last executing test programs: 1m19.036378869s ago: executing program 0 (id=246): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x9) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) ioctl$auto(r2, 0x40085618, r2) 1m18.232287459s ago: executing program 0 (id=256): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) (async) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x4, 0x8, 0x100, 0xffffffffffffffff, 0x2, 0x8}, 0x100000ce) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = socket(0x29, 0x2, 0x0) (async) r5 = socket(0x10, 0x5, 0x0) (async) recvfrom$auto(r3, &(0x7f0000000280)="87919d77a659c4e9f9e059b1edb08fa756aa983cdf59d4eea12cdfe29f8f7b65d09a54dcee70d989bd851299b9021bcd00caaee667429e038e24da0743e380f57139414ad79c290888af88d51551bd2617cd7f55fd73e5e1ea73d7ed04b104ec927965594c017692f5e03a8d693c67524307955e5989f90c80421c7680710c2de51a1a89798a4c081d8d94b20c163671632a98d4388b872d2c98f19facc0f67a8b451f912180ee929dfc2f4c1d3a54c10eb2a2ad41a22a1148f7a4f62dfd86cc44e00829685eda0e4e3beb31f4", 0xa, 0xf98, &(0x7f00000000c0)=@hci={0x1f, 0x3, 0x1}, &(0x7f00000001c0)=0xbee) (async) r6 = socket(0xa, 0x3, 0x3a) (async) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) preadv$auto(0x40000000000003, 0x0, 0x8, 0xe27c, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0xffffffffffffffff, 0x0, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x48000) ioctl$auto(r6, 0x8936, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) setsockopt$auto(r4, 0x0, 0x3, &(0x7f0000000200)='&*&{[(:+\x00', 0x2bb) ioctl$auto(r4, 0x89f1, 0x24) 1m17.859811309s ago: executing program 0 (id=250): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000002100)=""/4099, 0x1003) rt_sigtimedwait$auto(0x0, &(0x7f0000000300)={@siginfo_0_0={0x0, 0x3, 0x0, @_sigpoll={0xc8}}}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x82, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x6100, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) ioctl$auto_FIOASYNC(r2, 0x5452, 0x1000) r3 = io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x2, 0x1, 0x106) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x440, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r5 = socket(0x11, 0x2, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(r3, 0x40806685, &(0x7f0000000140)={0x1, 0xb773, 0x9, 0x5, 0x6, 0x200, 0x0, 0x1ff}) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x680, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xb1, 0x1, 0x0, 0x1, [@generic="f5c53c7461b64f8c60fb90f69a1d13d52d6da3527ec7b5be48e686e7364c12793198cdcb6a78253c3bdd7916ced602b5b19762a916baa53c0411bfbf1477407c42963b5791e719e91567d82c697af89370f6f7872979c6713c9b4265a481e529d40b485bc24dac0ed112ebaf8e0f59b20e48f9cffcaa0bed04dad70c00c2d584eb40a6d01a4f463f88d47ae307e73bfd4123c7765a43faedde7088214666ba0cf2c894acec", @typed={0x8, 0x5c, 0x0, 0x0, @fd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x5b0, 0x2, 0x0, 0x1, [@nested={0x5ac, 0xda, 0x0, 0x1, [@typed={0x4, 0x9f}, @generic="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"]}]}]}, 0x680}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) write$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)="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", 0x4bf) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:+\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0xffffffffffffffff, 0x1, 0x2}) stat$auto(0x0, &(0x7f0000000100)={0xfffffffffffffff7, 0x2, 0x8c0, 0x40d, 0xee00, r3, 0x0, 0x1, 0x0, 0x2, 0xe, 0x2, 0x4, 0x5, 0xf6b, 0x8, 0x8}) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x101, 0x31, 0x7fff, 0x800000005, 0x2, 0xdbe, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x11}) sendfile$auto(r1, r1, 0x0, 0x200) 1m15.659557532s ago: executing program 32 (id=257): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/13/spurious\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/178, 0xb2) syz_clone(0x184f800, &(0x7f0000000080)="1545018ef88f25e878278f579f6770ffb7cda636d8085c7fb8f46ffa126c3a80ddca49a20e68d832f3974d6433226eeb47c327bde6570475c27e289b544c795a780a4d5ed4163ed8e40849f6ca65d0b1b37267e8e9c1af2557f1f53fb550fc7a3ccc6a30310097543a00be8d1fe68c7c", 0x70, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)="f3d68c6224613993b96670218b79ece2ff7274642d7d0861231ea51c63ba94a532b17c4efaa9766bc287f9c35b7856b07ba4f0f04262f0c5146d946d52cabc25c7abbee0e5a3b633a698ee77d17c63c7a8e9e925a95cbc8f1631abb57bc1757923707a11b47ff2f0db077893ac646a03a4c6ff0086a00842346d148fa5efdf4c9c15d0e20b1d9ec36ffef3ef29599c0b7097d57af2ef48baa1098b46e1f77cd24d0de9bef60389aac5ed2615ab89e5d5a3a43226162c358abc37916e7ce134b2e319") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd7/queue/read_ahead_kb\x00', 0x82342, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)={0x9, 0xffffffffffffffff, 0x1, 0x2}) stat$auto(0x0, &(0x7f0000000100)={0xfffffffffffffff7, 0x2, 0x8c0, 0x40d, 0xee00, r3, 0x0, 0x1, 0x0, 0x2, 0xe, 0x2, 0x4, 0x5, 0xf6b, 0x8, 0x8}) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x101, 0x31, 0x7fff, 0x800000005, 0x2, 0xdbe, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x11}) sendfile$auto(r1, r1, 0x0, 0x200) 6.805930561s ago: executing program 2 (id=586): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x200009b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x20007, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f7382854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2002, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f00000001c0)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x81}, 0x8}, 0x203, 0x0) setsockopt$auto(0x3, 0x6b, 0x1, 0x0, 0xfb3) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, 0x0) prctl$auto(0x10861002, 0x1, r2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/batadv0/mc_forwarding\x00', 0x2, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nullb0/hctx0/cpu1/default_rq_list\x00', 0x20000, 0x0) r3 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/rc/fixed_rate_idx\x00', 0x0, 0x0) writev$auto(r3, &(0x7f0000000180)={0x0, 0x2000000}, 0x66) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) 6.224098318s ago: executing program 3 (id=588): close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) 5.851285328s ago: executing program 3 (id=589): mmap$auto(0x0, 0x4020009, 0xdf, 0x17, 0xffffffffffffffff, 0xc) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000000)="0b2b09dd6f6b129be2875e5793360cbc2a02e477886125ce7a37eae9425e8b45f887921e5be23186236c4a367cbdbb74e774885a2582cd11c5040fb8a74b01ebaff0df7f665126d6ba8f", 0x8) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xf, 0x0, 0x94e) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) (async) r2 = fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) mmap$auto(0x0, 0xfffffffffffffff1, 0x2, 0x17, r2, 0x8000) (async) mmap$auto(0x0, 0xfffffffffffffff1, 0x2, 0x17, r2, 0x8000) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x0, 0x8}, "654c6dbc7a4d30983899a7e1325bc3ccf1bf00"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x9f7d, 0xfffffff1, 0x101, 0x6, 0x4, "1ec4c2336d0d5d8a5db102d8cd84eca696782c75e0cb2d4b8c400f6fdc12a84264800d00000035a29c7c1ebbdcd2fe5c88e17422928a5110f6e9fef8cac28588"}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) read$auto(r4, &(0x7f0000000140)='\x00\xd8\x1ed.\x0e\x92\x19\xa0\xedP\xaf\xce-\xa9\x86\xc5\x97\xdcLG\xb7\x85L\xd3\x98\x18l\x9d\xddv\xa1\fM\x92\x89\xe71j\x8b\xdf\xcd%\x9fQ\x8f\x91\xd8\b\a\xf3\xe2\xd8<\xe4\x94\xa9\xb3\xff54\xec\x1b>\xce\x95\x9aN\xe3\xe7\xe8', 0xc0ec) socket(0x1e, 0x3, 0x3b) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\xa5$\x03\xcb\x12\xfa\b\x1c\tk', 0x81) (async) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\xa5$\x03\xcb\x12\xfa\b\x1c\tk', 0x81) fstatfs$auto(r2, &(0x7f00000000c0)={0x391, 0x1, 0x6, 0x1, 0x4, 0x4, 0x4, {[0x9, 0x3]}, 0x8, 0xfffffffffffffffe, 0x0, [0x1000, 0x6b24002f, 0x7, 0xfffffffffffffffb]}) (async) fstatfs$auto(r2, &(0x7f00000000c0)={0x391, 0x1, 0x6, 0x1, 0x4, 0x4, 0x4, {[0x9, 0x3]}, 0x8, 0xfffffffffffffffe, 0x0, [0x1000, 0x6b24002f, 0x7, 0xfffffffffffffffb]}) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x356800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="98000000", @ANYRES32=0x0, @ANYRES16=r4, @ANYRESDEC, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000100008054000180080003000300000008000100", @ANYRESOCT, @ANYBLOB="1400020073797a6b616c6c6572310000000000001400020076657468315f746f5f626f6e64000000080003000010000008000300020000000800030007000000"], 0x98}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000090) 5.748545021s ago: executing program 2 (id=590): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = memfd_secret$auto(0x2) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(r1, 0x0, 0x8080) unshare$auto(0x40000080) fsconfig$auto(r1, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe", 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) read$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x10000000003, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xfff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x3, 0x4) io_uring_setup$auto(0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_LEAVES={0x8, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0x4}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x10000, 0x0) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000200)=@bpf_attr_0={0x3, 0xfffffffb, 0x6, 0x800, 0x0, r0, 0x1, "c4d7afdae6a2b553440487258a719b3b", r6, r0, 0x0, 0x401, 0x65d, 0x5, r3, r7}, 0x10) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x400, 0x0) ioctl$auto(r8, 0x921064ad, 0xffffffffffffffff) 4.162898783s ago: executing program 3 (id=599): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000540)="c0023aaa049bfa1bca9a20377b0aa88f00000000b2791c8051801793a0ebe029222fc80ed2ae9159161898a6027232010f9d996d069f5d1da26933f373ad18e695dced1034e3dcb1f439041e1ee5bdbcee65814c7504afe23c01f818ff3f544ba147f5b317fde7c48afe958c92c1d08def29855fcfb600f7678721658bff32ef493a38e603612262e9cc91dd14cc299aa1c1da9cc9613bd91e96afe5550e003def5791d0547144a54000"/196, 0xc4) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ\x8dU\xc5\xd2j\xc62\x90\x91J\xf5UyC7\x8f%z\xd2\xcc\x9fgK\x9e\xa9.*\b\x02E\xc6d\v\xe2R\xd9|\x13\xd2\xcc\t\xa1\xf4\xd8\x80rw\x17\xd9J5\xc4|#&f\\\xe8*\xc81\xe8\xaaN/P\x8f\xdf\xc4\xa7\xf3`W\xfe', 0xa7b, 0xc, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000380), 0x260001, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x19, 0x0, 0x8) r2 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(r2, 0x81) socket(0xb, 0x1, 0x0) shmctl$auto(0x0, 0xd, 0x0) r3 = socket(0x23, 0x3, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/018/001\x00', 0x400000, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1b) unshare$auto(0xfffffffffffffffd) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000400)="d07d287bc245ebf49abb7dd08c97cf54e353c748b9d4fc7f179e7706f3be6d6524e85bb7350fa4f1780c8b41f9e1aabf8fdea95b51011bf191d17b7c0f29758d4bf14f76c588ade84382", 0x7f8, 0x0, 0x8, 0x0, 0x1, 0x10}, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) 3.859812069s ago: executing program 4 (id=601): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x0, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x92106405, r0) close_range$auto(0x2, 0xa, 0xf9e8) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket(0xa, 0x3, 0x73) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffffff, 0x0, 0x0) futex$auto(0x0, 0x10d, 0x2, 0x0, 0x0, 0x8) r1 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r1, 0x3a, 0x1, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_7={@btf_id, 0xd, 0x9}, 0x6) r2 = socket(0xa, 0x2, 0x88) lseek$auto(0x3, 0x7fffffffffffffff, 0x401) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x1801, @old_map_fd=0x3ff}, 0xa3) r3 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) clock_adjtime$auto(0x14, &(0x7f00000004c0)={0xec, 0x0, 0xc2ec, 0xb, 0x5, 0x4, 0x2, 0x0, 0x1, 0x200, 0x2, {0x7, 0x7fff}, 0x0, 0xffffffffffffe166, 0x1668324c, 0x0, 0x0, 0x0, 0xffa6, 0x7fff, 0xf4, 0xde2}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000280)="65a90950735e7b19172f", 0xa) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r5, 0xc0285628, r5) 3.343623396s ago: executing program 3 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250100003f0600020001000000050007005900000008000a000900000014001f00001000000000000000000000000500011400200000000000000000000000000000000001080009"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x90) 3.044276435s ago: executing program 2 (id=604): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001100)=""/4105, 0x1009) 2.983965332s ago: executing program 4 (id=605): mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x101000, 0x0) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r0, 0x5382, &(0x7f0000002980)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x1c, r2, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) select$auto(0x6, 0x0, &(0x7f0000000000)={[0x5, 0x20000000000002, 0x5, 0x19, 0x6, 0x44, 0xffffffffffffffd4, 0x200000f, 0x0, 0x0, 0xf, 0xd59, 0x900000000105, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)) 2.907587518s ago: executing program 3 (id=606): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0xa, 0x2, 0x73) (async, rerun: 64) seccomp$auto(0x5ea3, 0xe398, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) sendfile$auto(r1, r2, 0x0, 0x6) (async) r3 = prctl$auto(0x4, 0x5, 0xffffffffffffffff, 0x53, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="f2ffdfbf4e3190b14c36994cb32000", @ANYRES16=r5, @ANYBLOB="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"], 0x340}}, 0x4000845) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r6, 0x0, 0x5f) (async) fcntl$auto(0x8000000000000001, 0x25, 0x8) (async) mmap$auto(0x0, 0x20009, 0x5, 0x20000000eb1, 0x40000000000a5, 0x8000) r7 = socket(0x2b, 0x1, 0x1) ioctl$auto(r7, 0x89a0, 0x4) (async, rerun: 64) mmap$auto(0xfffffffffffffffd, 0x810004, 0x5, 0x8000000008011, 0x3, 0x2) (async, rerun: 64) socket(0x1, 0xa, 0x1) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r4) 2.775982124s ago: executing program 2 (id=607): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/amdio1\x00', 0x100000a3d9) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) cachestat$auto(0xffffffffffffffff, &(0x7f0000000500)={0x6, 0x4}, &(0x7f0000000580)={0x81, 0x1ff, 0x67a0, 0x0, 0x3}, 0x6) mmap$auto(0x0, 0xd561, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0xb, 0x83}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x0, 0x400008, 0x0, 0x9b75, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @remote}, 0x54) ioctl$auto_FS_IOC_UNRESVSP(r2, 0x40305829, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x682, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb2, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4]}, 0x1fe, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="f91c5acc2195a6f094ff08ba6d02e4ec504acd62e103e5fd6f7244bf2e9918a0327ba444e173af560aa2670921addde8898c95a405f377b62e74091b15b18845a838c74a7977f468e20b2259bedb931b2f635995c57742df7936f0869b7632bf38b60754b308fe6edb977eb731219f922d02dfde4c4acca3e0f6893ff30f4d5fd8", @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ppoll$auto(&(0x7f0000000600)={r1, 0x2079, 0x4}, 0x6d, 0x0, 0x0, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") r3 = fcntl$auto(0x0, 0x407, 0x100000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000005c0), r3) socket(0x10, 0x2, 0x0) 2.719655247s ago: executing