last executing test programs: 11.490413819s ago: executing program 3 (id=1248): unshare$auto(0x40000080) r0 = eventfd$auto(0x1) close_range$auto(r0, r0, 0x3) unshare$auto(0x6b) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x34dcc2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r3, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, 0x0, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.654517688s ago: executing program 3 (id=1249): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/wchan\x00', 0x2400, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000200)=""/225, 0xe1) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x7d4, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x3f) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'[V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\x9c\xe5\x17x01\xce\x1f\x89u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90s\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xfd\xae,\x95k8\x83\xcf\xc5D\xcc\xea?\xc9\x8fD!\x93\x80yj\xd7?;s\xea\x14\x9d\xcd\xdb\xa0kh\x84\x9fK`9\xfc\xc1L?_\xb2\r\xe11AX\xaf\xbe\x1a\xf1\x81\xb8e\xa7~\xea\x81d\xdaa\xfb\xcf', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="95812dbd7000ffdbdf2503000000af063c0bcbd4055f68f77a023a0da4e47031b2fb72ca566ffbf9c4d55dc31ee0137fdd59844cc44c442dcd58d850ad2b5839660163e7246f18eb927b884cea3fd4bcb0ce24e53b8e5f64275c16bf10df8c317fac5d9986da67da7158d8c4ec2fc98872313150b97b665352cc"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = socket(0x2, 0x80002, 0x73) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r4, 0x802064b6, r4) r5 = pidfd_open$auto(0x0, 0x57) ioctl$auto_FS_IOC_GETVERSION(r5, 0xff07, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r6) sendmsg$auto_SMC_PNETID_ADD(r6, 0x0, 0x44c0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080)=""/4, 0x4) bind$auto(r3, 0x0, 0x6b) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.010662094s ago: executing program 3 (id=1257): unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x34dcc2, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) r1 = socket(0x2, 0x80002, 0x73) bind$auto(r1, 0x0, 0x6b) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x7, 0x8000000000000001, 0x0, 0x9c1a, 0x8, 0xfffffffffffffffa, 0x65d, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.870259495s ago: executing program 2 (id=1258): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) prctl$auto_PR_SET_TSC(0x1a, 0x2f, 0xf, 0x9, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80802, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) signalfd$auto(r3, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x6, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x1ce00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0x3a, 0x7, 0x1000}]}) 6.802757613s ago: executing program 0 (id=1259): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) getsockopt$auto(r0, 0x84, 0x9, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) ioctl$auto(0x3, 0x541b, 0x38) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x10000040000b, 0x1000000000000df, 0x4000009b73, r4, 0x8003) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) 6.007442465s ago: executing program 2 (id=1260): mprotect$auto(0x130c230000, 0xa588, 0x6) write$auto(0xffffffffffffffff, 0x0, 0x903) mprotect$auto(0x5, 0x7, 0x0) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x7ffc, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003c00)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x4004a) ioctl$auto_RTC_IRQP_SET(r0, 0x4008700c, &(0x7f0000000640)=0xffffffffffffff5a) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0100, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x101, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r2 = socket(0x29, 0x5, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0x34000}, 0x0, 0x0, 0x2, 0xab}, 0x80670}, 0x3f7ffffe, 0xd9) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 5.067265358s ago: executing program 3 (id=1261): r0 = socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd4d1cdbe69c5634000000080003", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_VHT_CAPABILITY={0xc4, 0x9d, "6e1a2ea2564b3d86f5ddecd9b89cf5e0a6a57b00b575627097350523f27bdd791e8797f9344ee8665b784871ad3be793579912b6a92f138c32ee5f5a7ed944fbeea433dfdb172b27ddb656383bc1010f3f7b3f92ea2fe6c7a767c04447c6b5f7cca5d56c5eb3b52600a65382df525aea9f35d997e62dc11ea7fcabe1830bd22bd53c85f0e796a5e171639fb760d3fb3a684e436ce3cd369a3f644c5a21e6e42b591ca7b7ec2d73edaaaad9083568ae06c6ac06bce87c657ff7336dcd79ae0d02"}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x80}, @NL80211_ATTR_STA_FLAGS2={0xc3, 0x43, "19c2f30f2533d4cbff2316ee64918409b1b20d4e0b8d64d5d67547e5ab3651d6ed00a41dd749eda62f2a4f45879d6439b35645534f8b2aabeb2d5ac6d2c583bba75ebc80d02e8a7c31adc1bdb86b31eefebca0cc30ef4863bcb6e0824e8ad88fc8d441d603e39f6cc6a7ebb570037d7110628c79fc53a78709a7db74a79537045424502d645cf5ce9b5ff170f1658b87e50fa55eee1e9a964345b607423396931964edb6053a17b29e2120035f2991dc7d81360d53ea4c0e23632c48123e7b"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9d}, @NL80211_ATTR_KEY_DATA={0x16, 0x7, "262b576dad2e4ec054ac878db58c80b0a0e7"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x885}, 0x4005) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x2900, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000080)={0x1, r0}) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.950225815s ago: executing program 1 (id=1262): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = gettid() openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) kill$auto(r0, 0x11) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0xe4) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r3, 0x4141, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = semctl$auto_GETPID(0xfff, 0x8ef, 0xb, 0x6) prctl$auto_SECCOMP_MODE_FILTER(0x6c, 0x2, r4, 0x4, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) sysfs$auto(0x2, 0x3b, 0x0) 4.866848312s ago: executing program 0 (id=1263): unshare$auto(0x40000080) r0 = eventfd$auto(0x1) close_range$auto(r0, r0, 0x3) unshare$auto(0x6b) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r3, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, 0x0, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.833757755s ago: executing program 2 (id=1264): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x6, 0x0, 0x0) unshare$auto(0x6b) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sda\x00', 0x34dcc2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) bind$auto(0xffffffffffffffff, 0x0, 0x6b) setns(0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.746973237s ago: executing program 3 (id=1265): mmap$auto(0x9, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x82, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/syz_tun/bc_forwarding\x00', 0xc2841, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x8d8, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x33, 0x2, '/sys/devices/platform/vidtv.0/i2c-0/new_device\x00'}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_BEACON_HEAD={0x888, 0xe, "3625ced9145cc0f943d71aac25c45cdefb8ac9c32033f3600cb1c96857ad9534a215ed76e7c85dcaacf19a05fc09b8baf55921839a8d9bd955d65f1594d674dfa5015dd460ec88c15b67d35541ea1a69a8413cfd73ab139ca139ca5c532d02b164d41db70562dca863a03e6bcb62c5ba129dddbcadc50dca096324baf12f748b1b6ee954fd1c3a7b98287b8aab673be8be573ddffc28401d75f89472642d9331c274d5f3e784dafaa1bde4d9c00c1aef191e66a52cf3d7c5b8d27fcb31fc7544fb1049f597d1e084e655bb460220a0b4b2fcbd6f3a5c94d5094685828c12eac0136dad30ab25c99548184bddcbaff16fb69689041bd4ab1e073565595688d208f1391c52dc3fe052bd80a2061e572b00ba1bc1809e781a4b8dc494e64c5a4c25d6c06c4cb9383fd5cf058182a6ef16a13a4e4cce04406130975ed4b4de798dc041b7b97a8524efc402be3f0ee0fc4188e048fa9552e63d671b725d2a9dad6e93361416e901e225882e8c58dc6dab665b26b71c8a9d8e535945868bfb307e217958135258b47fc57414f3f158c0b6f66da06d427dcb52d3ecfdafba33fbf5298323a5a777f8f01115b516e886c50fb6f1ce1eec2e169ef93bd128ebaaba09bef6bcbd822a20f0fe7b09944823d56922962ffe4cef4d9df3d500901a8dc4aaea3a0578e4ef37c3959c7491232a4e30a9177776b21944abfbefb51a9f6460970c53ffac622fb07841f0025cf1d2ae4246704af03785869ef135bc02c967ff95e95456f29c4d94dcf959853dfe5a1cbddf193660199b49d8f1036868db4a8b6ad375f816d64d96fc7b8123809578e44e23330693b4f1d32530b7f16ab22e2954ed77adaf210ef212e0813e351f83effa8b6a1e00d7361df4423139f7f4b08a02df0970132d0353fb58004bdf8b8704e93817d27a97ede64f591a4b7408852e34959b6efe42a36954142f53d005fc1d165ed2c560a31b230b8db34f80733cb4c8c11ac5ebd6f190f3465cdc0f94b70c7fc4d1949a7930ef2dbb08df2e4f395349f43e041952490b87198bfe7b1bc6f4ff93a8914257e01778e10a9508048758e1626b8b4d69999e1fa69dad9af45f717a87257265518e23883df9c2812722ce2387418094e6ce576622d78a7848cc889f4a9c511362d6a928b102a00bc08b6c077ef286e491c5c0126d3a1cb346a6f97dd9890b811bf122421a82b689daeb00b656156c23e69031b478ee379470d1855554a8936f2fbf870c5d6e45d31b6bde3b1f612b8b4c916f5cca1237bb7a9aa0a0a41a57bde23244b42bf05f1f946a0192aa7ace8bf51c11d5135cd98a82e8826fbd76e36893948aa7bb2fa1b1fba3a98ca994e6db4aa4fd4893bb3fa75de0e71b23e7d2e2767380e44d8ce3670bc5362df81ce5e6f32db0b4a2cffbd08610ef4ab695ab47961e9cdf74163bb8ae17bb1d83b74d39ba4fd1298e96217d8fca970ed3308a787c8038975b77c69944ae69307144e2f590727f2104478e0aa5fd8cf1bab740cd83336b4a3c2268a4050d7772da501435029a993ec52594c3360ebb151ff66938fed670bb022355bb18a63e05d0d9356eb1cc6963321cdfa85b882e4727a106a3a86c2f22e934f001fb70666faaab9b2fbcc39c8166e3ac432d3829bd5556c2442696696160327b1205060473159d312d0b792ec0354f70f59878b824c5b00e827cc942418c05c68cb8ac3d70e76b25057785a66b29f965c134ea9d35f6c894be126799407acdb33457e7e3c62494fbffe5c96ed9e5996b6fef0fae6e44ca977cd4d97d0acfed430456b44585e52593edea0072b00ec7e641b5cc2d19f04817f154de5b5edddd1794b943925929991b606a0d747ef437875a50502e2d0205de5b267f9f3a2ae375dd43f846802fbed092168fbb84d63a9e836bf90d0b1a6b936c161a137a495a2e984b8ef01d81ab43d3d29df51759afbd491b8a20c62b423f87fcd555a75df59e07cb2aacb589a835ec7200d351fa73ac38cd8310b10bfbbefd0565ec4d8306ee6cce9a40a7b0db3a5309e6a9d79b7de6c1b9ff83defd211f4d1e2ebb4843ecd84ae0992f0e3a32d3f413ae7eba2fc49a375d3e0191187ada54c4ff9104d96ecc812c1326bd972253e15081c46352b1892dcff78888e17b51de322a7e9ac944b9ffd9f1a258e913568d98e5af9166a878c6ecd82402fbc98e268175a72ee0b079e1e45e58d7aed72462965226ee191d857575a15eb540fb7b92d4eaf1c20ad89f921f877e274ae7ecd189d633410a25b4fbed3342fd16db0667b1b26e309b12f34d9b261790c268a54dbce744a1116ad8bd62e29dc34d0b23bf540a35508f1f4902f885ba910a0d38cff97cf659eeeb004404571b666dc975b820de4b10736218b24545f6ea011f31c1989fa4b17318c9247b8aaf609d1a1439297aa2abfbf039ff68f80553b8338fd01a8892ee65229534d30fe156b040d67c6142d067ee1fc696a8c3adab3db3a997186180f7e786b2faba56d07b1359677a77b9e22596cec38e34d46b9d2513a95d5760ebb4e93939517891166809f795d357da273c962d34317329480c6e21cf05ab28e0d0274571adcc82944e9f439636c93092a0bccd51dc5c586883493cfb615b43c3d65b76478ea2cef6c3f2e263c0ab06e0022f4e290bb033b92823a9c8f16724637df88254a819c94008d9da5af92c1745217f29ff9201f53cc65c696c8dccc9892a87167a9a5327b3bc97e9695e4e99b7213d64c9443c4bd84a253d5c8c47dc63224a12e683ab53501056948b47dcac1aee0ca2b114b36ca8310be1ede7d61f92fb5bb939548989be3096f7ba8ca56f2fefe3042a605e7fc56afee52d487d3593cbdb9b58941ab875b8a6fbb1affc04ae04fed6f38194fafd81574eac706021917da27c907d8eb7b268bf4460c78b13a92ea1c2841aeba7a0509addeca881d59457013164927074bb6186497593053d2cba3ff4c79ec0f23f2b71f325e6b78d93e55145fb20d4e5e049fe9b1a2d8bdadd8d1b1476217f4427dfd64870fca55a9747aba71516e4d536b5f2b1cf4a660f52432e7164380771a0efdffd3cf04c52"}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000020}, 0x4000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)="12b3557dc0c32d7b7e2099c6", 0xc) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2.978444306s ago: executing program 1 (id=1266): mmap$auto(0x9, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x82, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/syz_tun/bc_forwarding\x00', 0xc2841, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x8d8, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x33, 0x2, '/sys/devices/platform/vidtv.0/i2c-0/new_device\x00'}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_BEACON_HEAD={0x888, 0xe, "3625ced9145cc0f943d71aac25c45cdefb8ac9c32033f3600cb1c96857ad9534a215ed76e7c85dcaacf19a05fc09b8baf55921839a8d9bd955d65f1594d674dfa5015dd460ec88c15b67d35541ea1a69a8413cfd73ab139ca139ca5c532d02b164d41db70562dca863a03e6bcb62c5ba129dddbcadc50dca096324baf12f748b1b6ee954fd1c3a7b98287b8aab673be8be573ddffc28401d75f89472642d9331c274d5f3e784dafaa1bde4d9c00c1aef191e66a52cf3d7c5b8d27fcb31fc7544fb1049f597d1e084e655bb460220a0b4b2fcbd6f3a5c94d5094685828c12eac0136dad30ab25c99548184bddcbaff16fb69689041bd4ab1e073565595688d208f1391c52dc3fe052bd80a2061e572b00ba1bc1809e781a4b8dc494e64c5a4c25d6c06c4cb9383fd5cf058182a6ef16a13a4e4cce04406130975ed4b4de798dc041b7b97a8524efc402be3f0ee0fc4188e048fa9552e63d671b725d2a9dad6e93361416e901e225882e8c58dc6dab665b26b71c8a9d8e535945868bfb307e217958135258b47fc57414f3f158c0b6f66da06d427dcb52d3ecfdafba33fbf5298323a5a777f8f01115b516e886c50fb6f1ce1eec2e169ef93bd128ebaaba09bef6bcbd822a20f0fe7b09944823d56922962ffe4cef4d9df3d500901a8dc4aaea3a0578e4ef37c3959c7491232a4e30a9177776b21944abfbefb51a9f6460970c53ffac622fb07841f0025cf1d2ae4246704af03785869ef135bc02c967ff95e95456f29c4d94dcf959853dfe5a1cbddf193660199b49d8f1036868db4a8b6ad375f816d64d96fc7b8123809578e44e23330693b4f1d32530b7f16ab22e2954ed77adaf210ef212e0813e351f83effa8b6a1e00d7361df4423139f7f4b08a02df0970132d0353fb58004bdf8b8704e93817d27a97ede64f591a4b7408852e34959b6efe42a36954142f53d005fc1d165ed2c560a31b230b8db34f80733cb4c8c11ac5ebd6f190f3465cdc0f94b70c7fc4d1949a7930ef2dbb08df2e4f395349f43e041952490b87198bfe7b1bc6f4ff93a8914257e01778e10a9508048758e1626b8b4d69999e1fa69dad9af45f717a87257265518e23883df9c2812722ce2387418094e6ce576622d78a7848cc889f4a9c511362d6a928b102a00bc08b6c077ef286e491c5c0126d3a1cb346a6f97dd9890b811bf122421a82b689daeb00b656156c23e69031b478ee379470d1855554a8936f2fbf870c5d6e45d31b6bde3b1f612b8b4c916f5cca1237bb7a9aa0a0a41a57bde23244b42bf05f1f946a0192aa7ace8bf51c11d5135cd98a82e8826fbd76e36893948aa7bb2fa1b1fba3a98ca994e6db4aa4fd4893bb3fa75de0e71b23e7d2e2767380e44d8ce3670bc5362df81ce5e6f32db0b4a2cffbd08610ef4ab695ab47961e9cdf74163bb8ae17bb1d83b74d39ba4fd1298e96217d8fca970ed3308a787c8038975b77c69944ae69307144e2f590727f2104478e0aa5fd8cf1bab740cd83336b4a3c2268a4050d7772da501435029a993ec52594c3360ebb151ff66938fed670bb022355bb18a63e05d0d9356eb1cc6963321cdfa85b882e4727a106a3a86c2f22e934f001fb70666faaab9b2fbcc39c8166e3ac432d3829bd5556c2442696696160327b1205060473159d312d0b792ec0354f70f59878b824c5b00e827cc942418c05c68cb8ac3d70e76b25057785a66b29f965c134ea9d35f6c894be126799407acdb33457e7e3c62494fbffe5c96ed9e5996b6fef0fae6e44ca977cd4d97d0acfed430456b44585e52593edea0072b00ec7e641b5cc2d19f04817f154de5b5edddd1794b943925929991b606a0d747ef437875a50502e2d0205de5b267f9f3a2ae375dd43f846802fbed092168fbb84d63a9e836bf90d0b1a6b936c161a137a495a2e984b8ef01d81ab43d3d29df51759afbd491b8a20c62b423f87fcd555a75df59e07cb2aacb589a835ec7200d351fa73ac38cd8310b10bfbbefd0565ec4d8306ee6cce9a40a7b0db3a5309e6a9d79b7de6c1b9ff83defd211f4d1e2ebb4843ecd84ae0992f0e3a32d3f413ae7eba2fc49a375d3e0191187ada54c4ff9104d96ecc812c1326bd972253e15081c46352b1892dcff78888e17b51de322a7e9ac944b9ffd9f1a258e913568d98e5af9166a878c6ecd82402fbc98e268175a72ee0b079e1e45e58d7aed72462965226ee191d857575a15eb540fb7b92d4eaf1c20ad89f921f877e274ae7ecd189d633410a25b4fbed3342fd16db0667b1b26e309b12f34d9b261790c268a54dbce744a1116ad8bd62e29dc34d0b23bf540a35508f1f4902f885ba910a0d38cff97cf659eeeb004404571b666dc975b820de4b10736218b24545f6ea011f31c1989fa4b17318c9247b8aaf609d1a1439297aa2abfbf039ff68f80553b8338fd01a8892ee65229534d30fe156b040d67c6142d067ee1fc696a8c3adab3db3a997186180f7e786b2faba56d07b1359677a77b9e22596cec38e34d46b9d2513a95d5760ebb4e93939517891166809f795d357da273c962d34317329480c6e21cf05ab28e0d0274571adcc82944e9f439636c93092a0bccd51dc5c586883493cfb615b43c3d65b76478ea2cef6c3f2e263c0ab06e0022f4e290bb033b92823a9c8f16724637df88254a819c94008d9da5af92c1745217f29ff9201f53cc65c696c8dccc9892a87167a9a5327b3bc97e9695e4e99b7213d64c9443c4bd84a253d5c8c47dc63224a12e683ab53501056948b47dcac1aee0ca2b114b36ca8310be1ede7d61f92fb5bb939548989be3096f7ba8ca56f2fefe3042a605e7fc56afee52d487d3593cbdb9b58941ab875b8a6fbb1affc04ae04fed6f38194fafd81574eac706021917da27c907d8eb7b268bf4460c78b13a92ea1c2841aeba7a0509addeca881d59457013164927074bb6186497593053d2cba3ff4c79ec0f23f2b71f325e6b78d93e55145fb20d4e5e049fe9b1a2d8bdadd8d1b1476217f4427dfd64870fca55a9747aba71516e4d536b5f2b1cf4a660f52432e7164380771a0efdffd3cf04c52"}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000020}, 0x4000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)="12b3557dc0c32d7b7e2099c6", 