_reachable_time_ms\x00', 0x104000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r3, 0x0, 0x10000, 0x7) 1.895929773s ago: executing program 3 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdc03, {0x4, 0x0, 0x3f}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40891}, 0x4) 1.73223284s ago: executing program 1 (id=339): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/gretap0/queues/rx-0/rps_cpus\x00', 0x183042, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id=0x7, 0x2, 0x10000, r1}, 0xac) mmap$auto(0xfffffffffffffffd, 0xe983, 0xe1, 0xeb1, 0xffffffffffffffff, 0xcf88536) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(r4, 0x8926, r3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon7\x00', 0x80000, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r7, 0x9201, 0x0) ioctl$auto(0x3, 0x4048aec9, r5) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) semctl$auto(0x7, 0x2, 0x13, 0x1) r8 = set_tid_address$auto(0x0) sched_rr_get_interval$auto(r8, 0x0) sendfile$auto(r0, r0, 0x0, 0x8000) ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)=0x79) 1.622171131s ago: executing program 3 (id=340): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) bind$auto(r1, 0x0, 0x3) socket(0x1e, 0x5, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) socket(0x3, 0xa, 0x36) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x20000000064, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x7ff, 0x7fe, 0x40000000008, 0xff, 0x0, 0x6da, 0x3, 0x3e01, 0xfffffffffffffffe, 0x9, 0x7, 0xffffdfffffffff81, 0x4]}, 0x0) r2 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) read$auto_transactions_fops_(r2, &(0x7f0000000080)=""/18, 0x12) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) r5 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r5, 0x0, 0x10001, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) 1.132959344s ago: executing program 1 (id=341): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r1, &(0x7f0000000140)='+\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002) umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x4a8102, 0x0) mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, r2, 0x99) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x2000000000000000, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x401070c9, 0x5) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x9, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x101, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x4, 0x40, 0x104, 0x8, 0x9}}) madvise$auto(0x0, 0x2003f0, 0x15) mlockall$auto(0x7) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4242, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) mmap$auto(0x0, 0x402000a, 0xdf, 0xeb1, r3, 0x8000) r5 = socket(0x23, 0x80805, 0x0) listen$auto(r5, 0x4) poll$auto(&(0x7f0000000000)={r5, 0x1963, 0x81}, 0x5, 0x10001) setsockopt$auto(r5, 0x9, 0x9, &(0x7f0000000040)='/dev/kvm\x00', 0xc4) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) execveat$auto(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.046936777s ago: executing program 2 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc004015}, 0x20000094) r2 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000140)=@query={@target_fd=r0, 0x6, 0x2, 0x5105, 0xb, @prog_cnt=0x3, 0x0, 0x80000000, 0x3, 0x1, 0x6}, 0x3) read$auto_tracing_entries_fops_trace(r2, &(0x7f0000000200)=""/27, 0x1b) r4 = socket(0x21, 0x6, 0x9) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x30, 0xbb, "dbb392d083b1f14df68fe1edda88c3a39ae3ee7b2f33c3531e6cd61b1758fcb09e0e090d3af35bce4b9478a1"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x58, 0xcd, "ae947b64fbf7f52394919f75a57ba6524cfcc32b952c1236c2bf21799bb2d2907edd62928ef6fdeef6d197e80fd3f75080b136fe6967c8d8090bb665e45db0314657cffd889dff12e29c4a00e2c186d9bd6404d7"}, @NL80211_ATTR_EPCS={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) write$auto(r2, &(0x7f0000000400)='nl80211\x00', 0x2000000020) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x4400, 0x0) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000004c0), r4) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xa9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xfffffffd}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_VENDOR_DATA={0x76, 0x1f, "1079ab133ccb1d7ae386a4e3f66bc5b93d8217464e52f15dd0b9701e887ba0f15b2422af0782176080215fb9a70d8f6a3cbb69587503d3f3dc6a1bbc323e9fab2660b8505ce09400a4d79fd62cb542a62ad47a6d5e45fdd5821ae5d24f76cc5b5dbd66296eb54e83ad8845c99e9b31241150"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) ioctl$auto_BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000640)={0x4, 0x6, 0x9}) recvfrom$auto(r6, &(0x7f0000000680)="25efb463d53c", 0x1, 0x1f5, &(0x7f00000006c0)=@ax25={0x3, @null, 0x2}, &(0x7f0000000700)=0x8) ioctl$auto_SNDCTL_TMR_START(r3, 0x5402, &(0x7f0000000740)="000a68d36a03950fc857923743a2d7b293babf3ab7b2596ff3d31ce71b26f2fa98592eff4954ca7449012131c12bd7e6955499760647c2b830c9850d86d1bfaafd953def74643ddd34df38587d13b96c6a1b218ee775cd73593278d81d0f58b5169da5301737a40a7c752d67ed64da6b31d8b4fb5c5ff57787dd70c0aac8922e2908e908b8ce1bf2c062d0790f0867e0154200d964b8766b787a18d99a7b8b5ebdaa") setsockopt$auto(r3, 0x81, 0x6, &(0x7f0000000800)='/dev/rtc0\x00', 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000880), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'geneve0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x16c, r9, 0x5, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xe812}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb29}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd7, 0x2, 0x0, 0x1, [@generic="eb14f98cdd41515f0f992a12f26a6414a3a13358e7668a004f06210d50901c4098978307d2706623886b3b8dcbf99b789341891bc8f966291c9959f140851c20d6fcf40cda523c2bedc1c60d91de0d4b38fa6da05071e96d9b55571b3e259376a699121641b2a13b2b0073b28022fc5606f304bbf5784c2a2863a56b095ce3ba386557466446208d305c5023b44227255247d2f147ffad5bdd611bb4ddffb8fd698806d38f9de9dd40c5c3b49bd01a93c40b97326e0acd2aa7e3d84af63c670c5cdbe3f8f58b5159e700e2", @typed={0x8, 0x33, 0x0, 0x0, @u32=0x7}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x6f000aeb95bc3fc0}, 0x4) r12 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000b80), r4) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r12, 0x400, 0x70bd26, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x66}, @CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_OP={0x8, 0xa, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008085) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000cc0), r0) sendmsg$auto_OVS_VPORT_CMD_NEW(r13, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa4, r14, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x81, 0x1, 0x3, 0xa0c9, 0x9, 0x7, 0x6, 0x2}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x40, 0x7, 0x0, 0x9, 0xfffffffffffffff8, 0xa7f, 0xd009, 0x77e}}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) r15 = gettid() r16 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000000e80)={0x874, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x62, 0x1, 0x0, 0x1, [@generic="69342a63ec38d81e7e3e446836ee5d32b4f52bb94f16425a472310fd323bc9a85ec498a79b4f373a02154c99bf6515702f2e37e5c8118ed85bad1abbccde5809d938f1d33a2f4ca966b26dd65f02d1463ab67d6967acdcef4b50428af0a8"]}, @IPVS_CMD_ATTR_DEST={0xc0, 0x2, 0x0, 0x1, [@nested={0xbc, 0x142, 0x0, 0x1, [@generic="1057415b25031463000ad2767bffbb252e5f806d46a236d426f740a6cb79f42af8f7276c7aea6dfb4c73a49fc9a813e05c2fc5f5e9ca61b2278c2f839674ef7ea03af4cee4fc8eb1d63d25fd2c664f417e550a266e0fe26791ad13ba5eb666d45741a4471a5e3131654f4a4ee13d71e9dfef676347f2e24357819510", @nested={0x4, 0x74}, @generic="631b9f3136ef8c7151df39aebb013e37811da9f3d6b4bba7d322322f9b190d1ebb208e94308410d2a4323afca5a67812345232a0", @nested={0x4, 0x3c}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x323, 0x1, 0x0, 0x1, [@generic="8db47f88a17e081fbfa818e1f87c0592e58143db95188463638716d523f19a5e956be7fc84da56bcd5a6b5c17088b2eb7f02d67c7d8fe3f413dc68aa1a188a50ed9d178351881170c71ded657adfcd6f150faa1c5c34c8eb641420824494211211943fd963a0dc53f8dc8ed46cfa91eeef43b98fb8f324dede9243f058007e2d5d3a4781956962cfd7b38d056b97855f7eecd1d420335a71139be33d2d2bc02e72830b4c65110c067f80c072f1710b79453c4ad99374d76be763da314b94fff21f03fadfcbcec42f26c81337c162eaf740bf3ef36b9fbc710aaf9ba0621fc40c51bc45567325ce9e67cd6e92d83df8067517e5590add6105", @typed={0x14, 0xe0, 0x0, 0x0, @ipv6=@empty}, @generic="62323b55f5ceea822a42aaab41f0954a7907cb28de2bb7ce3b4445db833068bb9d659c636ee357afcfc59a1ee24debe5953054cf7d3d670af4593ac84fb7be2f9d7a8fd580791b5b96275495ecb834ee5f126d30f06a87976ada26b3011d18438812dfd0909d34eb8e21ec803488a3f0b7f8e7614ae8f94c141da33afdfe965ab305898497237a735756326fee1053cfca242732a53540983f", @nested={0xd3, 0xff, 0x0, 0x1, [@generic="c0c4a0b0ac13bdff1b490e9ab755bee6701e", @typed={0x15, 0x82, 0x0, 0x0, @binary="edebaa4b66c676449f26e62cf6608c175d"}, @typed={0x8, 0xd3, 0x0, 0x0, @fd}, @generic="d36643a7e75ea3f6f3dc2a3c65a456aae9170fc1e46e97f7779d02d65c64f6aa36bec7357b405a11165c7fb2af527d4f732b91ef2080dd5d315d5825c7f8f6fc14650c44dc56d4a207f2551a1e89899a9ace8560662bba576287a725a109d92710fb732dae0627d2a471a81016b0f514f5d8f49677f466adf5fd6d18adb5bccb85807cca9ee703c22afbca57751e715b8b4579966cba58e9fc", @nested={0x4, 0xac}]}, @generic="7467116ed983f8ff801bedb889a11172a455a8eaf779ca92f562d144be6ca6e2d6", @nested={0xc, 0x14d, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@loopback}]}, @generic="69ee6ad7a9a00ef8d90889b504aaee9283f50b031f48b1f4cfdab224a53a989f5f5c71062845cbecbc00a6dae5c468595014016d2266873f37cb8254ff729b15ba2bf769bc05d13c2fc46f65e48f48b302bdfb0d9d3ff1a2bd1c0ce535418bc1e2fd213dae156a1d6c", @typed={0xe, 0xe1, 0x0, 0x0, @str='/dev/rtc0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x400, 0x2, 0x0, 0x1, [@nested={0x84, 0x18, 0x0, 