last executing test programs: 2m56.00681988s ago: executing program 0 (id=70): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x0) msync$auto(0x0, 0xe0, 0x6) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x60802, 0x0) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) (async) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) (async) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2, 0x0) read$auto(r1, &(0x7f0000000480)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) (async) read$auto(r1, &(0x7f0000000480)='N\xd5\f\xb9GC*(,\x80\xc4bAL\xa3`\xb1\xf2\xe7\xc0/\xff', 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/over_current_count\x00', 0x60000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/over_current_count\x00', 0x60000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001080)=""/98, 0x62) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r6, &(0x7f0000000180)='S\x00\x00\x00\xfe\xff\xff\xff', 0x3) (async) write$auto(r6, &(0x7f0000000180)='S\x00\x00\x00\xfe\xff\xff\xff', 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES64=r5, @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf2504000000120018008ad7d3775499cc051598afe8a9c6000004000f00"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto_snd_timer_f_ops_timer(r2, &(0x7f0000000100)=""/88, 0x58) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r3, 0x5420, 0x0) (async) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r3, 0x5420, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x2, 0x1010, 0xfffffffffffffffa, 0x8000) 2m54.585260295s ago: executing program 0 (id=74): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast2}, 0x54) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r1, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)={0xff, 0x0, 0x6}) execveat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=&(0x7f00000000c0)='\x00', &(0x7f00000001c0)=&(0x7f0000000180)='](-.}@-\x00', 0x1) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8000, 0x0, 0x106, 0x0, 0xfffffffffffffffe, 0x6979}, 0x6d71390}, 0xffff, 0x0) 2m54.508329295s ago: executing program 0 (id=76): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0xa0840, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0x5, 0xfffffffffffffffe, &(0x7f0000003380)=0x4c0, 0x0, 0x9ba) madvise$auto(0x5, 0x4, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x448402, 0x0) socket(0x2, 0x5, 0x0) getsockname$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, &(0x7f0000000100)=0x100005) read$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r2, 0x1, &(0x7f00000001c0)='\x8e\xe0', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x8, @old_prog_fd=r3}, 0xa3) bpf$auto(0x2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x81, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/queues\x00', 0x28000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/206, 0xce) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x10000, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x1, 0x7, 0x13, r4, 0x5) 2m53.692882394s ago: executing program 0 (id=80): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x7, 0x809) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101402, 0x0) mmap$auto(0x200000, 0x400007, 0x9, 0x59, r0, 0x40008000) socket(0x2, 0x801, 0x107) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r2, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) mmap$auto(0x0, 0x400008, 0x20000000df, 0x9b72, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto(r1, 0x0, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x61) r6 = eventfd$auto(0x80) read$auto(r6, 0x0, 0xcc9c) fallocate$auto(0x3, 0x8, 0x200000000000b, 0x1) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r6) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002cbd7000fedbdf258812ca9dfd7621ae2b30b00c1daa090000000000000091e7b333fbb130b400080000000500d200050000001000b000aedf577b77"], 0x44}, 0x1, 0x0, 0x0, 0x400080c0}, 0x20000000) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(r6, 0x2000009, 0xfffffffd, 0x0, 0x800008) close_range$auto(0xffffffffffffffff, r0, 0x0) madvise$auto(0x2, 0x80, 0x1) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) read$auto_fops_x16_ro_(r6, &(0x7f0000000280)=""/32, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) acct$auto(&(0x7f00000001c0)='/dev/sg0\x00') 2m52.569600836s ago: executing program 0 (id=85): r0 = socket(0x11, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) read$auto(0x3, 0x0, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000080)="3d3b9066857e6587e2", 0x7fc, 0x0, 0x6, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x100, 0x0) listen$auto(0x3, 0x81) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x500008, 0xdf, 0x9b72, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 2m51.47599464s ago: executing program 0 (id=91): pipe2$auto(0x0, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x5, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x4, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x8000003b, 0xfffffffffffff701, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffe, 0xfffffffffff70006, 0x80000019) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio27\x00', 0x1, 0x0) request_key$auto_KEY_SPEC_GROUP_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$auto(0x3, 0x8905, 0x38) r2 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_trace_clock_fops_trace(r2, 0x0, 0x0) 2m36.352264826s ago: executing program 32 (id=91): pipe2$auto(0x0, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x5, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x4, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x8000003b, 0xfffffffffffff701, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffe, 0xfffffffffff70006, 0x80000019) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio27\x00', 0x1, 0x0) request_key$auto_KEY_SPEC_GROUP_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$auto(0x3, 0x8905, 0x38) r2 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_trace_clock_fops_trace(r2, 0x0, 0x0) 1m24.502821426s ago: executing program 2 (id=371): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose10/tx_queue_len\x00', 0xc2481, 0x0) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 1m24.297775711s ago: executing program 2 (id=372): ioctl$auto_FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0xb) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x3, 0xffffffffffff0005, 0x40000017) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x200000000000, 0x806121, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={"9a8924ce53d33a2de8987fab8253c0c5cd62a9fb7c5970b5e1d9519c64c96453", 0x3, 0xffffffff, 0xc14d, 0xe67, 0x5, 0x0}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0x5, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x6, 0x966, 0x3, @inferred=r1, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='-{#}}.\x00', 0xb0, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @inferred=0xffffffffffffffff, 0x0, "5059d005d689f01a18c00f29b5fa49429146f0fced3c14fab52cc63a1547e39e1154bf627c7fd574bccc61a93bf6de84233c"}) 1m23.613121567s ago: executing program 2 (id=374): r0 = socket(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r0) (async) ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x38d) 1m23.424507838s ago: executing program 2 (id=376): syz_clone(0x20010000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, r0, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x2, 0x2000a, 0x10000000000df, 0xebc, r1, 0x8000) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) keyctl$auto(0x5, 0xee01, 0x107, 0x803, 0x800000000000b) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000001040), r4) pread64$auto(r7, 0x0, 0x8, 0xfffd) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000001080)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r8, 0x10f, 0x87, 0x0, 0x14) 1m22.040548112s ago: executing program 2 (id=382): listen$auto(0x3, 0x81) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x6, 0xffffffff, 0xa, 0x1000009, 0x5f, 0xfffffffffffffffc, 0x3}, 0x6f3) socket(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x100000000000000, 0xd8f0, 0x7, 0xeb1, 0xfffffffffffffffa, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/blackhole_timeout\x00', 0x1, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) socket(0xa, 0x2, 0x88) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1938f4e799cc0e09beb23791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cpu/0/cpuid\x00', 0x10bd00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) 1m21.49285161s ago: executing program 2 (id=384): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/cec3/uevent\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x800, 0x4) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0xffffffffffffffff, 0x5, 0x10b, 0x0, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) 1m6.267716885s ago: executing program 33 (id=384): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/cec3/uevent\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x800, 0x4) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0xffffffffffffffff, 0x5, 0x10b, 0x0, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) 10.782268692s ago: executing program 3 (id=683): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10.452608296s ago: executing program 3 (id=686): r0 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, 0x0, 0x2000, 0x0) getsockopt$auto_SO_PASSSEC(r0, 0x0, 0x22, &(0x7f0000000140)='\x00', &(0x7f0000000100)=0x40) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x9, 0x20001002003f2, 0x7ed0) (async, rerun: 32) madvise$auto(0xfffffffffffffe00, 0x1010001, 0x100000003) (async, rerun: 32) madvise$auto(0x1000, 0x7, 0x9) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0xfffffffc}, 0x43, 0x3, 0x4, @inferred, @integer={0x1, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada8dbdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) write$auto(0x1, 0x0, 0x80000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x92602, 0x0) socket(0xa, 0x2, 0x0) (async) r2 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) sendmmsg$auto(r2, 0x0, 0x5, 0x7000000) (async, rerun: 32) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) (async, rerun: 32) ioctl$auto_SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) (async, rerun: 32) io_uring_setup$auto(0x58, 0x0) (async, rerun: 32) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x20202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socket(0x1d, 0x8c6433ff44dc77d9, 0x3) (async, rerun: 32) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2001) (async) write$auto(r4, 0x0, 0x100000a3d9) (async) mmap$auto(0x7fffffffc, 0x694, 0x5, 0xd494, 0xfffffffffffffffa, 0x8002) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 7.595697154s ago: executing program 3 (id=700): r0 = socket(0x25, 0xa, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0xfffffffffffffffe, 0x20009, 0x1, 0x400eb2, r0, 0x4) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000140), 0x10, &(0x7f0000000080)={0x0, 0x1ff}, 0x6, 0x0, 0x2, 0x40c}, 0xfff}, 0x2, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x5) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) r3 = socket(0x11, 0x0, 0x6) write$auto(0xca, &(0x7f0000000000)='\x043\x01\x01\x00\x00\x00\x00 \x00\x96\b\'\x02\xb0\x93l\xeb\x05\xf5\x02\x00\x9d\xed\xf3\xf1\x9c\xeb\xb6,N\x8eQ9|\xd2l\x9f\xca\xac6S\xa2(Q\xcc\x7f\x14Qv\xa4\x12B\x9e\xcc\x00\x03\xdf\x9f\xb9B\xf4\xfa\xf1R\x012\f39\x9e\x8c\xdd\x97\x1fv\xb1\xd7\f\xda|\x85H \x00\xd9<\xe0C9\xb5\x8d\xe5\xf7\xbeV\x9f\x12x7\x12\x02\x00\xe4Ba\x17k\x1e\xfcEoR\xf8\xe5\x85\xc6\xc2\x80\x14\x90\"\xc0\xffZ\x103\x12\xf6a\xb4#\x93E\xd8g\xe9\xc4ij:\xed?\xc6|\xe8\x81', 0x7f) capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48}) r4 = prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_plb_suspend_rto_sec\x00', 0x10202, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x44) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x3134c3, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f0000000440)="adcf5fa4e2abf25f84761928907ddcfd7863550e28ebcc19720a", 0x1a) syz_clone(0xac2e4500, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x29, 0x5, 0xd7) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) renameat2$auto(r4, &(0x7f0000000500)='./file0\x00', r4, &(0x7f0000000540)='./file0\x00', 0x2) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f00000001c0)=""/9, 0x9) adjtimex$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 7.348376419s ago: executing program 5 (id=703): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/ip_vti0/retrans_time_ms\x00', 0x609284, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/audit\x00', 0x42e80, 0x0) read$auto(r1, 0x0, 0xb4d3) (async) r2 = socket(0xa, 0x801, 0x84) setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20a200, 0x0) (async) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"57f475c61457e99f769f5235b668e09caf9941b9b26b2fb80cf70643d6ff9594", 0x3ff, 0x23, 0xc130, 0xd5e9, 0x401}) (async) r3 = socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x6f7250c4) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/vlan0/accept_ra_rtr_pref\x00', 0x1, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) pwrite64$auto(r5, 0x0, 0x0, 0x2000000000040007) (async) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 7.164603032s ago: executing program 5 (id=704): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x4000000000009, 0x400008, 0xdf, 0x9b75, 0x2, 0x7fff) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x800, 0x7f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0x80b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = socket(0xa, 0x2, 0x3a) bind$auto(r2, &(0x7f0000000040)=@generic={0xa}, 0x66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_setup$auto(0x59, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0xe0800, 0x0) ioctl$auto(r4, 0xc0205648, r4) ioctl$auto_XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={r4, 0x0, 0x6, 0x8000000000000000, 0x2, 0x2, [0x3ff, 0x0, 0x9, 0x5, 0x25, 0x390]}) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @binary="509b092db693f776"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4002) mremap$auto(0x1, 0x4, 0x3, 0x642f, 0x0) 6.347962499s ago: executing program 3 (id=708): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop15\x00', 0x84100, 0x0) mmap$auto(0x8000000000000000, 0x166e7a97, 0x8000000000000003, 0x40000000000eb4, r0, 0x8000) close_range$auto(r0, 0xfffffffffffff000, 0x2000002) mmap$auto(0x6000000000000, 0x7ffe, 0x5, 0x11, r0, 0x4) r1 = eventfd$auto(0x4) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101b00, 0x0) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) setresgid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x802, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = prctl$auto(0x4e, 0x3, 0x0, 0x1, 0x0) r5 = pipe$auto(&(0x7f0000000280)=r3) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone3(&(0x7f00000003c0)={0x2042000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140), {0x11}, &(0x7f00000005c0)=""/11, 0xb, &(0x7f00000002c0)=""/77, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r1}}, 0x58) process_madvise$auto_MADV_COLD(r6, &(0x7f00000004c0)={&(0x7f0000000440)="9f8e653135bfc5a70a47a6d8850f7e5b54aba29b991b1ee2e01011414815fdf81c2b9855e711611cbc5e8873d05f265e9f3d38e1ecdb3f2930c19f2f6bac05188a52f265465edd73eb8b1079117a30875607d6f4fb3320fa3a1bdb67569644c8e1a78509", 0x36}, 0x7, 0x14, 0x4) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r5, 0xffffffffffffffff, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r7, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) io_uring_enter$auto(r7, 0x6, 0x3, 0x5, &(0x7f0000000500)="cc1e80d7241fe039a877a7a78e8e783987f7b332764258fc1644ee337ff1844fac93d3aacad8f2edd31d9092796d4334c05e110b48a37c569f42a31121678d31e7993177dda6f5be565301aac48aeafe685633c77f96fd89c2e9f93a0054bb37514fc209f22ca3ea7fe15cf2587d19af865180836707860a27cc23a2130dbd564c5e0de267", 0x8) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x1, 0x3) ioctl$auto_TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$auto(r6, 0x40104d08, r4) syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0) 6.248486253s ago: executing program 5 (id=709): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x4, 0x5, 0x6, 0xeb1, r1, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x17, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) setrlimit$auto(0x7ffb, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x9, 0xed, 0x7, 0x9b76, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x80) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r3, 0x0, 0x39b8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) socket(0x11, 0x80003, 0x304) mmap$auto(0x0, 0x1fffffffffff, 0x3, 0xdd59, 0xffffffffffffffff, 0x8002) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) 6.088750039s ago: executing program 4 (id=710): r0 = socket(0x11, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) read$auto(0x3, 0x0, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000080)="3d3b9066857e6587e2", 0x7fc, 0x0, 0x6, 0x0, 0x1, 0x4}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x100, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 5.973659224s ago: executing program 5 (id=711): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x4, 0xf4, 0xdc, 0xd7b, 0x69a5, 0xa800000000000000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x3a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x5) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) fcntl$auto_F_SET_RW_HINT(r1, 0x40c, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) kexec_load$auto(0x5, 0x2, 0x0, 0x4) shmctl$auto_SHM_LOCK(0xff, 0xb, &(0x7f0000001200)={{0x6904dd38, 0xee00, 0xee01, 0x1, 0x84a00000, 0xff, 0x2}, 0x9, 0x48, 0x37, 0xffffffffffffffff, @inferred, @inferred, 0x7, 0x0, 0x0, &(0x7f0000000200)="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"}) fsconfig$auto(r0, 0x3, &(0x7f00000000c0)=']$-\x00', &(0x7f0000000100)="44128da33093a7e095fa24e51ab3fe2a06285901f99143576ec2c33c0d598e1168e5706caef3708c2dc838d9b6cc1833ab46b4911a699bf7ed1d0e47726adfcca1414fd571c4710eb19657805a054b4d0c01cc8286d797452f5d62be5549896adc97071b3cc4120f252b921e8024d110b8cb24e3881028d2ca08e40be9ed5875e98e880f06a1469b94e9034e3aa387646ae3d9df6681dec5c9b2e6099cb37d444a18023b", r2) 5.273760165s ago: executing program 3 (id=713): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r1, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/104, 