0xc) read$auto(r3, 0x0, 0x9) (fail_nth: 1) write$auto(0x3, 0x0, 0xfdef) 2.940738747s ago: executing program 2 (id=1267): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_ttusb2/parameters/debug\x00', 0xc1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) prctl$auto(0x23, 0xd, 0x0, 0x0, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x808}, 0x20004000) r3 = gettid() tkill$auto(r3, 0x7) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x0, 0x5, 0x0}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000840)=ANY=[@ANYBLOB="20050000", @ANYRES16, @ANYBLOB="100029bd7000fedbdf2503000000080001000c0000000800010003000000c50102809aea292ecfc037cba51daf336c432ffbb6af889ecb942c5b265d960400ed00f200e28008003600", @ANYBLOB, @ANYRES32=r4, @ANYBLOB="4401ee80bcedf61113d5ea79395e9659f136e7f6ade9dcfc77b4a6b0313305265ad64e7f539d5a5df77b2f518635533ee280bf13c62439a87b6a9604004b00437b13cf0dce02ae326727fcd987548e532d65beaaa0517eeed230a3b0e69c9459dbb03e60c99ac9e9e65edc0e602542280a0ead0f5afc32ae08d68a4d020bb2961fb1eeb47c", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08001c000a010102"], 0x520}}, 0x40004) poll$auto(0x0, 0x5, 0x108) r5 = socket(0x15, 0x5, 0x0) setsockopt$auto(r5, 0x114, 0x2, 0xffffffffffffffff, 0x20) write$auto(0x3, 0x0, 0x100000000) r6 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r6, 0x20, 0x2}, 0x5, 0x104) write$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r7, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) ioctl$auto_SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x2, 0x0) 2.851399541s ago: executing program 0 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a80), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2523000000180001801400feff75657468317269646765000500020001510000"], 0x34}, 0x1, 0x0, 0x0, 0x881}, 0xc810) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) setitimer$auto_ITIMER_PROF(0x2, 0x0, &(0x7f0000000040)={{0x0, 0x7}, {0xffffffff, 0x9}}) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000480)={0x184, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x16c, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x168, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xd, 0x1, "01901a723ce1840925"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xed, 0x1, "5ecc9e6eefbc2e652745faa3366fe384b219606e4c1b8df1aaf7f2910afbc05b4787d92cecbef4f58766d0c4b73267c2440cf9436a50389b0309afdeab74cdc75f6d8ec07cf121dbfa58715eee351a0bd90b1c681d4aa29298bf12af9e3b03c29459054f427dac4f0037830f98fc20f3c1eb6e032e3952e5ae9563ea4d967e2e8fb71443de7289bd556087e54914b08e48d6b8f452e75cd467f077e811bbf6df31d8d66fdd9069422b32c1155332106e905f8765fbf27dd2a4a3fecd72805cbb6ae8aeff53ea433b88a39e25fcbc608c16ef6d32226338506ee8ca5f6997fb23a6f2aed63c97b10b28"}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4085}, 0x240180d1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r3 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x58c) mmap$auto(0x0, 0x1007, 0x2, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) dup$auto(0xffffffffffffffff) io_uring_setup$auto(0x1, 0x0) r5 = socket(0xa, 0x801, 0x106) setsockopt$auto(r5, 0x6, 0x24, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.530510708s ago: executing program 3 (id=1269): clock_nanosleep$auto(0x200, 0x3, &(0x7f00000002c0)={0x9, 0x1}, &(0x7f0000000300)={0x9, 0x4}) mmap$auto(0x0, 0x40010a, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) r0 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek$auto(r2, 0x8a05, 0x1) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) cachestat$auto(r3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, @relative_fd, 0x7}, 0xf) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd14/sched/write2_fifo_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008040) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r5 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r5, &(0x7f0000003600)={0x0, 0x2}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) process_madvise$auto(r3, &(0x7f0000000280)={&(0x7f00000001c0)="3b09ee270fc98d46388c44645746b1d768e687cb59e8bd7bdcf0915302364792509e1b22568a7402922895eb9b1ab0aeef56f5f34a4d071f50b1681288ccb21a6bd5e152f7eccece580cfc7a9972e99bad5802d60f5c6ec5800718813b0ac3370794bc27cbaa2c6ba84914ea526702ebe14ebf223599e2443f04b0916129fd1113a69526a07d8320d3e69947acf12e67199de1c9a7ba", 0x4}, 0x1, 0x2, 0x3ff) 2.429774828s ago: executing program 2 (id=1270): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="95812dbd7000ffdbdf2503000000af063c0bcbd4055f68f77a023a0da4e47031b2fb72ca566ffbf9c4d55dc31ee0137fdd59844cc44c442dcd58d850ad2b5839660163e7246f18eb927b884cea3fd4bcb0ce24e53b8e5f64275c16bf10df8c317fac5d9986da67da7158d8c4ec2fc98872313150b97b665352cc"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = socket(0x2, 0x80002, 0x73) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r4, 0x802064b6, r4) r5 = pidfd_open$auto(0x0, 0x57) ioctl$auto_FS_IOC_GETVERSION(r5, 0xff07, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r6) sendmsg$auto_SMC_PNETID_ADD(r6, 0x0, 0x44c0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080)=""/4, 0x4) bind$auto(r3, 0x0, 0x6b) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.042433809s ago: executing program 0 (id=1271): unshare$auto(0x40000080) r0 = eventfd$auto(0x1) close_range$auto(r0, r0, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x34dcc2, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r3, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) write$auto(0x3, 0x0, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x7, 0x8000000000000001, 0x0, 0x9c1a, 0x8, 0xfffffffffffffffa, 0x65d, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.035969219s ago: executing program 1 (id=1272): unshare$auto(0x40000080) r0 = eventfd$auto(0x1) close_range$auto(r0, r0, 0x3) unshare$auto(0x6b) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x34dcc2, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6a) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') setns(r3, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x1d5c, 0x1, 0xa, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfc, 0x248f, 0x5, 0x100000001, 0x180000000, 0x1, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x7, 0x8000000000000001, 0x0, 0x9c1a, 0x8, 0xfffffffffffffffa, 0x65d, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x7fffffff, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) 501.779813ms ago: executing program 1 (id=1273): r0 = socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd4d1cdbe69c5634000000080003", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_VHT_CAPABILITY={0xc4, 0x9d, "6e1a2ea2564b3d86f5ddecd9b89cf5e0a6a57b00b575627097350523f27bdd791e8797f9344ee8665b784871ad3be793579912b6a92f138c32ee5f5a7ed944fbeea433dfdb172b27ddb656383bc1010f3f7b3f92ea2fe6c7a767c04447c6b5f7cca5d56c5eb3b52600a65382df525aea9f35d997e62dc11ea7fcabe1830bd22bd53c85f0e796a5e171639fb760d3fb3a684e436ce3cd369a3f644c5a21e6e42b591ca7b7ec2d73edaaaad9083568ae06c6ac06bce87c657ff7336dcd79ae0d02"}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x80}, @NL80211_ATTR_STA_FLAGS2={0xc3, 0x43, "19c2f30f2533d4cbff2316ee64918409b1b20d4e0b8d64d5d67547e5ab3651d6ed00a41dd749eda62f2a4f45879d6439b35645534f8b2aabeb2d5ac6d2c583bba75ebc80d02e8a7c31adc1bdb86b31eefebca0cc30ef4863bcb6e0824e8ad88fc8d441d603e39f6cc6a7ebb570037d7110628c79fc53a78709a7db74a79537045424502d645cf5ce9b5ff170f1658b87e50fa55eee1e9a964345b607423396931964edb6053a17b29e2120035f2991dc7d81360d53ea4c0e23632c48123e7b"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9d}, @NL80211_ATTR_KEY_DATA={0x16, 0x7, "262b576dad2e4ec054ac878db58c80b0a0e7"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x885}, 0x4005) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x2900, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000080)={0x1, r0}) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 463.666613ms ago: executing program 2 (id=1274): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r1, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(0xffffffffffffffff, 0xb, r0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0xca940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000180), 0x44101, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 0s ago: executing program 1 (id=1275): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = gettid() openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) kill$auto(r0, 0x11) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xfffffffffffffff7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0xe4) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r3, 0x4141, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = semctl$auto_GETPID(0xfff, 0x8ef, 0xb, 0x6) prctl$auto_SECCOMP_MODE_FILTER(0x6c, 0x2, r4, 0x4, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) sysfs$auto(0x2, 0x3b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 91.610850][ T5612] cgroup: Unknown subsys name 'net' [ 91.742906][ T5612] cgroup: Unknown subsys name 'cpuset' [ 91.752064][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.636553][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.664765][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.675017][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.684841][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.696302][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.706933][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.785428][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.794108][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.802411][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.815422][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.824736][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.872865][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.884584][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.909666][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.933791][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.944273][ T4941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.957710][ T4941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.969553][ T4941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.976718][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.986586][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.996757][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.091324][ T1225] cfg80211: failed to load regulatory.db [ 97.579859][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.588608][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.595825][ T5623] bridge_slave_0: entered allmulticast mode [ 97.603862][ T5623] bridge_slave_0: entered promiscuous mode [ 97.612757][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.620031][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.627206][ T5629] bridge_slave_0: entered allmulticast mode [ 97.635120][ T5629] bridge_slave_0: entered promiscuous mode [ 97.650509][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.657776][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.665284][ T5623] bridge_slave_1: entered allmulticast mode [ 97.673380][ T5623] bridge_slave_1: entered promiscuous mode [ 97.680934][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.688281][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.695458][ T5629] bridge_slave_1: entered allmulticast mode [ 97.703004][ T5629] bridge_slave_1: entered promiscuous mode [ 97.728680][ T5636] Bluetooth: hci0: command tx timeout [ 97.821005][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.832814][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.848912][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.856160][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.863699][ T5633] bridge_slave_0: entered allmulticast mode [ 97.872027][ T5633] bridge_slave_0: entered promiscuous mode [ 97.885441][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.895110][ T5636] Bluetooth: hci1: command tx timeout [ 97.904665][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.920771][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.927999][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.935580][ T5633] bridge_slave_1: entered allmulticast mode [ 97.942884][ T5633] bridge_slave_1: entered promiscuous mode [ 98.036260][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.047851][ T5623] team0: Port device team_slave_0 added [ 98.051451][ T5636] Bluetooth: hci3: command tx timeout [ 98.053838][ T5625] Bluetooth: hci2: command tx timeout [ 98.066442][ T5623] team0: Port device team_slave_1 added [ 98.074305][ T5629] team0: Port device team_slave_0 added [ 98.093976][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.116948][ T5629] team0: Port device team_slave_1 added [ 98.122951][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.130545][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.137709][ T5631] bridge_slave_0: entered allmulticast mode [ 98.145154][ T5631] bridge_slave_0: entered promiscuous mode [ 98.193835][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.201494][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.208869][ T5631] bridge_slave_1: entered allmulticast mode [ 98.216282][ T5631] bridge_slave_1: entered promiscuous mode [ 98.236585][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.243639][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.269832][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.294820][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.302037][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.328275][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.372827][ T5633] team0: Port device team_slave_0 added [ 98.379372][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.386427][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.413008][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.434128][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.441142][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.467117][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.481607][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.493087][ T5633] team0: Port device team_slave_1 added [ 98.534206][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.544888][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.552270][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.578262][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.614884][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.622033][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.648040][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.720638][ T5629] hsr_slave_0: entered promiscuous mode [ 98.727231][ T5629] hsr_slave_1: entered promiscuous mode [ 98.736540][ T5631] team0: Port device team_slave_0 added [ 98.748748][ T5623] hsr_slave_0: entered promiscuous mode [ 98.755725][ T5623] hsr_slave_1: entered promiscuous mode [ 98.762394][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 98.768779][ T5623] Cannot create hsr debugfs directory [ 98.789372][ T5631] team0: Port device team_slave_1 added [ 98.842490][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.849820][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.876121][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.893797][ T5633] hsr_slave_0: entered promiscuous mode [ 98.900502][ T5633] hsr_slave_1: entered promiscuous mode [ 98.906658][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 98.912705][ T5633] Cannot create hsr debugfs directory [ 98.937781][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.944889][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.971347][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.150939][ T5631] hsr_slave_0: entered promiscuous mode [ 99.157742][ T5631] hsr_slave_1: entered promiscuous mode [ 99.164417][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 99.170265][ T5631] Cannot create hsr debugfs directory [ 99.518066][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.538226][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.546664][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.558524][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.567482][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.579145][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.599183][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.610776][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.671337][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.686503][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.698082][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.710083][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.718355][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.731045][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.739225][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.749951][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.808260][ T5625] Bluetooth: hci0: command tx timeout [ 99.885453][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.900438][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.918585][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.931373][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.941009][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.951993][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.961078][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.968905][ T5625] Bluetooth: hci1: command tx timeout [ 99.978838][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.095929][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.103624][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.115020][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.124734][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.131783][ T5636] Bluetooth: hci2: command tx timeout [ 100.137512][ T5625] Bluetooth: hci3: command tx timeout [ 100.146041][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.154983][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.164870][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.173122][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.183311][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.244140][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.284916][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.295889][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.303388][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.324256][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.331413][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.377967][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.431622][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.438857][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.450191][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.457332][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.522724][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.620531][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.663344][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.670662][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.702188][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.727955][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.735290][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.825192][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.864843][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.872084][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.932497][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.939753][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.555555][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.726820][ T5629] veth0_vlan: entered promiscuous mode [ 101.791615][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.812672][ T5629] veth1_vlan: entered promiscuous mode [ 101.899695][ T5625] Bluetooth: hci0: command tx timeout [ 101.971637][ T5629] veth0_macvtap: entered promiscuous mode [ 102.001452][ T5623] veth0_vlan: entered promiscuous mode [ 102.011638][ T5629] veth1_macvtap: entered promiscuous mode [ 102.048676][ T5625] Bluetooth: hci1: command tx timeout [ 102.071125][ T5623] veth1_vlan: entered promiscuous mode [ 102.120288][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.167458][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.209910][ T5625] Bluetooth: hci2: command tx timeout [ 102.211266][ T5636] Bluetooth: hci3: command tx timeout [ 102.224417][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.248529][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.306368][ T5623] veth0_macvtap: entered promiscuous mode [ 102.339783][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.359869][ T5623] veth1_macvtap: entered promiscuous mode [ 102.437606][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.456623][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.476976][ T5633] veth0_vlan: entered promiscuous mode [ 102.484586][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.516627][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.545751][ T5631] veth0_vlan: entered promiscuous mode [ 102.571054][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.574599][ T5633] veth1_vlan: entered promiscuous mode [ 102.580835][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.606588][ T5631] veth1_vlan: entered promiscuous mode [ 102.743768][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.800126][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.815515][ T5633] veth0_macvtap: entered promiscuous mode [ 102.822170][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.858083][ T5633] veth1_macvtap: entered promiscuous mode [ 102.880614][ T5631] veth0_macvtap: entered promiscuous mode [ 102.919877][ T5631] veth1_macvtap: entered promiscuous mode [ 102.947861][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.970405][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.989952][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.006176][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.041946][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.085300][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.130385][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.288383][ T1126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.405603][ T5774] i2c i2c-0: new_device: Can't parse I2C address [ 103.970478][ T5636] Bluetooth: hci0: command tx timeout [ 104.129295][ T5636] Bluetooth: hci1: command tx timeout [ 104.245813][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.264567][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.288761][ T5636] Bluetooth: hci3: command tx timeout [ 104.291557][ T5625] Bluetooth: hci2: command tx timeout [ 104.299270][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.393413][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.555469][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.564935][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.092757][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.102732][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.226463][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.235520][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.298908][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.333213][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.411567][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.499034][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.543020][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.589621][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.631761][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.698914][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.743096][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.831885][ T1126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.342180][ T5823] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.596355][ T30] audit: type=1800 audit(1785662841.698:2): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="features" dev="configfs" ino=8335 res=0 errno=0 [ 107.989067][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.621119][ T30] audit: type=1800 audit(1785662842.728:3): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="members" dev="configfs" ino=9429 res=0 errno=0 [ 108.762781][ T30] audit: type=1800 audit(1785662842.868:4): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="dbroot" dev="configfs" ino=9502 res=0 errno=0 [ 108.798968][ T5848] openvswitch: netlink: IPv4 tunnel dst address is zero [ 108.998077][ T5859] futex_wake_op: syz.2.12 tries to shift op by -2048; fix this program [ 109.040039][ T5859] 0x000000000000-0x000000020000 : "" [ 109.092417][ T5859] ftl_cs: FTL header not found. [ 109.760829][ T5869] openvswitch: netlink: IPv4 tunnel dst address is zero [ 110.854855][ T5876] futex_wake_op: syz.1.14 tries to shift op by -2048; fix this program [ 110.930665][ T5876] 0x000000000000-0x000000020000 : "" [ 110.973924][ T5876] ftl_cs: FTL header not found. [ 115.267276][ T5937] nbd: must specify a device to reconfigure [ 116.206423][ T5943] futex_wake_op: syz.2.23 tries to shift op by -2048; fix this program [ 116.233237][ T5943] 0x000000000000-0x000000020000 : "" [ 116.303698][ T5943] ftl_cs: FTL header not found. [ 117.003097][ T5969] nbd: must specify a device to reconfigure [ 118.302350][ T5988] futex_wake_op: syz.1.28 tries to shift op by -2048; fix this program [ 118.314842][ T5988] 0x000000000000-0x000000020000 : "" [ 118.324417][ T5988] ftl_cs: FTL header not found. [ 118.523000][ T5997] i2c i2c-0: new_device: Can't parse I2C address [ 118.524341][ T5996] i2c i2c-0: new_device: Can't parse I2C address [ 120.042888][ T30] audit: type=1800 audit(1785662854.148:5): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="members" dev="configfs" ino=11325 res=0 errno=0 [ 120.224687][ T30] audit: type=1800 audit(1785662854.328:6): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="dbroot" dev="configfs" ino=11341 res=0 errno=0 [ 120.275222][ T6009] openvswitch: netlink: IPv4 tunnel dst address is zero [ 121.141213][ T30] audit: type=1800 audit(1785662855.248:7): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.35" name="members" dev="configfs" ino=10669 res=0 errno=0 [ 121.347324][ T30] audit: type=1800 audit(1785662855.448:8): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.35" name="dbroot" dev="configfs" ino=11410 res=0 errno=0 [ 121.403254][ T6025] openvswitch: netlink: IPv4 tunnel dst address is zero [ 123.064046][ T6049] futex_wake_op: syz.2.38 tries to shift op by -2048; fix this program [ 123.077619][ T6049] 0x000000000000-0x000000020000 : "" [ 123.111586][ T6049] ftl_cs: FTL header not found. [ 123.574795][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 123.647015][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 123.700414][ T6061] Zero length message leads to an empty skb [ 124.176651][ T6062] syz.0.40 (6062) used greatest stack depth: 19768 bytes left [ 124.787027][ T6078] nbd: must specify a device to reconfigure [ 125.226115][ T6081] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.433118][ T30] audit: type=1800 audit(1785662860.538:9): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.45" name="features" dev="configfs" ino=11865 res=0 errno=0 [ 128.233871][ T6137] nbd: must specify a device to reconfigure [ 128.395854][ T6143] i2c i2c-0: new_device: Can't parse I2C address [ 128.806428][ T6150] futex_wake_op: syz.2.51 tries to shift op by -2048; fix this program [ 128.840066][ T6150] 0x000000000000-0x000000020000 : "" [ 128.852002][ T6150] ftl_cs: FTL header not found. [ 132.932370][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948482][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.102085][ T6238] nbd: must specify a device to reconfigure [ 135.193256][ T6239] i2c i2c-0: new_device: Can't parse I2C address [ 136.843363][ T6260] futex_wake_op: syz.0.64 tries to shift op by -2048; fix this program [ 136.854258][ T6260] 0x000000000000-0x000000020000 : "" [ 136.869309][ T6260] ftl_cs: FTL header not found. [ 138.799066][ T5625] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 138.830002][ T5625] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 140.850783][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 142.930255][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 143.097594][ T30] audit: type=1800 audit(1785662877.198:10): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.80" name="members" dev="configfs" ino=14931 res=0 errno=0 [ 143.210386][ T30] audit: type=1800 audit(1785662877.318:11): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.80" name="dbroot" dev="configfs" ino=14959 res=0 errno=0 [ 143.238878][ T6341] openvswitch: netlink: IPv4 tunnel dst address is zero [ 144.265237][ T6370] futex_wake_op: syz.2.82 tries to shift op by -2048; fix this program [ 144.283564][ T6370] 0x000000000000-0x000000020000 : "" [ 144.327713][ T6370] ftl_cs: FTL header not found. [ 145.664393][ T30] audit: type=1800 audit(1785662879.758:12): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="features" dev="configfs" ino=15122 res=0 errno=0 [ 151.307178][ T6470] futex_wake_op: syz.3.95 tries to shift op by -2048; fix this program [ 151.351627][ T6470] 0x000000000000-0x000000020000 : "" [ 151.412798][ T6470] ftl_cs: FTL header not found. [ 151.611199][ T6481] nbd: must specify a device to reconfigure [ 154.482597][ T30] audit: type=1800 audit(1785662888.588:13): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="features" dev="configfs" ino=17138 res=0 errno=0 [ 156.176324][ T30] audit: type=1800 audit(1785662890.278:14): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.114" name="members" dev="configfs" ino=17750 res=0 errno=0 [ 156.280439][ T30] audit: type=1800 audit(1785662890.388:15): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.114" name="dbroot" dev="configfs" ino=17242 res=0 errno=0 [ 156.411283][ T30] audit: type=1800 audit(1785662890.518:16): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.105" name="dbroot" dev="configfs" ino=17269 res=0 errno=0 [ 156.457806][ T6546] openvswitch: netlink: IPv4 tunnel dst address is zero [ 156.553285][ T6558] nbd: must specify a device to reconfigure [ 158.271416][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 159.880606][ T30] audit: type=1800 audit(1785662893.978:17): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.115" name="features" dev="configfs" ino=18165 res=0 errno=0 [ 163.421921][ T6669] nbd: must specify a device to reconfigure [ 167.549209][ T30] audit: type=1800 audit(1785662901.658:18): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.131" name="features" dev="configfs" ino=19794 res=0 errno=0 [ 167.577974][ T6708] i2c i2c-0: new_device: Can't parse I2C address [ 169.338034][ T30] audit: type=1800 audit(1785662903.438:19): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.136" name="features" dev="configfs" ino=19936 res=0 errno=0 [ 171.141642][ T6791] futex_wake_op: syz.3.142 tries to shift op by -2048; fix this program [ 172.921240][ T30] audit: type=1800 audit(1785662907.028:20): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="features" dev="configfs" ino=20226 res=0 errno=0 [ 175.809233][ T30] audit: type=1800 audit(1785662909.908:21): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.150" name="features" dev="configfs" ino=20471 res=0 errno=0 [ 177.335489][ T6883] futex_wake_op: syz.3.154 tries to shift op by -2048; fix this program [ 177.368311][ T6883] 0x000000000000-0x000000020000 : "" [ 177.405870][ T6883] ftl_cs: FTL header not found. [ 177.627558][ T30] audit: type=1800 audit(1785662911.728:22): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.155" name="features" dev="configfs" ino=21431 res=0 errno=0 [ 182.904941][ T5636] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 182.943436][ T5636] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 183.123860][ T30] audit: type=1800 audit(1785662917.228:23): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="features" dev="configfs" ino=22241 res=0 errno=0 [ 183.746170][ T5636] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 183.769164][ T5636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 183.779715][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 183.779758][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.779784][ T5636] Workqueue: hci1 hci_rx_work [ 183.779848][ T5636] Call Trace: [ 183.779858][ T5636] [ 183.779871][ T5636] dump_stack_lvl+0x100/0x190 [ 183.779912][ T5636] sysfs_warn_dup.cold+0x1c/0x28 [ 183.779964][ T5636] sysfs_create_dir_ns+0x24b/0x2b0 [ 183.780014][ T5636] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.780063][ T5636] ? find_held_lock+0x2b/0x80 [ 183.780105][ T5636] ? kobject_add_internal+0x25f/0x930 [ 183.780138][ T5636] ? kobject_add_internal+0x25f/0x930 [ 183.780177][ T5636] ? do_raw_spin_unlock+0x145/0x1e0 [ 183.780218][ T5636] kobject_add_internal+0x2c8/0x930 [ 183.780257][ T5636] kobject_add+0x16a/0x1e0 [ 183.780289][ T5636] ? __pfx_kobject_add+0x10/0x10 [ 183.780319][ T5636] ? class_to_subsys+0x10f/0x150 [ 183.780360][ T5636] ? kobject_put+0xb9/0x640 [ 183.780408][ T5636] ? _raw_spin_unlock+0x28/0x50 [ 183.780464][ T5636] device_add+0x294/0x1970 [ 183.780497][ T5636] ? __pfx_dev_set_name+0x10/0x10 [ 183.780535][ T5636] ? __pfx_device_add+0x10/0x10 [ 183.780568][ T5636] ? mgmt_send_event_skb+0x2fb/0x460 [ 183.780618][ T5636] hci_conn_add_sysfs+0x1a3/0x260 [ 183.780663][ T5636] le_conn_complete_evt+0x11eb/0x1f60 [ 183.780711][ T5636] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 183.780749][ T5636] ? __pfx_bt_warn+0x10/0x10 [ 183.780776][ T5636] ? hci_event_packet+0x186/0xcd0 [ 183.780825][ T5636] hci_le_conn_complete_evt+0x23c/0x3a0 [ 183.780868][ T5636] ? skb_pull_data+0x15f/0x1e0 [ 183.780906][ T5636] hci_le_meta_evt+0x34a/0x5f0 [ 183.780952][ T5636] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 183.781000][ T5636] hci_event_packet+0x51c/0xcd0 [ 183.781043][ T5636] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 183.781090][ T5636] ? __pfx_hci_event_packet+0x10/0x10 [ 183.781136][ T5636] ? kcov_remote_start+0x384/0x670 [ 183.781185][ T5636] ? lockdep_hardirqs_on+0x78/0x100 [ 183.781239][ T5636] hci_rx_work+0x451/0xfc0 [ 183.781289][ T5636] process_one_work+0xa23/0x1940 [ 183.781356][ T5636] ? __pfx_process_one_work+0x10/0x10 [ 183.781418][ T5636] ? __pfx_hci_rx_work+0x10/0x10 [ 183.781572][ T5636] worker_thread+0x5ef/0xe50 [ 183.781638][ T5636] ? kthread+0x13a/0x450 [ 183.781682][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 183.781729][ T5636] kthread+0x370/0x450 [ 183.781773][ T5636] ? __pfx_kthread+0x10/0x10 [ 183.781822][ T5636] ret_from_fork+0x72b/0xd50 [ 183.781867][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 183.781909][ T5636] ? rcu_is_watching+0x12/0xc0 [ 183.781964][ T5636] ? __switch_to+0x800/0x10f0 [ 183.782017][ T5636] ? __switch_to_asm+0x39/0x70 [ 183.782063][ T5636] ? __pfx_kthread+0x10/0x10 [ 183.782113][ T5636] ret_from_fork_asm+0x1a/0x30 [ 183.782180][ T5636] [ 183.782708][ T5636] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 184.081618][ T5636] Bluetooth: hci1: failed to register connection device [ 184.932536][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 187.008346][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 187.336601][ T30] audit: type=1800 audit(1785662921.438:24): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.173" name="features" dev="configfs" ino=23138 res=0 errno=0 [ 189.088192][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 189.623804][ T30] audit: type=1800 audit(1785662923.728:25): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.181" name="features" dev="configfs" ino=23326 res=0 errno=0 [ 190.730363][ T7114] i2c i2c-0: new_device: Can't parse I2C address [ 191.168278][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 192.153422][ T30] audit: type=1800 audit(1785662926.258:26): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.186" name="members" dev="configfs" ino=24063 res=0 errno=0 [ 192.290850][ T30] audit: type=1800 audit(1785662926.398:27): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.186" name="dbroot" dev="configfs" ino=24077 res=0 errno=0 [ 192.324616][ T7118] openvswitch: netlink: IPv4 tunnel dst address is zero [ 192.326842][ T7123] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 194.370758][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378016][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411217][ T30] audit: type=1800 audit(1785662928.518:28): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.193" name="features" dev="configfs" ino=24356 res=0 errno=0 [ 195.970156][ T7195] futex_wake_op: syz.3.197 tries to shift op by -2048; fix this program [ 196.119227][ T30] audit: type=1800 audit(1785662930.228:29): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.200" name="members" dev="configfs" ino=24497 res=0 errno=0 [ 196.147139][ T7203] futex_wake_op: syz.0.199 tries to shift op by -2048; fix this program [ 196.173399][ T7198] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 196.176043][ T30] audit: type=1800 audit(1785662930.278:30): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.200" name="dbroot" dev="configfs" ino=24501 res=0 errno=0 [ 200.446784][ T7270] nbd: must specify a device to reconfigure [ 202.105244][ T7292] futex_wake_op: syz.2.212 tries to shift op by -2048; fix this program [ 202.133283][ T30] audit: type=1800 audit(1785662936.238:31): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.219" name="features" dev="configfs" ino=25592 res=0 errno=0 [ 204.124079][ T7326] i2c i2c-0: new_device: Can't parse I2C address [ 204.243519][ T7328] nbd: must specify a device to reconfigure [ 205.947478][ T7352] i2c i2c-0: new_device: Missing parameters [ 206.003441][ T7351] i2c i2c-0: new_device: Can't parse I2C address [ 206.049235][ T7355] nbd: must specify a device to reconfigure [ 209.577014][ T30] audit: type=1800 audit(1785662943.678:32): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="members" dev="configfs" ino=27716 res=0 errno=0 [ 209.619440][ T7395] openvswitch: netlink: IPv4 tunnel dst address is zero [ 209.620405][ T30] audit: type=1800 audit(1785662943.718:33): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="dbroot" dev="configfs" ino=27725 res=0 errno=0 [ 209.672940][ T7408] futex_wake_op: syz.1.236 tries to shift op by -2048; fix this program [ 209.685269][ T7408] 0x000000000000-0x000000020000 : "" [ 209.707748][ T7408] ftl_cs: FTL header not found. [ 210.517069][ T7430] i2c i2c-0: new_device: Missing parameters [ 213.764951][ T30] audit: type=1800 audit(1785662947.868:34): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.237" name="features" dev="configfs" ino=28829 res=0 errno=0 [ 213.884552][ T7481] futex_wake_op: syz.3.239 tries to shift op by -2048; fix this program [ 215.415163][ T5636] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 215.431724][ T5636] Bluetooth: hci3: unexpected event 0x04 length: 8 < 10 [ 216.045263][ T7516] futex_wake_op: syz.0.245 tries to shift op by -2048; fix this program [ 216.092534][ T7516] 0x000000000000-0x000000020000 : "" [ 216.139592][ T7516] ftl_cs: FTL header not found. [ 217.488612][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 219.568357][ T5625] Bluetooth: hci3: command 0x2016 tx timeout [ 219.779597][ T7576] futex_wake_op: syz.2.253 tries to shift op by -2048; fix this program [ 219.808590][ T7576] 0x000000000001-0x000000020000 : "" [ 219.822807][ T7576] ftl_cs: FTL header corrupt! [ 221.280788][ T7598] futex_wake_op: syz.1.255 tries to shift op by -2048; fix this program [ 221.311280][ T7598] 0x000000000000-0x000000020000 : "" [ 221.330296][ T7598] ftl_cs: FTL header not found. [ 221.568728][ T7611] i2c i2c-0: new_device: Missing parameters [ 221.687526][ T30] audit: type=1800 audit(1785662955.788:35): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.258" name="features" dev="configfs" ino=29676 res=0 errno=0 [ 221.744093][ T7616] nbd: must specify a device to reconfigure [ 222.058036][ T7582] Bluetooth: hci0: command 0x0406 tx timeout [ 222.059059][ T7581] Bluetooth: hci1: command 0x2016 tx timeout [ 222.070987][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 222.077629][ T7582] Bluetooth: hci3: command 0x2016 tx timeout [ 223.233368][ T7635] futex_wake_op: syz.0.259 tries to shift op by -2048; fix this program [ 223.286525][ T7635] 0x000000000000-0x000000020000 : "" [ 223.369151][ T7635] ftl_cs: FTL header not found. [ 225.013540][ T30] audit: type=1800 audit(1785662959.118:36): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.264" name="features" dev="configfs" ino=31017 res=0 errno=0 [ 226.765127][ T7702] i2c i2c-0: new_device: Missing parameters [ 226.875044][ T7705] nbd: must specify a device to reconfigure [ 228.387066][ T30] audit: type=1800 audit(1785662962.488:37): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.272" name="members" dev="configfs" ino=30630 res=0 errno=0 [ 228.506205][ T30] audit: type=1800 audit(1785662962.608:38): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.272" name="dbroot" dev="configfs" ino=30665 res=0 errno=0 [ 228.529329][ T7727] futex_wake_op: syz.3.273 tries to shift op by -2048; fix this program [ 228.538218][ T7716] openvswitch: netlink: IPv4 tunnel dst address is zero [ 228.568416][ T7727] 0x000000000000-0x000000020000 : "" [ 228.607468][ T7727] ftl_cs: FTL header not found. [ 232.447917][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 232.905384][ T7803] nbd: must specify a device to reconfigure [ 233.089072][ T30] audit: type=1800 audit(1785662967.198:39): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.284" name="features" dev="configfs" ino=32913 res=0 errno=0 [ 233.132013][ T7810] nbd: must specify a device to reconfigure [ 234.617558][ T7824] futex_wake_op: syz.3.285 tries to shift op by -2048; fix this program [ 234.627881][ T7824] 0x000000000000-0x000000020000 : "" [ 234.653161][ T7824] ftl_cs: FTL header not found. [ 234.831261][ T7834] futex_wake_op: syz.2.288 tries to shift op by -2048; fix this program [ 234.842070][ T7834] 0x000000000000-0x000000020000 : "" [ 234.861660][ T7834] ftl_cs: FTL header not found. [ 236.566055][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 236.618786][ T30] audit: type=1800 audit(1785662970.728:40): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.291" name="members" dev="configfs" ino=33188 res=0 errno=0 [ 236.714271][ T30] audit: type=1800 audit(1785662970.818:41): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.291" name="dbroot" dev="configfs" ino=33192 res=0 errno=0 [ 236.747535][ T7852] openvswitch: netlink: IPv4 tunnel dst address is zero [ 238.512221][ T30] audit: type=1800 audit(1785662972.618:42): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.296" name="features" dev="configfs" ino=33388 res=0 errno=0 [ 238.592896][ T7900] nbd: must specify a device to reconfigure [ 240.010296][ T5636] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 240.032172][ T4941] Bluetooth: hci1: unexpected event 0x04 length: 8 < 10 [ 240.074631][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 240.352613][ T7924] futex_wake_op: syz.1.300 tries to shift op by -2048; fix this program [ 240.393853][ T7924] 0x000000000000-0x000000020000 : "" [ 240.481507][ T7924] ftl_cs: FTL header not found. [ 240.594652][ T7933] futex_wake_op: syz.3.303 tries to shift op by -2048; fix this program [ 240.645130][ T7933] 0x000000000000-0x000000020000 : "" [ 240.667735][ T7933] ftl_cs: FTL header not found. [ 242.048552][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 242.324121][ T7957] futex_wake_op: syz.1.306 tries to shift op by -2048; fix this program [ 242.333645][ T7957] 0x000000000000-0x000000020000 : "" [ 242.357692][ T7957] ftl_cs: FTL header not found. [ 244.092003][ T30] audit: type=1800 audit(1785662978.198:43): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.307" name="members" dev="configfs" ino=35033 res=0 errno=0 [ 244.128333][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 244.243923][ T30] audit: type=1800 audit(1785662978.338:44): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.307" name="dbroot" dev="configfs" ino=35098 res=0 errno=0 [ 244.269040][ T7973] openvswitch: netlink: IPv4 tunnel dst address is zero [ 244.523034][ T7994] nbd: must specify a device to reconfigure [ 245.130383][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 248.268352][ T30] audit: type=1800 audit(1785662982.378:45): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.320" name="members" dev="configfs" ino=34633 res=0 errno=0 [ 248.331945][ T30] audit: type=1800 audit(1785662982.438:46): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.320" name="dbroot" dev="configfs" ino=34639 res=0 errno=0 [ 248.352766][ T8045] openvswitch: netlink: IPv4 tunnel dst address is zero [ 250.016909][ T8079] futex_wake_op: syz.1.323 tries to shift op by -2048; fix this program [ 250.075453][ T8079] 0x000000000000-0x000000020000 : "" [ 250.092824][ T8079] ftl_cs: FTL header not found. [ 250.151111][ T8082] nbd: must specify a device to reconfigure [ 251.210772][ T30] audit: type=1800 audit(1785662985.318:47): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.325" name="members" dev="configfs" ino=35740 res=0 errno=0 [ 251.249626][ T30] audit: type=1800 audit(1785662985.358:48): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.325" name="dbroot" dev="configfs" ino=35744 res=0 errno=0 [ 251.260966][ T8095] openvswitch: netlink: IPv4 tunnel dst address is zero [ 252.537088][ T8126] nbd: must specify a device to reconfigure [ 255.809927][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816694][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.168014][ T8181] nbd: must specify a device to reconfigure [ 257.940038][ T8207] futex_wake_op: syz.0.341 tries to shift op by -2048; fix this program [ 257.971292][ T8207] 0x000000000000-0x000000020000 : "" [ 258.016052][ T8207] ftl_cs: FTL header not found. [ 258.081065][ T30] audit: type=1800 audit(1785662992.178:49): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.339" name="features" dev="configfs" ino=37418 res=0 errno=0 [ 258.305203][ T8210] nbd: must specify a device to reconfigure [ 261.803297][ T8272] nbd: must specify a device to reconfigure [ 261.878820][ T30] audit: type=1800 audit(1785662995.978:50): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.348" name="features" dev="configfs" ino=37757 res=0 errno=0 [ 261.935195][ T8275] nbd: must specify a device to reconfigure [ 265.888678][ T8326] nbd: must specify a device to reconfigure [ 267.440456][ T30] audit: type=1800 audit(1785663001.538:51): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.358" name="members" dev="configfs" ino=39122 res=0 errno=0 [ 267.477682][ T8339] openvswitch: netlink: IPv4 tunnel dst address is zero [ 267.759690][ T30] audit: type=1800 audit(1785663001.868:52): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="features" dev="configfs" ino=38583 res=0 errno=0 [ 269.416281][ T8379] futex_wake_op: syz.0.365 tries to shift op by -2048; fix this program [ 269.539297][ T8379] 0x000000000000-0x000000020000 : "" [ 269.582006][ T8379] ftl_cs: FTL header not found. [ 271.865378][ T8409] nbd: must specify a device to reconfigure [ 274.086497][ T30] audit: type=1800 audit(1785663008.188:53): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.373" name="features" dev="configfs" ino=39861 res=0 errno=0 [ 277.977736][ T8500] futex_wake_op: syz.3.379 tries to shift op by -2048; fix this program [ 278.025331][ T8500] 0x000000000000-0x000000020000 : "" [ 278.067539][ T8500] ftl_cs: FTL header not found. [ 278.218291][ T8510] nbd: must specify a device to reconfigure [ 279.617120][ T30] audit: type=1800 audit(1785663013.718:54): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.383" name="members" dev="configfs" ino=41298 res=0 errno=0 [ 279.689526][ T8518] openvswitch: netlink: IPv4 tunnel dst address is zero [ 279.723644][ T4941] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 280.054425][ T30] audit: type=1800 audit(1785663014.158:55): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.385" name="features" dev="configfs" ino=40514 res=0 errno=0 [ 280.526873][ T30] audit: type=1800 audit(1785663014.628:56): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.395" name="members" dev="configfs" ino=41462 res=0 errno=0 [ 280.583176][ T30] audit: type=1800 audit(1785663014.688:57): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.395" name="dbroot" dev="configfs" ino=40552 res=0 errno=0 [ 280.605900][ T8544] openvswitch: netlink: IPv4 tunnel dst address is zero [ 281.809278][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 283.013013][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 283.286146][ T4941] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 283.541753][ T8600] i2c i2c-0: new_device: Can't parse I2C address [ 283.888279][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 285.169152][ T30] audit: type=1800 audit(1785663019.268:58): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.399" name="members" dev="configfs" ino=42043 res=0 errno=0 [ 285.217246][ T30] audit: type=1800 audit(1785663019.318:59): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.399" name="dbroot" dev="configfs" ino=42054 res=0 errno=0 [ 285.244358][ T8612] openvswitch: netlink: IPv4 tunnel dst address is zero [ 285.315677][ T8624] futex_wake_op: syz.3.400 tries to shift op by -2048; fix this program [ 285.328215][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 285.342082][ T8624] 0x000000000000-0x000000020000 : "" [ 285.376167][ T8624] ftl_cs: FTL header not found. [ 287.409135][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 