0x1, [@generic="73771c64bfaa5ea66904fcf5bc269ceabbc2f2e6a93f52fb62a0d39164c438b15d8839ed33411de2670256e619daca8ff19400be4671daa9ea3b37955007c8d289b2ead888109024c6f1301db77d0a8f", @nested={0x4, 0x107}, @typed={0x8, 0x60, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x14}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r15}, @nested={0x4, 0xcb}, @nested={0x4, 0x60}, @typed={0x8, 0x10a, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x51, 0x0, 0x0, @pid=r16}]}, @typed={0xc, 0xef, 0x0, 0x0, @u64=0x80000000}, @nested={0x35f, 0xaf, 0x0, 0x1, [@generic="b56a22532286dfdae6c31512523bd84b3c381166113a2f737b3ffe04eebde900aa54854e534085f9383ca45dd86ef5e9187b2e9b8dcbd241d5a5939a1cf82c69dc63dafbd4fb3e3f2aedc3d48e5f8e21405b18bb1521845723c1956f0a0622bce58b6a7f1660a01c5cb3d77a05a626daf0a2c8aeeebd7dc0bab79071e6529d0b7f6277323b88b5af187a3722", @generic="9dd85676e76a784638b27331a95e8a4d2ef2dd1350cf3b3f8d9fcf5143f9ae669f28246bfea315b8d865ad2ecb7bb4f99c3a4225621bb3883ee2ed786b3b1ffe3f2b2379eccaf510b3032b9b46a97d9f9fb2be72ab9453e63236d219e4c0da29c83a29585d1a67d3c30e886a668f112dd20c4822a5d17e7dfeaadd83cb67076d0bc8e42f92b80716288ee9811120f07ac9eefa541e4c467cbb345e3d1f429dd3541e176f500121193868664f406b40dcf461ace22a3b3e81921d5b53f9fd4b48a0e1f9c799a532a1a74327e37ffb2b4a49e33341c1fb671de6f8f652fa3442b87f451f799ec03442081eb39af054d0", @nested={0x4, 0x4c}, @nested={0x4, 0xd}, @generic="a00c6054a19f92a3d54aa7a1212c7fcab36dba1cccec73f7264db0efa2eed92d115e81970c4bcdafe5f814187fdac1071a9c993a4a8c8a03e1af1c5fdae37ae04a6a1fd0bd120dd6454a1ee2d33ae4d0ebec7703e870974b1add3449dd96f5160573162c934230679eaca35611d9f656c2b8f726af4b8372e1f9f60187ab42f929983ab77c2bfa20f87d78bdcec88fdf680eae6961e86b02cae6ddef77a718ef033fec40acd557f25e5bd6518ecd893d07b50eed4b842960359ed3a5e9f1599f6137d7fd0a034cea1f850d886b583a35bbd4778782f59953fc2adb9926f6fb41b81e4262d4ca6dcdde452e7a45c311", @generic="b94e929d8deddbf10a3c0e8f8c69daa518018a98650ffc810bd76a641d264f2e2da1afba5aa8c559a1ca62b79c89d1d529a0a8366b8a57c66a0ca37968ded337387239d5f9bc6d63b9", @typed={0xa0, 0x50, 0x0, 0x0, @binary="c2bec68b975f35d911067cb13908f82633fa774e8b83d05505e4435b381a6ae0fbc16786596ad3182fdaefc56c133f51fe40d47c578408043fa5720bbc543268d4ae9e256a38d8efff177d1927d765dbf517c51609317be8690f385c08ae6027d494ff55b11914c1918bd9ca2d08276a05327259321fe5d9f834184e34871b366d29fbdfb39c7d836cbcc0a6cf43a0e23a9604f236ad9b71ed6a5a25"}]}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x5}]}]}, 0x874}, 0x1, 0x0, 0x0, 0x20002000}, 0x850) 827.252884ms ago: executing program 2 (id=343): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x5}, 0x3fb, 0x0, 0x0) setrlimit$auto(0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vbi9\x00', 0x34b100, 0x0) ioctl$auto(r0, 0x40085618, r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = fanotify_init$auto(0x1f53, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x1, 0xf2b, r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) read$auto(r0, &(0x7f0000000200)='/sys/de~y\x8a\x18\x0f\xf9\xedoaTform/vhci_hcd\x05\x00\x00\x00\x00\x00\x00\x00/descripTors\x00\xe6\x84\x1e\xab\\\xfb\xc3\f', 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x8, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) semctl$auto(0x7, 0x6, 0x13, 0x1) socketpair$auto(0x20020, 0xa, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0)="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", 0x119) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/1/cpuid\x00', 0x88900, 0x0) readv$auto(r5, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) bpf$auto(0x12, &(0x7f0000000040)=@bpf_attr_1={0x84a5, 0x0, @next_key=0x8e66, 0x100000000}, 0x80) 509.864155ms ago: executing program 2 (id=344): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x6) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000140)={{0x1, 0xee01, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7bee}, 0x5, 0x18, 0x7b, 0x1, @inferred=0xffffffffffffffff, @raw=0xcc2, 0x5, 0x0, 0x0, &(0x7f0000000080)}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0xffffffffffffffff, 0x400007, 0x1000000df, 0xb92, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x800}, 0x5, 0x0, 0x1, 0x2}, 0x46}, 0x4, 0x100) 103.885151ms ago: executing program 1 (id=345): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@task_fd_query={0x0, 0x3, 0x5, 0xae30, 0x9, 0x1, r0, 0x9, 0x7fe}, 0x800003ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x2, 0x9) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd7/sched/read0_next_rq\x00', 0x40080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x8b, 0x0, 0x100000001) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x8c53, 0x0, 0x5, 0x0}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x680540, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x400c800) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=346): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x44840, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x591042, 0x408) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xff, 0x0, 0x80000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x82000, 0x0) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0xe) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=0x80) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x2, 0x8000000000000001, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0xc8841, 0x0) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 85.254609][ T5621] cgroup: Unknown subsys name 'net' [ 85.324228][ T5621] cgroup: Unknown subsys name 'cpuset' [ 85.333380][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.830434][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.121961][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.135603][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.154203][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.155613][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.165295][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.170176][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.177316][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.187397][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.194448][ T5650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.199915][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.208112][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.215774][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.222155][ T5650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.238584][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.247725][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.248505][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.263855][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.266123][ T5650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.281289][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.282152][ T5650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.848981][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.857688][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.865463][ T5638] bridge_slave_0: entered allmulticast mode [ 90.873203][ T5638] bridge_slave_0: entered promiscuous mode [ 90.905368][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.912779][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.920159][ T5638] bridge_slave_1: entered allmulticast mode [ 90.927410][ T5638] bridge_slave_1: entered promiscuous mode [ 90.991699][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.999129][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.006510][ T5635] bridge_slave_0: entered allmulticast mode [ 91.013805][ T5635] bridge_slave_0: entered promiscuous mode [ 91.054191][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.062144][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.069698][ T5635] bridge_slave_1: entered allmulticast mode [ 91.077423][ T5635] bridge_slave_1: entered promiscuous mode [ 91.088956][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.130040][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.140116][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.147464][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.155462][ T5637] bridge_slave_0: entered allmulticast mode [ 91.162682][ T5637] bridge_slave_0: entered promiscuous mode [ 91.217089][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.224646][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.232773][ T5637] bridge_slave_1: entered allmulticast mode [ 91.239949][ T5637] bridge_slave_1: entered promiscuous mode [ 91.247353][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.254812][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.262534][ T5636] bridge_slave_0: entered allmulticast mode [ 91.270026][ T5636] bridge_slave_0: entered promiscuous mode [ 91.279662][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.292679][ T5638] team0: Port device team_slave_0 added [ 91.307896][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.315372][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.323404][ T4951] Bluetooth: hci2: command tx timeout [ 91.323425][ T5636] bridge_slave_1: entered allmulticast mode [ 91.325190][ T5636] bridge_slave_1: entered promiscuous mode [ 91.329667][ T5650] Bluetooth: hci0: command tx timeout [ 91.340188][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.343185][ T5647] Bluetooth: hci1: command tx timeout [ 91.348430][ T5639] Bluetooth: hci3: command tx timeout [ 91.363283][ T5638] team0: Port device team_slave_1 added [ 91.418428][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.461327][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.483042][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.495678][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.506590][ T5635] team0: Port device team_slave_0 added [ 