0xfffffffffffffe90) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) ioctl$auto(r3, 0x5606, r3) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1) 5.021317744s ago: executing program 4 (id=714): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) fcntl$auto_F_SET_RW_HINT(r0, 0x40c, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x40015}, 0x4000000) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x20000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x0, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x7c, 0x3, 0x6, 0xa00000000, 0x7, 0x2, 0x7ffe, 0x9, 0x8021, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.613376809s ago: executing program 5 (id=715): mmap$auto(0x0, 0x400008, 0xdf, 0x20000009b72, 0x2, 0x8000) r0 = prctl$auto_PR_SET_MM_END_CODE(0x1000, 0x2, 0x0, 0x85c, 0x9) getsockopt$auto_SO_BINDTOIFINDEX(r0, 0x1006, 0x3e, &(0x7f0000000180)='/proc/thremd-self/mem\x00', &(0x7f00000001c0)=0x10002) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x5a, 0x2020007, 0x7, 0x80000000000017, 0xfffffffffffffffa, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000, 0x100000001, 0x4, 0x7, 0x107) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) madvise$auto(0xfffffffffffffffc, 0x6, 0x2001c) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x141000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000480)=""/4083, 0xff3) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.179645823s ago: executing program 1 (id=717): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) (async) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5152021}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0xb21}, @GTPA_VERSION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000d0) (async) getsockopt$auto(r0, 0x8, 0x1e, 0xfffffffffffffffd, 0x0) 3.93652411s ago: executing program 1 (id=718): mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xffffffffffffffff, 0x400000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x470000000, 0xd, 0x4000000000000df, 0x109b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000040)={0x5, 0x8, 0x80000001, 0x1000, 0x4, 0x2}, 0x8001, 0x0, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x8009) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x2843, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x2, 0x4}) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/free_space_tree\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/181, 0xb5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) 3.575204939s ago: executing program 4 (id=719): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="01e4ff00", @ANYRES16=r0, @ANYBLOB="11072cb57000fedbdf25130000000c000980070002005b400000"], 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyzd/power/runtime_suspended_time\x00', 0x40000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0xd) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setfsuid$auto(0xee00) setfsuid$auto(0xee01) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x8000) pwrite64$auto(r4, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x1000000002) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0xffffffff, 0x3, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x9}, 0x400005, 0x25, 0x4, @raw=0x6, @integer={0xe7, 0x0, 0x81}, "7a9fc199a16a2311eacf2fc7ae1d8778dc610400000001000f00000000b6debe0eda71bdb5adb17884a16f7ce8c57c0eb327ac702b8d7c2d00"}) socket$nl_generic(0x10, 0x3, 0x10) 2.957974225s ago: executing program 4 (id=720): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001dc0)=""/195, 0xc3) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x20100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x4002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x28342, 0x0) pipe2$auto(0x0, 0x80) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2c40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x50, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x30, 0x3, 0x0, 0x1, [@typed={0x2c, 0xe0, 0x0, 0x0, @binary="429a7032a45f07b2849782a84e422b9c192b753ba761f26aed2c12309de62bfe6c12f0df107ed4ad"}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r3 = socket(0x1d, 0x3, 0x1) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x5810, 0xffc, 0x8000000008011, 0x3, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r4, &(0x7f0000000180)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x305, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0xffff0000}, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) getsockopt$auto(r3, 0x65, 0x40002, 0xffffffffffffffff, 0x0) bpf$auto(0x101, &(0x7f0000000140)=@raw_tracepoint={0x100000001, r1, 0x0, 0x100000000}, 0x1000) epoll_create$auto(0x8800001) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)='7', 0x1) 2.828974423s ago: executing program 1 (id=721): unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/event0\x00', 0xd2282, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x5f15, 0x9}) write$auto_tty_fops_tty_io(r0, &(0x7f0000000380)="69406ffe73883031673535415544a885d24bb37c1df3c7119a7daae64b8a2abbe8ddd8535097f82362e0f2c2b3bbb79e3342ccc652835ce08ac0c1b130714523dbafc35e3f04d9a3737cea7c9c843c2e115ade82d29d89f28a9d56d93eb4f67bf8e5d70b3138400277cb8263663a22bdbe7d565355ec638bce74921e7493299b132454b7ead4facd9901e73137e488626c020b25556be4196dcf5fbd7788b0e6426a975e5740fb394297e26a136933919f3c1bade922c3c044cf315dccd5a2630e0e08f57a6e8102a939194d0126100239de0430a5805ff9264f6238e1", 0xdd) io_uring_setup$auto(0x6, 0x0) ioctl$auto(r1, 0x4, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) semtimedop$auto(0x9, &(0x7f0000000040)={0x9, 0x1, 0x5}, 0x7, &(0x7f0000000080)={0x5, 0x16b1c03}) unshare$auto(0x40000080) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x20040, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{@inferred, 0x4, 0x10001, 0xb, "58a732e4f73a26bf0d5924b32c7f641b870461318add2e31420cdc66f14f4a240781b1b1800084506f73bc9d", @raw=0x80}, 0x2, 0xffff, 0x7, @inferred, @reserved="38375c405233ea8084784ddb1ace232c64399d87d409eb2f36d9f5448c1a43dc0bc791e19ab07197dc0632c073769fc9ed53676560dcc714f73920aadc483b09c3db58638027c9a49fc0e13e708b5345bab5d2778d3d93c3603302c831a6ed35975cb34dec29bd40216793a5fa5f100f4ca171b9b25d1a79a874213d41233f2e", "7f7b9de47b25a51c538a7d273180a5557f2fee0f40bee5d4326cf95d0fdf2bfd6619bf3854e89bbbc59a3196305de800cf9c54a11afb0c248781267baa0ea51f"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x400000000f34) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r3, 0x0, 0x6) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) unshare$auto(0x8000400) 2.087631869s ago: executing program 1 (id=722): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05032abd7000fcdbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4050) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 1.993892462s ago: executing program 5 (id=723): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/6/smp_affinity\x00', 0x0, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x25, 0x7, 0x22000, 0x204, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x4, 0x1, 0x4000000000de, 0xeb1, 0x401, 0x8000) 1.951780503s ago: executing program 4 (id=724): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) settimeofday$auto(&(0x7f0000000180)={0x10000001f, 0x1}, 0x0) close_range$auto(0x2, r0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x100, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) pwrite64$auto(r3, &(0x7f0000000000)='\x00', 0x9, 0x6) clone$auto(0xffffffffffffc767, 0xb, 0x0, &(0x7f0000000140)=0x9, 0x81) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0xf3, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0x200}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) 1.062431778s ago: executing program 1 (id=725): mmap$auto(0xfffffffffffffffa, 0x1, 0xdf, 0xeb1, 0x401, 0x8003) rseq$auto(0x0, 0x1a, 0xffff, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x800, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x7793, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x103041, 0x0) writev$auto(r2, &(0x7f0000000140)={0x0, 0x5}, 0x5) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r4, 0x4b67, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 481.364099ms ago: executing program 4 (id=726): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r2) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x6, r1}) (async) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x6, r1}) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) (async) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x1) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) seccomp$auto(0x2, 0x0, 0x0) (async) seccomp$auto(0x2, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 311.464691ms ago: executing program 3 (id=727): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) mmap$auto(0x0, 0xe983, 0x2000dc, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(r0, &(0x7f00000007c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057\x1c&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\x7f\x00\x00\x00AN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81.f\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xbd_r\xf16\xec\xf3\xbb[.\xf3\xef\xf8\x16x\x9e\xb3*:/L\xa0Kg\xf0\xa2\x84\xa3o\xcc\x9e\xd3\xeb\xd3(\xaa\x93g~\x01\x81\x1eV\xf1L\xfc\xad\xa9#O\xe4\x12\xd3\xbda\xbc\x9a\x9f+9\'\xc4\x13\xf0\xc88\x1d80?\xc2\a\af\xdc?-&\xedAd\x9c\xe5&\xb9\x14\xe1\x85 \xbf\x18\xfc:#\xcf\x7ffT\xefPb\xe1\xfa]\xcc\x8a\xe3\x99\x98u\x9bj>\x9d\xc2\x1fk\x87\x92\xfb(U\xa8\xcd4+\xf6e5],\xec\x84 \x1b\x10d\x1b@\x84X\xa1\xa8\xd7\xccO\xb0Qq\x1a\xa4<\\\x0e\xa4\x7f^\x1a|\xfd\xe6#\x00\x9e\x1d\x00k\x84\x1b\xa3\xb1O\xe0IzJRO\xf4,\xe5\xdb\x03CA\x13Q\x84\xbb\x88\xb4\xe3\xba\xf0/\xd0\x04\ny\a\x8d\x12h\xe22\xcb\"\xce\x00\x00', 0x5) ioctl$auto_USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 0s ago: executing program 1 (id=728): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x2, 0x0) ioctl$auto(r0, 0x89ef, 0x74) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x2284, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000040)=@query={@target_ifindex=r4, 0x5, 0x0, 0x800, 0x1, @prog_cnt=0x7f, 0x0, 0x6, 0x47, 0x7fff, 0xffff}, 0x800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) ioctl$auto(0x3, 0x541a, r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 73.951155][ T5809] cgroup: Unknown subsys name 'net' [ 74.037922][ T5809] cgroup: Unknown subsys name 'cpuset' [ 74.046605][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.427468][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.271542][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.279643][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.287790][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.295599][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.301851][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.303698][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.318042][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.319593][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.325856][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.333881][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.340194][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.346207][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.361990][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.362395][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.375509][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.377653][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.383900][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.397734][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.406537][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.410115][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.865567][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 78.047163][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 78.061002][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 78.142005][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.151033][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.158471][ T5821] bridge_slave_0: entered allmulticast mode [ 78.166744][ T5821] bridge_slave_0: entered promiscuous mode [ 78.188160][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.195690][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.202835][ T5821] bridge_slave_1: entered allmulticast mode [ 78.210153][ T5821] bridge_slave_1: entered promiscuous mode [ 78.252630][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 78.311350][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.369110][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.407432][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.414881][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.422037][ T5823] bridge_slave_0: entered allmulticast mode [ 78.429250][ T5823] bridge_slave_0: entered promiscuous mode [ 78.436535][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.443661][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.451570][ T5822] bridge_slave_0: entered allmulticast mode [ 78.458889][ T5822] bridge_slave_0: entered promiscuous mode [ 78.485474][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.493100][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.500516][ T5823] bridge_slave_1: entered allmulticast mode [ 78.507840][ T5823] bridge_slave_1: entered promiscuous mode [ 78.515296][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.522417][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.529954][ T5822] bridge_slave_1: entered allmulticast mode [ 78.537316][ T5822] bridge_slave_1: entered promiscuous mode [ 78.546972][ T5821] team0: Port device team_slave_0 added [ 78.583003][ T5821] team0: Port device team_slave_1 added [ 78.640553][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.663069][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.673778][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.680797][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.706711][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.721192][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.730889][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.738399][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.745615][ T5820] bridge_slave_0: entered allmulticast mode [ 78.752625][ T5820] bridge_slave_0: entered promiscuous mode [ 78.762529][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.772884][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.779883][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.805843][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.826813][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.833982][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.842462][ T5820] bridge_slave_1: entered allmulticast mode [ 78.849581][ T5820] bridge_slave_1: entered promiscuous mode [ 78.913158][ T5823] team0: Port device team_slave_0 added [ 78.923086][ T5823] team0: Port device team_slave_1 added [ 78.930351][ T5822] team0: Port device team_slave_0 added [ 78.938515][ T5822] team0: Port device team_slave_1 added [ 78.983595][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.029278][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.039454][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.046585][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.072827][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.085345][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.092284][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.118192][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.135801][ T5821] hsr_slave_0: entered promiscuous mode [ 79.142060][ T5821] hsr_slave_1: entered promiscuous mode [ 79.158988][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.166000][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.192021][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.203876][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.210947][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.236865][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.300625][ T5820] team0: Port device team_slave_0 added [ 79.309173][ T5820] team0: Port device team_slave_1 added [ 79.402855][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.409939][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.436819][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.453881][ T5823] hsr_slave_0: entered promiscuous mode [ 79.460198][ T5823] hsr_slave_1: entered promiscuous mode [ 79.467132][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 79.472902][ T5823] Cannot create hsr debugfs directory [ 79.475398][ T5825] Bluetooth: hci0: command tx timeout [ 79.484120][ T5142] Bluetooth: hci1: command tx timeout [ 79.490399][ T51] Bluetooth: hci2: command tx timeout [ 79.496530][ T5833] Bluetooth: hci3: command tx timeout [ 79.500589][ T5822] hsr_slave_0: entered promiscuous mode [ 79.508597][ T5822] hsr_slave_1: entered promiscuous mode [ 79.515126][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 79.520847][ T5822] Cannot create hsr debugfs directory [ 79.534687][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.541633][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.567859][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.728755][ T5820] hsr_slave_0: entered promiscuous mode [ 79.735166][ T5820] hsr_slave_1: entered promiscuous mode [ 79.741144][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 79.746941][ T5820] Cannot create hsr debugfs directory [ 