last executing test programs: 12.222666804s ago: executing program 3 (id=131): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0xcd) socket(0xa, 0x3, 0x3a) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf25010000000600020000000000060001000a000000080009000100000008003beb14aaf6c436941fb5e87c6a8b00000000008100ff00200000000000040000000000ffffac1414aa0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x2b, 0x1, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x2, 0x4}, 0x8}, 0x5, 0x20000000) process_madvise$auto_MADV_DOFORK(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000680)="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", 0xffdfffffffffffff}, 0x917, 0xb, 0xfff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x40305828, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/pages_volatile\x00', 0x800, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0x9b75, 0x2, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x1}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r7 = socket(0x11, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8953, 0x0) lsetxattr$auto(0x0, 0x0, &(0x7f0000000280)="2f657d0f5e2b34acaef7b9e3efec478b4132455e398eab5eb0815a778a36b36904873f01ba17860256309863e2640761e8371ac3dd1b02308bbe5041a4aa100f50c1cf", 0x80000000, 0x7f000) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r8, 0x1, &(0x7f00000002c0)) r9 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r9, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)=""/16, 0x10) close_range$auto(0x2, 0x8, 0x0) 11.28354709s ago: executing program 3 (id=136): mmap$auto(0x0, 0xb, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) mremap$auto(0x200000000000, 0x4, 0x13, 0x7, 0x100000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port6/power/pm_qos_no_power_off\x00', 0x24880, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x2) 10.501823825s ago: executing program 3 (id=140): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) swapon$auto(&(0x7f0000000000)='/dev/ram5\x00', 0x0) lseek$auto(0x3, 0xfffffffffffffff8, 0x4) fchown$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x306, 0x0) mmap$auto(0xd, 0x4080200000009, 0x3, 0xebe, 0xffffffffffffffff, 0x6fef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x100000000000005, 0x0, 0x0, 0x2) socket(0x1, 0x2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1000002, 0x2, 0x4000002, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x80000001, 0x1, 0x8001, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0xf03, 0x3, 0x10, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu6\x00', 0x701280, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x5d, 0x2, 0x7, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) pipe2$auto(0x0, 0x7fff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.246473071s ago: executing program 3 (id=144): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)="a458f4e5e5f4bcc7fad26fd67f02b7cd05e6589800c28ef8f8202c09b2638f3653c6ed3b849812627a484d93e7ca38bb6c75b1d0f95ba576d7f2aba7a6e17d8a748fa2c2b65445121fdb006e371bc9da60cdd2378cf6a100a75f14aee91714b49cf0714f88fa5e59aae9bcf9c237ad19523f31da1c288cdf6281c4b2abd40ce043cd48819ea9eaa38e675e316b30542f9931634b3a830a7b54d420ab67826dddb406fed3bed2b77ecb0a7d4e2af6b59bab4910255fc1c235940b6f7f253131c3cd2ac263c02923997e0d75105d0d2cf679ea39a73b46233a7ae8e3bbfb0d80046e233f9d8c5560fe1c960668ebcbe0f83692592c77c17cd13221d12f7101576ebed9672885ab88780d1e19fac43722706ec0ba321cbad1a4655b89cf162edf24d1fefcae46d1249c3454cec842f32115775e6874e5cd7ded5dd35826f4cd5305cb3ef22976a7038ab5b6c2f47ab885ca72fac9790238d313859fab15b48ac55d1f572eedc5696e7699164709ec83e685df236a03296471157171e45fc876d86da156922a730e921b1db59737aa99d3c340400112561338a371d1046b32398ad4d770d08435561793bb629ea9c546540c8f54fed75b9e2e96a93bbbe986a8f4979193d7542319a3420287a1ac0a39444fc1abbf0a42bcff5cfa283d15f6c6e299a21abb3a375b3e1ddbb02e6159c9457952209b24c1bf943c54670ae8c2e47f56c96fddee1f2e1632fabde9bcd0bf1ae29eaa6cd2eba33477d8c8731f44173d7c9f6671a951d3e53e696f8f9879f9a974f7e2966e75142cda07e655b6d2eabea316f895785acf3bc931bf224e07110af85ec024d81e326efd5d258d42f731858bb0cb93c93b9030cb34b2a95e7844c018230d92b285d8cbe8bee6a92fd4243e53fa90f4635ecfdb49081d198b4146014cfc4419497fb921b2f61e23ce527374349012778e08f814df03867fee8247ee26c549c0597f94afc17d785b61e1725fa64bc12f1affe87e9117e71290bce5f75ad394817234f97c49fbc63a4d811719871c0a2d5db42d5f8ec45959a8464af57cca0566f6bd41d693f1fb5c96e4c6a6f97f50f459f7793e6046d1b535de78802b9fd9953dafe263ab3d693c0fee0283e70c610e2cfc0e3cb3854dd9d02d700eb666d80dadef740e5f274c2a8ba5fafe1898378022c3d51249710e4f4081b3e2f53670250d3ad7a06eeb02ee94505f7fc8d2c5e9a984a6ab7c1b761f517919a2f44c6bfeaf840c359627be82c08c5769921720bbd883aa74003d8dafec23f539b6b26205d931dcbd381c61430e58954ccd8bef6e8ff18243d769b9139e86d83ee72e5a8c7ac6dc0c997faf9b347947a40e7ef33686c2ee0b49d7c58148e4c8f73fcab6c5597f71feef03fc47db06955299b166bff481c71499fe92fde4e754db5ac71e1c8471ecd1d15fc9c48ce2d01fcdec9b8a9c4cd5d591f590a521dd39d3354e7e2750f7260fe89c02bb3bddd30f11be772eb95752246632df16474832514493cb6c50e8fc6b37dbc263cf970f0ab0d1221245082e91e90f55ad8354eb735038335b42e2571267b07cf71225010aab65145e443b50099b2bd4bfbf546a411e733e97d54db91e84448f966469b796425bbd144f83694b9e05b756fbba36cc6075ad8f30edb0847be6934482d6e19950af47db60a96ca5eef83faf4a1f628daa8dafc78cc2607fa0fcf6fc0ad00c64efb2c223c70bf7a8414c290d13793a5fc81b10a5bb5e8dd7ca2f81f5556d231bf2cfbf1923285aba060c1c88882107e14fddcaaf3eaea37a0bb7216050585c886b6c3fad247d85ccd458dfb746d3d0f6e517adf50a31fc96530950f186943de01ff77d98273875b727cfaf927820d52ee3a63fea63b2d39b1f2c6c2d985e62b96e4ec129207e488a2f91356ba91a8d8bd5b63718d087dfc183e56ceb924afae5f3a12d8c53bb21b8593965b1d68aa52ca985fa510d279ffc470468e3aec2d7524d80826a94e48a6ca4d11e5fc3d5776efc1a696b04c391c872eb2f42fcf6b84e6498f5d0520600f9f68a36d3c535b9d7cfc1d45415374adb90f1e6d300a99f2b5f6f77594c336ddc9b171c4875247201b05ab171a7d4418dcfffcee9996be2cd77e9d7e92965d28e1458df6d184ba7d9cd55d5994a00e692d7674f2ae01d6dd56c3e4b5aa1c0f27ae4c4cbbfe7289743b7c5f9ba7300891f4c83f414318e77de74d84d33b7f83c456e198b99d64e8b7caad5bcd618993764bb24178a990d736edf4965346c2ac76c99b22a5114ec39bc818d6a469b0d4f1aeaf955c14d7a3a5b787141d465a55d71b6138a8dc8cb1d303371c97d8479cb09545bf4a08fa99ab7ea21b3b3a95f4b052e261baf2be0131ce619ecd352904fc2486735edf6d2df283f1e2dae7432557bd8c899b397e769088797f337b3aa1867a9728148f9c63f643ce41f19906640e50764b1a6286beabe9f9e074ca60552f1212aad80b22cbbb45c6e6f00f51020df928756caa3cf374342257807d6daea4e74a79c6144fae4f78915303542b7a5d48a17179a4a43ab18631b06d81c01409277dac0d58ff48c86f679e9c0c56aa8ca6c7591078d6bee3ff9857e099145cf0775ef0ee006f9697e4c69efe0ff72543d7028f5ef18c1d814d1a9f9a3e30fa5d324ba137aaa7175a529c13a8fc321d92472c9b19c941e701f7225664b05613cb07b0705112105ab3c28b00af1b6f930f3d903ee6cc164d77d5d2a0b16667cfb6b329b53b30d8d9a826ba7430d519b1b7f537ed2df08845eb5df7737fe3554f3d96144b42bfd92cc5daab42446f3d46272a00f2457d39ef3e9ea37362d402f6287ea6f485f68ffbe383e21089c313171f6c33f8a7055299ab7cfc5d974c487d992cac1ca53c05c1e9bdb38f6ca0ed6d4e0d8ab7b6197fdd1b4b95e6a466c8d9336c571ea1743e96e0b88da75520b8adddcaa932336fa02f63ce1a7eb909507f778ca3b5f2a736f396528d06ea86f63d3e45f545d262cadd337d321023ae0e5052ba4c0028dbd19765b0097039a64d58a8998ef7afba341b42d6b227cad8f4c4025a766de872a0cfde5f8c0581d4442a7aac906a0db5fad825611e487228aed5eec17f08d887a34d2b7c6c25f77412ee9941d5dec68a0464a1b0fd6eede1aa1b50579a93f205943dfd626204b9ca493c5aaececd17df71ac200cf7331a8bfbeddb6cd95b0b3016e56de0a9eeadf8d8c3591ae061e743f7c1ca4522bf55b2d80f3ba5df92d81433552dad6fd744ea71903b15a6374613b2a64a533cf6fa974273e7e5359f47428d7620d98d877faadad739a9a761713832ea70da990271b575e7cff075714d563b5b752ab50a7e1a1b5e689ff210503faabb37b8aa1d845825ab2488cfcb6a22010a55c4c045745f186ba8f42bc5a4dd06831da770670209ba568016459c50aef30c8aba754e341183817ad9b386e6b4e194cf66b76c9ea6313491d99d7e7a6d5c92bcec000c58794de2acfc4c490392a68f61e60bf664287e7020e4f30d897d916eb73dd4965b100f3c528cf2a46d43fca6351fc8c6c50fee04340b1f2fdf382a257eab0d964e7a2f0b1b7b9bc017117d8ebb40816b5515c88f7682c02b92b01d9fe884c963846f64800463830d83605a2ea32510dfbaaa29af264f60e8f72f307880f595715637dd799de8d77b0c7131bc04d44ce06b82a0f355e09e3d580124167e62fb12c584dc9553f3f91c86afffe6d871784c56c687b48b14bc974c65f18468eb3806be61c563a8af3075e4d9ff2c55ebab74ac4d384bc7f012dd39e373f74bab4ec597caa798112958890c00de56da95293e578490fb0e1e8fa63e1db877e75c7da1e394e37f8a971f7fe1354a800fff0c23aa66d990acf8fc7524d52a0c4f7b66459cb1811719afec92b7bd88e43569559f7f5fd41196c8ead0c70e13cb05b1155aab093a58b0d4652ce5ca005f868cf38fbefd401ddc9a747447ca6ea90b277688ef780461d14c5186b5a724cf50e5e3a7453e7ac4e79f07851317ae57911529daaa03d6745df50c78b868cb60757828b00d5215b0967733e2ab1366afacbec2fae934460a1e364275715fc2fe5b911240d59d94084b3386d130c9f52d844858bd36c866b2ca215c02aaff1c4be7a5d2329e00e5ad58de3e87c862402ff5d3632b1f871461f57f6194057ccde4d1d4adc08b0da2778896aa95ef376c53818fafa74872e2f99af03edfe5e8d8e030816a01fa193007f84a627991f24f9054d0347082c2c27294d8bea1422b5847a3bfd2684f5708013d6f3c4d41baca139ebab799b0f2d15eeb4a5fd195b892d331bd1db3f0ec4ddc225e52ef8a326ccd4b86995bf90ceffd0a18d37806ee49d09f072ddab15df82556c459daf45705ebfd358c4eb7547add41da3364d90fcdd36759e0000a88080a7f6d24ebb0e29e3a1b830e773a2c6d312472375b0428a221e03e2a1810a1c3cc8cde61e5359eefbb7324f4a6b04a2da87bce311a319ae8a842a518135750779d022b1a5321eb779d318d17387a7b7a739620594b090a2e550442c3debdc07a7a5283acc99539834c47ccf7635557a3066b81b32135df2e34c509dbf66dc0276e1e57977b45d77d41db78981883cf8ce8a738c04753911e957bf044e0bdbb1e9a72a7b5f884b61293e2f2756a32f6ef292a95e8484e101194a8c7e90f1e41fddf7d6af09dff5e308a2fbf5f0158d45bc87341ce3414c4b26cbc47ba43b2c2ad9ce6068df85d30fa994bf55cca9c327501c5335711988d3b4b5552c4fb9e9b6601a63cbb0a72ecdac3848ca4870814e0b8dee48a0ab5b14224c71f12cd648a3a39cba8e68f1562c1ad4966b7099015039518de65178c6a5e409166cc49d53b0f053773535421dfe289bd7c7fc2172dd4c5820ea3d2bbfd5bfd056a4d249a803440eada02f46e6fb9db13c74dad1303ca88b0a5091e196837eedd6a1dcd00e95fee39f252e3fb3afcb28d1db702bec482f19f7a5a327a522354e7bdbb3619697cd5c6e5b098b9a3c11478ef2b6467d22d0409e43bcb6552aaf47890c30077e56e77bfc53bc77fba63a324586f3172014b98dfac4ad686c83e611b89b1591a88dc4402d5cb60366455174cf0b84d0685454265a4a7d023b588ae491e6dac119433b2610170a8dc52a0c9f60cec85fe7fea415bf61e50c315b00c70a240a56345e1030731c4144d128e8dab606b1bda54874452af20ed7d6f3350b477417857884a6a6972b9696e92464b762da5739e400850df7ad82c63efb359d3a96b5a4a2f385432b6fa54c54a37678013d1774107b168b32225172d1081aa093def6e5ed6c05767128a4ebd0913ab03d200de072e81dbbc7b0c947ee3e34f6795211e632651852cb9cd7c2de1ef54d20ef625a193ed13061030c9a2e7f8c5674cbde924e25c8f97b6add0f4f89ef2b16ff418581aebd9f962f671a6adff28acf04edd01a96f69e0671780bdf40a19e9a3a235289771738cd32d1ef14509d11781d17608251fb7fa1b9d3c8646497ba0ce8890a2f0bd6e485959ceb8edf74981ef1c0ad7fc4f67bc4c941daef39fefbbdfa39979cf0e6454d565e8e90f8f4ac565a42dde87e16d4ad0977e1e67f88f560131ddaacc8a1f9db08441e6a9ddabae4b19441ef451ae9d9a854b193eb337d68830637f3ae81738bcc1a016077efe7692e146018b417d1199a14a79eecdcb00b0477f83627be935cc3a16a90b59b501d02be6091623c94f0fcf3e74616da0bbd767384c47fbe393c08c896979eef4cf1f200"/4096, 