last executing test programs: 11.893513273s ago: executing program 1 (id=231): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) write$auto(0x3, 0x0, 0x7fffffff) preadv2$auto(r0, &(0x7f0000001000)={0x0, 0x1000009}, 0x82b, 0x3, 0x7, 0x80000001) r1 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0x84400, 0x0) fcntl$auto_F_SETSIG(r1, 0xa, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x53, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf252dfffffff600120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x5b6e4b94, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x106) connect$auto(r3, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r4, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mprotect$auto(0x0, 0x8000000000000001, 0x8) 8.500230942s ago: executing program 2 (id=238): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) socket(0x2, 0x3, 0x6) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mtdblock0\x00', 0x1efa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x40d00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x4, 0x5, 0x100000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa2182, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) write$auto(r2, 0x0, 0x4) sendfile$auto(0x3, r1, 0x0, 0x400000000006) 7.691261188s ago: executing program 2 (id=240): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88841, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000340)={0x7fffffdd, 0x6, 0x80402, 0xffff, 0x7, 0x9, 0xffffffffffffffff, [0xfffffffe], {0x1, 0x6, 0xf, 0x29f, 0x2, 0x8b, 0x2, 0x17f, 0x8}, {0x7e, 0x1, 0x52, 0x5, 0xffffffff, 0x40, 0x206, 0xa, 0x6}}) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x0f\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;C\\\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x13, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2, 0x1000000000001, 0x11, r1, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/security/tomoyo/manager\x00', 0xa0943, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000000c0)="f21a9a3c5c7b03f3492d006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770dc8f745d1c77eed1672bb713aca464b9bbc23b50000000000000004c635fc08000000152ad1f7fa092703e98f867fefbe1470283d09f6e868f537ce22547d21bd301d757a77633ba27c09072f5127f2f9c0780c6ace813067c43272c56e84c6db276391b2cc83f52156ec61fab5bcd3ca74c584441d7e66b26f24c273716f0b2cce71b2a376dfb4031a386233914d8f5ed727e5f783953de50a", 0xbe) write$auto(r0, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x9) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) shmget$auto(0x100000000, 0x3, 0x79e56dc9) mmap$auto(0x6, 0x5, 0x3, 0x12, 0xfffffffffffffffa, 0x8000) r3 = socket(0x28, 0x1, 0x0) getsockopt$auto(r3, 0x28, 0x1, 0x0, 0x0) setsockopt$auto_SO_SNDTIMEO_OLD(r3, 0x5, 0x15, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x4, 0xffffffff, 0x9b72, 0x2, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0x8ffff, 0x5, &(0x7f0000000040)="5a47c610e193ca96", 0xc694, 0x3, 0x80005, @stream_id=0x2, 0x20047, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r5, 0x4004550c, &(0x7f0000000300)=0x10003fe) 7.087273062s ago: executing program 1 (id=242): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) write$auto(r0, &(0x7f0000000400)=',\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hg\\\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x92Hg\\\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x920x0}) process_vm_readv$auto(r4, 0x0, 0x3, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.732557626s ago: executing program 0 (id=258): mmap$auto(0x0, 0x402000b, 0xdd, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000003, 0x0, 0x7, 0x0, 0x7, 0x201d55}, 0x2}, 0x800, 0x80000000) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r2 = socket(0x2, 0x3, 0xa) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) pread64$auto(r0, 0x0, 0x7, 0xffff) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r5, 0x1, 0x21, 0x0, 0x9) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) read$auto(0x3, 0x0, 0x7ffffffff000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x9, 0x7, 0xc, 0x1, 0x948b, 0x8, 0x15f4da0a, 0x81, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0x7ffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0a002cbd7000fddbd5252800000018007d8014000010000000f63789ccc891ee1a2d228c39219dcb79781ddfe4350a6470bc7408aec174f30101000000000000961e7ef89fad7b92a92b72652ac179ac672e631c3694e6231b5f0ef02402abba792fe6626abe2bb081c606231f4eb78d16493da63e3f08a46ac3be98b4a907879c43ea5c35ed589dba4c9dc89c864f0b5f466af736e79eb568c3f32143214ecedffc2ef62568154155260b1b64f66f293c790270c4e37dfa9fa1e05f7afa79ce3f"], 0x2c}, 0x1, 0x6000, 0x0, 0x1}, 0x20008800) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0xd}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x790c}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0xc7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r7 = accept4$auto(r6, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000180)=0x80000000, 0x1b) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f00000001c0)=0xfffffffb) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) socket(0xa, 0x1, 0x84) 1.948291749s ago: executing program 3 (id=259): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram15/make-it-fail\x00', 0x22100, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram15/make-it-fail\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x2d, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video6\x00', 0x280, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) (async) ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) madvise$auto(0x0, 0x2c, 0x19) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)=@iter_create={r0, 0x6}, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cb57000fbdbdf250a00000005003b607127b39d031d75020000000000060001004002000006000100030000f7f45a0d985e118e57520fcfe02c9fd2d366f8e17ba50892ae416098d7d756dd8b8b2d2001f42dc4bcfeeebe14187518831ebf2ad95c4b228707ec48c8cf"], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032cb57000fbdbdf250a00000005003b607127b39d031d75020000000000060001004002000006000100030000f7f45a0d985e118e57520fcfe02c9fd2d366f8e17ba50892ae416098d7d756dd8b8b2d2001f42dc4bcfeeebe14187518831ebf2ad95c4b228707ec48c8cf"], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) unshare$auto(0x20000080) 1.794297086s ago: executing program 0 (id=260): connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x52) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)="9b5d4b611b34f9711adb5b8fac7591567ffe51d9865b09a8aae8044817dce827c477d72c9fef30a01d267f314f8b969052a2a8fac4bb72945b0e3804809a9c847ab1e43604ee93c0932818909d9dcd8200004b929c34ea45414458f490450c0c08", 0xfc2}, 0x7, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = socket(0xa, 0x800, 0x84) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0300, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x80111500, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0x1, 