80.029585][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.058339][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.077326][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.095335][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.133043][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.149693][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.162151][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.185463][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.260328][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.271563][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.297097][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.307983][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.394778][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.405932][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.416967][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.428443][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.546855][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.572885][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.609826][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.647453][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.654755][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.666710][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.673797][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.687009][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.711556][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.730501][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.752365][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.759492][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.773185][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.780363][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.797406][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.822750][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.829864][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.863718][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.870909][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.897541][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.933843][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.941061][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.953359][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.960557][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.502787][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.528077][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.537172][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.556843][ T51] Bluetooth: hci2: command tx timeout [ 81.562279][ T51] Bluetooth: hci3: command tx timeout [ 81.565459][ T5833] Bluetooth: hci1: command tx timeout [ 81.568978][ T5142] Bluetooth: hci0: command tx timeout [ 81.602648][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.641061][ T5823] veth0_vlan: entered promiscuous mode [ 81.717791][ T5823] veth1_vlan: entered promiscuous mode [ 81.779162][ T5822] veth0_vlan: entered promiscuous mode [ 81.803268][ T5820] veth0_vlan: entered promiscuous mode [ 81.844588][ T5822] veth1_vlan: entered promiscuous mode [ 81.857179][ T5821] veth0_vlan: entered promiscuous mode [ 81.883458][ T5823] veth0_macvtap: entered promiscuous mode [ 81.919519][ T5820] veth1_vlan: entered promiscuous mode [ 81.948326][ T5823] veth1_macvtap: entered promiscuous mode [ 81.970665][ T5821] veth1_vlan: entered promiscuous mode [ 82.000372][ T5822] veth0_macvtap: entered promiscuous mode [ 82.023474][ T5822] veth1_macvtap: entered promiscuous mode [ 82.039278][ T5820] veth0_macvtap: entered promiscuous mode [ 82.052862][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.066737][ T5820] veth1_macvtap: entered promiscuous mode [ 82.082733][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.112732][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.132403][ T5821] veth0_macvtap: entered promiscuous mode [ 82.152431][ T411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.167443][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.177605][ T5821] veth1_macvtap: entered promiscuous mode [ 82.187169][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.200050][ T411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.211254][ T411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.231207][ T411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240363][ T411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.252268][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.270884][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.280202][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303058][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.311924][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.331152][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341054][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.366430][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.380255][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.403359][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.441515][ T411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.460440][ T411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.473307][ T411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.507421][ T411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.555685][ T411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.563605][ T411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.642468][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.650481][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.660809][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.670082][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.709638][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.718137][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.757801][ T411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.770504][ T411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.818685][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.831898][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.869354][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.899052][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.939556][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.069414][ T5914] sysfs_service_op_store: Client not running :-5: [ 83.108361][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.129020][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.129404][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.162218][ T5917] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.210664][ T5917] Zero length message leads to an empty skb [ 83.426366][ T5142] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 83.434539][ T5142] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 83.455603][ T5923] syz.3.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.475300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.531955][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.639474][ T5142] Bluetooth: hci1: command tx timeout [ 83.645152][ T5142] Bluetooth: hci2: command tx timeout [ 83.651795][ T51] Bluetooth: hci0: command tx timeout [ 83.659080][ T5142] Bluetooth: hci3: command tx timeout [ 83.754843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 83.763694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.966697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.214568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.789393][ T5944] Invalid ELF header magic: != ELF [ 85.204923][ T5960] ima: policy update failed [ 85.226733][ T29] audit: type=1802 audit(1771421732.988:2): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.12" res=0 errno=0 [ 85.715648][ T5833] Bluetooth: hci3: command tx timeout [ 85.721093][ T5833] Bluetooth: hci0: command tx timeout [ 85.725703][ T5142] Bluetooth: hci2: command tx timeout [ 85.731860][ T5142] Bluetooth: hci1: command tx timeout [ 85.967814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.214711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.229764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.355206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.355216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.675468][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 86.759030][ T24] cfg80211: failed to load regulatory.db [ 87.564652][ T5995] netlink: 'syz.2.18': attribute type 4 has an invalid length. [ 87.572361][ T5995] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 88.920562][ T6021] dlm: non-version read from control device 255 [ 90.564920][ T6043] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 91.680718][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 92.315847][ T6062] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.805446][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'. [ 95.183470][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.266140][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.332796][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.494756][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.134063][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 96.165460][ T6125] can: request_module (can-proto-5) failed. [ 96.329739][ T6126] i: entered promiscuous mode [ 96.351305][ T6131] HfR: entered promiscuous mode [ 98.712055][ T6154] netlink: 186 bytes leftover after parsing attributes in process `syz.0.51'. [ 98.822214][ T5142] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 98.831190][ T5142] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 101.234452][ T6202] ima: policy update failed [ 101.239188][ T29] audit: type=1802 audit(1771421749.008:3): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.65" res=0 errno=0 [ 101.259217][ T6200] netlink: 'syz.3.64': attribute type 29 has an invalid length. [ 101.277946][ T6200] netlink: 'syz.3.64': attribute type 30 has an invalid length. [ 101.309973][ T6200] netlink: 'syz.3.64': attribute type 31 has an invalid length. [ 101.326003][ T6200] netlink: 'syz.3.64': attribute type 32 has an invalid length. [ 101.375897][ T6200] netlink: 'syz.3.64': attribute type 33 has an invalid length. [ 101.403970][ T6200] netlink: 'syz.3.64': attribute type 35 has an invalid length. [ 101.443065][ T6210] FAULT_INJECTION: forcing a failure. [ 101.443065][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 101.456037][ T6200] netlink: 'syz.3.64': attribute type 37 has an invalid length. [ 101.463693][ T6200] netlink: 18 bytes leftover after parsing attributes in process `syz.3.64'. [ 101.478297][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.0.67 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.478344][ T6210] Tainted: [L]=SOFTLOCKUP [ 101.478354][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.478378][ T6210] Call Trace: [ 101.478387][ T6210] [ 101.478401][ T6210] dump_stack_lvl+0x100/0x190 [ 101.478456][ T6210] should_fail_ex.cold+0x5/0xa [ 101.478489][ T6210] should_failslab+0xc2/0x120 [ 101.478531][ T6210] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.478568][ T6210] ? vm_area_dup+0x27/0x8e0 [ 101.478607][ T6210] vm_area_dup+0x27/0x8e0 [ 101.478641][ T6210] __split_vma+0x18c/0xd90 [ 101.478678][ T6210] ? __pfx___split_vma+0x10/0x10 [ 101.478732][ T6210] vms_gather_munmap_vmas+0x1c6/0x1500 [ 101.478762][ T6210] ? find_held_lock+0x2b/0x80 [ 101.478803][ T6210] ? move_page_tables+0x1efd/0x4500 [ 101.478836][ T6210] ? move_page_tables+0x1efd/0x4500 [ 101.478876][ T6210] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 101.478909][ T6210] ? move_page_tables+0xe1d/0x4500 [ 101.478970][ T6210] do_vmi_align_munmap+0x287/0x5f0 [ 101.479011][ T6210] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 101.479101][ T6210] do_vmi_munmap+0x1f8/0x3e0 [ 101.479141][ T6210] move_vma+0x7f3/0x1890 [ 101.479181][ T6210] ? __pfx_move_vma+0x10/0x10 [ 101.479218][ T6210] ? shmem_get_unmapped_area+0x141/0x960 [ 101.479269][ T6210] ? vrm_set_new_addr+0x204/0x290 [ 101.479306][ T6210] mremap_to+0x1b7/0x450 [ 101.479343][ T6210] do_mremap+0xd8d/0x2130 [ 101.479381][ T6210] ? futex_private_hash_put+0x107/0x1c0 [ 101.479413][ T6210] ? futex_hash_put+0x43/0x50 [ 101.479438][ T6210] ? futex_wake+0x1ad/0x530 [ 101.479477][ T6210] ? __pfx_do_mremap+0x10/0x10 [ 101.479508][ T6210] ? __pfx_futex_wake+0x10/0x10 [ 101.479547][ T6210] ? __lock_acquire+0x4a5/0x2630 [ 101.479590][ T6210] __do_sys_mremap+0x126/0x170 [ 101.479625][ T6210] ? __pfx___do_sys_mremap+0x10/0x10 [ 101.479663][ T6210] ? find_held_lock+0x2b/0x80 [ 101.479709][ T6210] ? __x64_sys_futex+0x34f/0x4d0 [ 101.479765][ T6210] do_syscall_64+0x106/0xf80 [ 101.479794][ T6210] ? clear_bhb_loop+0x40/0x90 [ 101.479829][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.479858][ T6210] RIP: 0033:0x7f1c0319c629 [ 101.479883][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.479918][ T6210] RSP: 002b:00007f1c040af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 101.479952][ T6210] RAX: ffffffffffffffda RBX: 00007f1c03415fa0 RCX: 00007f1c0319c629 [ 101.479971][ T6210] RDX: 0000000000013fd4 RSI: 00000000000000b8 RDI: 0000000000004000 [ 101.479989][ T6210] RBP: 00007f1c03232b39 R08: 00000000fffff000 R09: 0000000000000000 [ 101.480007][ T6210] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 101.480024][ T6210] R13: 00007f1c03416038 R14: 00007f1c03415fa0 R15: 00007ffec96a8198 [ 101.480064][ T6210] [ 101.872599][ T6213] netlink: 100 bytes leftover after parsing attributes in process `syz.3.68'. [ 102.195591][ T6213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.231090][ T6213] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.313192][ T6213] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.365009][ T6213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.374151][ T6218] zswap: compressor not available [ 102.382527][ T6213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.403062][ T6213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.440070][ T6213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.462954][ T6213] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.589837][ T6213] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.621449][ T6213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.639417][ T6213] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.659012][ T6213] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.905358][ T6260] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.955705][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.134725][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 104.444944][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.514504][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.626157][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 104.674419][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.684818][ T6275] syz.3.82 uses obsolete (PF_INET,SOCK_PACKET) [ 106.034642][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.521363][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.596035][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.636886][ T6317] Invalid ELF header magic: != ELF [ 106.764471][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.115303][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.471529][ T6414] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 108.604814][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.675944][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.712663][ T6352] Process accounting resumed [ 108.834511][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.954790][ T5142] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 111.229745][ T6457] netlink: 342 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.239715][ T6457] netlink: 342 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.248934][ T6457] netlink: 342 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.265016][ T6457] netlink: 342 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.285116][ T6457] netlink: 342 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.328827][ T6457] netlink: 98 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.403479][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 111.436617][ T6460] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 113.159907][ T6480] bdi 43:192: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 113.229107][ T6480] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.312124][ T6529] netlink: 'syz.3.117': attribute type 2 has an invalid length. [ 116.320237][ T6529] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 117.012959][ T6543] Invalid ELF header magic: != ELF [ 118.240793][ T5142] Bluetooth: hci2: Malformed LE Event: 0x0b [ 118.450049][ T6558] netlink: 130 bytes leftover after parsing attributes in process `syz.2.123'. [ 119.591175][ T6578] can: request_module (can-proto-4) failed. [ 119.871143][ T6580] warning: `syz.3.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.035087][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.043471][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.080411][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.096876][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.115455][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.777162][ T6616] chnl_net:caif_netlink_parms(): no params data found [ 124.194661][ T5142] Bluetooth: hci4: command tx timeout [ 124.200999][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.220547][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.231991][ T6616] bridge_slave_0: entered allmulticast mode [ 124.249822][ T6616] bridge_slave_0: entered promiscuous mode [ 124.299542][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.317594][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.332335][ T6616] bridge_slave_1: entered allmulticast mode [ 124.351589][ T6616] bridge_slave_1: entered promiscuous mode [ 124.528822][ T6616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.547979][ T6616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.672277][ T6616] team0: Port device team_slave_0 added [ 124.774739][ T137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.931701][ T6616] team0: Port device team_slave_1 added [ 125.020541][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.046434][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.145653][ T6616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.276773][ T137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.302767][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.323304][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.377120][ T6616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.442440][ T137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.613977][ T137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.813579][ T6616] hsr_slave_0: entered promiscuous mode [ 125.820605][ T6616] hsr_slave_1: entered promiscuous mode [ 125.830425][ T6616] debugfs: 'hsr0' already exists in 'hsr' [ 125.841265][ T6616] Cannot create hsr debugfs directory [ 126.203199][ T6668] zswap: compressor zմþs./ not available [ 126.284094][ T5142] Bluetooth: hci4: command tx timeout [ 126.463586][ T137] bridge_slave_1: left allmulticast mode [ 126.469800][ T137] bridge_slave_1: left promiscuous mode [ 126.482467][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.539386][ T137] bridge_slave_0: left allmulticast mode [ 126.554475][ T137] bridge_slave_0: left promiscuous mode [ 126.562002][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.175503][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.198244][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.226263][ T137] bond0 (unregistering): Released all slaves [ 127.972576][ T6616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.116238][ T6616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.149237][ T6616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.201338][ T6616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.365572][ T5142] Bluetooth: hci4: command tx timeout [ 128.831782][ T137] hsr_slave_0: left promiscuous mode [ 128.873490][ T137] hsr_slave_1: left promiscuous mode [ 128.917453][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.947568][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.977896][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.004380][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.033727][ T137] veth1_macvtap: left promiscuous mode [ 129.039859][ T137] veth0_macvtap: left promiscuous mode [ 129.046078][ T137] veth1_vlan: left promiscuous mode [ 129.060574][ T137] veth0_vlan: left promiscuous mode [ 129.159957][ T6735] FAULT_INJECTION: forcing a failure. [ 129.159957][ T6735] name failslab, interval 1, probability 0, space 0, times 0 [ 129.204537][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.2.