last executing test programs: 17.607656546s ago: executing program 3 (id=2032): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x0, 0xc, 0x0, 0x4000fff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x81}, 0x5) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000040)="713aa6185ac801fb61dd46a6683a08cb0142bc8db012bd0efd3f1d3a0e425091f23ace6d9b069efd7496d3abf7f03f05e2e796a1f7864693d17aab92b2bf3a75f505bc8218533e636f2c1c90b9a56f1e65b204d293d6c98fbca52bcfe1e8be11626621ddec19a5195ec426d350dc4738f2", 0x71) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0x75e8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r6, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x80000, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r7, 0x1276, 0x0) 15.073680285s ago: executing program 3 (id=2039): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) pwrite64$auto(0xc8, 0x0, 0x4f, 0x7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x1) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r2, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)=@link_detach={r1}, 0x3fa) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12.498722217s ago: executing program 1 (id=2041): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x9, 0x80002, 0x73) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x38, 0x7, "4561bb0426bc6c94b7ef5c3fc692925f497aca0fe58c07f0cbfaa5e300ec9f8d0cc34d6f8b299c3efbf09c39a22b885fd540c98b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x40080) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000280)={@sival_int=0x4, @inferred=r1, 0x7}, &(0x7f00000002c0)=0x3) r3 = syz_open_procfs$namespace(0x0, 0x0) fchdir$auto(r3) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8001) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12.001900741s ago: executing program 3 (id=2042): r0 = socket(0x29, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080), 0x34000}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f7ffffe, 0xd9) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) mmap$auto(0x0, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x81000000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0x0, 0xffffffffffffffff, 0x6, 0xffff7fff, 0xfffffffa, 0xfffc}, &(0x7f0000000040), &(0x7f0000000080)=0x7, 0x73, 0x5, 0x0, 0x80, 0x4, 0x5a2, 0x40, 0x6}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) setsockopt$auto_SO_BSDCOMPAT(r3, 0x6, 0xe, &(0x7f0000000000), 0x80001) keyctl$auto(0x1f, r1, 0x6, r2, 0x3ff) 9.44798562s ago: executing program 1 (id=2045): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) socket(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x5f70, 0x8, 0x400000006, 0x7ff, 0xc, 0x9, 0x3, 0x27fffffff, 0x400005, 0x3]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0x100000001) bpf$auto(0x5, 0x0, 0x6) mmap$auto(0x0, 0x100000001, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) read$auto(0x3, 0x0, 0x80) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000540)='\"\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1P~\x17\xfb&L\xeb=j\a\xf1y\xb3\"', 0x4) 9.126287239s ago: executing program 0 (id=2046): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/cifsFYI\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = timerfd_create$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000001640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0x1424, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x140e, 0x5e, 0x0, 0x1, [@nested={0x8, 0x26, 0x0, 0x1, [@typed={0x4, 0x6b}]}, @generic="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", @typed={0x26, 0x145, 0x0, 0x0, @binary="8eb2f181a2ea897e6d604e50546118d74f19495378b496186372812feec8b729c3dc"}, @nested={0x4, 0xf3}, @generic="2314ce8f58d86ddd2b27e8a2c689bb9b575b77d2b91bb422de4e5b8b17cb6676c28aca463031b877f1ced1fd8dc9c8b90639c6818f7791461ee952cebc5f93c602bfa392c00b55e93f9c", @nested={0x1273, 0x2b, 0x0, 0x1, [@generic="54b01dd8dbd78a96aee59f18862b56aaf0deb8b90d39870b6b04ca7ecde034d292056da4d0bf8412f4482fd16e89c0339d02e3c7ef9086e0c450ffadd62e437c1c992d3dd4495072446a6558926a4eef5b41b8e959005b14a98ac29467976f52808981f876b691d7897aa1204cd5531091668d010b12fcb8ac41a83197a758c458743a9a278fdd4f0298c4b3d2ee7e645423a0aba69b5a65456f7ca375e39c607ba106c6b2a1f5b8940af6f768e036daeb02c9e9", @nested={0x4, 0xc3}, @nested={0x4, 0x160}, @generic="cbd3f3a43ff616acb8bfbf1db5295964b34a528913ab1464ccaddf082c91178778db3e004821dcedfaf96dbfdaf99d15f27c8893804936108dd1685852adcc16b8f8d1b7018ef10dfed770c4f664c4d754b4031f195b062632e91d0059afae1316d342941f3d456e78c7a345651509386e58f26e9e7e19f865104ac86defd87dc7017eea601fcc08ab7a50ba336c91c5b473fb6e68eb956b6fd348e539943b9bd168368d9a4c2029ddf5230a3a7602260f59d6d84c074a74a978b8978175c332aa482c7416147548af435b2f5c8f71f1d43f3ac3da3c0e41c02f39a5572c77640976b4707e06935dd2255f738c45442cc1754b95a0fd7ab4ba6bf8405f384192192aed928cab1b2526c40412a3d4d4ce18fac2bb5b68b9f22fdbd691e74d4b853d2fd9b8d2e8941d55e8c7e40ab8abcf6e6bbe091bdba27c8eb24391d4a989f6ee6059b3ba69ecfd99486cc0b3c97f86316d1aaf065d1909d9654d324ec0abf4090d2cf5edeb5894effba2233920303d8ba819607e720c02cd0c8ea60408a7ca44c441310ad6852f971a2182f3db182126175a333e103da5e48205e669190ca94cdfcaa65e47a34e78a85a53503e5fb968b29d09209fb9c4f99c7a36fe83a5d395991909754eea12643aff995bd2757109d98ba890af41b31df993ce74c6f5ca843f8d291f1cf5f79ac18a4e4ee2ef0bcca1e506f008878bd488b637fd07e7657997c85c27068a7bbfcc67b1eca1e17329c183b2eb01e6b54cb6a153143c9887a00779270f7e086599cb353cd656caeefb21cc393373ee5ad0f6dd7f7914afa2374fa198f51da48bd1e387fe640574638f1fd42d7fc6465d89f75528310f614a59241159a61c09d2c89983025ba7245e3e5b9740a1024f2441ce03cfb551a7a819c9a861815a6007fb3bcc68a0a21d9a46cc57c27b41e612010072732fc0f1d11af8cf5cc1301e3c7c5446fb4a2df0615e50fee401656dd63796a9b403ff52768daa46bc46660d318c9ce1df4b08bb142c8707b8878f475023ae026c8934503d7288c4ebc85db8ed2d6db3c73b058ca93e7faef614b48864cae3a6c4e38a7dc174032f7f5210316481f892f0aeff2df6be4f6f1563717b34f47864e826b0d48bbb563599c6614a95f9a8e5fee3862d6dc6dbcb54631ec0c994d3718d694dbbd464af914b40c6d1c0802f6a6ac4be41701783e442956fd25ff7ca24e736a6988e8e7cb161d99aec6d218d0af8fc05de7a451be06dc2600f39ad9f2a6b50a62d628e181369283520a40d08b30d8860201613d7d3c43d24d6eeb93fcca01129990bfaa07f122c673e805b6dc1263dae46233e34a8d6b9da39f8a1ca8795bcf622f96f8a45eccf5af95cd1dabae3d4333ddd1ea70ac42f5368db3e1b43e6e8f2d2ffd86eb8118e0dbedf6a4430f647a1557754cdbb02fc05029c6f33531de047aed88808250d3eb803000d2537f6034244e573110c501f0bd52a01fb2e917354d3c28fd859e5634e83df6ef311bfbb9c21dd6446ffc6490814678e8c7759c4d951b2ad5404ea7059155a8a1f21c06f585988764ab58253c751a64937676871ac23ba07e0df0b4920eb912b5e7b10881719c14f112e9d62bf503923c3e11f34948d7f81bf42f0ebcbc5a804e3db01c11a9528845b5246dd1690f09beb872d2237035865b570c8e2e1b0a8d2413d31a6868d282bcecefed972c4c778b095f3369ef99f48508e4ef3c2ad029125cce23ce054605506cae6ee1e7f3b2bd5aa6f347cdc56a6c7088c1f905b64160a83e389068c19cb30303453751fc0e0ddb860b639726f6f24297c331b417ff0b62e9e4ad1a90d2886ed2772ab8e3b97b7da3af555b8d18fbace53b62d3d62c7e2db799a2f68004a9790e174aa9ea68e715f9af30bd994662832c72301f542d44253b25e51828f325b4b199ff9bde03e30e4054aec19cd8ba5c90893842cd29edc2715679ea3e10a77f5427cc454df0a9047a2c05ca3d41785aaf5feac5549e108c2c5a66202535a4c13a60eab945a7b7570454e7deff9d716a6920cafd7102005554ceb64a81adb4af70538b441a772f62874d83e141ba4dd30a799c5dfe65582a992f915183fbb29bd51ae02fc5aa1bb901d896a43e379686ff31c0ec38d44dee232d05593ef2d7a8b46b0f57e14a4e3ab950d221287b94a425d9b91f57a2da104f50efd5cb1a417fbe2576d13e349774bea946ccb18986d72bc826c076016519aaf6e3332d7789a7efda61f097c7d0ac9c36c6d2e416e03a91fee338a08ebbf68a63c49822e61222b2ecd269d6575286034f90d290a98586889d2a2facb067527e7478ed28dde97f5e91469ae2ececd6d9b693b6133ba645d589000a4c3d21c4f023ee23a071b164cf3fd1313e4d65862879ef715afa85f3784ff24061f799d36df9ea80565438d98f95a5e552047876ec6f90f1fb0fbba55402524466c05ed07b18cf100642cd37a9267eafe03aa36a2de2786949afefe19a91c74ab003d7dbd51371e92c73eccaf4d09acff5e79cb0c056ad3adf9a59d436e27609d5156e115521c9a4a3d5687491bcf5f596d2bc3943a94089da5023365eea5056fa408165a88cbe9cd201e635461da02a73335c0c1cf2b4a89d99e81269e8d01841f8601ed52c9f986f9719f37fc950ef36ae6a31f1fe0aeb9f1538a9f5f4a0fa68e1ba4c6aa06a31a51918580da3460de9182e0b01d3d00606247adeaac1651cb7610a94708cad23babca4b45d2032ea6333532b6430d1877a1304dde70f4f355e7272a0bc0d82087470bf479d67dbd0444505da280ccb775900a0d952b7e8730f4fd6f9dd5659cf12927f0fdd2057a0450fd4c90c80d2fc618ead6c8793fbc33df0c6cfb484129d9efe712a52855b1ce2776adc20bcf27186adde55fbbfce1bd1f64cf18f86912ee89439ca37b22680710477f56ed9130b5ef1a862fe2e0af46aef0d4558d50ad4759cebf8414f1a15f11609933e4f20ecd47898e5670709d90eb1218f39125bf3ab7532ac7d6930c1628033297fa74db804044b3fcd28e8b88210bea992e1c3d605e094e6df6cc5df3ef06678f5b17d1bbb3bf044103473cc1f4e21d8f1e506fd8d8fcc6aa91cb1fcd4980da6db375f914a9ae736b34058d3791f29dd9f38d9046d9c35c7cab969258ca10875f05ce012b1f9f737d4b7977880aba7745ea0f9e45542800f6a9952cb5ffc16b0b0711c7cfab8d85498dd2a93dd76c4c4eceab4837e22e36cac68c52a10a386ef39a4056d8824f1e96a44c5bd148c4ac8d60b4d48c5bf776deb91a510205a6d295110789c2e94499ddc9a068d50dfe4f30e2df9195e1c2951996ccdeb3f0e593b37c14e4474657e868a0899ca29d8e1deb6b0285d60b1338db601c6ffc09b71e1d5d65d2b8df559798ef37315d6d0a1884b395bf19d7c88dcecc32e7f9b4e5a0252d36b9e262916f3d12fc3c02fc0660f05a45e4f1da1613651c05ee70f7b5a3ecba69da497659236438934f3f544a6e2d37adfbf28549e66f0042f9f81e3512bdb9a246819a6462bbc6bb3d20746ed63265a8e953bda4204eb2ac57090bea6b9582eb6f008c0112ad0dfb60a3c6a90873d6d94c729af6d3574cbc79dc720923905ce622e9682f0da6bfb9e13ac834442fcbbbc79de376c8f5146251a021a6662d5918296597698da25c414a46ff7543a8fbadf8b2ead9416be243a4b9d2598e173d12a5a97fb88b0e585300bebf5ce1dbf4a6edd42f58fd10be5258c3194b5029ba921aefb3f072f4d741da8e60d8d0178770545cfb7cf913ba583e41a5ec600615e44aae335df770af7c7896e9893b2e75db7e12b02115842eb45b4d63953a44e369122b7a686c84d5ba96d9820fa8351179a3929da021faf745a9784386e269a1122d3c373945b8fe8bcb1b0308ce40d9f602a48be8d1598823ae2d27dbfe324936639c12c1e62395ef6d4cec287a89e5f2c347fd52aca3792dc9aa23a116bce8cfedf6210d62075ddaf40bce10e2171dec2dfbacc4acb93d5112ac4a509449fdcce6e63d57f4146e8cea5c5b99ec513cf75d7e8d9860373789f74a086a814bb9c27da3406f23cf3e8b817b261fa85dc2864a87d8b683529babf40bf72e507b1c4a7f70234defa25d1a23a188c6d8b1dd8f1f76e72acf2c0e2943df35326ee11e11323da09459c2b3232d4b40f41c43e5a7792c71c9778e3d8d2f697c7c3cb8425a23c46a998ab60dcb56f9db8080a647683f1e3fb243cca145b69f91a12d069ae43283e73439103129a317825b0b95fe612c0504c40811ebe6847f00a42efc7793d96436fa25e355c426aa3387cb59782e273db226270228845f65018f1534f3c03c3aa120b6e536c96d1df592ce4e69e4c2733f077d624956d21240e0cd9cb9646ec75f0e7f72747a72861b2182f9f1e61fa48b5da6a6c0c595f647c62e6e3cabf8ea80a0456e32982cbdf310dd57240635179a14c6708cb868f4854ab00444e46fb2b7e55c420c7de6bd403b5d1b36e3e863e6eb420404afbb4447eef332c907f4b6df75cc2c6d596f435579db698f17c31c17e2003b0658dd00a5ce0c5a568a50f9e5fdd8d0e23e4cefc55d58305e302e521d67aa4808668f6f442caa3a396258f30fb1a71b0e7bd3167861b8b576ee412d00e147f368706b4903e361207a49106063fc35b78d647c6e083bd2a4d7f5a689864c7e5498b112893f6eccaec28a5aa2a61fabfcbcbf5de274aac526ae9652d9dac21aae2be041b0a4d7fb70619720f9ac85c07bee1571d61b0e21a792bb09f9b03167079622a799621954cb2f5582326571813b962e11811ec150146100f3f53c2d43be9bfc42505f0acdc52712fd5625fc1b234a81c336046761cef071e01c76639e9a941e29310dd4845ae81dca26badb00b090ee0b16de334030292786824f40ac03b665a377add6c4952c0dbb048c3ab23fc787d404204d2bcee0a01229af684f747bd749431d16d9747bdda1529f0c0907632c0717361ddd88ca58d83f1ddfdeb544515b0849e743d7c6a92ce1c259a4fb1796bcab3e1f2647c8f3758229da8a7245bdcdf9eb45f315fefaba112311038c20eeaaee0ac014131702a99955e9ec4c41735eef83a1b0600be11a3a0d13d24cd8cef7c30cb06cfad18d9c24beb496ac617394717b4a0a983a6b2040f3d615bdccbdccdb212e72ccf9579335598d74aabff693131133f643d49d3a9415f3127a87091a37e32d5836aae9853c5ea25f657a1d940317d2041b335f39402af6d6131407a445538fcd764108c255846082c07626e453dd0ca27cdb2211062294aedf9be32396888b2ee99b6124561953aa3ef72f7c594fd1526fb35053ca0f0baa5bf161948a7e7a3110586341873ee2100eb71e714e06294fa790bf0fb8b5ea0b4c0eb395b1822451d2ee8ac644c4c395aa53f49661794a7a7dd118ec5a7f02aa6cb191ac9357447551462d4dd879cd5a0cf2af5eef1ab4fb4d756ff6b94bfc04fac81589d7503b57274f4c0f1a1b55073bbc4318fba76ed1e743e1edff21f36c2410dee29dad4eeee28ee0f5a78c722aad6ede460c49eedd355753f93954048a30691dd807bdd75aa5da2677145730a23e5bc9b9be0edf9dbacecae331c11f1e4e7bebf4b012397996d63c58e97192fe6d35bca1075ea75bfdcbc43a28c6059c18ef88a803142e20047cce174d33665349dbde3482a1555155fb98b849523576f5bfba6680c1b19f43e1936cc92dada63f7a1a93a25e03d5192e228afb633e93a1fdc3354f82465a79ce16415ef861edc2b1b12a428746b97ddfa98f527f", @nested={0x4, 