last executing test programs: 12.123787146s ago: executing program 1 (id=329): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/nbd14/sched/write2_next_rq\x00', 0x161100, 0x0) r1 = prctl$auto_PR_SET_SECCOMP(0x16, 0xffffffff, 0x8, 0x4, 0xb3bb) read$auto_vhost_net_fops_net(r1, &(0x7f00000000c0)=""/180, 0xb4) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)=@test={r0, 0x9, 0x6, 0x5, 0x8, 0x2, 0x1, 0x2, 0x88, 0x7530, 0x7ff, 0xf, 0x6, 0x200, 0x800}, 0x44b) 11.546016002s ago: executing program 1 (id=332): r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(r0, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x7c6b00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x34c8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r2, 0x3b8f, r1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) sendmsg$auto_ILA_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r5, 0x6) socket(0x2a, 0xa, 0x2000) close_range$auto(0x2, r3, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) 8.897551387s ago: executing program 3 (id=341): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:03.0/rescan\x00', 0xa001, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xeb\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xda5\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) 8.873659095s ago: executing program 0 (id=342): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200003, 0x13}, 0x803}, 0x7ff, 0x10, 0x0) ioctl$auto(r0, 0x8948, 0x24) 8.723892732s ago: executing program 3 (id=343): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x103c81, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0xb6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20000000000, 0x2, 0xeb1, 0xfffffffffffffffa, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm$auto(0x4, 0x2, 0x7c) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x7) socket(0x2, 0x2, 0x88) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x42000, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x20080, 0x0) unshare$auto(0xa6) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r3, 0x4008af24, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r4, &(0x7f0000000040)={0x0, 0xfffffff5, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40450}, 0x40d8) 7.464945746s ago: executing program 0 (id=345): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000440)={{0x0, 0xffffffffffffffff, 0xee00, 0x6, 0x5, 0x8, 0x4}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0xf, 0x4, 0x101, 0xf, @inferred, @raw=0x9}) unshare$auto(0x1ff) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0xae1000000, 0x4, 0xdf, 0x80000000000eb1, 0xffffffffffffffff, 0x0) move_pages$auto(0x1, 0x1ffffffffffff, 0x0, 0x0, 0x0, 0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b49, 0x9) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000340), 0x109300, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) flock$auto(0xffffffffffffffff, 0xfff) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000240)="8fb683eb7f9f0dcd164f41f4c370b516644589bad93c0babb1370cc74f8e8760939859c749f8a5fe82a9ad45f44a8a03f8f110841aa015fff6e04692a3ab4310d74e24d2437bea20c1177c96f79c229d96cc308a6081db3977432c1bb16ae91480c1f63b75ea91e48e2e46078c7981c1d1716a94a69077bc21f420ff980ae684de9b7c30232d4e777d6c668da69a8d9d11b4c80fd0939f126f2d4687be63a665801c9343e93aeaf4debf30e5efb1922c407ddab4fdb5bec3d9226b67941eeb710fc3e554a000519eac5395f4cc1a197f518ea7cd4371e6f7d34b7bdd08258c7c741c92") ioctl$auto(0x3, 0x541b, 0x7f) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x200, 0x20007, 0x80, 0xb4, 0x401, 0x401) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) pread64$auto(r4, 0x0, 0x20, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) close_range$auto(0x2, 0x8, 0x0) openat2$auto(r1, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x4, 0x9, 0x401}, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmat$auto(0x0, &(0x7f0000000000)='\xfb\x83/\xf2!\xdb\xcf4A\xb9\xf8\x1b\xcd\xb8}\xb85', 0xfffffffa) 6.050137617s ago: executing program 3 (id=346): socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xf, 0xa, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0) (async, rerun: 64) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) (async, rerun: 64) getsockopt$auto_SO_RCVPRIORITY(r0, 0x5, 0x52, &(0x7f0000000400)='/d\x9a\xb0\x00\x003\x1f\xaef\xdc\x82\xe4d\xb4\x84\x94\x05\"\x00\x00\x00\x00\x00\x00\x00a7\xf4\xa6\xb6\x1d\xb1', &(0x7f0000000240)=0x7) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x120800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x0, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x2) (async) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) (async) ioctl$auto(0xffffffffffffffff, 0xab04, 0xffffffffffffffff) (async, rerun: 32) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000380)={0x5, 0xe, 0xec, @lost_msgs={0x5}}) (rerun: 32) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), 0xffffffffffffffff) 5.894761581s ago: executing program 2 (id=347): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x6a102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r1, 0x0, 0x9000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r2, 0x22b, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x14d443, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x10000, 0x0) ioctl$auto(r5, 0xc10c5541, r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/macaddress\x00', 0x800, 0x0) read$auto(r6, 0x0, 0xe8) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x700, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) unshare$auto(0x200) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r8, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) 5.102458841s ago: executing program 2 (id=348): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="940100", @ANYRES16=0x0, @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) epoll_wait$auto(r1, &(0x7f0000000400)={0x1, 0xa}, 0x17a285d3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_BINDTODEVICE(r1, 0x7, 0x19, &(0x7f0000000080)='-\x00', &(0x7f0000000180)=0x10000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x80000010, r2, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) r4 = socket(0x10, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) 4.600840212s ago: executing program 0 (id=349): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0x11) clone$auto(0xffffffffffffff, 0x8001, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = socket(0xa, 0x2, 0x3) unshare$auto(0x40000080) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/003/001\x00', 0x400, 0x0) ioctl$auto(r0, 0x6, r1) ioctl$auto(r2, 0x5523, r2) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x80df, 0x9b72, r2, 0x19c000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0x0, 0x8, 0xa) mlockall$auto(0x800000000000005) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000e80)=""/199, 0xc7) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) read$auto(r6, 0x0, 0x2) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) read$auto(r0, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 3.215405213s ago: executing program 2 (id=354): unshare$auto(0xe) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd1a) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/\xff\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) madvise$auto(0x110d230000, 0x1, 0x9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xe3, 0xeb1, 0x401, 0x8000) r2 = memfd_create$auto(0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) statx$auto(r2, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) 2.936135069s ago: executing program 2 (id=355): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, &(0x7f0000000180)="ac045a3f") r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x6c0902, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getresuid$auto(&(0x7f0000000040)=0x8, &(0x7f0000000080)=0x401, 0xfffffffffffffffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x68400, 0x0) ioctl$auto(r2, 0xc0285629, r2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgsnd$auto(0x4, 0x0, 0x9, 0x5) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) 2.46565172s ago: executing program 3 (id=356): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x303, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) write$auto(0x3, 0x0, 0x100082) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) (async) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) (async) getsockopt$auto_SO_TIMESTAMPNS_OLD(r0, 0x1, 0x23, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', &(0x7f00000000c0)) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) unshare$auto(0x40000080) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) (async) socket(0xa, 