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.204580][ T6735] Tainted: [L]=SOFTLOCKUP [ 129.204590][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.204604][ T6735] Call Trace: [ 129.204614][ T6735] [ 129.204624][ T6735] dump_stack_lvl+0x100/0x190 [ 129.204681][ T6735] should_fail_ex.cold+0x5/0xa [ 129.204713][ T6735] should_failslab+0xc2/0x120 [ 129.204755][ T6735] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 129.204788][ T6735] ? security_file_alloc+0x34/0x2c0 [ 129.204827][ T6735] ? trace_kmem_cache_alloc+0xf3/0x120 [ 129.204876][ T6735] security_file_alloc+0x34/0x2c0 [ 129.204918][ T6735] init_file+0x95/0x480 [ 129.204945][ T6735] alloc_empty_file+0x73/0x1c0 [ 129.204975][ T6735] alloc_file_pseudo+0x13a/0x230 [ 129.205016][ T6735] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 129.205046][ T6735] ? alloc_fd+0x476/0x790 [ 129.205091][ T6735] sock_alloc_file+0x50/0x210 [ 129.205123][ T6735] __sys_socket+0x1c0/0x260 [ 129.205156][ T6735] ? exc_page_fault+0x6f/0xd0 [ 129.205184][ T6735] ? __pfx___sys_socket+0x10/0x10 [ 129.205224][ T6735] ? do_user_addr_fault+0x8d6/0x12f0 [ 129.205269][ T6735] __x64_sys_socket+0x72/0xb0 [ 129.205304][ T6735] ? lockdep_hardirqs_on+0x78/0x100 [ 129.205332][ T6735] do_syscall_64+0x106/0xf80 [ 129.205356][ T6735] ? clear_bhb_loop+0x40/0x90 [ 129.205387][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.205414][ T6735] RIP: 0033:0x7f485939dec7 [ 129.205444][ T6735] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.205469][ T6735] RSP: 002b:00007f485a25cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 129.205496][ T6735] RAX: ffffffffffffffda RBX: 00007f4859615fa0 RCX: 00007f485939dec7 [ 129.205514][ T6735] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 129.205530][ T6735] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 129.205546][ T6735] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 129.205562][ T6735] R13: 00007f4859616038 R14: 00007f4859615fa0 R15: 00007fffb04a3c68 [ 129.205598][ T6735] [ 129.953716][ T137] team0 (unregistering): Port device team_slave_1 removed [ 129.989782][ T137] team0 (unregistering): Port device team_slave_0 removed [ 130.447309][ T5142] Bluetooth: hci4: command tx timeout [ 130.481448][ T6616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.622628][ T6616] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.672794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.680032][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.727971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.735197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.340575][ T6616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.086504][ T6779] bridge0: port 3(team0) entered blocking state [ 132.104485][ T6779] bridge0: port 3(team0) entered disabled state [ 132.219419][ T6779] team0: entered allmulticast mode [ 132.238959][ T6779] team_slave_0: entered allmulticast mode [ 132.304340][ T6779] team_slave_1: entered allmulticast mode [ 132.314019][ T6779] team0: entered promiscuous mode [ 132.404520][ T6779] team_slave_0: entered promiscuous mode [ 132.410340][ T6779] team_slave_1: entered promiscuous mode [ 132.435479][ T6779] bridge0: port 3(team0) entered blocking state [ 132.442080][ T6779] bridge0: port 3(team0) entered forwarding state [ 132.842014][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850929][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.970812][ T6800] bridge_slave_1: left allmulticast mode [ 132.984415][ T6800] bridge_slave_1: left promiscuous mode [ 133.004068][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.083470][ T6616] veth0_vlan: entered promiscuous mode [ 133.138983][ T6616] veth1_vlan: entered promiscuous mode [ 133.197428][ T6616] veth0_macvtap: entered promiscuous mode [ 133.206507][ T6616] veth1_macvtap: entered promiscuous mode [ 133.221847][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.428673][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.513594][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.562929][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.610356][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.675435][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.004415][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.012238][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.258616][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.275597][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.978001][ T5142] Bluetooth: hci4: unexpected subevent 0x0c length: 118 > 5 [ 135.193907][ T6856] bridge0: port 2(gretap0) entered blocking state [ 135.200599][ T6856] bridge0: port 2(gretap0) entered disabled state [ 135.208461][ T6856] gretap0: entered allmulticast mode [ 135.231724][ T6856] gretap0: entered promiscuous mode [ 135.242238][ T6856] bridge0: port 2(gretap0) entered blocking state [ 135.248840][ T6856] bridge0: port 2(gretap0) entered forwarding state [ 135.971160][ T6841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.977791][ T6873] Invalid ELF header magic: != ELF [ 135.987573][ T6841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.074929][ T6841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.115311][ T6841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.130785][ T6841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.155995][ T6841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.164342][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.396664][ T6886] syz.3.174 (6886) used greatest stack depth: 19672 bytes left [ 137.526823][ T6891] mkiss: ax0: crc mode is auto. [ 138.034443][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.115076][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.194837][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.981910][ T6894] Process accounting paused [ 140.276206][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.399357][ T6939] FAULT_INJECTION: forcing a failure. [ 140.399357][ T6939] name failslab, interval 1, probability 0, space 0, times 0 [ 140.422493][ T6939] CPU: 1 UID: 0 PID: 6939 Comm: syz.4.185 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.422539][ T6939] Tainted: [L]=SOFTLOCKUP [ 140.422549][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.422565][ T6939] Call Trace: [ 140.422574][ T6939] [ 140.422585][ T6939] dump_stack_lvl+0x100/0x190 [ 140.422632][ T6939] should_fail_ex.cold+0x5/0xa [ 140.422667][ T6939] should_failslab+0xc2/0x120 [ 140.422708][ T6939] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.422744][ T6939] ? anon_vma_clone+0x2bd/0xc70 [ 140.422779][ T6939] anon_vma_clone+0x2bd/0xc70 [ 140.422819][ T6939] __split_vma+0x51f/0xd90 [ 140.422863][ T6939] ? __pfx___split_vma+0x10/0x10 [ 140.422904][ T6939] ? __pfx_mas_prev+0x10/0x10 [ 140.422935][ T6939] ? ima_store_measurement+0x522/0x5b0 [ 140.422980][ T6939] vms_gather_munmap_vmas+0x39f/0x1500 [ 140.423012][ T6939] ? __x64_sys_mmap+0x11b/0x190 [ 140.423059][ T6939] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 140.423098][ T6939] ? mas_walk+0x6ef/0x9b0 [ 140.423133][ T6939] __mmap_region+0x46e/0x2760 [ 140.423168][ T6939] ? ima_store_measurement+0x522/0x5b0 [ 140.423206][ T6939] ? __pfx___mmap_region+0x10/0x10 [ 140.423249][ T6939] ? find_held_lock+0x2b/0x80 [ 140.423290][ T6939] ? process_measurement+0x109c/0x2350 [ 140.423319][ T6939] ? process_measurement+0x109c/0x2350 [ 140.423350][ T6939] ? ima_store_measurement+0x26a/0x5b0 [ 140.423389][ T6939] ? __mutex_unlock_slowpath+0x15c/0x790 [ 140.423424][ T6939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.423474][ T6939] ? process_measurement+0x1f4/0x2350 [ 140.423553][ T6939] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 140.423609][ T6939] mmap_region+0x180/0x3e0 [ 140.423650][ T6939] do_mmap+0xc63/0x12f0 [ 140.423699][ T6939] ? __pfx_do_mmap+0x10/0x10 [ 140.423740][ T6939] ? __pfx_down_write_killable+0x10/0x10 [ 140.423782][ T6939] vm_mmap_pgoff+0x29e/0x470 [ 140.423832][ T6939] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 140.423882][ T6939] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 140.423914][ T6939] ? hugetlbfs_get_inode+0x36e/0x750 [ 140.423965][ T6939] ksys_mmap_pgoff+0x1c4/0x5b0 [ 140.424012][ T6939] __x64_sys_mmap+0x125/0x190 [ 140.424056][ T6939] do_syscall_64+0x106/0xf80 [ 140.424083][ T6939] ? clear_bhb_loop+0x40/0x90 [ 140.424116][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.424146][ T6939] RIP: 0033:0x7fd422b9c629 [ 140.424171][ T6939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.424197][ T6939] RSP: 002b:00007fd423a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.424224][ T6939] RAX: ffffffffffffffda RBX: 00007fd422e16090 RCX: 00007fd422b9c629 [ 140.424242][ T6939] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000200000000000 [ 140.424262][ T6939] RBP: 00007fd422c32b39 R08: 0000000000000401 R09: 0000300000000000 [ 140.424280][ T6939] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 140.424294][ T6939] R13: 00007fd422e16128 R14: 00007fd422e16090 R15: 00007fffc805dc38 [ 140.424327][ T6939] [ 141.229855][ T6926] mkiss: ax0: crc mode is auto. [ 141.271768][ T6950] zswap: compressor not available [ 142.358869][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.367445][ T7034] ubi0: attaching mtd0 [ 145.373198][ T7034] ubi0: scanning is finished [ 145.406547][ T7034] ubi0: empty MTD device detected [ 146.144866][ T7034] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 146.364365][ T7034] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 146.484346][ T7034] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 146.491384][ T7034] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 146.539418][ T7034] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 146.611739][ T7034] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 146.687081][ T7034] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1199505891 [ 146.755433][ T7034] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 146.884477][ T7055] ubi0: background thread "ubi_bgt0d" started, PID 7055 [ 146.884645][ T7037] ubi0: detaching mtd0 [ 147.057423][ T7037] ubi0: mtd0 is detached [ 147.135049][ T7075] FAULT_INJECTION: forcing a failure. [ 147.135049][ T7075] name fail_futex, interval 1, probability 0, space 0, times 1 [ 147.254240][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.1.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.254287][ T7075] Tainted: [L]=SOFTLOCKUP [ 147.254296][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.254327][ T7075] Call Trace: [ 147.254335][ T7075] [ 147.254352][ T7075] dump_stack_lvl+0x100/0x190 [ 147.254398][ T7075] should_fail_ex.cold+0x5/0xa [ 147.254430][ T7075] get_futex_key+0x1d2/0x1620 [ 147.254465][ T7075] ? __pfx_get_futex_key+0x10/0x10 [ 147.254491][ T7075] ? do_syscall_64+0x106/0xf80 [ 147.254532][ T7075] futex_wake+0xea/0x530 [ 147.254572][ T7075] ? __pfx_futex_wake+0x10/0x10 [ 147.254612][ T7075] ? __lock_acquire+0x4a5/0x2630 [ 147.254652][ T7075] do_futex+0x32b/0x350 [ 147.254685][ T7075] ? __pfx_do_futex+0x10/0x10 [ 147.254718][ T7075] ? find_held_lock+0x2b/0x80 [ 147.254760][ T7075] __x64_sys_futex+0x34f/0x4d0 [ 147.254798][ T7075] ? __pfx___x64_sys_futex+0x10/0x10 [ 147.254830][ T7075] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 147.254870][ T7075] do_syscall_64+0x106/0xf80 [ 147.254897][ T7075] ? clear_bhb_loop+0x40/0x90 [ 147.254932][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.254959][ T7075] RIP: 0033:0x7f9f92d9c629 [ 147.254982][ T7075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.255008][ T7075] RSP: 002b:00007f9f93d390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 147.255034][ T7075] RAX: ffffffffffffffda RBX: 00007f9f93015fa8 RCX: 00007f9f92d9c629 [ 147.255053][ T7075] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f93015fac [ 147.255070][ T7075] RBP: 00007f9f93015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 147.255086][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.255102][ T7075] R13: 00007f9f93016038 R14: 00007ffd8ddc8f20 R15: 00007ffd8ddc9008 [ 147.255139][ T7075] [ 148.140155][ T7095] Console: switching to colour VGA+ 80x25 [ 149.097567][ T7117] FAULT_INJECTION: forcing a failure. [ 149.097567][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 149.155847][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.1.211 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.155894][ T7117] Tainted: [L]=SOFTLOCKUP [ 149.155904][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.155920][ T7117] Call Trace: [ 149.155929][ T7117] [ 149.155939][ T7117] dump_stack_lvl+0x100/0x190 [ 149.155986][ T7117] should_fail_ex.cold+0x5/0xa [ 149.156018][ T7117] should_failslab+0xc2/0x120 [ 149.156060][ T7117] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 149.156093][ T7117] ? vm_area_dup+0x27/0x8e0 [ 149.156129][ T7117] vm_area_dup+0x27/0x8e0 [ 149.156159][ T7117] __split_vma+0x18c/0xd90 [ 149.156202][ T7117] ? __pfx___split_vma+0x10/0x10 [ 149.156230][ T7117] ? finish_task_switch.isra.0+0x200/0xb80 [ 149.156267][ T7117] ? lockdep_hardirqs_on+0x78/0x100 [ 149.156305][ T7117] vma_modify+0x1121/0x2250 [ 149.156348][ T7117] ? __pfx_vma_modify+0x10/0x10 [ 149.156391][ T7117] vma_modify_flags+0x257/0x3d0 [ 149.156427][ T7117] ? __pfx_vma_modify_flags+0x10/0x10 [ 149.156475][ T7117] ? mtree_range_walk+0x6ce/0xcd0 [ 149.156528][ T7117] mlock_fixup+0x302/0xf00 [ 149.156565][ T7117] ? __pfx_mlock_fixup+0x10/0x10 [ 149.156609][ T7117] apply_vma_lock_flags+0x256/0x370 [ 149.156647][ T7117] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 149.156680][ T7117] ? __pfx___might_resched+0x10/0x10 [ 149.156724][ T7117] ? __pfx_down_write_killable+0x10/0x10 [ 149.156759][ T7117] ? do_futex+0x192/0x350 [ 149.156791][ T7117] do_mlock+0x261/0x7f0 [ 149.156826][ T7117] ? __pfx_do_mlock+0x10/0x10 [ 149.156855][ T7117] ? __x64_sys_futex+0x34f/0x4d0 [ 149.156878][ T7117] ? __x64_sys_futex+0x358/0x4d0 [ 149.156909][ T7117] ? xfd_validate_state+0x129/0x190 [ 149.156953][ T7117] __x64_sys_mlock+0x59/0x80 [ 149.156984][ T7117] do_syscall_64+0x106/0xf80 [ 149.157009][ T7117] ? clear_bhb_loop+0x40/0x90 [ 149.157037][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.157065][ T7117] RIP: 0033:0x7f9f92d9c629 [ 149.157085][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.157112][ T7117] RSP: 002b:00007f9f93d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 149.157137][ T7117] RAX: ffffffffffffffda RBX: 00007f9f93016090 RCX: 00007f9f92d9c629 [ 149.157155][ T7117] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 149.157171][ T7117] RBP: 00007f9f92e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.157196][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.157211][ T7117] R13: 00007f9f93016128 R14: 00007f9f93016090 R15: 00007ffd8ddc9008 [ 149.157246][ T7117] [ 150.384513][ T7107] FAULT_INJECTION: forcing a failure. [ 150.384513][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.404561][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.2.