0x9b72, r0, 0xffff) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) gettid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x10001c, 0x20000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1.575860456s ago: executing program 2 (id=261): mmap$auto(0x0, 0xe, 0xdf, 0x40000eb1, 0x401, 0x8000) pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) timer_create$auto(0x9, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/tty41\x00', 0x68000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4004af07, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(r2, r0, 0x7) r5 = socketcall$auto(0xa, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae93, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r7 = socket(0x2, 0x80002, 0x73) bind$auto(r7, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) 1.130958256s ago: executing program 2 (id=262): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = open(&(0x7f0000000180)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) getsockopt$auto_SO_PEERCRED(r1, 0x91, 0x11, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', &(0x7f00000000c0)=0xfffff000) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$auto_SO_NOFCS(r1, 0x32, 0x2b, &(0x7f0000000140)='\x00', 0x2) alarm$auto(0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r2, 0xab01, 0xffffffffffffffff) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r3 = set_tid_address$auto(&(0x7f0000000000)=0x800) getsid$auto(0x0) waitid$auto_P_PID(0x1, r3, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000d40), 0xffffffffffffffff) flock$auto(0xffffffffffffffff, 0xffffffff) alarm$auto(0x49755df6) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, 0x0, 0x2400cc03) keyctl$auto(0x80000001, 0xfffffbfffffffffe, 0x2, 0x0, 0xfff) mmap$auto(0x7f, 0x8000000000000000, 0x2, 0x330, r4, 0x9) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x9) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 772.763424ms ago: executing program 0 (id=263): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x5, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = socket(0x11, 0x3, 0x9) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/sit0/accept_dad\x00', 0x2, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) ioctl$auto(0x3, 0xae60, 0x10000000000402) 481.771551ms ago: executing program 3 (id=264): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 290.159948ms ago: executing program 3 (id=265): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x40}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8910, 0x24) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) msync$auto(0x1ffff004, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=266): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r0, r0, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x5a7, &(0x7f0000000000)={&(0x7f0000000300)="669b0c0c4afa", 0x28}, 0x1, 0x0, 0x5, 0x100001}, 0x2}, 0x2, 0x8) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(r2, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r3 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xeb5, 0xffffffffffffffff, 0x8000) connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57) write$auto(0x3, 0x0, 0x3f00) write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) r4 = timerfd_create$auto(0x0, 0x0) close_range$auto(r1, r4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) ioctl$auto(0x1, 0x890c, 0x8) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) write$auto(r6, 0x0, 0x7) wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$auto_I2C_RDWR(r7, 0x707, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 88.270853][ T5620] cgroup: Unknown subsys name 'net' [ 88.411151][ T5620] cgroup: Unknown subsys name 'cpuset' [ 88.420492][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.234918][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.245632][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.259563][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.262491][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.269190][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.278725][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.290666][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.293593][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.302896][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.307336][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.314153][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.321620][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.331417][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.335226][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.350729][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.358301][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.363571][ T24] cfg80211: failed to load regulatory.db [ 92.366982][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.381609][ T4950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.393274][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.401153][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.411036][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.861962][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.869417][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.876779][ T5632] bridge_slave_0: entered allmulticast mode [ 93.884451][ T5632] bridge_slave_0: entered promiscuous mode [ 93.943625][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.951044][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.958379][ T5632] bridge_slave_1: entered allmulticast mode [ 93.966435][ T5632] bridge_slave_1: entered promiscuous mode [ 94.083515][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.139412][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.238368][ T5632] team0: Port device team_slave_0 added [ 94.273477][ T5632] team0: Port device team_slave_1 added [ 94.330455][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.337707][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.345056][ T5634] bridge_slave_0: entered allmulticast mode [ 94.352705][ T5634] bridge_slave_0: entered promiscuous mode [ 94.377877][ T5639] Bluetooth: hci0: command tx timeout [ 94.397104][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.404988][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.412813][ T5634] bridge_slave_1: entered allmulticast mode [ 94.420269][ T5634] bridge_slave_1: entered promiscuous mode [ 94.428499][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.435475][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.457129][ T5639] Bluetooth: hci1: command tx timeout [ 94.464119][ T5648] Bluetooth: hci3: command tx timeout [ 94.470036][ T50] Bluetooth: hci2: command tx timeout [ 94.476695][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.550062][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.557101][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.583651][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.612184][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.620142][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.627780][ T5631] bridge_slave_0: entered allmulticast mode [ 94.635973][ T5631] bridge_slave_0: entered promiscuous mode [ 94.658533][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.669433][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.676797][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.684469][ T5633] bridge_slave_0: entered allmulticast mode [ 94.693086][ T5633] bridge_slave_0: entered promiscuous mode [ 94.702322][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.710063][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.717747][ T5631] bridge_slave_1: entered allmulticast mode [ 94.724975][ T5631] bridge_slave_1: entered promiscuous mode [ 94.735397][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.746243][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.754103][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.761968][ T5633] bridge_slave_1: entered allmulticast mode [ 94.769400][ T5633] bridge_slave_1: entered promiscuous mode [ 94.880891][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.892665][ T5634] team0: Port device team_slave_0 added [ 94.908322][ T5632] hsr_slave_0: entered promiscuous mode [ 94.915511][ T5632] hsr_slave_1: entered promiscuous mode [ 94.925019][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.938007][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.962383][ T5634] team0: Port device team_slave_1 added [ 94.984987][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.008027][ T5631] team0: Port device team_slave_0 added [ 95.046623][ T5631] team0: Port device team_slave_1 added [ 95.053018][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.060231][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.087619][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.129135][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.136521][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.163644][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.177367][ T5633] team0: Port device team_slave_0 added [ 95.214575][ T5633] team0: Port device team_slave_1 added [ 95.228789][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.236049][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.263189][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.275889][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.283314][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.309420][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.388483][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.395556][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.422831][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.452864][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.460326][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.487364][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.525220][ T5634] hsr_slave_0: entered promiscuous mode [ 95.531791][ T5634] hsr_slave_1: entered promiscuous mode [ 95.538138][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 95.544028][ T5634] Cannot create hsr debugfs directory [ 95.590287][ T5631] hsr_slave_0: entered promiscuous mode [ 95.596826][ T5631] hsr_slave_1: entered promiscuous mode [ 95.603482][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 95.609396][ T5631] Cannot create hsr debugfs directory [ 95.701625][ T5633] hsr_slave_0: entered promiscuous mode [ 95.708459][ T5633] hsr_slave_1: entered promiscuous mode [ 95.714554][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 95.720464][ T5633] Cannot create hsr debugfs directory [ 96.066505][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.079580][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.104711][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.115590][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.132582][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.143484][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.160900][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.171508][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.241968][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.255424][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.264609][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.274944][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.285258][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.295363][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.313170][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.323773][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.440312][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.450602][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.460371][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.468269][ T50] Bluetooth: hci0: command tx timeout [ 96.478628][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.496800][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.507812][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.516336][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.528262][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.537255][ T50] Bluetooth: hci3: command tx timeout [ 96.547575][ T5639] Bluetooth: hci1: command tx timeout [ 96.551259][ T50] Bluetooth: hci2: command tx timeout [ 96.654067][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.664844][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.678143][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.691633][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.704198][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.712467][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.724658][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.735554][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.746352][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.790164][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.836983][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.844324][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.874680][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.882019][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.930463][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.015316][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.044320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.051626][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.094791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.102402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.124962][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.216438][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.254552][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.262232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.298688][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.320482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.328373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.417821][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.458975][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.466513][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.502332][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.509649][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.128946][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.357295][ T5632] veth0_vlan: entered promiscuous mode [ 98.414008][ T5632] veth1_vlan: entered promiscuous mode [ 98.539764][ T50] Bluetooth: hci0: command tx timeout [ 98.547584][ T5632] veth0_macvtap: entered promiscuous mode [ 98.573260][ T5632] veth1_macvtap: entered promiscuous mode [ 98.620163][ T50] Bluetooth: hci1: command tx timeout [ 98.621333][ T5639] Bluetooth: hci2: command tx timeout [ 98.626022][ T5648] Bluetooth: hci3: command tx timeout [ 98.644146][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.703034][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.751383][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.766044][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.806372][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.821760][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.840674][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.852304][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.874411][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.049118][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.057875][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.078636][ T5631] veth0_vlan: entered promiscuous mode [ 99.134176][ T5634] veth0_vlan: entered promiscuous mode [ 99.145012][ T5633] veth0_vlan: entered promiscuous mode [ 99.160732][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.162913][ T5631] veth1_vlan: entered promiscuous mode [ 99.170576][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.192508][ T5633] veth1_vlan: entered promiscuous mode [ 99.206815][ T5634] veth1_vlan: entered promiscuous mode [ 99.322361][ T5633] veth0_macvtap: entered promiscuous mode [ 99.335332][ T5632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.346525][ T5634] veth0_macvtap: entered promiscuous mode [ 99.374054][ T5631] veth0_macvtap: entered promiscuous mode [ 99.393215][ T5634] veth1_macvtap: entered promiscuous mode [ 99.405381][ T5633] veth1_macvtap: entered promiscuous mode [ 99.449360][ T5631] veth1_macvtap: entered promiscuous mode [ 99.513138][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.546488][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.565292][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.582567][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.606002][ T1170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.615442][ T1170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.629582][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.643541][ T1170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.670731][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.682010][ T1170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.719211][ T1170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.743685][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.767993][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794764][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.806068][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.831302][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.840438][ T1170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.879222][ T1170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.919444][ T5793] process 'syz.2.5' launched './file0' with NULL argv: empty string added [ 100.118069][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.126959][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.249964][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.260311][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.291747][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.307914][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.372348][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.383081][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.441913][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.450959][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.555401][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.577231][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.617177][ T5648] Bluetooth: hci0: command tx timeout [ 100.705127][ T50] Bluetooth: hci1: command tx timeout [ 100.705144][ T5639] Bluetooth: hci2: command tx timeout [ 100.716782][ T5648] Bluetooth: hci3: command tx timeout [ 101.066968][ T5809] Zero length message leads to an empty skb [ 102.685924][ T5836] ======================================================= [ 102.685924][ T5836] WARNING: The mand mount option has been deprecated and [ 102.685924][ T5836] and is ignored by this kernel. Remove the mand [ 102.685924][ T5836] option from the mount to silence this warning. [ 102.685924][ T5836] ======================================================= [ 103.085557][ T5833] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.134208][ T5861] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 107.115177][ T5894] syz.2.22 (5894) used greatest stack depth: 17496 bytes left [ 107.556395][ T5914] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.866357][ T30] audit: type=1800 audit(1780168181.847:2): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25" name="dbroot" dev="configfs" ino=8132 res=0 errno=0 [ 108.818311][ T5930] netlink: zone id is out of range [ 108.825626][ T5930] netlink: zone id is out of range [ 108.831881][ T5930] netlink: zone id is out of range [ 108.843448][ T5930] netlink: zone id is out of range [ 108.852438][ T5930] netlink: zone id is out of range [ 108.869609][ T5930] netlink: zone id is out of range [ 108.874844][ T5930] netlink: zone id is out of range [ 108.896982][ T5930] netlink: zone id is out of range [ 108.902682][ T5930] netlink: zone id is out of range [ 108.940532][ T5930] netlink: zone id is out of range [ 109.044829][ T30] audit: type=1804 audit(1780168183.027:3): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.24" name="/newroot/7/file0" dev="tmpfs" ino=54 res=1 errno=0 [ 109.119896][ T30] audit: type=1804 audit(1780168183.097:4): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.24" name="/newroot/7/file0" dev="tmpfs" ino=54 res=1 errno=0 [ 109.121085][ T30] audit: type=1800 audit(1780168183.107:5): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.24" name="file0" dev="tmpfs" ino=54 res=0 errno=0 [ 111.093356][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'. [ 111.631807][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'. [ 111.707665][ T5972] ipvlan1: entered promiscuous mode [ 111.724172][ T5972] ipvlan1: entered allmulticast mode [ 111.731916][ T5972] veth0_vlan: entered allmulticast mode [ 111.904671][ T5977] futex_wake_op: syz.0.37 tries to shift op by -2048; fix this program [ 112.172020][ T5977] futex_wake_op: syz.0.37 tries to shift op by -2048; fix this program [ 112.782992][ T5988] vivid-007: ================= START STATUS ================= [ 112.825953][ T5988] vivid-007: Generate PTS: true [ 112.851510][ T5988] vivid-007: Generate SCR: true [ 112.868564][ T5988] tpg source WxH: 320x240 (Y'CbCr) [ 112.879819][ T5988] tpg field: 1 [ 112.883328][ T5988] tpg crop: (0,0)/320x240 [ 112.893593][ T5988] tpg compose: (0,0)/320x240 [ 112.900039][ T5988] tpg colorspace: 8 [ 112.936805][ T5988] tpg transfer function: 0/0 [ 112.968432][ T5988] tpg Y'CbCr encoding: 0/0 [ 112.992812][ T5988] tpg quantization: 0/0 [ 113.013366][ T5988] tpg RGB range: 0/2 [ 113.026910][ T5988] vivid-007: ================== END STATUS ================== [ 113.353749][ T5994] futex_wake_op: syz.1.41 tries to shift op by -2048; fix this program [ 113.383359][ T5994] 0x000000000001-0x000000020000 : "" [ 113.459348][ T5994] ftl_cs: FTL header corrupt! [ 113.732861][ T6000] ubi1: attaching mtd0 [ 113.984770][ T6000] ubi1: scanning is finished [ 114.131110][ T6000] ubi1: empty MTD device detected [ 114.439044][ T6000] ubi1 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt1d", error -4 [ 114.530470][ T6004] ubi0: attaching mtd0 [ 114.577515][ T6004] ubi0: scanning is finished [ 115.229564][ T6004] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.273082][ T6004] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.301051][ T6026] capability: warning: `syz.3.47' uses 32-bit capabilities (legacy support in use) [ 115.312784][ T6004] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.347604][ T6004] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.380966][ T6004] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.406547][ T6004] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.423645][ T6004] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3369675620 [ 115.472820][ T6004] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.536407][ T6022] ubi0: background thread "ubi_bgt0d" started, PID 6022 [ 116.922041][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 116.938034][ T6043] binder: 6042:6043 ioctl c0046209 ffffffffffffffff returned -22 [ 117.860982][ T6030] Process accounting resumed [ 119.708289][ T6103] netlink: 50 bytes leftover after parsing attributes in process `syz.3.62'. [ 119.756224][ T6107] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.780665][ T6117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.809713][ T6117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.897162][ T6117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.991238][ T6117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.017187][ T6137] futex_wake_op: syz.0.70 tries to shift op by -2048; fix this program [ 121.034659][ T6117] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.044613][ T6137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.062754][ T6117] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.089051][ T6117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.100141][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 121.111314][ T6117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.132008][ T6117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.157593][ T6117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.171452][ T6117] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.199770][ T6117] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.226990][ T5648] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.584875][ T6164] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.682317][ T6165] random: crng reseeded on system resumption [ 123.030658][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.107794][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.177304][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.315418][ T5648] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.097706][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.176926][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.256981][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.357751][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 126.376963][ T5648] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.524757][ T6249] FAULT_INJECTION: forcing a failure. [ 126.524757][ T6249] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 126.569273][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 126.569311][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.569327][ T6249] Call Trace: [ 126.569337][ T6249] [ 126.569348][ T6249] dump_stack_lvl+0x100/0x190 [ 126.569402][ T6249] should_fail_ex.cold+0x5/0xa [ 126.569431][ T6249] ? prepare_alloc_pages+0x16d/0x5f0 [ 126.569470][ T6249] should_fail_alloc_page+0xeb/0x140 [ 126.569507][ T6249] prepare_alloc_pages+0x1f0/0x5f0 [ 126.569549][ T6249] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 126.569603][ T6249] ? __lock_acquire+0x4a5/0x2630 [ 126.569653][ T6249] ? __lock_acquire+0x4a5/0x2630 [ 126.569693][ T6249] ? __css_rstat_updated+0x1ce/0x5a0 [ 126.569736][ T6249] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.569785][ T6249] ? do_raw_spin_lock+0x128/0x260 [ 126.569816][ T6249] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.569846][ T6249] ? find_held_lock+0x2b/0x80 [ 126.569891][ T6249] ? __lock_acquire+0x4a5/0x2630 [ 126.569957][ T6249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.569998][ T6249] ? policy_nodemask+0xed/0x4f0 [ 126.570045][ T6249] alloc_pages_mpol+0x1fb/0x540 [ 126.570081][ T6249] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 126.570114][ T6249] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 126.570141][ T6249] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 126.570176][ T6249] folio_alloc_mpol_noprof+0x36/0x260 [ 126.570219][ T6249] shmem_alloc_folio+0x135/0x160 [ 126.570260][ T6249] shmem_alloc_and_add_folio+0x371/0xd40 [ 126.570316][ T6249] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 126.570365][ T6249] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 126.570402][ T6249] shmem_get_folio_gfp+0x6ab/0x1900 [ 126.570439][ T6249] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 126.570471][ T6249] ? inode_maybe_inc_iversion+0x169/0x220 [ 126.570508][ T6249] shmem_fault+0x1f9/0xa20 [ 126.570535][ T6249] ? __lock_acquire+0x4a5/0x2630 [ 126.570578][ T6249] ? __pfx_shmem_fault+0x10/0x10 [ 126.570608][ T6249] ? __up_read+0x2c1/0x6e0 [ 126.570636][ T6249] ? __mark_inode_dirty+0x55c/0x1720 [ 126.570684][ T6249] ? __pfx_filemap_map_pages+0x10/0x10 [ 126.570727][ T6249] __do_fault+0x10b/0x440 [ 126.570755][ T6249] ? find_held_lock+0x2b/0x80 [ 126.570791][ T6249] do_fault+0x2db/0x1750 [ 126.570833][ T6249] __handle_mm_fault+0x187d/0x2a00 [ 126.570878][ T6249] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.570914][ T6249] ? __pfx___handle_mm_fault+0x10/0x10 [ 126.570959][ T6249] ? pte_offset_map_lock+0x174/0x320 [ 126.570991][ T6249] ? find_held_lock+0x2b/0x80 [ 126.571085][ T6249] ? follow_page_pte+0x4d0/0x13f0 [ 126.571127][ T6249] handle_mm_fault+0x37b/0xa30 [ 126.571177][ T6249] __get_user_pages+0x1178/0x32a0 [ 126.571223][ T6249] ? down_read_killable+0x307/0x4b0 [ 126.571255][ T6249] ? __pfx___get_user_pages+0x10/0x10 [ 126.571301][ T6249] faultin_page_range+0x1f1/0x9e0 [ 126.571347][ T6249] madvise_do_behavior+0x354/0x510 [ 126.571391][ T6249] ? __pfx_madvise_do_behavior+0x10/0x10 [ 126.571453][ T6249] do_madvise+0x195/0x240 [ 126.571496][ T6249] ? __pfx_do_madvise+0x10/0x10 [ 126.571533][ T6249] ? do_futex+0x192/0x350 [ 126.571569][ T6249] ? rcu_is_watching+0x12/0xc0 [ 126.571629][ T6249] __x64_sys_madvise+0xa9/0x110 [ 126.571664][ T6249] ? lockdep_hardirqs_on+0x78/0x100 [ 126.571704][ T6249] do_syscall_64+0x115/0x840 [ 126.571742][ T6249] ? clear_bhb_loop+0x40/0x90 [ 126.571777][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.571806][ T6249] RIP: 0033:0x7efe6499ce59 [ 126.571830][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.571855][ T6249] RSP: 002b:00007efe65819028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 126.571895][ T6249] RAX: ffffffffffffffda RBX: 00007efe64c16270 RCX: 00007efe6499ce59 [ 126.571913][ T6249] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 126.571929][ T6249] RBP: 00007efe64a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.571945][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.571961][ T6249] R13: 00007efe64c16308 R14: 00007efe64c16270 R15: 00007ffc245ce018 [ 126.572000][ T6249] [ 127.177778][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.260775][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.342423][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.919511][ T6291] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.539001][ T6294] futex_wake_op: syz.2.95 tries to shift op by -2046; fix this program [ 130.902569][ T6354] FAULT_INJECTION: forcing a failure. [ 130.902569][ T6354] name failslab, interval 1, probability 0, space 0, times 1 [ 130.956989][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(full) [ 130.957042][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.957059][ T6354] Call Trace: [ 130.957070][ T6354] [ 130.957082][ T6354] dump_stack_lvl+0x100/0x190 [ 130.957138][ T6354] should_fail_ex.cold+0x5/0xa [ 130.957176][ T6354] ? __register_sysctl_table+0xbe4/0x1650 [ 130.957215][ T6354] should_failslab+0xc2/0x120 [ 130.957252][ T6354] __kmalloc_noprof+0xe0/0x850 [ 130.957309][ T6354] __register_sysctl_table+0xbe4/0x1650 [ 130.957358][ T6354] ? __pfx___register_sysctl_table+0x10/0x10 [ 130.957395][ T6354] ? is_module_address+0x69/0xf0 [ 130.957422][ T6354] ? register_net_sysctl_sz+0x222/0x430 [ 130.957475][ T6354] __addrconf_sysctl_register+0x1a2/0x360 [ 130.957519][ T6354] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 130.957567][ T6354] ? __asan_memcpy+0x3c/0x60 [ 130.957616][ T6354] addrconf_init_net+0x4fb/0x8e0 [ 130.957656][ T6354] ? __pfx_addrconf_init_net+0x10/0x10 [ 130.957693][ T6354] ops_init+0x1e2/0x5f0 [ 130.957729][ T6354] setup_net+0x118/0x3a0 [ 130.957761][ T6354] ? __pfx_setup_net+0x10/0x10 [ 130.957792][ T6354] ? mutex_init_lockdep+0xf1/0x120 [ 130.957829][ T6354] copy_net_ns+0x46f/0x7c0 [ 130.957869][ T6354] create_new_namespaces+0x3ea/0xac0 [ 130.957916][ T6354] unshare_nsproxy_namespaces+0xf2/0x220 [ 130.957958][ T6354] ksys_unshare+0x438/0xab0 [ 130.958017][ T6354] ? __pfx_ksys_unshare+0x10/0x10 [ 130.958057][ T6354] ? xfd_validate_state+0x129/0x190 [ 130.958086][ T6354] ? exit_to_user_mode_loop+0xf3/0x670 [ 130.958149][ T6354] __x64_sys_unshare+0x31/0x40 [ 130.958194][ T6354] do_syscall_64+0x115/0x840 [ 130.958236][ T6354] ? clear_bhb_loop+0x40/0x90 [ 130.958272][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.958303][ T6354] RIP: 0033:0x7fe639d9ce59 [ 130.958328][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.958355][ T6354] RSP: 002b:00007fe63ac9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 130.958385][ T6354] RAX: ffffffffffffffda RBX: 00007fe63a015fa0 RCX: 00007fe639d9ce59 [ 130.958404][ T6354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 130.958421][ T6354] RBP: 00007fe639e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.958439][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.958455][ T6354] R13: 00007fe63a016038 R14: 00007fe63a015fa0 R15: 00007ffd4c1c4a88 [ 130.958494][ T6354] [ 130.963482][ T6354] sysctl could not get directory: /net/ipv6/conf/all -12 [ 131.275737][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 131.530640][ T6309] Process accounting resumed [ 132.972022][ T5648] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 133.262102][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.293072][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.962891][ T6469] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 135.790347][ T30] audit: type=1800 audit(1780168209.777:6): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.126" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 137.192677][ T6520] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 137.788839][ T6535] vivid-007: ================= START STATUS ================= [ 137.843485][ T6535] vivid-007: ================== END STATUS ================== [ 138.276224][ T6551] mmap: syz.3.131 (6551) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.402736][ T5648] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 141.147170][ T6615] input: jJǸ-9%vlQ J8hǙn?aԙ/rk [ 141.147170][ T6615] l6x b6Yh$X.=_ as /devices/virtual/input/input5 [ 141.506946][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.586971][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.458148][ T6737] netlink: 186 bytes leftover after parsing attributes in process `syz.2.168'. [ 150.401614][ T6744] netlink: 186 bytes leftover after parsing attributes in process `syz.1.174'. [ 152.805655][ T6765] kexec: Could not allocate control_code_buffer [ 152.926952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.811311][ T6829] vhci_hcd vhci_hcd.0: default hub control req: 0701 v0008 i0005 l2047 [ 155.130137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 155.177510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 158.703047][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 159.452089][ T6881] kexec: Could not allocate control_code_buffer [ 159.509994][ T50] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 159.819069][ T6897] smpboot: CPU 1 is now offline [ 160.427167][ T6919] futex_wake_op: syz.2.201 tries to shift op by -2048; fix this program [ 161.613681][ T6935] Process accounting paused [ 161.999914][ T6945] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 163.183670][ T50] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 163.183699][ T50] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 163.198506][ T50] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 167.051690][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 169.369511][ T7026] NFSD: Failed to start, no listeners configured. [ 169.398852][ T7008] vhci_hcd: not connected 4 [ 172.164702][ T7040] zswap: compressor 00000000 not available [ 173.801183][ T7101] FAULT_INJECTION: forcing a failure. [ 173.801183][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 173.883923][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 173.883950][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.883960][ T7101] Call Trace: [ 173.883967][ T7101] [ 173.883974][ T7101] dump_stack_lvl+0x100/0x190 [ 173.884013][ T7101] should_fail_ex.cold+0x5/0xa [ 173.884036][ T7101] ? __netif_set_xps_queue+0x8a3/0x2340 [ 173.884067][ T7101] should_failslab+0xc2/0x120 [ 173.884089][ T7101] __kmalloc_noprof+0xe0/0x850 [ 173.884124][ T7101] __netif_set_xps_queue+0x8a3/0x2340 [ 173.884157][ T7101] netif_set_xps_queue+0x2a/0x40 [ 173.884176][ T7101] xps_cpus_store+0x279/0x320 [ 173.884207][ T7101] ? __pfx_xps_cpus_store+0x10/0x10 [ 173.884238][ T7101] ? find_held_lock+0x2b/0x80 [ 173.884261][ T7101] ? sysfs_file_kobj+0xe4/0x290 [ 173.884293][ T7101] ? __pfx_xps_cpus_store+0x10/0x10 [ 173.884321][ T7101] netdev_queue_attr_store+0x61/0x90 [ 173.884346][ T7101] ? __pfx_netdev_queue_attr_store+0x10/0x10 [ 173.884370][ T7101] sysfs_kf_write+0xf2/0x150 [ 173.884402][ T7101] kernfs_fop_write_iter+0x3e0/0x5f0 [ 173.884428][ T7101] ? __pfx_sysfs_kf_write+0x10/0x10 [ 173.884460][ T7101] vfs_write+0x6ac/0x1070 [ 173.884482][ T7101] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 173.884511][ T7101] ? __pfx_vfs_write+0x10/0x10 [ 173.884548][ T7101] ksys_write+0x12a/0x250 [ 173.884569][ T7101] ? __pfx_ksys_write+0x10/0x10 [ 173.884592][ T7101] ? rcu_is_watching+0x12/0xc0 [ 173.884617][ T7101] do_syscall_64+0x115/0x840 [ 173.884644][ T7101] ? clear_bhb_loop+0x40/0x90 [ 173.884666][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.884685][ T7101] RIP: 0033:0x7f9eeb19ce59 [ 173.884701][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.884718][ T7101] RSP: 002b:00007f9eebfe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.884736][ T7101] RAX: ffffffffffffffda RBX: 00007f9eeb415fa0 RCX: 00007f9eeb19ce59 [ 173.884747][ T7101] RDX: 0000000000007fff RSI: 0000200000000400 RDI: 0000000000000003 [ 173.884757][ T7101] RBP: 00007f9eebfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 173.884768][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.884778][ T7101] R13: 00007f9eeb416038 R14: 00007f9eeb415fa0 R15: 00007ffddbffeaf8 [ 173.884802][ T7101] [ 175.740733][ T7127] kafs: addr_prefs: Invalid Command [ 175.977528][ T7130] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 176.033931][ T7130] netlink: 314 bytes leftover after parsing attributes in process `syz.0.236'. [ 176.095968][ T7133] net_ratelimit: 47 callbacks suppressed [ 176.095987][ T7133] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.109249][ T7133] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.409318][ T7134] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.654373][ T50] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 179.008383][ T7156] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 179.245944][ T7205] futex_wake_op: syz.2.254 tries to shift op by -2048; fix this program [ 179.578012][ T7217] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 179.682201][ T7213] FAULT_INJECTION: forcing a failure. [ 179.682201][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 179.709630][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 179.709655][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.709666][ T7213] Call Trace: [ 179.709673][ T7213] [ 179.709679][ T7213] dump_stack_lvl+0x100/0x190 [ 179.709715][ T7213] should_fail_ex.cold+0x5/0xa [ 179.709737][ T7213] ? lsm_blob_alloc+0x68/0x90 [ 179.709764][ T7213] should_failslab+0xc2/0x120 [ 179.709786][ T7213] __kmalloc_noprof+0xe0/0x850 [ 179.709815][ T7213] ? down_write_nested+0x14f/0x200 [ 179.709838][ T7213] lsm_blob_alloc+0x68/0x90 [ 179.709866][ T7213] security_sb_alloc+0x25/0x240 [ 179.709884][ T7213] alloc_super+0x24c/0xd20 [ 179.709907][ T7213] ? __pfx_mqueue_fill_super+0x10/0x10 [ 179.709952][ T7213] sget_fc+0x117/0xc70 [ 179.709971][ T7213] ? __pfx_set_anon_super_fc+0x10/0x10 [ 179.709990][ T7213] ? __pfx_mqueue_fill_super+0x10/0x10 [ 179.710017][ T7213] get_tree_nodev+0x28/0x190 [ 179.710045][ T7213] mqueue_get_tree+0xf1/0x130 [ 179.710073][ T7213] vfs_get_tree+0x92/0x320 [ 179.710090][ T7213] fc_mount_longterm+0x1a/0x270 [ 179.710110][ T7213] mq_init_ns+0x482/0x820 [ 179.710131][ T7213] copy_ipcs+0x3dd/0x7e0 [ 179.710153][ T7213] create_new_namespaces+0x20a/0xac0 [ 179.710175][ T7213] ? security_capable+0x80/0x260 [ 179.710196][ T7213] unshare_nsproxy_namespaces+0xf2/0x220 [ 179.710221][ T7213] ksys_unshare+0x438/0xab0 [ 179.710246][ T7213] ? __pfx_ksys_unshare+0x10/0x10 [ 179.710270][ T7213] ? xfd_validate_state+0x129/0x190 [ 179.710295][ T7213] __x64_sys_unshare+0x31/0x40 [ 179.710320][ T7213] do_syscall_64+0x115/0x840 [ 179.710345][ T7213] ? clear_bhb_loop+0x40/0x90 [ 179.710367][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.710385][ T7213] RIP: 0033:0x7f9eeb19ce59 [ 179.710400][ T7213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.710416][ T7213] RSP: 002b:00007f9eebfe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 179.710434][ T7213] RAX: ffffffffffffffda RBX: 00007f9eeb415fa0 RCX: 00007f9eeb19ce59 [ 179.710445][ T7213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 179.710455][ T7213] RBP: 00007f9eeb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 179.710465][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.710475][ T7213] R13: 00007f9eeb416038 R14: 00007f9eeb415fa0 R15: 00007ffddbffeaf8 [ 179.710497][ T7213] [ 180.252823][ T7223] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 180.345440][ T7223] File: /dev/nullb0 PID: 7223 Comm: syz.3.257 [ 181.100421][ T7156] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.945647][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 182.258630][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 182.601985][ T7255] syz.2.262(7255): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 183.151340][ T7268] ubi: mtd0 is already attached to ubi0 [ 183.177922][ T7156] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.228944][ T7268] ubi0: detaching mtd0 [ 183.333404][ T7268] ubi0: mtd0 is detached [ 183.482529][ T7274] ================================================================== [ 183.482542][ T7274] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 183.482572][ T7274] Write of size 8 at addr ffffc90004a69be0 by task syz.1.266/7274 [ 183.482587][ T7274] [ 183.482596][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: syz.1.266 Not tainted syzkaller #0 PREEMPT(full) [ 