0x3, 0x3b) (async) read$auto(0xffffffffffffffff, 0x0, 0x10001) (async) socket(0x2b, 0x1, 0x1) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, 0x0, 0x0) 2.309768112s ago: executing program 0 (id=357): mmap$auto(0x0, 0x20009, 0xdf, 0xeb0, 0x401, 0x8000) (async) socket(0x2, 0x80002, 0x73) r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x40, 0x0) pread64$auto(r0, 0x0, 0x3, 0xfdd) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0) sysfs$auto(0x2, 0x23, 0x1000) (async) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/175, 0xaf) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x10b142, 0x0) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x83, 0x0, 0x0) 2.13219467s ago: executing program 1 (id=358): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8", 0x3d) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e25, @remote}, 0x6d) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80009, 0x0, 0x1, 0x0, 0x4, 0x9}, 0x3}, 0x3, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xff, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xca, &(0x7f0000000100)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0xb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x7) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.025581472s ago: executing program 2 (id=359): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.10/power/runtime_status\x00', 0xc2002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002980)=""/4075, 0xfeb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) truncate$auto(0x0, 0x6) 1.91202511s ago: executing program 3 (id=360): r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(r0, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x7c6b00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x34c8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r2, 0x3b8f, r1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) sendmsg$auto_ILA_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r5, 0x6) socket(0x2a, 0xa, 0x2000) close_range$auto(0x2, r3, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) 1.298255165s ago: executing program 0 (id=361): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000180)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r3 = prctl$auto(0x3, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x7f, 0x9e3, 0xeb1, 0xffffffffffffffff, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x4, 0x10, 0xf8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x5, 0x10, 0x101, 0x40eb1, r3, 0x2) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x200, 0x101) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) socket(0x0, 0x2, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) 298.564068ms ago: executing program 1 (id=362): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000003c0)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0xe, 0x0, 0x20) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) pivot_root$auto(&(0x7f00000001c0)='((:\x00', &(0x7f0000000200)='nfsd\x00') mq_timedsend$auto(r2, &(0x7f0000000240)=')\x00', 0x7, 0x2, &(0x7f0000000280)={0x2, 0xffff}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r5, @ANYBLOB="000228bd7000fedbdf2587000000060014010400000029b75eaaf4bceb29f2e294e80c56cf3000420b41dc77b308e7f76d5a9036da07ae4d3950bffaa557b3222b3058dd1b100552815a830551debcbe6c109dd416cba325442eae1ea76e98f776fce69604a332b610d6eec5385f250be62d2ba60ad077cccc88c9e73651ec1b4ed91e594e3585e2d223e085ffd1c5cc578b076b29dab4df430094936ed7f1f891712cdcbed491ee4e7c136ea8c4dbc37c0c8993eb053d00807d43229c7f2b"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0xc084) mmap$auto(0x1bb, 0x7ffffffe, 0x200, 0x16, r0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r4) r6 = socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r6, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, 0x0, 0x12, 0x70bd29, 0x25dfdbfe, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0xf3, 0x0, "b2f931700db9029036b7ddc6b8176057f9a80ef9839fe1fab3d164750d1aa15415855b1486035a33a47d807db608f06e25697bd77fc45e549da3ba17b4c0db128ab4b23957df10cdb532ca8a52cbd783d9877df7d149d3ca3d3a8a6a9ecccea748635c44adbfa2b480ff092b778b19f3e82dfe3ac267789c8591fbf58b7b0f11629f2d064443d96db2724e6d6be5213d3790163717f36860931b5602d49a4864649ca319389abd9fd439eee3595724f32d0e4c441074710072d2ef4be8f44265fceec475c5a945d4e716334df49106a6c2c6e96d4ba6a0c5c924a7ce3359a2560656d8f1be83a5e56062268aab3cc3"}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x44000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) 0s ago: executing program 0 (id=363): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r0, 0x4004550f, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptyzd/power/control\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001180)=""/187, 0xbb) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_expire_count\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/64, 0x40) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000580)={0x2, @inferred=r1, @inferred, 0x7f, 0x3, '\x00', {0x7, 0x0, 0xbd, 0xee01, 0xee00, 0x0, 0xffff, 0x0, {0x0, 0xab7}, {0x4}, {0x4, 0xffff}, 0x4, 0x7fff, 0xe62f, 0x3, 0x1, 0x8, 0x6, 0xe, 0x2, 0x1, '\x00', 0xe, 0x7f, 0xac00, 0xf800}}) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x80701, 0x0) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0xa, 0x8e, 0xd, 0xfffffffffffff800, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0xbe, 0x1000, 0x0, 0x0, 0x0, 0xfa94, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x10000005, 0x0, 0x7, 0x4, 0x3}) mmap$auto(0x8a19, 0x6, 0xdf, 0x2000000000000eb1, 0x40000000000a5, 0x48000) r4 = socket(0xa, 0x3, 0x3b) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) write$auto(0xffffffffffffffff, &(0x7f0000000300)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k#gL~^\xf8y\x10S\xa4\x03n\xe4\xcb@\xf0Yk\xaf\xe3\x9c\xf5\xdaD\x155\xeb\f*\xc8\xdfY\xe8\xfbn\xffZ\xff\x9a\xb7K;6\x1f\x8b\xc4At\xaa\x15\xa7\x83\xd9\xd5HpOX\x97IU16\x1b\xe8\x86X\x1a\x9f+J~\xa9 ?\rN\x9dL\b\x9b=\x00\x12y+\x13d\x12Vk\xa6\x02v\xe6\xd6q\xce\xae\x9f\x1b\x0fAC\x0fT\xf1\xb6F\xa7B\x02', 0x83) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_register$auto_IORING_UNREGISTER_FILES(r3, 0x3, &(0x7f0000000380)="f8294d62a128d6117e9af9e9c643e8583334ff2f38cbb48a63ae78c3c1d549b0b296266d83649cc92ba0adfc083e1f92cf032e588be5cb774ae2d654bddbbdbfb9f54429a157258f9f4de169b76ca32bc2bb4641402f25db33a8a7f6ec6e70d42be1c08172bd5604acc56f1b9d02f9dd292f278bebb728f6d7b0a5d6749c21c8697af8526655cac63f98099f13", 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x400b02, 0x0) mkdir$auto(&(0x7f0000000480)='}[,&*}\x00', 0x8005) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) sendfile$auto(r6, 0x3, 0x0, 0xc01) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000640)='nfsd\x00\vz\xb4~h\x14#\x0eG\xc7\xbfc\xdaX\xabj\xcbEj\xc5\xc8\x13M\xe7\x18P\x01y\xcbXy\xf3\x9d\x96\xb1\xf9\xa3X\xd5\x19\x15A\b\x17\xb8~\x9a\x18\x9b\xe4+X\xee[iU ?\x12\xe8L\xd9\xe3\xaf\xa4}\x02\x18r\x1d\v\x888\xdc;\x0fn\xbdC\x0e\x18\x1aT\xc2^\x13m\xcf\"\xf4\x80\x7f\xc1\a:9\ns\xea\x059tj\x89\xafc\xe9\x19\xe8D\xd6\xf4\xc0i0\x93\x1e,\xeeC\x89f*\x8e(Z\xc5\xff\xa19_\x94\xfemU\xb0\x8b\x17`\x84m\xaaY\x8d\x80\x8cC!\xb09~]E\xac)\xb9 u\xfe\xed\xeb\x99&\x8dCI\xa5\x81\x97!\x9dk\xcbK\xb1\xe1\x17\xd9mC\xc3\xcd\xb7!\xf2\xcf\x16\xf1(k\x8f\x01;.b\x85u\xd6\xf1\x86\xb85\xc8\xed\xffB5\x10\x95\xaf\x8e\xc5\x99\x9f\x9dDr.\x9e\xa84;\xf9\xcaj\xb0\a\xb3\x9c$@\xb3\nG\xe9\x15\x14u\xaa\xc2.g\xe9\xd2\xd1\"\xda|\x8c\x92\xf2;qGj[\xde^\xb4\xe2\x13\xd7\xd3\xa4lm~\xe2\xeb\xf0\xe8\xbc\x1b\xe7\xf7\x18\x8993w\x8d\xc6Y\xfa%\xac\xb9F\xa2\xa1X\xbd[\x1a0\x18\x01\xdcZ\x1b2\xb1\x8b\tv\x91\xe6\xec+\rB\xb8_\xcai\x8ec\xd5\x11\x9d\xef\x9aa\xf0\x9c\xccJa\xf2\x11A\x11cmE\xd9\xf9\x1d\x1ak\xce\x173HR2\xf7\x9f\f\x1e3o\xde\x90\xf4\xb4\x82\x9cS\x175\xe4\x19\xad\xebGUu\"t\xe3\xa5\xd1\xdf\x03\xbct;W\xb9[Q7\xa4&\xe6\xd8\xa9\xa8q\xc1\xad\xba\xe7\x03o\x8d\x88\x9d\x003\x16\xee\xeb^,%', 0x11, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 91.104113][ T5819] cgroup: Unknown subsys name 'net' [ 91.224618][ T5819] cgroup: Unknown subsys name 'cpuset' [ 