0x1000) sysfs$auto(0x2, 0x2, 0x0) r1 = fsopen$auto(0x0, 0x1) sysfs$auto(0x8, 0x3, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r2) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r4 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r5, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) 8.837014074s ago: executing program 1 (id=145): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r3 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, 0x0, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r4, 0xc0045627, r3) ustat$auto(0x801, 0x0) r5 = socket(0x1e, 0x3, 0xa) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r5) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r7, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 8.435925001s ago: executing program 3 (id=146): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r3 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, 0x0, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r4, 0xc0045627, r3) ustat$auto(0x801, 0x0) r5 = socket(0x1e, 0x3, 0xa) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r5) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r7, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 7.273039418s ago: executing program 1 (id=148): r0 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, r0, 0xbf47) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80a040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0xa, 0x1) socket(0xa, 0x1, 0x84) prctl$auto(0x7fe, 0x5, 0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x109100, 0xebff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop5\x00', 0x60542, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) 7.272023561s ago: executing program 0 (id=156): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdb00"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) ustat$auto(0x801, 0x0) r6 = socket(0x1e, 0x3, 0xa) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r8, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 5.68825186s ago: executing program 0 (id=150): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x1000) futex$auto(&(0x7f0000000080)=0x89, 0x5, 0x9, 0x0, &(0x7f0000000000)=0x4, 0x1bc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000180)={{0x5, 0xffffffffffffffff, 0xee01, 0xbe, 0x1, 0xffffff7f, 0x4}, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x1, 0x8, 0x652, 0x142000, 0x7f, 0x1, 0x2, 0x40, 0x2, @inferred=0xffffffffffffffff}) r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x2, 0x1, 0x8, @_timer={0xffffffffffffffff, 0x9e8, @sival_ptr, 0x10001}}}, 0x4, &(0x7f0000000100)={{0xeae9, 0x1000}, {0xfffffffffffeffff, 0x9}, 0x8, 0x806, 0x76, 0x0, 0x40, 0xd, 0x0, 0x2, 0x0, 0x6, 0xa2, 0xfffffffffffffffe, 0x90, 0x6}) ptrace$auto_PTRACE_SETREGSET(0x4205, r3, 0x7, 0x9) r4 = socket(0x2, 0x3, 0xc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xc8, 0x801054db, r4) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000300)={@siginfo_0_0={0x8000, 0x5, 0x6, @_kill={0xffffffffffffffff, 0xee00}}}, 0x80, &(0x7f0000000380)={{0x9, 0x4e}, {0x7, 0x10}, 0xfffffffffffffffd, 0x80000001, 0x7, 0x3, 0x3, 0xfffffffffffffbff, 0x80000000, 0x9, 0x4, 0x1, 0x101, 0xda3b, 0x6, 0xc92f}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getresuid$auto(&(0x7f00000011c0)=0x7, 0x0, 0x0) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x14a8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x6a, 0x0, 0x0, @u64=0xffffffffffffffe2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x10a4, 0x2, 0x0, 0x1, [@nested={0x1028, 0x11f, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @u32=0xc}, @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @generic="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", @typed={0xc, 0x120, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xd8, 0x0, 0x0, @uid=r2}]}, @typed={0x8, 0xba, 0x0, 0x0, @fd=r0}, @nested={0x6d, 0xff, 0x0, 0x1, [@generic="dcd8b9e26b62ed11efd19f4f756d5b46d956f1c96f38608457cf038549f51b5748ab38ce67c12e9b69321e0292eb0382fe57dc310b01f291e96486aa3794ce28f38e4b01070411aea7753aa138d3c1510b674fb55b41497a4cc4f5526256eaa3f2", @typed={0x8, 0x136, 0x0, 0x0, @u32}]}]}, @IPVS_CMD_ATTR_DAEMON={0x3f, 0x3, 0x0, 0x1, [@generic="f3b0275173a3f2d27f011fd39d7f34b0021cc95c7879569c2f250dae5da72a", @generic="51c37df75f5b8ed627b0c159e790158b647ce2628eaf63a7ef5a48ae"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x36a, 0x1, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @pid=r3}, @generic="fc218969e5f59d564d926f4ebfae34f9251f4f38180d5f2ab2feed01f99bad2998c656a975d411d306030b5cbed20d3cd6cbfd99829b2d724292b1294d83bfa344920e8b30850e6a0d8187163a97b653a3f15d6089eb74ae2d78065cad9d3d991636ff47e9d4c4b9146cb73e5bfc625254cb55adbf137f719f8dc076e2b8f3e7bb87491f6ab232616ff4d2465ec9ec8b7c3c0e5e1ebc0afa3828b90f86efeb5573", @nested={0x8, 0xe1, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xb7, 0x10e, 0x0, 0x1, [@generic="65a26cfcf25010d61cda51bc84934dd6e8152f75017d1580dcf80259d4de86580df151460d95bb20ac3c3593cfa842590c78036513374512f399c7e77c6e2c99e02d5aeb7fc121193540a8b1b4770c764d47dca208c0015f4d5758ed88911eb0f9dfb4a99d8703272d9d48cdcfc892c2e344117dd3b6e869df74033524c86031e4895c7ef65dee98db1b8ceea72b46bac5f847dff6c839b9055a6d63f9431ed313dd056a204e87", @typed={0xc, 0x102, 0x0, 0x0, @u64=0x52}]}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @generic="e7089aedd50f8f458b82745012d3a53fb480ef7b498ebbbee3bc251d4c8cc47ddbdf65", @nested={0x14a, 0x14, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x15d}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="d79ec54160b9ed833e2e8b4e6f629ed27e645aa56f1fd4848b633336e9e3fd3b8781d3b7bbdc9d198627d2f4e3040ef11145d9ea921dc1386b217600716f3177628c29d152ff9a80379b7eb5", @generic="5cd26247eb3d3506d6501063f72b5d66dacd5842b22e9a0989e9f34e8132c631069211d767c7cae12f690cdf1d867e5b1b34d0ea183fc7eb732d753dea0a911cf22d27184e673d2829699fa6af5eb8fae84073bf6c21b1384941c812dd606577b7b40e68f66734f423b7edb5fd6b7c11c62bc56a11f8b39ba435b077d8f55eaff6a9e4f55dff6c30cdb1e9a5f73f02f87c5d9f5d2fe885e0d1a018f8a7ca8b36a1cadab72046692696a8f2e7fe6cc46257e7624534865ddddf7384ac4458c1d5d1cacdfbb3d93cd47971e55ad209345ae5b2"]}, @generic="42e785a75109fdc103a6a7d05a0bfb5292ec69b246c57881c9372ab8e708fe6f6947c70029f222195cfa113bba70527e24c7f4fc5522c8b9cca8f64a50852a0a1665959ce56c7b6f39800c0cc2a2a9e39745a7d70ba64f13bdcb10edb6cd03d3b0519e28a28eea6176a6786373d0070ba0355ba66752b4311dca"]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@typed={0x6, 0x65, 0x0, 0x0, @str='&\x00'}, @nested={0x8, 0x32, 0x0, 0x1, [@nested={0x4, 0x117}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x10}, 0x4080) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/system/cpu/cpu0/topology/cluster_id\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x3, 0x0) 5.379604716s ago: executing program 3 (id=151): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0xfffffffffffffffe, 0x7, 0x4, 0x0, 0x8, 0x7) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) getcwd$auto(&(0x7f0000000040)='/dev/vhci\x00', 0xfffffffffffffee5) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x4, 0x6, 0x800000000eb1, 0xfffffffffffffffa, 0x8001) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) 5.366916915s ago: executing program 2 (id=160): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3000) 5.253399178s ago: executing program 0 (id=152): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r0}, 0x92) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x101085) 4.694087942s ago: executing program 2 (id=153): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdb00"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) ustat$auto(0x801, 0x0) r6 = socket(0x1e, 0x3, 0xa) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r8, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 4.152494216s ago: executing program 1 (id=154): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdb00"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) ustat$auto(0x801, 0x0) r6 = socket(0x1e, 0x3, 0xa) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r8, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 3.422361187s ago: executing program 2 (id=155): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, 0x0, 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdb00"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) ustat$auto(0x801, 0x0) r6 = socket(0x1e, 0x3, 0xa) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r8, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 2.41039653s ago: executing program 1 (id=157): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dmmidi2\x00', 0x260840, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd7, 0x15, r2, 0x0) mmap$auto(0x7, 0xf, 0x4, 0x19, r1, 0x0) mmap$auto(0x2, 0x400000400005, 0x84, 0x9b71, 0x2, 0x9081) mmap$auto(0x0, 0x400007, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0xfffffffffffffffe, 0x1, 0x0, 0x2000000000000e8, 0x0, 0x4, 0x0, 0x8}) socket(0xa, 0x801, 0x84) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000240), 0xea769c9ebb14b2a8, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) listmount$auto(&(0x7f0000000180)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) clone$auto(0xe15e, 0x10000, &(0x7f0000000040)=0x6, &(0x7f00000001c0)=0x2, 0x80000001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x4000004020005, 0xe0, 0x10, 0x401, 0x2a) mlock$auto(0x112, 0x80006) madvise$auto(0x0, 0x200007, 0x19) 2.409432182s ago: executing program 0 (id=166): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdb00"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) ustat$auto(0x801, 0x0) r6 = socket(0x1e, 0x3, 0xa) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r8, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 2.198630469s ago: executing program 2 (id=158): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdb00"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) getpid() wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) ustat$auto(0x801, 0x0) r6 = socket(0x1e, 0x3, 0xa) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r6) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x262000, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0xffffffffffffffff, r8, 0x6) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) 1.060711574s ago: executing program 0 (id=159): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x1f) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) 945.809716ms ago: executing program 1 (id=161): mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) madvise$auto(0x0, 0x8000000000000001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) getsockopt$auto(r1, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) 