287.765801][ T8656] nbd: must specify a device to reconfigure [ 287.831087][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 288.201544][ T8672] futex_wake_op: syz.2.406 tries to shift op by -2048; fix this program [ 288.214970][ T8672] 0x000000000000-0x000000020000 : "" [ 288.240610][ T8672] ftl_cs: FTL header not found. [ 288.598856][ T8684] i2c i2c-0: new_device: Can't parse I2C address [ 290.189501][ T8702] futex_wake_op: syz.0.410 tries to shift op by -2048; fix this program [ 290.199726][ T8702] 0x000000000000-0x000000020000 : "" [ 290.218436][ T8702] ftl_cs: FTL header not found. [ 291.885974][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 292.210454][ T8729] i2c i2c-0: new_device: Can't parse I2C address [ 292.504308][ T8747] nbd: must specify a device to reconfigure [ 294.003200][ T8768] futex_wake_op: syz.0.420 tries to shift op by -2048; fix this program [ 294.014099][ T8768] 0x000000000000-0x000000020000 : "" [ 294.047508][ T8768] ftl_cs: FTL header not found. [ 295.795463][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 295.813760][ T8793] futex_wake_op: syz.2.423 tries to shift op by -2048; fix this program [ 295.824094][ T8793] 0x000000000000-0x000000020000 : "" [ 295.847412][ T8793] ftl_cs: FTL header not found. [ 296.237968][ T8810] futex_wake_op: syz.0.426 tries to shift op by -2048; fix this program [ 297.915430][ T8835] i2c i2c-0: new_device: Can't parse I2C address [ 297.940581][ T30] audit: type=1800 audit(1785663032.048:60): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.428" name="features" dev="configfs" ino=43954 res=0 errno=0 [ 298.105696][ T8841] nbd: must specify a device to reconfigure [ 299.576000][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 301.633838][ T8895] futex_wake_op: syz.0.438 tries to shift op by -2048; fix this program [ 301.645765][ T8895] 0x000000000000-0x000000020000 : "" [ 301.661114][ T8895] ftl_cs: FTL header not found. [ 303.338651][ T8917] futex_wake_op: syz.0.441 tries to shift op by -2048; fix this program [ 303.362729][ T8917] 0x000000000000-0x000000020000 : "" [ 303.386841][ T8917] ftl_cs: FTL header not found. [ 303.812879][ T8933] nbd: must specify a device to reconfigure [ 305.308771][ T8955] i2c i2c-0: new_device: Can't parse I2C address [ 305.333912][ T8958] nbd: must specify a device to reconfigure [ 307.125900][ T8981] futex_wake_op: syz.1.451 tries to shift op by -2048; fix this program [ 307.161411][ T8981] 0x000000000000-0x000000020000 : "" [ 307.185977][ T8981] ftl_cs: FTL header not found. [ 308.999841][ T9008] futex_wake_op: syz.3.453 tries to shift op by -2048; fix this program [ 309.025952][ T9008] 0x000000000000-0x000000020000 : "" [ 309.034670][ T9006] nbd: must specify a device to reconfigure [ 309.062441][ T9008] ftl_cs: FTL header not found. [ 309.260440][ T30] audit: type=1800 audit(1785663043.368:61): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.454" name="features" dev="configfs" ino=47136 res=0 errno=0 [ 312.628322][ T9057] futex_wake_op: syz.3.458 tries to shift op by -2048; fix this program [ 312.648937][ T9057] 0x000000000000-0x000000020000 : "" [ 312.677739][ T9057] ftl_cs: FTL header not found. [ 312.878549][ T9067] futex_wake_op: syz.2.461 tries to shift op by -2048; fix this program [ 312.916056][ T9067] 0x000000000000-0x000000020000 : "" [ 312.947852][ T9067] ftl_cs: FTL header not found. [ 314.242226][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 314.438675][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 316.522467][ T30] audit: type=1800 audit(1785663050.628:62): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.471" name="members" dev="configfs" ino=47821 res=0 errno=0 [ 316.572708][ T30] audit: type=1800 audit(1785663050.678:63): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.471" name="dbroot" dev="configfs" ino=48548 res=0 errno=0 [ 316.598722][ T9122] openvswitch: netlink: IPv4 tunnel dst address is zero [ 316.650858][ T9131] futex_wake_op: syz.1.472 tries to shift op by -2048; fix this program [ 316.707586][ T9131] 0x000000000000-0x000000020000 : "" [ 316.790856][ T9134] nbd: must specify a device to reconfigure [ 316.830193][ T9131] ftl_cs: FTL header not found. [ 317.254708][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.264450][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.383865][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 323.091758][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 323.384322][ T9236] nbd: must specify a device to reconfigure [ 323.480000][ T30] audit: type=1800 audit(1785663057.578:64): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.487" name="members" dev="configfs" ino=49368 res=0 errno=0 [ 323.562588][ T30] audit: type=1800 audit(1785663057.668:65): pid=9233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.487" name="dbroot" dev="configfs" ino=50262 res=0 errno=0 [ 323.606591][ T9233] openvswitch: netlink: IPv4 tunnel dst address is zero [ 323.641233][ T30] audit: type=1800 audit(1785663057.748:66): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.486" name="features" dev="configfs" ino=50269 res=0 errno=0 [ 327.381573][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 327.594610][ T30] audit: type=1800 audit(1785663061.698:67): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.496" name="members" dev="configfs" ino=49702 res=0 errno=0 [ 327.636620][ T30] audit: type=1800 audit(1785663061.738:68): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.496" name="dbroot" dev="configfs" ino=50623 res=0 errno=0 [ 327.664807][ T9295] openvswitch: netlink: IPv4 tunnel dst address is zero [ 327.797876][ T9309] nbd: must specify a device to reconfigure [ 328.655004][ T9322] nbd: must specify a device to reconfigure [ 329.783081][ T30] audit: type=1800 audit(1785663063.888:69): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.500" name="features" dev="configfs" ino=50824 res=0 errno=0 [ 331.276824][ T30] audit: type=1800 audit(1785663065.378:70): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.506" name="members" dev="configfs" ino=50953 res=0 errno=0 [ 331.318850][ T9372] openvswitch: netlink: IPv4 tunnel dst address is zero [ 331.342295][ T30] audit: type=1800 audit(1785663065.418:71): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.506" name="dbroot" dev="configfs" ino=50965 res=0 errno=0 [ 333.049466][ T9399] futex_wake_op: syz.0.508 tries to shift op by -2048; fix this program [ 333.060148][ T9399] 0x000000000000-0x000000020000 : "" [ 333.077704][ T9399] ftl_cs: FTL header not found. [ 333.185068][ T4941] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 333.554426][ T9420] nbd: must specify a device to reconfigure [ 333.821816][ T30] audit: type=1800 audit(1785663067.928:72): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.512" name="features" dev="configfs" ino=52294 res=0 errno=0 [ 335.248195][ T4941] Bluetooth: hci3: command 0x2016 tx timeout [ 337.102371][ T30] audit: type=1800 audit(1785663071.198:73): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.517" name="members" dev="configfs" ino=52518 res=0 errno=0 [ 337.123454][ T4941] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 337.172824][ T30] audit: type=1800 audit(1785663071.278:74): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.517" name="dbroot" dev="configfs" ino=52548 res=0 errno=0 [ 337.202159][ T9459] openvswitch: netlink: IPv4 tunnel dst address is zero [ 337.328347][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 337.426109][ T9479] nbd: must specify a device to reconfigure [ 337.816673][ T9484] nbd: must specify a device to reconfigure [ 339.168276][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 339.692729][ T30] audit: type=1800 audit(1785663073.798:75): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.526" name="members" dev="configfs" ino=52779 res=0 errno=0 [ 339.791796][ T30] audit: type=1800 audit(1785663073.898:76): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.526" name="dbroot" dev="configfs" ino=52031 res=0 errno=0 [ 339.880583][ T30] audit: type=1800 audit(1785663073.988:77): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.524" name="features" dev="configfs" ino=52046 res=0 errno=0 [ 340.931056][ T9536] nbd: must specify a device to reconfigure [ 340.968166][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 341.026707][ T9538] futex_wake_op: syz.0.529 tries to shift op by -2048; fix this program [ 341.254252][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 341.871296][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 343.135095][ T9579] nbd: must specify a device to reconfigure [ 343.250858][ T9584] nbd: must specify a device to reconfigure [ 343.290173][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 345.066263][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 345.359256][ T30] audit: type=1800 audit(1785663079.458:78): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.538" name="features" dev="configfs" ino=54306 res=0 errno=0 [ 346.852775][ T9626] openvswitch: netlink: IPv4 tunnel dst address is zero [ 346.854609][ T30] audit: type=1800 audit(1785663080.958:79): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.544" name="dbroot" dev="configfs" ino=53818 res=0 errno=0 [ 348.728474][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 348.881178][ T9669] nbd: must specify a device to reconfigure [ 349.164484][ T9673] nbd: must specify a device to reconfigure [ 349.197582][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 349.455192][ T30] audit: type=1800 audit(1785663083.558:80): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.550" name="features" dev="configfs" ino=54061 res=0 errno=0 [ 351.020042][ T9705] futex_wake_op: syz.0.554 tries to shift op by -2048; fix this program [ 351.054305][ T9705] 0x000000000000-0x000000020000 : "" [ 351.109051][ T9705] ftl_cs: FTL header not found. [ 355.055219][ T30] audit: type=1800 audit(1785663089.158:81): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.563" name="features" dev="configfs" ino=55757 res=0 errno=0 [ 356.467915][ T9794] futex_wake_op: syz.2.565 tries to shift op by -2048; fix this program [ 356.835725][ T9808] nbd: must specify a device to reconfigure [ 356.908511][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 358.553726][ T9831] nbd: must specify a device to reconfigure [ 363.872663][ T9927] nbd: must specify a device to reconfigure [ 366.159804][ T30] audit: type=1800 audit(1785663100.258:82): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.585" name="features" dev="configfs" ino=58464 res=0 errno=0 [ 366.421055][ T9964] nbd: must specify a device to reconfigure [ 369.906305][T10009] futex_wake_op: syz.1.595 tries to shift op by -2048; fix this program [ 374.222042][T10079] nbd: must specify a device to reconfigure [ 375.653172][ T30] audit: type=1800 audit(1785663109.748:83): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.607" name="members" dev="configfs" ino=59316 res=0 errno=0 [ 375.807182][ T30] audit: type=1800 audit(1785663109.908:84): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.607" name="dbroot" dev="configfs" ino=59800 res=0 errno=0 [ 375.832609][T10084] openvswitch: netlink: IPv4 tunnel dst address is zero [ 378.691042][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.697484][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.636586][T10165] nbd: must specify a device to reconfigure [ 381.814520][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 385.682307][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 385.944070][T10266] i2c i2c-0: new_device: Missing parameters [ 386.006228][ T30] audit: type=1800 audit(1785663120.108:85): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.630" name="features" dev="configfs" ino=61663 res=0 errno=0 [ 391.054191][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 391.577133][T10365] nbd: must specify a device to reconfigure [ 391.645823][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 391.762469][ T30] audit: type=1800 audit(1785663125.868:86): pid=10370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.645" name="features" dev="configfs" ino=62907 res=0 errno=0 [ 393.139941][T10390] futex_wake_op: syz.0.650 tries to shift op by -2048; fix this program [ 393.158934][T10390] 0x000000000000-0x000000020000 : "" [ 393.178819][T10390] ftl_cs: FTL header not found. [ 393.408112][T10398] i2c i2c-0: new_device: Missing parameters [ 394.664983][T10417] futex_wake_op: syz.3.652 tries to shift op by -2048; fix this program [ 394.728215][T10417] 0x000000000001-0x000000020000 : "" [ 394.764933][T10417] ftl_cs: FTL header corrupt! [ 395.002738][T10419] i2c i2c-0: new_device: Missing parameters [ 396.749188][T10456] i2c i2c-0: new_device: Missing parameters [ 396.791606][T10458] nbd: must specify a device to reconfigure [ 396.822998][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 400.565707][T10515] i2c i2c-0: new_device: Missing parameters [ 400.622608][T10518] i2c i2c-0: new_device: Missing parameters [ 402.395212][T10551] nbd: must specify a device to reconfigure [ 402.515419][T10552] nbd: must specify a device to reconfigure [ 402.635256][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 403.704359][ T30] audit: type=1800 audit(1785663137.808:87): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.671" name="members" dev="configfs" ino=64407 res=0 errno=0 [ 403.838655][ T30] audit: type=1800 audit(1785663137.948:88): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.672" name="dbroot" dev="configfs" ino=64451 res=0 errno=0 [ 403.864141][T10555] openvswitch: netlink: IPv4 tunnel dst address is zero [ 403.873943][T10557] openvswitch: netlink: IPv4 tunnel dst address is zero [ 404.764717][T10597] futex_wake_op: syz.2.676 tries to shift op by -2048; fix this program [ 404.784450][T10597] 0x000000000000-0x000000020000 : "" [ 404.842507][ T30] audit: type=1800 audit(1785663138.948:89): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.678" name="members" dev="configfs" ino=65636 res=0 errno=0 [ 404.899349][T10597] ftl_cs: FTL header not found. [ 404.997584][ T30] audit: type=1800 audit(1785663139.098:90): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.678" name="dbroot" dev="configfs" ino=65665 res=0 errno=0 [ 405.013232][T10595] openvswitch: netlink: IPv4 tunnel dst address is zero [ 407.004105][T10643] nbd: must specify a device to reconfigure [ 407.355797][T10649] nbd: must specify a device to reconfigure [ 409.133517][T10667] futex_wake_op: syz.1.684 tries to shift op by -2048; fix this program [ 409.142983][T10667] 0x000000000000-0x000000020000 : "" [ 409.154078][T10667] ftl_cs: FTL header not found. [ 409.185593][ T30] audit: type=1800 audit(1785663143.288:91): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.686" name="members" dev="configfs" ino=66047 res=0 errno=0 [ 409.228262][T10671] nbd: must specify a device to reconfigure [ 409.352689][ T30] audit: type=1800 audit(1785663143.458:92): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.686" name="dbroot" dev="configfs" ino=66082 res=0 errno=0 [ 409.393320][T10662] openvswitch: netlink: IPv4 tunnel dst address is zero [ 410.001552][ T30] audit: type=1800 audit(1785663144.108:93): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.687" name="members" dev="configfs" ino=66965 res=0 errno=0 [ 410.031457][ T30] audit: type=1800 audit(1785663144.138:94): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.687" name="dbroot" dev="configfs" ino=66968 res=0 errno=0 [ 410.055198][T10681] openvswitch: netlink: IPv4 tunnel dst address is zero [ 410.900151][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 411.019667][T10706] nbd: must specify a device to reconfigure [ 412.919172][T10743] nbd: must specify a device to reconfigure [ 414.411087][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 414.479444][ T30] audit: type=1800 audit(1785663148.578:95): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.700" name="members" dev="configfs" ino=67586 res=0 errno=0 [ 414.556463][ T30] audit: type=1800 audit(1785663148.658:96): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.700" name="dbroot" dev="configfs" ino=67361 res=0 errno=0 [ 414.579488][T10751] openvswitch: netlink: IPv4 tunnel dst address is zero [ 414.895894][T10765] nbd: must specify a device to reconfigure [ 416.455863][T10792] nbd: must specify a device to reconfigure [ 419.144221][ T30] audit: type=1800 audit(1785663153.248:97): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.710" name="members" dev="configfs" ino=68031 res=0 errno=0 [ 419.184387][ T30] audit: type=1800 audit(1785663153.288:98): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.710" name="dbroot" dev="configfs" ino=68035 res=0 errno=0 [ 419.207394][T10834] openvswitch: netlink: IPv4 tunnel dst address is zero [ 420.174881][ T4941] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 421.647231][ T30] audit: type=1800 audit(1785663155.748:99): pid=10875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.716" name="members" dev="configfs" ino=68906 res=0 errno=0 [ 421.771976][T10873] openvswitch: netlink: IPv4 tunnel dst address is zero [ 422.104688][T10890] nbd: must specify a device to reconfigure [ 423.575003][ T30] audit: type=1800 audit(1785663157.678:100): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.722" name="members" dev="configfs" ino=68549 res=0 errno=0 [ 423.654754][T10920] openvswitch: netlink: IPv4 tunnel dst address is zero [ 423.663833][ T30] audit: type=1800 audit(1785663157.758:101): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.722" name="dbroot" dev="configfs" ino=68574 res=0 errno=0 [ 424.761698][ T30] audit: type=1800 audit(1785663158.858:102): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.724" name="features" dev="configfs" ino=69760 res=0 errno=0 [ 426.660635][T10980] nbd: must specify a device to reconfigure [ 427.959613][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 428.126055][ T30] audit: type=1800 audit(1785663162.228:103): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.734" name="members" dev="configfs" ino=69587 res=0 errno=0 [ 428.237862][ T30] audit: type=1800 audit(1785663162.338:104): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.734" name="dbroot" dev="configfs" ino=69603 res=0 errno=0 [ 428.266301][T10994] openvswitch: netlink: IPv4 tunnel dst address is zero [ 429.916776][ T30] audit: type=1800 audit(1785663164.018:105): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.737" name="features" dev="configfs" ino=70809 res=0 errno=0 [ 430.237090][T11047] futex_wake_op: syz.2.739 tries to shift op by -2048; fix this program [ 431.626822][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 431.840388][ T30] audit: type=1800 audit(1785663165.948:106): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.744" name="members" dev="configfs" ino=70414 res=0 errno=0 [ 431.922794][ T30] audit: type=1800 audit(1785663166.028:107): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.744" name="dbroot" dev="configfs" ino=70504 res=0 errno=0 [ 431.951804][T11072] openvswitch: netlink: IPv4 tunnel dst address is zero [ 432.023762][T11080] futex_wake_op: syz.2.745 tries to shift op by -2048; fix this program [ 432.036493][T11080] 0x000000000000-0x000000020000 : "" [ 432.059443][T11080] ftl_cs: FTL header not found. [ 432.834425][T11093] futex_wake_op: syz.3.746 tries to shift op by -2048; fix this program [ 432.845438][T11093] 0x000000000000-0x000000020000 : "" [ 432.871137][T11093] ftl_cs: FTL header not found. [ 434.434816][ T30] audit: type=1800 audit(1785663168.538:108): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.750" name="members" dev="configfs" ino=71249 res=0 errno=0 [ 434.541227][T11121] openvswitch: netlink: IPv4 tunnel dst address is zero [ 434.904010][T11131] futex_wake_op: syz.0.752 tries to shift op by -2048; fix this program [ 434.924179][T11131] 0x000000000000-0x000000020000 : "" [ 434.961127][T11131] ftl_cs: FTL header not found. [ 435.207674][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 435.553446][ T30] audit: type=1800 audit(1785663169.658:109): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.755" name="members" dev="configfs" ino=71978 res=0 errno=0 [ 435.582195][T11147] openvswitch: netlink: IPv4 tunnel dst address is zero [ 435.591183][ T30] audit: type=1800 audit(1785663169.688:110): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.755" name="dbroot" dev="configfs" ino=71982 res=0 errno=0 [ 435.816729][T11155] nbd: must specify a device to reconfigure [ 436.920447][T11184] i2c i2c-0: new_device: Missing parameters [ 438.239699][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 438.613919][T11214] futex_wake_op: syz.2.764 tries to shift op by -2048; fix this program [ 439.891475][ T30] audit: type=1800 audit(1785663173.998:111): pid=11230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.766" name="members" dev="configfs" ino=72809 res=0 errno=0 [ 439.924061][T11229] openvswitch: netlink: IPv4 tunnel dst address is zero [ 439.938476][ T30] audit: type=1800 audit(1785663174.018:112): pid=11229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.766" name="dbroot" dev="configfs" ino=72813 res=0 errno=0 [ 440.134533][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141164][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.001042][ T30] audit: type=1800 audit(1785663175.098:113): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.769" name="features" dev="configfs" ino=72953 res=0 errno=0 [ 441.071443][T11236] nbd: must specify a device to reconfigure [ 442.310883][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 442.675758][T11284] i2c i2c-0: new_device: Missing parameters [ 444.148786][ T30] audit: type=1800 audit(1785663178.248:114): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.776" name="members" dev="configfs" ino=73180 res=0 errno=0 [ 444.278895][ T30] audit: type=1800 audit(1785663178.388:115): pid=11292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.776" name="dbroot" dev="configfs" ino=73212 res=0 errno=0 [ 444.319987][T11292] openvswitch: netlink: IPv4 tunnel dst address is zero [ 444.608532][T11311] nbd: must specify a device to reconfigure [ 444.800383][T11316] nbd: must specify a device to reconfigure [ 446.582119][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 446.602852][T11340] nbd: must specify a device to reconfigure [ 447.454114][ T30] audit: type=1800 audit(1785663181.558:116): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.785" name="features" dev="configfs" ino=74182 res=0 errno=0 [ 448.836946][T11382] i2c i2c-0: new_device: Missing parameters [ 449.217791][ T30] audit: type=1800 audit(1785663183.318:117): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.789" name="features" dev="configfs" ino=73671 res=0 errno=0 [ 451.033728][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 451.716790][T11430] nbd: must specify a device to reconfigure [ 453.201181][ T30] audit: type=1800 audit(1785663187.308:118): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.797" name="features" dev="configfs" ino=75003 res=0 errno=0 [ 455.045546][T11483] i2c i2c-0: new_device: Missing parameters [ 456.723261][ T30] audit: type=1800 audit(1785663190.828:119): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.805" name="members" dev="configfs" ino=75306 res=0 errno=0 [ 456.827763][ T30] audit: type=1800 audit(1785663190.928:120): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.805" name="dbroot" dev="configfs" ino=75335 res=0 errno=0 [ 456.853869][T11496] openvswitch: netlink: IPv4 tunnel dst address is zero [ 457.137140][T11514] nbd: must specify a device to reconfigure [ 457.838757][T11521] futex_wake_op: syz.2.807 tries to shift op by -2048; fix this program [ 457.851956][T11521] 0x000000000000-0x000000020000 : "" [ 457.866768][T11521] ftl_cs: FTL header not found. [ 459.155821][T11543] nbd: must specify a device to reconfigure [ 459.494680][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 460.888880][T11582] i2c i2c-0: new_device: Missing parameters [ 462.583534][ T4941] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 462.747395][T11604] futex_wake_op: syz.2.817 tries to shift op by -2048; fix this program [ 462.764960][T11604] 0x000000000000-0x000000020000 : "" [ 462.796555][T11604] ftl_cs: FTL header not found. [ 462.816128][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 463.133015][T11619] nbd: must specify a device to reconfigure [ 464.618470][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 465.022217][T11648] nbd: must specify a device to reconfigure [ 466.650986][ T5636] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 466.688125][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 466.886472][T11674] i2c i2c-0: new_device: Missing parameters [ 466.905551][ T30] audit: type=1800 audit(1785663201.008:121): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.831" name="members" dev="configfs" ino=78005 res=0 errno=0 [ 466.947807][ T30] audit: type=1800 audit(1785663201.048:122): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.831" name="dbroot" dev="configfs" ino=78009 res=0 errno=0 [ 466.970648][T11673] openvswitch: netlink: IPv4 tunnel dst address is zero [ 468.688080][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 470.640799][T11736] nbd: must specify a device to reconfigure [ 470.768238][ T4941] Bluetooth: hci0: command 0x0406 tx timeout [ 472.035031][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 473.563286][T11777] i2c i2c-0: new_device: Missing parameters [ 475.613710][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 476.189993][ T30] audit: type=1800 audit(1785663210.298:123): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.852" name="members" dev="configfs" ino=79077 res=0 errno=0 [ 476.293677][ T30] audit: type=1800 audit(1785663210.388:124): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.852" name="dbroot" dev="configfs" ino=79081 res=0 errno=0 [ 476.324626][T11824] openvswitch: netlink: IPv4 tunnel dst address is zero [ 479.865128][ T30] audit: type=1800 audit(1785663213.968:125): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.861" name="members" dev="configfs" ino=80389 res=0 errno=0 [ 479.942697][T11880] openvswitch: netlink: IPv4 tunnel dst address is zero [ 479.952550][ T30] audit: type=1800 audit(1785663214.038:126): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.861" name="dbroot" dev="configfs" ino=80403 res=0 errno=0 [ 481.001189][T11902] futex_wake_op: syz.2.862 tries to shift op by -2048; fix this program [ 481.015269][T11902] 0x000000000000-0x000000020000 : "" [ 481.043432][T11902] ftl_cs: FTL header not found. [ 482.182535][T11923] futex_wake_op: syz.1.863 tries to shift op by -2048; fix this program [ 482.214643][T11923] 0x000000000000-0x000000020000 : "" [ 482.286121][T11923] ftl_cs: FTL header not found. [ 482.494094][T11934] nbd: must specify a device to reconfigure [ 483.779150][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 484.124441][ T30] audit: type=1800 audit(1785663218.228:127): pid=11956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.870" name="members" dev="configfs" ino=79778 res=0 errno=0 [ 484.165947][T11947] openvswitch: netlink: IPv4 tunnel dst address is zero [ 484.173347][ T30] audit: type=1800 audit(1785663218.268:128): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.870" name="dbroot" dev="configfs" ino=79782 res=0 errno=0 [ 487.824383][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 489.843291][ T30] audit: type=1800 audit(1785663223.948:129): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.882" name="members" dev="configfs" ino=82249 res=0 errno=0 [ 489.898409][ T30] audit: type=1800 audit(1785663224.008:130): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.882" name="dbroot" dev="configfs" ino=82280 res=0 errno=0 [ 489.910819][T12035] openvswitch: netlink: IPv4 tunnel dst address is zero [ 490.091644][T12053] futex_wake_op: syz.1.883 tries to shift op by -2048; fix this program [ 490.130621][T12053] 0x000000000000-0x000000020000 : "" [ 490.186887][T12053] ftl_cs: FTL header not found. [ 492.644017][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 494.219971][ T30] audit: type=1800 audit(1785663228.328:131): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.893" name="members" dev="configfs" ino=82750 res=0 errno=0 [ 494.271651][ T30] audit: type=1800 audit(1785663228.378:132): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.893" name="dbroot" dev="configfs" ino=82760 res=0 errno=0 [ 494.296067][T12111] openvswitch: netlink: IPv4 tunnel dst address is zero [ 496.157517][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 496.181457][T12153] futex_wake_op: syz.0.897 tries to shift op by -2048; fix this program [ 496.193893][T12153] 0x000000000000-0x000000020000 : "" [ 496.210973][T12153] ftl_cs: FTL header not found. [ 496.915935][T12169] nbd: must specify a device to reconfigure [ 496.987238][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 498.437643][ T30] audit: type=1800 audit(1785663232.538:133): pid=12189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.903" name="members" dev="configfs" ino=83294 res=0 errno=0 [ 498.493172][ T30] audit: type=1800 audit(1785663232.598:134): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.903" name="dbroot" dev="configfs" ino=84251 res=0 errno=0 [ 498.500747][T12182] openvswitch: netlink: IPv4 tunnel dst address is zero [ 499.439577][ T30] audit: type=1800 audit(1785663233.548:135): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.905" name="members" dev="configfs" ino=84414 res=0 errno=0 [ 499.511623][ T30] audit: type=1800 audit(1785663233.618:136): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.905" name="dbroot" dev="configfs" ino=84418 res=0 errno=0 [ 499.536828][T12203] openvswitch: netlink: IPv4 tunnel dst address is zero [ 500.168261][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 501.406730][T12244] nbd: must specify a device to reconfigure [ 501.570846][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.578108][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.749400][ T30] audit: type=1800 audit(1785663236.858:137): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.913" name="members" dev="configfs" ino=84670 res=0 errno=0 [ 502.803973][ T30] audit: type=1800 audit(1785663236.908:138): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.913" name="dbroot" dev="configfs" ino=83701 res=0 errno=0 [ 502.832694][T12252] openvswitch: netlink: IPv4 tunnel dst address is zero [ 502.917595][T12262] futex_wake_op: syz.0.914 tries to shift op by -2048; fix this program [ 502.933333][T12262] 0x000000000000-0x000000020000 : "" [ 502.946544][T12262] ftl_cs: FTL header not found. [ 503.643987][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 503.743359][T12284] i2c i2c-0: new_device: Missing parameters [ 505.230785][T12305] nbd: must specify a device to reconfigure [ 505.287108][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 508.295596][T12352] nbd: must specify a device to reconfigure [ 509.467239][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 510.176350][T12384] i2c i2c-0: new_device: Missing parameters [ 511.280937][T12399] nbd: must specify a device to reconfigure [ 512.345061][T12418] nbd: must specify a device to reconfigure [ 513.426260][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 513.624243][T12439] futex_wake_op: syz.2.939 tries to shift op by -2048; fix this program [ 513.642980][T12439] 0x000000000000-0x000000020000 : "" [ 513.669698][T12439] ftl_cs: FTL header not found. [ 515.454040][T12466] futex_wake_op: syz.0.941 tries to shift op by -2048; fix this program [ 515.503782][T12466] 0x000000000000-0x000000020000 : "" [ 515.524844][T12466] ftl_cs: FTL header not found. [ 515.527347][T12468] futex_wake_op: syz.3.942 tries to shift op by -2048; fix this program [ 515.577445][T12468] 0x000000000000-0x000000020000 : "" [ 515.643492][T12468] ftl_cs: FTL header not found. [ 515.777581][ T30] audit: type=1800 audit(1785663249.878:139): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.944" name="features" dev="configfs" ino=87138 res=0 errno=0 [ 517.401794][ T30] audit: type=1800 audit(1785663251.508:140): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.945" name="dbroot" dev="configfs" ino=87253 res=0 errno=0 [ 517.428194][T12487] openvswitch: netlink: IPv4 tunnel dst address is zero [ 517.456531][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 517.457530][ T30] audit: type=1800 audit(1785663251.558:141): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.947" name="members" dev="configfs" ino=87256 res=0 errno=0 [ 517.520438][ T30] audit: type=1800 audit(1785663251.628:142): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.947" name="dbroot" dev="configfs" ino=88173 res=0 errno=0 [ 517.540471][T12492] openvswitch: netlink: IPv4 tunnel dst address is zero [ 518.911624][T12526] nbd: must specify a device to reconfigure [ 519.750194][T12533] nbd: must specify a device to reconfigure [ 519.780127][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 520.803391][T12559] futex_wake_op: syz.3.956 tries to