91.233598][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.211384][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.629365][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.637975][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.647081][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.654569][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.655258][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.670028][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.677669][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.687965][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.689445][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.696141][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.705673][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.717106][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.720911][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.724984][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.738857][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.740771][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.750783][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.755371][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.767678][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.776847][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.399805][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 96.437437][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.557806][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 96.588512][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 96.730503][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.738319][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.746452][ T5828] bridge_slave_0: entered allmulticast mode [ 96.753689][ T5828] bridge_slave_0: entered promiscuous mode [ 96.787374][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.795206][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.802907][ T5831] bridge_slave_0: entered allmulticast mode [ 96.810205][ T5831] bridge_slave_0: entered promiscuous mode [ 96.819109][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.826854][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.834148][ T5828] bridge_slave_1: entered allmulticast mode [ 96.841428][ T5828] bridge_slave_1: entered promiscuous mode [ 96.859658][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.866889][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.874235][ T5831] bridge_slave_1: entered allmulticast mode [ 96.881511][ T5831] bridge_slave_1: entered promiscuous mode [ 96.966384][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.976219][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.983453][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.990784][ T5829] bridge_slave_0: entered allmulticast mode [ 96.998140][ T5829] bridge_slave_0: entered promiscuous mode [ 97.034233][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.044073][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.051371][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.058529][ T5829] bridge_slave_1: entered allmulticast mode [ 97.066729][ T5829] bridge_slave_1: entered promiscuous mode [ 97.073585][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.081111][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.088382][ T5830] bridge_slave_0: entered allmulticast mode [ 97.096234][ T5830] bridge_slave_0: entered promiscuous mode [ 97.106371][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.139672][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.147226][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.154671][ T5830] bridge_slave_1: entered allmulticast mode [ 97.162242][ T5830] bridge_slave_1: entered promiscuous mode [ 97.171700][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.230142][ T5828] team0: Port device team_slave_0 added [ 97.239875][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.278355][ T5828] team0: Port device team_slave_1 added [ 97.291156][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.314729][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.325827][ T5831] team0: Port device team_slave_0 added [ 97.351099][ T24] cfg80211: failed to load regulatory.db [ 97.378957][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.389860][ T5831] team0: Port device team_slave_1 added [ 97.409097][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.416373][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.443016][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.456663][ T5829] team0: Port device team_slave_0 added [ 97.488356][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.495641][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.521842][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.535579][ T5829] team0: Port device team_slave_1 added [ 97.554704][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.561943][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.588186][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.621591][ T5830] team0: Port device team_slave_0 added [ 97.628229][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.635429][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.662076][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.697911][ T5830] team0: Port device team_slave_1 added [ 97.731126][ T5837] Bluetooth: hci3: command tx timeout [ 97.751650][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.758638][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.785899][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.799177][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.806502][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.832811][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.832853][ T5837] Bluetooth: hci0: command tx timeout [ 97.845083][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.849546][ T5837] Bluetooth: hci1: command tx timeout [ 97.856072][ T5844] Bluetooth: hci2: command tx timeout [ 97.856707][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.893830][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.935666][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.943021][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.969116][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.992712][ T5828] hsr_slave_0: entered promiscuous mode [ 97.999164][ T5828] hsr_slave_1: entered promiscuous mode [ 98.024140][ T5831] hsr_slave_0: entered promiscuous mode [ 98.030704][ T5831] hsr_slave_1: entered promiscuous mode [ 98.036995][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 98.042968][ T5831] Cannot create hsr debugfs directory [ 98.150152][ T5829] hsr_slave_0: entered promiscuous mode [ 98.156749][ T5829] hsr_slave_1: entered promiscuous mode [ 98.163097][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 98.168926][ T5829] Cannot create hsr debugfs directory [ 98.186588][ T5830] hsr_slave_0: entered promiscuous mode [ 98.193083][ T5830] hsr_slave_1: entered promiscuous mode [ 98.199427][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 98.205478][ T5830] Cannot create hsr debugfs directory [ 98.662606][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.678025][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.688609][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.713187][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.789756][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.804684][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.825568][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.846653][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.926219][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.945982][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.957180][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.967711][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.118486][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.146397][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.161484][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.185363][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.207717][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.291333][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.313193][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.344672][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.352126][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.365975][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.373201][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.394545][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.436070][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.473395][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.488834][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.496153][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.527251][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.534430][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.544710][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.551869][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.586715][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.594044][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.613671][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.665019][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.777625][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.811279][ T5837] Bluetooth: hci3: command tx timeout [ 99.852156][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.859327][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.888323][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.890466][ T5837] Bluetooth: hci1: command tx timeout [ 99.895540][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.908644][ T5837] Bluetooth: hci2: command tx timeout [ 99.914324][ T5837] Bluetooth: hci0: command tx timeout [ 100.325045][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.407520][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.433351][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.518230][ T5831] veth0_vlan: entered promiscuous mode [ 100.539993][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.585198][ T5831] veth1_vlan: entered promiscuous mode [ 100.631528][ T5830] veth0_vlan: entered promiscuous mode [ 100.646168][ T5828] veth0_vlan: entered promiscuous mode [ 100.671275][ T5830] veth1_vlan: entered promiscuous mode [ 100.698218][ T5828] veth1_vlan: entered promiscuous mode [ 100.727735][ T5831] veth0_macvtap: entered promiscuous mode [ 100.748413][ T5829] veth0_vlan: entered promiscuous mode [ 100.756991][ T5831] veth1_macvtap: entered promiscuous mode [ 100.801971][ T5828] veth0_macvtap: entered promiscuous mode [ 100.819108][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.835001][ T5830] veth0_macvtap: entered promiscuous mode [ 100.847851][ T5828] veth1_macvtap: entered promiscuous mode [ 100.862505][ T5829] veth1_vlan: entered promiscuous mode [ 100.873239][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.901713][ T5830] veth1_macvtap: entered promiscuous mode [ 100.911592][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.921892][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.934281][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.960651][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.983464][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.001884][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.026997][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.044075][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.066421][ T5829] veth0_macvtap: entered promiscuous mode [ 101.083056][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.092841][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102979][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.112390][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.133024][ T5829] veth1_macvtap: entered promiscuous mode [ 101.143717][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.152784][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.185772][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.196836][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.212199][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.221700][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.244669][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.287360][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.295498][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.304918][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.321762][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.332174][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.373276][ T151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.389146][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.474025][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.546016][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.557883][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.566309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.575366][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.673431][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.691934][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.748581][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.757286][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.795749][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.824501][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.890947][ T5837] Bluetooth: hci3: command tx timeout [ 101.894769][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.950925][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.970721][ T5837] Bluetooth: hci2: command tx timeout [ 101.971228][ T52] Bluetooth: hci1: command tx timeout [ 101.976196][ T5837] Bluetooth: hci0: command tx timeout [ 102.380959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.389701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.400123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.512428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.880988][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 103.952239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.970669][ T5837] Bluetooth: hci3: command tx timeout [ 104.050518][ T5837] Bluetooth: hci1: command tx timeout [ 104.051292][ T52] Bluetooth: hci2: command tx timeout [ 104.055992][ T5837] Bluetooth: hci0: command tx timeout [ 104.127786][ T5956] binder: 5947:5956 ioctl c018620c 0 returned -1 [ 104.164640][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.059556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! syzkaller syzkaller login: [ 106.680668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.689611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.699604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 106.709227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.894656][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 108.355971][ T52] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 108.498783][ T6003] WARNING! power/level is deprecated; use power/control instead [ 108.782009][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 111.930733][ T6036] zero sized request [ 112.069861][ T6039] vhci_hcd: invalid port number 9 [ 112.624648][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 113.793960][ T6058] hub 8-0:1.0: USB hub found [ 113.804100][ T6058] hub 8-0:1.0: 1 port detected [ 113.828245][ T6058] random: crng reseeded on system resumption [ 114.001958][ T6063] i2c i2c-0: new_device: Invalid device name [ 114.146786][ T52] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 115.348210][ T6072] syz.3.32 (6072) used greatest stack depth: 19720 bytes left [ 115.534565][ T6080] FAULT_INJECTION: forcing a failure. [ 115.534565][ T6080] name failslab, interval 1, probability 0, space 0, times 1 [ 115.590063][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 115.590106][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.590125][ T6080] Call Trace: [ 115.590136][ T6080] [ 115.590148][ T6080] dump_stack_lvl+0x16c/0x1f0 [ 115.590188][ T6080] should_fail_ex+0x512/0x640 [ 115.590236][ T6080] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 115.590277][ T6080] should_failslab+0xc2/0x120 [ 115.590314][ T6080] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 115.590351][ T6080] ? xfrm_sysctl_init+0x10a/0x2d0 [ 115.590405][ T6080] ? kmemdup_noprof+0x29/0x60 [ 115.590434][ T6080] kmemdup_noprof+0x29/0x60 [ 115.590466][ T6080] xfrm_sysctl_init+0x10a/0x2d0 [ 115.590516][ T6080] xfrm_net_init+0x842/0xcc0 [ 115.590564][ T6080] ? __pfx_xfrm_net_init+0x10/0x10 [ 115.590604][ T6080] ops_init+0x1e2/0x5f0 [ 115.590635][ T6080] setup_net+0x100/0x390 [ 115.590674][ T6080] ? __pfx_setup_net+0x10/0x10 [ 115.590703][ T6080] ? debug_mutex_init+0x37/0x70 [ 115.590737][ T6080] copy_net_ns+0x2f8/0x690 [ 115.590770][ T6080] create_new_namespaces+0x3ea/0xa90 [ 115.590809][ T6080] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 115.590842][ T6080] ksys_unshare+0x45b/0xa40 [ 115.590888][ T6080] ? __pfx_ksys_unshare+0x10/0x10 [ 115.590924][ T6080] ? xfd_validate_state+0x61/0x180 [ 115.590974][ T6080] __x64_sys_unshare+0x31/0x40 [ 115.591006][ T6080] do_syscall_64+0xcd/0xfa0 [ 115.591037][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.591063][ T6080] RIP: 0033:0x7f513df8efc9 [ 115.591087][ T6080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.591112][ T6080] RSP: 002b:00007f513edaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.591138][ T6080] RAX: ffffffffffffffda RBX: 00007f513e1e6090 RCX: 00007f513df8efc9 [ 115.591157][ T6080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 115.591173][ T6080] RBP: 00007f513e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 115.591191][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.591207][ T6080] R13: 00007f513e1e6128 R14: 00007f513e1e6090 