183.482616][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.482627][ T7274] Call Trace: [ 183.482633][ T7274] [ 183.482639][ T7274] dump_stack_lvl+0x100/0x190 [ 183.482670][ T7274] print_report+0x13d/0x4b0 [ 183.482697][ T7274] ? sys_imageblit+0x19fb/0x1d60 [ 183.482717][ T7274] kasan_report+0xdf/0x1d0 [ 183.482738][ T7274] ? sys_imageblit+0x19fb/0x1d60 [ 183.482762][ T7274] sys_imageblit+0x19fb/0x1d60 [ 183.482786][ T7274] ? __pfx_sys_imageblit+0x10/0x10 [ 183.482809][ T7274] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 183.482838][ T7274] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 183.482868][ T7274] soft_cursor+0x524/0xa10 [ 183.482887][ T7274] ? fb_get_color_depth+0x120/0x250 [ 183.482915][ T7274] bit_cursor+0xca1/0x1490 [ 183.482936][ T7274] ? __pfx_bit_cursor+0x10/0x10 [ 183.482963][ T7274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.482988][ T7274] ? get_color+0x1da/0x450 [ 183.483014][ T7274] ? __pfx_bit_cursor+0x10/0x10 [ 183.483030][ T7274] fbcon_cursor+0x43c/0x5e0 [ 183.483056][ T7274] ? add_softcursor+0x150/0x290 [ 183.483074][ T7274] ? hide_cursor+0xa3/0x230 [ 183.483092][ T7274] set_cursor+0x1db/0x250 [ 183.483111][ T7274] vcs_write+0xba9/0xd60 [ 183.483129][ T7274] ? __bpf_trace_sched_exit_tp+0x90/0xc0 [ 183.483151][ T7274] ? __pfx_vcs_write+0x10/0x10 [ 183.483168][ T7274] ? apparmor_file_permission+0x13f/0x1c0 [ 183.483189][ T7274] ? bpf_lsm_file_permission+0x9/0x10 [ 183.483205][ T7274] ? security_file_permission+0x76/0x210 [ 183.483228][ T7274] ? rw_verify_area+0xce/0x6d0 [ 183.483246][ T7274] vfs_write+0x2aa/0x1070 [ 183.483265][ T7274] ? __pfx_vcs_write+0x10/0x10 [ 183.483282][ T7274] ? __pfx_vfs_write+0x10/0x10 [ 183.483300][ T7274] ? find_held_lock+0x2b/0x80 [ 183.483321][ T7274] ? __fget_files+0x215/0x3d0 [ 183.483341][ T7274] ? __fget_files+0x215/0x3d0 [ 183.483361][ T7274] ? __fget_files+0x21f/0x3d0 [ 183.483383][ T7274] ksys_write+0x12a/0x250 [ 183.483402][ T7274] ? __pfx_ksys_write+0x10/0x10 [ 183.483423][ T7274] ? rcu_is_watching+0x12/0xc0 [ 183.483443][ T7274] do_syscall_64+0x115/0x840 [ 183.483468][ T7274] ? clear_bhb_loop+0x40/0x90 [ 183.483488][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.483505][ T7274] RIP: 0033:0x7fe639d9ce59 [ 183.483519][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.483536][ T7274] RSP: 002b:00007fe63ac58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.483554][ T7274] RAX: ffffffffffffffda RBX: 00007fe63a016180 RCX: 00007fe639d9ce59 [ 183.483566][ T7274] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000004 [ 183.483577][ T7274] RBP: 00007fe639e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.483587][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.483598][ T7274] R13: 00007fe63a016218 R14: 00007fe63a016180 R15: 00007ffd4c1c4a88 [ 183.483614][ T7274] [ 183.483620][ T7274] [ 183.483625][ T7274] The buggy address belongs to a vmalloc virtual mapping [ 183.483638][ T7274] Memory state around the buggy address: [ 183.483647][ T7274] ffffc90004a69a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 183.483665][ T7274] ffffc90004a69b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 183.483677][ T7274] >ffffc90004a69b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 183.483687][ T7274] ^ [ 183.483697][ T7274] ffffc90004a69c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 183.483709][ T7274] ffffc90004a69c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 183.483719][ T7274] ================================================================== [ 183.491046][ T7274] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 183.491064][ T7274] CPU: 0 UID: 0 PID: 7274 Comm: syz.1.266 Not tainted syzkaller #0 PREEMPT(full) [ 183.491086][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.491097][ T7274] Call Trace: [ 183.491103][ T7274] [ 183.491111][ T7274] dump_stack_lvl+0x100/0x190 [ 183.491143][ T7274] vpanic+0x552/0x970 [ 183.491161][ T7274] ? __pfx_vpanic+0x10/0x10 [ 183.491177][ T7274] ? mark_held_locks+0x40/0x70 [ 183.491206][ T7274] ? sys_imageblit+0x19fb/0x1d60 [ 183.491228][ T7274] panic+0xd1/0xe0 [ 183.491244][ T7274] ? __pfx_panic+0x10/0x10 [ 183.491260][ T7274] ? sys_imageblit+0x19fb/0x1d60 [ 183.491282][ T7274] ? preempt_schedule_common+0x42/0xc0 [ 183.491309][ T7274] check_panic_on_warn.cold+0x19/0x34 [ 183.491327][ T7274] end_report.part.0+0x3a/0x90 [ 183.491352][ T7274] kasan_report.cold+0xe/0x18 [ 183.491378][ T7274] ? sys_imageblit+0x19fb/0x1d60 [ 183.491402][ T7274] sys_imageblit+0x19fb/0x1d60 [ 183.491426][ T7274] ? __pfx_sys_imageblit+0x10/0x10 [ 183.491449][ T7274] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 183.491474][ T7274] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 183.491506][ T7274] soft_cursor+0x524/0xa10 [ 183.491526][ T7274] ? fb_get_color_depth+0x120/0x250 [ 183.491554][ T7274] bit_cursor+0xca1/0x1490 [ 183.491573][ T7274] ? __pfx_bit_cursor+0x10/0x10 [ 183.491593][ T7274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.491618][ T7274] ? get_color+0x1da/0x450 [ 183.491643][ T7274] ? __pfx_bit_cursor+0x10/0x10 [ 183.491659][ T7274] fbcon_cursor+0x43c/0x5e0 [ 183.491686][ T7274] ? add_softcursor+0x150/0x290 [ 183.491704][ T7274] ? hide_cursor+0xa3/0x230 [ 183.491722][ T7274] set_cursor+0x1db/0x250 [ 183.491741][ T7274] vcs_write+0xba9/0xd60 [ 183.491758][ T7274] ? __bpf_trace_sched_exit_tp+0x90/0xc0 [ 183.491779][ T7274] ? __pfx_vcs_write+0x10/0x10 [ 183.491795][ T7274] ? apparmor_file_permission+0x13f/0x1c0 [ 183.491816][ T7274] ? bpf_lsm_file_permission+0x9/0x10 [ 183.491833][ T7274] ? security_file_permission+0x76/0x210 [ 183.491857][ T7274] ? rw_verify_area+0xce/0x6d0 [ 183.491875][ T7274] vfs_write+0x2aa/0x1070 [ 183.491894][ T7274] ? __pfx_vcs_write+0x10/0x10 [ 183.491911][ T7274] ? __pfx_vfs_write+0x10/0x10 [ 183.491929][ T7274] ? find_held_lock+0x2b/0x80 [ 183.491957][ T7274] ? __fget_files+0x215/0x3d0 [ 183.491978][ T7274] ? __fget_files+0x215/0x3d0 [ 183.491998][ T7274] ? __fget_files+0x21f/0x3d0 [ 183.492020][ T7274] ksys_write+0x12a/0x250 [ 183.492039][ T7274] ? __pfx_ksys_write+0x10/0x10 [ 183.492061][ T7274] ? rcu_is_watching+0x12/0xc0 [ 183.492083][ T7274] do_syscall_64+0x115/0x840 [ 183.492107][ T7274] ? clear_bhb_loop+0x40/0x90 [ 183.492127][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.492145][ T7274] RIP: 0033:0x7fe639d9ce59 [ 183.492160][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.492176][ T7274] RSP: 002b:00007fe63ac58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.492194][ T7274] RAX: ffffffffffffffda RBX: 00007fe63a016180 RCX: 00007fe639d9ce59 [ 183.492206][ T7274] RDX: 0000000020000003 RSI: 0000200000000000 RDI: 0000000000000004 [ 183.492217][ T7274] RBP: 00007fe639e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.492228][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.492238][ T7274] R13: 00007fe63a016218 R14: 00007fe63a016180 R15: 00007ffd4c1c4a88 [ 183.492254][ T7274] [ 183.492317][ T7274] Kernel Offset: disabled