91.513942][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.521862][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.550090][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.586645][ T5635] team0: Port device team_slave_1 added [ 91.593413][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.600586][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.627819][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.641977][ T5637] team0: Port device team_slave_0 added [ 91.682197][ T5637] team0: Port device team_slave_1 added [ 91.690357][ T5636] team0: Port device team_slave_0 added [ 91.708415][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.715772][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.742667][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.769119][ T5636] team0: Port device team_slave_1 added [ 91.785444][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.792960][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.820706][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.872928][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.880247][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.906981][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.939220][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.946471][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.973187][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.985945][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.993141][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.020805][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.032814][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.040141][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.066569][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.083344][ T5638] hsr_slave_0: entered promiscuous mode [ 92.090498][ T5638] hsr_slave_1: entered promiscuous mode [ 92.140398][ T5635] hsr_slave_0: entered promiscuous mode [ 92.147085][ T5635] hsr_slave_1: entered promiscuous mode [ 92.154550][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 92.160831][ T5635] Cannot create hsr debugfs directory [ 92.267179][ T5636] hsr_slave_0: entered promiscuous mode [ 92.274366][ T5636] hsr_slave_1: entered promiscuous mode [ 92.283704][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 92.290398][ T24] cfg80211: failed to load regulatory.db [ 92.290839][ T5636] Cannot create hsr debugfs directory [ 92.307094][ T5637] hsr_slave_0: entered promiscuous mode [ 92.313797][ T5637] hsr_slave_1: entered promiscuous mode [ 92.320710][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 92.326685][ T5637] Cannot create hsr debugfs directory [ 92.764432][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.781298][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.792240][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.807127][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.816440][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.826867][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.835314][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.847355][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.930383][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.942651][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.952807][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.964666][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.975004][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.984694][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.993096][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.004995][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.113246][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.124732][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.133806][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.143873][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.169592][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.182368][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.209976][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.221130][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.298117][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.308712][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.329243][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.341957][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.350855][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.360919][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.377717][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.386867][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.396464][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.404106][ T5639] Bluetooth: hci3: command tx timeout [ 93.410857][ T5639] Bluetooth: hci0: command tx timeout [ 93.411286][ T5647] Bluetooth: hci2: command tx timeout [ 93.421749][ T5650] Bluetooth: hci1: command tx timeout [ 93.460959][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.503856][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.537399][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.545208][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.567529][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.583685][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.591178][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.600689][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.607832][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.654171][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.661480][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.816101][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.859686][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.917244][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.957545][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.964906][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.002403][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.025984][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.033281][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.084921][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.092284][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.140461][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.148713][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.688524][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.873364][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.893510][ T5638] veth0_vlan: entered promiscuous mode [ 94.939630][ T5638] veth1_vlan: entered promiscuous mode [ 95.091928][ T5638] veth0_macvtap: entered promiscuous mode [ 95.103608][ T5637] veth0_vlan: entered promiscuous mode [ 95.119400][ T5638] veth1_macvtap: entered promiscuous mode [ 95.147819][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.159034][ T5637] veth1_vlan: entered promiscuous mode [ 95.207062][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.229431][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.278491][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.290859][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.331653][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355605][ T5637] veth0_macvtap: entered promiscuous mode [ 95.364345][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383675][ T5637] veth1_macvtap: entered promiscuous mode [ 95.393826][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.460165][ T5635] veth0_vlan: entered promiscuous mode [ 95.480113][ T5650] Bluetooth: hci1: command tx timeout [ 95.485887][ T4951] Bluetooth: hci0: command tx timeout [ 95.486080][ T5639] Bluetooth: hci3: command tx timeout [ 95.491462][ T5647] Bluetooth: hci2: command tx timeout [ 95.518987][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.544001][ T5635] veth1_vlan: entered promiscuous mode [ 95.570228][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.593618][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.605203][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.629264][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.638567][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.667708][ T3295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.677139][ T3295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.705473][ T5636] veth0_vlan: entered promiscuous mode [ 95.721986][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.733808][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.784464][ T5636] veth1_vlan: entered promiscuous mode [ 95.843499][ T5635] veth0_macvtap: entered promiscuous mode [ 95.865252][ T5635] veth1_macvtap: entered promiscuous mode [ 95.869028][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.895946][ T3295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.915420][ T3295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.939323][ T5636] veth0_macvtap: entered promiscuous mode [ 95.987027][ T5636] veth1_macvtap: entered promiscuous mode [ 96.014244][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.034269][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.060406][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.106063][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.122835][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.153713][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.153803][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.153845][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.154272][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.174460][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.259696][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.263127][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.278665][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.278740][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.582749][ T3335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.608748][ T3335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.705344][ T3335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.724875][ T3335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.794672][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.826751][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.978027][ T3295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.023314][ T3295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.205393][ T5798] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.560483][ T5647] Bluetooth: hci3: command tx timeout [ 97.570414][ T5639] Bluetooth: hci1: command tx timeout [ 97.575937][ T5650] Bluetooth: hci0: command tx timeout [ 97.581985][ T5647] Bluetooth: hci2: command tx timeout [ 97.676937][ T5805] smpboot: CPU 1 is now offline [ 102.464616][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 102.516316][ T5647] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 103.609440][ T5857] Zero length message leads to an empty skb [ 103.728075][ T5860] ubi0: attaching mtd0 [ 103.778080][ T5858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 103.797455][ T5860] ubi0: scanning is finished [ 103.826660][ T5860] ubi0: empty MTD device detected [ 104.168877][ T5860] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.209604][ T5860] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.242384][ T5860] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.273946][ T5860] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 104.327783][ T5860] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.355514][ T5860] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.390775][ T5860] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2267757191 [ 104.450577][ T5860] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.534815][ T5868] ubi0: background thread "ubi_bgt0d" started, PID 5868 [ 104.554613][ T5862] ubi0: detaching mtd0 [ 104.596016][ T5862] ubi0: mtd0 is detached [ 104.603633][ T5650] Bluetooth: hci2: command 0x2016 tx timeout [ 105.968707][ T5880] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 106.074039][ T5881] smpboot: CPU 1 is now offline [ 106.681693][ T5650] Bluetooth: hci2: command 0x2016 tx timeout [ 108.036646][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 110.771643][ T5921] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.639380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d607c00: rx timeout, send abort [ 114.650059][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d607c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 118.776395][ T6020] FAULT_INJECTION: forcing a failure. [ 118.776395][ T6020] name failslab, interval 1, probability 0, space 0, times 1 [ 118.847330][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 118.847353][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.847365][ T6020] Call Trace: [ 118.847372][ T6020] [ 118.847378][ T6020] dump_stack_lvl+0x100/0x190 [ 118.847411][ T6020] should_fail_ex.cold+0x5/0xa [ 118.847433][ T6020] should_failslab+0xc2/0x120 [ 118.847459][ T6020] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 118.847484][ T6020] ? __d_alloc+0x34/0xa40 [ 118.847507][ T6020] __d_alloc+0x34/0xa40 [ 118.847528][ T6020] d_alloc+0x4a/0x1e0 [ 118.847548][ T6020] lookup_one_qstr_excl+0x171/0x250 [ 118.847573][ T6020] start_dirop+0x59/0xb0 [ 118.847589][ T6020] simple_start_creating+0xf9/0x110 [ 118.847607][ T6020] ? __pfx_simple_start_creating+0x10/0x10 [ 118.847630][ T6020] nfsd_fill_super+0x1c9/0x560 [ 118.847654][ T6020] ? __pfx_nfsd_fill_super+0x10/0x10 [ 118.847683][ T6020] get_tree_keyed+0x10e/0x1d0 [ 118.847701][ T6020] vfs_get_tree+0x92/0x320 [ 118.847716][ T6020] path_mount+0x7d0/0x23d0 [ 118.847741][ T6020] ? __pfx_path_mount+0x10/0x10 [ 118.847759][ T6020] ? lockdep_hardirqs_on+0x78/0x100 [ 118.847785][ T6020] ? putname+0xb1/0x110 [ 118.847802][ T6020] ? kmem_cache_free+0x127/0x6c0 [ 118.847829][ T6020] ? __x64_sys_mount+0x293/0x310 [ 118.847849][ T6020] __x64_sys_mount+0x293/0x310 [ 118.847871][ T6020] ? __pfx___x64_sys_mount+0x10/0x10 [ 118.847893][ T6020] ? rcu_is_watching+0x12/0xc0 [ 118.847913][ T6020] do_syscall_64+0x115/0x840 [ 118.847932][ T6020] ? clear_bhb_loop+0x40/0x90 [ 118.847955][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.847971][ T6020] RIP: 0033:0x7fc8a679ce59 [ 118.847988][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.848006][ T6020] RSP: 002b:00007fc8a773f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.848024][ T6020] RAX: ffffffffffffffda RBX: 00007fc8a6a15fa0 RCX: 00007fc8a679ce59 [ 118.848034][ T6020] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 118.848043][ T6020] RBP: 00007fc8a6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.848052][ T6020] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 118.848061][ T6020] R13: 00007fc8a6a16038 R14: 00007fc8a6a15fa0 R15: 00007fffaf018158 [ 118.848080][ T6020] [ 121.591980][ T6037] random: crng reseeded on system resumption [ 123.191860][ T6051] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 123.406980][ T6054] smpboot: CPU 1 is now offline [ 124.986938][ C0] sd 0:0:1:0: [sda] tag#47 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 124.997977][ C0] sd 0:0:1:0: [sda] tag#47 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 125.448196][ T6073] syz.2.46 (6073) used greatest stack depth: 19720 bytes left [ 127.355908][ T6108] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 127.797851][ T6116] ubi0: attaching mtd0 [ 127.824175][ T6116] ubi0: scanning is finished [ 128.156851][ T6116] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.224946][ T6116] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.273689][ T6116] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.306529][ T6116] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 128.349885][ T6116] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.390533][ T6116] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.437079][ T6116] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2267757191 [ 128.492958][ T6116] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.592974][ T6117] ubi0: detaching mtd0 [ 128.597217][ T6124] ubi0: background thread "ubi_bgt0d" started, PID 6124 [ 128.717129][ T6117] ubi0: mtd0 is detached [ 129.748495][ T6136] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 129.905269][ T6138] smpboot: CPU 1 is now offline [ 133.242592][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.255668][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.115963][ T6176] syz.2.65 (6176) used obsolete PPPIOCDETACH ioctl [ 135.898027][ T6201] sd 0:0:1:0: PR command failed: 1026 [ 135.981576][ T6201] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 136.064893][ T6201] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 136.970754][ T6214] ubi0: attaching mtd0 [ 137.016255][ T6214] ubi0: scanning is finished [ 137.273152][ T6214] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 137.341192][ T6214] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 137.449183][ T6214] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 137.523665][ T6214] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 137.599335][ T6214] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 137.646752][ T6214] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 137.695073][ T6214] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 137.771704][ T6214] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 137.819501][ T6225] ubi0: background thread "ubi_bgt0d" started, PID 6225 [ 137.827115][ T6218] ubi0: detaching mtd0 [ 137.876155][ T6218] ubi0: mtd0 is detached [ 137.905604][ T6221] ubi0: attaching mtd0 [ 137.926347][ T6221] ubi0: scanning is finished [ 138.162919][ T6221] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 138.227175][ T6221] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 138.283919][ T6221] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 138.337064][ T6221] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 138.371215][ T6239] random: crng reseeded on system resumption [ 138.399783][ T6221] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 138.444940][ T6221] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 138.495815][ T6221] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 138.585307][ T6221] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 138.650886][ T6224] ubi0: detaching mtd0 [ 138.655135][ T6237] ubi0: background thread "ubi_bgt0d" started, PID 6237 [ 138.742823][ T6224] ubi0: mtd0 is detached [ 139.660688][ T6257] FAULT_INJECTION: forcing a failure. [ 139.660688][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 139.738440][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 139.738464][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.738473][ T6257] Call Trace: [ 139.738479][ T6257] [ 139.738485][ T6257] dump_stack_lvl+0x100/0x190 [ 139.738506][ T6257] should_fail_ex.cold+0x5/0xa [ 139.738527][ T6257] should_failslab+0xc2/0x120 [ 139.738544][ T6257] __kmalloc_cache_noprof+0x7a/0x6f0 [ 139.738565][ T6257] ? alloc_fs_context+0x57/0xf40 [ 139.738586][ T6257] ? __get_fs_type+0x12c/0x170 [ 139.738609][ T6257] alloc_fs_context+0x57/0xf40 [ 139.738629][ T6257] ? __get_fs_type+0x12c/0x170 [ 139.738654][ T6257] fs_context_for_submount+0x26/0xc0 [ 139.738676][ T6257] trace_automount+0x47/0xa0 [ 139.738694][ T6257] __traverse_mounts+0x1b9/0x8a0 [ 139.738721][ T6257] step_into_slowpath+0xb7e/0xf90 [ 139.738735][ T6257] ? __d_lookup+0x25c/0x4a0 [ 139.738749][ T6257] ? __d_lookup+0x25c/0x4a0 [ 139.738764][ T6257] ? __pfx_step_into_slowpath+0x10/0x10 [ 139.738779][ T6257] ? __d_lookup+0x266/0x4a0 [ 139.738795][ T6257] ? lookup_fast+0x2da/0x600 [ 