R15: 00007ffdc1296868 [ 115.591247][ T6080] [ 115.812736][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.960725][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 126.739754][ T6204] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.960690][ T6212] mmap: syz.0.60 (6212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.510850][ T6283] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.096148][ T6292] random: crng reseeded on system resumption [ 133.719954][ T6300] mkiss: ax0: crc mode is auto. [ 133.868439][ T6300] capability: warning: `syz.0.78' uses 32-bit capabilities (legacy support in use) [ 133.987018][ T6300] mkiss: ax0: crc mode is auto. [ 134.514329][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 135.482751][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 135.516527][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 135.989479][ T6316] Zero length message leads to an empty skb [ 136.715434][ T6338] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.833998][ T6343] FAULT_INJECTION: forcing a failure. [ 136.833998][ T6343] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.872369][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(full) [ 136.872404][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.872414][ T6343] Call Trace: [ 136.872420][ T6343] [ 136.872427][ T6343] dump_stack_lvl+0x16c/0x1f0 [ 136.872452][ T6343] should_fail_ex+0x512/0x640 [ 136.872484][ T6343] strncpy_from_user+0x3b/0x2e0 [ 136.872512][ T6343] getname_flags.part.0+0x8f/0x550 [ 136.872543][ T6343] getname_flags+0x93/0xf0 [ 136.872562][ T6343] do_sys_openat2+0xb8/0x1d0 [ 136.872588][ T6343] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.872624][ T6343] __x64_sys_openat+0x174/0x210 [ 136.872652][ T6343] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.872688][ T6343] do_syscall_64+0xcd/0xfa0 [ 136.872710][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.872727][ T6343] RIP: 0033:0x7f513df8efc9 [ 136.872742][ T6343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.872759][ T6343] RSP: 002b:00007f513edd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.872777][ T6343] RAX: ffffffffffffffda RBX: 00007f513e1e5fa0 RCX: 00007f513df8efc9 [ 136.872788][ T6343] RDX: 0000000000000441 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 136.872798][ T6343] RBP: 00007f513e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.872808][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.872818][ T6343] R13: 00007f513e1e6038 R14: 00007f513e1e5fa0 R15: 00007ffdc1296868 [ 136.872841][ T6343] [ 137.035680][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.007680][ T6360] random: crng reseeded on system resumption [ 138.298287][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.307291][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.371807][ T6364] FAULT_INJECTION: forcing a failure. [ 138.371807][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 138.402444][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(full) [ 138.402484][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.402500][ T6364] Call Trace: [ 138.402510][ T6364] [ 138.402522][ T6364] dump_stack_lvl+0x16c/0x1f0 [ 138.402560][ T6364] should_fail_ex+0x512/0x640 [ 138.402601][ T6364] ? __kmalloc_noprof+0xca/0x880 [ 138.402649][ T6364] should_failslab+0xc2/0x120 [ 138.402688][ T6364] __kmalloc_noprof+0xdd/0x880 [ 138.402731][ T6364] ? anon_vma_name_alloc+0x56/0x110 [ 138.402778][ T6364] ? anon_vma_name_alloc+0x56/0x110 [ 138.402816][ T6364] anon_vma_name_alloc+0x56/0x110 [ 138.402857][ T6364] set_anon_vma_name+0x21b/0x4b0 [ 138.402901][ T6364] ? __pfx_set_anon_vma_name+0x10/0x10 [ 138.402945][ T6364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.402994][ T6364] ? cap_task_prctl+0x2af/0xa80 [ 138.403035][ T6364] ? static_key_count+0x5a/0x70 [ 138.403071][ T6364] ? security_task_prctl+0x11c/0x160 [ 138.403113][ T6364] __do_sys_prctl+0xab0/0x2250 [ 138.403160][ T6364] ? __pfx___do_sys_prctl+0x10/0x10 [ 138.403227][ T6364] do_syscall_64+0xcd/0xfa0 [ 138.403264][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.403291][ T6364] RIP: 0033:0x7f3d79b8efc9 [ 138.403313][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.403339][ T6364] RSP: 002b:00007f3d7a969038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 138.403366][ T6364] RAX: ffffffffffffffda RBX: 00007f3d79de5fa0 RCX: 00007f3d79b8efc9 [ 138.403386][ T6364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 138.403403][ T6364] RBP: 00007f3d7a969090 R08: 0000000000000002 R09: 0000000000000000 [ 138.403420][ T6364] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 138.403436][ T6364] R13: 00007f3d79de6038 R14: 00007f3d79de5fa0 R15: 00007ffce82f3e98 [ 138.403481][ T6364] [ 138.596776][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.632490][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 140.662797][ T6398] FAULT_INJECTION: forcing a failure. [ 140.662797][ T6398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.690703][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.3.99 Not tainted syzkaller #0 PREEMPT(full) [ 140.690741][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.690757][ T6398] Call Trace: [ 140.690767][ T6398] [ 140.690779][ T6398] dump_stack_lvl+0x16c/0x1f0 [ 140.690816][ T6398] should_fail_ex+0x512/0x640 [ 140.690864][ T6398] _copy_from_user+0x2e/0xd0 [ 140.690908][ T6398] get_user_cpu_mask+0x40/0x80 [ 140.690948][ T6398] __x64_sys_sched_setaffinity+0xd4/0x140 [ 140.690984][ T6398] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 140.691022][ T6398] ? rcu_is_watching+0x12/0xc0 [ 140.691057][ T6398] do_syscall_64+0xcd/0xfa0 [ 140.691092][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.691122][ T6398] RIP: 0033:0x7f3d79b8efc9 [ 140.691145][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.691170][ T6398] RSP: 002b:00007f3d7a948038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 140.691197][ T6398] RAX: ffffffffffffffda RBX: 00007f3d79de6090 RCX: 00007f3d79b8efc9 [ 140.691216][ T6398] RDX: 0000200000000240 RSI: 0000000000000004 RDI: 000000000000006b [ 140.691233][ T6398] RBP: 00007f3d7a948090 R08: 0000000000000000 R09: 0000000000000000 [ 140.691250][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.691266][ T6398] R13: 00007f3d79de6128 R14: 00007f3d79de6090 R15: 00007ffce82f3e98 [ 140.691303][ T6398] [ 140.848456][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.140947][ T6396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.670959][ T6415] random: crng reseeded on system resumption [ 141.872449][ T6424] FAULT_INJECTION: forcing a failure. [ 141.872449][ T6424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.907270][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 141.907308][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.907324][ T6424] Call Trace: [ 141.907333][ T6424] [ 141.907345][ T6424] dump_stack_lvl+0x16c/0x1f0 [ 141.907383][ T6424] should_fail_ex+0x512/0x640 [ 141.907430][ T6424] _copy_to_user+0x32/0xd0 [ 141.907478][ T6424] simple_read_from_buffer+0xcb/0x170 [ 141.907527][ T6424] proc_fail_nth_read+0x197/0x240 [ 141.907561][ T6424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.907596][ T6424] ? rw_verify_area+0xcf/0x6c0 [ 141.907622][ T6424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.907651][ T6424] vfs_read+0x1e4/0xcf0 [ 141.907687][ T6424] ? __pfx___mutex_lock+0x10/0x10 [ 141.907722][ T6424] ? __pfx_vfs_read+0x10/0x10 [ 141.907765][ T6424] ? __fget_files+0x20e/0x3c0 [ 141.907792][ T6424] ? jump_label_swap+0x170/0x180 [ 141.907844][ T6424] ksys_read+0x12a/0x250 [ 141.907873][ T6424] ? __pfx_ksys_read+0x10/0x10 [ 141.907914][ T6424] do_syscall_64+0xcd/0xfa0 [ 141.907949][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.907980][ T6424] RIP: 0033:0x7f128098d9dc [ 141.908003][ T6424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.908031][ T6424] RSP: 002b:00007f128188f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.908059][ T6424] RAX: ffffffffffffffda RBX: 00007f1280be5fa0 RCX: 00007f128098d9dc [ 141.908077][ T6424] RDX: 000000000000000f RSI: 00007f128188f0a0 RDI: 0000000000000003 [ 141.908094][ T6424] RBP: 00007f128188f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.908111][ T6424] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 141.908127][ T6424] R13: 00007f1280be6038 R14: 00007f1280be5fa0 R15: 00007fffa5943548 [ 141.908167][ T6424] [ 142.311798][ T6426] 4fRd: entered promiscuous mode [ 142.723202][ T6438] ubi0: attaching mtd0 [ 142.735308][ T6438] FAULT_INJECTION: forcing a failure. [ 142.735308][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 142.799963][ T6440] FAULT_INJECTION: forcing a failure. [ 