shift op by -2048; fix this program [ 520.860448][ T30] audit: type=1800 audit(1785663254.958:143): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.955" name="features" dev="configfs" ino=87642 res=0 errno=0 [ 521.183729][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 521.990302][ T30] audit: type=1800 audit(1785663256.098:144): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.958" name="features" dev="configfs" ino=88648 res=0 errno=0 [ 522.874374][ T30] audit: type=1800 audit(1785663256.978:145): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.959" name="members" dev="configfs" ino=88718 res=0 errno=0 [ 522.923197][ T30] audit: type=1800 audit(1785663257.028:146): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.959" name="dbroot" dev="configfs" ino=87755 res=0 errno=0 [ 522.961582][T12578] openvswitch: netlink: IPv4 tunnel dst address is zero [ 525.045446][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 525.355846][T12620] nbd: must specify a device to reconfigure [ 525.443796][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.965'. [ 525.948752][T12641] nbd: must specify a device to reconfigure [ 527.456743][T12658] futex_wake_op: syz.0.971 tries to shift op by -2048; fix this program [ 527.478859][ T30] audit: type=1800 audit(1785663261.588:147): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.972" name="members" dev="configfs" ino=89211 res=0 errno=0 [ 527.514505][T12658] 0x000000000000-0x000000020000 : "" [ 527.577528][ T30] audit: type=1800 audit(1785663261.678:148): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.972" name="dbroot" dev="configfs" ino=90181 res=0 errno=0 [ 527.606459][T12651] openvswitch: netlink: IPv4 tunnel dst address is zero [ 527.644165][T12658] ftl_cs: FTL header not found. [ 528.308948][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 529.740898][T12705] futex_wake_op: syz.2.980 tries to shift op by -2048; fix this program [ 529.783997][T12705] 0x000000000000-0x000000020000 : "" [ 529.872600][T12705] ftl_cs: FTL header not found. [ 531.670182][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 531.755096][ T30] audit: type=1800 audit(1785663265.858:149): pid=12729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.983" name="members" dev="configfs" ino=90585 res=0 errno=0 [ 531.829286][ T30] audit: type=1800 audit(1785663265.938:150): pid=12719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.983" name="dbroot" dev="configfs" ino=90605 res=0 errno=0 [ 531.861680][T12719] openvswitch: netlink: IPv4 tunnel dst address is zero [ 533.620215][T12755] futex_wake_op: syz.0.986 tries to shift op by -2048; fix this program [ 533.630556][T12755] 0x000000000000-0x000000020000 : "" [ 533.659917][T12755] ftl_cs: FTL header not found. [ 535.940623][ T30] audit: type=1800 audit(1785663270.048:151): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.990" name="features" dev="configfs" ino=90987 res=0 errno=0 [ 536.112410][T12799] nbd: must specify a device to reconfigure [ 537.442276][ T30] audit: type=1800 audit(1785663271.548:152): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.995" name="members" dev="configfs" ino=91088 res=0 errno=0 [ 537.493950][ T30] audit: type=1800 audit(1785663271.598:153): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.995" name="dbroot" dev="configfs" ino=91094 res=0 errno=0 [ 537.521020][T12804] openvswitch: netlink: IPv4 tunnel dst address is zero [ 537.992097][T12827] nbd: must specify a device to reconfigure [ 540.222965][T12854] futex_wake_op: syz.2.1000 tries to shift op by -2048; fix this program [ 540.262237][T12854] 0x000000000000-0x000000020000 : "" [ 540.285910][T12854] ftl_cs: FTL header not found. [ 542.582077][ T30] audit: type=1800 audit(1785663276.688:154): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1006" name="members" dev="configfs" ino=91660 res=0 errno=0 [ 542.678549][ T30] audit: type=1800 audit(1785663276.788:155): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1006" name="dbroot" dev="configfs" ino=91669 res=0 errno=0 [ 542.703650][T12880] openvswitch: netlink: IPv4 tunnel dst address is zero [ 542.899692][T12897] nbd: must specify a device to reconfigure [ 543.767615][ T30] audit: type=1800 audit(1785663277.868:156): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1008" name="features" dev="configfs" ino=91793 res=0 errno=0 [ 545.026264][T12925] nbd: must specify a device to reconfigure [ 545.816856][T12938] nbd: must specify a device to reconfigure [ 545.914281][ T30] audit: type=1800 audit(1785663280.018:157): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1012" name="features" dev="configfs" ino=92871 res=0 errno=0 [ 546.283323][ T30] audit: type=1800 audit(1785663280.388:158): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1013" name="members" dev="configfs" ino=91958 res=0 errno=0 [ 546.380143][ T30] audit: type=1800 audit(1785663280.488:159): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1013" name="dbroot" dev="configfs" ino=91962 res=0 errno=0 [ 546.398990][T12942] openvswitch: netlink: IPv4 tunnel dst address is zero [ 547.687591][T12966] nbd: must specify a device to reconfigure [ 547.712904][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 549.287433][T12981] nbd: must specify a device to reconfigure [ 553.490918][ T30] audit: type=1800 audit(1785663287.598:160): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1027" name="members" dev="configfs" ino=93559 res=0 errno=0 [ 553.553076][T13039] openvswitch: netlink: IPv4 tunnel dst address is zero [ 553.563302][ T30] audit: type=1800 audit(1785663287.658:161): pid=13039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1027" name="dbroot" dev="configfs" ino=93576 res=0 errno=0 [ 553.813227][ T30] audit: type=1800 audit(1785663287.918:162): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1025" name="features" dev="configfs" ino=93612 res=0 errno=0 [ 555.742475][T13085] nbd: must specify a device to reconfigure [ 555.859578][T13087] nbd: must specify a device to reconfigure [ 555.996192][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 557.326920][T13097] nbd: must specify a device to reconfigure [ 557.618899][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 557.816037][T13118] i2c i2c-0: new_device: Missing parameters [ 558.905225][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 561.659514][T13168] nbd: must specify a device to reconfigure [ 561.745631][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 563.010115][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.023255][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.919371][ T30] audit: type=1800 audit(1785663301.028:163): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1057" name="members" dev="configfs" ino=95813 res=0 errno=0 [ 567.006483][ T30] audit: type=1800 audit(1785663301.108:164): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1057" name="dbroot" dev="configfs" ino=95822 res=0 errno=0 [ 567.032112][T13243] openvswitch: netlink: IPv4 tunnel dst address is zero [ 567.195273][T13254] nbd: must specify a device to reconfigure [ 567.226387][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 568.246229][T13262] nbd: must specify a device to reconfigure [ 568.291874][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 569.786610][T13292] nbd: must specify a device to reconfigure [ 569.829073][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 571.284752][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 571.515445][ T30] audit: type=1800 audit(1785663305.618:165): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1067" name="members" dev="configfs" ino=97014 res=0 errno=0 [ 571.638937][ T30] audit: type=1800 audit(1785663305.748:166): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1067" name="dbroot" dev="configfs" ino=97303 res=0 errno=0 [ 571.654069][T13307] openvswitch: netlink: IPv4 tunnel dst address is zero [ 571.707155][T13316] i2c i2c-0: new_device: Missing parameters [ 573.654812][T13346] nbd: must specify a device to reconfigure [ 573.681443][T13344] nbd: must specify a device to reconfigure [ 573.706498][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 573.748089][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 575.590294][T13371] nbd: must specify a device to reconfigure [ 576.070415][T13382] nbd: must specify a device to reconfigure [ 576.138387][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'. [ 577.319538][ T30] audit: type=1800 audit(1785663311.428:167): pid=13390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1077" name="members" dev="configfs" ino=98621 res=0 errno=0 [ 577.425778][ T30] audit: type=1800 audit(1785663311.528:168): pid=13385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1077" name="dbroot" dev="configfs" ino=97645 res=0 errno=0 [ 577.455882][T13385] openvswitch: netlink: IPv4 tunnel dst address is zero [ 579.763367][T13438] nbd: must specify a device to reconfigure [ 579.917040][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 581.363496][ T30] audit: type=1800 audit(1785663315.468:169): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1085" name="members" dev="configfs" ino=98871 res=0 errno=0 [ 581.531912][ T30] audit: type=1800 audit(1785663315.638:170): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1085" name="dbroot" dev="configfs" ino=98887 res=0 errno=0 [ 581.563019][T13444] openvswitch: netlink: IPv4 tunnel dst address is zero [ 581.582146][T13447] openvswitch: netlink: IPv4 tunnel dst address is zero [ 581.628308][T13457] nbd: must specify a device to reconfigure [ 581.650808][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 582.404260][ T30] audit: type=1800 audit(1785663316.508:171): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1090" name="members" dev="configfs" ino=98143 res=0 errno=0 [ 582.566492][ T30] audit: type=1800 audit(1785663316.668:172): pid=13471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1090" name="dbroot" dev="configfs" ino=98151 res=0 errno=0 [ 582.573533][T13471] openvswitch: netlink: IPv4 tunnel dst address is zero [ 582.739300][T13482] nbd: must specify a device to reconfigure [ 582.766773][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 582.792950][T13483] nbd: must specify a device to reconfigure [ 582.867604][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 583.011472][T13487] FAULT_INJECTION: forcing a failure. [ 583.011472][T13487] name failslab, interval 1, probability 0, space 0, times 1 [ 583.028109][T13487] CPU: 1 UID: 0 PID: 13487 Comm: syz.2.1091 Not tainted syzkaller #0 PREEMPT(full) [ 583.028151][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.028183][T13487] Call Trace: [ 583.028194][T13487] [ 583.028211][T13487] dump_stack_lvl+0x100/0x190 [ 583.028324][T13487] should_fail_ex.cold+0x5/0xa [ 583.028380][T13487] should_failslab+0xc2/0x120 [ 583.028458][T13487] __kmalloc_cache_noprof+0x91/0x6c0 [ 583.028498][T13487] ? __lock_acquire+0x49f/0x1a40 [ 583.028570][T13487] ? resv_map_alloc+0x7e/0x400 [ 583.028639][T13487] resv_map_alloc+0x7e/0x400 [ 583.028693][T13487] hugetlbfs_get_inode+0x385/0x700 [ 583.028826][T13487] ? do_raw_spin_lock+0x128/0x260 [ 583.028869][T13487] hugetlb_file_setup+0x15b/0x5b0 [ 583.028918][T13487] memfd_alloc_file+0xc2/0x610 [ 583.028981][T13487] ? _raw_spin_unlock+0x28/0x50 [ 583.029099][T13487] ? __pfx_memfd_alloc_file+0x10/0x10 [ 583.029162][T13487] __do_sys_memfd_create+0x236/0x3d0 [ 583.029215][T13487] do_syscall_64+0x115/0x840 [ 583.029316][T13487] ? clear_bhb_loop+0x40/0x90 [ 583.029369][T13487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.029403][T13487] RIP: 0033:0x7fd54a59e019 [ 583.029436][T13487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.029469][T13487] RSP: 002b:00007fd5487f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 583.029525][T13487] RAX: ffffffffffffffda RBX: 00007fd54a826090 RCX: 00007fd54a59e019 [ 583.029548][T13487] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 583.029567][T13487] RBP: 00007fd54a63500c R08: 0000000000000000 R09: 0000000000000000 [ 583.029587][T13487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.029607][T13487] R13: 00007fd54a826128 R14: 00007fd54a826090 R15: 00007ffe560aa888 [ 583.029650][T13487] [ 587.214107][T13539] FAULT_INJECTION: forcing a failure. [ 587.214107][T13539] name fail_futex, interval 1, probability 0, space 0, times 1 [ 587.261578][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.3.1098 Not tainted syzkaller #0 PREEMPT(full) [ 587.261624][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.261644][T13539] Call Trace: [ 587.261655][T13539] [ 587.261668][T13539] dump_stack_lvl+0x100/0x190 [ 587.261715][T13539] should_fail_ex.cold+0x5/0xa [ 587.261755][T13539] get_futex_key+0x1d2/0x14f0 [ 587.261846][T13539] ? __pfx_get_futex_key+0x10/0x10 [ 587.261881][T13539] ? __pfx_futex_hash+0x10/0x10 [ 587.261927][T13539] futex_wake+0xf4/0x5e0 [ 587.261970][T13539] ? futex_wait+0x11e/0x370 [ 587.262019][T13539] ? __pfx___up_read+0x10/0x10 [ 587.262069][T13539] ? __pfx_futex_wake+0x10/0x10 [ 587.262124][T13539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 587.262190][T13539] do_futex+0x2b2/0x440 [ 587.262228][T13539] ? __pfx_do_futex+0x10/0x10 [ 587.262268][T13539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 587.262393][T13539] __x64_sys_futex+0x34f/0x4d0 [ 587.262437][T13539] ? __pfx___x64_sys_futex+0x10/0x10 [ 587.262492][T13539] do_syscall_64+0x115/0x840 [ 587.262536][T13539] ? clear_bhb_loop+0x40/0x90 [ 587.262577][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.262612][T13539] RIP: 0033:0x7faea3f9e019 [ 587.262639][T13539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.262670][T13539] RSP: 002b:00007faea21f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 587.262701][T13539] RAX: ffffffffffffffda RBX: 00007faea4225fa8 RCX: 00007faea3f9e019 [ 587.262723][T13539] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faea4225fac [ 587.262743][T13539] RBP: 00007faea4225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 587.262763][T13539] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 587.262784][T13539] R13: 00007faea4226038 R14: 00007ffc884801b0 R15: 00007ffc88480298 [ 587.262826][T13539] [ 588.945974][ T30] audit: type=1800 audit(1785663323.048:173): pid=13559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1102" name="members" dev="configfs" ino=99647 res=0 errno=0 [ 588.993548][T13559] openvswitch: netlink: IPv4 tunnel dst address is zero [ 589.014966][ T30] audit: type=1800 audit(1785663323.088:174): pid=13559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1102" name="dbroot" dev="configfs" ino=100529 res=0 errno=0 [ 589.708138][T13577] nbd: must specify a device to reconfigure [ 589.770536][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 591.905904][T13620] i2c i2c-0: new_device: Missing parameters [ 593.394202][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 594.103301][T13654] nbd: must specify a device to reconfigure [ 594.201469][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 595.409148][ T30] audit: type=1800 audit(1785663329.508:175): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1120" name="members" dev="configfs" ino=100124 res=0 errno=0 [ 595.613444][ T30] audit: type=1800 audit(1785663329.718:176): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1120" name="dbroot" dev="configfs" ino=100171 res=0 errno=0 [ 595.642119][T13662] openvswitch: netlink: IPv4 tunnel dst address is zero [ 595.689587][T13669] openvswitch: netlink: IPv4 tunnel dst address is zero [ 595.820784][T13678] i2c i2c-0: new_device: Missing parameters [ 596.547185][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 600.482684][T13760] i2c i2c-0: new_device: Missing parameters [ 600.774189][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 602.364345][ T30] audit: type=1800 audit(1785663336.468:177): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1141" name="members" dev="configfs" ino=102806 res=0 errno=0 [ 602.408045][T13789] mmap: syz.1.1140 (13789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 602.477205][ T30] audit: type=1800 audit(1785663336.578:178): pid=13785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1141" name="dbroot" dev="configfs" ino=102816 res=0 errno=0 [ 602.523676][T13785] openvswitch: netlink: IPv4 tunnel dst address is zero [ 603.591859][T13806] process 'syz.0.1143' launched './file0' with NULL argv: empty string added [ 604.116522][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 604.514709][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 605.005647][T13838] i2c