0x107}, @generic="419bc2cf762644fbd5caa930b8f12fe77fece583d5bd38f9c7940cf83dc5a64eaf149829b1484c231ed3be93121dd17b2ed174bf501fd178ef561bceb599dab86417daab66b1e2ded8cde2a063eddd49f218b88ffe4b9b18cc50cc5d01f43800ed4f234151cca3c70d5ba96e376686f5608528297c7a0c528dc66f7bd96e476befa1e658cb80c20f5d6ffa1dd2b302f77d4cc0864fca2a0297c235d17354545ff994b53baf5c0e829bb9370b72f4a1b6632c4146e0db53f51617affa8cfb3f80d516ecb29af11354be7e52c5ccd2a21ad496c004c1ba461f5fe6322c791721f0770e5ce5", @generic="e216125c25c3359bdf1d63f3a64089a5d448b3cdb52f55de04ffa8a62ab5fa8dae8148880214ccaa71ae50a76d2b6788d8855445db411154706fbdcff5918cdba948cebe5c9fcd84b50664fea476c0fce1d5a0f80f6601a897c0f3950a6aa41468da68a1954b87b1c713e319851817438e712f1158f2a91b2a216be6129bf1fafa07e605c7ab77642fba384b283b19e12d9f5d97019686b3950f7cda306439be254e343540621d50346a1095527ddb5fa4ad0bbee9006194f89e09beea33bea9700ee1b11207cb", @nested={0x4, 0x125}]}, @nested={0x1c, 0xbe, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x1f6}, @typed={0x8, 0x9a, 0x0, 0x0, @fd=r5}]}]}]}, 0x1424}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x2ff, 0x4, 0x1}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0xa2741, 0x0) semctl$auto(0x0, 0x9, 0x1, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) read$auto(r6, &(0x7f0000001680)='/dev/kvm\x00', 0x2) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/158, 0x9e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) 9.104287924s ago: executing program 3 (id=2047): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x0, 0xc, 0x0, 0x4000fff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x81}, 0x5) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000040)="713aa6185ac801fb61dd46a6683a08cb0142bc8db012bd0efd3f1d3a0e425091f23ace6d9b069efd7496d3abf7f03f05e2e796a1f7864693d17aab92b2bf3a75f505bc8218533e636f2c1c90b9a56f1e65b204d293d6c98fbca52bcfe1e8be11626621ddec19a5195ec426d350dc4738f2", 0x71) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0x75e8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r6, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x80000, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r7, 0x1276, 0x0) 9.100652462s ago: executing program 2 (id=2048): open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) write$auto(r1, 0x0, 0xfffffdf3) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.055596256s ago: executing program 1 (id=2049): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x209, 0xa, r1, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, 0x0, 0x0, 0x7ff, 0x3ff, 0x1, 0xa, 0xf9eb, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x4c815}, 0x40000) r3 = setfsgid$auto(0xee01) setresgid$auto(r3, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.21195198s ago: executing program 0 (id=2050): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) r1 = socket(0x2, 0x80002, 0x73) bind$auto(r1, 0x0, 0x6b) setns(0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x2, 0x40, 0x7, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfb, 0x248f, 0x5, 0x100000001, 0x80000000, 0x0, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x772e, 0x8000000000000001, 0x0, 0x9c1c, 0x6, 0xfffffffffffffffa, 0xffffffffffff7fff, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x3, 0x6, 0x1, 0x3, 0xfff, 0x7fff, 0x8, 0x5, 0x1, 0x8, 0x5, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.261875707s ago: executing program 3 (id=2053): openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x9, 0x80002, 0x73) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x38, 0x7, "4561bb0426bc6c94b7ef5c3fc692925f497aca0fe58c07f0cbfaa5e300ec9f8d0cc34d6f8b299c3efbf09c39a22b885fd540c98b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x40080) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000280)={@sival_int=0x4, @inferred=r1, 0x7}, &(0x7f00000002c0)=0x3) r3 = syz_open_procfs$namespace(0x0, 0x0) fchdir$auto(r3) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8001) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.911163256s ago: executing program 1 (id=2063): socket(0x18, 0x5, 0x2) connect$auto(0x3, &(0x7f00000000c0), 0x52) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) r0 = userfaultfd$auto(0x8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x0, 0x0, 0x0) mmap$auto(0x8, 0x7f, 0x91, 0x800000000014, r0, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r0, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x8, 0xa, 0x0) sendto$auto(r3, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000200)='/dev/usbmon37\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r4, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) 1.860530127s ago: executing program 0 (id=2056): openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket(0x10, 0x2, 0x4) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x84, 0xa, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r2 = socket(0x2, 0x3, 0x100) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r2) sendmsg$auto_NL80211_CMD_DEL_STATION(r2, 0x0, 0x8004) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) 1.157061207s ago: executing program 0 (id=2057): r0 = fsopen$auto(0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000001440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) write$auto(r1, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r2, 0x0, 0x5, @uprobe_multi={0x81, 0x1ff, 0x8, 0x3, 0x2, 0x4}}, 0x81) 792.163152ms ago: executing program 1 (id=2058): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) socket(0x1e, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r3, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 709.403518ms ago: executing program 3 (id=2059): unshare$auto(0x40000080) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x8000, 0x0) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) socket(0x28, 0x1, 0x0) r0 = getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) io_uring_register$auto_IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f00000002c0)="51c3e4ed6641b13ce8d4500993bb52a7e1d68596d9b818885e564a7c7fb78853e60efbb9597a340941dd9ae7084c0bb6113aa409a570d7054fb515b43b2fd651b5874037453364bba45aad71adecaee50949a66f5939e87b5b7de78d392e017680d115755534441b8ee422303ec09457f8748c2540671e76bc4ed9883c3557040dc34c1ca2f22134225f10cdf3cceae2a3c04701207efffd596cfe27454bd0e7cc94f1c605f3815bf5c9945b0e6e23156967299fa464861f7db0144b029562dfc41f1b96c187c834d78a6fe33895a0e89a8205412bae51ecd3b8fe5971f9c0ee8337af7b120a1ea0731ba42a9b3f63", 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x8001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) futex_waitv$auto(0x0, 0x5, 0xa64, 0x0, 0x2a5fe50c) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sched_setaffinity$auto(0x0, 0x8, &(0x7f0000000740)=0x9) lsm_list_modules$auto(0x0, 0x0, 0x0) 39.278199ms ago: executing program 2 (id=2060): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x209, 0xa, r1, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, 0x0, 0x0, 0x7ff, 0x3ff, 0x1, 0xa, 0xf9eb, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x4c815}, 0x40000) r3 = setfsgid$auto(0xee01) setresgid$auto(r3, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 0 (id=2061): r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x0, 0xc, 0x0, 0x4000fff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x81}, 0x5) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000040)="713aa6185ac801fb61dd46a6683a08cb0142bc8db012bd0efd3f1d3a0e425091f23ace6d9b069efd7496d3abf7f03f05e2e796a1f7864693d17aab92b2bf3a75f505bc8218533e636f2c1c90b9a56f1e65b204d293d6c98fbca52bcfe1e8be11626621ddec19a5195ec426d350dc4738f2", 0x71) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0x75e8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r6, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x80000, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r7, 0x1276, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 88.828804][ T5613] cgroup: Unknown subsys name 'net' [ 88.939758][ T5613] cgroup: Unknown subsys name 'cpuset' [ 88.949775][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.740293][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.803314][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.813899][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.822471][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.832309][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.840122][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.896129][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.908621][ T4941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.918749][ T4941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.933029][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.943176][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.983688][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.993057][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.003214][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.022132][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.030830][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.038658][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.048605][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.049243][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.063682][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.063992][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.756812][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.764742][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.772983][ T5624] bridge_slave_0: entered allmulticast mode [ 94.781595][ T5624] bridge_slave_0: entered promiscuous mode [ 94.832779][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.840093][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.847676][ T5624] bridge_slave_1: entered allmulticast mode [ 94.855071][ T5624] bridge_slave_1: entered promiscuous mode [ 94.870569][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.877837][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.885053][ T5634] bridge_slave_0: entered allmulticast mode [ 94.892603][ T4941] Bluetooth: hci0: command tx timeout [ 94.900280][ T5634] bridge_slave_0: entered promiscuous mode [ 94.944883][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.952334][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.959637][ T5634] bridge_slave_1: entered allmulticast mode [ 94.968275][ T5634] bridge_slave_1: entered promiscuous mode [ 94.975669][ T4941] Bluetooth: hci1: command tx timeout [ 95.030203][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.037507][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.044743][ T5633] bridge_slave_0: entered allmulticast mode [ 95.052675][ T5633] bridge_slave_0: entered promiscuous mode [ 95.064591][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.098227][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.105771][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.112991][ T5633] bridge_slave_1: entered allmulticast mode [ 95.120936][ T5633] bridge_slave_1: entered promiscuous mode [ 95.130963][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.140306][ T50] Bluetooth: hci2: command tx timeout [ 95.141233][ T4941] Bluetooth: hci3: command tx timeout [ 95.162366][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.170698][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.178332][ T5629] bridge_slave_0: entered allmulticast mode [ 95.186029][ T5629] bridge_slave_0: entered promiscuous mode [ 95.199033][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.234309][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.241778][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.249433][ T5629] bridge_slave_1: entered allmulticast mode [ 95.257128][ T5629] bridge_slave_1: entered promiscuous mode [ 95.266731][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.290504][ T5624] team0: Port device team_slave_0 added [ 95.299979][ T5624] team0: Port device team_slave_1 added [ 95.332060][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.383156][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.416395][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.430090][ T5634] team0: Port device team_slave_0 added [ 95.448763][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.456114][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.482384][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.497870][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.527361][ T5634] team0: Port device team_slave_1 added [ 95.548840][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.556188][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.582267][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.622295][ T5633] team0: Port device team_slave_0 added [ 95.647043][ T5629] team0: Port device team_slave_0 added [ 95.668043][ T5633] team0: Port device team_slave_1 added [ 95.700494][ T5629] team0: Port device team_slave_1 added [ 95.707241][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.714326][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.740586][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.783152][ T5624] hsr_slave_0: entered promiscuous mode [ 95.790082][ T5624] hsr_slave_1: entered promiscuous mode [ 95.809617][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.816740][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.842758][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.854860][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.861958][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.888195][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.904746][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.912223][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.938525][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.994490][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.001616][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.027893][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.040921][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.048008][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.074049][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.202252][ T5633] hsr_slave_0: entered promiscuous mode [ 96.209190][ T5633] hsr_slave_1: entered promiscuous mode [ 96.215441][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 96.221461][ T5633] Cannot create hsr debugfs directory [ 96.234668][ T5634] hsr_slave_0: entered promiscuous mode [ 96.242101][ T5634] hsr_slave_1: entered promiscuous mode [ 96.248879][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 96.254843][ T5634] Cannot create hsr debugfs directory [ 96.288030][ T5629] hsr_slave_0: entered promiscuous mode [ 96.294536][ T5629] hsr_slave_1: entered promiscuous mode [ 96.302361][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 96.308216][ T5629] Cannot create hsr debugfs directory [ 96.803117][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.818181][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.827226][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.842057][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.866809][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.882220][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.896126][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.916599][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.977952][ T4941] Bluetooth: hci0: command tx timeout [ 97.002956][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.019033][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.029645][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.040307][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.047819][ T4941] Bluetooth: hci1: command tx timeout [ 97.063416][ T24] cfg80211: failed to load regulatory.db [ 97.075375][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.090014][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.101309][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.113103][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.205837][ T50] Bluetooth: hci2: command tx timeout [ 97.212313][ T4941] Bluetooth: hci3: command tx timeout [ 97.267900][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.282021][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.303934][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.317020][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.325858][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.337654][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.347346][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.360740][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.472504][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.507385][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.520009][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.537066][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.548029][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.561780][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.572571][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.587483][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.599954][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.631663][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.680911][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.688940][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.719028][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.726230][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.769237][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.838994][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.883386][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.890598][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.941848][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.949142][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.978535][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.082852][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.150486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.157799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.188561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.195841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.220024][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.337604][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.381952][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.389225][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.437999][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.445249][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.943466][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.056653][ T4941] Bluetooth: hci0: command tx timeout [ 99.125632][ T4941] Bluetooth: hci1: command tx timeout [ 99.154562][ T5624] veth0_vlan: entered promiscuous mode [ 99.204716][ T5624] veth1_vlan: entered promiscuous mode [ 99.305839][ T4941] Bluetooth: hci3: command tx timeout [ 99.309734][ T50] Bluetooth: hci2: command tx timeout [ 99.334981][ T5624] veth0_macvtap: entered promiscuous mode [ 99.348646][ T5624] veth1_macvtap: entered promiscuous mode [ 99.399949][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.447098][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.528210][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.551684][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.752847][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.782135][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.823118][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.889641][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.897782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.920459][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.940263][ T5634] veth0_vlan: entered promiscuous mode [ 99.983755][ T5634] veth1_vlan: entered promiscuous mode [ 99.997844][ T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.070315][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.086128][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.163576][ T5633] veth0_vlan: entered promiscuous mode [ 100.187380][ T5629] veth0_vlan: entered promiscuous mode [ 100.213048][ T5634] veth0_macvtap: entered promiscuous mode [ 100.227836][ T5633] veth1_vlan: entered promiscuous mode [ 100.249496][ T5629] veth1_vlan: entered promiscuous mode [ 100.260085][ T5634] veth1_macvtap: entered promiscuous mode [ 100.334484][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.417632][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.455887][ T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.509248][ T5633] veth0_macvtap: entered promiscuous mode [ 100.578608][ T5629] veth0_macvtap: entered promiscuous mode [ 100.693402][ T5633] veth1_macvtap: entered promiscuous mode [ 100.708903][ T5629] veth1_macvtap: entered promiscuous mode [ 100.964250][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.984007][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.019528][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.039672][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.135945][ T50] Bluetooth: hci0: command tx timeout [ 101.170515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.191381][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.212945][ T50] Bluetooth: hci1: command tx timeout [ 101.293812][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.366995][ T4941] Bluetooth: hci3: command tx timeout [ 101.373283][ T50] Bluetooth: hci2: command tx timeout [ 101.408038][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.438441][ T5785] sd 0:0:1:0: PR command failed: 1026 [ 101.459770][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.471229][ T5785] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 101.481556][ T5785] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 101.721165][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.736801][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.742152][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.912033][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.943016][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.957775][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.975123][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.071873][ T5792] FAULT_INJECTION: forcing a failure. [ 102.071873][ T5792] name failslab, interval 1, probability 0, space 0, times 1 [ 102.076245][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.104833][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 102.104876][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.104900][ T5792] Call Trace: [ 102.104910][ T5792] [ 102.104923][ T5792] dump_stack_lvl+0x100/0x190 [ 102.104972][ T5792] should_fail_ex.cold+0x5/0xa [ 102.105012][ T5792] should_failslab+0xc2/0x120 [ 102.105062][ T5792] __kmalloc_noprof+0xfc/0x820 [ 102.105104][ T5792] ? __register_sysctl_table+0xac/0x1650 [ 102.105158][ T5792] __register_sysctl_table+0xac/0x1650 [ 102.105192][ T5792] ? is_module_address+0x5f/0xf0 [ 102.105234][ T5792] ? __pfx___register_sysctl_table+0x10/0x10 [ 102.105266][ T5792] ? is_module_address+0x69/0xf0 [ 102.105296][ T5792] ? register_net_sysctl_sz+0x222/0x430 [ 102.105359][ T5792] __devinet_sysctl_register+0x1b9/0x360 [ 102.105412][ T5792] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 102.105472][ T5792] ? __asan_memcpy+0x3c/0x60 [ 102.105511][ T5792] devinet_init_net+0x334/0x8d0 [ 102.105558][ T5792] ? __pfx_devinet_init_net+0x10/0x10 [ 102.105601][ T5792] ops_init+0x1e2/0x5f0 [ 102.105657][ T5792] setup_net+0x118/0x3a0 [ 102.105709][ T5792] ? __pfx_setup_net+0x10/0x10 [ 102.105760][ T5792] ? mutex_init_lockdep+0xf1/0x120 [ 102.105800][ T5792] copy_net_ns+0x46f/0x7c0 [ 102.105837][ T5792] create_new_namespaces+0x3ea/0xac0 [ 102.105883][ T5792] unshare_nsproxy_namespaces+0xf2/0x220 [ 102.105924][ T5792] ksys_unshare+0x438/0xab0 [ 102.105968][ T5792] ? __pfx_ksys_unshare+0x10/0x10 [ 102.106028][ T5792] __x64_sys_unshare+0x31/0x40 [ 102.106072][ T5792] do_syscall_64+0x115/0x840 [ 102.106116][ T5792] ? clear_bhb_loop+0x40/0x90 [ 102.106167][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.106202][ T5792] RIP: 0033:0x7f285459e019 [ 102.106238][ T5792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.106280][ T5792] RSP: 002b:00007f2855518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.106317][ T5792] RAX: ffffffffffffffda RBX: 00007f2854825fa0 RCX: 00007f285459e019 [ 102.106339][ T5792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 102.106358][ T5792] RBP: 00007f285463500c R08: 0000000000000000 R09: 0000000000000000 [ 102.106377][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.106397][ T5792] R13: 00007f2854826038 R14: 00007f2854825fa0 R15: 00007ffe1cedf438 [ 102.106438][ T5792] [ 102.130477][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.393864][ T5793] FAULT_INJECTION: forcing a failure. [ 102.393864][ T5793] name failslab, interval 1, probability 0, space 0, times 0 [ 102.425990][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 102.426041][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.426061][ T5793] Call Trace: [ 102.426072][ T5793] [ 102.426084][ T5793] dump_stack_lvl+0x100/0x190 [ 102.426128][ T5793] should_fail_ex.cold+0x5/0xa [ 102.426167][ T5793] should_failslab+0xc2/0x120 [ 102.426215][ T5793] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 102.426265][ T5793] ? __get_vm_area_node+0x101/0x330 [ 102.426321][ T5793] __get_vm_area_node+0x101/0x330 [ 102.426376][ T5793] __vmalloc_node_range_noprof+0x228/0x1630 [ 102.426432][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.426485][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.426534][ T5793] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 102.426591][ T5793] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.426652][ T5793] ? trace_kmem_cache_alloc+0xdd/0x100 [ 102.426707][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.426747][ T5793] __vmalloc_node_noprof+0xad/0xf0 [ 102.426800][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.426847][ T5793] copy_process+0x7fb/0x8030 [ 102.426887][ T5793] ? futex_unqueue+0x133/0x2c0 [ 102.426921][ T5793] ? futex_unqueue+0x133/0x2c0 [ 102.426970][ T5793] ? __pfx_copy_process+0x10/0x10 [ 102.427034][ T5793] ? _copy_from_user+0x59/0xd0 [ 102.427093][ T5793] kernel_clone+0x176/0x9d0 [ 102.427134][ T5793] ? get_pid_task+0xfc/0x250 [ 102.427181][ T5793] ? __pfx_kernel_clone+0x10/0x10 [ 102.427230][ T5793] ? find_held_lock+0x2b/0x80 [ 102.427286][ T5793] __do_sys_clone3+0x214/0x290 [ 102.427329][ T5793] ? __pfx___do_sys_clone3+0x10/0x10 [ 102.427369][ T5793] ? ksys_write+0x190/0x250 [ 102.427424][ T5793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.427508][ T5793] do_syscall_64+0x115/0x840 [ 102.427554][ T5793] ? clear_bhb_loop+0x40/0x90 [ 102.427596][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.427633][ T5793] RIP: 0033:0x7f6b5339e019 [ 102.427660][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.427693][ T5793] RSP: 002b:00007f6b54205ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 102.427725][ T5793] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6b5339e019 [ 102.427748][ T5793] RDX: 00007f6b54205f10 RSI: 0000000000000058 RDI: 00007f6b54205f10 [ 102.427769][ T5793] RBP: 00007f6b5343500c R08: 0000000000000000 R09: 0000000000000058 [ 102.427790][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.427810][ T5793] R13: 00007f6b53626128 R14: 00007f6b53626090 R15: 00007ffde1dc4848 [ 102.427854][ T5793] [ 102.428131][ T5793] syz.1.6: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 102.712900][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 102.712940][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.712959][ T5793] Call Trace: [ 102.712979][ T5793] [ 102.712991][ T5793] dump_stack_lvl+0x100/0x190 [ 102.713034][ T5793] warn_alloc.cold+0x94/0xa8 [ 102.713070][ T5793] ? __pfx_warn_alloc+0x10/0x10 [ 102.713105][ T5793] ? __kasan_kmalloc+0x8a/0xb0 [ 102.713163][ T5793] ? __get_vm_area_node+0x208/0x330 [ 102.713221][ T5793] __vmalloc_node_range_noprof+0xccd/0x1630 [ 102.713287][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.713336][ T5793] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 102.713398][ T5793] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.713461][ T5793] ? trace_kmem_cache_alloc+0xdd/0x100 [ 102.713513][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.713553][ T5793] __vmalloc_node_noprof+0xad/0xf0 [ 102.713606][ T5793] ? kernel_clone+0x176/0x9d0 [ 102.713652][ T5793] copy_process+0x7fb/0x8030 [ 102.713692][ T5793] ? futex_unqueue+0x133/0x2c0 [ 102.713726][ T5793] ? futex_unqueue+0x133/0x2c0 [ 102.713780][ T5793] ? __pfx_copy_process+0x10/0x10 [ 102.713833][ T5793] ? _copy_from_user+0x59/0xd0 [ 102.713892][ T5793] kernel_clone+0x176/0x9d0 [ 102.713933][ T5793] ? get_pid_task+0xfc/0x250 [ 102.713989][ T5793] ? __pfx_kernel_clone+0x10/0x10 [ 102.714041][ T5793] ? find_held_lock+0x2b/0x80 [ 102.714093][ T5793] __do_sys_clone3+0x214/0x290 [ 102.714135][ T5793] ? __pfx___do_sys_clone3+0x10/0x10 [ 102.714177][ T5793] ? ksys_write+0x190/0x250 [ 102.714225][ T5793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.714308][ T5793] do_syscall_64+0x115/0x840 [ 102.714354][ T5793] ? clear_bhb_loop+0x40/0x90 [ 102.714397][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.714433][ T5793] RIP: 0033:0x7f6b5339e019 [ 102.714460][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.714493][ T5793] RSP: 002b:00007f6b54205ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 102.714525][ T5793] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6b5339e019 [ 102.714546][ T5793] RDX: 00007f6b54205f10 RSI: 0000000000000058 RDI: 00007f6b54205f10 [ 102.714565][ T5793] RBP: 00007f6b5343500c R08: 0000000000000000 R09: 0000000000000058 [ 102.714585][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.714604][ T5793] R13: 00007f6b53626128 R14: 00007f6b53626090 R15: 00007ffde1dc4848 [ 102.714647][ T5793] [ 102.844435][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.986112][ T5793] Mem-Info: [ 103.001262][ T5793] active_anon:5027 inactive_anon:0 isolated_anon:0 [ 103.001262][ T5793] active_file:0 inactive_file:41431 isolated_file:0 [ 103.001262][ T5793] unevictable:768 dirty:1742 writeback:0 [ 103.001262][ T5793] slab_reclaimable:9777 slab_unreclaimable:89120 [ 103.001262][ T5793] mapped:26154 shmem:1289 pagetables:947 [ 103.001262][ T5793] sec_pagetables:0 bounce:0 [ 103.001262][ T5793] kernel_misc_reclaimable:0 [ 103.001262][ T5793] free:1351138 free_pcp:11556 free_cma:0 [ 103.050056][ T5793] Node 0 active_anon:20108kB inactive_anon:0kB active_file:0kB inactive_file:165524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104616kB dirty:6948kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11144kB pagetables:3640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.115831][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.119907][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.148201][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.282408][ T5793] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.455655][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.480983][ T5793] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.624191][ T5793] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 103.658213][ T5793] Node 0 DMA32 free:1450400kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24308kB inactive_anon:0kB active_file:0kB inactive_file:167036kB