142.799963][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.813506][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 142.813546][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.813565][ T6438] Call Trace: [ 142.813575][ T6438] [ 142.813586][ T6438] dump_stack_lvl+0x16c/0x1f0 [ 142.813626][ T6438] should_fail_ex+0x512/0x640 [ 142.813670][ T6438] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 142.813706][ T6438] should_failslab+0xc2/0x120 [ 142.813746][ T6438] kmem_cache_alloc_noprof+0x75/0x6e0 [ 142.813772][ T6438] ? __pfx_ubi_io_read+0x10/0x10 [ 142.813810][ T6438] ? add_to_list+0xcc/0x5a0 [ 142.813858][ T6438] ? add_to_list+0xcc/0x5a0 [ 142.813894][ T6438] add_to_list+0xcc/0x5a0 [ 142.813931][ T6438] ? ubi_io_read_ec_hdr+0x252/0x6c0 [ 142.813970][ T6438] ubi_attach+0x905/0x4be0 [ 142.814034][ T6438] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.814077][ T6438] ? __pfx_ubi_msg+0x10/0x10 [ 142.814105][ T6438] ? __pfx_ubi_attach+0x10/0x10 [ 142.814157][ T6438] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 142.814197][ T6438] ? __vmalloc_node_noprof+0xad/0xf0 [ 142.814238][ T6438] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 142.814270][ T6438] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 142.814321][ T6438] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 142.814349][ T6438] ? __pfx_get_mtd_device+0x10/0x10 [ 142.814399][ T6438] ctrl_cdev_ioctl+0x337/0x3d0 [ 142.814429][ T6438] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 142.814470][ T6438] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 142.814500][ T6438] __x64_sys_ioctl+0x18e/0x210 [ 142.814547][ T6438] do_syscall_64+0xcd/0xfa0 [ 142.814582][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.814612][ T6438] RIP: 0033:0x7f513df8efc9 [ 142.814638][ T6438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.814665][ T6438] RSP: 002b:00007f513edd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.814695][ T6438] RAX: ffffffffffffffda RBX: 00007f513e1e5fa0 RCX: 00007f513df8efc9 [ 142.814715][ T6438] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000006 [ 142.814734][ T6438] RBP: 00007f513e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.814752][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.814768][ T6438] R13: 00007f513e1e6038 R14: 00007f513e1e5fa0 R15: 00007ffdc1296868 [ 142.814811][ T6438] [ 143.065293][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) [ 143.065330][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.065341][ T6440] Call Trace: [ 143.065348][ T6440] [ 143.065355][ T6440] dump_stack_lvl+0x16c/0x1f0 [ 143.065380][ T6440] should_fail_ex+0x512/0x640 [ 143.065413][ T6440] _copy_to_user+0x32/0xd0 [ 143.065446][ T6440] __x64_sys_cachestat+0x302/0x5f0 [ 143.065472][ T6440] ? __pfx___x64_sys_cachestat+0x10/0x10 [ 143.065501][ T6440] ? keyctl_keyring_clear+0xb8/0x1a0 [ 143.065531][ T6440] do_syscall_64+0xcd/0xfa0 [ 143.065554][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.065573][ T6440] RIP: 0033:0x7f128098efc9 [ 143.065588][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.065605][ T6440] RSP: 002b:00007f128188f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 143.065623][ T6440] RAX: ffffffffffffffda RBX: 00007f1280be5fa0 RCX: 00007f128098efc9 [ 143.065635][ T6440] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000006 [ 143.065645][ T6440] RBP: 00007f128188f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.065655][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.065666][ T6440] R13: 00007f1280be6038 R14: 00007f1280be5fa0 R15: 00007fffa5943548 [ 143.065688][ T6440] [ 143.451735][ T6451] FAULT_INJECTION: forcing a failure. [ 143.451735][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 143.548962][ T6451] CPU: 0 UID: 0 PID: 6451 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 143.548988][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.548998][ T6451] Call Trace: [ 143.549004][ T6451] [ 143.549011][ T6451] dump_stack_lvl+0x16c/0x1f0 [ 143.549036][ T6451] should_fail_ex+0x512/0x640 [ 143.549064][ T6451] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 143.549089][ T6451] should_failslab+0xc2/0x120 [ 143.549115][ T6451] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 143.549136][ T6451] ? sched_setaffinity+0x265/0x400 [ 143.549161][ T6451] ? sched_setaffinity+0x265/0x400 [ 143.549187][ T6451] sched_setaffinity+0x265/0x400 [ 143.549216][ T6451] ? __pfx_sched_setaffinity+0x10/0x10 [ 143.549251][ T6451] ? _copy_from_user+0x59/0xd0 [ 143.549287][ T6451] __x64_sys_sched_setaffinity+0x116/0x140 [ 143.549309][ T6451] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 143.549333][ T6451] ? rcu_is_watching+0x12/0xc0 [ 143.549354][ T6451] do_syscall_64+0xcd/0xfa0 [ 143.549376][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.549395][ T6451] RIP: 0033:0x7f9527b8efc9 [ 143.549410][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.549456][ T6451] RSP: 002b:00007f9528a11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 143.549474][ T6451] RAX: ffffffffffffffda RBX: 00007f9527de6090 RCX: 00007f9527b8efc9 [ 143.549485][ T6451] RDX: 0000200000000240 RSI: 0000000000000004 RDI: 000000000000007b [ 143.549496][ T6451] RBP: 00007f9528a11090 R08: 0000000000000000 R09: 0000000000000000 [ 143.549506][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.549516][ T6451] R13: 00007f9527de6128 R14: 00007f9527de6090 R15: 00007fff96eb35b8 [ 143.549539][ T6451] [ 144.124729][ T6438] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 145.185656][ T6469] sd 0:0:1:0: PR command failed: 1026 [ 145.209995][ T6469] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 145.220633][ T6469] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 145.313523][ T6488] random: crng reseeded on system resumption [ 145.767655][ T6499] FAULT_INJECTION: forcing a failure. [ 145.767655][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.874163][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT(full) [ 145.874202][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.874218][ T6499] Call Trace: [ 145.874228][ T6499] [ 145.874238][ T6499] dump_stack_lvl+0x16c/0x1f0 [ 145.874275][ T6499] should_fail_ex+0x512/0x640 [ 145.874320][ T6499] _copy_to_user+0x32/0xd0 [ 145.874364][ T6499] simple_read_from_buffer+0xcb/0x170 [ 145.874409][ T6499] proc_fail_nth_read+0x197/0x240 [ 145.874439][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.874470][ T6499] ? rw_verify_area+0xcf/0x6c0 [ 145.874492][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.874520][ T6499] vfs_read+0x1e4/0xcf0 [ 145.874556][ T6499] ? __pfx___mutex_lock+0x10/0x10 [ 145.874588][ T6499] ? __pfx_vfs_read+0x10/0x10 [ 145.874629][ T6499] ? __fget_files+0x20e/0x3c0 [ 145.874671][ T6499] ksys_read+0x12a/0x250 [ 145.874698][ T6499] ? __pfx_ksys_read+0x10/0x10 [ 145.874737][ T6499] do_syscall_64+0xcd/0xfa0 [ 145.874770][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.874797][ T6499] RIP: 0033:0x7f513df8d9dc [ 145.874821][ T6499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.874845][ T6499] RSP: 002b:00007f513edd0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.874873][ T6499] RAX: ffffffffffffffda RBX: 00007f513e1e5fa0 RCX: 00007f513df8d9dc [ 145.874891][ T6499] RDX: 000000000000000f RSI: 00007f513edd00a0 RDI: 0000000000000007 [ 145.874907][ T6499] RBP: 00007f513edd0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.874922][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.874936][ T6499] R13: 00007f513e1e6038 R14: 00007f513e1e5fa0 R15: 00007ffdc1296868 [ 145.874975][ T6499] [ 146.528498][ T6510] FAULT_INJECTION: forcing a failure. [ 146.528498][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.646732][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 146.646770][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.646786][ T6510] Call Trace: [ 146.646795][ T6510] [ 146.646806][ T6510] dump_stack_lvl+0x16c/0x1f0 [ 146.646844][ T6510] should_fail_ex+0x512/0x640 [ 146.646892][ T6510] _copy_to_user+0x32/0xd0 [ 146.646940][ T6510] simple_read_from_buffer+0xcb/0x170 [ 146.646990][ T6510] proc_fail_nth_read+0x197/0x240 [ 146.647023][ T6510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.647057][ T6510] ? rw_verify_area+0xcf/0x6c0 [ 146.647085][ T6510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.647117][ T6510] vfs_read+0x1e4/0xcf0 [ 146.647152][ T6510] ? __pfx___mutex_lock+0x10/0x10 [ 146.647185][ T6510] ? __pfx_vfs_read+0x10/0x10 [ 146.647226][ T6510] ? __fget_files+0x20e/0x3c0 [ 146.647266][ T6510] ksys_read+0x12a/0x250 [ 146.647295][ T6510] ? __pfx_ksys_read+0x10/0x10 [ 146.647350][ T6510] do_syscall_64+0xcd/0xfa0 [ 146.647385][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.647414][ T6510] RIP: 0033:0x7f513df8d9dc [ 146.647437][ T6510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.647463][ T6510] RSP: 002b:00007f513edaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.647497][ T6510] RAX: ffffffffffffffda RBX: 00007f513e1e6090 RCX: 00007f513df8d9dc [ 146.647516][ T6510] RDX: 000000000000000f RSI: 00007f513edaf0a0 RDI: 0000000000000007 [ 146.647533][ T6510] RBP: 00007f513edaf090 R08: 0000000000000000 R09: 0000000000000000 [ 146.647549][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.647566][ T6510] R13: 00007f513e1e6128 R14: 00007f513e1e6090 R15: 00007ffdc1296868 [ 146.647609][ T6510] [ 149.713684][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 150.359690][ T6587] netlink: 5 bytes leftover after parsing attributes in process `syz.0.147'. [ 150.421163][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'. [ 150.788749][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 152.276351][ T6620] tipc: Started in network mode [ 152.281489][ T6620] tipc: Node identity 45e5412, cluster identity 4711 [ 152.288255][ T6620] tipc: Node number set to 73290770 [ 152.295695][ T6620] delete_channel: no stack [ 153.809807][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 154.745628][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 155.390355][ T6661] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 155.670256][ T6661] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 156.633973][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 156.885811][ T6671] program syz.3.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.886214][ T6671] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 156.915971][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 158.813668][ T6716] bond0: invalid ARP target specified [ 159.356715][ T6719] block nbd7: not configured, cannot reconfigure [ 159.364101][ T6720] block nbd7: not configured, cannot reconfigure [ 160.357499][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 160.619321][ T6739] Invalid ELF header magic: != ELF [ 161.251024][ T6754] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 163.029129][ T6782] syz.1.194 uses obsolete (PF_INET,SOCK_PACKET) [ 163.502961][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 164.261652][ T6806] bond0: invalid ARP target specified [ 165.894897][ T6821] zswap: compressor _ not available [ 167.334511][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 168.030820][ T6857] netlink: 25 bytes leftover after parsing attributes in process `syz.1.213'. [ 168.128748][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 169.456472][ T6881] FAULT_INJECTION: forcing a failure. [ 169.456472][ T6881] name failslab, interval 1, probability 393216, space 0, times 0 [ 169.505790][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) [ 169.505830][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.505846][ T6881] Call Trace: [ 169.506013][ T6881] [ 169.506024][ T6881] dump_stack_lvl+0x16c/0x1f0 [ 169.506062][ T6881] should_fail_ex+0x512/0x640 [ 169.506103][ T6881] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 169.506138][ T6881] should_failslab+0xc2/0x120 [ 169.506174][ T6881] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 169.506202][ T6881] ? rcu_is_watching+0x12/0xc0 [ 169.506232][ T6881] ? __d_alloc+0x32/0xae0 [ 169.506270][ T6881] ? __d_alloc+0x32/0xae0 [ 169.506299][ T6881] __d_alloc+0x32/0xae0 [ 169.506336][ T6881] d_alloc_pseudo+0x1c/0xc0 [ 169.506374][ T6881] alloc_file_pseudo+0xcf/0x230 [ 169.506416][ T6881] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.506456][ T6881] ? security_inode_init_security_anon+0x79/0x240 [ 169.506508][ T6881] __anon_inode_getfile+0xe8/0x280 [ 169.506547][ T6881] new_userfaultfd+0x25e/0x3d0 [ 169.506589][ T6881] __x64_sys_userfaultfd+0x4b/0xb0 [ 169.506617][ T6881] do_syscall_64+0xcd/0xfa0 [ 169.506650][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.506678][ T6881] RIP: 0033:0x7f513df8efc9 [ 169.506701][ T6881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.506726][ T6881] RSP: 002b:00007f513ed6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 169.506763][ T6881] RAX: ffffffffffffffda RBX: 00007f513e1e6270 RCX: 00007f513df8efc9 [ 169.506780][ T6881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 169.506796][ T6881] RBP: 00007f513e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 169.506818][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.506835][ T6881] R13: 00007f513e1e6308 R14: 00007f513e1e6270 R15: 00007ffdc1296868 [ 169.506886][ T6881] [ 171.023672][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 171.033369][ T6917] ipvlan0: entered allmulticast mode [ 171.038738][ T6917] veth0_vlan: entered allmulticast mode [ 171.095604][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 171.167664][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 173.164850][ T6946] netlink: 11 bytes leftover after parsing attributes in process `syz.3.229'. [ 173.402032][ T6947] netlink: 11 bytes leftover after parsing attributes in process `syz.3.229'. [ 174.013396][ T6956] binder: 6955:6956 ioctl 5380 2000000004c0 returned -22 [ 174.103169][ T6956] binder: 6955:6956 ioctl 8108151b 1 returned -22 [ 174.134794][ T6956] usb usb36: usbfs: process 6956 (syz.0.232) did not claim interface 0 before use [ 175.044730][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.233'. [ 176.451316][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 177.074489][ T6975] Invalid ELF header magic: != ELF [ 177.761312][ T7007] program syz.0.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.778581][ T7008] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 177.787579][ T7008] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 177.914032][ T6994] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.981279][ T6994] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.134878][ T6994] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.179298][ T6994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.195437][ T6994] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.256222][ T6994] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.326571][ T6994] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.362123][ T6994] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.472563][ T6994] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.501418][ T6994] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.508200][ T6994] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.537827][ T6994] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.911508][ T7029] random: crng reseeded on system resumption [ 179.250736][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.210425][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.370550][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.530416][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.330337][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.290556][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.450485][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.466663][ T7086] random: crng reseeded on system resumption [ 182.610532][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.161259][ T7101] __vm_enough_memory: pid: 7101, comm: syz.2.264, bytes: 4398046511104 not enough memory for the allocation [ 183.418930][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.772378][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 183.987853][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 184.097465][ T7132] netlink: zone id is out of range [ 184.102783][ T7132] netlink: zone id is out of range [ 184.108093][ T7132] netlink: zone id is out of range [ 184.212669][ T7132] netlink: zone id is out of range [ 184.218848][ T7132] netlink: zone id is out of range [ 184.225455][ T7132] netlink: zone id is out of range [ 184.230926][ T7132] netlink: zone id is out of range [ 184.236225][ T7132] netlink: zone id is out of range [ 184.248107][ T7132] netlink: zone id is out of range [ 184.254932][ T7132] netlink: zone id is out of range [ 184.372086][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.530410][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.690431][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.342051][ T7196] netlink: 342 bytes leftover after parsing attributes in process `syz.0.284'. [ 186.419313][ T7196] netlink: 274 bytes leftover after parsing attributes in process `syz.0.284'. [ 188.529174][ T7267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.544711][ T7267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.556367][ T7267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.605772][ T7267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.230367][ T52] Bluetooth: hci1: unexpected event 0x05 length: 47 > 4 [ 189.748900][ T7424] netlink: 252 bytes leftover after parsing attributes in process `syz.0.305'. [ 189.774053][ T7424] unsupported nla_type 65535 [ 189.970971][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.390666][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 190.611263][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.613848][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.617371][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.938793][ T7451] random: crng reseeded on system resumption [ 192.953628][ T7500] zswap: compressor not available [ 193.893429][ T7560] serio: Serial port pty6 [ 194.921902][ T7655] netlink: 334 bytes leftover after parsing attributes in process `syz.0.324'. [ 195.554289][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 199.168519][ T7829] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.761158][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.767552][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.057022][ T7852] syz.0.345(7852): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 203.369203][ T7919] binder: 7918:7919 ioctl c00c6211 0 returned -14 [ 203.571349][ T7930] binder: 7918:7930 ioctl 6 ffffffffffffffff returned -22 [ 204.499426][ T7948] Invalid ELF header magic: != ELF [ 204.679638][ T7973] serio: Serial port pty6 [ 206.166742][ T52] Bluetooth: hci1: unexpected subevent 0x01 length: 7 < 18 [ 208.055485][ T8081] ================================================================== [ 208.055497][ T8081] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 208.055525][ T8081] Write of size 8 at addr ffffc900039293e0 by task syz.1.362/8081 [ 208.055541][ T8081] [ 208.055551][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.1.362 Not tainted syzkaller #0 PREEMPT(full) [ 208.055572][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.055583][ T8081] Call Trace: [ 208.055589][ T8081] [ 208.055597][ T8081] dump_stack_lvl+0x116/0x1f0 [ 208.055618][ T8081] print_report+0xcd/0x630 [ 208.055642][ T8081] ? __virt_addr_valid+0x81/0x610 [ 208.055667][ T8081] ? sys_imageblit+0x1a6f/0x1e60 [ 208.055686][ T8081] kasan_report+0xe0/0x110 [ 208.055710][ T8081] ? sys_imageblit+0x1a6f/0x1e60 [ 208.055732][ T8081] sys_imageblit+0x1a6f/0x1e60 [ 208.055755][ T8081] ? __pfx_sys_imageblit+0x10/0x10 [ 208.055774][ T8081] ? __pfx__prb_read_valid+0x10/0x10 [ 208.055808][ T8081] ? find_held_lock+0x2b/0x80 [ 208.055827][ T8081] ? up+0xcb/0x140 [ 208.055847][ T8081] ? do_raw_spin_unlock+0x172/0x230 [ 208.055878][ T8081] ? prb_read_valid+0x78/0xa0 [ 208.055906][ T8081] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 208.055927][ T8081] soft_cursor+0x524/0xa10 [ 208.055956][ T8081] ? fb_get_color_depth+0x120/0x250 [ 208.055983][ T8081] bit_cursor+0xe8c/0x17e0 [ 208.056012][ T8081] ? __pfx_bit_cursor+0x10/0x10 [ 208.056042][ T8081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.056073][ T8081] ? get_color+0x1da/0x450 [ 208.056096][ T8081] ? __pfx_bit_cursor+0x10/0x10 [ 208.056123][ T8081] fbcon_cursor+0x40c/0x5a0 [ 208.056147][ T8081] ? add_softcursor+0x1/0x290 [ 208.056177][ T8081] set_cursor+0x1db/0x250 [ 208.056205][ T8081] con_write+0x89/0xb0 [ 208.056224][ T8081] n_tty_write+0x41e/0x11e0 [ 208.056260][ T8081] ? __pfx_n_tty_write+0x10/0x10 [ 208.056284][ T8081] ? trace_kmalloc+0x2b/0xd0 [ 208.056307][ T8081] ? __pfx_woken_wake_function+0x10/0x10 [ 208.056338][ T8081] ? kfree+0x252/0x6d0 [ 208.056354][ T8081] ? __pfx_n_tty_write+0x10/0x10 [ 208.056382][ T8081] file_tty_write.constprop.0+0x503/0x9b0 [ 208.056417][ T8081] redirected_tty_write+0xd4/0x150 [ 208.056447][ T8081] vfs_write+0x7d3/0x11d0 [ 208.056476][ T8081] ? __pfx_redirected_tty_write+0x10/0x10 [ 208.056503][ T8081] ? __pfx_vfs_write+0x10/0x10 [ 208.056520][ T8081] ? find_held_lock+0x2b/0x80 [ 208.056546][ T8081] ksys_write+0x12a/0x250 [ 208.056565][ T8081] ? __pfx_ksys_write+0x10/0x10 [ 208.056586][ T8081] do_syscall_64+0xcd/0xfa0 [ 208.056607][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.056625][ T8081] RIP: 0033:0x7f9527b8efc9 [ 208.056639][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.056657][ T8081] RSP: 002b:00007f9528a11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.056674][ T8081] RAX: ffffffffffffffda RBX: 00007f9527de6090 RCX: 00007f9527b8efc9 [ 208.056686][ T8081] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 208.056696][ T8081] RBP: 00007f9527c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.056706][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.056717][ T8081] R13: 00007f9527de6128 R14: 00007f9527de6090 R15: 00007fff96eb35b8 [ 208.056733][ T8081] [ 208.056739][ T8081] [ 208.056744][ T8081] The buggy address belongs to a vmalloc virtual mapping [ 208.056757][ T8081] Memory state around the buggy address: [ 208.056766][ T8081] ffffc90003929280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.056779][ T8081] ffffc90003929300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.056799][ T8081] >ffffc90003929380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.056808][ T8081] ^ [ 208.056820][ T8081] ffffc90003929400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.056832][ T8081] ffffc90003929480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.056841][ T8081] ================================================================== [ 208.056943][ T8081] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.056963][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.1.362 Not tainted syzkaller #0 PREEMPT(full) [ 208.056997][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.057014][ T8081] Call Trace: [ 208.057024][ T8081] [ 208.057035][ T8081] dump_stack_lvl+0x3d/0x1f0 [ 208.057067][ T8081] vpanic+0x640/0x6f0 [ 208.057110][ T8081] panic+0xca/0xd0 [ 208.057148][ T8081] ? __pfx_panic+0x10/0x10 [ 208.057186][ T8081] ? sys_imageblit+0x1a6f/0x1e60 [ 208.057215][ T8081] ? preempt_schedule_common+0x44/0xc0 [ 208.057244][ T8081] ? preempt_schedule_thunk+0x16/0x30 [ 208.057292][ T8081] check_panic_on_warn+0xab/0xb0 [ 208.057335][ T8081] end_report+0x107/0x170 [ 208.057372][ T8081] kasan_report+0xee/0x110 [ 208.057408][ T8081] ? sys_imageblit+0x1a6f/0x1e60 [ 208.057441][ T8081] sys_imageblit+0x1a6f/0x1e60 [ 208.057477][ T8081] ? __pfx_sys_imageblit+0x10/0x10 [ 208.057509][ T8081] ? __pfx__prb_read_valid+0x10/0x10 [ 208.057548][ T8081] ? find_held_lock+0x2b/0x80 [ 208.057576][ T8081] ? up+0xcb/0x140 [ 208.057607][ T8081] ? do_raw_spin_unlock+0x172/0x230 [ 208.057663][ T8081] ? prb_read_valid+0x78/0xa0 [ 208.057690][ T8081] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 208.057711][ T8081] soft_cursor+0x524/0xa10 [ 208.057740][ T8081] ? fb_get_color_depth+0x120/0x250 [ 208.057767][ T8081] bit_cursor+0xe8c/0x17e0 [ 208.057802][ T8081] ? __pfx_bit_cursor+0x10/0x10 [ 208.057833][ T8081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.057863][ T8081] ? get_color+0x1da/0x450 [ 208.057886][ T8081] ? __pfx_bit_cursor+0x10/0x10 [ 208.057913][ T8081] fbcon_cursor+0x40c/0x5a0 [ 208.057938][ T8081] ? add_softcursor+0x1/0x290 [ 208.057973][ T8081] set_cursor+0x1db/0x250 [ 208.058001][ T8081] con_write+0x89/0xb0 [ 208.058020][ T8081] n_tty_write+0x41e/0x11e0 [ 208.058047][ T8081] ? __pfx_n_tty_write+0x10/0x10 [ 208.058071][ T8081] ? trace_kmalloc+0x2b/0xd0 [ 208.058093][ T8081] ? __pfx_woken_wake_function+0x10/0x10 [ 208.058123][ T8081] ? kfree+0x252/0x6d0 [ 208.058138][ T8081] ? __pfx_n_tty_write+0x10/0x10 [ 208.058162][ T8081] file_tty_write.constprop.0+0x503/0x9b0 [ 208.058184][ T8081] redirected_tty_write+0xd4/0x150 [ 208.058204][ T8081] vfs_write+0x7d3/0x11d0 [ 208.058223][ T8081] ? __pfx_redirected_tty_write+0x10/0x10 [ 208.058244][ T8081] ? __pfx_vfs_write+0x10/0x10 [ 208.058261][ T8081] ? find_held_lock+0x2b/0x80 [ 208.058285][ T8081] ksys_write+0x12a/0x250 [ 208.058304][ T8081] ? __pfx_ksys_write+0x10/0x10 [ 208.058326][ T8081] do_syscall_64+0xcd/0xfa0 [ 208.058345][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.058363][ T8081] RIP: 0033:0x7f9527b8efc9 [ 208.058377][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.058394][ T8081] RSP: 002b:00007f9528a11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.058412][ T8081] RAX: ffffffffffffffda RBX: 00007f9527de6090 RCX: 00007f9527b8efc9 [ 208.058424][ T8081] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 208.058435][ T8081] RBP: 00007f9527c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.058446][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.058456][ T8081] R13: 00007f9527de6128 R14: 00007f9527de6090 R15: 00007fff96eb35b8 [ 208.058472][ T8081] [ 208.058904][ T8081] Kernel Offset: disabled