810.726883ms ago: executing program 2 (id=162): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc9, &(0x7f00000002c0)={0x0, 0xff8c}, 0x5, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0xff030000) 326.319692ms ago: executing program 2 (id=163): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r0}, 0x92) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4008815) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={@raw=0x5, 0xf356, 0x5, @btrfs_ioctl_vol_args_v2_3_0={0x2, &(0x7f0000000440)={0xa38, 0x4, 0x3, 0x1, {0x2, 0xffff, 0xfffffffffffffff9, 0x7, 0x6}, [0xefcd, 0x7, 0xfffffffffffffff7, 0x5, 0x0]}}, @name="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"}) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x101085) 1.281099ms ago: executing program 1 (id=164): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) flistxattr$auto(r1, 0x0, 0x9) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r0}, 0x92) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x8) r2 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5 1 [ 102.082101][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.091403][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.111993][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.120763][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.227694][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.238033][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.251465][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.261225][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.274960][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.303296][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.316881][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.326144][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.343977][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.354333][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.363187][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.382377][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.396247][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.405498][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.413988][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.870650][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 103.023386][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 103.190435][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 103.277864][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.286641][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.295021][ T5826] bridge_slave_0: entered allmulticast mode [ 103.303219][ T5826] bridge_slave_0: entered promiscuous mode [ 103.331942][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 103.354312][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.362089][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.370511][ T5826] bridge_slave_1: entered allmulticast mode [ 103.379197][ T5826] bridge_slave_1: entered promiscuous mode [ 103.482307][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.492923][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.500831][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.508805][ T5830] bridge_slave_0: entered allmulticast mode [ 103.517480][ T5830] bridge_slave_0: entered promiscuous mode [ 103.546548][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.558876][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.567120][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.575780][ T5830] bridge_slave_1: entered allmulticast mode [ 103.583834][ T5830] bridge_slave_1: entered promiscuous mode [ 103.688362][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.696572][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.705106][ T5831] bridge_slave_0: entered allmulticast mode [ 103.713285][ T5831] bridge_slave_0: entered promiscuous mode [ 103.737964][ T5826] team0: Port device team_slave_0 added [ 103.748323][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.761131][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.768983][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.778041][ T5831] bridge_slave_1: entered allmulticast mode [ 103.787160][ T5831] bridge_slave_1: entered promiscuous mode [ 103.810399][ T5826] team0: Port device team_slave_1 added [ 103.834063][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.862772][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.871324][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.879622][ T5836] bridge_slave_0: entered allmulticast mode [ 103.888788][ T5836] bridge_slave_0: entered promiscuous mode [ 103.941669][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.949408][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.957988][ T5836] bridge_slave_1: entered allmulticast mode [ 103.966954][ T5836] bridge_slave_1: entered promiscuous mode [ 103.976836][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.984635][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.012646][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.041680][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.054974][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.080032][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.088638][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.120984][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.135306][ T5830] team0: Port device team_slave_0 added [ 104.161941][ T5827] Bluetooth: hci0: command tx timeout [ 104.187076][ T5830] team0: Port device team_slave_1 added [ 104.212175][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.225386][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.253423][ T5831] team0: Port device team_slave_0 added [ 104.304165][ T5831] team0: Port device team_slave_1 added [ 104.312621][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.320041][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.349339][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.349360][ T5827] Bluetooth: hci1: command tx timeout [ 104.381807][ T5836] team0: Port device team_slave_0 added [ 104.401154][ T5827] Bluetooth: hci2: command tx timeout [ 104.405247][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.416774][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.444935][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.471550][ T5836] team0: Port device team_slave_1 added [ 104.480884][ T5827] Bluetooth: hci3: command tx timeout [ 104.514373][ T5826] hsr_slave_0: entered promiscuous mode [ 104.521981][ T5826] hsr_slave_1: entered promiscuous mode [ 104.542915][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.550648][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.581081][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.595820][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.604991][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.634512][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.711729][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.718764][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.749023][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.763154][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.772837][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.802386][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.876678][ T5830] hsr_slave_0: entered promiscuous mode [ 104.884300][ T5830] hsr_slave_1: entered promiscuous mode [ 104.892615][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 104.898824][ T5830] Cannot create hsr debugfs directory [ 104.936019][ T5831] hsr_slave_0: entered promiscuous mode [ 104.943752][ T5831] hsr_slave_1: entered promiscuous mode [ 104.951153][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 104.957429][ T5831] Cannot create hsr debugfs directory [ 105.083864][ T5836] hsr_slave_0: entered promiscuous mode [ 105.092273][ T5836] hsr_slave_1: entered promiscuous mode [ 105.098856][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 105.105360][ T5836] Cannot create hsr debugfs directory [ 105.556459][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.574891][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.592146][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.614608][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.694873][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.709744][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.727065][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.753593][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.844378][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.866993][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.905735][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.920355][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.004676][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.033948][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.048404][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.074594][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.143349][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.219602][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.241674][ T5827] Bluetooth: hci0: command tx timeout [ 106.267170][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.275244][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.299703][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.307523][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.321962][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.366931][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.410890][ T5827] Bluetooth: hci1: command tx timeout [ 106.449767][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.473040][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.481629][ T5827] Bluetooth: hci2: command tx timeout [ 106.496932][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.504885][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.532303][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.540134][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.554839][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.562398][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.572373][ T5827] Bluetooth: hci3: command tx timeout [ 106.606919][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.614810][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.702564][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.816238][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.860557][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.868338][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.923174][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.931113][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.058841][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.077614][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.215418][ T5826] veth0_vlan: entered promiscuous mode [ 107.264634][ T5826] veth1_vlan: entered promiscuous mode [ 107.355852][ T5826] veth0_macvtap: entered promiscuous mode [ 107.402588][ T5826] veth1_macvtap: entered promiscuous mode [ 107.448680][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.469188][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.558873][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.598826][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.654642][ T126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.665301][ T126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.688531][ T126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.698368][ T126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.712637][ T5830] veth0_vlan: entered promiscuous mode [ 107.727967][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.758494][ T5830] veth1_vlan: entered promiscuous mode [ 107.774884][ T5831] veth0_vlan: entered promiscuous mode [ 107.797814][ T5831] veth1_vlan: entered promiscuous mode [ 107.864852][ T5830] veth0_macvtap: entered promiscuous mode [ 107.943796][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.959917][ T5830] veth1_macvtap: entered promiscuous mode [ 107.968504][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.055251][ T5836] veth0_vlan: entered promiscuous mode [ 108.063508][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.077276][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.086784][ T5831] veth0_macvtap: entered promiscuous mode [ 108.103519][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.121591][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.130396][ T5831] veth1_macvtap: entered promiscuous mode [ 108.174552][ T5836] veth1_vlan: entered promiscuous mode [ 108.197586][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.214090][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.226767][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.251594][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.263908][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.322935][ T5827] Bluetooth: hci0: command tx timeout [ 108.383457][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.398473][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.475157][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.487326][ T5827] Bluetooth: hci1: command tx timeout [ 108.509065][ T5836] veth0_macvtap: entered promiscuous mode [ 108.546066][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.558824][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.569241][ T5827] Bluetooth: hci2: command tx timeout [ 108.594459][ T5913] futex_wake_op: syz.1.2 tries to shift op by -2048; fix this program [ 108.600019][ T5836] veth1_macvtap: entered promiscuous mode [ 108.621647][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.631764][ T5913] 0x000000000001-0x000000020000 : "" [ 108.641297][ T5827] Bluetooth: hci3: command tx timeout [ 108.654995][ T5913] ftl_cs: FTL header corrupt! [ 108.788641][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.817645][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.837135][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.907483][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.949518][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.980114][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.007043][ T126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.031452][ T126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.099242][ T126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.112696][ T126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.233792][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.258452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.450260][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.476026][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.602500][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.665309][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.726491][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.747163][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.402575][ T5827] Bluetooth: hci0: command tx timeout [ 110.564928][ T5827] Bluetooth: hci1: command tx timeout [ 110.641996][ T5827] Bluetooth: hci2: command tx timeout [ 110.721300][ T5827] Bluetooth: hci3: command tx timeout [ 112.043526][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.760929][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 113.070644][ T5964] bond0: option slaves: interface - does not exist! [ 114.899359][ T5984] ubi0: attaching mtd0 [ 114.915561][ T5984] ubi0: scanning is finished [ 114.915599][ T5984] ubi0: empty MTD device detected [ 115.180140][ T5991] FAULT_INJECTION: forcing a failure. [ 115.180140][ T5991] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.180220][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 115.180263][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.180287][ T5991] Call Trace: [ 115.180298][ T5991] [ 115.180311][ T5991] dump_stack_lvl+0x100/0x190 [ 115.180372][ T5991] should_fail_ex.cold+0x5/0xa [ 115.180408][ T5991] ? prepare_alloc_pages+0x16d/0x5f0 [ 115.180453][ T5991] should_fail_alloc_page+0xeb/0x140 [ 115.180496][ T5991] prepare_alloc_pages+0x1f0/0x5f0 [ 115.180546][ T5991] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 115.180611][ T5991] ? reacquire_held_locks+0xce/0x1e0 [ 115.180663][ T5991] ? folio_lock_anon_vma_read+0x348/0xe30 [ 115.180719][ T5991] ? folio_lock_anon_vma_read+0x348/0xe30 [ 115.180769][ T5991] ? __up_read+0x2c5/0x700 [ 115.180818][ T5991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.180870][ T5991] ? __pfx___up_read+0x10/0x10 [ 115.180917][ T5991] ? rmap_walk_anon+0x561/0x870 [ 115.180992][ T5991] __folio_alloc_noprof+0x13/0x2f0 [ 115.181045][ T5991] alloc_migration_target+0x1d7/0x6d0 [ 115.181086][ T5991] migrate_pages_batch+0x4f2/0x4530 [ 115.181124][ T5991] ? __pfx_alloc_migration_target+0x10/0x10 [ 115.181169][ T5991] ? walk_pgd_range+0x1115/0x1eb0 [ 115.181214][ T5991] ? __pfx_migrate_pages_batch+0x10/0x10 [ 115.181274][ T5991] migrate_pages_sync+0x12c/0x880 [ 115.181310][ T5991] ? __pfx_alloc_migration_target+0x10/0x10 [ 115.181352][ T5991] ? __pfx_migrate_pages_sync+0x10/0x10 [ 115.181385][ T5991] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 115.181426][ T5991] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 115.181502][ T5991] migrate_pages+0x1aae/0x28a0 [ 115.181545][ T5991] ? __pfx_alloc_migration_target+0x10/0x10 [ 115.181589][ T5991] ? __pfx_migrate_pages+0x10/0x10 [ 115.181626][ T5991] ? queue_pages_range+0x11e/0x180 [ 115.181682][ T5991] ? __up_read+0x2c5/0x700 [ 115.181726][ T5991] ? __pfx___up_read+0x10/0x10 [ 115.181766][ T5991] ? do_migrate_pages+0x451/0x740 [ 115.181797][ T5991] ? do_migrate_pages+0x451/0x740 [ 115.181837][ T5991] do_migrate_pages+0x488/0x740 [ 115.181880][ T5991] ? __pfx_do_migrate_pages+0x10/0x10 [ 115.181918][ T5991] ? rcu_is_watching+0x12/0xc0 [ 115.181962][ T5991] ? cap_capable+0x107/0x460 [ 115.182005][ T5991] ? get_task_mm+0xc2/0xf0 [ 115.182035][ T5991] ? security_capable+0xbd/0x260 [ 115.182084][ T5991] kernel_migrate_pages+0x560/0x700 [ 115.182116][ T5991] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 115.182166][ T5991] ? xfd_validate_state+0x129/0x190 [ 115.182219][ T5991] __x64_sys_migrate_pages+0x96/0x100 [ 115.182253][ T5991] ? lockdep_hardirqs_on+0x78/0x100 [ 115.182299][ T5991] do_syscall_64+0x106/0xf80 [ 115.182340][ T5991] ? clear_bhb_loop+0x40/0x90 [ 115.182374][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.182403][ T5991] RIP: 0033:0x7f2f6b59c799 [ 115.182439][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.182466][ T5991] RSP: 002b:00007f2f68f6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 115.182502][ T5991] RAX: ffffffffffffffda RBX: 00007f2f6b816360 RCX: 00007f2f6b59c799 [ 115.182521][ T5991] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 115.182537][ T5991] RBP: 00007f2f6b632c99 R08: 0000000000000000 R09: 0000000000000000 [ 115.182553][ T5991] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 115.182570][ T5991] R13: 00007f2f6b8163f8 R14: 00007f2f6b816360 R15: 00007ffe534b6f68 [ 115.182606][ T5991] [ 115.517183][ T5984] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.517240][ T5984] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.517270][ T5984] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.517297][ T5984] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.517324][ T5984] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.517358][ T5984] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.517386][ T5984] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3807698368 [ 115.517426][ T5984] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.518343][ T5992] ubi0: background thread "ubi_bgt0d" started, PID 5992 [ 115.551993][ T5986] ubi0: detaching mtd0 [ 115.601826][ T5986] ubi0: mtd0 is detached [ 117.132901][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'. [ 117.255904][ T6009] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 117.423848][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 117.749805][ T5827] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 117.973410][ T6017] can: request_module (can-proto-0) failed. [ 119.418494][ T6027] FAULT_INJECTION: forcing a failure. [ 119.418494][ T6027] name failslab, interval 1, probability 0, space 0, times 1 [ 119.441074][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 119.441125][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.441155][ T6027] Call Trace: [ 119.441166][ T6027] [ 119.441178][ T6027] dump_stack_lvl+0x100/0x190 [ 119.441233][ T6027] should_fail_ex.cold+0x5/0xa [ 119.441267][ T6027] ? ima_alloc_init_template+0x19d/0x6d0 [ 119.441299][ T6027] should_failslab+0xc2/0x120 [ 119.441331][ T6027] __kmalloc_noprof+0xe0/0x850 [ 119.441386][ T6027] ima_alloc_init_template+0x19d/0x6d0 [ 119.441427][ T6027] ima_store_measurement+0x1e3/0x5b0 [ 119.441461][ T6027] ? __pfx_ima_store_measurement+0x10/0x10 [ 119.441507][ T6027] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 119.441558][ T6027] process_measurement+0x19cc/0x2350 [ 119.441618][ T6027] ? __pfx_process_measurement+0x10/0x10 [ 119.441675][ T6027] ? find_held_lock+0x2b/0x80 [ 119.441705][ T6027] ? fscrypt_file_open+0x48f/0x5c0 [ 119.441772][ T6027] ? __pfx___fsnotify_parent+0x10/0x10 [ 119.441802][ T6027] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 119.441841][ T6027] ima_file_check+0xcc/0x120 [ 119.441889][ T6027] ? __pfx_ima_file_check+0x10/0x10 [ 119.441941][ T6027] ? vfs_open+0x2e3/0x3f0 [ 119.441984][ T6027] security_file_post_open+0xc4/0x210 [ 119.442029][ T6027] path_openat+0x1418/0x31a0 [ 119.442066][ T6027] ? trace_kmem_cache_alloc+0x60/0x120 [ 119.442102][ T6027] ? __pfx_path_openat+0x10/0x10 [ 119.442137][ T6027] ? __asan_memcpy+0x3c/0x60 [ 119.442185][ T6027] ? do_getname_kernel+0x1be/0x250 [ 119.442224][ T6027] do_file_open_root+0x2f6/0x5a0 [ 119.442256][ T6027] ? widen_string+0xdb/0x2f0 [ 119.442291][ T6027] ? __pfx_do_file_open_root+0x10/0x10 [ 119.442347][ T6027] ? __lock_acquire+0x4a5/0x2630 [ 119.442386][ T6027] ? vsnprintf+0x4ee/0x1240 [ 119.442432][ T6027] file_open_root+0x19b/0x3b0 [ 119.442463][ T6027] ? __pfx_file_open_root+0x10/0x10 [ 119.442491][ T6027] ? find_held_lock+0x2b/0x80 [ 119.442519][ T6027] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 119.442563][ T6027] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 119.442615][ T6027] kernel_read_file_from_path_initns+0x189/0x260 [ 119.442662][ T6027] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 119.442716][ T6027] _request_firmware+0x733/0x13c0 [ 119.442772][ T6027] ? __pfx__request_firmware+0x10/0x10 [ 119.442815][ T6027] ? __pfx_netdev_run_todo+0x10/0x10 [ 119.442859][ T6027] ? __pfx___nla_validate_parse+0x10/0x10 [ 119.442908][ T6027] ? rcu_is_watching+0x12/0xc0 [ 119.442957][ T6027] request_firmware+0x35/0x50 [ 119.443001][ T6027] reg_reload_regdb+0x85/0x460 [ 119.443032][ T6027] ? __pfx_reg_reload_regdb+0x10/0x10 [ 119.443063][ T6027] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 119.443099][ T6027] ? nl80211_pre_doit+0x19a/0xae0 [ 119.443146][ T6027] genl_family_rcv_msg_doit+0x214/0x300 [ 119.443183][ T6027] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.443216][ T6027] ? genl_get_cmd+0x3ef/0x720 [ 119.443253][ T6027] ? bpf_lsm_capable+0x9/0x10 [ 119.443285][ T6027] ? security_capable+0x80/0x260 [ 119.443337][ T6027] genl_rcv_msg+0x560/0x800 [ 119.443373][ T6027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.443405][ T6027] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 119.443441][ T6027] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 119.443467][ T6027] ? __pfx_nl80211_post_doit+0x10/0x10 [ 119.443517][ T6027] netlink_rcv_skb+0x159/0x420 [ 119.443544][ T6027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.443578][ T6027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.443619][ T6027] ? netlink_deliver_tap+0x1ae/0xcc0 [ 119.443668][ T6027] genl_rcv+0x28/0x40 [ 119.443695][ T6027] netlink_unicast+0x5aa/0x870 [ 119.443747][ T6027] ? __pfx_netlink_unicast+0x10/0x10 [ 119.443792][ T6027] ? __pfx___might_resched+0x10/0x10 [ 119.443836][ T6027] ? __lock_acquire+0x4a5/0x2630 [ 119.443883][ T6027] netlink_sendmsg+0x8b0/0xda0 [ 119.443915][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.443940][ T6027] ? __import_iovec+0x1d2/0x640 [ 119.443979][ T6027] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 119.444032][ T6027] ____sys_sendmsg+0x9e1/0xb70 [ 119.444062][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.444092][ T6027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.444131][ T6027] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.444189][ T6027] ___sys_sendmsg+0x190/0x1e0 [ 119.444225][ T6027] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.444291][ T6027] ? do_futex+0x192/0x350 [ 119.444337][ T6027] __sys_sendmsg+0x170/0x220 [ 119.444383][ T6027] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.444427][ T6027] ? __x64_sys_futex+0x34f/0x4d0 [ 119.444486][ T6027] do_syscall_64+0x106/0xf80 [ 119.444529][ T6027] ? clear_bhb_loop+0x40/0x90 [ 119.444565][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.444595][ T6027] RIP: 0033:0x7f72bd79c799 [ 119.444620][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.444648][ T6027] RSP: 002b:00007f72be5e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.444676][ T6027] RAX: ffffffffffffffda RBX: 00007f72bda15fa0 RCX: 00007f72bd79c799 [ 119.444695][ T6027] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 119.444712][ T6027] RBP: 00007f72bd832c99 R08: 0000000000000000 R09: 0000000000000000 [ 119.444729][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.444745][ T6027] R13: 00007f72bda16038 R14: 00007f72bda15fa0 R15: 00007ffed5351ec8 [ 119.444782][ T6027] [ 120.159141][ T30] audit: type=1804 audit(1774463077.591:2): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.23" name="/lib/firmware/regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 120.361988][ T6027] syz.0.23 (6027) used greatest stack depth: 19672 bytes left [ 120.546813][ T6031] Zero length message leads to an empty skb [ 121.734536][ T6056] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.759211][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 121.884981][ T6059] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 121.975979][ T6059] CIFS mount error: No usable UNC path provided in device string! [ 121.975979][ T6059] [ 122.029735][ T6059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 122.898320][ T6079] futex_wake_op: syz.1.36 tries to shift op by -2048; fix this program [ 122.909120][ T6079] 0x000000000001-0x000000020000 : "" [ 122.921417][ T6079] ftl_cs: FTL header corrupt! [ 122.936847][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 126.323615][ T6127] syz.0.45 uses obsolete (PF_INET,SOCK_PACKET) [ 129.038048][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 129.076637][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 129.092337][ T6153] netlink: 354 bytes leftover after parsing attributes in process `syz.2.49'. [ 129.581792][ T6161] futex_wake_op: syz.3.51 tries to shift op by -2048; fix this program [ 129.608606][ T6161] 0x000000000001-0x000000020000 : "" [ 129.654184][ T6161] ftl_cs: FTL header corrupt! [ 129.992151][ T6170] hub 1-0:1.0: USB hub found [ 130.000359][ T6170] hub 1-0:1.0: 1 port detected [ 130.878746][ T6179] FAULT_INJECTION: forcing a failure. [ 130.878746][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 130.916129][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.0.55 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.916185][ T6179] Tainted: [L]=SOFTLOCKUP [ 130.916197][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.916217][ T6179] Call Trace: [ 130.916227][ T6179] [ 130.916241][ T6179] dump_stack_lvl+0x100/0x190 [ 130.916313][ T6179] should_fail_ex.cold+0x5/0xa [ 130.916355][ T6179] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 130.916398][ T6179] should_failslab+0xc2/0x120 [ 130.916437][ T6179] __kmalloc_noprof+0xe0/0x850 [ 130.916502][ T6179] vb2_core_allocated_buffers_storage+0x184/0x220 [ 130.916555][ T6179] vb2_core_reqbufs+0x382/0xf30 [ 130.916605][ T6179] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 130.916670][ T6179] __vb2_init_fileio+0x32d/0x1000 [ 130.916710][ T6179] ? vb2_fop_read+0xe5/0x520 [ 130.916744][ T6179] ? aa_file_perm+0x7f3/0x14d0 [ 130.916796][ T6179] ? lockdep_hardirqs_on+0x78/0x100 [ 130.916857][ T6179] __vb2_perform_fileio+0x91e/0x1380 [ 130.916912][ T6179] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 130.916954][ T6179] ? __pfx___might_resched+0x10/0x10 [ 130.917020][ T6179] vb2_fop_read+0x211/0x520 [ 130.917064][ T6179] v4l2_read+0x229/0x2c0 [ 130.917097][ T6179] ? __pfx_v4l2_read+0x10/0x10 [ 130.917131][ T6179] vfs_read+0x1e4/0xb30 [ 130.917170][ T6179] ? __pfx_vfs_read+0x10/0x10 [ 130.917200][ T6179] ? find_held_lock+0x2b/0x80 [ 130.917244][ T6179] ? __fget_files+0x215/0x3d0 [ 130.917278][ T6179] ? __fget_files+0x215/0x3d0 [ 130.917320][ T6179] ? __fget_files+0x21f/0x3d0 [ 130.917367][ T6179] ksys_read+0x12a/0x250 [ 130.917400][ T6179] ? __pfx_ksys_read+0x10/0x10 [ 130.917446][ T6179] do_syscall_64+0x106/0xf80 [ 130.917497][ T6179] ? clear_bhb_loop+0x40/0x90 [ 130.917547][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.917583][ T6179] RIP: 0033:0x7f72bd79c799 [ 130.917611][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.917644][ T6179] RSP: 002b:00007f72be5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.917677][ T6179] RAX: ffffffffffffffda RBX: 00007f72bda15fa0 RCX: 00007f72bd79c799 [ 130.917700][ T6179] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 130.917721][ T6179] RBP: 00007f72bd832c99 R08: 0000000000000000 R09: 0000000000000000 [ 130.917742][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.917763][ T6179] R13: 00007f72bda16038 R14: 00007f72bda15fa0 R15: 00007ffed5351ec8 [ 130.917809][ T6179] [ 131.688889][ T6189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.697098][ T6189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.780978][ T6189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.886606][ T6189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.914403][ T6189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.970942][ T6189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.003076][ T6189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.019432][ T6189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.060508][ T6189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.087894][ T6189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.106716][ T6189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.164452][ T6189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.242531][ T6209] ======================================================= [ 133.242531][ T6209] WARNING: The mand mount option has been deprecated and [ 133.242531][ T6209] and is ignored by this kernel. Remove the mand [ 133.242531][ T6209] option from the mount to silence this warning. [ 133.242531][ T6209] ======================================================= [ 133.607499][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.620789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.760899][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.923413][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.081044][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.161600][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.053496][ T6241] Unable to find swap-space signature [ 135.599534][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 135.840915][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.010504][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.165146][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.242296][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.241090][ T6273] FAULT_INJECTION: forcing a failure. [ 137.241090][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 137.321131][ T6273] CPU: 1 UID: 0 PID: 6273 Comm: syz.3.72 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.321176][ T6273] Tainted: [L]=SOFTLOCKUP [ 137.321185][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.321199][ T6273] Call Trace: [ 137.321207][ T6273] [ 137.321217][ T6273] dump_stack_lvl+0x100/0x190 [ 137.321261][ T6273] should_fail_ex.cold+0x5/0xa [ 137.321290][ T6273] should_failslab+0xc2/0x120 [ 137.321318][ T6273] __kmalloc_cache_node_noprof+0x7d/0x770 [ 137.321360][ T6273] ? blk_mq_init_tags+0x8c/0x300 [ 137.321392][ T6273] blk_mq_init_tags+0x8c/0x300 [ 137.321420][ T6273] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 137.321466][ T6273] ? blk_mq_update_queue_map+0x227/0x3a0 [ 137.321498][ T6273] blk_mq_alloc_tag_set+0x848/0x1330 [ 137.321550][ T6273] loop_add+0x3b7/0xb60 [ 137.321586][ T6273] ? __pfx_loop_add+0x10/0x10 [ 137.321639][ T6273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.321669][ T6273] loop_control_ioctl+0xae/0x620 [ 137.321708][ T6273] ? __pfx_loop_control_ioctl+0x10/0x10 [ 137.321745][ T6273] ? xfd_validate_state+0x129/0x190 [ 137.321784][ T6273] ? __pfx_loop_control_ioctl+0x10/0x10 [ 137.321823][ T6273] __x64_sys_ioctl+0x18e/0x210 [ 137.321863][ T6273] do_syscall_64+0x106/0xf80 [ 137.321902][ T6273] ? clear_bhb_loop+0x40/0x90 [ 137.321933][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.321958][ T6273] RIP: 0033:0x7f63bc79c799 [ 137.321978][ T6273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.322001][ T6273] RSP: 002b:00007f63ba9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.322024][ T6273] RAX: ffffffffffffffda RBX: 00007f63bca15fa0 RCX: 00007f63bc79c799 [ 137.322040][ T6273] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 137.322055][ T6273] RBP: 00007f63bc832c99 R08: 0000000000000000 R09: 0000000000000000 [ 137.322070][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.322084][ T6273] R13: 00007f63bca16038 R14: 00007f63bca15fa0 R15: 00007fffb1429528 [ 137.322116][ T6273] [ 137.322260][ T6273] blk-mq: reduced tag depth (128 -> 64) [ 137.455179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 137.922537][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.085212][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.240859][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.277868][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 138.320910][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.141615][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 139.162075][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.243403][ T6299] bridge_slave_1 (unregistering): left allmulticast mode [ 139.270807][ T6299] bridge_slave_1 (unregistering): left promiscuous mode [ 139.279149][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.606937][ T6301] FAULT_INJECTION: forcing a failure. [ 139.606937][ T6301] name failslab, interval 1, probability 0, space 0, times 0 [ 139.634168][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.1.79 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.634221][ T6301] Tainted: [L]=SOFTLOCKUP [ 139.634232][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.634251][ T6301] Call Trace: [ 139.634262][ T6301] [ 139.634274][ T6301] dump_stack_lvl+0x100/0x190 [ 139.634333][ T6301] should_fail_ex.cold+0x5/0xa [ 139.634376][ T6301] should_failslab+0xc2/0x120 [ 139.634415][ T6301] __kmalloc_cache_noprof+0x7a/0x6f0 [ 139.634462][ T6301] ? _request_firmware+0x1ef/0x13c0 [ 139.634524][ T6301] _request_firmware+0x1ef/0x13c0 [ 139.634585][ T6301] ? assign_fw+0x1ca/0x670 [ 139.634632][ T6301] ? mark_held_locks+0x40/0x70 [ 139.634674][ T6301] ? __pfx__request_firmware+0x10/0x10 [ 139.634730][ T6301] ? _request_firmware+0x274/0x13c0 [ 139.634790][ T6301] request_firmware+0x35/0x50 [ 139.634842][ T6301] valid_regdb+0x184/0x590 [ 139.634894][ T6301] ? __pfx___nla_validate_parse+0x10/0x10 [ 139.634960][ T6301] ? __pfx_valid_regdb+0x10/0x10 [ 139.635011][ T6301] ? rcu_is_watching+0x12/0xc0 [ 139.635075][ T6301] reg_reload_regdb+0x11a/0x460 [ 139.635112][ T6301] ? __pfx_reg_reload_regdb+0x10/0x10 [ 139.635151][ T6301] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 139.635194][ T6301] ? nl80211_pre_doit+0x19a/0xae0 [ 139.635244][ T6301] genl_family_rcv_msg_doit+0x214/0x300 [ 139.635289][ T6301] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.635327][ T6301] ? genl_get_cmd+0x3ef/0x720 [ 139.635373][ T6301] ? bpf_lsm_capable+0x9/0x10 [ 139.635411][ T6301] ? security_capable+0x80/0x260 [ 139.635474][ T6301] genl_rcv_msg+0x560/0x800 [ 139.635516][ T6301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.635555][ T6301] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 139.635598][ T6301] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 139.635630][ T6301] ? __pfx_nl80211_post_doit+0x10/0x10 [ 139.635688][ T6301] netlink_rcv_skb+0x159/0x420 [ 139.635719][ T6301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.635760][ T6301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.635811][ T6301] ? netlink_deliver_tap+0x1ae/0xcc0 [ 139.635871][ T6301] genl_rcv+0x28/0x40 [ 139.635902][ T6301] netlink_unicast+0x5aa/0x870 [ 139.635973][ T6301] ? __pfx_netlink_unicast+0x10/0x10 [ 139.636029][ T6301] ? __pfx___might_resched+0x10/0x10 [ 139.636083][ T6301] ? __lock_acquire+0x4a5/0x2630 [ 139.636140][ T6301] netlink_sendmsg+0x8b0/0xda0 [ 139.636181][ T6301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.636212][ T6301] ? __import_iovec+0x1d2/0x640 [ 139.636260][ T6301] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 139.636326][ T6301] ____sys_sendmsg+0x9e1/0xb70 [ 139.636363][ T6301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.636400][ T6301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.636449][ T6301] ? __pfx_futex_wake_mark+0x10/0x10 [ 139.636512][ T6301] ___sys_sendmsg+0x190/0x1e0 [ 139.636556][ T6301] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.636649][ T6301] __sys_sendmsg+0x170/0x220 [ 139.636703][ T6301] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.636756][ T6301] ? __x64_sys_futex+0x34f/0x4d0 [ 139.636829][ T6301] do_syscall_64+0x106/0xf80 [ 139.636881][ T6301] ? clear_bhb_loop+0x40/0x90 [ 139.636924][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.636969][ T6301] RIP: 0033:0x7f3c3f39c799 [ 139.636999][ T6301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.637032][ T6301] RSP: 002b:00007f3c402be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.637065][ T6301] RAX: ffffffffffffffda RBX: 00007f3c3f615fa0 RCX: 00007f3c3f39c799 [ 139.637088][ T6301] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 139.637108][ T6301] RBP: 00007f3c3f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 139.637129][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.637149][ T6301] R13: 00007f3c3f616038 R14: 00007f3c3f615fa0 R15: 00007ffed97872e8 [ 139.637195][ T6301] [ 139.763860][ T6301] faux_driver regulatory: _request_firmware_prepare: kmalloc(struct firmware) failed [ 141.260111][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 141.319587][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.471844][ T6326] bridge_slave_1 (unregistering): left allmulticast mode [ 141.499841][ T6326] bridge_slave_1 (unregistering): left promiscuous mode [ 141.544912][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.548510][ T6338] mmap: syz.0.87 (6338) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.065003][ T6354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.074348][ T6354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.094492][ T6354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.120518][ T6354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.538671][ T6372] netlink: 'syz.0.95': attribute type 11 has an invalid length. [ 145.567045][ T6366] futex_wake_op: syz.1.93 tries to shift op by -2048; fix this program [ 146.480885][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.505121][ T6383] process 'syz.3.98' launched ':,' with NULL argv: empty string added [ 147.121877][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.128356][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.138503][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.416146][ T6399] FAULT_INJECTION: forcing a failure. [ 148.416146][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 148.460835][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.1.101 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.460876][ T6399] Tainted: [L]=SOFTLOCKUP [ 148.460884][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.460899][ T6399] Call Trace: [ 148.460907][ T6399] [ 148.460916][ T6399] dump_stack_lvl+0x100/0x190 [ 148.460961][ T6399] should_fail_ex.cold+0x5/0xa [ 148.460992][ T6399] should_failslab+0xc2/0x120 [ 148.461020][ T6399] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 148.461059][ T6399] ? security_file_alloc+0x34/0x2c0 [ 148.461091][ T6399] ? trace_kmem_cache_alloc+0xf3/0x120 [ 148.461129][ T6399] security_file_alloc+0x34/0x2c0 [ 148.461163][ T6399] init_file+0x95/0x480 [ 148.461194][ T6399] alloc_empty_file+0x73/0x1c0 [ 148.461228][ T6399] path_openat+0xe8/0x31a0 [ 148.461253][ T6399] ? kasan_save_stack+0x3f/0x50 [ 148.461292][ T6399] ? kasan_save_stack+0x30/0x50 [ 148.461330][ T6399] ? kasan_save_track+0x14/0x30 [ 148.461351][ T6399] ? __kasan_slab_alloc+0x89/0x90 [ 148.461374][ T6399] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 148.461412][ T6399] ? do_getname+0x35/0x390 [ 148.461443][ T6399] ? do_sys_openat2+0xc5/0x1e0 [ 148.461476][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.461505][ T6399] ? __pfx_path_openat+0x10/0x10 [ 148.461542][ T6399] do_file_open+0x20e/0x430 [ 148.461571][ T6399] ? __pfx_do_file_open+0x10/0x10 [ 148.461619][ T6399] ? alloc_fd+0x476/0x790 [ 148.461647][ T6399] ? do_getname+0x191/0x390 [ 148.461681][ T6399] do_sys_openat2+0x10d/0x1e0 [ 148.461716][ T6399] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.461761][ T6399] __x64_sys_openat+0x12d/0x210 [ 148.461796][ T6399] ? __pfx___x64_sys_openat+0x10/0x10 [ 148.461842][ T6399] do_syscall_64+0x106/0xf80 [ 148.461880][ T6399] ? clear_bhb_loop+0x40/0x90 [ 148.461911][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.461936][ T6399] RIP: 0033:0x7f3c3f39c799 [ 148.461956][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.461980][ T6399] RSP: 002b:00007f3c402be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.462002][ T6399] RAX: ffffffffffffffda RBX: 00007f3c3f615fa0 RCX: 00007f3c3f39c799 [ 148.462018][ T6399] RDX: 0000000000783443 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 148.462034][ T6399] RBP: 00007f3c3f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 148.462048][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.462063][ T6399] R13: 00007f3c3f616038 R14: 00007f3c3f615fa0 R15: 00007ffed97872e8 [ 148.462093][ T6399] [ 150.949666][ T6436] FAULT_INJECTION: forcing a failure. [ 150.949666][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 151.016307][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.2.109 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.016363][ T6436] Tainted: [L]=SOFTLOCKUP [ 151.016375][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.016395][ T6436] Call Trace: [ 151.016406][ T6436] [ 151.016419][ T6436] dump_stack_lvl+0x100/0x190 [ 151.016482][ T6436] should_fail_ex.cold+0x5/0xa [ 151.016525][ T6436] should_failslab+0xc2/0x120 [ 151.016565][ T6436] __kmalloc_node_noprof+0xe6/0x850 [ 151.016628][ T6436] ? get_callchain_buffers+0x1e5/0x380 [ 151.016683][ T6436] get_callchain_buffers+0x1e5/0x380 [ 151.016729][ T6436] ? security_capable+0x80/0x260 [ 151.016789][ T6436] stack_map_alloc+0x316/0x610 [ 151.016833][ T6436] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 151.016882][ T6436] map_create+0x84e/0x2ba0 [ 151.016924][ T6436] ? futex_unqueue+0x13d/0x2c0 [ 151.016971][ T6436] ? __futex_wait+0x256/0x300 [ 151.017038][ T6436] ? __pfx_map_create+0x10/0x10 [ 151.017069][ T6436] ? __might_fault+0xc5/0x140 [ 151.017121][ T6436] ? __might_fault+0xc5/0x140 [ 151.017186][ T6436] __sys_bpf+0x2091/0x4b90 [ 151.017235][ T6436] ? __pfx___sys_bpf+0x10/0x10 [ 151.017276][ T6436] ? __pfx_futex_wait+0x10/0x10 [ 151.017341][ T6436] ? ksys_write+0x190/0x250 [ 151.017385][ T6436] ? do_futex+0x192/0x350 [ 151.017458][ T6436] ? xfd_validate_state+0x129/0x190 [ 151.017523][ T6436] __x64_sys_bpf+0x7b/0xc0 [ 151.017565][ T6436] ? lockdep_hardirqs_on+0x78/0x100 [ 151.017621][ T6436] do_syscall_64+0x106/0xf80 [ 151.017673][ T6436] ? clear_bhb_loop+0x40/0x90 [ 151.017717][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.017754][ T6436] RIP: 0033:0x7f2f6b59c799 [ 151.017783][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.017816][ T6436] RSP: 002b:00007f2f697f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.017862][ T6436] RAX: ffffffffffffffda RBX: 00007f2f6b815fa0 RCX: 00007f2f6b59c799 [ 151.017884][ T6436] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 151.017904][ T6436] RBP: 00007f2f6b632c99 R08: 0000000000000000 R09: 0000000000000000 [ 151.017933][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.017953][ T6436] R13: 00007f2f6b816038 R14: 00007f2f6b815fa0 R15: 00007ffe534b6f68 [ 151.018087][ T6436] [ 151.293015][ T6438] netlink: 326 bytes leftover after parsing attributes in process `syz.2.109'. [ 152.300975][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 152.480765][ T5833] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 153.310736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 153.781685][ T6460] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 154.112829][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 159.595826][ T6517] ima: policy update failed [ 159.604055][ T30] audit: type=1802 audit(1774463117.041:3): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.127" res=0 errno=0 [ 160.912380][ T6551] [U] 0="/ [ 160.917096][ T6551] [U] [ 160.920208][ T6551] [U] EeQ@ [ 160.948023][ T6551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'. [ 161.238174][ T6551] program syz.3.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.326158][ T30] audit: type=1807 audit(1774463118.761:4): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 161.355584][ T30] audit: type=1802 audit(1774463118.791:5): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.131" res=0 errno=0 [ 161.381501][ T6551] [U]  [ 161.387060][ T6549] ima: policy update failed [ 161.589691][ T30] audit: type=1802 audit(1774463119.021:6): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.131" res=0 errno=0 [ 161.664208][ T30] audit: type=1800 audit(1774463119.051:7): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="dbroot" dev="configfs" ino=11288 res=0 errno=0 [ 161.871826][ T6567] FAULT_INJECTION: forcing a failure. [ 161.871826][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 161.922256][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.3.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.922309][ T6567] Tainted: [L]=SOFTLOCKUP [ 161.922321][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.922340][ T6567] Call Trace: [ 161.922351][ T6567] [ 161.922361][ T6567] dump_stack_lvl+0x100/0x190 [ 161.922424][ T6567] should_fail_ex.cold+0x5/0xa [ 161.922466][ T6567] should_failslab+0xc2/0x120 [ 161.922508][ T6567] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 161.922563][ T6567] ? __pmd_alloc+0xbf/0x950 [ 161.922612][ T6567] __pmd_alloc+0xbf/0x950 [ 161.922659][ T6567] move_page_tables+0x3224/0x4500 [ 161.922714][ T6567] ? __pfx_copy_vma+0x10/0x10 [ 161.922782][ T6567] ? __pfx_move_page_tables+0x10/0x10 [ 161.922860][ T6567] ? finish_task_switch.isra.0+0x200/0xb80 [ 161.922906][ T6567] copy_vma_and_data+0x25c/0x7c0 [ 161.922964][ T6567] ? __pfx_copy_vma_and_data+0x10/0x10 [ 161.923036][ T6567] ? __vma_start_write+0x17f/0x280 [ 161.923098][ T6567] ? __pfx___vma_start_write+0x10/0x10 [ 161.923159][ T6567] move_vma+0x51b/0x1890 [ 161.923227][ T6567] ? __pfx_move_vma+0x10/0x10 [ 161.923290][ T6567] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 161.923337][ T6567] ? cap_mmap_addr+0x4b/0x120 [ 161.923360][ T6567] ? bpf_lsm_mmap_addr+0x9/0x30 [ 161.923383][ T6567] ? security_mmap_addr+0x71/0x1e0 [ 161.923421][ T6567] ? __get_unmapped_area+0x255/0x3e0 [ 161.923455][ T6567] ? vrm_set_new_addr+0x204/0x290 [ 161.923496][ T6567] mremap_to+0x1b7/0x450 [ 161.923536][ T6567] do_mremap+0xb76/0x2130 [ 161.923586][ T6567] ? __pfx_do_mremap+0x10/0x10 [ 161.923631][ T6567] ? ksys_write+0x190/0x250 [ 161.923662][ T6567] __do_sys_mremap+0x126/0x170 [ 161.923701][ T6567] ? __pfx___do_sys_mremap+0x10/0x10 [ 161.923747][ T6567] ? __x64_sys_futex+0x34f/0x4d0 [ 161.923799][ T6567] do_syscall_64+0x106/0xf80 [ 161.923837][ T6567] ? clear_bhb_loop+0x40/0x90 [ 161.923868][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.923893][ T6567] RIP: 0033:0x7f63bc79c799 [ 161.923918][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.923942][ T6567] RSP: 002b:00007f63ba9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 161.923965][ T6567] RAX: ffffffffffffffda RBX: 00007f63bca15fa0 RCX: 00007f63bc79c799 [ 161.923982][ T6567] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 161.923997][ T6567] RBP: 00007f63bc832c99 R08: 0000000100000000 R09: 0000000000000000 [ 161.924017][ T6567] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 161.924031][ T6567] R13: 00007f63bca16038 R14: 00007f63bca15fa0 R15: 00007fffb1429528 [ 161.924063][ T6567] [ 162.828703][ T6579] Unable to find swap-space signature [ 164.739278][ T6604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 164.827525][ T6604] FAULT_INJECTION: forcing a failure. [ 164.827525][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 164.871041][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.2.147 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.871095][ T6604] Tainted: [L]=SOFTLOCKUP [ 164.871107][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.871127][ T6604] Call Trace: [ 164.871137][ T6604] [ 164.871150][ T6604] dump_stack_lvl+0x100/0x190 [ 164.871208][ T6604] should_fail_ex.cold+0x5/0xa [ 164.871263][ T6604] should_failslab+0xc2/0x120 [ 164.871303][ T6604] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 164.871358][ T6604] ? alloc_empty_file+0x55/0x1c0 [ 164.871412][ T6604] alloc_empty_file+0x55/0x1c0 [ 164.871459][ T6604] path_openat+0xe8/0x31a0 [ 164.871504][ T6604] ? trace_kmem_cache_alloc+0xf3/0x120 [ 164.871540][ T6604] ? __kasan_slab_alloc+0x89/0x90 [ 164.871578][ T6604] ? __pfx_path_openat+0x10/0x10 [ 164.871620][ T6604] ? __asan_memcpy+0x3c/0x60 [ 164.871670][ T6604] ? do_getname_kernel+0x1be/0x250 [ 164.871717][ T6604] do_file_open_root+0x2f6/0x5a0 [ 164.871759][ T6604] ? __pfx_do_file_open_root+0x10/0x10 [ 164.871813][ T6604] ? __pfx_widen_string+0x10/0x10 [ 164.871884][ T6604] ? __lock_acquire+0x4a5/0x2630 [ 164.871933][ T6604] ? vsnprintf+0x4ee/0x1240 [ 164.871985][ T6604] file_open_root+0x19b/0x3b0 [ 164.872020][ T6604] ? __pfx_file_open_root+0x10/0x10 [ 164.872050][ T6604] ? find_held_lock+0x2b/0x80 [ 164.872084][ T6604] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 164.872134][ T6604] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 164.872196][ T6604] kernel_read_file_from_path_initns+0x189/0x260 [ 164.872265][ T6604] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 164.872334][ T6604] _request_firmware+0x733/0x13c0 [ 164.872403][ T6604] ? __pfx__request_firmware+0x10/0x10 [ 164.872476][ T6604] ? _request_firmware+0x274/0x13c0 [ 164.872540][ T6604] request_firmware+0x35/0x50 [ 164.872595][ T6604] valid_regdb+0x184/0x590 [ 164.872649][ T6604] ? __pfx___nla_validate_parse+0x10/0x10 [ 164.872707][ T6604] ? __pfx_valid_regdb+0x10/0x10 [ 164.872760][ T6604] ? rcu_is_watching+0x12/0xc0 [ 164.872825][ T6604] reg_reload_regdb+0x11a/0x460 [ 164.872863][ T6604] ? __pfx_reg_reload_regdb+0x10/0x10 [ 164.872902][ T6604] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 164.872946][ T6604] ? nl80211_pre_doit+0x19a/0xae0 [ 164.872997][ T6604] genl_family_rcv_msg_doit+0x214/0x300 [ 164.873042][ T6604] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 164.873082][ T6604] ? genl_get_cmd+0x3ef/0x720 [ 164.873128][ T6604] ? bpf_lsm_capable+0x9/0x10 [ 164.873166][ T6604] ? security_capable+0x80/0x260 [ 164.873241][ T6604] genl_rcv_msg+0x560/0x800 [ 164.873286][ T6604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.873324][ T6604] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 164.873366][ T6604] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 164.873415][ T6604] ? __pfx_nl80211_post_doit+0x10/0x10 [ 164.873478][ T6604] netlink_rcv_skb+0x159/0x420 [ 164.873512][ T6604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.873554][ T6604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.873605][ T6604] ? netlink_deliver_tap+0x1ae/0xcc0 [ 164.873665][ T6604] genl_rcv+0x28/0x40 [ 164.873698][ T6604] netlink_unicast+0x5aa/0x870 [ 164.873762][ T6604] ? __pfx_netlink_unicast+0x10/0x10 [ 164.873819][ T6604] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 164.873889][ T6604] netlink_sendmsg+0x8b0/0xda0 [ 164.873930][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.873961][ T6604] ? __import_iovec+0x1d2/0x640 [ 164.874010][ T6604] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 164.874076][ T6604] ____sys_sendmsg+0x9e1/0xb70 [ 164.874113][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.874148][ T6604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.874197][ T6604] ? __pfx_futex_wake_mark+0x10/0x10 [ 164.874269][ T6604] ___sys_sendmsg+0x190/0x1e0 [ 164.874315][ T6604] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.874406][ T6604] __sys_sendmsg+0x170/0x220 [ 164.874457][ T6604] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.874506][ T6604] ? __x64_sys_futex+0x34f/0x4d0 [ 164.874579][ T6604] do_syscall_64+0x106/0xf80 [ 164.874641][ T6604] ? clear_bhb_loop+0x40/0x90 [ 164.874688][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.874724][ T6604] RIP: 0033:0x7f2f6b59c799 [ 164.874753][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.874787][ T6604] RSP: 002b:00007f2f697f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.874820][ T6604] RAX: ffffffffffffffda RBX: 00007f2f6b815fa0 RCX: 00007f2f6b59c799 [ 164.874842][ T6604] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 164.874863][ T6604] RBP: 00007f2f6b632c99 R08: 0000000000000000 R09: 0000000000000000 [ 164.874883][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.874903][ T6604] R13: 00007f2f6b816038 R14: 00007f2f6b815fa0 R15: 00007ffe534b6f68 [ 164.874948][ T6604] [ 165.442607][ T6604] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db.p7s failed with error -12 [ 167.552418][ T6629] netlink: 186 bytes leftover after parsing attributes in process `syz.0.150'. [ 171.059845][ T30] audit: type=1804 audit(1774463128.491:8): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.157" name="/newroot/40/file0" dev="tmpfs" ino=224 res=1 errno=0 [ 171.236216][ T30] audit: type=1804 audit(1774463128.521:9): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.157" name="/newroot/40/file0" dev="tmpfs" ino=224 res=1 errno=0 [ 171.280772][ T5833] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 173.307038][ T6700] Console: switching to colour VGA+ 80x25 [ 173.456589][ T6695] ================================================================== [ 173.456621][ T6695] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 173.456672][ T6695] Read of size 26 at addr ffff88802d7f9cea by task syz.0.165/6695 [ 173.456703][ T6695] [ 173.456724][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.0.