program 4 (id=609): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async) madvise$auto(0x1, 0xfffffffffffffff5, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) (async) r0 = getpid() getpid() (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) madvise$auto(0x1, 0xfffffffffffff001, 0xe) (async) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_LEAVES={0x8, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0x4}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x10000, 0x0) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000200)=@bpf_attr_0={0x3, 0xfffffffb, 0x6, 0x800, 0x0, r0, 0x1, "c4d7afdae6a2b553440487258a719b3b", r6, r0, 0x0, 0x401, 0x65d, 0x5, r3, r7}, 0x10) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x400, 0x0) ioctl$auto(r8, 0x921064ad, 0xffffffffffffffff) 1.332039819s ago: executing program 1 (id=614): mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0x2, 0x801, 0x6) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xa4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000000)="2dc2f4", 0x3) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x101000, 0x0) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r2, 0x5382, &(0x7f0000002980)) kexec_load$auto(0x4b, 0x5, &(0x7f00000000c0)={@buf=&(0x7f0000000180)="53e535e9284cf5471f2623af28e5c3f55b94c9c271c8af5b5cfc585f352c2fa8270752a353d418cd8938edd055cc3823d8ba6a0ef92789bb379f110b10de62bb73c2c00ecd8ec41e42cdf3be16b5f6fab8e7e4ee9da29d244dd8b79347bd4e84dec315e53aef9d", 0x8, 0x9, 0xcb}, 0xffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = waitid$auto_P_ALL(0x0, 0x0, &(0x7f0000000200)={@_si_pad}, 0x6, &(0x7f0000000280)={{0x6, 0x9}, {0x5, 0x3}, 0x0, 0xfffffffffffffff3, 0x80a, 0x8000, 0x1000, 0x3, 0x7b62d1e8, 0x8, 0x5, 0xfffffffffffffffe, 0x400, 0x0, 0xffffffffffff0001, 0x7}) prctl$auto(0x4, 0x15, r4, 0xf, 0x6) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r6, 0x695c0380, 0x3, 0x3) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f000000ac80)={0x1c, r5, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) select$auto(0x6, 0x0, &(0x7f0000000000)={[0x5, 0x20000000000002, 0x5, 0x19, 0x6, 0x44, 0xffffffffffffffd4, 0x200000f, 0x0, 0x0, 0xf, 0xd59, 0x900000000105, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r7, 0x5412, &(0x7f0000000040)) 1.157153094s ago: executing program 1 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250100003f0600020001000000050007005900000008000a000900000014001f00001000000000000000000000000600011400200000000000000000000000000000000001080009"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x90) 1.112822435s ago: executing program 4 (id=616): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) ioctl$auto(r1, 0xc058560f, r1) 849.908326ms ago: executing program 1 (id=617): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x6) madvise$auto(0x0, 0x7ffffffffffffffb, 0xa) open(0x0, 0x0, 0xb5d1af1605322cb3) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x1000, 0x400050, 0x9) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000040)=ANY=[@ANYBLOB="f6f9fb996ba216e57d0613a37081530f2fe20637c73bdef63622ab08de7fda269702fc3842e8ed56e8afa17f683ba404c1", @ANYRES16, @ANYBLOB="01"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='-\x00', 0x30) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0xd, 0x10000002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)="fb", 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/path_max\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/5, 0x5) 541.418953ms ago: executing program 2 (id=618): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) (async) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010102}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) (async) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) (async) r6 = syz_clone(0x106000, &(0x7f00000000c0)="fbf781b717f9ccc2ca38719baba0162bfb88e57abf2982ecd0f5fc29", 0x1c, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300)="d2f1fd578157b023c7085d050efca19efa4f0f276f786a82f8a85d2cb9b749e9fcc9a3eccd8d12d963d83da8cfd60d828ee0b10fc2e57f0ce60f245a0d04f70c52fe1430e961b2fa75c0d213874b54c2ecd51986ff61604daa722470a7be4f993b84450598e7bcdb7d49853c173d6d56b8b54dc06c3d16f9aa32af8eecbc25ad8f9d6287dfeadbba2136b047382c278e0ea4c0f45072a77d7750b62ff10c") (async) msgctl$auto(0x0, 0x313, &(0x7f0000000400)={{0x0, 0xee01, 0xffffffffffffffff, 0x8, 0xabc, 0x10000, 0x2}, &(0x7f0000000280)=0x4, &(0x7f00000003c0)=0x9, 0x5, 0x6, 0x2, 0xfffffffffffffff8, 0x6, 0x7, 0xa, 0x1ff, @inferred=r4, @raw=0x80000000}) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x360, r5, 0xc01, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NAME_TABLE={0x1dc, 0x8, 0x0, 0x1, [@nested={0xcb, 0x4, 0x0, 0x1, [@typed={0xf, 0x104, 0x0, 0x0, @str='%!):\\+\xfc\'\xbe&\x00'}, @generic="2bd2a422c2878730e93191d6ddf5544f7c883e4d91eb518f851bcb54112ad9dcb394eb1659ff755244b3211f7eda3234b0fe10c9bc698c9c302c73d24e0a9462ae1f788148db75ec6014a3fd6b9d90ca8474a8e93cff8ba36f8c7fd7e427e38517fca44ca06f6c38b103d6f4fc17e5e6c0ecc2304193ff812410ee331ee4709b720ea807d5d6bdca404c45e3604cead9652ea837803543f970541bd48f5ff78b9297f158f8801af760fe63a40b26f6c6dc2303", @nested={0x4, 0x151}]}, @nested={0x9f, 0x15c, 0x0, 0x1, [@generic="d6685a7852a4c9b74ec88a0d8983cae2ca4608861f0ad6ef9b0d8299533df9d0b156dc072fe07829a5a9a8c2310a849280195d75ad76239fa74bf72df10fb468ef91964d68755cbc018cfb14b73fc5feb55ed89c51f8644824515e7074d7e33ca97d7e676ad98af1ffcbeec978c7665ea10555302559ed499b0377efd621769ed971955fc7cabf0a12b062", @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xd, 0x0, 0x0, @pid=r6}]}, @generic="4f1eec850c315b6146d560d51887685b57a23ba5406ba18c9d6803ea8c469143999479be1bf9efdc8de8185380adc3a491fb04e4c051f216f0eaa8061949c2c0eadf75ee48d03f92e73d2cc5b3eb44b429f9369c867b300d4e36a37dd1c0f0ab899790cd619abadf234699e6"]}, @TIPC_NLA_MON={0x16d, 0x9, 0x0, 0x1, [@generic="e935df27b5f6f45bc7dfe4a234fb7f5129d19c2fa9e88bd32d608d93fd73c671c6b347a8f49d89b8e499a24a4c325407ba5aefd1", @typed={0x9, 0x87, 0x0, 0x0, @str='\xa2!-:\x00'}, @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @nested={0xa7, 0x11d, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x158, 0x0, 0x0, @ipv6=@mcast2}, @generic="e470529471d59469eeaa1ab929345b59a98dc38b2303ae4d237235e4a5b63ea8358510f603c5745f8709da4ba5df0d8b45595a56c7ab380c72545dd3f0256e33a3c225371c285131cff8c1c270d929a361426cb4c8d0eaa244853d2f64ab37eae90274000bd58f7fc5b7b1df1a4b550b7f77f46b8c4de48772c88b3347c141f00fcddc5214b5dd"]}, @generic="122a8cf12829269abe40c67ec55f062eb4aef8433a2a9c3a3b346e4f3d9eafd1cf76a0ed226891b3be40af85e3036e24b3b8c18cb87c9238d7", @generic="de8cd43c8dbd4a8249f4c308990c6ce45f656d39d332ef43217671cb36c4f46fef696ebe626674978464cf77e9b40da94b1c6b23"]}]}, 0x360}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 428.219077ms ago: executing program 4 (id=619): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000000)={@sival_int=0x1, @inferred=r0, 0x3, @_tid=r1}, &(0x7f0000000100)) ioctl$auto(0x3, 0x5402, r0) r2 = prctl$auto_PR_SCHED_CORE_GET(0x7fff, 0x0, 0x0, 0x4, 0xa) ioctl$auto_VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x9, r2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c0a, 0x0) 221.545103ms ago: executing program 1 (id=620): r0 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_ima_htable_violations_ops_ima_fs(r0, &(0x7f0000000040)=""/77, 0x4d) readv$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0)="45954729990d75da2bb0b4c758c51360bc94641986721c4e222186df51", 0x8}, 0x6) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x7fffffff, 0x3, &(0x7f0000000240)={{0x0, 0xee00, 0xffffffffffffffff, 0xfffffffe, 0x7e1, 0xfffff801}, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x1, 0xffffffff00000000, 0x2, 0x1, 0x2, 0x6, 0xfff, 0x2, 0x3, @raw=0x3, @raw=0x1}) sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x20c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x102, 0x3, 0x0, 0x1, [@nested={0x20, 0x42, 0x0, 0x1, [@typed={0x8, 0x128, 0x0, 0x0, @uid=r2}, @typed={0xf, 0x7, 0x0, 0x0, @binary="7b87af4f61bc7f9475c224"}, @nested={0x4, 0xbc}]}, @generic="dff4104f78e615434e768f7ce473b1088381ae580e60ef52d800b3178b577ba300ce6296ce431fcb270fd32dad073a2c18556e5d0b4cc833221b3cba5a6dd462142689955281c5aaa30cc91f68002a444aade28d71cce1927570e86704bdacff50b858fa8fa769212d6da72e668d949434b3a3750b7dd58aa3b98d64c4c5bf0c775ba0b873ffc493e460ea67633e6415a57af2b7c36fe18058f243d88b371cf9e17dcbd564aa463395408a4e6558a8a7f4f3ca7533c3eabf64e7d9960c78acd0ee1d682594297bf77356218fc12ba3a7c125fa9a7ce65c361e03171dd03a"]}, @TIPC_NLA_PUBL={0xf4, 0x3, 0x0, 0x1, [@nested={0xed, 0x157, 0x0, 0x1, [@typed={0xc, 0xf8, 0x0, 0x0, @u64=0xfffffffffffffff1}, @nested={0x4, 0x144}, @generic="e628794591b734aeddc3e9cbb82e84a8531bde53512843ed5f09dbeb4632d0c5a3e6fef6bdea410ab86922f4407ece2ccd5b6ac71b5f58230991f0a602dde42f54edd82fb85f823afc44cfdf96575f579cde224889e0f40b277f42bbbd2624afc0c9d10dbbe51d718102c4b8444ef38780b067a3d2ef172a0441c627e51c064a510a4bf41600e82f7a2ebee3481a7951e32a115b9db848d99543718d6e0efdd908ed5f5d986cb1d8aa4f526deba3a20108bab8b140249c933c4c6c4777c0da0788f57c699b55ab236b", @nested={0x4, 0x19}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x9}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40090d0}, 0x20000090) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, r1, 0x7a4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x11a, 0x7, 0x0, 0x1, [@nested={0xd9, 0xc5, 0x0, 0x1, [@nested={0x4, 0x29}, @generic="dc1d7becb5a0ceecc8187ca18fbadc7ff9404d2277cd74e84221d760b8256d5f1aa0953ab13fd962ef1239e2520d6e5b097f46baa677d5e7fd57750197b5ecb016f0674180137080db93d2098e9d4fed65e399a81012d70f0105249ecc4701f3c53b0d1e232f86afb59231c2f6d9291fc0609d0922ec67adf43b438d57ea244a1368452ec768c29e93c5bb0c7455dddae4377cc5deed54940b8c7801d8c329bc6b5b5b142118a987d50ac173f386522fd7341293a87c7cf19aaa633770d8c99adcbb23f14ca84c99455f05fd48482ea616"]}, @generic="6173cc13af5a0313159825435b51317ffabd71be24c22cb85d7058778cbe0adc404cdbce265fa9a138ce0d26980d4802174d8d36e19606322bbc"]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000007c0), r4) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000800)='/dev/adsp1\x00', 0x200000, 0x0) sendmsg$auto_NL80211_CMD_SET_KEY(r4, &(0x7f0000000e00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000840)={0x578, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x240, 0x50, 0x0, 0x1, [@typed={0xb, 0x14e, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r6}, @typed={0x4, 0x158}, @typed={0x4, 0x102}, @typed={0x8, 0xd0, 0x0, 0x0, @fd=r4}, @nested={0xec, 0x2e, 0x0, 0x1, [@generic="62d96e660ba6d7458055fb8706ec7bb2342e399caea89f47bd4907ee44692c29072850054b181de00e65b0682c6f39a2cf", @nested={0x4, 0xe6}, @generic="11f30498262eff6b1bdb7000f7844ebb9f080003b4784963dfc663811e71584ffecde8d9314ef17eb2660767e9246c03c1049e1a4979ee6d99fba3079e76968d933524a71a20317401f8840b03ee054cd10e70383a9ec511201789123194cd4c70a90e977439612a9f856b5ebf7cde0269099c167756b88ae71cc8264402e1021035215b633e471ec4e0aa237c782d30f4ac0067675fad1f07c004ee9ab1411540546116196c019829dacce95937d279846148"]}, @generic="a1f58d9b23e382f6b80fb18c8e21b3280a09e1a972ae9f2a201c872481ce50d59ead42f48f4cc1f9ef0712081ed32a6e7d3412de", @typed={0xb, 0xd1, 0x0, 0x0, @str='TIPCv2\x00'}, @generic="8573ede32d282160b626e71ac2144f823c1aeaeb81cbcd3303e9225c6884bd993de354b8e8502faacbfe8e8bf8a99de2923e6cfe58d1fbefca7434da04978661a7952b2783305677bad266fa57068047eb5164b4f3dfc6dfe92d570d0e408723507b3b2d6815a363f6bced4575ee1d229c2a12966ca3918f538bc48053ecded585a3302eb79af13c36f4921c679de796fe514bd8d1aa77549f3cd28cfdc9ddb68a9a3566bf14c30ffc930f084b05d0a46a805c68fb49a137f6e80f3613b106a7853f22ef2e7984103c9f6ca78184085d6452c796e3c0457864975ce7759f83b86465c3eaa5d76544dc470e41"]}, @NL80211_ATTR_FTM_RESPONDER={0x308, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xc4, 0x3, "1c0e30069f9de480c769df33f90fbd61581af4f5d2df6d332a67093db935246b9af5e276d50f0494be92c3dddae41c4e5a39333eaac167dcbe8044a0295f06ed1689cb59739dd64842b08c26fb6a96058122013ae29115e86947ee8d17cfcdf7b30f494c41ecfecde8a8f0ce9f6258b88c06f4df5549327d0f380c710b1b442e6bc91bad5a9cb3a8f60d8f7aeb29df7e46d4df81d23e2b87bad60242896434cdd2e46b2ba48d8ec06e3c5d2c8be581fc79c59885143dcb1109ccccbbd76c44d7"}, @NL80211_FTM_RESP_ATTR_LCI={0x2b, 0x2, "915e376471b6f0057792bedb98208795a17171828588a92c8b45f0dac8c6878970a7c80a3e6763"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x86, 0x3, "5c3c91981cfce6955970eb0d3fc4f1fb4ecf45425435324b0666e7d6367a329ec978b06a21a0b1ad7e71055aa10cf514068163c1c58aecbfb0ee341c2784042afd190e766805727d040539d57ebb018f7f60151fb20f9061224e0eff1fa79e83e11b0a5a21c307e3666e833565de62e20ed00ea055cd627bfafcf61814c670345bae"}, @NL80211_FTM_RESP_ATTR_LCI={0x8e, 0x2, "e32486c009de01b1b1b73aa975efc6c404945d1694193ce5945c46d99fcde6ea82b17a359f53b5ac42c20e1c7d986db1e86524499e3d919ee59441b627af9140d860c259afc5dc214c0c982c1d48f705d4597a5c451ec2532915af80d38f834c5da8082212675da1db818047f726b6b661c67d8126cf5be3ee26573ec65c893f35a72f93c3bf920e5905"}, @NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "84ae1d3b5801039ad515e6beb58eb401b0890e2d6242d5dc2a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb0, 0x3, "ea896addac61bc87056b1e2addb35593ae79948b1b601172b9922fcd6a3667aadd9e1a5a0210d0d2199910e8d6a2e8e36a1c2f26473b6862e3743954bc16a1c7c79e2a5bb0424f41fb75a99286989f6697ecfb8a9b7f38f06da4df48bff0d5d83e5db9feb49f698e6f377f499f4ecdb21b1d296f08b7122dd70dd2ff9a377cef03d37c7081e5ca95ab0afcaa94673aa89b746d96df2a906ccd3c3184c611eaf86567b738040e0f9f5b44a49e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x27, 0x2, "3efbbfb963caa37de8a3e4a5882995588389808aea8433abe8adca5de9a35c63b56b52"}]}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xff}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb3f8}]}, 0x578}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ec0)={'ipvlan0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x404c090) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001000), r4) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000001280)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1d4, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_COORDINATOR={0x114, 0x1e, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xa}, @nested={0xc, 0x157, 0x0, 0x1, [@typed={0x4, 0x143}, @typed={0x4, 0xba}]}, @nested={0x24, 0x11e, 0x0, 0x1, [@typed={0xc, 0xfc, 0x0, 0x0, @u64}, @nested={0x4, 0xd4}, @typed={0x8, 0xde, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xa2}, @nested={0x4, 0xb0}]}, @generic="181ccb5f061918be0a1db393a508f7e1600d045b4bb691c24d8df084c86e9f50c46321a1d0b14ede945df7c5f5fa1cbb3bd55c032c4647697fe02d1329336c38242535a3442ffe594e59e331a083edbbc6bf6858b226e015f85c435f993fe9c1489e2124269355345c6a8230da0fc416132a50ced60fbb16975176e68b7fd3b73f209c0599a5ae5c2d18e73eb718dce477b7eb2a99546181759fc43f8ca6bb1d5965718c195bb17a1d13eb38691f738e20cc91772a7e743ad8e613f10d24c4047f6eb9433b34744d", @typed={0xb, 0x3b, 0x0, 0x0, @str='macsec\x00'}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_SEC_DEVICE={0xa3, 0x2e, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @u32=0x4}, @generic="937d7c1efbb59d08496b5604fc69162867ab06d92e8027ef0fd46e6cab751b87e6013ffabc6260a98d42251db87518bba6ae4fc7782be9d64a70341ae554d3734e75e6947e9978b98dbbef6ef54a931df1bb44a52322d8f185f3b2583522f2514569f91b800c51beb383baa93b743a1fb0eedc5de960bfa99ba19a2dd8fd5b942c9382f9e6619bbffff4de6529715f46dc53d6a26bf50a"]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4005000}, 0x44810) r10 = prctl$auto_PR_SYS_DISPATCH_OFF(0x40, 0x0, 0xffffffffffffffff, 0x6, 0x399) r11 = ioctl$auto_TUNSETVNETLE2(r10, 0x400454dc, &(0x7f00000012c0)=0x7) r12 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000001300)=@bpf_attr_11={0x9, 0x1, 0xfffffff7, 0x173f, 0x401, 0x2, 0x8, r11}, 0x7) prctl$auto_PR_SET_MM(0x23, 0x8000, r0, 0x7a, 0x1ff) r14 = ioctl$auto_KVM_CREATE_VM(r12, 0xae01, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r14, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x7}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xcc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4055}, 0x40050) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000014c0), r15) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r14, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000408}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r16 = ioctl$auto_TUNSETGROUP(r13, 0x400454ce, &(0x7f0000001600)=0x5) writev$auto(r15, &(0x7f0000002640)={&(0x7f0000001640)="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", 0x4}, 0x1000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000002680)='/proc/self/fail-nth\x00', 0x800, 0x0) shmctl$auto(0x8, 0x8001, &(0x7f0000002880)={{0xbc, r2, r3, 0x7fffffff, 0x0, 0x2, 0x3}, 0x8001, 0xb, 0xf, 0x7, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002700)="f3ceba5f23261f026f66fa2f786ca64c010979fa0a98ead281d15acc0726aaaeb9ed47be43f4903ed03080c90c4911d5a064291b63be5918a4094e1ad39de38efc4c332ed8a14c728e9c210ab647db292e7edb01ba082961119d054328fc19", &(0x7f0000002780)="d7640c35555a7fbe68a786d6748176d6d7909566c400a8061cad95779d82d2c0360aa7c1ab5e847b427e71fd198248169de7e677a5292b998e6fd5cb058c518919ace68a34ca4034fdd72977627dd0f4e2806b5c6535cccd09b9a25d1a70a35b0834864666e3611461f9885dd6a74427214ea0f06a0a0923fdd2a7ad65f06520d6960f8581d9eb7febfb7ba97631962b62ae3282c757e7557a4973a26fce44fe6ddaf217ec4e22572eaf89ae309156b145d73913e20e9262adb66dda3f6b3a79e0a7a5adefc4b2648859f96d4534a4"}) newfstatat$auto(r16, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002900)={0x9, 0xe, 0x8000, 0x6, r2, r17, 0x0, 0xe, 0x3, 0xffffffffffff2e84, 0xfffffffffffffc00, 0x6, 0x1, 0x5, 0x1ff, 0x23107cac00000, 0x101}, 0x4) 0s ago: executing program 1 (id=621): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = inotify_init1$auto(0x3000000000000) inotify_rm_watch$auto(r0, 0x8) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 226.686743][ T5840] cgroup: Unknown subsys name 'net' [ 226.815941][ T5840] cgroup: Unknown subsys name 'cpuset' [ 226.826029][ T5840] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 228.579935][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 230.457533][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.466275][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.474294][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.482681][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.491211][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.596196][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.604566][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.612831][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.621912][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.630985][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.644654][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.665771][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.673934][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.674849][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.682441][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.690096][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.703320][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.706334][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.733046][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.741041][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.126733][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 231.291370][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 231.389324][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.397366][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.404713][ T5851] bridge_slave_0: entered allmulticast mode [ 231.411992][ T5851] bridge_slave_0: entered promiscuous mode [ 231.438243][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 231.455188][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.463200][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.471109][ T5851] bridge_slave_1: entered allmulticast mode [ 231.478661][ T5851] bridge_slave_1: entered promiscuous mode [ 231.570879][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 231.604031][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.620814][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.628251][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.635670][ T5859] bridge_slave_0: entered allmulticast mode [ 231.643495][ T5859] bridge_slave_0: entered promiscuous mode [ 231.659209][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.680340][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.687779][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.695279][ T5859] bridge_slave_1: entered allmulticast mode [ 231.702725][ T5859] bridge_slave_1: entered promiscuous mode [ 231.793245][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.817264][ T5851] team0: Port device team_slave_0 added [ 231.826061][ T5851] team0: Port device team_slave_1 added [ 231.840164][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.849562][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.857351][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.864674][ T5856] bridge_slave_0: entered allmulticast mode [ 231.871785][ T5856] bridge_slave_0: entered promiscuous mode [ 231.907810][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.915269][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.922961][ T5856] bridge_slave_1: entered allmulticast mode [ 231.930139][ T5856] bridge_slave_1: entered promiscuous mode [ 231.979756][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.987077][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.014139][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.044154][ T5859] team0: Port device team_slave_0 added [ 232.062781][ T5859] team0: Port device team_slave_1 added [ 232.069395][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.076542][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.102907][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.114406][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.121562][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.129929][ T5857] bridge_slave_0: entered allmulticast mode [ 232.137263][ T5857] bridge_slave_0: entered promiscuous mode [ 232.148469][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.176445][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.184071][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.191254][ T5857] bridge_slave_1: entered allmulticast mode [ 232.199487][ T5857] bridge_slave_1: entered promiscuous mode [ 232.208627][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.267632][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.274847][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.300965][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.334747][ T5856] team0: Port device team_slave_0 added [ 232.341202][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.348362][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.375072][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.395491][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.419688][ T5856] team0: Port device team_slave_1 added [ 232.428329][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.445049][ T5851] hsr_slave_0: entered promiscuous mode [ 232.451400][ T5851] hsr_slave_1: entered promiscuous mode [ 232.513660][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.520775][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.548050][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.561221][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.568326][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.595604][ T51] Bluetooth: hci0: command tx timeout [ 232.595612][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.614770][ T5857] team0: Port device team_slave_0 added [ 232.658300][ T5859] hsr_slave_0: entered promiscuous mode [ 232.664738][ T5859] hsr_slave_1: entered promiscuous mode [ 232.670879][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 232.677427][ T5859] Cannot create hsr debugfs directory [ 232.686133][ T5857] team0: Port device team_slave_1 added [ 232.753000][ T51] Bluetooth: hci1: command tx timeout [ 232.758594][ T51] Bluetooth: hci3: command tx timeout [ 232.780373][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.787826][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.814696][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.832712][ T51] Bluetooth: hci2: command tx timeout [ 232.858173][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.865646][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.892465][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.911439][ T5856] hsr_slave_0: entered promiscuous mode [ 232.918050][ T5856] hsr_slave_1: entered promiscuous mode [ 232.924394][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 232.930135][ T5856] Cannot create hsr debugfs directory [ 233.091565][ T5857] hsr_slave_0: entered promiscuous mode [ 233.098888][ T5857] hsr_slave_1: entered promiscuous mode [ 233.105480][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 233.111410][ T5857] Cannot create hsr debugfs directory [ 233.385885][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.398743][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.431503][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.462478][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.557155][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.567911][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.578947][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.590810][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.696950][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.708006][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.736922][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.748333][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.858997][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.876473][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.887565][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.905097][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.925811][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.972065][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.002440][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.009826][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.035884][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.043118][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.056232][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.151638][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.188088][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.195654][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.225462][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.232860][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.301025][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.417836][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.435595][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.477477][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.485123][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.544872][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.552079][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.571979][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.607068][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.614423][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.658771][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.673240][ T51] Bluetooth: hci0: command tx timeout [ 234.680535][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.687847][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.833448][ T5860] Bluetooth: hci1: command tx timeout [ 234.839024][ T51] Bluetooth: hci3: command tx timeout [ 234.890361][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.913490][ T51] Bluetooth: hci2: command tx timeout [ 234.925824][ T5851] veth0_vlan: entered promiscuous mode [ 234.967624][ T5851] veth1_vlan: entered promiscuous mode [ 235.102845][ T5851] veth0_macvtap: entered promiscuous mode [ 235.119163][ T5859] veth0_vlan: entered promiscuous mode [ 235.129849][ T5851] veth1_macvtap: entered promiscuous mode [ 235.150357][ T5859] veth1_vlan: entered promiscuous mode [ 235.203567][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.251814][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.285025][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.301650][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.310902][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.335089][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.369189][ T5859] veth0_macvtap: entered promiscuous mode [ 235.400682][ T5859] veth1_macvtap: entered promiscuous mode [ 235.424371][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.435922][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.491698][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.506809][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.555017][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.566328][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.586932][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.598438][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.609265][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.618329][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.708977][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.718686][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.740719][ T5857] veth0_vlan: entered promiscuous mode [ 235.748874][ T5856] veth0_vlan: entered promiscuous mode [ 235.791278][ T5856] veth1_vlan: entered promiscuous mode [ 235.831776][ T5857] veth1_vlan: entered promiscuous mode [ 235.863811][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.887414][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.906154][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.925175][ T5857] veth0_macvtap: entered promiscuous mode [ 235.976222][ T5857] veth1_macvtap: entered promiscuous mode [ 236.012582][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.020624][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.076082][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.088128][ T5856] veth0_macvtap: entered promiscuous mode [ 236.119799][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.160533][ T1110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.176838][ T1110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.190537][ T5856] veth1_macvtap: entered promiscuous mode [ 236.214478][ T1110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.231386][ T1110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.373587][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.438725][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.479471][ T3029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.530335][ T3029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.539500][ T3029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.573560][ T3029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.626314][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.665260][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.755474][ T51] Bluetooth: hci0: command tx timeout [ 236.794253][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.822660][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.912972][ T51] Bluetooth: hci3: command tx timeout [ 236.918450][ T51] Bluetooth: hci1: command tx timeout [ 236.993073][ T51] Bluetooth: hci2: command tx timeout [ 236.998649][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.017870][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.201651][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.223464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.557041][ T5965] Zero length message leads to an empty skb [ 238.160915][ T5982] capability: warning: `syz.1.11' uses 32-bit capabilities (legacy support in use) [ 238.177873][ T5982] sd 0:0:1:0: PR command failed: 1026 [ 238.185154][ T5982] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 238.191934][ T5982] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 238.672033][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 238.833195][ T51] Bluetooth: hci0: command tx timeout [ 238.993809][ T51] Bluetooth: hci1: command tx timeout [ 239.000845][ T5860] Bluetooth: hci3: command tx timeout [ 239.075073][ T5860] Bluetooth: hci2: command tx timeout [ 239.979372][ T6009] Invalid ELF header magic: != ELF [ 240.322288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 240.323015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 240.432960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 240.446653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 240.773029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 240.936605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.003565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 241.162765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 241.362706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.373369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 242.126762][ T6022] delete_channel: no stack [ 243.085599][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 244.750483][ T6088] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 244.760749][ T6088] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 245.968981][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 246.224519][ T6106] binder: binder_mmap: 6105 0-1000 bad vm_flags failed -1 [ 246.916061][ T6139] vivid-007: ================= START STATUS ================= [ 246.972504][ T6139] vivid-007: Generate PTS: true [ 247.008388][ T6139] vivid-007: Generate SCR: true [ 247.040279][ T6139] tpg source WxH: 320x240 (Y'CbCr) [ 247.091930][ T6139] tpg field: 1 [ 247.107138][ T6139] tpg crop: (0,0)/320x240 [ 247.147119][ T6139] tpg compose: (0,0)/320x240 [ 247.177335][ T6139] tpg colorspace: 8 [ 247.187226][ T6139] tpg transfer function: 0/0 [ 247.200833][ T6139] tpg Y'CbCr encoding: 0/0 [ 247.208066][ T6139] tpg quantization: 0/0 [ 247.218233][ T6139] tpg RGB range: 0/2 [ 247.224669][ T6139] vivid-007: ================== END STATUS ================== [ 247.533701][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 249.225600][ T6186] process 'syz.1.54' launched ':,' with NULL argv: empty string added [ 249.550994][ T6196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 251.041839][ T6239] cougar: G6 mapped to F18 [ 251.704570][ T6247] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 251.802573][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 252.430612][ T6280] netlink: Unknown NAT attribute (type=262, max=9) [ 252.776269][ T6285] random: crng reseeded on system resumption [ 254.656188][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 255.077673][ T6331] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 255.959103][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.966100][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.817718][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 260.230274][ T6408] syz.0.105 (6408) used greatest stack depth: 19672 bytes left [ 260.392241][ T30] audit: type=1800 audit(1771504857.244:2): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="lu_gp_id" dev="configfs" ino=9775 res=0 errno=0 [ 260.739025][ T6435] bridge0: port 3(bond0) entered blocking state [ 260.759070][ T6435] bridge0: port 3(bond0) entered disabled state [ 260.800659][ T6435] bond0: entered allmulticast mode [ 260.819237][ T6435] bond_slave_0: entered allmulticast mode [ 260.832591][ T6435] bond_slave_1: entered allmulticast mode [ 260.842010][ T6435] bond0: entered promiscuous mode [ 260.848054][ T6435] bond_slave_0: entered promiscuous mode [ 260.854131][ T6435] bond_slave_1: entered promiscuous mode [ 260.861232][ T6435] bridge0: port 3(bond0) entered blocking state [ 260.867912][ T6435] bridge0: port 3(bond0) entered forwarding state [ 261.005147][ T6445] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 264.384437][ T6523] tipc: Started in network mode [ 264.411552][ T6523] tipc: Node identity f8de9f21, cluster identity 4711 [ 264.441756][ T6523] tipc: Node number set to 4175339297 [ 264.456152][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 264.822471][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'. [ 264.905800][ T6541] vivid-007: ================= START STATUS ================= [ 264.933017][ T6541] vivid-007: Generate PTS: true [ 264.937941][ T6541] vivid-007: Generate SCR: true [ 264.947096][ T6541] tpg source WxH: 320x240 (Y'CbCr) [ 264.952732][ T6541] tpg field: 1 [ 264.956182][ T6541] tpg crop: (0,0)/320x240 [ 264.961066][ T6541] tpg compose: (0,0)/320x240 [ 264.972194][ T6541] tpg colorspace: 8 [ 265.069996][ T6541] tpg transfer function: 0/0 [ 265.088462][ T6541] tpg Y'CbCr encoding: 0/0 [ 265.094976][ T6541] tpg quantization: 0/0 [ 265.099717][ T6541] tpg RGB range: 0/2 [ 265.104976][ T6541] vivid-007: ================== END STATUS ================== [ 265.852645][ T6555] can0: slcan on ttyS2. [ 266.007345][ T6547] FAULT_INJECTION: forcing a failure. [ 266.007345][ T6547] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 266.061453][ T6555] can0 (unregistered): slcan off ttyS2. [ 266.110923][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.2.139 Not tainted syzkaller #0 PREEMPT(full) [ 266.110965][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.110982][ T6547] Call Trace: [ 266.110992][ T6547] [ 266.111003][ T6547] dump_stack_lvl+0x100/0x190 [ 266.111053][ T6547] should_fail_ex.cold+0x5/0xa [ 266.111081][ T6547] ? prepare_alloc_pages+0x16d/0x5f0 [ 266.111115][ T6547] should_fail_alloc_page+0xeb/0x140 [ 266.111163][ T6547] prepare_alloc_pages+0x1f0/0x5f0 [ 266.111213][ T6547] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 266.111259][ T6547] ? __pfx_stack_trace_save+0x10/0x10 [ 266.111308][ T6547] ? stack_depot_save_flags+0x27/0x9d0 [ 266.111360][ T6547] ? kasan_save_stack+0x3f/0x50 [ 266.111399][ T6547] ? kasan_save_stack+0x30/0x50 [ 266.111437][ T6547] ? kasan_save_track+0x14/0x30 [ 266.111477][ T6547] ? __kasan_slab_alloc+0x89/0x90 [ 266.111524][ T6547] ? kasan_save_stack+0x3f/0x50 [ 266.111570][ T6547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.111616][ T6547] ? __lock_acquire+0x4a5/0x2630 [ 266.111650][ T6547] ? look_up_lock_class+0x55/0x120 [ 266.111695][ T6547] ? lock_acquire+0x1cf/0x380 [ 266.111731][ T6547] ? find_held_lock+0x2b/0x80 [ 266.111774][ T6547] ? page_table_check_set+0x49a/0xa10 [ 266.111816][ T6547] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.111865][ T6547] ? policy_nodemask+0xed/0x4f0 [ 266.111912][ T6547] alloc_pages_mpol+0x1fb/0x550 [ 266.111958][ T6547] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 266.112017][ T6547] folio_alloc_mpol_noprof+0x36/0x340 [ 266.112053][ T6547] vma_alloc_folio_noprof+0xed/0x1d0 [ 266.112086][ T6547] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 266.112134][ T6547] do_anonymous_page+0xb3a/0x1fb0 [ 266.112181][ T6547] __handle_mm_fault+0x1d42/0x2b60 [ 266.112227][ T6547] ? __pfx___handle_mm_fault+0x10/0x10 [ 266.112261][ T6547] ? pte_offset_map_lock+0x174/0x320 [ 266.112300][ T6547] ? find_held_lock+0x2b/0x80 [ 266.112358][ T6547] ? follow_page_pte+0x5b3/0x1400 [ 266.112392][ T6547] handle_mm_fault+0x36d/0xa20 [ 266.112433][ T6547] __get_user_pages+0xf9c/0x34d0 [ 266.112475][ T6547] ? __pfx___get_user_pages+0x10/0x10 [ 266.112513][ T6547] populate_vma_page_range+0x267/0x3f0 [ 266.112545][ T6547] ? __pfx_populate_vma_page_range+0x10/0x10 [ 266.112572][ T6547] ? __pfx_find_vma_intersection+0x10/0x10 [ 266.112617][ T6547] ? do_mmap+0x93f/0x12f0 [ 266.112651][ T6547] __mm_populate+0x107/0x3a0 [ 266.112682][ T6547] ? __pfx___mm_populate+0x10/0x10 [ 266.112712][ T6547] ? up_write+0x290/0x4f0 [ 266.112752][ T6547] vm_mmap_pgoff+0x37f/0x470 [ 266.112785][ T6547] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.112812][ T6547] ? __pfx___might_resched+0x10/0x10 [ 266.112850][ T6547] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 266.112888][ T6547] ? __x64_sys_futex+0x34f/0x4d0 [ 266.112919][ T6547] ? __x64_sys_futex+0x358/0x4d0 [ 266.112966][ T6547] ksys_mmap_pgoff+0x7d/0x5b0 [ 266.113016][ T6547] __x64_sys_mmap+0x125/0x190 [ 266.113060][ T6547] do_syscall_64+0x106/0xf80 [ 266.113091][ T6547] ? clear_bhb_loop+0x40/0x90 [ 266.113125][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.113152][ T6547] RIP: 0033:0x7f0764d9c629 [ 266.113176][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.113200][ T6547] RSP: 002b:00007f0765d01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.113227][ T6547] RAX: ffffffffffffffda RBX: 00007f0765016090 RCX: 00007f0764d9c629 [ 266.113244][ T6547] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 266.113260][ T6547] RBP: 00007f0764e32b39 R08: 0000000000000002 R09: 0000000000008000 [ 266.113277][ T6547] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 266.113293][ T6547] R13: 00007f0765016128 R14: 00007f0765016090 R15: 00007ffc98c1f3f8 [ 266.113356][ T6547] [ 268.314068][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 268.344323][ T6595] netlink: 54041 bytes leftover after parsing attributes in process `syz.0.148'. [ 271.019900][ T6638] FAULT_INJECTION: forcing a failure. [ 271.019900][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 271.207219][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(full) [ 271.207255][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.207270][ T6638] Call Trace: [ 271.207278][ T6638] [ 271.207288][ T6638] dump_stack_lvl+0x100/0x190 [ 271.207334][ T6638] should_fail_ex.cold+0x5/0xa [ 271.207363][ T6638] ? sk_prot_alloc+0x10b/0x2a0 [ 271.207396][ T6638] should_failslab+0xc2/0x120 [ 271.207439][ T6638] __kmalloc_noprof+0xe0/0x850 [ 271.207486][ T6638] sk_prot_alloc+0x10b/0x2a0 [ 271.207526][ T6638] sk_alloc+0x36/0xe80 [ 271.207553][ T6638] __netlink_create+0x5e/0x2c0 [ 271.207605][ T6638] ? __wake_up+0x3f/0x60 [ 271.207634][ T6638] netlink_create+0x293/0x610 [ 271.207662][ T6638] ? __pfx_genl_bind+0x10/0x10 [ 271.207694][ T6638] ? __pfx_genl_unbind+0x10/0x10 [ 271.207726][ T6638] ? __pfx_genl_release+0x10/0x10 [ 271.207767][ T6638] __sock_create+0x339/0x860 [ 271.207811][ T6638] __sys_socket+0x14d/0x260 [ 271.207852][ T6638] ? __pfx___sys_socket+0x10/0x10 [ 271.207901][ T6638] __x64_sys_socket+0x72/0xb0 [ 271.207938][ T6638] ? lockdep_hardirqs_on+0x78/0x100 [ 271.207969][ T6638] do_syscall_64+0x106/0xf80 [ 271.207998][ T6638] ? clear_bhb_loop+0x40/0x90 [ 271.208037][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.208065][ T6638] RIP: 0033:0x7f0764d9c629 [ 271.208088][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.208113][ T6638] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 271.208139][ T6638] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 271.208156][ T6638] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 271.208172][ T6638] RBP: 00007f0764e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 271.208188][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.208203][ T6638] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 271.208240][ T6638] [ 271.972859][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 273.170925][ T6655] misc userio: Invalid payload size [ 273.370018][ T6672] FAULT_INJECTION: forcing a failure. [ 273.370018][ T6672] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 273.437121][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT(full) [ 273.437162][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.437178][ T6672] Call Trace: [ 273.437188][ T6672] [ 273.437199][ T6672] dump_stack_lvl+0x100/0x190 [ 273.437248][ T6672] should_fail_ex.cold+0x5/0xa [ 273.437282][ T6672] _copy_from_user+0x2e/0xd0 [ 273.437324][ T6672] copy_msghdr_from_user+0x9f/0x4f0 [ 273.437367][ T6672] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 273.437427][ T6672] ___sys_sendmsg+0x106/0x1e0 [ 273.437470][ T6672] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.437570][ T6672] __sys_sendmsg+0x170/0x220 [ 273.437602][ T6672] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.437659][ T6672] do_syscall_64+0x106/0xf80 [ 273.437691][ T6672] ? clear_bhb_loop+0x40/0x90 [ 273.437727][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.437757][ T6672] RIP: 0033:0x7fea93b9c629 [ 273.437781][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.437808][ T6672] RSP: 002b:00007fea94a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.437836][ T6672] RAX: ffffffffffffffda RBX: 00007fea93e15fa0 RCX: 00007fea93b9c629 [ 273.437855][ T6672] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 273.437872][ T6672] RBP: 00007fea94a01090 R08: 0000000000000000 R09: 0000000000000000 [ 273.437889][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.437905][ T6672] R13: 00007fea93e16038 R14: 00007fea93e15fa0 R15: 00007fff1a640168 [ 273.437945][ T6672] [ 274.140512][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 274.635970][ T6693] phram: not enough arguments [ 275.201657][ T6714] FAULT_INJECTION: forcing a failure. [ 275.201657][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 275.216354][ T6706] netlink: 'syz.3.177': attribute type 7 has an invalid length. [ 275.258444][ T6706] netlink: 17 bytes leftover after parsing attributes in process `syz.3.177'. [ 275.258790][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 275.258823][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.258837][ T6714] Call Trace: [ 275.258845][ T6714] [ 275.258855][ T6714] dump_stack_lvl+0x100/0x190 [ 275.258896][ T6714] should_fail_ex.cold+0x5/0xa [ 275.258925][ T6714] should_failslab+0xc2/0x120 [ 275.258964][ T6714] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 275.258999][ T6714] ? __alloc_skb+0x140/0x710 [ 275.259030][ T6714] __alloc_skb+0x140/0x710 [ 275.259053][ T6714] ? __alloc_skb+0x5b7/0x710 [ 275.259076][ T6714] ? __pfx___alloc_skb+0x10/0x10 [ 275.259110][ T6714] netlink_alloc_large_skb+0x69/0x150 [ 275.259143][ T6714] netlink_sendmsg+0x680/0xda0 [ 275.259178][ T6714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.259218][ T6714] ? __import_iovec+0x1d2/0x640 [ 275.259259][ T6714] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 