unevictable:1536kB writepending:6976kB zspages:0kB present:3129332kB managed:2532396kB mlocked:0kB bounce:0kB free_pcp:42056kB local_pcp:36660kB free_cma:0kB [ 103.694613][ T5793] lowmem_reserve[]: 0 0 0 0 0 [ 103.704476][ T5793] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.826431][ T5793] lowmem_reserve[]: 0 0 0 0 0 [ 103.887026][ T5793] Node 1 Normal free:3936560kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.998307][ T5793] lowmem_reserve[]: 0 0 0 0 0 [ 104.020652][ T5793] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.043800][ T5793] Node 0 DMA32: 318*4kB (UME) 25*8kB (U) 1*16kB (E) 1*32kB (U) 2*64kB (ME) 2*128kB (ME) 3*256kB (M) 3*512kB (ME) 2*1024kB (M) 4*2048kB (M) 350*4096kB (M) = 1448048kB [ 104.099859][ T5793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.142874][ T5793] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 9*16kB (UM) 8*32kB (UM) 8*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3936560kB [ 104.190530][ T5793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.203579][ T5793] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.246836][ T5793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.280004][ T5793] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.298279][ T5793] 43482 total pagecache pages [ 104.337079][ T5793] 0 pages in swap cache [ 104.346521][ T5793] Free swap = 124996kB [ 104.360791][ T5793] Total swap = 124996kB [ 104.372673][ T5793] 2097051 pages RAM [ 104.389576][ T5793] 0 pages HighMem/MovableOnly [ 104.416030][ T5793] 432241 pages reserved [ 104.427070][ T5793] 0 pages cma reserved [ 104.651220][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.699670][ T5825] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.765059][ T5818] Zero length message leads to an empty skb [ 105.325429][ T5835] base or size exceeds the MTRR width [ 105.537325][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.571180][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.668517][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.060330][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.306732][ T5875] netlink: 25 bytes leftover after parsing attributes in process `syz.2.23'. [ 107.374321][ T5865] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.205776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.941896][ T5915] netlink: 350 bytes leftover after parsing attributes in process `syz.2.35'. [ 111.651897][ T5942] netlink: 25 bytes leftover after parsing attributes in process `syz.3.45'. [ 112.444140][ T5958] netlink: 'syz.2.49': attribute type 15 has an invalid length. [ 112.465281][ T5958] netlink: 'syz.2.49': attribute type 16 has an invalid length. [ 112.479687][ T5958] netlink: 194 bytes leftover after parsing attributes in process `syz.2.49'. [ 113.319509][ T5973] binder: 5971:5973 ioctl c0306201 0 returned -14 [ 113.540956][ T5970] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 116.295002][ T6018] sctp: [Deprecated]: syz.1.64 (pid 6018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.295002][ T6018] Use struct sctp_sack_info instead [ 119.964037][ T6070] FAULT_INJECTION: forcing a failure. [ 119.964037][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 119.981930][ T6068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.988298][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 119.988338][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.988356][ T6070] Call Trace: [ 119.988367][ T6070] [ 119.988379][ T6070] dump_stack_lvl+0x100/0x190 [ 119.988439][ T6070] should_fail_ex.cold+0x5/0xa [ 119.988474][ T6070] should_failslab+0xc2/0x120 [ 119.988523][ T6070] kmem_cache_alloc_noprof+0x91/0x6a0 [ 119.988567][ T6070] ? __kernfs_new_node+0xd2/0xa10 [ 119.988607][ T6070] __kernfs_new_node+0xd2/0xa10 [ 119.988642][ T6070] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 119.988691][ T6070] ? __pfx___kernfs_new_node+0x10/0x10 [ 119.988733][ T6070] ? find_held_lock+0x2b/0x80 [ 119.988773][ T6070] ? kernfs_root+0xee/0x2a0 [ 119.988821][ T6070] ? kernfs_root+0xee/0x2a0 [ 119.988880][ T6070] kernfs_create_dir_ns+0xa6/0x2b0 [ 119.988923][ T6070] internal_create_group+0x36f/0xfb0 [ 119.989049][ T6070] ? __pfx_internal_create_group+0x10/0x10 [ 119.989107][ T6070] ? __pfx_internal_create_group+0x10/0x10 [ 119.989159][ T6070] ? bus_add_device+0x2e2/0x6c0 [ 119.989203][ T6070] ? __pfx_bus_add_device+0x10/0x10 [ 119.989242][ T6070] ? __pfx_dev_add_physical_location+0x10/0x10 [ 119.989288][ T6070] dpm_sysfs_add+0x80/0x280 [ 119.989322][ T6070] device_add+0x9f4/0x1970 [ 119.989358][ T6070] ? __pfx_device_add+0x10/0x10 [ 119.989392][ T6070] ? lockdep_init_map_type+0x5c/0x250 [ 119.989427][ T6070] ? __init_waitqueue_head+0xca/0x150 [ 119.989472][ T6070] netdev_register_kobject+0x1a9/0x3d0 [ 119.989526][ T6070] register_netdevice+0x15b6/0x25a0 [ 119.989584][ T6070] ? __pfx_register_netdevice+0x10/0x10 [ 119.989631][ T6070] ? net_generic+0xea/0x2a0 [ 119.989678][ T6070] ppp_dev_configure+0x986/0xcb0 [ 119.989726][ T6070] ppp_ioctl+0x9ef/0x2860 [ 119.989768][ T6070] ? find_held_lock+0x2b/0x80 [ 119.989819][ T6070] ? __pfx_ppp_ioctl+0x10/0x10 [ 119.989864][ T6070] ? __fget_files+0x21f/0x3d0 [ 119.989898][ T6070] ? __pfx_ppp_ioctl+0x10/0x10 [ 119.989937][ T6070] __x64_sys_ioctl+0x18e/0x210 [ 119.989983][ T6070] do_syscall_64+0x115/0x840 [ 119.990024][ T6070] ? clear_bhb_loop+0x40/0x90 [ 119.990063][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.990096][ T6070] RIP: 0033:0x7fccb679e019 [ 119.990135][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.990164][ T6070] RSP: 002b:00007fccb75bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.990191][ T6070] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e019 [ 119.990210][ T6070] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007 [ 119.990227][ T6070] RBP: 00007fccb683500c R08: 0000000000000000 R09: 0000000000000000 [ 119.990244][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.990263][ T6070] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007fff55a0c338 [ 119.990303][ T6070] [ 120.072743][ T6068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.352182][ T6068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.400633][ T6068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.413841][ T6068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.461486][ T6068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.509666][ T6068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.517042][ T6068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.563124][ T6068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.596303][ T6068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.619365][ T6068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.633474][ T6068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.005922][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.405854][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.472573][ T6107] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 122.491121][ T6115] FAULT_INJECTION: forcing a failure. [ 122.491121][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 122.510508][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 122.510547][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.510565][ T6115] Call Trace: [ 122.510577][ T6115] [ 122.510590][ T6115] dump_stack_lvl+0x100/0x190 [ 122.510634][ T6115] should_fail_ex.cold+0x5/0xa [ 122.510672][ T6115] should_failslab+0xc2/0x120 [ 122.510721][ T6115] __kmalloc_cache_noprof+0x91/0x6c0 [ 122.510757][ T6115] ? kasan_save_track+0x14/0x30 [ 122.510795][ T6115] ? __kasan_kmalloc+0xaa/0xb0 [ 122.510827][ T6115] ? vidtv_psi_nit_table_init+0x5b/0x5f0 [ 122.510874][ T6115] vidtv_psi_nit_table_init+0x5b/0x5f0 [ 122.510929][ T6115] vidtv_channel_si_init+0xccf/0x18f0 [ 122.510986][ T6115] vidtv_mux_init+0x522/0xbf0 [ 122.511058][ T6115] vidtv_start_feed+0x34e/0x500 [ 122.511095][ T6115] ? __pfx_vidtv_start_feed+0x10/0x10 [ 122.511133][ T6115] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 122.511193][ T6115] dmx_section_feed_start_filtering+0x3a8/0x660 [ 122.511252][ T6115] dvb_dmxdev_filter_start+0x767/0xdd0 [ 122.511301][ T6115] dvb_demux_do_ioctl+0xe64/0x1200 [ 122.511347][ T6115] dvb_usercopy+0x167/0x340 [ 122.511375][ T6115] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 122.511416][ T6115] ? __pfx_dvb_usercopy+0x10/0x10 [ 122.511465][ T6115] ? __fget_files+0x21f/0x3d0 [ 122.511508][ T6115] dvb_demux_ioctl+0x29/0x40 [ 122.511537][ T6115] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 122.511571][ T6115] __x64_sys_ioctl+0x18e/0x210 [ 122.511626][ T6115] do_syscall_64+0x115/0x840 [ 122.511672][ T6115] ? clear_bhb_loop+0x40/0x90 [ 122.511715][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.511751][ T6115] RIP: 0033:0x7f285459e019 [ 122.511779][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.511810][ T6115] RSP: 002b:00007f2855518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.511842][ T6115] RAX: ffffffffffffffda RBX: 00007f2854825fa0 RCX: 00007f285459e019 [ 122.511863][ T6115] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 122.511888][ T6115] RBP: 00007f285463500c R08: 0000000000000000 R09: 0000000000000000 [ 122.511906][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.511935][ T6115] R13: 00007f2854826038 R14: 00007f2854825fa0 R15: 00007ffe1cedf438 [ 122.511978][ T6115] [ 122.565741][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.658777][ T4941] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.113428][ T6122] FAULT_INJECTION: forcing a failure. [ 123.113428][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 123.147235][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 123.147271][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.147287][ T6122] Call Trace: [ 123.147296][ T6122] [ 123.147307][ T6122] dump_stack_lvl+0x100/0x190 [ 123.147365][ T6122] should_fail_ex.cold+0x5/0xa [ 123.147404][ T6122] should_failslab+0xc2/0x120 [ 123.147447][ T6122] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 123.147493][ T6122] ? devinet_init_net+0xca/0x8d0 [ 123.147540][ T6122] kmemdup_noprof+0x29/0x60 [ 123.147577][ T6122] devinet_init_net+0xca/0x8d0 [ 123.147620][ T6122] ? __pfx_devinet_init_net+0x10/0x10 [ 123.147659][ T6122] ops_init+0x1e2/0x5f0 [ 123.147710][ T6122] setup_net+0x118/0x3a0 [ 123.147762][ T6122] ? __pfx_setup_net+0x10/0x10 [ 123.147811][ T6122] ? mutex_init_lockdep+0xf1/0x120 [ 123.147849][ T6122] copy_net_ns+0x46f/0x7c0 [ 123.147882][ T6122] create_new_namespaces+0x3ea/0xac0 [ 123.147925][ T6122] unshare_nsproxy_namespaces+0xf2/0x220 [ 123.147963][ T6122] ksys_unshare+0x438/0xab0 [ 123.148005][ T6122] ? __pfx_ksys_unshare+0x10/0x10 [ 123.148060][ T6122] __x64_sys_unshare+0x31/0x40 [ 123.148099][ T6122] do_syscall_64+0x115/0x840 [ 123.148140][ T6122] ? clear_bhb_loop+0x40/0x90 [ 123.148178][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.148219][ T6122] RIP: 0033:0x7f285459e019 [ 123.148244][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.148274][ T6122] RSP: 002b:00007f2855518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.148303][ T6122] RAX: ffffffffffffffda RBX: 00007f2854825fa0 RCX: 00007f285459e019 [ 123.148324][ T6122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 123.148342][ T6122] RBP: 00007f285463500c R08: 0000000000000000 R09: 0000000000000000 [ 123.148361][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.148379][ T6122] R13: 00007f2854826038 R14: 00007f2854825fa0 R15: 00007ffe1cedf438 [ 123.148418][ T6122] [ 123.462073][ T6125] netlink: 25 bytes leftover after parsing attributes in process `syz.3.91'. [ 124.086491][ T4941] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.295928][ T6136] FAULT_INJECTION: forcing a failure. [ 124.295928][ T6136] name failslab, interval 1, probability 0, space 0, times 0 [ 124.323012][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 124.323055][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.323074][ T6136] Call Trace: [ 124.323084][ T6136] [ 124.323096][ T6136] dump_stack_lvl+0x100/0x190 [ 124.323150][ T6136] should_fail_ex.cold+0x5/0xa [ 124.323187][ T6136] should_failslab+0xc2/0x120 [ 124.323233][ T6136] kmem_cache_alloc_noprof+0x91/0x6a0 [ 124.323274][ T6136] ? mas_next_range+0x9b/0xf0 [ 124.323323][ T6136] ? vm_area_alloc+0x1f/0x160 [ 124.323360][ T6136] vm_area_alloc+0x1f/0x160 [ 124.323391][ T6136] __mmap_region+0x1033/0x2db0 [ 124.323430][ T6136] ? lock_acquire+0x1b9/0x370 [ 124.323484][ T6136] ? __pfx___mmap_region+0x10/0x10 [ 124.323516][ T6136] ? clockevents_program_event+0x23e/0x820 [ 124.323555][ T6136] ? clockevents_program_event+0x23e/0x820 [ 124.323602][ T6136] ? ktime_get+0x9f/0x320 [ 124.323671][ T6136] ? mas_prev_slot+0x760/0x1d20 [ 124.323768][ T6136] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 124.323877][ T6136] mmap_region+0x35d/0x620 [ 124.323920][ T6136] ? __pfx_mmap_region+0x10/0x10 [ 124.323957][ T6136] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 124.323992][ T6136] ? cap_mmap_addr+0x4b/0x120 [ 124.324027][ T6136] ? bpf_lsm_mmap_addr+0x9/0x30 [ 124.324059][ T6136] ? security_mmap_addr+0x71/0x1e0 [ 124.324107][ T6136] ? __get_unmapped_area+0x255/0x3e0 [ 124.324171][ T6136] do_mmap+0xc63/0x12f0 [ 124.324225][ T6136] ? __pfx_do_mmap+0x10/0x10 [ 124.324271][ T6136] ? __pfx_down_write_killable+0x10/0x10 [ 124.324330][ T6136] vm_mmap_pgoff+0x29e/0x470 [ 124.324383][ T6136] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 124.324437][ T6136] ? find_held_lock+0x2b/0x80 [ 124.324477][ T6136] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 124.324527][ T6136] ksys_mmap_pgoff+0xe4/0x610 [ 124.324574][ T6136] ? find_held_lock+0x2b/0x80 [ 124.324614][ T6136] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 124.324658][ T6136] ? exc_page_fault+0x6f/0xd0 [ 124.324711][ T6136] __x64_sys_mmap+0x125/0x190 [ 124.324758][ T6136] do_syscall_64+0x115/0x840 [ 124.324802][ T6136] ? clear_bhb_loop+0x40/0x90 [ 124.324843][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.324877][ T6136] RIP: 0033:0x7f436d59dd82 [ 124.324904][ T6136] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 124.324936][ T6136] RSP: 002b:00007f436e4ecd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.324966][ T6136] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f436d59dd82 [ 124.324986][ T6136] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 124.325006][ T6136] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 124.325026][ T6136] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 124.325045][ T6136] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f436d632730 [ 124.325087][ T6136] [ 124.627960][ T4941] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.790962][ T5636] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.852432][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.016181][ T6140] kvm: kvm [6139]: vcpu5, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001d) [ 125.026014][ T6142] FAULT_INJECTION: forcing a failure. [ 125.026014][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 125.083979][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) [ 125.084023][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.084055][ T6142] Call Trace: [ 125.084066][ T6142] [ 125.084077][ T6142] dump_stack_lvl+0x100/0x190 [ 125.084117][ T6142] should_fail_ex.cold+0x5/0xa [ 125.084154][ T6142] should_failslab+0xc2/0x120 [ 125.084201][ T6142] __kmalloc_cache_noprof+0x91/0x6c0 [ 125.084234][ T6142] ? down_write+0x146/0x1f0 [ 125.084281][ T6142] ? kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 125.084342][ T6142] kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 125.084396][ T6142] ? __pfx_kvm_vm_release+0x10/0x10 [ 125.084442][ T6142] kvm_put_kvm+0xf9/0xc10 [ 125.084486][ T6142] ? lockdep_hardirqs_on+0x78/0x100 [ 125.084528][ T6142] ? _raw_spin_unlock_irq+0x2e/0x50 [ 125.084594][ T6142] ? __pfx_kvm_vm_release+0x10/0x10 [ 125.084642][ T6142] kvm_vm_release+0x3c/0x50 [ 125.084688][ T6142] __fput+0x3ff/0xb50 [ 125.084731][ T6142] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.084773][ T6142] task_work_run+0x150/0x240 [ 125.084822][ T6142] ? __pfx_task_work_run+0x10/0x10 [ 125.084882][ T6142] exit_to_user_mode_loop+0x1d8/0x6f0 [ 125.084915][ T6142] ? rcu_is_watching+0x12/0xc0 [ 125.084957][ T6142] do_syscall_64+0x652/0x840 [ 125.085000][ T6142] ? clear_bhb_loop+0x40/0x90 [ 125.085040][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.085073][ T6142] RIP: 0033:0x7f6b5339e019 [ 125.085099][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.085131][ T6142] RSP: 002b:00007f6b54227028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 125.085173][ T6142] RAX: 0000000000000000 RBX: 00007f6b53625fa0 RCX: 00007f6b5339e019 [ 125.085193][ T6142] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 125.085214][ T6142] RBP: 00007f6b5343500c R08: 0000000000000000 R09: 0000000000000000 [ 125.085233][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.085252][ T6142] R13: 00007f6b53626038 R14: 00007f6b53625fa0 R15: 00007ffde1dc4848 [ 125.085291][ T6142] [ 125.319216][ T6144] netlink: 'syz.0.98': attribute type 19 has an invalid length. [ 125.327360][ T6144] netlink: 226 bytes leftover after parsing attributes in process `syz.0.98'. [ 125.659454][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 126.165915][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.646592][ T4941] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 126.647059][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.805889][ T4941] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.889782][ T4941] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.657559][ T6193] FAULT_INJECTION: forcing a failure. [ 127.657559][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 127.676420][ T6193] CPU: 1 UID: 8 PID: 6193 Comm: syz.3.113 Not tainted syzkaller #0 PREEMPT(full) [ 127.676464][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.676483][ T6193] Call Trace: [ 127.676493][ T6193] [ 127.676505][ T6193] dump_stack_lvl+0x100/0x190 [ 127.676551][ T6193] should_fail_ex.cold+0x5/0xa [ 127.676591][ T6193] should_failslab+0xc2/0x120 [ 127.676648][ T6193] __kmalloc_cache_noprof+0x91/0x6c0 [ 127.676683][ T6193] ? key_user_lookup+0x16e/0x5a0 [ 127.676731][ T6193] ? key_user_lookup+0x16e/0x5a0 [ 127.676780][ T6193] ? key_user_lookup+0x1a3/0x5a0 [ 127.676843][ T6193] key_user_lookup+0x1a3/0x5a0 [ 127.676892][ T6193] ? __pfx_key_user_lookup+0x10/0x10 [ 127.676941][ T6193] ? security_key_permission+0x7b/0x230 [ 127.676994][ T6193] key_alloc+0x18b/0x1310 [ 127.677052][ T6193] ? __pfx_keyring_search+0x10/0x10 [ 127.677109][ T6193] ? __pfx_key_alloc+0x10/0x10 [ 127.677156][ T6193] ? __pfx_key_default_cmp+0x10/0x10 [ 127.677209][ T6193] ? __pfx_keyring_search_iterator+0x10/0x10 [ 127.677268][ T6193] keyring_alloc+0x44/0xc0 [ 127.677324][ T6193] look_up_user_keyrings+0x465/0x790 [ 127.677374][ T6193] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 127.677420][ T6193] ? __pfx_futex_wait+0x10/0x10 [ 127.677477][ T6193] lookup_user_key+0xbb1/0x1300 [ 127.677526][ T6193] ? __pfx_lookup_user_key+0x10/0x10 [ 127.677573][ T6193] ? do_futex+0x190/0x440 [ 127.677617][ T6193] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 127.677670][ T6193] ? __x64_sys_futex+0x34f/0x4d0 [ 127.677707][ T6193] ? __x64_sys_futex+0x358/0x4d0 [ 127.677754][ T6193] keyctl_session_to_parent+0x28/0xae0 [ 127.677804][ T6193] __do_sys_keyctl+0x2b1/0x5a0 [ 127.677857][ T6193] do_syscall_64+0x115/0x840 [ 127.677903][ T6193] ? clear_bhb_loop+0x40/0x90 [ 127.677947][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.677983][ T6193] RIP: 0033:0x7fccb679e019 [ 127.678010][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.678041][ T6193] RSP: 002b:00007fccb75bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 127.678074][ T6193] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e019 [ 127.678095][ T6193] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 127.678116][ T6193] RBP: 00007fccb683500c R08: 0000000000000001 R09: 0000000000000000 [ 127.678136][ T6193] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 127.678156][ T6193] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007fff55a0c338 [ 127.678201][ T6193] [ 128.144723][ T4941] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 128.734688][ T6215] usbcore.quirks: string doesn't fit in 127 chars. [ 128.754073][ T6223] netlink: 13 bytes leftover after parsing attributes in process `syz.1.121'. [ 129.679898][ T6237] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.803957][ T6255] netlink: 13 bytes leftover after parsing attributes in process `syz.0.128'. [ 131.448683][ T6266] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.492181][ T6266] netlink: 'syz.1.132': attribute type 2 has an invalid length. [ 131.514386][ T6266] netlink: 5 bytes leftover after parsing attributes in process `syz.1.132'. [ 132.130084][ T4941] Bluetooth: hci2: unexpected event 0x03 length: 43 > 11 [ 132.670153][ T6286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.893829][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901401][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.385257][ T6316] FAULT_INJECTION: forcing a failure. [ 135.385257][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 135.470368][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 135.470413][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.470434][ T6316] Call Trace: [ 135.470444][ T6316] [ 135.470457][ T6316] dump_stack_lvl+0x100/0x190 [ 135.470504][ T6316] should_fail_ex.cold+0x5/0xa [ 135.470544][ T6316] should_failslab+0xc2/0x120 [ 135.470595][ T6316] __kmalloc_noprof+0xfc/0x820 [ 135.470640][ T6316] ? __d_alloc+0x650/0xa50 [ 135.470687][ T6316] __d_alloc+0x650/0xa50 [ 135.470735][ T6316] d_alloc_parallel+0x105/0x14b0 [ 135.470802][ T6316] ? __pfx_d_alloc_parallel+0x10/0x10 [ 135.470853][ T6316] ? __pfx___might_resched+0x10/0x10 [ 135.470908][ T6316] ? try_to_unlazy+0x296/0x910 [ 135.470964][ T6316] ? down_read+0x13b/0x4c0 [ 135.471016][ T6316] ? __pfx_down_read+0x10/0x10 [ 135.471074][ T6316] __lookup_slow+0x98/0x320 [ 135.471125][ T6316] lookup_slow+0x50/0x70 [ 135.471181][ T6316] link_path_walk+0x1377/0x1cc0 [ 135.471250][ T6316] path_openat+0x1c9/0x4280 [ 135.471284][ T6316] ? mark_held_locks+0x40/0x70 [ 135.471347][ T6316] ? stack_depot_save_flags+0x479/0x9d0 [ 135.471412][ T6316] ? __pfx_path_openat+0x10/0x10 [ 135.471445][ T6316] ? kasan_save_stack+0x3f/0x50 [ 135.471488][ T6316] ? kasan_save_stack+0x30/0x50 [ 135.471529][ T6316] ? kasan_save_track+0x14/0x30 [ 135.471571][ T6316] ? __kasan_kmalloc+0xaa/0xb0 [ 135.471617][ T6316] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 135.471652][ T6316] ? do_getname+0x238/0x390 [ 135.471694][ T6316] ? acct_on+0x93/0xa00 [ 135.471740][ T6316] ? __x64_sys_acct+0x81/0x1e0 [ 135.471788][ T6316] do_file_open+0x20e/0x430 [ 135.471828][ T6316] ? __pfx_do_file_open+0x10/0x10 [ 135.471901][ T6316] ? find_held_lock+0x2b/0x80 [ 135.471944][ T6316] ? __might_fault+0xc5/0x140 [ 135.471980][ T6316] ? __might_fault+0xc5/0x140 [ 135.472022][ T6316] file_open_name+0x1c3/0x3e0 [ 135.472071][ T6316] ? __pfx_file_open_name+0x10/0x10 [ 135.472127][ T6316] ? do_getname+0x191/0x390 [ 135.472183][ T6316] acct_on+0xa6/0xa00 [ 135.472228][ T6316] ? __pfx_acct_on+0x10/0x10 [ 135.472273][ T6316] ? bpf_lsm_capable+0x9/0x10 [ 135.472312][ T6316] ? security_capable+0x80/0x260 [ 135.472356][ T6316] __x64_sys_acct+0x81/0x1e0 [ 135.472399][ T6316] ? lockdep_hardirqs_on+0x78/0x100 [ 135.472445][ T6316] do_syscall_64+0x115/0x840 [ 135.472489][ T6316] ? clear_bhb_loop+0x40/0x90 [ 135.472541][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.472578][ T6316] RIP: 0033:0x7f436d59e019 [ 135.472607][ T6316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.472639][ T6316] RSP: 002b:00007f436e4ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 135.472672][ T6316] RAX: ffffffffffffffda RBX: 00007f436d825fa0 RCX: 00007f436d59e019 [ 135.472695][ T6316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 135.472716][ T6316] RBP: 00007f436d63500c R08: 0000000000000000 R09: 0000000000000000 [ 135.472737][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.472757][ T6316] R13: 00007f436d826038 R14: 00007f436d825fa0 R15: 00007ffc9fc0ccc8 [ 135.472802][ T6316] [ 136.934139][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 137.176739][ T6327] HfR: entered promiscuous mode [ 137.274015][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 137.686227][ T6349] netlink: 25 bytes leftover after parsing attributes in process `syz.0.152'. [ 138.954106][ T6362] can0: slcan on pty155. [ 139.075934][ T6363] can0 (unregistered): slcan off pty155. [ 140.807505][ T4941] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 140.993707][ T6387] netlink: 330 bytes leftover after parsing attributes in process `syz.3.161'. [ 141.081073][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 141.324282][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 141.465733][ T6410] capability: warning: `syz.0.165' uses 32-bit capabilities (legacy support in use) [ 141.484504][ T6410] mmap: syz.0.165 (6410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.757214][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 144.800726][ T6462] HfR: entered promiscuous mode [ 144.995027][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 148.655257][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 148.922174][ T6506] netlink: 252 bytes leftover after parsing attributes in process `syz.1.186'. [ 148.946079][ T6506] netlink: 252 bytes leftover after parsing attributes in process `syz.1.186'. [ 148.962312][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 148.972934][ T6506] netlink: 252 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.170596][ T30] audit: type=1800 audit(1785854911.209:2): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.187" name="members" dev="configfs" ino=14094 res=0 errno=0 [ 149.524448][ T6524] netlink: 342 bytes leftover after parsing attributes in process `syz.2.190'. [ 149.578871][ T6524] netlink: 342 bytes leftover after parsing attributes in process `syz.2.190'. [ 151.012996][ T6540] netlink: 25 bytes leftover after parsing attributes in process `syz.2.194'. [ 151.268875][ T4941] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 151.366429][ T4941] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 154.938746][ T6615] futex_wake_op: syz.2.205 tries to shift op by -1; fix this program [ 156.658071][ T6639] netlink: 330 bytes leftover after parsing attributes in process `syz.1.212'. [ 159.476586][ T6688] i2c i2c-0: new_device: Missing parameters [ 160.321330][ T6709] can0: slcan on ttyS2. [ 160.448675][ T6707] can0 (unregistered): slcan off ttyS2. [ 162.587023][ T6756] FAULT_INJECTION: forcing a failure. [ 162.587023][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 162.600927][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT(full) [ 162.600969][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.600989][ T6756] Call Trace: [ 162.600999][ T6756] [ 162.601011][ T6756] dump_stack_lvl+0x100/0x190 [ 162.601054][ T6756] should_fail_ex.cold+0x5/0xa [ 162.601092][ T6756] should_failslab+0xc2/0x120 [ 162.601141][ T6756] __kmalloc_cache_noprof+0x91/0x6c0 [ 162.601181][ T6756] ? __lock_acquire+0x49f/0x1a40 [ 162.601236][ T6756] ? resv_map_alloc+0x46/0x400 [ 162.601295][ T6756] resv_map_alloc+0x46/0x400 [ 162.601342][ T6756] hugetlbfs_get_inode+0x385/0x700 [ 162.601386][ T6756] ? do_raw_spin_lock+0x128/0x260 [ 162.601428][ T6756] hugetlb_file_setup+0x15b/0x5b0 [ 162.601477][ T6756] memfd_alloc_file+0xc2/0x610 [ 162.601524][ T6756] ? _raw_spin_unlock+0x28/0x50 [ 162.601563][ T6756] ? __pfx_memfd_alloc_file+0x10/0x10 [ 162.601621][ T6756] __do_sys_memfd_create+0x236/0x3d0 [ 162.601674][ T6756] do_syscall_64+0x115/0x840 [ 162.601719][ T6756] ? clear_bhb_loop+0x40/0x90 [ 162.601761][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.601796][ T6756] RIP: 0033:0x7f285459e019 [ 162.601824][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.601857][ T6756] RSP: 002b:00007f2855452028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 162.601888][ T6756] RAX: ffffffffffffffda RBX: 00007f2854826540 RCX: 00007f285459e019 [ 162.601911][ T6756] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 162.601930][ T6756] RBP: 00007f285463500c R08: 0000000000000000 R09: 0000000000000000 [ 162.601965][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.601984][ T6756] R13: 00007f28548265d8 R14: 00007f2854826540 R15: 00007ffe1cedf438 [ 162.602023][ T6756] [ 162.916385][ T6761] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 162.924208][ T6761] netlink: 9 bytes leftover after parsing attributes in process `syz.1.239'. [ 164.788156][ T6799] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 164.802871][ T6799] netlink: 9 bytes leftover after parsing attributes in process `syz.0.248'. [ 164.999751][ T6804] netlink: 330 bytes leftover after parsing attributes in process `syz.0.249'. [ 166.895715][ T6829] futex_wake_op: syz.3.253 tries to shift op by -1; fix this program [ 168.970375][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d9a8000: rx timeout, send abort [ 169.003750][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d9a8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 169.576639][ T6850] hub 1-0:1.0: USB hub found [ 169.599485][ T6850] hub 1-0:1.0: 1 port detected [ 172.705880][ T6905] futex_wake_op: syz.1.267 tries to shift op by -1; fix this program [ 174.356108][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 174.367154][ T6928] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 174.375040][ T6928] netlink: 51425 bytes leftover after parsing attributes in process `syz.1.271'. [ 174.618763][ T6938] i2c i2c-0: new_device: Missing parameters [ 184.949602][ T7083] binder: 7070:7083 ioctl 400c620e 200000001f40 returned -22 [ 188.183856][ T30] audit: type=1800 audit(1785854950.219:3): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.305" name="members" dev="configfs" ino=20787 res=0 errno=0 [ 188.341141][ T7134] ubi6: attaching mtd0 [ 188.346235][ T7134] ubi6 error: ubi_attach_mtd_dev: bad VID header (33180) or data offsets (33244) [ 188.881653][ T7146] can0: slcan on pty155. [ 189.089851][ T7145] can0 (unregistered): slcan off pty155. [ 189.109987][ T7155] i2c i2c-0: new_device: Missing parameters [ 190.386364][ T7174] bond0: option packets_per_slave: invalid value ( Xnp) [ 190.417151][ T7174] bond0: option packets_per_slave: allowed values 0 - 65535 [ 192.701322][ T7203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.193483][ T7203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.662599][ T7203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.077593][ T7203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.314363][ T7240] i2c i2c-0: new_device: Missing parameters [ 194.328136][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334893][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.122573][ T7281] sd 0:0:1:0: PR command failed: 1026 [ 197.146393][ T7281] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 197.164470][ T7281] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 197.912782][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.335'. [ 200.811154][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 200.880885][ T7347] HfR: entered promiscuous mode [ 200.951358][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'. [ 200.985352][ T7354] : renamed from vxcan1 (while UP) [ 201.163503][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 204.662713][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 210.102476][ T7502] FAULT_INJECTION: forcing a failure. [ 210.102476][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 210.146698][ T7502] CPU: 1 UID: 0 PID: 7502 Comm: syz.3.