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.404609][ T7107] Tainted: [L]=SOFTLOCKUP [ 150.404619][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.404635][ T7107] Call Trace: [ 150.404645][ T7107] [ 150.404656][ T7107] dump_stack_lvl+0x100/0x190 [ 150.404704][ T7107] should_fail_ex.cold+0x5/0xa [ 150.404735][ T7107] _copy_to_iter+0x5a4/0x1720 [ 150.404781][ T7107] ? __pfx__copy_to_iter+0x10/0x10 [ 150.404817][ T7107] ? trace_pelt_se_tp+0x159/0x1b0 [ 150.404857][ T7107] ? update_cfs_rq_load_avg+0x51/0x550 [ 150.404893][ T7107] simple_copy_to_iter+0x46/0x90 [ 150.404930][ T7107] __skb_datagram_iter+0x129/0x900 [ 150.404966][ T7107] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.405014][ T7107] __skb_datagram_iter+0x749/0x900 [ 150.405051][ T7107] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.405086][ T7107] ? __pfx_sctp_skb_recv_datagram+0x10/0x10 [ 150.405134][ T7107] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.405182][ T7107] skb_copy_datagram_iter+0xa1/0x270 [ 150.405225][ T7107] sctp_recvmsg+0x258/0xe20 [ 150.405266][ T7107] ? __pfx_sctp_recvmsg+0x10/0x10 [ 150.405303][ T7107] ? rcu_is_watching+0x12/0xc0 [ 150.405345][ T7107] ? __pfx_sctp_recvmsg+0x10/0x10 [ 150.405377][ T7107] inet_recvmsg+0x625/0x6a0 [ 150.405416][ T7107] ? __pfx_inet_recvmsg+0x10/0x10 [ 150.405453][ T7107] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 150.405492][ T7107] sock_recvmsg+0x1b2/0x250 [ 150.405528][ T7107] sock_read_iter+0x2c6/0x3c0 [ 150.405562][ T7107] ? __pfx_sock_read_iter+0x10/0x10 [ 150.405593][ T7107] ? futex_unqueue+0x133/0x2c0 [ 150.405621][ T7107] ? futex_unqueue+0x133/0x2c0 [ 150.405661][ T7107] ? __futex_wait+0x256/0x300 [ 150.405706][ T7107] do_iter_readv_writev+0x60d/0x920 [ 150.405745][ T7107] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 150.405778][ T7107] ? common_file_perm+0x1ab/0x4f0 [ 150.405820][ T7107] ? bpf_lsm_file_permission+0x9/0x10 [ 150.405858][ T7107] ? security_file_permission+0x76/0x210 [ 150.405899][ T7107] ? rw_verify_area+0xce/0x6d0 [ 150.405935][ T7107] vfs_readv+0x4d3/0x8d0 [ 150.405978][ T7107] ? __pfx_vfs_readv+0x10/0x10 [ 150.406039][ T7107] ? __fget_files+0x21f/0x3d0 [ 150.406085][ T7107] ? do_readv+0x28a/0x340 [ 150.406125][ T7107] do_readv+0x28a/0x340 [ 150.406160][ T7107] ? __pfx_do_readv+0x10/0x10 [ 150.406206][ T7107] do_syscall_64+0x106/0xf80 [ 150.406234][ T7107] ? clear_bhb_loop+0x40/0x90 [ 150.406267][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.406295][ T7107] RIP: 0033:0x7f485939c629 [ 150.406320][ T7107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.406345][ T7107] RSP: 002b:00007f485a25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 150.406372][ T7107] RAX: ffffffffffffffda RBX: 00007f4859615fa0 RCX: 00007f485939c629 [ 150.406390][ T7107] RDX: 0000000000000003 RSI: 0000200000000a80 RDI: 0000000000000003 [ 150.406408][ T7107] RBP: 00007f4859432b39 R08: 0000000000000000 R09: 0000000000000000 [ 150.406424][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.406440][ T7107] R13: 00007f4859616038 R14: 00007f4859615fa0 R15: 00007fffb04a3c68 [ 150.406478][ T7107] [ 150.895321][ T7132] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.534997][ T7159] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.553265][ T7191] FAULT_INJECTION: forcing a failure. [ 153.553265][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.571874][ T7191] CPU: 0 UID: 0 PID: 7191 Comm: syz.3.222 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.571920][ T7191] Tainted: [L]=SOFTLOCKUP [ 153.571929][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.571945][ T7191] Call Trace: [ 153.571955][ T7191] [ 153.571966][ T7191] dump_stack_lvl+0x100/0x190 [ 153.572011][ T7191] should_fail_ex.cold+0x5/0xa [ 153.572043][ T7191] _copy_from_user+0x2e/0xd0 [ 153.572082][ T7191] copy_msghdr_from_user+0x9f/0x4f0 [ 153.572120][ T7191] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 153.572163][ T7191] ? futex_unqueue+0x133/0x2c0 [ 153.572202][ T7191] ___sys_sendmsg+0x106/0x1e0 [ 153.572240][ T7191] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.572276][ T7191] ? __pfx___futex_wait+0x10/0x10 [ 153.572329][ T7191] ? find_held_lock+0x2b/0x80 [ 153.572393][ T7191] __sys_sendmmsg+0x205/0x430 [ 153.572425][ T7191] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.572463][ T7191] ? __pfx_do_futex+0x10/0x10 [ 153.572511][ T7191] ? xfd_validate_state+0x129/0x190 [ 153.572558][ T7191] __x64_sys_sendmmsg+0x9c/0x100 [ 153.572585][ T7191] ? lockdep_hardirqs_on+0x78/0x100 [ 153.572614][ T7191] do_syscall_64+0x106/0xf80 [ 153.572641][ T7191] ? clear_bhb_loop+0x40/0x90 [ 153.572675][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.572704][ T7191] RIP: 0033:0x7f997919c629 [ 153.572733][ T7191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.572760][ T7191] RSP: 002b:00007f997a047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.572787][ T7191] RAX: ffffffffffffffda RBX: 00007f9979415fa0 RCX: 00007f997919c629 [ 153.572806][ T7191] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 153.572823][ T7191] RBP: 00007f9979232b39 R08: 0000000000000000 R09: 0000000000000000 [ 153.572847][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.572864][ T7191] R13: 00007f9979416038 R14: 00007f9979415fa0 R15: 00007ffd8f1f6328 [ 153.572901][ T7191] [ 154.246539][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 155.711946][ T7237] Invalid ELF header magic: != ELF [ 156.097276][ T7247] Setting dangerous option i915.mitigations - tainting kernel [ 156.329696][ T7217] mmap: syz.2.227 (7217) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.255433][ T7268] vivid-007: ================= START STATUS ================= [ 157.329957][ T7268] vivid-007: Enable Output Cropping: true [ 157.350990][ T7268] vivid-007: Enable Output Composing: true [ 157.379569][ T7268] vivid-007: Enable Output Scaler: true [ 157.403154][ T7268] vivid-007: Tx RGB Quantization Range: Automatic [ 157.409861][ T7268] vivid-007: Transmit Mode: HDMI [ 157.416222][ T7268] vivid-007: Hotplug Present: 0x00000000 [ 157.438655][ T7268] vivid-007: RxSense Present: 0x00000000 [ 157.483549][ T7268] vivid-007: EDID Present: 0x00000000 [ 157.491451][ T7268] vivid-007: ================== END STATUS ================== [ 157.711008][ T7276] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 157.738856][ T7276] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.788741][ T7276] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 157.839851][ T7276] page_type: f5(slab) [ 157.843860][ T7276] raw: 00fff00000000040 ffff88801ce8f140 dead000000000100 dead000000000122 [ 157.984862][ T7276] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 158.049986][ T7276] head: 00fff00000000040 ffff88801ce8f140 dead000000000100 dead000000000122 [ 158.128395][ T7276] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 158.208001][ T7276] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 158.309973][ T7276] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 158.373565][ T7276] page dumped because: unmovable page [ 158.403838][ T7276] page_owner tracks the page as allocated [ 158.442595][ T7276] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 30506257834, free_ts 23645494352 [ 158.574123][ T7276] post_alloc_hook+0x153/0x170 [ 158.594415][ T7276] get_page_from_freelist+0x111d/0x3140 [ 158.600002][ T7276] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 158.644811][ T7276] new_slab+0xa6/0x6d0 [ 158.654502][ T7276] refill_objects+0x26b/0x400 [ 158.669600][ T7276] __pcs_replace_empty_main+0x19f/0x600 [ 158.679986][ T7276] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 158.735095][ T7276] alloc_inode+0x183/0x250 [ 158.765367][ T7276] iget_locked+0x1d9/0x6d0 [ 158.794037][ T7276] kernfs_get_inode+0x46/0x470 [ 158.818348][ T7276] kernfs_iop_lookup+0x1a7/0x2d0 [ 158.833905][ T7276] lookup_open.isra.0+0x631/0x11b0 [ 158.855964][ T7276] path_openat+0xa98/0x31a0 [ 158.864549][ T7276] do_file_open+0x20e/0x430 [ 158.876206][ T7276] do_sys_openat2+0x10d/0x1e0 [ 158.887956][ T7276] __x64_sys_openat+0x12d/0x210 [ 158.901466][ T7276] page last free pid 1 tgid 1 stack trace: [ 159.255343][ T7276] __free_frozen_pages+0x7ca/0x10a0 [ 159.290607][ T7276] free_contig_range+0xde/0x1d0 [ 159.314817][ T7276] destroy_args+0xa8/0x7a0 [ 159.319280][ T7276] debug_vm_pgtable+0x1b66/0x34c0 [ 159.335811][ T7276] do_one_initcall+0x11d/0x760 [ 159.340693][ T7276] kernel_init_freeable+0x6e5/0x7a0 [ 159.361241][ T7276] kernel_init+0x1f/0x1e0 [ 159.375317][ T7276] ret_from_fork+0x754/0xd80 [ 159.379945][ T7276] ret_from_fork_asm+0x1a/0x30 [ 160.234936][ T7303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.242'. [ 160.567192][ T7309] netlink: 342 bytes leftover after parsing attributes in process `syz.4.244'. [ 160.839194][ T7307] FAULT_INJECTION: forcing a failure. [ 160.839194][ T7307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.924401][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.3.243 Tainted: G U L syzkaller #0 PREEMPT(full) [ 160.924451][ T7307] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 160.924461][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.924477][ T7307] Call Trace: [ 160.924486][ T7307] [ 160.924495][ T7307] dump_stack_lvl+0x100/0x190 [ 160.924549][ T7307] should_fail_ex.cold+0x5/0xa [ 160.924575][ T7307] ? prepare_alloc_pages+0x16d/0x5f0 [ 160.924622][ T7307] should_fail_alloc_page+0xeb/0x140 [ 160.924667][ T7307] prepare_alloc_pages+0x1f0/0x5f0 [ 160.924717][ T7307] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 160.924756][ T7307] ? __pfx_stack_trace_save+0x10/0x10 [ 160.924800][ T7307] ? stack_depot_save_flags+0x27/0x9d0 [ 160.924837][ T7307] ? kasan_save_stack+0x3f/0x50 [ 160.924871][ T7307] ? kasan_save_stack+0x30/0x50 [ 160.924904][ T7307] ? kasan_save_track+0x14/0x30 [ 160.924938][ T7307] ? __kasan_slab_alloc+0x89/0x90 [ 160.924987][ T7307] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.925030][ T7307] ? __pfx_css_rstat_updated+0x10/0x10 [ 160.925068][ T7307] ? lock_acquire+0x1cf/0x380 [ 160.925101][ T7307] ? find_held_lock+0x2b/0x80 [ 160.925140][ T7307] ? page_table_check_set+0x49a/0xa10 [ 160.925178][ T7307] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.925221][ T7307] ? policy_nodemask+0xed/0x4f0 [ 160.925265][ T7307] alloc_pages_mpol+0x1fb/0x550 [ 160.925307][ T7307] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 160.925356][ T7307] folio_alloc_mpol_noprof+0x36/0x340 [ 160.925386][ T7307] vma_alloc_folio_noprof+0xed/0x1d0 [ 160.925415][ T7307] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 160.925451][ T7307] do_anonymous_page+0xb3a/0x1fb0 [ 160.925493][ T7307] __handle_mm_fault+0x1d42/0x2b60 [ 160.925542][ T7307] ? __pfx___handle_mm_fault+0x10/0x10 [ 160.925577][ T7307] ? pte_offset_map_lock+0x174/0x320 [ 160.925619][ T7307] ? find_held_lock+0x2b/0x80 [ 160.925673][ T7307] ? follow_page_pte+0x5b3/0x1400 [ 160.925723][ T7307] handle_mm_fault+0x36d/0xa20 [ 160.925762][ T7307] __get_user_pages+0xf9c/0x34d0 [ 160.925819][ T7307] ? __pfx___get_user_pages+0x10/0x10 [ 160.925873][ T7307] populate_vma_page_range+0x267/0x3f0 [ 160.925903][ T7307] ? __pfx_populate_vma_page_range+0x10/0x10 [ 160.925931][ T7307] ? __pfx_find_vma_intersection+0x10/0x10 [ 160.925982][ T7307] __mm_populate+0x107/0x3a0 [ 160.926012][ T7307] ? __pfx___mm_populate+0x10/0x10 [ 160.926042][ T7307] ? up_write+0x406/0x4f0 [ 160.926082][ T7307] vm_mmap_pgoff+0x37f/0x470 [ 160.926129][ T7307] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 160.926181][ T7307] ? __x64_sys_futex+0x34f/0x4d0 [ 160.926211][ T7307] ? __x64_sys_futex+0x358/0x4d0 [ 160.926248][ T7307] ksys_mmap_pgoff+0x7d/0x5b0 [ 160.926294][ T7307] __x64_sys_mmap+0x125/0x190 [ 160.926337][ T7307] do_syscall_64+0x106/0xf80 [ 160.926365][ T7307] ? clear_bhb_loop+0x40/0x90 [ 160.926401][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.926430][ T7307] RIP: 0033:0x7f997919c629 [ 160.926454][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.926488][ T7307] RSP: 002b:00007f997a026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 160.926521][ T7307] RAX: ffffffffffffffda RBX: 00007f9979416090 RCX: 00007f997919c629 [ 160.926538][ T7307] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 160.926555][ T7307] RBP: 00007f9979232b39 R08: 0000000000000002 R09: 0000000000008000 [ 160.926571][ T7307] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 160.926585][ T7307] R13: 00007f9979416128 R14: 00007f9979416090 R15: 00007ffd8f1f6328 [ 160.926621][ T7307] [ 161.762052][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 163.160088][ T7367] FAULT_INJECTION: forcing a failure. [ 163.160088][ T7367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.193389][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.1.255 Tainted: G U L syzkaller #0 PREEMPT(full) [ 163.193433][ T7367] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 163.193442][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.193456][ T7367] Call Trace: [ 163.193464][ T7367] [ 163.193473][ T7367] dump_stack_lvl+0x100/0x190 [ 163.193516][ T7367] should_fail_ex.cold+0x5/0xa [ 163.193546][ T7367] _copy_to_user+0x32/0xd0 [ 163.193583][ T7367] simple_read_from_buffer+0xcb/0x170 [ 163.193621][ T7367] proc_fail_nth_read+0x1af/0x230 [ 163.193662][ T7367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.193704][ T7367] ? rw_verify_area+0xce/0x6d0 [ 163.193734][ T7367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.193774][ T7367] vfs_read+0x1e4/0xb30 [ 163.193811][ T7367] ? __pfx_vfs_read+0x10/0x10 [ 163.193843][ T7367] ? __fget_files+0x215/0x3d0 [ 163.193884][ T7367] ? __fget_files+0x21f/0x3d0 [ 163.193928][ T7367] ksys_read+0x12a/0x250 [ 163.193960][ T7367] ? __pfx_ksys_read+0x10/0x10 [ 163.194003][ T7367] do_syscall_64+0x106/0xf80 [ 163.194029][ T7367] ? clear_bhb_loop+0x40/0x90 [ 163.194061][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.194087][ T7367] RIP: 0033:0x7f9f92d5cece [ 163.194107][ T7367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.194137][ T7367] RSP: 002b:00007f9f93d17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.194162][ T7367] RAX: ffffffffffffffda RBX: 00007f9f93d186c0 RCX: 00007f9f92d5cece [ 163.194178][ T7367] RDX: 000000000000000f RSI: 00007f9f93d180a0 RDI: 0000000000000003 [ 163.194193][ T7367] RBP: 00007f9f93d18090 R08: 0000000000000000 R09: 0000000000000000 [ 163.194208][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.194222][ T7367] R13: 00007f9f93016128 R14: 00007f9f93016090 R15: 00007ffd8ddc9008 [ 163.194260][ T7367] [ 165.053920][ T7397] futex_wake_op: syz.4.264 tries to shift op by -2048; fix this program [ 165.171045][ T7397] size and base must be multiples of 4 kiB [ 165.195195][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.4.264 Tainted: G U L syzkaller #0 PREEMPT(full) [ 165.195255][ T7397] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 165.195265][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.195282][ T7397] Call Trace: [ 165.195291][ T7397] [ 165.195302][ T7397] dump_stack_lvl+0x100/0x190 [ 165.195352][ T7397] mtrr_add.cold+0x74/0x87 [ 165.195385][ T7397] mtrr_ioctl+0x25a/0xcf0 [ 165.195423][ T7397] ? __pfx_mtrr_ioctl+0x10/0x10 [ 165.195465][ T7397] ? find_held_lock+0x2b/0x80 [ 165.195517][ T7397] ? __fget_files+0x21f/0x3d0 [ 165.195555][ T7397] ? __pfx_mtrr_ioctl+0x10/0x10 [ 165.195591][ T7397] proc_reg_unlocked_ioctl+0x229/0x320 [ 165.195626][ T7397] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 165.195664][ T7397] __x64_sys_ioctl+0x18e/0x210 [ 165.195701][ T7397] do_syscall_64+0x106/0xf80 [ 165.195729][ T7397] ? clear_bhb_loop+0x40/0x90 [ 165.195763][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.195792][ T7397] RIP: 0033:0x7fd422b9c629 [ 165.195818][ T7397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.195844][ T7397] RSP: 002b:00007fd423a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.195872][ T7397] RAX: ffffffffffffffda RBX: 00007fd422e15fa0 RCX: 00007fd422b9c629 [ 165.195890][ T7397] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 165.195907][ T7397] RBP: 00007fd422c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 165.195924][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.195940][ T7397] R13: 00007fd422e16038 R14: 00007fd422e15fa0 R15: 00007fffc805dc38 [ 165.195976][ T7397] [ 165.586664][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'. [ 165.895333][ T5142] Bluetooth: hci3: unexpected event 0x3e length: 720 > 260 [ 167.512648][ T7452] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 167.857140][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 168.608574][ T7488] zram0: detected capacity change from 0 to 8 [ 168.708303][ T7493] ima: policy update failed [ 168.708664][ T29] audit: type=1807 audit(1771421816.478:4): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 168.758664][ T29] audit: type=1802 audit(1771421816.478:5): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.279" res=0 errno=0 [ 168.809633][ T29] audit: type=1802 audit(1771421816.478:6): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.279" res=0 errno=0 [ 168.933624][ T7502] FAULT_INJECTION: forcing a failure. [ 168.933624][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 168.947504][ T7502] CPU: 1 UID: 0 PID: 7502 Comm: syz.1.282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 168.947546][ T7502] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 168.947555][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.947569][ T7502] Call Trace: [ 168.947578][ T7502] [ 168.947587][ T7502] dump_stack_lvl+0x100/0x190 [ 168.947628][ T7502] should_fail_ex.cold+0x5/0xa [ 168.947657][ T7502] should_failslab+0xc2/0x120 [ 168.947703][ T7502] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 168.947734][ T7502] ? alloc_empty_file+0x55/0x1c0 [ 168.947766][ T7502] alloc_empty_file+0x55/0x1c0 [ 168.947793][ T7502] alloc_file_pseudo+0x13a/0x230 [ 168.947821][ T7502] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 168.947858][ T7502] __shmem_file_setup+0x1a3/0x330 [ 168.947891][ T7502] shmem_zero_setup+0x93/0x1b0 [ 168.947926][ T7502] __mmap_region+0x20b5/0x2760 [ 168.947963][ T7502] ? __pfx___mmap_region+0x10/0x10 [ 168.948020][ T7502] ? finish_task_switch.isra.0+0x205/0xb80 [ 168.948046][ T7502] ? lockdep_hardirqs_on+0x78/0x100 [ 168.948072][ T7502] ? finish_task_switch.isra.0+0x205/0xb80 [ 168.948166][ T7502] ? rcu_is_watching+0x12/0xc0 [ 168.948202][ T7502] ? cap_capable+0x107/0x460 [ 168.948237][ T7502] mmap_region+0x180/0x3e0 [ 168.948275][ T7502] do_mmap+0xc63/0x12f0 [ 168.948320][ T7502] ? __pfx_do_mmap+0x10/0x10 [ 168.948358][ T7502] ? __pfx_down_write_killable+0x10/0x10 [ 168.948396][ T7502] vm_mmap_pgoff+0x29e/0x470 [ 168.948440][ T7502] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 168.948486][ T7502] ? __x64_sys_futex+0x34f/0x4d0 [ 168.948513][ T7502] ? __x64_sys_futex+0x358/0x4d0 [ 168.948547][ T7502] ksys_mmap_pgoff+0x7d/0x5b0 [ 168.948589][ T7502] __x64_sys_mmap+0x125/0x190 [ 168.948629][ T7502] do_syscall_64+0x106/0xf80 [ 168.948653][ T7502] ? clear_bhb_loop+0x40/0x90 [ 168.948689][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.948715][ T7502] RIP: 0033:0x7f9f92d9c629 [ 168.948736][ T7502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.948759][ T7502] RSP: 002b:00007f9f93d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 168.948783][ T7502] RAX: ffffffffffffffda RBX: 00007f9f93015fa0 RCX: 00007f9f92d9c629 [ 168.948800][ T7502] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 168.948813][ T7502] RBP: 00007f9f92e32b39 R08: 0000000000000401 R09: 0000000000008000 [ 168.948828][ T7502] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 168.948843][ T7502] R13: 00007f9f93016038 R14: 00007f9f93015fa0 R15: 00007ffd8ddc9008 [ 168.948878][ T7502] [ 169.422363][ T7511] FAULT_INJECTION: forcing a failure. [ 169.422363][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 169.611546][ T7511] CPU: 0 UID: 0 PID: 7511 Comm: syz.1.284 Tainted: G U L syzkaller #0 PREEMPT(full) [ 169.611573][ T7511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 169.611578][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.611586][ T7511] Call Trace: [ 169.611591][ T7511] [ 169.611603][ T7511] dump_stack_lvl+0x100/0x190 [ 169.611629][ T7511] should_fail_ex.cold+0x5/0xa [ 169.611645][ T7511] should_failslab+0xc2/0x120 [ 169.611666][ T7511] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 169.611684][ T7511] ? security_inode_alloc+0x3b/0x2c0 [ 169.611701][ T7511] ? lockdep_init_map_type+0x5c/0x250 [ 169.611721][ T7511] security_inode_alloc+0x3b/0x2c0 [ 169.611739][ T7511] inode_init_always_gfp+0xced/0x1040 [ 169.611761][ T7511] alloc_inode+0x8e/0x250 [ 169.611776][ T7511] sock_alloc+0x44/0x280 [ 169.611790][ T7511] ? security_socket_create+0x7f/0x250 [ 169.611807][ T7511] sock_create_lite+0x82/0x120 [ 169.611824][ T7511] __netlink_kernel_create+0xbd/0x750 [ 169.611839][ T7511] ? __lock_acquire+0x4a5/0x2630 [ 169.611858][ T7511] ? __pfx___netlink_kernel_create+0x10/0x10 [ 169.611877][ T7511] ? __pfx_diag_net_init+0x10/0x10 [ 169.611896][ T7511] diag_net_init+0xbd/0x140 [ 169.611915][ T7511] ? __pfx_diag_net_init+0x10/0x10 [ 169.611933][ T7511] ? find_held_lock+0x2b/0x80 [ 169.611953][ T7511] ? __pfx_sock_diag_rcv+0x10/0x10 [ 169.611971][ T7511] ? __pfx_sock_diag_bind+0x10/0x10 [ 169.611990][ T7511] ? __raw_spin_lock_init+0x3a/0x110 [ 169.612009][ T7511] ? __pfx_cma_init_net+0x10/0x10 [ 169.612028][ T7511] ops_init+0x1e2/0x5f0 [ 169.612044][ T7511] setup_net+0x118/0x3a0 [ 169.612059][ T7511] ? __pfx_setup_net+0x10/0x10 [ 169.612071][ T7511] ? lockdep_init_map_type+0x5c/0x250 [ 169.612088][ T7511] ? mutex_init_lockep+0x110/0x150 [ 169.612108][ T7511] copy_net_ns+0x46f/0x7c0 [ 169.612125][ T7511] create_new_namespaces+0x3ea/0xac0 [ 169.612152][ T7511] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 169.612167][ T7511] ksys_unshare+0x455/0xab0 [ 169.612185][ T7511] ? __pfx_ksys_unshare+0x10/0x10 [ 169.612209][ T7511] __x64_sys_unshare+0x31/0x40 [ 169.612224][ T7511] do_syscall_64+0x106/0xf80 [ 169.612239][ T7511] ? clear_bhb_loop+0x40/0x90 [ 169.612256][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.612270][ T7511] RIP: 0033:0x7f9f92d9c629 [ 169.612283][ T7511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.612296][ T7511] RSP: 002b:00007f9f93d39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.612310][ T7511] RAX: ffffffffffffffda RBX: 00007f9f93015fa0 RCX: 00007f9f92d9c629 [ 169.612319][ T7511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 169.612327][ T7511] RBP: 00007f9f92e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 169.612335][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.612342][ T7511] R13: 00007f9f93016038 R14: 00007f9f93015fa0 R15: 00007ffd8ddc9008 [ 169.612360][ T7511] [ 169.957457][ T7519] dyndbg: expected <4096 bytes into control [ 170.402766][ T7512] Process accounting resumed [ 172.034454][ T5142] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 173.393994][ T7572] hub 1-0:1.0: USB hub found [ 173.445562][ T7572] hub 1-0:1.0: 1 port detected [ 174.977506][ T7607] netlink: 206 bytes leftover after parsing attributes in process `syz.3.302'. [ 177.045649][ T7631] netlink: 64 bytes leftover after parsing attributes in process `syz.1.310'. [ 177.338211][ T7655] netlink: 158 bytes leftover after parsing attributes in process `syz.3.313'. [ 177.347298][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 177.892234][ T7674] FAULT_INJECTION: forcing a failure. [ 177.892234][ T7674] name failslab, interval 1, probability 0, space 0, times 0 [ 177.938222][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.2.317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 177.938273][ T7674] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 177.938284][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.938300][ T7674] Call Trace: [ 177.938309][ T7674] [ 177.938320][ T7674] dump_stack_lvl+0x100/0x190 [ 177.938367][ T7674] should_fail_ex.cold+0x5/0xa [ 177.938400][ T7674] should_failslab+0xc2/0x120 [ 177.938442][ T7674] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 177.938476][ T7674] ? __proc_create+0x2cb/0x8c0 [ 177.938519][ T7674] __proc_create+0x2cb/0x8c0 [ 177.938558][ T7674] ? __pfx___proc_create+0x10/0x10 [ 177.938609][ T7674] proc_create_reg+0x75/0x170 [ 177.938652][ T7674] proc_create_net_data+0x8e/0x1c0 [ 177.938692][ T7674] ? __pfx_proc_create_net_data+0x10/0x10 [ 177.938742][ T7674] udp6_proc_init+0x57/0x80 [ 177.938785][ T7674] inet6_net_init+0x718/0xb10 [ 177.938815][ T7674] ? __pfx_inet6_net_init+0x10/0x10 [ 177.938843][ T7674] ops_init+0x1e2/0x5f0 [ 177.938877][ T7674] setup_net+0x118/0x3a0 [ 177.938906][ T7674] ? __pfx_setup_net+0x10/0x10 [ 177.938932][ T7674] ? lockdep_init_map_type+0x5c/0x250 [ 177.938977][ T7674] ? mutex_init_lockep+0x110/0x150 [ 177.939018][ T7674] copy_net_ns+0x46f/0x7c0 [ 177.939052][ T7674] create_new_namespaces+0x3ea/0xac0 [ 177.939103][ T7674] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 177.939134][ T7674] ksys_unshare+0x455/0xab0 [ 177.939169][ T7674] ? __pfx_ksys_unshare+0x10/0x10 [ 177.939216][ T7674] __x64_sys_unshare+0x31/0x40 [ 177.939249][ T7674] do_syscall_64+0x106/0xf80 [ 177.939274][ T7674] ? clear_bhb_loop+0x40/0x90 [ 177.939307][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.939334][ T7674] RIP: 0033:0x7f485939c629 [ 177.939357][ T7674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.939383][ T7674] RSP: 002b:00007f485a25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.939409][ T7674] RAX: ffffffffffffffda RBX: 00007f4859615fa0 RCX: 00007f485939c629 [ 177.939427][ T7674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 177.939444][ T7674] RBP: 00007f4859432b39 R08: 0000000000000000 R09: 0000000000000000 [ 177.939461][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.939477][ T7674] R13: 00007f4859616038 R14: 00007f4859615fa0 R15: 00007fffb04a3c68 [ 177.939514][ T7674] [ 179.887996][ T13] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.959557][ T7687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.960565][ T7687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.963889][ T7687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.964102][ T7687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.539246][ T7719] FAULT_INJECTION: forcing a failure. [ 180.539246][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 180.714367][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.4.325 Tainted: G U L syzkaller #0 PREEMPT(full) [ 180.714412][ T7719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 180.714422][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.714438][ T7719] Call Trace: [ 180.714446][ T7719] [ 180.714456][ T7719] dump_stack_lvl+0x100/0x190 [ 180.714502][ T7719] should_fail_ex.cold+0x5/0xa [ 180.714534][ T7719] ? memcg_list_lru_alloc+0x4ec/0x740 [ 180.714568][ T7719] should_failslab+0xc2/0x120 [ 180.714609][ T7719] __kmalloc_noprof+0xe0/0x850 [ 180.714651][ T7719] memcg_list_lru_alloc+0x4ec/0x740 [ 180.714691][ T7719] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 180.714722][ T7719] ? rcu_read_unlock+0x17/0x60 [ 180.714769][ T7719] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 180.714806][ T7719] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 180.714850][ T7719] ? kasan_save_track+0x14/0x30 [ 180.714888][ T7719] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 180.714919][ T7719] ? alloc_inode+0x183/0x250 [ 180.714946][ T7719] ? ioctx_alloc+0x427/0x21e0 [ 180.714992][ T7719] alloc_inode+0x183/0x250 [ 180.715032][ T7719] alloc_anon_inode+0x2a/0x3e0 [ 180.715073][ T7719] ioctx_alloc+0x4dc/0x21e0 [ 180.715125][ T7719] ? find_held_lock+0x2b/0x80 [ 180.715167][ T7719] ? __pfx_ioctx_alloc+0x10/0x10 [ 180.715219][ T7719] __x64_sys_io_setup+0xc9/0x220 [ 180.715262][ T7719] do_syscall_64+0x106/0xf80 [ 180.715289][ T7719] ? clear_bhb_loop+0x40/0x90 [ 180.715320][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.715347][ T7719] RIP: 0033:0x7fd422b9c629 [ 180.715370][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.715396][ T7719] RSP: 002b:00007fd423a79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 180.715424][ T7719] RAX: ffffffffffffffda RBX: 00007fd422e16090 RCX: 00007fd422b9c629 [ 180.715440][ T7719] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 180.715456][ T7719] RBP: 00007fd422c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.715471][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.715486][ T7719] R13: 00007fd422e16128 R14: 00007fd422e16090 R15: 00007fffc805dc38 [ 180.715522][ T7719] [ 182.035260][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.041284][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.047366][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.053339][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.677287][ T7759] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 183.685117][ T7759] netlink: 306 bytes leftover after parsing attributes in process `syz.4.334'. [ 183.704748][ T7759] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 183.748358][ T7759] netlink: 306 bytes leftover after parsing attributes in process `syz.4.334'. [ 185.098469][ T7792] capability: warning: `syz.4.342' uses 32-bit capabilities (legacy support in use) [ 185.756478][ T7768] kexec: Could not allocate control_code_buffer [ 186.759827][ T7822] FAULT_INJECTION: forcing a failure. [ 186.759827][ T7822] name fail_futex, interval 1, probability 0, space 0, times 0 [ 186.776166][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.4.349 Tainted: G U L syzkaller #0 PREEMPT(full) [ 186.776193][ T7822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 186.776199][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.776210][ T7822] Call Trace: [ 186.776215][ T7822] [ 186.776224][ T7822] dump_stack_lvl+0x100/0x190 [ 186.776251][ T7822] should_fail_ex.cold+0x5/0xa [ 186.776269][ T7822] get_futex_key+0x1d2/0x1620 [ 186.776287][ T7822] ? __pfx_get_futex_key+0x10/0x10 [ 186.776300][ T7822] ? futex_hash+0x2c5/0x380 [ 186.776321][ T7822] futex_wake+0xea/0x530 [ 186.776338][ T7822] ? __fget_files+0x215/0x3d0 [ 186.776360][ T7822] ? __pfx_futex_wake+0x10/0x10 [ 186.776379][ T7822] ? __fget_files+0x21f/0x3d0 [ 186.776404][ T7822] do_futex+0x32b/0x350 [ 186.776421][ T7822] ? __pfx_do_futex+0x10/0x10 [ 186.776438][ T7822] ? __pfx_do_sendfile+0x10/0x10 [ 186.776455][ T7822] ? rcu_read_unlock+0x17/0x60 [ 186.776480][ T7822] __x64_sys_futex+0x34f/0x4d0 [ 186.776499][ T7822] ? __pfx___x64_sys_futex+0x10/0x10 [ 186.776516][ T7822] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 186.776550][ T7822] do_syscall_64+0x106/0xf80 [ 186.776565][ T7822] ? clear_bhb_loop+0x40/0x90 [ 186.776583][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.776598][ T7822] RIP: 0033:0x7fd422b9c629 [ 186.776612][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.776625][ T7822] RSP: 002b:00007fd423a9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 186.776643][ T7822] RAX: ffffffffffffffda RBX: 00007fd422e15fa8 RCX: 00007fd422b9c629 [ 186.776653][ T7822] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd422e15fac [ 186.776661][ T7822] RBP: 00007fd422e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 186.776669][ T7822] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 186.776678][ T7822] R13: 00007fd422e16038 R14: 00007fffc805db50 R15: 00007fffc805dc38 [ 186.776696][ T7822] [ 186.778499][ T7822] FAULT_INJECTION: forcing a failure. [ 186.778499][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 187.082699][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.4.349 Tainted: G U L syzkaller #0 PREEMPT(full) [ 187.082727][ T7822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 187.082733][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.082741][ T7822] Call Trace: [ 187.082747][ T7822] [ 187.082752][ T7822] dump_stack_lvl+0x100/0x190 [ 187.082779][ T7822] should_fail_ex.cold+0x5/0xa [ 187.082797][ T7822] should_failslab+0xc2/0x120 [ 187.082818][ T7822] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 187.082836][ T7822] ? security_inode_alloc+0x3b/0x2c0 [ 187.082854][ T7822] ? lockdep_init_map_type+0x5c/0x250 [ 187.082875][ T7822] security_inode_alloc+0x3b/0x2c0 [ 187.082893][ T7822] inode_init_always_gfp+0xced/0x1040 [ 187.082918][ T7822] alloc_inode+0x8e/0x250 [ 187.082934][ T7822] new_inode+0x22/0x1c0 [ 187.082951][ T7822] debugfs_create_dir+0xc4/0x440 [ 187.082971][ T7822] drm_debugfs_clients_add+0x6f/0x210 [ 187.082993][ T7822] drm_file_alloc+0x5c6/0xb40 [ 187.083019][ T7822] drm_open_helper+0x1fc/0x540 [ 187.083043][ T7822] drm_open+0x1a0/0x3e0 [ 187.083064][ T7822] ? __pfx_drm_open+0x10/0x10 [ 187.083084][ T7822] drm_stub_open+0x20f/0x380 [ 187.083106][ T7822] ? __pfx_drm_stub_open+0x10/0x10 [ 187.083126][ T7822] chrdev_open+0x234/0x6a0 [ 187.083146][ T7822] ? __pfx_apparmor_file_open+0x10/0x10 [ 187.083164][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 187.083185][ T7822] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 187.083210][ T7822] do_dentry_open+0x6d8/0x1660 [ 187.083230][ T7822] ? __pfx_chrdev_open+0x10/0x10 [ 187.083255][ T7822] vfs_open+0x82/0x3f0 [ 187.083272][ T7822] path_openat+0x208c/0x31a0 [ 187.083299][ T7822] ? __pfx_path_openat+0x10/0x10 [ 187.083326][ T7822] do_file_open+0x20e/0x430 [ 187.083348][ T7822] ? __pfx_do_file_open+0x10/0x10 [ 187.083382][ T7822] ? alloc_fd+0x476/0x790 [ 187.083404][ T7822] ? do_getname+0x191/0x390 [ 187.083420][ T7822] do_sys_openat2+0x10d/0x1e0 [ 187.083436][ T7822] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.083458][ T7822] __x64_sys_openat+0x12d/0x210 [ 187.083476][ T7822] ? __pfx___x64_sys_openat+0x10/0x10 [ 187.083500][ T7822] do_syscall_64+0x106/0xf80 [ 187.083523][ T7822] ? clear_bhb_loop+0x40/0x90 [ 187.083540][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.083555][ T7822] RIP: 0033:0x7fd422b9c629 [ 187.083568][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.083581][ T7822] RSP: 002b:00007fd423a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.083596][ T7822] RAX: ffffffffffffffda RBX: 00007fd422e15fa0 RCX: 00007fd422b9c629 [ 187.083605][ T7822] RDX: 0000000000040001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 187.083614][ T7822] RBP: 00007fd422c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.083622][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.083630][ T7822] R13: 00007fd422e16038 R14: 00007fd422e15fa0 R15: 00007fffc805dc38 [ 187.083649][ T7822] [ 187.083680][ T7822] debugfs: out of free dentries, can not create directory 'client-7' [ 189.954601][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 193.501932][ T7937] netlink: 62 bytes leftover after parsing attributes in process `syz.1.367'. [ 194.299742][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.306886][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.751067][ T7956] smpboot: CPU 1 is now offline [ 195.072422][ T7962] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 195.106087][ T7962] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 195.787755][ T7975] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 196.885647][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 200.361350][ T8058] vhci_hcd vhci_hcd.3: default hub control req: ff03 v0202 i0002 l8 [ 201.770345][ T8068] Process accounting paused [ 202.470885][ T8091] FAULT_INJECTION: forcing a failure. [ 202.470885][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 202.512867][ T8091] CPU: 1 UID: 0 PID: 8091 Comm: syz.1.406 Tainted: G U L syzkaller #0 PREEMPT(full) [ 202.512914][ T8091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 202.512924][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.512939][ T8091] Call Trace: [ 202.512947][ T8091] [ 202.512959][ T8091] dump_stack_lvl+0x100/0x190 [ 202.513009][ T8091] should_fail_ex.cold+0x5/0xa [ 202.513044][ T8091] should_failslab+0xc2/0x120 [ 202.513089][ T8091] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 202.513126][ T8091] ? __pmd_alloc+0xbf/0x9c0 [ 202.513161][ T8091] __pmd_alloc+0xbf/0x9c0 [ 202.513185][ T8091] ? __pud_alloc+0x57a/0x760 [ 202.513215][ T8091] copy_page_range+0x4531/0x6570 [ 202.513258][ T8091] ? __lock_acquire+0x4a5/0x2630 [ 202.513327][ T8091] ? mas_wr_store_entry+0x6d2/0x2390 [ 202.513365][ T8091] ? __pfx_copy_page_range+0x10/0x10 [ 202.513405][ T8091] ? mas_store+0x666/0xac0 [ 202.513443][ T8091] ? __pfx_mas_store+0x10/0x10 [ 202.513486][ T8091] ? __pfx___vma_start_write+0x10/0x10 [ 202.513530][ T8091] dup_mmap+0xc00/0x1db0 [ 202.513574][ T8091] ? __pfx_dup_mmap+0x10/0x10 [ 202.513599][ T8091] ? rcu_is_watching+0x12/0xc0 [ 202.513665][ T8091] copy_process+0x73d7/0x7a10 [ 202.513716][ T8091] ? __pfx_copy_process+0x10/0x10 [ 202.513748][ T8091] ? find_held_lock+0x2b/0x80 [ 202.513810][ T8091] kernel_clone+0xfc/0x9a0 [ 202.513839][ T8091] ? __pfx_futex_wait+0x10/0x10 [ 202.513880][ T8091] ? __pfx_kernel_clone+0x10/0x10 [ 202.513934][ T8091] __do_sys_clone+0xd9/0x120 [ 202.513967][ T8091] ? __pfx___do_sys_clone+0x10/0x10 [ 202.513999][ T8091] ? __sys_sendmsg+0x18f/0x220 [ 202.514057][ T8091] do_syscall_64+0x106/0xf80 [ 202.514085][ T8091] ? clear_bhb_loop+0x40/0x90 [ 202.514121][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.514150][ T8091] RIP: 0033:0x7f9f92d9c629 [ 202.514175][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.514202][ T8091] RSP: 002b:00007f9f93d38fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 202.514229][ T8091] RAX: ffffffffffffffda RBX: 00007f9f93015fa0 RCX: 00007f9f92d9c629 [ 202.514245][ T8091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 202.514258][ T8091] RBP: 00007f9f92e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 202.514272][ T8091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.514293][ T8091] R13: 00007f9f93016038 R14: 00007f9f93015fa0 R15: 00007ffd8ddc9008 [ 202.514326][ T8091] [ 203.976486][ T29] audit: type=1800 audit(4294967302.050:7): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.411" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 207.565396][ T8159] __vm_enough_memory: pid: 8159, comm: syz.3.421, bytes: 4398046511104 not enough memory for the allocation [ 207.810461][ T8162] random: crng reseeded on system resumption [ 208.921241][ T8180] zswap: compressor not available [ 210.672686][ T8229] QAT: Stopping all acceleration devices. [ 211.209641][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 211.516859][ T8263] zram0: detected capacity change from 8 to 0 [ 211.878862][ T5833] Bluetooth: hci2: Malformed Event: 0x02 [ 212.297971][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.326086][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.339354][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.364569][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.372403][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.656983][ T8293] [U] 0="/ [ 212.660665][ T8293] [U] [ 212.663441][ T8293] [U] EeQ@ [ 212.751812][ T8294] [U]  [ 212.780740][ T8297] vivid-007: ================= START STATUS ================= [ 212.824718][ T8297] vivid-007: Generate PTS: true [ 212.830666][ T8297] vivid-007: Generate SCR: true [ 212.836597][ T8297] tpg source WxH: 320x240 (Y'CbCr) [ 212.841796][ T8297] tpg field: 1 [ 212.851916][ T8297] tpg crop: (0,0)/320x240 [ 212.857588][ T8297] tpg compose: (0,0)/320x240 [ 212.874349][ T8297] tpg colorspace: 8 [ 212.894453][ T8297] tpg transfer function: 0/0 [ 212.905966][ T8297] tpg Y'CbCr encoding: 0/0 [ 212.910424][ T8297] tpg quantization: 0/0 [ 212.937108][ T8297] tpg RGB range: 0/2 [ 212.941040][ T8297] vivid-007: ================== END STATUS ================== [ 213.418367][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 214.149168][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.161418][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.169167][ T8279] bridge_slave_0: entered allmulticast mode [ 214.178484][ T8279] bridge_slave_0: entered promiscuous mode [ 214.193598][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.205309][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.212547][ T8279] bridge_slave_1: entered allmulticast mode [ 214.220792][ T8279] bridge_slave_1: entered promiscuous mode [ 214.509123][ T51] Bluetooth: hci0: command tx timeout [ 214.569028][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.590723][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.686576][ T8279] team0: Port device team_slave_0 added [ 214.715070][ T8279] team0: Port device team_slave_1 added [ 215.053784][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.073085][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.156273][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.171938][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.180702][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.207006][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.539049][ T8279] hsr_slave_0: entered promiscuous mode [ 215.561883][ T8279] hsr_slave_1: entered promiscuous mode [ 215.575556][ T8279] debugfs: 'hsr0' already exists in 'hsr' [ 215.582035][ T8279] Cannot create hsr debugfs directory [ 215.649506][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.833021][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.990272][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.120560][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.529773][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 216.572404][ T8387] FAULT_INJECTION: forcing a failure. [ 216.572404][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 216.605520][ T51] Bluetooth: hci0: command tx timeout [ 216.630654][ T8387] CPU: 0 UID: 0 PID: 8387 Comm: syz.3.466 Tainted: G U L syzkaller #0 PREEMPT(full) [ 216.630701][ T8387] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 216.630712][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.630727][ T8387] Call Trace: [ 216.630736][ T8387] [ 216.630745][ T8387] dump_stack_lvl+0x100/0x190 [ 216.630791][ T8387] should_fail_ex.cold+0x5/0xa [ 216.630820][ T8387] should_failslab+0xc2/0x120 [ 216.630850][ T8387] __kmalloc_cache_noprof+0x7a/0x6f0 [ 216.630867][ T8387] ? bdi_split_work_to_wbs+0x2d7/0xfe0 [ 216.630887][ T8387] bdi_split_work_to_wbs+0x2d7/0xfe0 [ 216.630907][ T8387] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 216.630936][ T8387] ? __lock_acquire+0x4a5/0x2630 [ 216.630956][ T8387] __writeback_inodes_sb_nr+0x200/0x2b0 [ 216.630973][ T8387] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 216.630996][ T8387] ? __pfx_fs_bdev_sync+0x10/0x10 [ 216.631015][ T8387] ? get_nr_dirty_inodes+0x115/0x190 [ 216.631033][ T8387] ? __pfx_fs_bdev_sync+0x10/0x10 [ 216.631050][ T8387] sync_filesystem+0xbb/0x290 [ 216.631072][ T8387] ? __pfx_fs_bdev_sync+0x10/0x10 [ 216.631088][ T8387] fs_bdev_sync+0x2c/0x40 [ 216.631105][ T8387] blkdev_common_ioctl+0xf76/0x2ba0 [ 216.631123][ T8387] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 216.631142][ T8387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.631175][ T8387] ? do_vfs_ioctl+0x226/0x13e0 [ 216.631193][ T8387] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 216.631216][ T8387] ? find_held_lock+0x2b/0x80 [ 216.631238][ T8387] ? __fget_files+0x215/0x3d0 [ 216.631260][ T8387] blkdev_ioctl+0x43b/0x6f0 [ 216.631275][ T8387] ? __pfx_blkdev_ioctl+0x10/0x10 [ 216.631291][ T8387] ? __pfx_blkdev_ioctl+0x10/0x10 [ 216.631306][ T8387] __x64_sys_ioctl+0x18e/0x210 [ 216.631324][ T8387] do_syscall_64+0x106/0xf80 [ 216.631339][ T8387] ? clear_bhb_loop+0x40/0x90 [ 216.631358][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.631374][ T8387] RIP: 0033:0x7f997919c629 [ 216.631389][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.631403][ T8387] RSP: 002b:00007f997a026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.631417][ T8387] RAX: ffffffffffffffda RBX: 00007f9979416090 RCX: 00007f997919c629 [ 216.631427][ T8387] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004 [ 216.631435][ T8387] RBP: 00007f9979232b39 R08: 0000000000000000 R09: 0000000000000000 [ 216.631444][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.631452][ T8387] R13: 00007f9979416128 R14: 00007f9979416090 R15: 00007ffd8f1f6328 [ 216.631471][ T8387] [ 216.934023][ T8385] i: entered promiscuous mode [ 216.982501][ T8386] HfR: entered promiscuous mode [ 217.050165][ T8279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.121995][ T8279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.241441][ T12] team0: left allmulticast mode [ 217.254300][ T12] team_slave_0: left allmulticast mode [ 217.259853][ T12] team_slave_1: left allmulticast mode [ 217.286132][ T12] team0: left promiscuous mode [ 217.290954][ T12] team_slave_0: left promiscuous mode [ 217.322292][ T12] team_slave_1: left promiscuous mode [ 217.334763][ T12] bridge0: port 3(team0) entered disabled state [ 217.364858][ T12] bridge_slave_1: left allmulticast mode [ 217.370555][ T12] bridge_slave_1: left promiscuous mode [ 217.383541][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.409888][ T12] bridge_slave_0: left allmulticast mode [ 217.422762][ T12] bridge_slave_0: left promiscuous mode [ 217.437099][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.964876][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.989575][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.047859][ T12] bond0 (unregistering): Released all slaves [ 218.116784][ T8279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.149317][ T8279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.674561][ T51] Bluetooth: hci0: command tx timeout [ 218.803167][ T12] hsr_slave_0: left promiscuous mode [ 218.812979][ T12] hsr_slave_1: left promiscuous mode [ 218.840895][ T12] veth1_macvtap: left promiscuous mode [ 218.848819][ T12] veth0_macvtap: left promiscuous mode [ 218.855435][ T12] veth1_vlan: left promiscuous mode [ 218.860913][ T12] veth0_vlan: left promiscuous mode [ 219.242914][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.271705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 219.616931][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.705747][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.758238][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.765475][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.829068][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.836270][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.933002][ T29] audit: type=1800 audit(4294967318.030:8): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.474" name="features" dev="configfs" ino=21482 res=0 errno=0 [ 220.754532][ T51] Bluetooth: hci0: command tx timeout [ 220.808853][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.863628][ T8527] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 221.927272][ T8279] veth0_vlan: entered promiscuous mode [ 221.950341][ T8279] veth1_vlan: entered promiscuous mode [ 221.991155][ T8279] veth0_macvtap: entered promiscuous mode [ 222.008567][ T8279] veth1_macvtap: entered promiscuous mode [ 222.038663][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.072829][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.097548][ T8464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.135489][ T8464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.171298][ T8464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.199388][ T8464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.544071][ T8452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.570366][ T8452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.663727][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.692413][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.107872][ T8647] netlink: 346 bytes leftover after parsing attributes in process `syz.3.507'. [ 228.170929][ T8673] netlink: 62 bytes leftover after parsing attributes in process `syz.3.513'. [ 228.380536][ T8685] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 229.213685][ T8716] hugetlbfs: syz.3.523 (8716): Using mlock ulimits for SHM_HUGETLB is obsolete [ 229.330358][ T8720] netlink: 'syz.5.524': attribute type 23 has an invalid length. [ 232.151231][ T8795] Process accounting resumed [ 237.254695][ T8921] zram0: detected capacity change from 0 to 8 [ 242.500971][ T9022] usb usb13: check_ctrlrecip: process 9022 (syz.4.574) requesting ep 01 but needs 81 [ 242.587302][ T9022] usb usb13: usbfs: process 9022 (syz.4.574) did not claim interface 0 before use [ 242.712137][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 242.734325][ T9022] nbd: must specify a size in bytes for the device [ 245.605282][ T9084] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 248.298533][ T9141] FAULT_INJECTION: forcing a failure. [ 248.298533][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 248.324061][ T9141] CPU: 1 UID: 0 PID: 9141 Comm: syz.3.598 Tainted: G U L syzkaller #0 PREEMPT(full) [ 248.324109][ T9141] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 248.324119][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.324133][ T9141] Call Trace: [ 248.324143][ T9141] [ 248.324154][ T9141] dump_stack_lvl+0x100/0x190 [ 248.324205][ T9141] should_fail_ex.cold+0x5/0xa [ 248.324235][ T9141] should_failslab+0xc2/0x120 [ 248.324276][ T9141] __kmalloc_cache_noprof+0x7a/0x6f0 [ 248.324303][ T9141] ? single_open+0x4d/0x1d0 [ 248.324329][ T9141] ? find_held_lock+0x2b/0x80 [ 248.324367][ T9141] ? __pfx_proc_setgroups_show+0x10/0x10 [ 248.324407][ T9141] single_open+0x4d/0x1d0 [ 248.324435][ T9141] proc_setgroups_open+0x35a/0x7e0 [ 248.324463][ T9141] do_dentry_open+0x6d8/0x1660 [ 248.324498][ T9141] ? __pfx_proc_setgroups_open+0x10/0x10 [ 248.324531][ T9141] vfs_open+0x82/0x3f0 [ 248.324560][ T9141] path_openat+0x208c/0x31a0 [ 248.324606][ T9141] ? __pfx_path_openat+0x10/0x10 [ 248.324652][ T9141] do_file_open+0x20e/0x430 [ 248.324690][ T9141] ? __pfx_do_file_open+0x10/0x10 [ 248.324743][ T9141] ? __pfx_kfree_link+0x10/0x10 [ 248.324781][ T9141] ? alloc_fd+0x476/0x790 [ 248.324819][ T9141] ? do_getname+0x191/0x390 [ 248.324847][ T9141] do_sys_openat2+0x10d/0x1e0 [ 248.324874][ T9141] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.324904][ T9141] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 248.324944][ T9141] __x64_sys_openat+0x12d/0x210 [ 248.324971][ T9141] ? __pfx___x64_sys_openat+0x10/0x10 [ 248.325011][ T9141] do_syscall_64+0x106/0xf80 [ 248.325035][ T9141] ? clear_bhb_loop+0x40/0x90 [ 248.325065][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.325090][ T9141] RIP: 0033:0x7f997919c629 [ 248.325111][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.325134][ T9141] RSP: 002b:00007f997a026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.325158][ T9141] RAX: ffffffffffffffda RBX: 00007f9979416090 RCX: 00007f997919c629 [ 248.325175][ T9141] RDX: 0000000000183200 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 248.325190][ T9141] RBP: 00007f9979232b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.325204][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.325218][ T9141] R13: 00007f9979416128 R14: 00007f9979416090 R15: 00007ffd8f1f6328 [ 248.325252][ T9141] [ 249.064473][ T9151] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.402799][ T9167] can: request_module (can-proto-0) failed. [ 250.824757][ T9177] Invalid ELF header magic: != ELF [ 250.845366][ T9177] Invalid ELF header magic: != ELF [ 250.855488][ T9177] Invalid ELF header magic: != ELF [ 250.865664][ T9177] Invalid ELF header magic: != ELF [ 250.877877][ T9177] Invalid ELF header magic: != ELF [ 250.887898][ T9177] Invalid ELF header magic: != ELF [ 250.900698][ T9177] Invalid ELF header magic: != ELF [ 250.911062][ T9177] Invalid ELF header magic: != ELF [ 250.920939][ T9177] Invalid ELF header magic: != ELF [ 250.933729][ T9177] Invalid ELF header magic: != ELF [ 250.956917][ T9177] Invalid ELF header magic: != ELF [ 251.672467][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'. [ 251.685132][ T9192] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 251.687596][ T29] audit: type=1800 audit(4294967349.790:9): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.607" name="trace_pipe" dev="tracefs" ino=1919 res=0 errno=0 [ 252.467596][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 254.834425][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 254.914870][ T9256] veth0_macvtap: left promiscuous mode [ 254.964946][ T9256] macvtap0: entered promiscuous mode [ 254.992964][ T9256] macvtap0: entered allmulticast mode [ 255.716259][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.722756][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.445783][ T9286] FAULT_INJECTION: forcing a failure. [ 256.445783][ T9286] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.542674][ T9286] CPU: 1 UID: 0 PID: 9286 Comm: syz.3.626 Tainted: G U L syzkaller #0 PREEMPT(full) [ 256.542721][ T9286] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 256.542730][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.542746][ T9286] Call Trace: [ 256.542755][ T9286] [ 256.542765][ T9286] dump_stack_lvl+0x100/0x190 [ 256.542808][ T9286] should_fail_ex.cold+0x5/0xa [ 256.542950][ T9286] ? prepare_alloc_pages+0x16d/0x5f0 [ 256.543023][ T9286] should_fail_alloc_page+0xeb/0x140 [ 256.543071][ T9286] prepare_alloc_pages+0x1f0/0x5f0 [ 256.543133][ T9286] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 256.543175][ T9286] ? __pfx_css_rstat_updated+0x10/0x10 [ 256.543205][ T9286] ? kasan_save_stack+0x3f/0x50 [ 256.543241][ T9286] ? kasan_save_stack+0x30/0x50 [ 256.543275][ T9286] ? kasan_save_track+0x14/0x30 [ 256.543309][ T9286] ? __kasan_slab_alloc+0x89/0x90 [ 256.543354][ T9286] ? rcu_is_watching+0x12/0xc0 [ 256.543394][ T9286] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.543440][ T9286] ? lru_gen_add_folio+0x20f/0x13e0 [ 256.543487][ T9286] ? lock_acquire+0x1cf/0x380 [ 256.543521][ T9286] ? find_held_lock+0x2b/0x80 [ 256.543558][ T9286] ? page_table_check_set+0x49a/0xa10 [ 256.543590][ T9286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.543628][ T9286] ? policy_nodemask+0xed/0x4f0 [ 256.543667][ T9286] alloc_pages_mpol+0x1fb/0x550 [ 256.543709][ T9286] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 256.543761][ T9286] folio_alloc_mpol_noprof+0x36/0x340 [ 256.543794][ T9286] vma_alloc_folio_noprof+0xed/0x1d0 [ 256.543823][ T9286] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 256.543862][ T9286] do_anonymous_page+0xb3a/0x1fb0 [ 256.543907][ T9286] __handle_mm_fault+0x1d42/0x2b60 [ 256.543950][ T9286] ? __pfx___handle_mm_fault+0x10/0x10 [ 256.543983][ T9286] ? pte_offset_map_lock+0x174/0x320 [ 256.544024][ T9286] ? find_held_lock+0x2b/0x80 [ 256.544078][ T9286] ? follow_page_pte+0x5b3/0x1400 [ 256.544140][ T9286] handle_mm_fault+0x36d/0xa20 [ 256.544186][ T9286] __get_user_pages+0xf9c/0x34d0 [ 256.544245][ T9286] ? __pfx___get_user_pages+0x10/0x10 [ 256.544299][ T9286] populate_vma_page_range+0x267/0x3f0 [ 256.544331][ T9286] ? __pfx_populate_vma_page_range+0x10/0x10 [ 256.544359][ T9286] ? __pfx_find_vma_intersection+0x10/0x10 [ 256.544404][ T9286] ? do_mmap+0x93f/0x12f0 [ 256.544451][ T9286] __mm_populate+0x107/0x3a0 [ 256.544481][ T9286] ? __pfx___mm_populate+0x10/0x10 [ 256.544512][ T9286] ? up_write+0x290/0x4f0 [ 256.544553][ T9286] vm_mmap_pgoff+0x37f/0x470 [ 256.544603][ T9286] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 256.544656][ T9286] ? __x64_sys_futex+0x34f/0x4d0 [ 256.544689][ T9286] ? __x64_sys_futex+0x358/0x4d0 [ 256.544722][ T9286] ksys_mmap_pgoff+0x7d/0x5b0 [ 256.544762][ T9286] __x64_sys_mmap+0x125/0x190 [ 256.544797][ T9286] do_syscall_64+0x106/0xf80 [ 256.544820][ T9286] ? clear_bhb_loop+0x40/0x90 [ 256.544850][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.544873][ T9286] RIP: 0033:0x7f997919c629 [ 256.544895][ T9286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.544917][ T9286] RSP: 002b:00007f997a047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 256.544938][ T9286] RAX: ffffffffffffffda RBX: 00007f9979415fa0 RCX: 00007f997919c629 [ 256.544953][ T9286] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 256.544966][ T9286] RBP: 00007f9979232b39 R08: ffffffffffffffff R09: 0000000000000000 [ 256.544982][ T9286] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 256.544996][ T9286] R13: 00007f9979416038 R14: 00007f9979415fa0 R15: 00007ffd8f1f6328 [ 256.545028][ T9286] [ 258.629650][ T9305] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[9305] [ 259.513233][ T9323] FAULT_INJECTION: forcing a failure. [ 259.513233][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 259.575556][ T9311] netlink: 'syz.4.632': attribute type 3 has an invalid length. [ 259.595707][ T9311] netlink: 306 bytes leftover after parsing attributes in process `syz.4.632'. [ 259.614171][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.5.636 Tainted: G U L syzkaller #0 PREEMPT(full) [ 259.614222][ T9323] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 259.614233][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.614249][ T9323] Call Trace: [ 259.614257][ T9323] [ 259.614267][ T9323] dump_stack_lvl+0x100/0x190 [ 259.614311][ T9323] should_fail_ex.cold+0x5/0xa [ 259.614340][ T9323] should_failslab+0xc2/0x120 [ 259.614379][ T9323] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 259.614411][ T9323] ? security_inode_alloc+0x3b/0x2c0 [ 259.614447][ T9323] ? lockdep_init_map_type+0x5c/0x250 [ 259.614485][ T9323] security_inode_alloc+0x3b/0x2c0 [ 259.614520][ T9323] inode_init_always_gfp+0xced/0x1040 [ 259.614601][ T9323] alloc_inode+0x8e/0x250 [ 259.614633][ T9323] sock_alloc+0x44/0x280 [ 259.614662][ T9323] ? security_socket_create+0x7f/0x250 [ 259.614698][ T9323] __sock_create+0xc2/0x860 [ 259.614741][ T9323] inet_ctl_sock_create+0x94/0x230 [ 259.614778][ T9323] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 259.614815][ T9323] ? timer_init_key+0x150/0x340 [ 259.614848][ T9323] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 259.614894][ T9323] sctp_ctrlsock_init+0x40/0xd0 [ 259.614943][ T9323] ops_init+0x1e2/0x5f0 [ 259.614977][ T9323] setup_net+0x118/0x3a0 [ 259.615007][ T9323] ? __pfx_setup_net+0x10/0x10 [ 259.615034][ T9323] ? lockdep_init_map_type+0x5c/0x250 [ 259.615070][ T9323] ? mutex_init_lockep+0x110/0x150 [ 259.615111][ T9323] copy_net_ns+0x46f/0x7c0 [ 259.615147][ T9323] create_new_namespaces+0x3ea/0xac0 [ 259.615199][ T9323] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 259.615231][ T9323] ksys_unshare+0x455/0xab0 [ 259.615267][ T9323] ? __pfx_ksys_unshare+0x10/0x10 [ 259.615315][ T9323] __x64_sys_unshare+0x31/0x40 [ 259.615348][ T9323] do_syscall_64+0x106/0xf80 [ 259.615376][ T9323] ? clear_bhb_loop+0x40/0x90 [ 259.615411][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.615440][ T9323] RIP: 0033:0x7fa94e99c629 [ 259.615465][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.615492][ T9323] RSP: 002b:00007fa94f7a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 259.615519][ T9323] RAX: ffffffffffffffda RBX: 00007fa94ec15fa0 RCX: 00007fa94e99c629 [ 259.615538][ T9323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 259.615556][ T9323] RBP: 00007fa94ea32b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.615581][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.615603][ T9323] R13: 00007fa94ec16038 R14: 00007fa94ec15fa0 R15: 00007ffcf3782228 [ 259.615642][ T9323] [ 259.891895][ T9323] socket: no more sockets [ 259.892095][ T9331] netlink: 330 bytes leftover after parsing attributes in process `syz.5.636'. [ 261.429541][ T9364] netlink: 186 bytes leftover after parsing attributes in process `syz.3.644'. [ 262.565030][ T9336] Process accounting paused [ 264.133622][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.662'. [ 264.149549][ T9461] ipvlan1: entered promiscuous mode [ 264.178444][ T9461] ipvlan1: entered allmulticast mode [ 264.184021][ T9461] veth0_vlan: entered allmulticast mode [ 265.060563][ T9476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.066780][ T9476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.104959][ T9476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.119136][ T9476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.129592][ T9476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 265.210142][ T9476] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 265.765626][ T9459] netlink: 334 bytes leftover after parsing attributes in process `syz.4.661'. [ 267.066644][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.146753][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.152811][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.158927][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.509520][ T9546] ACPI: Can not change Invalid GPE/Fixed Event status [ 268.130106][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 269.225801][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.237707][ T9586] netlink: 342 bytes leftover after parsing attributes in process `syz.4.694'. [ 270.252805][ T9608] futex_wake_op: syz.1.699 tries to shift op by -2048; fix this program [ 270.265558][ T9608] 0x7974697200000001-0x7974697200007367 : "" [ 270.272849][ T9608] mtd: partition "" is out of reach -- disabled [ 270.329974][ T9608] ftl_cs: FTL header not found. [ 270.570880][ T51] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 270.933885][ T9623] zswap: compressor not available [ 271.308986][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 271.428235][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 272.006227][ T9653] FAULT_INJECTION: forcing a failure. [ 272.006227][ T9653] name failslab, interval 1, probability 0, space 0, times 0 [ 272.068613][ T9653] CPU: 1 UID: 0 PID: 9653 Comm: syz.3.708 Tainted: G U L syzkaller #0 PREEMPT(full) [ 272.068660][ T9653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 272.068678][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.068694][ T9653] Call Trace: [ 272.068702][ T9653] [ 272.068713][ T9653] dump_stack_lvl+0x100/0x190 [ 272.068759][ T9653] should_fail_ex.cold+0x5/0xa [ 272.068790][ T9653] ? __netlink_kernel_create+0x181/0x750 [ 272.068818][ T9653] should_failslab+0xc2/0x120 [ 272.068857][ T9653] __kmalloc_noprof+0xe0/0x850 [ 272.068899][ T9653] __netlink_kernel_create+0x181/0x750 [ 272.068929][ T9653] ? __pfx___netlink_kernel_create+0x10/0x10 [ 272.068969][ T9653] fib_net_init+0x26d/0x3f0 [ 272.068999][ T9653] ? is_module_address+0x69/0xf0 [ 272.069031][ T9653] ? __pfx_fib_net_init+0x10/0x10 [ 272.069060][ T9653] ? timer_init_key+0x150/0x340 [ 272.069087][ T9653] ? __pfx_nl_fib_input+0x10/0x10 [ 272.069122][ T9653] ? devinet_init_net+0x56c/0x8d0 [ 272.069159][ T9653] ? __pfx_fib_net_init+0x10/0x10 [ 272.069185][ T9653] ops_init+0x1e2/0x5f0 [ 272.069217][ T9653] setup_net+0x118/0x3a0 [ 272.069244][ T9653] ? __pfx_setup_net+0x10/0x10 [ 272.069268][ T9653] ? lockdep_init_map_type+0x5c/0x250 [ 272.069301][ T9653] ? mutex_init_lockep+0x110/0x150 [ 272.069339][ T9653] copy_net_ns+0x46f/0x7c0 [ 272.069378][ T9653] create_new_namespaces+0x3ea/0xac0 [ 272.069432][ T9653] copy_namespaces+0x468/0x5e0 [ 272.069463][ T9653] copy_process+0x3226/0x7a10 [ 272.069514][ T9653] ? __pfx_copy_process+0x10/0x10 [ 272.069545][ T9653] ? find_held_lock+0x2b/0x80 [ 272.069593][ T9653] ? futex_private_hash_put+0x107/0x1c0 [ 272.069634][ T9653] kernel_clone+0xfc/0x9a0 [ 272.069668][ T9653] ? __pfx_kernel_clone+0x10/0x10 [ 272.069729][ T9653] __do_sys_clone+0xd9/0x120 [ 272.069762][ T9653] ? __pfx___do_sys_clone+0x10/0x10 [ 272.069794][ T9653] ? find_held_lock+0x2b/0x80 [ 272.069867][ T9653] do_syscall_64+0x106/0xf80 [ 272.069895][ T9653] ? clear_bhb_loop+0x40/0x90 [ 272.069930][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.069959][ T9653] RIP: 0033:0x7f997919c629 [ 272.069983][ T9653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.070011][ T9653] RSP: 002b:00007f997a025fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 272.070038][ T9653] RAX: ffffffffffffffda RBX: 00007f9979416090 RCX: 00007f997919c629 [ 272.070056][ T9653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 272.070073][ T9653] RBP: 00007f9979232b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.070090][ T9653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.070106][ T9653] R13: 00007f9979416128 R14: 00007f9979416090 R15: 00007ffd8f1f6328 [ 272.070145][ T9653] [ 276.675441][ T9673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.681730][ T9673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.884579][ T9673] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.994783][ T9673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.001784][ T9742] smpboot: CPU 1 is now offline [ 278.129733][ T9743] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 278.130645][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 278.130672][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 278.130840][ T9718] ------------[ cut here ]------------ [ 278.132041][ T9718] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 278.132063][ T9718] WARNING: kernel/sched/sched.h:1600 at update_rq_clock+0x40a/0xd20, CPU#0: syz.5.723/9718 [ 278.132115][ T9718] Modules linked in: [ 278.132671][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.5.723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.132716][ T9718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.132728][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.132745][ T9718] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 278.132775][ T9718] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 48 06 ba 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 278.132804][ T9718] RSP: 0018:ffffc9000fc17700 EFLAGS: 00010046 [ 278.132828][ T9718] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 278.132846][ T9718] RDX: 0000000000000046 RSI: ffffffff8de53714 RDI: ffffffff8c1aeb20 [ 278.132865][ T9718] RBP: ffffc9000fc178a8 R08: 0000000000000001 R09: 0000000000000001 [ 278.132883][ T9718] R10: ffffffff90d98717 R11: 0000000000000000 R12: ffffffff90d9bae4 [ 278.132902][ T9718] R13: ffff8880b853c0c0 R14: ffff88801e6e9e40 R15: ffff8880b853b280 [ 278.132921][ T9718] FS: 00007fa94f7826c0(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 278.132949][ T9718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.132969][ T9718] CR2: 000020000027f000 CR3: 0000000076cc6000 CR4: 00000000003526f0 [ 278.132987][ T9718] Call Trace: [ 278.132996][ T9718] [ 278.133015][ T9718] __schedule+0x1b7d/0x60e0 [ 278.133081][ T9718] ? __pfx___schedule+0x10/0x10 [ 278.133134][ T9718] preempt_schedule_irq+0x50/0x90 [ 278.133170][ T9718] irqentry_exit+0x17b/0x670 [ 278.133203][ T9718] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.133234][ T9718] RIP: 0010:do_user_addr_fault+0x17e/0x12f0 [ 278.133279][ T9718] Code: 31 ff 41 81 e6 00 02 00 00 4c 89 f6 e8 1b 21 4f 00 4d 85 f6 0f 84 16 09 00 00 e8 2d 26 4f 00 e8 c8 22 57 00 fb 0f 1f 44 00 00 1d 26 4f 00 48 89 d8 31 ff 41 be 14 02 00 00 83 e0 40 49 89 c7 [ 278.133305][ T9718] RSP: 0018:ffffc9000fc179b8 EFLAGS: 00000206 [ 278.133327][ T9718] RAX: 0000000000008599 RBX: 0000000000000000 RCX: 0000000000000000 [ 278.133344][ T9718] RDX: 0000000000000000 RSI: ffffffff8de79726 RDI: ffffffff8c1aeb20 [ 278.133362][ T9718] RBP: ffffc9000fc17a58 R08: 0000000000000001 R09: 0000000000000000 [ 278.133380][ T9718] R10: 0000000000000001 R11: 0000000000000000 R12: 000020000027f000 [ 278.133396][ T9718] R13: ffff888031041e40 R14: 0000000000000200 R15: 0000000000000000 [ 278.133432][ T9718] ? do_user_addr_fault+0x178/0x12f0 [ 278.133476][ T9718] ? rcu_is_watching+0x12/0xc0 [ 278.133520][ T9718] exc_page_fault+0x6f/0xd0 [ 278.133549][ T9718] asm_exc_page_fault+0x26/0x30 [ 278.133576][ T9718] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 278.133614][ T9718] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 278.133640][ T9718] RSP: 0018:ffffc9000fc17b08 EFLAGS: 00050202 [ 278.133661][ T9718] RAX: 0000000000000001 RBX: 000020000027e85a RCX: 00000000000000c0 [ 278.133679][ T9718] RDX: 0000000000000001 RSI: 000020000027f000 RDI: ffff888029792f40 [ 278.133697][ T9718] RBP: 0000000000000866 R08: 0000000000000001 R09: ffffed10052f25ff [ 278.133715][ T9718] R10: ffff888029792fff R11: 0000000000000000 R12: 0000000000000000 [ 278.133732][ T9718] R13: ffff88802979279a R14: dffffc0000000000 R15: 000020000027e85a [ 278.133771][ T9718] _copy_from_user+0x98/0xd0 [ 278.133812][ T9718] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 278.133868][ T9718] snd_rawmidi_write+0x2dc/0xc60 [ 278.133918][ T9718] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 278.133956][ T9718] ? common_file_perm+0x1ab/0x4f0 [ 278.133996][ T9718] ? __pfx_default_wake_function+0x10/0x10 [ 278.134042][ T9718] ? bpf_lsm_file_permission+0x9/0x10 [ 278.134080][ T9718] ? security_file_permission+0x76/0x210 [ 278.134121][ T9718] ? rw_verify_area+0xce/0x6d0 [ 278.134163][ T9718] vfs_write+0x2aa/0x1070 [ 278.134201][ T9718] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 278.134244][ T9718] ? __pfx_vfs_write+0x10/0x10 [ 278.134279][ T9718] ? find_held_lock+0x2b/0x80 [ 278.134319][ T9718] ? __fget_files+0x215/0x3d0 [ 278.134355][ T9718] ? __fget_files+0x215/0x3d0 [ 278.134398][ T9718] ? __fget_files+0x21f/0x3d0 [ 278.134445][ T9718] ksys_write+0x1f8/0x250 [ 278.134481][ T9718] ? __pfx_ksys_write+0x10/0x10 [ 278.134529][ T9718] do_syscall_64+0x106/0xf80 [ 278.134556][ T9718] ? clear_bhb_loop+0x40/0x90 [ 278.134590][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.134620][ T9718] RIP: 0033:0x7fa94e99c629 [ 278.134644][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.134673][ T9718] RSP: 002b:00007fa94f782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.134700][ T9718] RAX: ffffffffffffffda RBX: 00007fa94ec16090 RCX: 00007fa94e99c629 [ 278.134720][ T9718] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000005 [ 278.134738][ T9718] RBP: 00007fa94ea32b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.134756][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.134774][ T9718] R13: 00007fa94ec16128 R14: 00007fa94ec16090 R15: 00007ffcf3782228 [ 278.134812][ T9718] [ 278.134832][ T9718] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 278.134854][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.5.723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.134895][ T9718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.134907][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.134923][ T9718] Call Trace: [ 278.134932][ T9718] [ 278.134943][ T9718] dump_stack_lvl+0x100/0x190 [ 278.134984][ T9718] vpanic+0x552/0x970 [ 278.135012][ T9718] ? __pfx_vpanic+0x10/0x10 [ 278.135050][ T9718] panic+0xd1/0xe0 [ 278.135075][ T9718] ? __pfx_panic+0x10/0x10 [ 278.135119][ T9718] check_panic_on_warn.cold+0x19/0x34 [ 278.135155][ T9718] ? update_rq_clock+0x40a/0xd20 [ 278.135181][ T9718] __warn.cold+0x191/0x348 [ 278.135214][ T9718] __report_bug+0x296/0x3d0 [ 278.135255][ T9718] ? update_rq_clock+0x40a/0xd20 [ 278.135285][ T9718] ? __pfx___report_bug+0x10/0x10 [ 278.135325][ T9718] ? __lock_acquire+0x4a5/0x2630 [ 278.135362][ T9718] ? lock_acquire+0x1cf/0x380 [ 278.135402][ T9718] ? update_rq_clock+0x40a/0xd20 [ 278.135431][ T9718] report_bug+0xb2/0x220 [ 278.135472][ T9718] ? update_rq_clock+0x40a/0xd20 [ 278.135499][ T9718] handle_bug+0x166/0x2a0 [ 278.135532][ T9718] exc_invalid_op+0x17/0x50 [ 278.135566][ T9718] asm_exc_invalid_op+0x1a/0x20 [ 278.135593][ T9718] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 278.135621][ T9718] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 48 06 ba 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 278.135648][ T9718] RSP: 0018:ffffc9000fc17700 EFLAGS: 00010046 [ 278.135670][ T9718] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 278.135688][ T9718] RDX: 0000000000000046 RSI: ffffffff8de53714 RDI: ffffffff8c1aeb20 [ 278.135707][ T9718] RBP: ffffc9000fc178a8 R08: 0000000000000001 R09: 0000000000000001 [ 278.135725][ T9718] R10: ffffffff90d98717 R11: 0000000000000000 R12: ffffffff90d9bae4 [ 278.135743][ T9718] R13: ffff8880b853c0c0 R14: ffff88801e6e9e40 R15: ffff8880b853b280 [ 278.135787][ T9718] __schedule+0x1b7d/0x60e0 [ 278.135850][ T9718] ? __pfx___schedule+0x10/0x10 [ 278.135903][ T9718] preempt_schedule_irq+0x50/0x90 [ 278.135930][ T9718] irqentry_exit+0x17b/0x670 [ 278.135962][ T9718] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.135994][ T9718] RIP: 0010:do_user_addr_fault+0x17e/0x12f0 [ 278.136035][ T9718] Code: 31 ff 41 81 e6 00 02 00 00 4c 89 f6 e8 1b 21 4f 00 4d 85 f6 0f 84 16 09 00 00 e8 2d 26 4f 00 e8 c8 22 57 00 fb 0f 1f 44 00 00 1d 26 4f 00 48 89 d8 31 ff 41 be 14 02 00 00 83 e0 40 49 89 c7 [ 278.136063][ T9718] RSP: 0018:ffffc9000fc179b8 EFLAGS: 00000206 [ 278.136084][ T9718] RAX: 0000000000008599 RBX: 0000000000000000 RCX: 0000000000000000 [ 278.136102][ T9718] RDX: 0000000000000000 RSI: ffffffff8de79726 RDI: ffffffff8c1aeb20 [ 278.136121][ T9718] RBP: ffffc9000fc17a58 R08: 0000000000000001 R09: 0000000000000000 [ 278.136138][ T9718] R10: 0000000000000001 R11: 0000000000000000 R12: 000020000027f000 [ 278.136160][ T9718] R13: ffff888031041e40 R14: 0000000000000200 R15: 0000000000000000 [ 278.136196][ T9718] ? do_user_addr_fault+0x178/0x12f0 [ 278.136240][ T9718] ? rcu_is_watching+0x12/0xc0 [ 278.136283][ T9718] exc_page_fault+0x6f/0xd0 [ 278.136312][ T9718] asm_exc_page_fault+0x26/0x30 [ 278.136339][ T9718] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 278.136375][ T9718] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 278.136403][ T9718] RSP: 0018:ffffc9000fc17b08 EFLAGS: 00050202 [ 278.136424][ T9718] RAX: 0000000000000001 RBX: 000020000027e85a RCX: 00000000000000c0 [ 278.136442][ T9718] RDX: 0000000000000001 RSI: 000020000027f000 RDI: ffff888029792f40 [ 278.136460][ T9718] RBP: 0000000000000866 R08: 0000000000000001 R09: ffffed10052f25ff [ 278.136479][ T9718] R10: ffff888029792fff R11: 0000000000000000 R12: 0000000000000000 [ 278.136496][ T9718] R13: ffff88802979279a R14: dffffc0000000000 R15: 000020000027e85a [ 278.136534][ T9718] _copy_from_user+0x98/0xd0 [ 278.136572][ T9718] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 278.136627][ T9718] snd_rawmidi_write+0x2dc/0xc60 [ 278.136676][ T9718] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 278.136715][ T9718] ? common_file_perm+0x1ab/0x4f0 [ 278.136754][ T9718] ? __pfx_default_wake_function+0x10/0x10 [ 278.136799][ T9718] ? bpf_lsm_file_permission+0x9/0x10 [ 278.136835][ T9718] ? security_file_permission+0x76/0x210 [ 278.136877][ T9718] ? rw_verify_area+0xce/0x6d0 [ 278.136913][ T9718] vfs_write+0x2aa/0x1070 [ 278.136951][ T9718] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 278.136995][ T9718] ? __pfx_vfs_write+0x10/0x10 [ 278.137030][ T9718] ? find_held_lock+0x2b/0x80 [ 278.137069][ T9718] ? __fget_files+0x215/0x3d0 [ 278.137106][ T9718] ? __fget_files+0x215/0x3d0 [ 278.137154][ T9718] ? __fget_files+0x21f/0x3d0 [ 278.137201][ T9718] ksys_write+0x1f8/0x250 [ 278.137237][ T9718] ? __pfx_ksys_write+0x10/0x10 [ 278.137285][ T9718] do_syscall_64+0x106/0xf80 [ 278.137312][ T9718] ? clear_bhb_loop+0x40/0x90 [ 278.137346][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.137375][ T9718] RIP: 0033:0x7fa94e99c629 [ 278.137396][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.137423][ T9718] RSP: 002b:00007fa94f782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.137449][ T9718] RAX: ffffffffffffffda RBX: 00007fa94ec16090 RCX: 00007fa94e99c629 [ 278.137468][ T9718] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000005 [ 278.137487][ T9718] RBP: 00007fa94ea32b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.137504][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.137522][ T9718] R13: 00007fa94ec16128 R14: 00007fa94ec16090 R15: 00007ffcf3782228 [ 278.137560][ T9718] [ 278.137636][ T9718] Kernel Offset: disabled