275.259296][ T6714] ____sys_sendmsg+0xa54/0xc30 [ 275.259332][ T6714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.259381][ T6714] ___sys_sendmsg+0x190/0x1e0 [ 275.259418][ T6714] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.259495][ T6714] __sys_sendmsg+0x170/0x220 [ 275.259522][ T6714] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.259581][ T6714] do_syscall_64+0x106/0xf80 [ 275.259609][ T6714] ? clear_bhb_loop+0x40/0x90 [ 275.259640][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.259666][ T6714] RIP: 0033:0x7f0764d9c629 [ 275.259688][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.259711][ T6714] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.259735][ T6714] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 275.259751][ T6714] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 275.259767][ T6714] RBP: 00007f0765d22090 R08: 0000000000000000 R09: 0000000000000000 [ 275.259781][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.259795][ T6714] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 275.259829][ T6714] [ 276.860929][ T6751] FAULT_INJECTION: forcing a failure. [ 276.860929][ T6751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.944565][ T6751] CPU: 1 UID: 0 PID: 6751 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 276.944604][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.944621][ T6751] Call Trace: [ 276.944630][ T6751] [ 276.944641][ T6751] dump_stack_lvl+0x100/0x190 [ 276.944690][ T6751] should_fail_ex.cold+0x5/0xa [ 276.944724][ T6751] _copy_from_iter+0x1f4/0x1690 [ 276.944772][ T6751] ? __asan_memset+0x23/0x50 [ 276.944810][ T6751] ? __pfx__copy_from_iter+0x10/0x10 [ 276.944852][ T6751] ? __pfx___alloc_skb+0x10/0x10 [ 276.944897][ T6751] netlink_sendmsg+0x808/0xda0 [ 276.944939][ T6751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.944970][ T6751] ? __import_iovec+0x1d2/0x640 [ 276.945016][ T6751] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 276.945058][ T6751] ____sys_sendmsg+0xa54/0xc30 [ 276.945102][ T6751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.945158][ T6751] ___sys_sendmsg+0x190/0x1e0 [ 276.945202][ T6751] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.945299][ T6751] __sys_sendmsg+0x170/0x220 [ 276.945331][ T6751] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.945387][ T6751] do_syscall_64+0x106/0xf80 [ 276.945418][ T6751] ? clear_bhb_loop+0x40/0x90 [ 276.945454][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.945483][ T6751] RIP: 0033:0x7f0764d9c629 [ 276.945506][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.945537][ T6751] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.945565][ T6751] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 276.945583][ T6751] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 276.945600][ T6751] RBP: 00007f0765d22090 R08: 0000000000000000 R09: 0000000000000000 [ 276.945616][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.945632][ T6751] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 276.945671][ T6751] [ 277.179402][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 278.362273][ T6766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.362544][ T6765] zswap: compressor not available [ 278.443195][ T6766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.798688][ T6766] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.895011][ T6766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.901245][ T6766] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.064204][ T6766] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.090420][ T6793] FAULT_INJECTION: forcing a failure. [ 279.090420][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 279.150201][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.2.202 Not tainted syzkaller #0 PREEMPT(full) [ 279.150251][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.150269][ T6793] Call Trace: [ 279.150278][ T6793] [ 279.150290][ T6793] dump_stack_lvl+0x100/0x190 [ 279.150338][ T6793] should_fail_ex.cold+0x5/0xa [ 279.150373][ T6793] should_failslab+0xc2/0x120 [ 279.150420][ T6793] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 279.150459][ T6793] ? skb_clone+0x190/0x400 [ 279.150497][ T6793] skb_clone+0x190/0x400 [ 279.150527][ T6793] netlink_deliver_tap+0xaed/0xcc0 [ 279.150566][ T6793] netlink_unicast+0x650/0x870 [ 279.150604][ T6793] ? __pfx_netlink_unicast+0x10/0x10 [ 279.150652][ T6793] netlink_sendmsg+0x8b0/0xda0 [ 279.150691][ T6793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.150721][ T6793] ? __import_iovec+0x1d2/0x640 [ 279.150768][ T6793] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 279.150810][ T6793] ____sys_sendmsg+0xa54/0xc30 [ 279.150853][ T6793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.150910][ T6793] ___sys_sendmsg+0x190/0x1e0 [ 279.150951][ T6793] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.151042][ T6793] __sys_sendmsg+0x170/0x220 [ 279.151069][ T6793] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.151118][ T6793] do_syscall_64+0x106/0xf80 [ 279.151146][ T6793] ? clear_bhb_loop+0x40/0x90 [ 279.151181][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.151217][ T6793] RIP: 0033:0x7f0764d9c629 [ 279.151241][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.151268][ T6793] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.151295][ T6793] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 279.151314][ T6793] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 279.151330][ T6793] RBP: 00007f0765d22090 R08: 0000000000000000 R09: 0000000000000000 [ 279.151345][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.151361][ T6793] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 279.151400][ T6793] [ 279.613893][ T6766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.621896][ T6766] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.122434][ T6766] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.244686][ T6766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.272584][ T6766] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.433269][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.491832][ T6766] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.912512][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.633725][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.774411][ T30] audit: type=1804 audit(1771504878.634:3): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.209" name="/newroot/sys/kernel/debug/tracing/timestamp_mode" dev="tracefs" ino=912 res=1 errno=0 [ 281.889547][ T6830] kstrtoul() returned -22 for lu_gp_id [ 281.927707][ T30] audit: type=1800 audit(1771504878.744:4): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.209" name="lu_gp_id" dev="configfs" ino=12745 res=0 errno=0 [ 282.282705][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.299324][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 282.525687][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.002363][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.712383][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.842342][ T6886] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 284.207656][ T6894] FAULT_INJECTION: forcing a failure. [ 284.207656][ T6894] name fail_futex, interval 1, probability 0, space 0, times 1 [ 284.220666][ T6894] CPU: 1 UID: 60928 PID: 6894 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) [ 284.220691][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.220701][ T6894] Call Trace: [ 284.220709][ T6894] [ 284.220716][ T6894] dump_stack_lvl+0x100/0x190 [ 284.220746][ T6894] should_fail_ex.cold+0x5/0xa [ 284.220766][ T6894] get_futex_key+0x1d2/0x1620 [ 284.220789][ T6894] ? __pfx_get_futex_key+0x10/0x10 [ 284.220817][ T6894] futex_wait_setup+0x81/0x500 [ 284.220849][ T6894] __futex_wait+0x19f/0x300 [ 284.220878][ T6894] ? __pfx___futex_wait+0x10/0x10 [ 284.220902][ T6894] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.220921][ T6894] ? lockdep_hardirqs_on+0x78/0x100 [ 284.220944][ T6894] ? __pfx_futex_wake_mark+0x10/0x10 [ 284.220973][ T6894] ? futex_hash+0x2c5/0x380 [ 284.220998][ T6894] futex_wait+0xed/0x380 [ 284.221024][ T6894] ? __pfx_futex_wait+0x10/0x10 [ 284.221054][ T6894] ? ksys_write+0x190/0x250 [ 284.221085][ T6894] do_futex+0x1ef/0x350 [ 284.221107][ T6894] ? __pfx_do_futex+0x10/0x10 [ 284.221135][ T6894] __x64_sys_futex+0x34f/0x4d0 [ 284.221159][ T6894] ? fdget_pos+0x2c0/0x380 [ 284.221176][ T6894] ? __pfx___x64_sys_futex+0x10/0x10 [ 284.221203][ T6894] ? ksys_write+0x1ac/0x250 [ 284.221232][ T6894] ? __pfx_ksys_write+0x10/0x10 [ 284.221264][ T6894] do_syscall_64+0x106/0xf80 [ 284.221284][ T6894] ? clear_bhb_loop+0x40/0x90 [ 284.221315][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.221345][ T6894] RIP: 0033:0x7fea93b9c629 [ 284.221371][ T6894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.221396][ T6894] RSP: 002b:00007fea94a010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 284.221414][ T6894] RAX: ffffffffffffffda RBX: 00007fea93e15fa8 RCX: 00007fea93b9c629 [ 284.221425][ T6894] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea93e15fa8 [ 284.221443][ T6894] RBP: 00007fea93e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 284.221454][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.221463][ T6894] R13: 00007fea93e16038 R14: 00007fff1a640080 R15: 00007fff1a640168 [ 284.221485][ T6894] [ 284.472928][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.592396][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.982620][ T6896] syz.0.226 uses obsolete (PF_INET,SOCK_PACKET) [ 285.072500][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.225711][ T6907] FAULT_INJECTION: forcing a failure. [ 285.225711][ T6907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 285.240022][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.2.230 Not tainted syzkaller #0 PREEMPT(full) [ 285.240065][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.240083][ T6907] Call Trace: [ 285.240094][ T6907] [ 285.240106][ T6907] dump_stack_lvl+0x100/0x190 [ 285.240157][ T6907] should_fail_ex.cold+0x5/0xa [ 285.240191][ T6907] get_futex_key+0x1d2/0x1620 [ 285.240232][ T6907] ? __pfx_get_futex_key+0x10/0x10 [ 285.240280][ T6907] futex_wait_setup+0x81/0x500 [ 285.240337][ T6907] __futex_wait+0x19f/0x300 [ 285.240386][ T6907] ? __pfx___futex_wait+0x10/0x10 [ 285.240449][ T6907] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.240500][ T6907] ? futex_hash+0x2c5/0x380 [ 285.240548][ T6907] futex_wait+0xed/0x380 [ 285.240595][ T6907] ? __pfx_futex_wait+0x10/0x10 [ 285.240653][ T6907] ? do_vfs_ioctl+0x226/0x13e0 [ 285.240701][ T6907] do_futex+0x1ef/0x350 [ 285.240741][ T6907] ? __pfx_do_futex+0x10/0x10 [ 285.240782][ T6907] ? find_held_lock+0x2b/0x80 [ 285.240836][ T6907] __x64_sys_futex+0x34f/0x4d0 [ 285.240879][ T6907] ? __fget_files+0x21f/0x3d0 [ 285.240926][ T6907] ? __pfx___x64_sys_futex+0x10/0x10 [ 285.240982][ T6907] do_syscall_64+0x106/0xf80 [ 285.241016][ T6907] ? clear_bhb_loop+0x40/0x90 [ 285.241054][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.241086][ T6907] RIP: 0033:0x7f0764d9c629 [ 285.241114][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.241143][ T6907] RSP: 002b:00007f0765d220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 285.241173][ T6907] RAX: ffffffffffffffda RBX: 00007f0765015fa8 RCX: 00007f0764d9c629 [ 285.241194][ T6907] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0765015fa8 [ 285.241212][ T6907] RBP: 00007f0765015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 285.241230][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.241248][ T6907] R13: 00007f0765016038 R14: 00007ffc98c1f310 R15: 00007ffc98c1f3f8 [ 285.241289][ T6907] [ 285.792331][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 286.517125][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.566270][ T6935] FAULT_INJECTION: forcing a failure. [ 286.566270][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 286.616333][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 286.616366][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.616377][ T6935] Call Trace: [ 286.616383][ T6935] [ 286.616390][ T6935] dump_stack_lvl+0x100/0x190 [ 286.616421][ T6935] should_fail_ex.cold+0x5/0xa [ 286.616441][ T6935] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 286.616469][ T6935] should_failslab+0xc2/0x120 [ 286.616497][ T6935] __kmalloc_noprof+0xe0/0x850 [ 286.616527][ T6935] kernfs_fop_write_iter+0x26a/0x5f0 [ 286.616558][ T6935] vfs_write+0x6ac/0x1070 [ 286.616584][ T6935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 286.616615][ T6935] ? __pfx_vfs_write+0x10/0x10 [ 286.616654][ T6935] ksys_write+0x12a/0x250 [ 286.616680][ T6935] ? __pfx_ksys_write+0x10/0x10 [ 286.616711][ T6935] do_syscall_64+0x106/0xf80 [ 286.616731][ T6935] ? clear_bhb_loop+0x40/0x90 [ 286.616752][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.616770][ T6935] RIP: 0033:0x7f494799c629 [ 286.616790][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.616807][ T6935] RSP: 002b:00007f49487f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.616824][ T6935] RAX: ffffffffffffffda RBX: 00007f4947c15fa0 RCX: 00007f494799c629 [ 286.616835][ T6935] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 286.616845][ T6935] RBP: 00007f49487f4090 R08: 0000000000000000 R09: 0000000000000000 [ 286.616854][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.616864][ T6935] R13: 00007f4947c16038 R14: 00007f4947c15fa0 R15: 00007ffd605cb298 [ 286.616886][ T6935] [ 286.983906][ T6937] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 287.059408][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'. [ 287.109723][ T6943] FAULT_INJECTION: forcing a failure. [ 287.109723][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 287.172192][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 287.172230][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.172246][ T6943] Call Trace: [ 287.172256][ T6943] [ 287.172267][ T6943] dump_stack_lvl+0x100/0x190 [ 287.172315][ T6943] should_fail_ex.cold+0x5/0xa [ 287.172348][ T6943] should_failslab+0xc2/0x120 [ 287.172393][ T6943] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 287.172433][ T6943] ? __alloc_skb+0x140/0x710 [ 287.172469][ T6943] __alloc_skb+0x140/0x710 [ 287.172494][ T6943] ? __alloc_skb+0x5b7/0x710 [ 287.172521][ T6943] ? __pfx___alloc_skb+0x10/0x10 [ 287.172561][ T6943] netlink_dump+0x19b/0xd30 [ 287.172599][ T6943] ? __pfx_netlink_dump+0x10/0x10 [ 287.172647][ T6943] ? __asan_memset+0x23/0x50 [ 287.172683][ T6943] ? genl_start+0x67a/0x970 [ 287.172726][ T6943] __netlink_dump_start+0x6d6/0x990 [ 287.172766][ T6943] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 287.172809][ T6943] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 287.172861][ T6943] ? __pfx_genl_get_cmd+0x10/0x10 [ 287.172894][ T6943] ? __pfx_genl_start+0x10/0x10 [ 287.172926][ T6943] ? __pfx_genl_dumpit+0x10/0x10 [ 287.172959][ T6943] ? __pfx_genl_done+0x10/0x10 [ 287.172999][ T6943] ? __dev_queue_xmit+0x7fd/0x4750 [ 287.173064][ T6943] ? __radix_tree_lookup+0x217/0x2b0 [ 287.173119][ T6943] genl_rcv_msg+0x471/0x800 [ 287.173168][ T6943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.173215][ T6943] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 287.173262][ T6943] netlink_rcv_skb+0x159/0x420 [ 287.173295][ T6943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.173336][ T6943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.173386][ T6943] ? netlink_deliver_tap+0x1ae/0xcc0 [ 287.173424][ T6943] genl_rcv+0x28/0x40 [ 287.173457][ T6943] netlink_unicast+0x5aa/0x870 [ 287.173499][ T6943] ? __pfx_netlink_unicast+0x10/0x10 [ 287.173550][ T6943] netlink_sendmsg+0x8b0/0xda0 [ 287.173592][ T6943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.173623][ T6943] ? __import_iovec+0x1d2/0x640 [ 287.173671][ T6943] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 287.173716][ T6943] ____sys_sendmsg+0xa54/0xc30 [ 287.173761][ T6943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.173819][ T6943] ___sys_sendmsg+0x190/0x1e0 [ 287.173862][ T6943] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.173952][ T6943] __sys_sendmsg+0x170/0x220 [ 287.173985][ T6943] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.174040][ T6943] do_syscall_64+0x106/0xf80 [ 287.174070][ T6943] ? clear_bhb_loop+0x40/0x90 [ 287.174104][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.174131][ T6943] RIP: 0033:0x7f494799c629 [ 287.174163][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.174188][ T6943] RSP: 002b:00007f49487f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.174214][ T6943] RAX: ffffffffffffffda RBX: 00007f4947c15fa0 RCX: 00007f494799c629 [ 287.174231][ T6943] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 287.174245][ T6943] RBP: 00007f49487f4090 R08: 0000000000000000 R09: 0000000000000000 [ 287.174258][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.174272][ T6943] R13: 00007f4947c16038 R14: 00007f4947c15fa0 R15: 00007ffd605cb298 [ 287.174311][ T6943] [ 288.319113][ T6956] can0: slcan on ttyS2. [ 288.494273][ T6961] can0 (unregistered): slcan off ttyS2. [ 288.823598][ T6975] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 291.522675][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.532701][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.540960][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.562367][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.572322][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.990294][ T7021] can0: slcan on ttyS2. [ 292.489660][ T7021] can0 (unregistered): slcan off ttyS2. [ 293.135284][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 293.360256][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.372328][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.383003][ T7023] bridge_slave_0: entered allmulticast mode [ 293.425893][ T7023] bridge_slave_0: entered promiscuous mode [ 293.451840][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.472341][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.479644][ T7023] bridge_slave_1: entered allmulticast mode [ 293.516017][ T7023] bridge_slave_1: entered promiscuous mode [ 293.643633][ T5854] Bluetooth: hci1: command tx timeout [ 293.709579][ T7042] FAULT_INJECTION: forcing a failure. [ 293.709579][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 293.767580][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.784508][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 293.784545][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.784561][ T7042] Call Trace: [ 293.784572][ T7042] [ 293.784583][ T7042] dump_stack_lvl+0x100/0x190 [ 293.784632][ T7042] should_fail_ex.cold+0x5/0xa [ 293.784667][ T7042] should_failslab+0xc2/0x120 [ 293.784715][ T7042] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 293.784754][ T7042] ? skb_clone+0x190/0x400 [ 293.784794][ T7042] skb_clone+0x190/0x400 [ 293.784827][ T7042] netlink_deliver_tap+0xaed/0xcc0 [ 293.784879][ T7042] netlink_dump+0x8ca/0xd30 [ 293.784917][ T7042] ? __pfx_netlink_dump+0x10/0x10 [ 293.784967][ T7042] ? __asan_memset+0x23/0x50 [ 293.785004][ T7042] ? genl_start+0x67a/0x970 [ 293.785058][ T7042] __netlink_dump_start+0x6d6/0x990 [ 293.785099][ T7042] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 293.785143][ T7042] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 293.785195][ T7042] ? __pfx_genl_get_cmd+0x10/0x10 [ 293.785229][ T7042] ? __pfx_genl_start+0x10/0x10 [ 293.785264][ T7042] ? __pfx_genl_dumpit+0x10/0x10 [ 293.785297][ T7042] ? __pfx_genl_done+0x10/0x10 [ 293.785349][ T7042] ? __dev_queue_xmit+0x7fd/0x4750 [ 293.785390][ T7042] ? __radix_tree_lookup+0x217/0x2b0 [ 293.785446][ T7042] genl_rcv_msg+0x471/0x800 [ 293.785491][ T7042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.785532][ T7042] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 293.785581][ T7042] netlink_rcv_skb+0x159/0x420 [ 293.785617][ T7042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.785658][ T7042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.785711][ T7042] ? netlink_deliver_tap+0x1ae/0xcc0 [ 293.785751][ T7042] genl_rcv+0x28/0x40 [ 293.785786][ T7042] netlink_unicast+0x5aa/0x870 [ 293.785828][ T7042] ? __pfx_netlink_unicast+0x10/0x10 [ 293.785880][ T7042] netlink_sendmsg+0x8b0/0xda0 [ 293.785923][ T7042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.785956][ T7042] ? __import_iovec+0x1d2/0x640 [ 293.786006][ T7042] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 293.786062][ T7042] ____sys_sendmsg+0xa54/0xc30 [ 293.786107][ T7042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.786168][ T7042] ___sys_sendmsg+0x190/0x1e0 [ 293.786212][ T7042] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.786303][ T7042] __sys_sendmsg+0x170/0x220 [ 293.786338][ T7042] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.786399][ T7042] do_syscall_64+0x106/0xf80 [ 293.786431][ T7042] ? clear_bhb_loop+0x40/0x90 [ 293.786468][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.786498][ T7042] RIP: 0033:0x7f0764d9c629 [ 293.786523][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.786550][ T7042] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.786580][ T7042] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 293.786599][ T7042] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 293.786616][ T7042] RBP: 00007f0765d22090 R08: 0000000000000000 R09: 0000000000000000 [ 293.786633][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.786649][ T7042] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 293.786689][ T7042] [ 294.137700][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.201144][ T7023] team0: Port device team_slave_0 added [ 294.694294][ T7023] team0: Port device team_slave_1 added [ 295.550843][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.565878][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.641864][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.670182][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.682256][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.757908][ T5854] Bluetooth: hci1: command tx timeout [ 295.801092][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.869381][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 295.876024][ T7023] hsr_slave_0: entered promiscuous mode [ 295.885501][ T7023] hsr_slave_1: entered promiscuous mode [ 295.900601][ T7023] debugfs: 'hsr0' already exists in 'hsr' [ 295.907002][ T7023] Cannot create hsr debugfs directory [ 296.411629][ T7023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.757092][ T7023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.864573][ T7023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.086650][ T7023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.792390][ T5854] Bluetooth: hci1: command tx timeout [ 298.080169][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.175530][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.224535][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.231819][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.265159][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.272424][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.381292][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.872755][ T5854] Bluetooth: hci1: command tx timeout [ 300.475785][ T30] audit: type=1800 audit(1771504897.334:5): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.285" name="lu_gp_id" dev="configfs" ino=14695 res=0 errno=0 [ 300.496885][ T7143] kstrtoul() returned -22 for lu_gp_id [ 300.613966][ T7023] veth0_vlan: entered promiscuous mode [ 300.637269][ T7023] veth1_vlan: entered promiscuous mode [ 300.779262][ T7023] veth0_macvtap: entered promiscuous mode [ 300.810268][ T7023] veth1_macvtap: entered promiscuous mode [ 300.910284][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.976385][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.010118][ T160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.029689][ T160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.082946][ T2965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.097605][ T2965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.542595][ T7157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.557374][ T7157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.627285][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.684910][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.910930][ T7175] ima: policy update failed [ 301.943986][ T30] audit: type=1802 audit(1771504898.804:6): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.292" res=0 errno=0 [ 302.126449][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 302.853147][ T7194] zswap: compressor not available [ 303.179908][ T7225] netlink: 206 bytes leftover after parsing attributes in process `syz.3.302'. [ 303.546776][ T7233] syz.2.305 (7233): /proc/7232/oom_adj is deprecated, please use /proc/7232/oom_score_adj instead. [ 304.561024][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 304.737277][ T7271] binder: 7269:7271 ioctl c0306201 2000000000c0 returned -14 [ 305.295587][ T7293] bond0: invalid ARP target specified [ 305.301622][ T7293] bond0: invalid ARP target specified [ 305.513552][ T7293] bond0: invalid ARP target specified [ 305.532332][ T7293] bond0: invalid ARP target specified [ 305.540980][ T7293] bond0: invalid ARP target specified [ 305.568741][ T7293] bond0: invalid ARP target specified [ 305.582777][ T7293] bond0: invalid ARP target specified [ 305.702383][ T7293] bond0: invalid ARP target specified [ 305.722421][ T7293] bond0: invalid ARP target specified [ 305.728152][ T7293] bond0: invalid ARP target specified [ 305.736736][ T7293] bond0: invalid ARP target specified [ 305.757250][ T7293] bond0: invalid ARP target specified [ 305.778632][ T7293] bond0: invalid ARP target specified [ 305.784801][ T7293] bond0: invalid ARP target specified [ 305.796601][ T7293] bond0: invalid ARP target specified [ 305.813381][ T7293] bond0: invalid ARP target specified [ 305.823638][ T7293] bond0: invalid ARP target specified [ 305.831533][ T7293] bond0: invalid ARP target specified [ 305.841681][ T7293] bond0: invalid ARP target specified [ 305.850789][ T7293] bond0: invalid ARP target specified [ 305.862069][ T7293] bond0: invalid ARP target specified [ 305.882159][ T7293] bond0: invalid ARP target specified [ 305.897492][ T7293] bond0: invalid ARP target specified [ 306.031558][ T7293] bond0: invalid ARP target specified [ 306.037691][ T7293] bond0: invalid ARP target specified [ 306.400227][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 307.692225][ T7325] Process accounting resumed [ 307.972554][ T7350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.019074][ T7350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.053969][ T7350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.091928][ T7350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.127666][ T7350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 308.163408][ T7353] zswap: compressor not available [ 308.337170][ T7350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 310.033047][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.033105][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.112350][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.112420][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 312.192351][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.282627][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.978194][ T7464] futex_wake_op: syz.2.359 tries to shift op by -2048; fix this program [ 314.993279][ T7464] futex_wake_op: syz.2.359 tries to shift op by -2048; fix this program [ 315.017713][ T7464] 0x000000000001-0x000000020000 : "" [ 315.090646][ T7464] ftl_cs: FTL header corrupt! [ 316.507072][ T7475] binder: 7474:7475 ioctl c018620c 0 returned -1 [ 317.409887][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416678][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.853479][ T7524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 318.132261][ T7524] sp0: Synchronizing with TNC [ 318.443589][ T7543] FAULT_INJECTION: forcing a failure. [ 318.443589][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 318.457440][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.3.375 Not tainted syzkaller #0 PREEMPT(full) [ 318.457483][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.457501][ T7543] Call Trace: [ 318.457511][ T7543] [ 318.457523][ T7543] dump_stack_lvl+0x100/0x190 [ 318.457574][ T7543] should_fail_ex.cold+0x5/0xa [ 318.457609][ T7543] should_failslab+0xc2/0x120 [ 318.457657][ T7543] __kmalloc_cache_noprof+0x7a/0x6f0 [ 318.457693][ T7543] ? sctp_endpoint_new+0xfc/0xb20 [ 318.457737][ T7543] sctp_endpoint_new+0xfc/0xb20 [ 318.457777][ T7543] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 318.457812][ T7543] ? lockdep_init_map_type+0x5c/0x250 [ 318.457854][ T7543] ? lockdep_init_map_type+0x5c/0x250 [ 318.457901][ T7543] ? lockdep_init_map_type+0x5c/0x250 [ 318.457939][ T7543] ? lockdep_init_map_type+0x5c/0x250 [ 318.457984][ T7543] sctp_init_sock+0xe2b/0x1300 [ 318.458018][ T7543] ? __pfx_sctp_init_sock+0x10/0x10 [ 318.458054][ T7543] inet_create+0x94c/0x1060 [ 318.458101][ T7543] ? inet_create+0x94/0x1060 [ 318.458152][ T7543] __sock_create+0x339/0x860 [ 318.458204][ T7543] __sys_socket+0x14d/0x260 [ 318.458248][ T7543] ? __pfx___sys_socket+0x10/0x10 [ 318.458303][ T7543] __x64_sys_socket+0x72/0xb0 [ 318.458346][ T7543] ? lockdep_hardirqs_on+0x78/0x100 [ 318.458380][ T7543] do_syscall_64+0x106/0xf80 [ 318.458414][ T7543] ? clear_bhb_loop+0x40/0x90 [ 318.458452][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.458484][ T7543] RIP: 0033:0x7fea93b9c629 [ 318.458510][ T7543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.458539][ T7543] RSP: 002b:00007fea94a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 318.458569][ T7543] RAX: ffffffffffffffda RBX: 00007fea93e15fa0 RCX: 00007fea93b9c629 [ 318.458588][ T7543] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 318.458605][ T7543] RBP: 00007fea93c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.458622][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.458639][ T7543] R13: 00007fea93e16038 R14: 00007fea93e15fa0 R15: 00007fff1a640168 [ 318.458680][ T7543] [ 319.274558][ T7553] FAULT_INJECTION: forcing a failure. [ 319.274558][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 319.357131][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT(full) [ 319.357175][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.357193][ T7553] Call Trace: [ 319.357204][ T7553] [ 319.357216][ T7553] dump_stack_lvl+0x100/0x190 [ 319.357267][ T7553] should_fail_ex.cold+0x5/0xa [ 319.357303][ T7553] should_failslab+0xc2/0x120 [ 319.357355][ T7553] __kmalloc_cache_noprof+0x7a/0x6f0 [ 319.357392][ T7553] ? sctp_endpoint_new+0xfc/0xb20 [ 319.357438][ T7553] sctp_endpoint_new+0xfc/0xb20 [ 319.357480][ T7553] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 319.357515][ T7553] ? lockdep_init_map_type+0x5c/0x250 [ 319.357556][ T7553] ? lockdep_init_map_type+0x5c/0x250 [ 319.357594][ T7553] ? lockdep_init_map_type+0x5c/0x250 [ 319.357635][ T7553] ? lockdep_init_map_type+0x5c/0x250 [ 319.357677][ T7553] sctp_init_sock+0xe2b/0x1300 [ 319.357712][ T7553] ? __pfx_sctp_init_sock+0x10/0x10 [ 319.357755][ T7553] inet_create+0x94c/0x1060 [ 319.357801][ T7553] ? inet_create+0x94/0x1060 [ 319.357852][ T7553] __sock_create+0x339/0x860 [ 319.357913][ T7553] __sys_socket+0x14d/0x260 [ 319.357959][ T7553] ? __pfx___sys_socket+0x10/0x10 [ 319.358016][ T7553] __x64_sys_socket+0x72/0xb0 [ 319.358059][ T7553] ? lockdep_hardirqs_on+0x78/0x100 [ 319.358096][ T7553] do_syscall_64+0x106/0xf80 [ 319.358130][ T7553] ? clear_bhb_loop+0x40/0x90 [ 319.358170][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.358203][ T7553] RIP: 0033:0x7f494799c629 [ 319.358229][ T7553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.358258][ T7553] RSP: 002b:00007f49487d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 319.358289][ T7553] RAX: ffffffffffffffda RBX: 00007f4947c16090 RCX: 00007f494799c629 [ 319.358309][ T7553] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 319.358326][ T7553] RBP: 00007f4947a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 319.358344][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.358362][ T7553] R13: 00007f4947c16128 R14: 00007f4947c16090 R15: 00007ffd605cb298 [ 319.358402][ T7553] [ 319.669251][ T7553] ovs_: entered promiscuous mode [ 320.305485][ T7566] binder: 7560:7566 ioctl c018620c 0 returned -1 [ 320.910443][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 322.329284][ T7616] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 332.738273][ T7836] dump_stack_lvl+0x100/0x190 [ 332.738321][ T7836] should_fail_ex.cold+0x5/0xa [ 332.738354][ T7836] ? tomoyo_encode2+0xfb/0x3c0 [ 332.738380][ T7836] should_failslab+0xc2/0x120 [ 332.738427][ T7836] __kmalloc_noprof+0xe0/0x850 [ 332.738461][ T7836] ? d_absolute_path+0x136/0x1b0 [ 332.738499][ T7836] tomoyo_encode2+0xfb/0x3c0 [ 332.738541][ T7836] tomoyo_encode+0x29/0x50 [ 332.738564][ T7836] tomoyo_realpath_from_path+0x18c/0x690 [ 332.738600][ T7836] tomoyo_path_number_perm+0x23c/0x580 [ 332.738644][ T7836] ? tomoyo_path_number_perm+0x22e/0x580 [ 332.738685][ T7836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.738763][ T7836] ? find_held_lock+0x2b/0x80 [ 332.738803][ T7836] ? __fget_files+0x215/0x3d0 [ 332.738840][ T7836] ? hook_file_ioctl_common+0x146/0x410 [ 332.738891][ T7836] ? __fget_files+0x21f/0x3d0 [ 332.738938][ T7836] security_file_ioctl+0xd3/0x230 [ 332.738980][ T7836] __x64_sys_ioctl+0xb7/0x210 [ 332.739019][ T7836] do_syscall_64+0x106/0xf80 [ 332.739048][ T7836] ? clear_bhb_loop+0x40/0x90 [ 332.739083][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.739111][ T7836] RIP: 0033:0x7f0764d9c629 [ 332.739133][ T7836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.739159][ T7836] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.739186][ T7836] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 332.739203][ T7836] RDX: 0000000000000004 RSI: 0000000040085618 RDI: 0000000000000004 [ 332.739220][ T7836] RBP: 00007f0765d22090 R08: 0000000000000000 R09: 0000000000000000 [ 332.739235][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.739249][ T7836] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 332.739285][ T7836] [ 333.012394][ T7836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 333.412798][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 334.099703][ T7871] program syz.4.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.392036][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 334.404142][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 334.459507][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 336.341251][ T7931] syz.1.473(7931): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 336.491745][ T7935] netlink: zone id is out of range [ 336.503395][ T7935] netlink: zone id is out of range [ 336.511913][ T7935] netlink: zone id is out of range [ 336.525813][ T7935] netlink: zone id is out of range [ 336.532064][ T7935] netlink: zone id is out of range [ 336.538986][ T7935] netlink: zone id is out of range [ 336.547118][ T7935] netlink: zone id is out of range [ 336.552944][ T7935] netlink: zone id is out of range [ 336.558247][ T7935] netlink: zone id is out of range [ 336.580037][ T7935] netlink: zone id is out of range [ 337.070012][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 337.768694][ T7970] Process accounting paused [ 337.838677][ T7946] can: request_module (can-proto-4) failed. [ 338.035480][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 338.076967][ T7980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.084694][ T7980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.108600][ T7980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.152176][ T7980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.159433][ T7985] FAULT_INJECTION: forcing a failure. [ 338.159433][ T7985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.211277][ T7979] bond0: invalid ARP target specified [ 338.221514][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.3.484 Not tainted syzkaller #0 PREEMPT(full) [ 338.221555][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.221573][ T7985] Call Trace: [ 338.221583][ T7985] [ 338.221595][ T7985] dump_stack_lvl+0x100/0x190 [ 338.221638][ T7985] should_fail_ex.cold+0x5/0xa [ 338.221662][ T7985] ? prepare_alloc_pages+0x16d/0x5f0 [ 338.221697][ T7985] should_fail_alloc_page+0xeb/0x140 [ 338.221741][ T7985] prepare_alloc_pages+0x1f0/0x5f0 [ 338.221777][ T7985] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 338.221818][ T7985] ? finish_task_switch.isra.0+0x1f1/0xb80 [ 338.221857][ T7985] ? __lock_acquire+0x4a5/0x2630 [ 338.221907][ T7985] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.221954][ T7985] ? do_raw_spin_lock+0x128/0x260 [ 338.221996][ T7985] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.222039][ T7985] ? find_held_lock+0x2b/0x80 [ 338.222102][ T7985] ? __lock_acquire+0x4a5/0x2630 [ 338.222138][ T7985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.222188][ T7985] ? policy_nodemask+0xed/0x4f0 [ 338.222238][ T7985] alloc_pages_mpol+0x1fb/0x550 [ 338.222287][ T7985] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 338.222334][ T7985] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 338.222390][ T7985] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 338.222442][ T7985] folio_alloc_mpol_noprof+0x36/0x340 [ 338.222479][ T7985] shmem_alloc_folio+0x135/0x160 [ 338.222519][ T7985] shmem_alloc_and_add_folio+0x371/0xd40 [ 338.222573][ T7985] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 338.222618][ T7985] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 338.222672][ T7985] shmem_get_folio_gfp+0x6ab/0x1900 [ 338.222724][ T7985] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 338.222769][ T7985] ? filemap_map_pages+0x9e0/0x2170 [ 338.222819][ T7985] shmem_fault+0x1f9/0xa20 [ 338.222859][ T7985] ? __lock_acquire+0x4a5/0x2630 [ 338.222896][ T7985] ? __pfx_shmem_fault+0x10/0x10 [ 338.222946][ T7985] ? __pfx_filemap_map_pages+0x10/0x10 [ 338.222999][ T7985] __do_fault+0x10d/0x550 [ 338.223041][ T7985] do_fault+0xaf9/0x1a00 [ 338.223075][ T7985] __handle_mm_fault+0x180f/0x2b60 [ 338.223116][ T7985] ? mt_find+0x45e/0x8e0 [ 338.223149][ T7985] ? __pfx___handle_mm_fault+0x10/0x10 [ 338.223180][ T7985] ? __pfx_mt_find+0x10/0x10 [ 338.223236][ T7985] ? find_vma+0xbf/0x140 [ 338.223277][ T7985] ? __pfx_find_vma+0x10/0x10 [ 338.223326][ T7985] handle_mm_fault+0x36d/0xa20 [ 338.223381][ T7985] do_user_addr_fault+0x74c/0x12f0 [ 338.223439][ T7985] exc_page_fault+0x6f/0xd0 [ 338.223471][ T7985] asm_exc_page_fault+0x26/0x30 [ 338.223499][ T7985] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 338.223541][ T7985] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 338.223569][ T7985] RSP: 0018:ffffc9000d517d30 EFLAGS: 00050206 [ 338.223592][ T7985] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000003b84 [ 338.223610][ T7985] RDX: 0000000000000001 RSI: 0000000000006000 RDI: ffffc9000686407c [ 338.223628][ T7985] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff52000d0cf7f [ 338.223646][ T7985] R10: ffffc90006867bff R11: 0000000000000000 R12: 0000000000000000 [ 338.223664][ T7985] R13: ffffc90006860060 R14: 0000000000007ba0 R15: ffffc90006860060 [ 338.223703][ T7985] _copy_from_user+0x98/0xd0 [ 338.223751][ T7985] bpf_prog_create_from_user+0x109/0x2f0 [ 338.223787][ T7985] ? __pfx_seccomp_check_filter+0x10/0x10 [ 338.223825][ T7985] do_seccomp+0x7f7/0x2740 [ 338.223873][ T7985] ? __pfx_do_seccomp+0x10/0x10 [ 338.223907][ T7985] ? __x64_sys_openat+0x12d/0x210 [ 338.223944][ T7985] ? xfd_validate_state+0x129/0x190 [ 338.224002][ T7985] do_syscall_64+0x106/0xf80 [ 338.224035][ T7985] ? clear_bhb_loop+0x40/0x90 [ 338.224073][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.224103][ T7985] RIP: 0033:0x7fea93b9c629 [ 338.224128][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.224155][ T7985] RSP: 002b:00007fea949bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 338.224183][ T7985] RAX: ffffffffffffffda RBX: 00007fea93e16180 RCX: 00007fea93b9c629 [ 338.224203][ T7985] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 338.224221][ T7985] RBP: 00007fea93c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 338.224239][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.224255][ T7985] R13: 00007fea93e16218 R14: 00007fea93e16180 R15: 00007fff1a640168 [ 338.224295][ T7985] [ 339.026622][ T7996] loop6: detected capacity change from 0 to 8 [ 339.907650][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 341.153874][ T8034] FAULT_INJECTION: forcing a failure. [ 341.153874][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.169820][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 341.169859][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.169875][ T8034] Call Trace: [ 341.169884][ T8034] [ 341.169896][ T8034] dump_stack_lvl+0x100/0x190 [ 341.169944][ T8034] should_fail_ex.cold+0x5/0xa [ 341.169979][ T8034] _copy_to_user+0x32/0xd0 [ 341.170027][ T8034] simple_read_from_buffer+0xcb/0x170 [ 341.170072][ T8034] proc_fail_nth_read+0x1af/0x230 [ 341.170107][ T8034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.170142][ T8034] ? rw_verify_area+0xce/0x6d0 [ 341.170180][ T8034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.170212][ T8034] vfs_read+0x1e4/0xb30 [ 341.170259][ T8034] ? __pfx_vfs_read+0x10/0x10 [ 341.170300][ T8034] ? __fget_files+0x215/0x3d0 [ 341.170362][ T8034] ? __fget_files+0x21f/0x3d0 [ 341.170416][ T8034] ksys_read+0x12a/0x250 [ 341.170457][ T8034] ? __pfx_ksys_read+0x10/0x10 [ 341.170496][ T8034] ? v4l2_ioctl+0x1c5/0x250 [ 341.170542][ T8034] do_syscall_64+0x106/0xf80 [ 341.170575][ T8034] ? clear_bhb_loop+0x40/0x90 [ 341.170610][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.170639][ T8034] RIP: 0033:0x7fea93b5cece [ 341.170662][ T8034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.170690][ T8034] RSP: 002b:00007fea94a00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.170717][ T8034] RAX: ffffffffffffffda RBX: 00007fea94a016c0 RCX: 00007fea93b5cece [ 341.170742][ T8034] RDX: 000000000000000f RSI: 00007fea94a010a0 RDI: 0000000000000005 [ 341.170759][ T8034] RBP: 00007fea94a01090 R08: 0000000000000000 R09: 0000000000000000 [ 341.170776][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.170792][ T8034] R13: 00007fea93e16038 R14: 00007fea93e15fa0 R15: 00007fff1a640168 [ 341.170833][ T8034] [ 341.993104][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 344.477740][ T8062] serio: Serial port pty6 [ 347.572918][ T8111] zswap: compressor not available [ 348.635593][ T8138] netlink: 'syz.4.527': attribute type 33 has an invalid length. [ 348.668954][ T8138] netlink: 322 bytes leftover after parsing attributes in process `syz.4.527'. [ 350.533845][ T8201] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 351.736026][ T8221] FAULT_INJECTION: forcing a failure. [ 351.736026][ T8221] name failslab, interval 1, probability 0, space 0, times 0 [ 351.912220][ T8221] CPU: 0 UID: 0 PID: 8221 Comm: syz.4.546 Not tainted syzkaller #0 PREEMPT(full) [ 351.912271][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.912289][ T8221] Call Trace: [ 351.912299][ T8221] [ 351.912310][ T8221] dump_stack_lvl+0x100/0x190 [ 351.912361][ T8221] should_fail_ex.cold+0x5/0xa [ 351.912398][ T8221] should_failslab+0xc2/0x120 [ 351.912447][ T8221] __kmalloc_cache_noprof+0x7a/0x6f0 [ 351.912482][ T8221] ? percpu_ref_init+0xec/0x3f0 [ 351.912524][ T8221] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 351.912571][ T8221] percpu_ref_init+0xec/0x3f0 [ 351.912606][ T8221] ? __init_waitqueue_head+0xca/0x150 [ 351.912656][ T8221] ioctx_alloc+0x3ee/0x21e0 [ 351.912701][ T8221] ? find_held_lock+0x2b/0x80 [ 351.912749][ T8221] ? __pfx_ioctx_alloc+0x10/0x10 [ 351.912790][ T8221] __x64_sys_io_setup+0xc9/0x220 [ 351.912824][ T8221] do_syscall_64+0x106/0xf80 [ 351.912857][ T8221] ? clear_bhb_loop+0x40/0x90 [ 351.912896][ T8221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.912927][ T8221] RIP: 0033:0x7f29a1f9c629 [ 351.912954][ T8221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.912985][ T8221] RSP: 002b:00007f29a2d87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 351.913016][ T8221] RAX: ffffffffffffffda RBX: 00007f29a2216180 RCX: 00007f29a1f9c629 [ 351.913036][ T8221] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 351.913055][ T8221] RBP: 00007f29a2032b39 R08: 0000000000000000 R09: 0000000000000000 [ 351.913073][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.913091][ T8221] R13: 00007f29a2216218 R14: 00007f29a2216180 R15: 00007ffcd2a58278 [ 351.913134][ T8221] [ 353.034167][ T8276] MTRR 1 not used [ 353.644587][ T8294] Unable to find swap-space signature [ 353.806699][ T8295] nbd: couldn't find a device at index 35644 [ 354.185413][ T8077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.348272][ T8077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.735313][ T8325] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 354.748763][ T8077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.001564][ T8077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.317840][ T8345] zero sized request [ 355.326511][ T8345] netlink: 21 bytes leftover after parsing attributes in process `syz.3.568'. [ 355.764598][ T8351] bond0: invalid ARP target specified [ 355.810323][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 355.830536][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 355.845927][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 355.879069][ T8077] bridge_slave_1: left allmulticast mode [ 355.889074][ T8077] bridge_slave_1: left promiscuous mode [ 355.917997][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.979886][ T8360] FAULT_INJECTION: forcing a failure. [ 355.979886][ T8360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 356.003583][ T8077] bridge_slave_0: left