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.456770][ T6695] Tainted: [L]=SOFTLOCKUP [ 173.456782][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.456802][ T6695] Call Trace: [ 173.456813][ T6695] [ 173.456826][ T6695] dump_stack_lvl+0x100/0x190 [ 173.456877][ T6695] print_report+0x156/0x4c9 [ 173.456927][ T6695] ? __virt_addr_valid+0x81/0x620 [ 173.456972][ T6695] ? __phys_addr+0xe8/0x180 [ 173.457018][ T6695] ? fbcon_prepare_logo+0x94e/0xc60 [ 173.457054][ T6695] kasan_report+0xdf/0x1e0 [ 173.457092][ T6695] ? fbcon_prepare_logo+0x94e/0xc60 [ 173.457136][ T6695] kasan_check_range+0x10f/0x1e0 [ 173.457180][ T6695] __asan_memcpy+0x23/0x60 [ 173.457229][ T6695] fbcon_prepare_logo+0x94e/0xc60 [ 173.457276][ T6695] fbcon_init+0x10a0/0x1820 [ 173.457326][ T6695] visual_init+0x320/0x620 [ 173.457369][ T6695] do_bind_con_driver.isra.0+0x636/0x9c0 [ 173.457428][ T6695] store_bind+0x609/0x730 [ 173.457480][ T6695] ? __pfx_store_bind+0x10/0x10 [ 173.457527][ T6695] dev_attr_store+0x58/0x80 [ 173.457569][ T6695] ? __pfx_dev_attr_store+0x10/0x10 [ 173.457611][ T6695] sysfs_kf_write+0xf2/0x150 [ 173.457655][ T6695] kernfs_fop_write_iter+0x3e0/0x5f0 [ 173.457693][ T6695] ? __pfx_sysfs_kf_write+0x10/0x10 [ 173.457739][ T6695] vfs_write+0x6ac/0x1070 [ 173.457771][ T6695] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 173.457812][ T6695] ? __pfx_vfs_write+0x10/0x10 [ 173.457858][ T6695] ksys_write+0x12a/0x250 [ 173.457890][ T6695] ? __pfx_ksys_write+0x10/0x10 [ 173.457926][ T6695] do_syscall_64+0x106/0xf80 [ 173.457977][ T6695] ? clear_bhb_loop+0x40/0x90 [ 173.458015][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.458049][ T6695] RIP: 0033:0x7f72bd79c799 [ 173.458075][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.458109][ T6695] RSP: 002b:00007f72be5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.458142][ T6695] RAX: ffffffffffffffda RBX: 00007f72bda15fa0 RCX: 00007f72bd79c799 [ 173.458165][ T6695] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.458187][ T6695] RBP: 00007f72bd832c99 R08: 0000000000000000 R09: 0000000000000000 [ 173.458208][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.458228][ T6695] R13: 00007f72bda16038 R14: 00007f72bda15fa0 R15: 00007ffed5351ec8 [ 173.458263][ T6695] [ 173.458282][ T6695] [ 173.458291][ T6695] Allocated by task 6314: [ 173.458507][ T6695] kasan_save_stack+0x30/0x50 [ 173.458566][ T6695] kasan_save_track+0x14/0x30 [ 173.458594][ T6695] __kasan_kmalloc+0xaa/0xb0 [ 173.458644][ T6695] __kmalloc_noprof+0x301/0x850 [ 173.458695][ T6695] ops_init+0x77/0x5f0 [ 173.458744][ T6695] setup_net+0x118/0x3a0 [ 173.458794][ T6695] copy_net_ns+0x46f/0x7c0 [ 173.458825][ T6695] create_new_namespaces+0x3ea/0xac0 [ 173.458859][ T6695] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 173.458895][ T6695] ksys_unshare+0x473/0xad0 [ 173.458936][ T6695] __x64_sys_unshare+0x31/0x40 [ 173.458978][ T6695] do_syscall_64+0x106/0xf80 [ 173.459026][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.459058][ T6695] [ 173.459065][ T6695] Freed by task 126: [ 173.459082][ T6695] kasan_save_stack+0x30/0x50 [ 173.459134][ T6695] kasan_save_track+0x14/0x30 [ 173.459162][ T6695] kasan_save_free_info+0x3b/0x70 [ 173.459207][ T6695] __kasan_slab_free+0x5f/0x80 [ 173.459238][ T6695] kfree+0x1f6/0x6b0 [ 173.459280][ T6695] ops_undo_list+0x4c2/0xab0 [ 173.459342][ T6695] cleanup_net+0x499/0x920 [ 173.459372][ T6695] process_one_work+0xa23/0x19a0 [ 173.459421][ T6695] worker_thread+0x5ef/0xe50 [ 173.459468][ T6695] kthread+0x370/0x450 [ 173.459512][ T6695] ret_from_fork+0x754/0xd80 [ 173.459561][ T6695] ret_from_fork_asm+0x1a/0x30 [ 173.459592][ T6695] [ 173.459600][ T6695] The buggy address belongs to the object at ffff88802d7f9c00 [ 173.459600][ T6695] which belongs to the cache kmalloc-192 of size 192 [ 173.459625][ T6695] The buggy address is located 42 bytes to the right of [ 173.459625][ T6695] allocated 192-byte region [ffff88802d7f9c00, ffff88802d7f9cc0) [ 173.459657][ T6695] [ 173.459667][ T6695] The buggy address belongs to the physical page: [ 173.459691][ T6695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d7f9 [ 173.459727][ T6695] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 173.459759][ T6695] page_type: f5(slab) [ 173.459790][ T6695] raw: 00fff00000000000 ffff88813fe393c0 dead000000000100 dead000000000122 [ 173.459827][ T6695] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 173.459847][ T6695] page dumped because: kasan: bad access detected [ 173.459871][ T6695] page_owner tracks the page as allocated [ 173.459883][ T6695] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23560688075, free_ts 23557801014 [ 173.459945][ T6695] post_alloc_hook+0x153/0x170 [ 173.459992][ T6695] get_page_from_freelist+0x111d/0x3140 [ 173.460042][ T6695] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 173.460094][ T6695] new_slab+0xa6/0x6b0 [ 173.460133][ T6695] refill_objects+0x26b/0x400 [ 173.460177][ T6695] __pcs_replace_empty_main+0x1ab/0x660 [ 173.460229][ T6695] __kmalloc_cache_noprof+0x493/0x6f0 [ 173.460274][ T6695] dev_iommu_get+0x10c/0x1a0 [ 173.460454][ T6695] __iommu_probe_device+0x122/0x1550 [ 173.460511][ T6695] iommu_probe_device+0x28/0x130 [ 173.460563][ T6695] iommu_bus_notifier+0x5b/0x110 [ 173.460628][ T6695] notifier_call_chain+0x99/0x420 [ 173.460673][ T6695] blocking_notifier_call_chain+0x69/0xa0 [ 173.460717][ T6695] bus_notify+0x56/0x80 [ 173.460772][ T6695] device_add+0x1164/0x1950 [ 173.460810][ T6695] platform_device_add+0x35a/0x800 [ 173.460858][ T6695] page last free pid 24 tgid 24 stack trace: [ 173.460877][ T6695] __free_frozen_pages+0x7e1/0x10d0 [ 173.460920][ T6695] vfree.part.0+0x12b/0x9d0 [ 173.460957][ T6695] delayed_vfree_work+0x8e/0xd0 [ 173.460996][ T6695] process_one_work+0xa23/0x19a0 [ 173.461044][ T6695] worker_thread+0x5ef/0xe50 [ 173.461098][ T6695] kthread+0x370/0x450 [ 173.461142][ T6695] ret_from_fork+0x754/0xd80 [ 173.461191][ T6695] ret_from_fork_asm+0x1a/0x30 [ 173.461229][ T6695] [ 173.461236][ T6695] Memory state around the buggy address: [ 173.461253][ T6695] ffff88802d7f9b80: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 173.461277][ T6695] ffff88802d7f9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.461299][ T6695] >ffff88802d7f9c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 173.461333][ T6695] ^ [ 173.461354][ T6695] ffff88802d7f9d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 173.461379][ T6695] ffff88802d7f9d80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 173.461399][ T6695] ================================================================== [ 173.468847][ T6695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 173.468881][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.0.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.468933][ T6695] Tainted: [L]=SOFTLOCKUP [ 173.468947][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.468968][ T6695] Call Trace: [ 173.468979][ T6695] [ 173.468992][ T6695] dump_stack_lvl+0x100/0x190 [ 173.469051][ T6695] vpanic+0x552/0x970 [ 173.469085][ T6695] ? __pfx_vpanic+0x10/0x10 [ 173.469125][ T6695] ? fbcon_prepare_logo+0x94e/0xc60 [ 173.469163][ T6695] panic+0xd1/0xe0 [ 173.469194][ T6695] ? __pfx_panic+0x10/0x10 [ 173.469228][ T6695] ? fbcon_prepare_logo+0x94e/0xc60 [ 173.469267][ T6695] ? preempt_schedule_common+0x42/0xc0 [ 173.469333][ T6695] check_panic_on_warn.cold+0x19/0x34 [ 173.469371][ T6695] end_report.part.0+0x3a/0x90 [ 173.469421][ T6695] kasan_report.cold+0xe/0x18 [ 173.469471][ T6695] ? fbcon_prepare_logo+0x94e/0xc60 [ 173.469514][ T6695] kasan_check_range+0x10f/0x1e0 [ 173.469560][ T6695] __asan_memcpy+0x23/0x60 [ 173.469611][ T6695] fbcon_prepare_logo+0x94e/0xc60 [ 173.469659][ T6695] fbcon_init+0x10a0/0x1820 [ 173.469703][ T6695] visual_init+0x320/0x620 [ 173.469747][ T6695] do_bind_con_driver.isra.0+0x636/0x9c0 [ 173.469803][ T6695] store_bind+0x609/0x730 [ 173.469856][ T6695] ? __pfx_store_bind+0x10/0x10 [ 173.469908][ T6695] dev_attr_store+0x58/0x80 [ 173.469949][ T6695] ? __pfx_dev_attr_store+0x10/0x10 [ 173.469992][ T6695] sysfs_kf_write+0xf2/0x150 [ 173.470037][ T6695] kernfs_fop_write_iter+0x3e0/0x5f0 [ 173.470076][ T6695] ? __pfx_sysfs_kf_write+0x10/0x10 [ 173.470121][ T6695] vfs_write+0x6ac/0x1070 [ 173.470160][ T6695] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 173.470201][ T6695] ? __pfx_vfs_write+0x10/0x10 [ 173.470248][ T6695] ksys_write+0x12a/0x250 [ 173.470280][ T6695] ? __pfx_ksys_write+0x10/0x10 [ 173.470327][ T6695] do_syscall_64+0x106/0xf80 [ 173.470379][ T6695] ? clear_bhb_loop+0x40/0x90 [ 173.470420][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.470455][ T6695] RIP: 0033:0x7f72bd79c799 [ 173.470482][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.470518][ T6695] RSP: 002b:00007f72be5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.470553][ T6695] RAX: ffffffffffffffda RBX: 00007f72bda15fa0 RCX: 00007f72bd79c799 [ 173.470576][ T6695] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.470598][ T6695] RBP: 00007f72bd832c99 R08: 0000000000000000 R09: 0000000000000000 [ 173.470619][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.470639][ T6695] R13: 00007f72bda16038 R14: 00007f72bda15fa0 R15: 00007ffed5351ec8 [ 173.470670][ T6695] [ 173.471258][ T6695] Kernel Offset: disabled