i2c-0: new_device: Missing parameters [ 605.042082][T13827] vivid-007: ================= START STATUS ================= [ 605.064150][T13827] vivid-007: Generate PTS: true [ 605.071451][T13827] vivid-007: Generate SCR: true [ 605.077649][T13827] tpg source WxH: 320x240 (Y'CbCr) [ 605.084502][T13827] tpg field: 1 [ 605.088239][T13827] tpg crop: (0,0)/320x240 [ 605.093282][T13827] tpg compose: (0,0)/320x240 [ 605.098689][T13827] tpg colorspace: 8 [ 605.102586][T13827] tpg transfer function: 0/0 [ 605.107360][T13827] tpg Y'CbCr encoding: 0/0 [ 605.127674][T13827] tpg quantization: 0/0 [ 605.135813][T13827] tpg RGB range: 0/2 [ 605.140103][T13827] vivid-007: ================== END STATUS ================== [ 605.363560][T13848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 606.875221][ T30] audit: type=1800 audit(1785663340.978:179): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1155" name="members" dev="configfs" ino=102139 res=0 errno=0 [ 606.900054][T13878] nbd: must specify a device to reconfigure [ 606.957502][T13874] openvswitch: netlink: IPv4 tunnel dst address is zero [ 606.974626][ T30] audit: type=1800 audit(1785663341.048:180): pid=13874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1155" name="dbroot" dev="configfs" ino=102143 res=0 errno=0 [ 607.716056][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'. [ 608.407624][T13906] capability: warning: `syz.0.1160' uses deprecated v2 capabilities in a way that may be insecure [ 609.038207][T13919] i2c i2c-0: new_device: Missing parameters [ 611.248671][ T30] audit: type=1800 audit(1785663345.348:181): pid=13950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1166" name="members" dev="configfs" ino=104522 res=0 errno=0 [ 611.295037][ T30] audit: type=1800 audit(1785663345.398:182): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1166" name="dbroot" dev="configfs" ino=103604 res=0 errno=0 [ 611.306181][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 611.324606][T13948] openvswitch: netlink: IPv4 tunnel dst address is zero [ 611.478336][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 611.939730][T13974] nbd: must specify a device to reconfigure [ 613.019137][T13985] i2c i2c-0: new_device: Missing parameters [ 613.387186][T13995] syz.1.1176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 613.542653][T13995] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 614.013666][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 614.376658][ T30] audit: type=1800 audit(1785663348.478:183): pid=14019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1180" name="members" dev="configfs" ino=104874 res=0 errno=0 [ 614.398850][T14019] openvswitch: netlink: IPv4 tunnel dst address is zero [ 614.428029][ T30] audit: type=1800 audit(1785663348.498:184): pid=14019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1180" name="dbroot" dev="configfs" ino=104878 res=0 errno=0 [ 615.355559][T14032] binder: 14031:14032 ioctl c018620c 200000000580 returned -22 [ 617.003726][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 617.292888][T14049] i2c i2c-0: new_device: Missing parameters [ 619.237377][ T30] audit: type=1800 audit(1785663353.338:185): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1192" name="members" dev="configfs" ino=105198 res=0 errno=0 [ 619.275133][ T30] audit: type=1800 audit(1785663353.378:186): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1192" name="dbroot" dev="configfs" ino=105202 res=0 errno=0 [ 619.275354][T14091] openvswitch: netlink: IPv4 tunnel dst address is zero [ 619.702001][ T30] audit: type=1800 audit(1785663353.808:187): pid=14096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1193" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 620.167177][T14106] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1196'. [ 620.457225][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 622.461083][T14150] FAULT_INJECTION: forcing a failure. [ 622.461083][T14150] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 622.494810][T14150] CPU: 0 UID: 0 PID: 14150 Comm: syz.0.1198 Not tainted syzkaller #0 PREEMPT(full) [ 622.494849][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.494867][T14150] Call Trace: [ 622.494877][T14150] [ 622.494889][T14150] dump_stack_lvl+0x100/0x190 [ 622.494930][T14150] should_fail_ex.cold+0x5/0xa [ 622.494984][T14150] _copy_to_user+0x32/0xd0 [ 622.495175][T14150] simple_read_from_buffer+0xcb/0x170 [ 622.495297][T14150] proc_fail_nth_read+0x1af/0x230 [ 622.495386][T14150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.495435][T14150] ? rw_verify_area+0xce/0x6d0 [ 622.495485][T14150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.495530][T14150] vfs_read+0x1e4/0xb40 [ 622.495567][T14150] ? __pfx_vfs_read+0x10/0x10 [ 622.495596][T14150] ? __fget_files+0x215/0x3d0 [ 622.495636][T14150] ? __fget_files+0x21f/0x3d0 [ 622.495679][T14150] ksys_read+0x12a/0x250 [ 622.495710][T14150] ? __pfx_ksys_read+0x10/0x10 [ 622.495757][T14150] do_syscall_64+0x115/0x840 [ 622.495801][T14150] ? clear_bhb_loop+0x40/0x90 [ 622.495841][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.495875][T14150] RIP: 0033:0x7fc44cf5e84e [ 622.495902][T14150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.495932][T14150] RSP: 002b:00007fc44b1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.495962][T14150] RAX: ffffffffffffffda RBX: 00007fc44b1f66c0 RCX: 00007fc44cf5e84e [ 622.495983][T14150] RDX: 000000000000000f RSI: 00007fc44b1f60a0 RDI: 0000000000000006 [ 622.496001][T14150] RBP: 00007fc44b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 622.496019][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.496037][T14150] R13: 00007fc44d2264e8 R14: 00007fc44d226450 R15: 00007fff18bb6808 [ 622.496076][T14150] [ 622.789884][T14158] i2c i2c-0: new_device: Missing parameters [ 622.823183][T14154] nbd: must specify a device to reconfigure [ 624.142618][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 624.151722][ T30] audit: type=1800 audit(1785663358.248:188): pid=14176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1205" name="members" dev="configfs" ino=105945 res=0 errno=0 [ 624.193455][ T30] audit: type=1800 audit(1785663358.298:189): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1205" name="dbroot" dev="configfs" ino=106560 res=0 errno=0 [ 624.219492][T14169] openvswitch: netlink: IPv4 tunnel dst address is zero [ 624.450682][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.461123][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.988798][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 625.545741][T14220] i2c i2c-0: new_device: Missing parameters [ 627.077101][T14228] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 627.416706][T14238] nbd: must specify a device to reconfigure [ 627.561475][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 627.843996][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 630.014299][T14284] i2c i2c-0: new_device: Missing parameters [ 631.546013][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 632.157743][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 632.231545][T14321] nbd: must specify a device to reconfigure [ 633.145464][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 634.446702][T14360] i2c i2c-0: new_device: Missing parameters [ 636.648386][T14397] FAULT_INJECTION: forcing a failure. [ 636.648386][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 636.682841][T14397] CPU: 1 UID: 0 PID: 14397 Comm: syz.3.1239 Not tainted syzkaller #0 PREEMPT(full) [ 636.682880][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.682898][T14397] Call Trace: [ 636.682908][T14397] [ 636.682919][T14397] dump_stack_lvl+0x100/0x190 [ 636.682960][T14397] should_fail_ex.cold+0x5/0xa [ 636.682996][T14397] should_failslab+0xc2/0x120 [ 636.683042][T14397] __kmalloc_noprof+0xfc/0x820 [ 636.683080][T14397] ? rcu_is_watching+0x12/0xc0 [ 636.683160][T14397] ? tomoyo_realpath_from_path+0xb6/0x690 [ 636.683329][T14397] tomoyo_realpath_from_path+0xb6/0x690 [ 636.683387][T14397] tomoyo_path_number_perm+0x23c/0x580 [ 636.683447][T14397] ? tomoyo_path_number_perm+0x22e/0x580 [ 636.683492][T14397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 636.683575][T14397] ? find_held_lock+0x2b/0x80 [ 636.683612][T14397] ? __fget_files+0x215/0x3d0 [ 636.683639][T14397] ? hook_file_ioctl_common+0x140/0x440 [ 636.683721][T14397] ? __fget_files+0x215/0x3d0 [ 636.683759][T14397] ? __fget_files+0x21f/0x3d0 [ 636.683797][T14397] security_file_ioctl+0xd3/0x230 [ 636.683865][T14397] __x64_sys_ioctl+0xb7/0x210 [ 636.683916][T14397] do_syscall_64+0x115/0x840 [ 636.683960][T14397] ? clear_bhb_loop+0x40/0x90 [ 636.684001][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.684035][T14397] RIP: 0033:0x7faea3f9e019 [ 636.684062][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.684092][T14397] RSP: 002b:00007faea21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.684123][T14397] RAX: ffffffffffffffda RBX: 00007faea4225fa0 RCX: 00007faea3f9e019 [ 636.684144][T14397] RDX: 0000000000000000 RSI: 000000008004ae98 RDI: 0000000000000004 [ 636.684162][T14397] RBP: 00007faea21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 636.684184][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.684203][T14397] R13: 00007faea4226038 R14: 00007faea4225fa0 R15: 00007ffc88480298 [ 636.684244][T14397] [ 636.684286][T14397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 638.726260][T14429] nbd: must specify a device to reconfigure [ 638.961455][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 640.695247][T14438] blktrace: Concurrent blktraces are not allowed on ram1 [ 642.372506][T14481] FAULT_INJECTION: forcing a failure. [ 642.372506][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 642.409913][T14481] CPU: 1 UID: 0 PID: 14481 Comm: syz.0.1252 Not tainted syzkaller #0 PREEMPT(full) [ 642.409952][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.409969][T14481] Call Trace: [ 642.409978][T14481] [ 642.410007][T14481] dump_stack_lvl+0x100/0x190 [ 642.410051][T14481] should_fail_ex.cold+0x5/0xa [ 642.410087][T14481] should_failslab+0xc2/0x120 [ 642.410133][T14481] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 642.410175][T14481] ? copy_process+0x69a/0x8030 [ 642.410258][T14481] copy_process+0x69a/0x8030 [ 642.410297][T14481] ? __lock_acquire+0x49f/0x1a40 [ 642.410359][T14481] ? __pfx_copy_process+0x10/0x10 [ 642.410395][T14481] ? find_held_lock+0x2b/0x80 [ 642.410447][T14481] kernel_clone+0x176/0x9d0 [ 642.410487][T14481] ? find_held_lock+0x2b/0x80 [ 642.410538][T14481] ? __pfx_kernel_clone+0x10/0x10 [ 642.410581][T14481] ? ksys_write+0x190/0x250 [ 642.410619][T14481] __do_sys_clone+0xd9/0x120 [ 642.410655][T14481] ? __pfx___do_sys_clone+0x10/0x10 [ 642.410689][T14481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 642.410748][T14481] ? ksys_write+0x1ac/0x250 [ 642.410776][T14481] ? __pfx_ksys_write+0x10/0x10 [ 642.410814][T14481] do_syscall_64+0x115/0x840 [ 642.410852][T14481] ? clear_bhb_loop+0x40/0x90 [ 642.410889][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.410919][T14481] RIP: 0033:0x7fc44cf9e019 [ 642.410944][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.410971][T14481] RSP: 002b:00007fc44de1bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 642.410999][T14481] RAX: ffffffffffffffda RBX: 00007fc44d225fa0 RCX: 00007fc44cf9e019 [ 642.411017][T14481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 642.411034][T14481] RBP: 00007fc44de1c090 R08: 0000000000000000 R09: 0000000000000000 [ 642.411050][T14481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 642.411067][T14481] R13: 00007fc44d226038 R14: 00007fc44d225fa0 R15: 00007fff18bb6808 [ 642.411103][T14481] [ 642.979676][T14493] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 645.303958][T14525] nbd: must specify a device to reconfigure [ 646.874268][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 649.378068][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.663469][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.843510][T14597] nbd: must specify a device to reconfigure [ 649.914532][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.167399][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.177702][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.189886][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.199313][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.211347][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.274772][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.195717][ T13] bridge_slave_1: left allmulticast mode [ 651.212493][ T13] bridge_slave_1: left promiscuous mode [ 651.230199][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.261256][ T13] bridge_slave_0: left allmulticast mode [ 651.267837][ T13] bridge_slave_0: left promiscuous mode [ 651.275345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.374641][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 651.628218][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.642307][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.655085][ T13] bond0 (unregistering): Released all slaves [ 651.954952][T14638] BUG: unable to handle page fault for address: ffffc900146e9fe8 [ 651.962750][T14638] #PF: supervisor write access in kernel mode [ 651.968856][T14638] #PF: error_code(0x0002) - not-present page [ 651.974875][T14638] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 71d75067 PTE 0 [ 651.982470][T14638] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 651.987906][T14638] CPU: 0 UID: 0 PID: 14638 Comm: syz.2.1274 Not tainted syzkaller #0 PREEMPT(full) [ 651.997327][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.007431][T14638] RIP: 0010:write_comp_data+0x75/0x90 [ 652.012879][T14638] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 652.032585][T14638] RSP: 0018:ffffc9000c477e78 EFLAGS: 00050257 [ 652.038709][T14638] RAX: ffffc900146ea000 RBX: 0000000000000000 RCX: ffffffff82458a75 [ 652.046732][T14638] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 652.054747][T14638] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 652.062845][T14638] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 652.070866][T14638] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 652.078884][T14638] FS: 00007fd547b6c6c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 652.087878][T14638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.094513][T14638] CR2: ffffc900146e9fe8 CR3: 0000000071fc4000 CR4: 00000000003526f0 [ 652.102537][T14638] Call Trace: [ 652.105852][T14638] [ 652.108815][T14638] rseq_register+0x115/0x350 [ 652.113534][T14638] __x64_sys_rseq+0x1b8/0x2e0 [ 652.118285][T14638] do_syscall_64+0x115/0x840 [ 652.122941][T14638] ? clear_bhb_loop+0x40/0x90 [ 652.127677][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.133616][T14638] RIP: 0033:0x7fd54a59e019 [ 652.138073][T14638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.157730][T14638] RSP: 002b:00007fd547b6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 652.166184][T14638] RAX: ffffffffffffffda RBX: 00007fd54a826450 RCX: 00007fd54a59e019 [ 652.174183][T14638] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 652.182189][T14638] RBP: 00007fd54a63500c R08: 0000000000000000 R09: 0000000000000000 [ 652.190183][T14638] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 652.198172][T14638] R13: 00007fd54a8264e8 R14: 00007fd54a826450 R15: 00007ffe560aa888 [ 652.206179][T14638] [ 652.209253][T14638] Modules linked in: [ 652.213185][T14638] CR2: ffffc900146e9fe8 [ 652.217381][T14638] ---[ end trace 0000000000000000 ]--- [ 652.222858][T14638] RIP: 0010:write_comp_data+0x75/0x90 [ 652.228278][T14638] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 652.247927][T14638] RSP: 0018:ffffc9000c477e78 EFLAGS: 00050257 [ 652.254019][T14638] RAX: ffffc900146ea000 RBX: 0000000000000000 RCX: ffffffff82458a75 [ 652.262009][T14638] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 652.270008][T14638] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 652.277998][T14638] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 652.285988][T14638] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 652.293984][T14638] FS: 00007fd547b6c6c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 652.302945][T14638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.309554][T14638] CR2: ffffc900146e9fe8 CR3: 0000000071fc4000 CR4: 00000000003526f0 [ 652.317598][T14638] Kernel panic - not syncing: Fatal exception [ 652.324289][T14638] Kernel Offset: disabled [ 652.328659][T14638] Rebooting in 86400 seconds..