allmulticast mode [ 356.012988][ T8077] bridge_slave_0: left promiscuous mode [ 356.024660][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.042315][ T8360] CPU: 1 UID: 0 PID: 8360 Comm: syz.4.569 Not tainted syzkaller #0 PREEMPT(full) [ 356.042357][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.042375][ T8360] Call Trace: [ 356.042385][ T8360] [ 356.042397][ T8360] dump_stack_lvl+0x100/0x190 [ 356.042448][ T8360] should_fail_ex.cold+0x5/0xa [ 356.042477][ T8360] ? prepare_alloc_pages+0x16d/0x5f0 [ 356.042513][ T8360] should_fail_alloc_page+0xeb/0x140 [ 356.042566][ T8360] prepare_alloc_pages+0x1f0/0x5f0 [ 356.042605][ T8360] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 356.042657][ T8360] ? __lock_acquire+0x4a5/0x2630 [ 356.042708][ T8360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 356.042757][ T8360] ? do_raw_spin_lock+0x128/0x260 [ 356.042800][ T8360] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 356.042839][ T8360] ? find_held_lock+0x2b/0x80 [ 356.042893][ T8360] ? __lock_acquire+0x4a5/0x2630 [ 356.042925][ T8360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.042972][ T8360] ? policy_nodemask+0xed/0x4f0 [ 356.043020][ T8360] alloc_pages_mpol+0x1fb/0x550 [ 356.043067][ T8360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 356.043110][ T8360] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 356.043150][ T8360] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 356.043199][ T8360] folio_alloc_mpol_noprof+0x36/0x340 [ 356.043231][ T8360] shmem_alloc_folio+0x135/0x160 [ 356.043263][ T8360] shmem_alloc_and_add_folio+0x371/0xd40 [ 356.043310][ T8360] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 356.043349][ T8360] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 356.043394][ T8360] shmem_get_folio_gfp+0x6ab/0x1900 [ 356.043437][ T8360] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 356.043647][ T8360] ? filemap_map_pages+0x9e0/0x2170 [ 356.043692][ T8360] shmem_fault+0x1f9/0xa20 [ 356.043738][ T8360] ? __lock_acquire+0x4a5/0x2630 [ 356.043778][ T8360] ? __pfx_shmem_fault+0x10/0x10 [ 356.043825][ T8360] ? __pfx_filemap_map_pages+0x10/0x10 [ 356.043871][ T8360] __do_fault+0x10d/0x550 [ 356.043918][ T8360] do_fault+0xaf9/0x1a00 [ 356.043953][ T8360] __handle_mm_fault+0x180f/0x2b60 [ 356.043991][ T8360] ? mt_find+0x45e/0x8e0 [ 356.044025][ T8360] ? __pfx___handle_mm_fault+0x10/0x10 [ 356.044055][ T8360] ? __pfx_mt_find+0x10/0x10 [ 356.044114][ T8360] ? find_vma+0xbf/0x140 [ 356.044150][ T8360] ? __pfx_find_vma+0x10/0x10 [ 356.044191][ T8360] handle_mm_fault+0x36d/0xa20 [ 356.044231][ T8360] do_user_addr_fault+0x74c/0x12f0 [ 356.044285][ T8360] exc_page_fault+0x6f/0xd0 [ 356.044316][ T8360] asm_exc_page_fault+0x26/0x30 [ 356.044342][ T8360] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 356.044408][ T8360] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 356.044433][ T8360] RSP: 0018:ffffc90005a7fd30 EFLAGS: 00050206 [ 356.044457][ T8360] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000005b84 [ 356.044474][ T8360] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffffc900059ca07c [ 356.044491][ T8360] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff52000b39f7f [ 356.044508][ T8360] R10: ffffc900059cfbff R11: 0000000000000000 R12: 0000000000000000 [ 356.044525][ T8360] R13: ffffc900059c8060 R14: 0000000000007ba0 R15: ffffc900059c8060 [ 356.044562][ T8360] _copy_from_user+0x98/0xd0 [ 356.044604][ T8360] bpf_prog_create_from_user+0x109/0x2f0 [ 356.044639][ T8360] ? __pfx_seccomp_check_filter+0x10/0x10 [ 356.044675][ T8360] do_seccomp+0x7f7/0x2740 [ 356.044717][ T8360] ? __pfx_do_seccomp+0x10/0x10 [ 356.044748][ T8360] ? __x64_sys_openat+0x12d/0x210 [ 356.044783][ T8360] ? xfd_validate_state+0x129/0x190 [ 356.044834][ T8360] do_syscall_64+0x106/0xf80 [ 356.044864][ T8360] ? clear_bhb_loop+0x40/0x90 [ 356.044898][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.044925][ T8360] RIP: 0033:0x7f29a1f9c629 [ 356.044948][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.044972][ T8360] RSP: 002b:00007f29a2da8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 356.044996][ T8360] RAX: ffffffffffffffda RBX: 00007f29a2216090 RCX: 00007f29a1f9c629 [ 356.045014][ T8360] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 356.045031][ T8360] RBP: 00007f29a2032b39 R08: 0000000000000000 R09: 0000000000000000 [ 356.045047][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.045064][ T8360] R13: 00007f29a2216128 R14: 00007f29a2216090 R15: 00007ffcd2a58278 [ 356.045101][ T8360] [ 356.629759][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.666035][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.678915][ T8077] bond0 (unregistering): Released all slaves [ 356.751896][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.779255][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.803669][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.803702][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.867058][ T8077] tipc: Left network mode [ 357.459659][ T7921] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 357.650115][ T8398] FAULT_INJECTION: forcing a failure. [ 357.650115][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 357.705963][ T8398] CPU: 1 UID: 0 PID: 8398 Comm: syz.2.580 Not tainted syzkaller #0 PREEMPT(full) [ 357.706001][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.706017][ T8398] Call Trace: [ 357.706026][ T8398] [ 357.706036][ T8398] dump_stack_lvl+0x100/0x190 [ 357.706094][ T8398] should_fail_ex.cold+0x5/0xa [ 357.706124][ T8398] ? tomoyo_realpath_from_path+0xb6/0x690 [ 357.706152][ T8398] should_failslab+0xc2/0x120 [ 357.706196][ T8398] __kmalloc_noprof+0xe0/0x850 [ 357.706242][ T8398] tomoyo_realpath_from_path+0xb6/0x690 [ 357.706278][ T8398] tomoyo_path_number_perm+0x23c/0x580 [ 357.706317][ T8398] ? tomoyo_path_number_perm+0x22e/0x580 [ 357.706357][ T8398] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 357.706435][ T8398] ? find_held_lock+0x2b/0x80 [ 357.706476][ T8398] ? __fget_files+0x215/0x3d0 [ 357.706513][ T8398] ? hook_file_ioctl_common+0x146/0x410 [ 357.706561][ T8398] ? __fget_files+0x21f/0x3d0 [ 357.706607][ T8398] security_file_ioctl+0xd3/0x230 [ 357.706648][ T8398] __x64_sys_ioctl+0xb7/0x210 [ 357.706686][ T8398] do_syscall_64+0x106/0xf80 [ 357.706715][ T8398] ? clear_bhb_loop+0x40/0x90 [ 357.706748][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.706773][ T8398] RIP: 0033:0x7f0764d9c629 [ 357.706795][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.706819][ T8398] RSP: 002b:00007f0765d22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.706846][ T8398] RAX: ffffffffffffffda RBX: 00007f0765015fa0 RCX: 00007f0764d9c629 [ 357.706863][ T8398] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000007 [ 357.706879][ T8398] RBP: 00007f0765d22090 R08: 0000000000000000 R09: 0000000000000000 [ 357.706895][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.706910][ T8398] R13: 00007f0765016038 R14: 00007f0765015fa0 R15: 00007ffc98c1f3f8 [ 357.706962][ T8398] [ 357.706973][ T8398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.465008][ T8077] hsr_slave_0: left promiscuous mode [ 358.487043][ T8077] hsr_slave_1: left promiscuous mode [ 358.504187][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.511959][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.544220][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.554910][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.608294][ T8077] veth1_macvtap: left promiscuous mode [ 358.620360][ T8077] veth0_macvtap: left promiscuous mode [ 358.634942][ T8077] veth1_vlan: left promiscuous mode [ 358.648145][ T8077] veth0_vlan: left promiscuous mode [ 359.309481][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 359.346666][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 361.064517][ T8434] Process accounting paused [ 361.528155][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 362.141048][ T30] audit: type=1804 audit(1771504958.994:7): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.596" name="/newroot/62/file0" dev="tmpfs" ino=338 res=1 errno=0 [ 363.359308][ T8465] can: request_module (can-proto-4) failed. [ 363.652474][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 365.613942][ T8588] bond0: option slaves: interface - does not exist! [ 365.832512][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 366.570062][ T8602] zswap: compressor not available [ 366.941766][ T8619] ================================================================== [ 366.941790][ T8619] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 366.941835][ T8619] Write of size 8 at addr ffffc90003fa9000 by task syz.1.621/8619 [ 366.941862][ T8619] [ 366.941877][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) [ 366.941914][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.941933][ T8619] Call Trace: [ 366.941943][ T8619] [ 366.941954][ T8619] dump_stack_lvl+0x100/0x190 [ 366.941996][ T8619] print_report+0x156/0x4c9 [ 366.942039][ T8619] ? _raw_spin_lock_irqsave+0x52/0x60 [ 366.942092][ T8619] ? __virt_addr_valid+0x81/0x620 [ 366.942129][ T8619] ? sys_fillrect+0x174a/0x1910 [ 366.942157][ T8619] kasan_report+0xdf/0x1e0 [ 366.942198][ T8619] ? sys_fillrect+0x174a/0x1910 [ 366.942244][ T8619] sys_fillrect+0x174a/0x1910 [ 366.942281][ T8619] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 366.942319][ T8619] bit_clear+0x17d/0x220 [ 366.942358][ T8619] ? __pfx_bit_clear+0x10/0x10 [ 366.942399][ T8619] ? fb_get_color_depth+0x120/0x250 [ 366.942436][ T8619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.942487][ T8619] __fbcon_clear+0x633/0x760 [ 366.942527][ T8619] ? __pfx_bit_clear+0x10/0x10 [ 366.942571][ T8619] fbcon_scroll+0x48b/0x650 [ 366.942612][ T8619] con_scroll+0x464/0x690 [ 366.942643][ T8619] do_con_write+0x6883/0x8540 [ 366.942683][ T8619] ? __pfx_do_con_write+0x10/0x10 [ 366.942722][ T8619] con_write+0x23/0xb0 [ 366.942752][ T8619] n_tty_write+0x44f/0x12d0 [ 366.942801][ T8619] ? __pfx_n_tty_write+0x10/0x10 [ 366.942838][ T8619] ? trace_kmalloc+0x101/0x130 [ 366.942882][ T8619] ? __pfx_woken_wake_function+0x10/0x10 [ 366.942923][ T8619] ? rcu_is_watching+0x12/0xc0 [ 366.942960][ T8619] ? file_tty_write.isra.0+0x694/0x890 [ 366.942990][ T8619] ? kfree+0x2ec/0x6b0 [ 366.943021][ T8619] ? __pfx_n_tty_write+0x10/0x10 [ 366.943060][ T8619] file_tty_write.isra.0+0x4d2/0x890 [ 366.943095][ T8619] redirected_tty_write+0xd4/0x120 [ 366.943127][ T8619] vfs_write+0x6ac/0x1070 [ 366.943169][ T8619] ? __pfx_redirected_tty_write+0x10/0x10 [ 366.943201][ T8619] ? __pfx_vfs_write+0x10/0x10 [ 366.943250][ T8619] ? find_held_lock+0x2b/0x80 [ 366.943309][ T8619] ksys_write+0x12a/0x250 [ 366.943351][ T8619] ? __pfx_ksys_write+0x10/0x10 [ 366.943398][ T8619] do_syscall_64+0x106/0xf80 [ 366.943430][ T8619] ? clear_bhb_loop+0x40/0x90 [ 366.943464][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.943494][ T8619] RIP: 0033:0x7f494799c629 [ 366.943518][ T8619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.943546][ T8619] RSP: 002b:00007f49487f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.943575][ T8619] RAX: ffffffffffffffda RBX: 00007f4947c15fa0 RCX: 00007f494799c629 [ 366.943595][ T8619] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 366.943613][ T8619] RBP: 00007f4947a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 366.943631][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.943649][ T8619] R13: 00007f4947c16038 R14: 00007f4947c15fa0 R15: 00007ffd605cb298 [ 366.943676][ T8619] [ 366.943687][ T8619] [ 366.943696][ T8619] The buggy address belongs to a vmalloc virtual mapping [ 366.943716][ T8619] Memory state around the buggy address: [ 366.943732][ T8619] ffffc90003fa8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.943754][ T8619] ffffc90003fa8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.943776][ T8619] >ffffc90003fa9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.943792][ T8619] ^ [ 366.943808][ T8619] ffffc90003fa9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.943828][ T8619] ffffc90003fa9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 366.943846][ T8619] ================================================================== [ 366.963482][ T8619] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 366.963510][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) [ 366.963549][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.963569][ T8619] Call Trace: [ 366.963579][ T8619] [ 366.963592][ T8619] dump_stack_lvl+0x100/0x190 [ 366.963641][ T8619] vpanic+0x552/0x970 [ 366.963673][ T8619] ? __pfx_vpanic+0x10/0x10 [ 366.963708][ T8619] ? sys_fillrect+0x174a/0x1910 [ 366.963741][ T8619] panic+0xd1/0xe0 [ 366.963771][ T8619] ? __pfx_panic+0x10/0x10 [ 366.963802][ T8619] ? sys_fillrect+0x174a/0x1910 [ 366.963834][ T8619] ? preempt_schedule_common+0x42/0xc0 [ 366.963874][ T8619] check_panic_on_warn.cold+0x19/0x34 [ 366.963906][ T8619] end_report.part.0+0x3a/0x90 [ 366.963946][ T8619] kasan_report.cold+0xe/0x18 [ 366.963985][ T8619] ? sys_fillrect+0x174a/0x1910 [ 366.964021][ T8619] sys_fillrect+0x174a/0x1910 [ 366.964062][ T8619] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 366.964105][ T8619] bit_clear+0x17d/0x220 [ 366.964151][ T8619] ? __pfx_bit_clear+0x10/0x10 [ 366.964196][ T8619] ? fb_get_color_depth+0x120/0x250 [ 366.964248][ T8619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.964301][ T8619] __fbcon_clear+0x633/0x760 [ 366.964346][ T8619] ? __pfx_bit_clear+0x10/0x10 [ 366.964395][ T8619] fbcon_scroll+0x48b/0x650 [ 366.964440][ T8619] con_scroll+0x464/0x690 [ 366.964475][ T8619] do_con_write+0x6883/0x8540 [ 366.964522][ T8619] ? __pfx_do_con_write+0x10/0x10 [ 366.964565][ T8619] con_write+0x23/0xb0 [ 366.964598][ T8619] n_tty_write+0x44f/0x12d0 [ 366.964648][ T8619] ? __pfx_n_tty_write+0x10/0x10 [ 366.964689][ T8619] ? trace_kmalloc+0x101/0x130 [ 366.964738][ T8619] ? __pfx_woken_wake_function+0x10/0x10 [ 366.964785][ T8619] ? rcu_is_watching+0x12/0xc0 [ 366.964829][ T8619] ? file_tty_write.isra.0+0x694/0x890 [ 366.964863][ T8619] ? kfree+0x2ec/0x6b0 [ 366.964898][ T8619] ? __pfx_n_tty_write+0x10/0x10 [ 366.964941][ T8619] file_tty_write.isra.0+0x4d2/0x890 [ 366.964978][ T8619] redirected_tty_write+0xd4/0x120 [ 366.965010][ T8619] vfs_write+0x6ac/0x1070 [ 366.965049][ T8619] ? __pfx_redirected_tty_write+0x10/0x10 [ 366.965084][ T8619] ? __pfx_vfs_write+0x10/0x10 [ 366.965126][ T8619] ? find_held_lock+0x2b/0x80 [ 366.965188][ T8619] ksys_write+0x12a/0x250 [ 366.965242][ T8619] ? __pfx_ksys_write+0x10/0x10 [ 366.965291][ T8619] do_syscall_64+0x106/0xf80 [ 366.965327][ T8619] ? clear_bhb_loop+0x40/0x90 [ 366.965364][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.965397][ T8619] RIP: 0033:0x7f494799c629 [ 366.965424][ T8619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.965453][ T8619] RSP: 002b:00007f49487f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.965484][ T8619] RAX: ffffffffffffffda RBX: 00007f4947c15fa0 RCX: 00007f494799c629 [ 366.965506][ T8619] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 366.965526][ T8619] RBP: 00007f4947a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 366.965546][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.965564][ T8619] R13: 00007f4947c16038 R14: 00007f4947c15fa0 R15: 00007ffd605cb298 [ 366.965595][ T8619] [ 366.965760][ T8619] Kernel Offset: disabled