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.146749][ T7502] Tainted: [L]=SOFTLOCKUP [ 210.146761][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.146780][ T7502] Call Trace: [ 210.146790][ T7502] [ 210.146802][ T7502] dump_stack_lvl+0x100/0x190 [ 210.146846][ T7502] should_fail_ex.cold+0x5/0xa [ 210.146887][ T7502] should_failslab+0xc2/0x120 [ 210.146937][ T7502] __kmalloc_cache_noprof+0x91/0x6c0 [ 210.146977][ T7502] ? fib_net_init+0x1a4/0x440 [ 210.147026][ T7502] fib_net_init+0x1a4/0x440 [ 210.147064][ T7502] ? is_module_address+0x69/0xf0 [ 210.147100][ T7502] ? __pfx_fib_net_init+0x10/0x10 [ 210.147148][ T7502] ? timer_init_key+0x150/0x310 [ 210.147206][ T7502] ? devinet_init_net+0x56c/0x8d0 [ 210.147256][ T7502] ? __pfx_fib_net_init+0x10/0x10 [ 210.147294][ T7502] ops_init+0x1e2/0x5f0 [ 210.147350][ T7502] setup_net+0x118/0x3a0 [ 210.147403][ T7502] ? __pfx_setup_net+0x10/0x10 [ 210.147456][ T7502] ? mutex_init_lockdep+0xf1/0x120 [ 210.147498][ T7502] copy_net_ns+0x46f/0x7c0 [ 210.147533][ T7502] create_new_namespaces+0x3ea/0xac0 [ 210.147585][ T7502] unshare_nsproxy_namespaces+0xf2/0x220 [ 210.147627][ T7502] ksys_unshare+0x438/0xab0 [ 210.147674][ T7502] ? __pfx_ksys_unshare+0x10/0x10 [ 210.147735][ T7502] __x64_sys_unshare+0x31/0x40 [ 210.147779][ T7502] do_syscall_64+0x115/0x840 [ 210.147826][ T7502] ? clear_bhb_loop+0x40/0x90 [ 210.147869][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.147903][ T7502] RIP: 0033:0x7fccb679e019 [ 210.147931][ T7502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.147961][ T7502] RSP: 002b:00007fccb75bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 210.147993][ T7502] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e019 [ 210.148014][ T7502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 210.148034][ T7502] RBP: 00007fccb683500c R08: 0000000000000000 R09: 0000000000000000 [ 210.148054][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.148074][ T7502] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007fff55a0c338 [ 210.148117][ T7502] [ 211.253187][ T7522] kvm: kvm [7521]: vcpu5, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001d) [ 220.525222][ T7659] kvm: kvm [7658]: vcpu5, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001d) [ 220.964786][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 222.569653][ T7689] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 222.716420][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 223.361471][ T7700] FAULT_INJECTION: forcing a failure. [ 223.361471][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 223.393288][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.1.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.393325][ T7700] Tainted: [L]=SOFTLOCKUP [ 223.393333][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.393347][ T7700] Call Trace: [ 223.393355][ T7700] [ 223.393364][ T7700] dump_stack_lvl+0x100/0x190 [ 223.393396][ T7700] should_fail_ex.cold+0x5/0xa [ 223.393423][ T7700] should_failslab+0xc2/0x120 [ 223.393458][ T7700] __kmalloc_cache_noprof+0x91/0x6c0 [ 223.393484][ T7700] ? vidtv_psi_pmt_table_init+0x4c/0x430 [ 223.393524][ T7700] vidtv_psi_pmt_table_init+0x4c/0x430 [ 223.393579][ T7700] vidtv_psi_pmt_create_sec_for_each_pat_entry+0x293/0x670 [ 223.393622][ T7700] vidtv_channel_si_init+0xf2d/0x18f0 [ 223.393668][ T7700] vidtv_mux_init+0x522/0xbf0 [ 223.393710][ T7700] vidtv_start_feed+0x34e/0x500 [ 223.393738][ T7700] ? __pfx_vidtv_start_feed+0x10/0x10 [ 223.393767][ T7700] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 223.393811][ T7700] dmx_section_feed_start_filtering+0x3a8/0x660 [ 223.393851][ T7700] dvb_dmxdev_filter_start+0x767/0xdd0 [ 223.393887][ T7700] dvb_demux_do_ioctl+0xe64/0x1200 [ 223.393922][ T7700] dvb_usercopy+0x167/0x340 [ 223.393943][ T7700] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 223.393972][ T7700] ? __pfx_dvb_usercopy+0x10/0x10 [ 223.394005][ T7700] ? __fget_files+0x21f/0x3d0 [ 223.394042][ T7700] dvb_demux_ioctl+0x29/0x40 [ 223.394063][ T7700] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 223.394085][ T7700] __x64_sys_ioctl+0x18e/0x210 [ 223.394119][ T7700] do_syscall_64+0x115/0x840 [ 223.394149][ T7700] ? clear_bhb_loop+0x40/0x90 [ 223.394176][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.394199][ T7700] RIP: 0033:0x7f6b5339e019 [ 223.394217][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.394238][ T7700] RSP: 002b:00007f6b54227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.394258][ T7700] RAX: ffffffffffffffda RBX: 00007f6b53625fa0 RCX: 00007f6b5339e019 [ 223.394272][ T7700] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 223.394284][ T7700] RBP: 00007f6b5343500c R08: 0000000000000000 R09: 0000000000000000 [ 223.394297][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.394313][ T7700] R13: 00007f6b53626038 R14: 00007f6b53625fa0 R15: 00007ffde1dc4848 [ 223.394341][ T7700] [ 223.905744][ T7701] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.020891][ T7698] zswap: compressor 000 not available [ 224.741823][ T7732] process 'syz.2.413' launched ':,' with NULL argv: empty string added [ 226.405123][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 227.186689][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 233.908687][ T7871] vhci_hcd: not connected 4 [ 237.934894][ T7963] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.353255][ T7959] can0: slcan on ttyS2. [ 238.597487][ T7958] can0 (unregistered): slcan off ttyS2. [ 248.327811][ T8108] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 248.391446][ T8106] smpboot: CPU 1 is now offline [ 249.379877][ T8132] FAULT_INJECTION: forcing a failure. [ 249.379877][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 249.420567][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.0.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.420605][ T8132] Tainted: [L]=SOFTLOCKUP [ 249.420613][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.420637][ T8132] Call Trace: [ 249.420646][ T8132] [ 249.420655][ T8132] dump_stack_lvl+0x100/0x190 [ 249.420686][ T8132] should_fail_ex.cold+0x5/0xa [ 249.420714][ T8132] should_failslab+0xc2/0x120 [ 249.420749][ T8132] __kmalloc_noprof+0xfc/0x820 [ 249.420790][ T8132] ? fib_default_rule_add+0x4f/0x420 [ 249.420821][ T8132] fib_default_rule_add+0x4f/0x420 [ 249.420850][ T8132] fib4_rules_init+0xa6/0x1c0 [ 249.420893][ T8132] fib_net_init+0x1dc/0x440 [ 249.420920][ T8132] ? is_module_address+0x69/0xf0 [ 249.420945][ T8132] ? __pfx_fib_net_init+0x10/0x10 [ 249.420974][ T8132] ? timer_init_key+0x150/0x310 [ 249.421015][ T8132] ? devinet_init_net+0x56c/0x8d0 [ 249.421050][ T8132] ? __pfx_fib_net_init+0x10/0x10 [ 249.421077][ T8132] ops_init+0x1e2/0x5f0 [ 249.421118][ T8132] setup_net+0x118/0x3a0 [ 249.421156][ T8132] ? __pfx_setup_net+0x10/0x10 [ 249.421193][ T8132] ? mutex_init_lockdep+0xf1/0x120 [ 249.421223][ T8132] copy_net_ns+0x46f/0x7c0 [ 249.421248][ T8132] create_new_namespaces+0x3ea/0xac0 [ 249.421281][ T8132] unshare_nsproxy_namespaces+0xf2/0x220 [ 249.421311][ T8132] ksys_unshare+0x438/0xab0 [ 249.421344][ T8132] ? __pfx_ksys_unshare+0x10/0x10 [ 249.421386][ T8132] __x64_sys_unshare+0x31/0x40 [ 249.421418][ T8132] do_syscall_64+0x115/0x840 [ 249.421450][ T8132] ? clear_bhb_loop+0x40/0x90 [ 249.421481][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.421506][ T8132] RIP: 0033:0x7f285459e019 [ 249.421526][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.421548][ T8132] RSP: 002b:00007f2855518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.421571][ T8132] RAX: ffffffffffffffda RBX: 00007f2854825fa0 RCX: 00007f285459e019 [ 249.421587][ T8132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 249.421601][ T8132] RBP: 00007f285463500c R08: 0000000000000000 R09: 0000000000000000 [ 249.421615][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.421629][ T8132] R13: 00007f2854826038 R14: 00007f2854825fa0 R15: 00007ffe1cedf438 [ 249.421660][ T8132] [ 250.197330][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 250.367547][ T8138] openvswitch: HfR: Dropping previously announced user features [ 250.556847][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 251.931722][ T30] audit: type=1804 audit(1785855013.969:4): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.487" name="/newroot/120/file0" dev="tmpfs" ino=635 res=1 errno=0 [ 251.945789][ T30] audit: type=1804 audit(1785855013.989:5): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.487" name="/newroot/120/file0" dev="tmpfs" ino=635 res=1 errno=0 [ 252.622737][ T30] audit: type=1800 audit(1785855014.659:6): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.488" name="#632" dev="tmpfs" ino=632 res=0 errno=0 [ 252.793702][ T8174] FAULT_INJECTION: forcing a failure. [ 252.793702][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 252.938623][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.3.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.938659][ T8174] Tainted: [L]=SOFTLOCKUP [ 252.938667][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.938681][ T8174] Call Trace: [ 252.938688][ T8174] [ 252.938696][ T8174] dump_stack_lvl+0x100/0x190 [ 252.938727][ T8174] should_fail_ex.cold+0x5/0xa [ 252.938754][ T8174] should_failslab+0xc2/0x120 [ 252.938788][ T8174] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 252.938819][ T8174] ? _raw_spin_unlock+0x28/0x50 [ 252.938846][ T8174] ? alloc_inode+0x183/0x250 [ 252.938883][ T8174] alloc_inode+0x183/0x250 [ 252.938922][ T8174] new_inode+0x22/0x1c0 [ 252.938952][ T8174] ? dput.part.0+0x4f/0x240 [ 252.938984][ T8174] simple_fill_super+0x2d9/0x680 [ 252.939014][ T8174] ? __pfx_nfsd_fill_super+0x10/0x10 [ 252.939051][ T8174] nfsd_fill_super+0x98/0x560 [ 252.939089][ T8174] ? __pfx_nfsd_fill_super+0x10/0x10 [ 252.939143][ T8174] get_tree_keyed+0x10e/0x1d0 [ 252.939183][ T8174] vfs_get_tree+0x92/0x320 [ 252.939218][ T8174] path_mount+0x7d0/0x23d0 [ 252.939254][ T8174] ? __pfx_path_mount+0x10/0x10 [ 252.939282][ T8174] ? lockdep_hardirqs_on+0x78/0x100 [ 252.939317][ T8174] ? putname+0xb1/0x110 [ 252.939342][ T8174] ? kmem_cache_free+0x127/0x6b0 [ 252.939377][ T8174] ? __x64_sys_mount+0x293/0x310 [ 252.939404][ T8174] __x64_sys_mount+0x293/0x310 [ 252.939435][ T8174] ? __pfx___x64_sys_mount+0x10/0x10 [ 252.939473][ T8174] do_syscall_64+0x115/0x840 [ 252.939504][ T8174] ? clear_bhb_loop+0x40/0x90 [ 252.939533][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.939558][ T8174] RIP: 0033:0x7fccb679e019 [ 252.939577][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.939600][ T8174] RSP: 002b:00007fccb75bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.939622][ T8174] RAX: ffffffffffffffda RBX: 00007fccb6a25fa0 RCX: 00007fccb679e019 [ 252.939638][ T8174] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 252.939671][ T8174] RBP: 00007fccb683500c R08: 0000000000000000 R09: 0000000000000000 [ 252.939685][ T8174] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 252.939699][ T8174] R13: 00007fccb6a26038 R14: 00007fccb6a25fa0 R15: 00007fff55a0c338 [ 252.939729][ T8174] [ 253.639305][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 254.301995][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 254.489653][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.503888][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.562371][ T8220] vivid-007: ================= START STATUS ================= [ 255.588741][ T8220] vivid-007: Enable Output Cropping: true grabbed [ 255.609236][ T8220] vivid-007: Enable Output Composing: true grabbed [ 255.649285][ T8220] vivid-007: Enable Output Scaler: true grabbed [ 255.684166][ T8220] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 255.754107][ T8220] vivid-007: Transmit Mode: HDMI grabbed [ 255.819024][ T8220] vivid-007: Hotplug Present: 0x00000000 [ 255.904548][ T8220] vivid-007: RxSense Present: 0x00000000 [ 255.973222][ T8220] vivid-007: EDID Present: 0x00000000 [ 256.044949][ T8220] vivid-007: ================== END STATUS ================== [ 257.641703][ T30] audit: type=1800 audit(1785855019.679:7): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.500" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0