139.738807][ T6257] ? inode_permission+0x374/0x620 [ 139.738831][ T6257] link_path_walk+0xf28/0x1cc0 [ 139.738853][ T6257] path_openat+0x1be/0x31a0 [ 139.738869][ T6257] ? kasan_save_stack+0x3f/0x50 [ 139.738883][ T6257] ? kasan_save_stack+0x30/0x50 [ 139.738896][ T6257] ? kasan_save_track+0x14/0x30 [ 139.738909][ T6257] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 139.738936][ T6257] ? __pfx_path_openat+0x10/0x10 [ 139.738960][ T6257] do_file_open+0x20e/0x430 [ 139.738979][ T6257] ? __pfx_do_file_open+0x10/0x10 [ 139.739010][ T6257] ? alloc_fd+0x476/0x790 [ 139.739029][ T6257] ? do_getname+0x191/0x390 [ 139.739051][ T6257] do_sys_openat2+0x10d/0x1e0 [ 139.739073][ T6257] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.739101][ T6257] __x64_sys_openat+0x12d/0x210 [ 139.739123][ T6257] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.739144][ T6257] ? ksys_write+0x1ac/0x250 [ 139.739163][ T6257] ? rcu_is_watching+0x12/0xc0 [ 139.739182][ T6257] do_syscall_64+0x115/0x840 [ 139.739211][ T6257] ? clear_bhb_loop+0x40/0x90 [ 139.739230][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.739252][ T6257] RIP: 0033:0x7fdc5d19ce59 [ 139.739266][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.739280][ T6257] RSP: 002b:00007fdc5dfe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.739295][ T6257] RAX: ffffffffffffffda RBX: 00007fdc5d415fa0 RCX: 00007fdc5d19ce59 [ 139.739307][ T6257] RDX: 0000000000143382 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 139.739321][ T6257] RBP: 00007fdc5d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 139.739329][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.739337][ T6257] R13: 00007fdc5d416038 R14: 00007fdc5d415fa0 R15: 00007ffdd37f07b8 [ 139.739356][ T6257] [ 140.736407][ T6270] ubi0: attaching mtd0 [ 140.752279][ T6270] ubi0: scanning is finished [ 140.855023][ T6270] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 140.855045][ T6270] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 140.855058][ T6270] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 140.855070][ T6270] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 140.855082][ T6270] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 140.855094][ T6270] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 140.855107][ T6270] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 140.855122][ T6270] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 140.855160][ T6273] ubi0: background thread "ubi_bgt0d" started, PID 6273 [ 140.855224][ T6272] ubi0: detaching mtd0 [ 140.888167][ T6272] ubi0: mtd0 is detached [ 142.848663][ T6300] zswap: compressor not available [ 143.879165][ T6330] ubi0: attaching mtd0 [ 143.911931][ T6330] ubi0: scanning is finished [ 144.786691][ T6330] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 146.694941][ T6378] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.310452][ T6388] FAULT_INJECTION: forcing a failure. [ 147.310452][ T6388] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 147.376474][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(full) [ 147.376505][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.376515][ T6388] Call Trace: [ 147.376521][ T6388] [ 147.376527][ T6388] dump_stack_lvl+0x100/0x190 [ 147.376550][ T6388] should_fail_ex.cold+0x5/0xa [ 147.376570][ T6388] ? prepare_alloc_pages+0x16d/0x5f0 [ 147.376592][ T6388] should_fail_alloc_page+0xeb/0x140 [ 147.376611][ T6388] prepare_alloc_pages+0x1f0/0x5f0 [ 147.376634][ T6388] ? trace_sched_exit_tp+0x11c/0x160 [ 147.376657][ T6388] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 147.376686][ T6388] ? __lock_acquire+0x4a5/0x2630 [ 147.376709][ T6388] ? __css_rstat_updated+0x1ce/0x5a0 [ 147.376732][ T6388] ? __pfx___css_rstat_updated+0x10/0x10 [ 147.376754][ T6388] ? xas_create+0x1f4/0x14e0 [ 147.376774][ T6388] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.376800][ T6388] ? rcu_is_watching+0x12/0xc0 [ 147.376817][ T6388] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 147.376841][ T6388] ? find_held_lock+0x2b/0x80 [ 147.376863][ T6388] ? __lock_acquire+0x4a5/0x2630 [ 147.376885][ T6388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.376906][ T6388] ? policy_nodemask+0xed/0x4f0 [ 147.376924][ T6388] alloc_pages_mpol+0x1fb/0x540 [ 147.376942][ T6388] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 147.376959][ T6388] ? filemap_get_entry+0x22d/0x450 [ 147.376974][ T6388] ? filemap_get_entry+0x22d/0x450 [ 147.376990][ T6388] folio_alloc_noprof+0x22/0x250 [ 147.377010][ T6388] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 147.377033][ T6388] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 147.377055][ T6388] ? rcu_is_watching+0x12/0xc0 [ 147.377073][ T6388] __filemap_get_folio_mpol+0x6a4/0xe70 [ 147.377093][ T6388] ioctx_alloc+0x7e1/0x21a0 [ 147.377121][ T6388] ? __pfx_ioctx_alloc+0x10/0x10 [ 147.377143][ T6388] ? __might_fault+0x111/0x140 [ 147.377166][ T6388] __x64_sys_io_setup+0xc9/0x220 [ 147.377188][ T6388] do_syscall_64+0x115/0x840 [ 147.377207][ T6388] ? clear_bhb_loop+0x40/0x90 [ 147.377225][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.377240][ T6388] RIP: 0033:0x7fc8a679ce59 [ 147.377253][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.377267][ T6388] RSP: 002b:00007fc8a773f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 147.377281][ T6388] RAX: ffffffffffffffda RBX: 00007fc8a6a15fa0 RCX: 00007fc8a679ce59 [ 147.377291][ T6388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 147.377300][ T6388] RBP: 00007fc8a6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 147.377310][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.377318][ T6388] R13: 00007fc8a6a16038 R14: 00007fc8a6a15fa0 R15: 00007fffaf018158 [ 147.377339][ T6388] [ 147.796147][ T30] audit: type=1800 audit(1780500068.897:2): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.104" name="version" dev="configfs" ino=12439 res=0 errno=0 [ 151.141675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dfe4800: rx timeout, send abort [ 151.150227][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dfe4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.642454][ T6455] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 153.745851][ T6459] zero sized request [ 153.807778][ T6455] pci 0000:00:01.3: PCI INT A: no GSI [ 155.773196][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 156.531405][ T6482] mmap: syz.2.125 (6482) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.649107][ T6497] FAULT_INJECTION: forcing a failure. [ 157.649107][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 157.758550][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 157.758572][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.758582][ T6497] Call Trace: [ 157.758587][ T6497] [ 157.758594][ T6497] dump_stack_lvl+0x100/0x190 [ 157.758619][ T6497] should_fail_ex.cold+0x5/0xa [ 157.758639][ T6497] should_failslab+0xc2/0x120 [ 157.758657][ T6497] __kvmalloc_node_noprof+0xfa/0xa00 [ 157.758672][ T6497] ? io_uring_setup.cold+0x171/0x1c6e [ 157.758697][ T6497] ? lockdep_init_map_type+0x5c/0x250 [ 157.758723][ T6497] io_uring_setup.cold+0x171/0x1c6e [ 157.758748][ T6497] ? __pfx_io_uring_setup+0x10/0x10 [ 157.758772][ T6497] ? do_futex+0x192/0x350 [ 157.758788][ T6497] ? __pfx_do_futex+0x10/0x10 [ 157.758811][ T6497] ? xfd_validate_state+0x129/0x190 [ 157.758833][ T6497] __x64_sys_io_uring_setup+0xc2/0x170 [ 157.758856][ T6497] do_syscall_64+0x115/0x840 [ 157.758876][ T6497] ? clear_bhb_loop+0x40/0x90 [ 157.758898][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.758913][ T6497] RIP: 0033:0x7fdc5d19ce59 [ 157.758926][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.758939][ T6497] RSP: 002b:00007fdc5dfe8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 157.758954][ T6497] RAX: ffffffffffffffda RBX: 00007fdc5d415fa0 RCX: 00007fdc5d19ce59 [ 157.758967][ T6497] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 157.758977][ T6497] RBP: 00007fdc5d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 157.758985][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.758993][ T6497] R13: 00007fdc5d416038 R14: 00007fdc5d415fa0 R15: 00007ffdd37f07b8 [ 157.759012][ T6497] [ 159.182601][ T6515] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 159.580753][ T6518] smpboot: CPU 1 is now offline [ 159.938907][ T6532] ubi0: attaching mtd0 [ 159.962890][ T6532] ubi0: scanning is finished [ 160.267331][ T6532] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 160.318649][ T6532] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 160.376537][ T6532] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 160.415847][ T6532] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 160.467710][ T6532] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 160.518083][ T6532] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 160.579111][ T6532] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 160.639877][ T6532] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 160.715969][ T6543] ubi0: background thread "ubi_bgt0d" started, PID 6543 [ 160.723535][ T6535] ubi0: detaching mtd0 [ 160.808191][ T6535] ubi0: mtd0 is detached [ 161.381292][ T6562] zram0: detected capacity change from 0 to 16 [ 162.770844][ T6592] ubi0: attaching mtd0 [ 162.804320][ T6592] ubi0: scanning is finished [ 163.047023][ T6592] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 163.123330][ T6592] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 163.198245][ T6592] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 163.271140][ T6592] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 163.348628][ T6592] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 163.419462][ T6592] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 163.512390][ T6592] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 163.528323][ T6615] FAULT_INJECTION: forcing a failure. [ 163.528323][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.624212][ T6592] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 163.679136][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.0.158 Not tainted syzkaller #0 PREEMPT(full) [ 163.679158][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.679167][ T6615] Call Trace: [ 163.679172][ T6615] [ 163.679178][ T6615] dump_stack_lvl+0x100/0x190 [ 163.679200][ T6615] should_fail_ex.cold+0x5/0xa [ 163.679223][ T6615] _copy_to_user+0x32/0xd0 [ 163.679246][ T6615] simple_read_from_buffer+0xcb/0x170 [ 163.679265][ T6615] proc_fail_nth_read+0x1af/0x230 [ 163.679289][ T6615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.679313][ T6615] ? rw_verify_area+0xce/0x6d0 [ 163.679327][ T6615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.679350][ T6615] vfs_read+0x1e4/0xb30 [ 163.679369][ T6615] ? __pfx_vfs_read+0x10/0x10 [ 163.679384][ T6615] ? __fget_files+0x215/0x3d0 [ 163.679406][ T6615] ? __fget_files+0x21f/0x3d0 [ 163.679428][ T6615] ksys_read+0x12a/0x250 [ 163.679444][ T6615] ? __pfx_ksys_read+0x10/0x10 [ 163.679461][ T6615] ? rcu_is_watching+0x12/0xc0 [ 163.679481][ T6615] do_syscall_64+0x115/0x840 [ 163.679500][ T6615] ? clear_bhb_loop+0x40/0x90 [ 163.679518][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.679533][ T6615] RIP: 0033:0x7f9936b5d68e [ 163.679545][ T6615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.679559][ T6615] RSP: 002b:00007f9937b09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.679573][ T6615] RAX: ffffffffffffffda RBX: 00007f9937b0a6c0 RCX: 00007f9936b5d68e [ 163.679582][ T6615] RDX: 000000000000000f RSI: 00007f9937b0a0a0 RDI: 0000000000000003 [ 163.679591][ T6615] RBP: 00007f9937b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.679599][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.679607][ T6615] R13: 00007f9936e16128 R14: 00007f9936e16090 R15: 00007ffd75846c48 [ 163.679626][ T6615] [ 164.092444][ T6594] ubi0: detaching mtd0 [ 164.208088][ T6594] ubi0: mtd0 is detached [ 166.439364][ T6661] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 166.552603][ T6664] smpboot: CPU 1 is now offline [ 167.150022][ T6672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.176882][ T6672] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.298671][ T6672] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.353159][ T6672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.396371][ T6672] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.450788][ T6672] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.553848][ T6672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.606560][ T6672] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.657617][ T6672] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.713155][ T6672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.763709][ T6672] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.798329][ T6672] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.205500][ T30] audit: type=1800 audit(1780500089.367:3): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.178" name="members" dev="configfs" ino=14205 res=0 errno=0 [ 168.236120][ T6681] Process accounting resumed [ 169.128129][ T6710] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 169.159678][ T6710] netlink: 9 bytes leftover after parsing attributes in process `syz.2.181'. [ 169.169250][ T5650] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.396866][ T6715] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 169.408023][ T5650] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.419548][ T6720] ubi0: attaching mtd0 [ 169.438543][ T6720] ubi0: scanning is finished [ 169.522958][ T6712] sctp: [Deprecated]: syz.0.182 (pid 6712) Use of int in maxseg socket option. [ 169.522958][ T6712] Use struct sctp_assoc_value instead [ 169.560078][ T5650] Bluetooth: hci2: command 0x2016 tx timeout [ 169.606534][ T6720] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 169.669305][ T6720] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 169.721367][ T5650] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.727978][ T6720] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 169.831062][ T6720] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 169.880982][ T6720] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 169.925022][ T6720] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 169.961692][ T5647] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 169.976099][ T6720] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 170.053654][ T6720] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 170.133885][ T6723] ubi0: detaching mtd0 [ 170.138342][ T6725] ubi0: background thread "ubi_bgt0d" started, PID 6725 [ 170.199535][ T6723] ubi0: mtd0 is detached [ 171.240068][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.480147][ T5647] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.640778][ T5647] Bluetooth: hci2: command 0x2016 tx timeout [ 171.800138][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.125290][ T6782] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 173.319997][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.559965][ T5647] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.721740][ T5647] Bluetooth: hci2: command 0x2016 tx timeout [ 173.880784][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.305109][ T6823] random: crng reseeded on system resumption [ 174.495098][ T6823] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 174.914808][ T6825] hub 1-0:1.0: USB hub found [ 174.967286][ T6825] hub 1-0:1.0: 1 port detected [ 175.258527][ T6838] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 175.404327][ T6839] smpboot: CPU 1 is now offline [ 177.942914][ T6886] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 178.099518][ T6888] smpboot: CPU 1 is now offline [ 178.156973][ T30] audit: type=1800 audit(1780500099.317:4): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.211" name="version" dev="configfs" ino=15308 res=0 errno=0 [ 179.869891][ T6928] ubi0: attaching mtd0 [ 179.886989][ T6928] ubi0: scanning is finished [ 180.040757][ T6928] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 180.111864][ T6928] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 180.215924][ T6928] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 180.309302][ T6928] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 180.347320][ T6935] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 180.372092][ T6928] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 180.421834][ T6928] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 180.442410][ T6928] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 180.480553][ T6937] smpboot: CPU 1 is now offline [ 180.506663][ T6928] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 180.555247][ T6929] ubi0: detaching mtd0 [ 180.560178][ T6931] ubi0: background thread "ubi_bgt0d" started, PID 6931 [ 180.608826][ T6929] ubi0: mtd0 is detached [ 180.903913][ T6943] syz.0.224(6943): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 181.349579][ T6951] process 'syz.2.226' launched ':,' with NULL argv: empty string added [ 181.366015][ T6952] syz.1.227 uses obsolete (PF_INET,SOCK_PACKET) [ 182.567459][ T6976] ubi0: attaching mtd0 [ 182.591267][ T6976] ubi0: scanning is finished [ 182.746436][ T6976] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 182.791717][ T6976] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 182.842884][ T6976] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 182.883678][ T6976] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 182.955158][ T6976] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 183.011749][ T6976] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 183.052257][ T6976] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 183.102106][ T6976] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 183.165351][ T6977] ubi0: detaching mtd0 [ 183.177035][ T6979] ubi0: background thread "ubi_bgt0d" started, PID 6979 [ 183.224019][ T6977] ubi0: mtd0 is detached [ 185.150176][ T7025] sd 0:0:1:0: PR command failed: 1026 [ 185.196727][ T7025] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 185.231090][ T7025] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 185.484383][ T7034] ubi0: attaching mtd0 [ 185.513776][ T7034] ubi0: scanning is finished [ 185.759130][ T7034] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 185.835267][ T7034] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 185.932049][ T7034] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 185.985573][ T7034] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 186.037829][ T7034] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 186.086868][ T7034] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 186.148101][ T7034] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 186.216227][ T7034] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 186.307227][ T7039] ubi0: detaching mtd0 [ 186.311636][ T7046] ubi0: background thread "ubi_bgt0d" started, PID 7046 [ 186.380984][ T7039] ubi0: mtd0 is detached [ 187.118423][ C0] sd 0:0:1:0: [sda] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 187.130261][ C0] sd 0:0:1:0: [sda] tag#19 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 188.176360][ T7081] FAULT_INJECTION: forcing a failure. [ 188.176360][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.251131][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 188.251155][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.251165][ T7081] Call Trace: [ 188.251171][ T7081] [ 188.251178][ T7081] dump_stack_lvl+0x100/0x190 [ 188.251198][ T7081] should_fail_ex.cold+0x5/0xa [ 188.251217][ T7081] strncpy_from_user+0x3b/0x2d0 [ 188.251241][ T7081] do_getname+0x78/0x390 [ 188.251266][ T7081] user_path_at+0x26/0x60 [ 188.251284][ T7081] __x64_sys_mount+0x1fb/0x310 [ 188.251308][ T7081] ? __pfx___x64_sys_mount+0x10/0x10 [ 188.251329][ T7081] ? rcu_is_watching+0x12/0xc0 [ 188.251348][ T7081] do_syscall_64+0x115/0x840 [ 188.251368][ T7081] ? clear_bhb_loop+0x40/0x90 [ 188.251385][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.251400][ T7081] RIP: 0033:0x7fdc5d19ce59 [ 188.251413][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.251427][ T7081] RSP: 002b:00007fdc5dfe8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.251441][ T7081] RAX: ffffffffffffffda RBX: 00007fdc5d415fa0 RCX: 00007fdc5d19ce59 [ 188.251451][ T7081] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 188.251460][ T7081] RBP: 00007fdc5d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 188.251470][ T7081] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 188.251478][ T7081] R13: 00007fdc5d416038 R14: 00007fdc5d415fa0 R15: 00007ffdd37f07b8 [ 188.251497][ T7081] [ 190.287709][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 190.462776][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 191.194997][ T7125] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 191.460654][ T7129] smpboot: CPU 1 is now offline [ 193.846215][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 194.682796][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.695033][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.237557][ T7188] ubi0: attaching mtd0 [ 195.331181][ T7188] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 195.450139][ T7197] FAULT_INJECTION: forcing a failure. [ 195.450139][ T7197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.499137][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 195.499160][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.499170][ T7197] Call Trace: [ 195.499175][ T7197] [ 195.499181][ T7197] dump_stack_lvl+0x100/0x190 [ 195.499203][ T7197] should_fail_ex.cold+0x5/0xa [ 195.499220][ T7197] ? prepare_alloc_pages+0x16d/0x5f0 [ 195.499242][ T7197] should_fail_alloc_page+0xeb/0x140 [ 195.499261][ T7197] prepare_alloc_pages+0x1f0/0x5f0 [ 195.499283][ T7197] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 195.499307][ T7197] ? rcu_is_watching+0x12/0xc0 [ 195.499327][ T7197] ? __lock_acquire+0x4a5/0x2630 [ 195.499348][ T7197] ? __css_rstat_updated+0x1ce/0x5a0 [ 195.499385][ T7197] ? __pfx___css_rstat_updated+0x10/0x10 [ 195.499409][ T7197] ? xas_create+0x1f4/0x14e0 [ 195.499430][ T7197] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.499457][ T7197] ? rcu_is_watching+0x12/0xc0 [ 195.499472][ T7197] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 195.499496][ T7197] ? find_held_lock+0x2b/0x80 [ 195.499519][ T7197] ? __lock_acquire+0x4a5/0x2630 [ 195.499540][ T7197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.499562][ T7197] ? policy_nodemask+0xed/0x4f0 [ 195.499580][ T7197] alloc_pages_mpol+0x1fb/0x540 [ 195.499598][ T7197] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 195.499615][ T7197] ? filemap_get_entry+0x22d/0x450 [ 195.499629][ T7197] ? filemap_get_entry+0x22d/0x450 [ 195.499646][ T7197] folio_alloc_noprof+0x22/0x250 [ 195.499666][ T7197] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 195.499688][ T7197] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 195.499710][ T7197] ? rcu_is_watching+0x12/0xc0 [ 195.499731][ T7197] __filemap_get_folio_mpol+0x6a4/0xe70 [ 195.499751][ T7197] ioctx_alloc+0x7e1/0x21a0 [ 195.499779][ T7197] ? __pfx_ioctx_alloc+0x10/0x10 [ 195.499804][ T7197] __x64_sys_io_setup+0xc9/0x220 [ 195.499826][ T7197] do_syscall_64+0x115/0x840 [ 195.499845][ T7197] ? clear_bhb_loop+0x40/0x90 [ 195.499865][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.499883][ T7197] RIP: 0033:0x7fdc5d19ce59 [ 195.499896][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.499910][ T7197] RSP: 002b:00007fdc5dfe8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 195.499924][ T7197] RAX: ffffffffffffffda RBX: 00007fdc5d415fa0 RCX: 00007fdc5d19ce59 [ 195.499934][ T7197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000401 [ 195.499943][ T7197] RBP: 00007fdc5d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 195.499952][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.499960][ T7197] R13: 00007fdc5d416038 R14: 00007fdc5d415fa0 R15: 00007ffdd37f07b8 [ 195.499980][ T7197] [ 196.488513][ T7207] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:7475:616c:2f6e:6574, load rds_tcp or rds_rdma? [ 201.662858][ T7226] Process accounting paused [ 203.007934][ T7290] vivid-007: ================= START STATUS ================= [ 203.115139][ T7290] vivid-007: Generate PTS: true [ 203.224473][ T7290] vivid-007: Generate SCR: true [ 203.308753][ T7290] tpg source WxH: 320x240 (Y'CbCr) [ 203.389665][ T7290] tpg field: 1 [ 203.443317][ T7290] tpg crop: (0,0)/320x240 [ 203.515554][ T7290] tpg compose: (0,0)/320x240 [ 203.622970][ T7290] tpg colorspace: 8 [ 203.667963][ T7303] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 203.686589][ T7290] tpg transfer function: 0/0 [ 203.741208][ T7290] tpg Y'CbCr encoding: 0/0 [ 203.794446][ T7290] tpg quantization: 0/0 [ 203.850757][ T7290] tpg RGB range: 0/2 [ 203.910063][ T7290] vivid-007: ================== END STATUS ================== [ 203.951145][ T7284] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 207.026841][ T7360] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 207.085449][ T7360] netlink: 314 bytes leftover after parsing attributes in process `syz.3.297'. [ 208.234401][ T7373] netlink: 'syz.3.299': attribute type 8 has an invalid length. [ 208.956530][ T7396] zram: Cannot change disksize for initialized device [ 209.433035][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 209.543852][ T7407] vivid-007: ================= START STATUS ================= [ 209.606749][ T7407] vivid-007: Generate PTS: true [ 209.649393][ T7407] vivid-007: Generate SCR: true [ 209.693284][ T7407] tpg source WxH: 320x240 (Y'CbCr) [ 209.734700][ T7407] tpg field: 1 [ 209.764888][ T7407] tpg crop: (0,0)/320x240 [ 209.798210][ T7407] tpg compose: (0,0)/320x240 [ 209.832425][ T7407] tpg colorspace: 8 [ 209.863806][ T7407] tpg transfer function: 0/0 [ 209.892590][ T7407] tpg Y'CbCr encoding: 0/0 [ 209.925901][ T7407] tpg quantization: 0/0 [ 209.952924][ T7407] tpg RGB range: 0/2 [ 209.980687][ T7407] vivid-007: ================== END STATUS ================== [ 210.109126][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 210.508920][ T7433] sysfs_service_op_store: Client not running :-5: [ 211.471224][ T7422] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 211.856948][ T7461] ubi0: attaching mtd0 [ 211.891314][ T7461] ubi0: scanning is finished [ 212.108080][ T7466] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 212.178243][ T7461] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 212.257176][ T7461] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 212.363609][ T7461] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 212.410907][ T7461] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 212.468951][ T7461] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 212.523113][ T7461] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 212.582334][ T7461] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 212.676482][ T7461] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 212.759447][ T7463] ubi0: detaching mtd0 [ 212.766724][ T7472] ubi0: background thread "ubi_bgt0d" started, PID 7472 [ 212.834807][ T7463] ubi0: mtd0 is detached [ 215.501284][ T7539] ubi0: attaching mtd0 [ 215.529287][ T7539] ubi0: scanning is finished [ 215.899849][ T7539] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 215.958754][ T7539] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 216.034067][ T7539] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 216.092172][ T7539] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 216.146350][ T7539] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 216.199276][ T7539] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 216.292825][ T7539] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2267757191 [ 216.364546][ T7539] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 216.437318][ T7542] ubi0: detaching mtd0 [ 216.441728][ T7549] ubi0: background thread "ubi_bgt0d" started, PID 7549 [ 216.498987][ T7542] ubi0: mtd0 is detached [ 217.027695][ C0] sd 0:0:1:0: [sda] tag#44 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 217.038370][ C0] sd 0:0:1:0: [sda] tag#44 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 218.676944][ T7575] netlink: 186 bytes leftover after parsing attributes in process `syz.1.332'. [ 219.064033][ T7584] FAULT_INJECTION: forcing a failure. [ 219.064033][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 219.113984][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 219.114007][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.114017][ T7584] Call Trace: [ 219.114022][ T7584] [ 219.114028][ T7584] dump_stack_lvl+0x100/0x190 [ 219.114050][ T7584] should_fail_ex.cold+0x5/0xa [ 219.114070][ T7584] should_failslab+0xc2/0x120 [ 219.114089][ T7584] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.114114][ T7584] ? security_inode_alloc+0x3b/0x2c0 [ 219.114131][ T7584] ? lockdep_init_map_type+0x5c/0x250 [ 219.114158][ T7584] security_inode_alloc+0x3b/0x2c0 [ 219.114176][ T7584] inode_init_always_gfp+0xc77/0xfb0 [ 219.114198][ T7584] alloc_inode+0x8e/0x250 [ 219.114220][ T7584] new_inode+0x22/0x1c0 [ 219.114243][ T7584] nfsd_mkdir+0x78/0x460 [ 219.114267][ T7584] nfsd_fill_super+0x3f9/0x560 [ 219.114292][ T7584] ? __pfx_nfsd_fill_super+0x10/0x10 [ 219.114314][ T7584] get_tree_keyed+0x10e/0x1d0 [ 219.114331][ T7584] vfs_get_tree+0x92/0x320 [ 219.114345][ T7584] path_mount+0x7d0/0x23d0 [ 219.114369][ T7584] ? __pfx_path_mount+0x10/0x10 [ 219.114387][ T7584] ? lockdep_hardirqs_on+0x78/0x100 [ 219.114409][ T7584] ? putname+0xb1/0x110 [ 219.114427][ T7584] ? kmem_cache_free+0x127/0x6c0 [ 219.114455][ T7584] ? __x64_sys_mount+0x293/0x310 [ 219.114474][ T7584] __x64_sys_mount+0x293/0x310 [ 219.114496][ T7584] ? __pfx___x64_sys_mount+0x10/0x10 [ 219.114528][ T7584] ? rcu_is_watching+0x12/0xc0 [ 219.114549][ T7584] do_syscall_64+0x115/0x840 [ 219.114569][ T7584] ? clear_bhb_loop+0x40/0x90 [ 219.114588][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.114603][ T7584] RIP: 0033:0x7fc8a679ce59 [ 219.114616][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.114630][ T7584] RSP: 002b:00007fc8a773f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.114645][ T7584] RAX: ffffffffffffffda RBX: 00007fc8a6a15fa0 RCX: 00007fc8a679ce59 [ 219.114654][ T7584] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 219.114663][ T7584] RBP: 00007fc8a6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 219.114672][ T7584] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 219.114680][ T7584] R13: 00007fc8a6a16038 R14: 00007fc8a6a15fa0 R15: 00007fffaf018158 [ 219.114699][ T7584] [ 222.005155][ T5635] ------------[ cut here ]------------ [ 222.010987][ T5635] ODEBUG: free active (active state 0) object: ffff88807b089438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 222.024581][ T5635] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz-executor/5635 [ 222.035782][ T5635] Modules linked in: [ 222.041021][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 222.051405][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.063345][ T5635] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 222.069442][ T5635] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 22 fe e1 0b 41 56 48 8b 14 dd 40 57 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c 79 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 222.090861][ T5635] RSP: 0018:ffffc9000414f948 EFLAGS: 00010246 [ 222.097505][ T5635] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 222.105925][ T5635] RDX: ffffffff8c1c5680 RSI: ffffffff8c1c52a0 RDI: ffffffff90e1f650 [ 222.114262][ T5635] RBP: 0000000000000001 R08: ffff88807b089438 R09: ffffffff8bb2c6a0 [ 222.123301][ T5635] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c52a0 [ 222.131926][ T5635] R13: ffffffff8bb2c6e0 R14: ffffffff8a9168b0 R15: ffffc9000414fa48 [ 222.141207][ T5635] FS: 0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 222.151852][ T5635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.158538][ T5635] CR2: 0000001b2d318ff8 CR3: 0000000038730000 CR4: 00000000003526f0 [ 222.167050][ T5635] Call Trace: [ 222.170498][ T5635] [ 222.173618][ T5635] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 222.179175][ T5635] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 222.185193][ T5635] debug_check_no_obj_freed+0x4da/0x630 [ 222.190947][ T5635] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 222.197194][ T5635] ? __page_table_check_zero+0x333/0x410 [ 222.203052][ T5635] ? __page_table_check_zero+0x333/0x410 [ 222.209010][ T5635] ? __page_table_check_zero+0x338/0x410 [ 222.214966][ T5635] __free_frozen_pages+0x3fc/0x10a0 [ 222.220726][ T5635] hci_release_dev+0x4ef/0x630 [ 222.227150][ T5635] ? __pfx_hci_release_dev+0x10/0x10 [ 222.232543][ T5635] ? device_release+0x97/0x270 [ 222.237415][ T5635] ? rcu_is_watching+0x12/0xc0 [ 222.243269][ T5635] ? device_release+0x97/0x270 [ 222.248881][ T5635] bt_host_release+0x6a/0xb0 [ 222.253788][ T5635] ? __pfx_bt_host_release+0x10/0x10 [ 222.259357][ T5635] device_release+0xd2/0x270 [ 222.264257][ T5635] kobject_put+0x1f7/0x640 [ 222.269387][ T5635] put_device+0x1f/0x30 [ 222.274175][ T5635] vhci_release+0x185/0x230 [ 222.279236][ T5635] ? __pfx_vhci_release+0x10/0x10 [ 222.284543][ T5635] __fput+0x3ff/0xb50 [ 222.288723][ T5635] task_work_run+0x150/0x240 [ 222.294067][ T5635] ? __pfx_task_work_run+0x10/0x10 [ 222.299469][ T5635] do_exit+0x951/0x2af0 [ 222.304814][ T5635] ? do_raw_spin_lock+0x128/0x260 [ 222.310381][ T5635] ? __pfx_do_exit+0x10/0x10 [ 222.315088][ T5635] ? do_group_exit+0x1bd/0x2a0 [ 222.320051][ T5635] ? rcu_is_watching+0x12/0xc0 [ 222.325017][ T5635] do_group_exit+0xd5/0x2a0 [ 222.329658][ T5635] __x64_sys_exit_group+0x3e/0x50 [ 222.335041][ T5635] x64_sys_call+0x102c/0x1530 [ 222.339894][ T5635] do_syscall_64+0x115/0x840 [ 222.345264][ T5635] ? clear_bhb_loop+0x40/0x90 [ 222.350431][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.356353][ T5635] RIP: 0033:0x7fb8e439ce59 [ 222.360993][ T5635] Code: Unable to access opcode bytes at 0x7fb8e439ce2f. [ 222.368115][ T5635] RSP: 002b:00007fffd63c1508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 222.376614][ T5635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8e439ce59 [ 222.384904][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 222.393501][ T5635] RBP: 00007fb8e4433ca7 R08: 0000000000000000 R09: 00000000000927c0 [ 222.401729][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 222.410075][ T5635] R13: 00000000000927c0 R14: 0000000000036173 R15: 00007fffd63c16c0 [ 222.418401][ T5635] [ 222.421795][ T5635] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.429354][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 222.439082][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.449322][ T5635] Call Trace: [ 222.452705][ T5635] [ 222.455747][ T5635] dump_stack_lvl+0x100/0x190 [ 222.460524][ T5635] vpanic+0x552/0x970 [ 222.464505][ T5635] ? __pfx_vpanic+0x10/0x10 [ 222.469270][ T5635] panic+0xd1/0xe0 [ 222.473561][ T5635] ? __pfx_panic+0x10/0x10 [ 222.478529][ T5635] ? check_panic_on_warn+0x1f/0x90 [ 222.483844][ T5635] check_panic_on_warn.cold+0x19/0x34 [ 222.489637][ T5635] ? debug_print_object+0x18e/0x2a0 [ 222.495377][ T5635] __warn.cold+0x191/0x328 [ 222.499982][ T5635] __report_bug+0x296/0x3d0 [ 222.504525][ T5635] ? debug_print_object+0x18e/0x2a0 [ 222.509824][ T5635] ? __pfx___report_bug+0x10/0x10 [ 222.515053][ T5635] ? __lock_acquire+0x4a5/0x2630 [ 222.520291][ T5635] report_bug_entry+0xe1/0x290 [ 222.525161][ T5635] ? debug_print_object+0x19b/0x2a0 [ 222.530464][ T5635] handle_bug+0x1cd/0x2a0 [ 222.535054][ T5635] exc_invalid_op+0x17/0x50 [ 222.539733][ T5635] asm_exc_invalid_op+0x1a/0x20 [ 222.544867][ T5635] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 222.550805][ T5635] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 22 fe e1 0b 41 56 48 8b 14 dd 40 57 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c 79 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 222.570787][ T5635] RSP: 0018:ffffc9000414f948 EFLAGS: 00010246 [ 222.576856][ T5635] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 222.585262][ T5635] RDX: ffffffff8c1c5680 RSI: ffffffff8c1c52a0 RDI: ffffffff90e1f650 [ 222.594115][ T5635] RBP: 0000000000000001 R08: ffff88807b089438 R09: ffffffff8bb2c6a0 [ 222.602471][ T5635] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c52a0 [ 222.610626][ T5635] R13: ffffffff8bb2c6e0 R14: ffffffff8a9168b0 R15: ffffc9000414fa48 [ 222.619480][ T5635] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 222.625355][ T5635] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 222.631443][ T5635] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 222.637363][ T5635] debug_check_no_obj_freed+0x4da/0x630 [ 222.643109][ T5635] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 222.649171][ T5635] ? __page_table_check_zero+0x333/0x410 [ 222.654815][ T5635] ? __page_table_check_zero+0x333/0x410 [ 222.660509][ T5635] ? __page_table_check_zero+0x338/0x410 [ 222.666264][ T5635] __free_frozen_pages+0x3fc/0x10a0 [ 222.671835][ T5635] hci_release_dev+0x4ef/0x630 [ 222.677100][ T5635] ? __pfx_hci_release_dev+0x10/0x10 [ 222.683055][ T5635] ? device_release+0x97/0x270 [ 222.688006][ T5635] ? rcu_is_watching+0x12/0xc0 [ 222.693138][ T5635] ? device_release+0x97/0x270 [ 222.698174][ T5635] bt_host_release+0x6a/0xb0 [ 222.703056][ T5635] ? __pfx_bt_host_release+0x10/0x10 [ 222.708388][ T5635] device_release+0xd2/0x270 [ 222.713081][ T5635] kobject_put+0x1f7/0x640 [ 222.717727][ T5635] put_device+0x1f/0x30 [ 222.722005][ T5635] vhci_release+0x185/0x230 [ 222.726944][ T5635] ? __pfx_vhci_release+0x10/0x10 [ 222.732052][ T5635] __fput+0x3ff/0xb50 [ 222.736041][ T5635] task_work_run+0x150/0x240 [ 222.740621][ T5635] ? __pfx_task_work_run+0x10/0x10 [ 222.745996][ T5635] do_exit+0x951/0x2af0 [ 222.750176][ T5635] ? do_raw_spin_lock+0x128/0x260 [ 222.755383][ T5635] ? __pfx_do_exit+0x10/0x10 [ 222.760070][ T5635] ? do_group_exit+0x1bd/0x2a0 [ 222.764848][ T5635] ? rcu_is_watching+0x12/0xc0 [ 222.770326][ T5635] do_group_exit+0xd5/0x2a0 [ 222.776590][ T5635] __x64_sys_exit_group+0x3e/0x50 [ 222.781751][ T5635] x64_sys_call+0x102c/0x1530 [ 222.786764][ T5635] do_syscall_64+0x115/0x840 [ 222.791742][ T5635] ? clear_bhb_loop+0x40/0x90 [ 222.796861][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.803101][ T5635] RIP: 0033:0x7fb8e439ce59 [ 222.807972][ T5635] Code: Unable to access opcode bytes at 0x7fb8e439ce2f. [ 222.815669][ T5635] RSP: 002b:00007fffd63c1508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 222.825391][ T5635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8e439ce59 [ 222.833761][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 222.842249][ T5635] RBP: 00007fb8e4433ca7 R08: 0000000000000000 R09: 00000000000927c0 [ 222.850791][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 222.858929][ T5635] R13: 00000000000927c0 R14: 0000000000036173 R15: 00007fffd63c16c0 [ 222.867017][ T5635] [ 222.870195][ T5635] Kernel Offset: disabled [ 222.875111][ T5635] Rebooting in 86400 seconds..