last executing test programs: 1m23.6853427s ago: executing program 2 (id=4351): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, &(0x7f00000000c0)=0x6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, 0x0, 0x82) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000005f137245f160d361ed375fd706a07ed34a2b9c798037ab357b38138c0f5ba5be321071b8b6928bac7319032853856d2665070ce7478214974c6ead01cb782eae7756c4440e6342bfebb95a1c443baf7dddf4dc64a77dfb1493fd4d36052cfe1b2dc56956a379f5a92b4417e0c21ea02037b3da6ed2c51ab1d07d23fa039ae5bb044455dcf769911fcdbaa1550b321809a0b6e63929a9b81bb196343c5eac4095d2467f202980328b9d2890bf1f6892a16080eb48ca", @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf25280000000700430099c8d5000400080153009d0073cd2c5dda7b64109a427c7e6fbe25abfff8316042d37b6add684d10bbcbcff581c7318e117c0d8b524f40e6c16dfb8ea16ab5240f57214b1ff000edeeb89ee841100a5ba787f13c01f629ef0ed84a00"], 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) read$auto(0x3, 0x0, 0x8080) 1m23.310919849s ago: executing program 2 (id=4353): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x2241, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab40, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0xffffffffffffffff, 0x105, 0xe, 0x0, 0x80000009) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r2, 0x0, 0x42) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x3, 0x8, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 1m22.651417979s ago: executing program 2 (id=4355): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='/sC\xe3/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) socket(0x1d, 0x2, 0x7) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(r0, 0x9, 0x6, 0x0, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = socket(0x2, 0x3, 0xa) getsockopt$auto(r2, 0x0, 0x29, 0x0, 0x0) mmap$auto(0x80005, 0xfffffffffffffff9, 0x9, 0xeb1, r0, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x4, 0x6fffffd) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) epoll_create$auto(0x3ff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000004180)=ANY=[@ANYBLOB='0@ \x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fadbdf2501000000100007800c0001800800018004009f800c0002000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto(0x3, 0xae41, r4) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0xab81c0, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) 1m22.170682706s ago: executing program 2 (id=4357): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x40437e, 0x40) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x200, 0x3, 0xfff, 0x1, 0x948b, 0x6, 0x95f4da2d, 0xc, 0x86, 0x61, 0x7, 0xa, 0x5, 0xa, 0x5, 0xffffffffffffffe5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram4/alignment_offset\x00', 0xa400, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x341102, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) mount$auto(&(0x7f0000000140)='nicvf0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='afs\x00', 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x987069c0adec2994, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x8004ae98, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000140)={0x5}) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/178, 0xb2) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw1\x00', 0x109401, 0x0) 1m21.131892285s ago: executing program 2 (id=4360): rseq$auto(&(0x7f0000000080)={0x4, 0x2, 0x9b, 0x6, 0x1, 0xa, "7c9a"}, 0xfffffffb, 0x72a4, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = socket(0x2, 0x801, 0x100) listen$auto(r1, 0x200005) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) rseq$auto(&(0x7f0000000080)={0x4, 0x2, 0x9b, 0x6, 0x1, 0xa, "7c9a"}, 0xfffffffb, 0x72a4, 0xd) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) (async) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) (async) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) socket(0x2, 0x801, 0x100) (async) listen$auto(r1, 0x200005) (async) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) 1m16.070881207s ago: executing program 2 (id=4379): socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m10.879939044s ago: executing program 0 (id=4404): open(&(0x7f0000000080)='./file0\x00', 0x1612c2, 0x1a3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) ptrace$auto(0xf106, 0x0, 0x8, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x9) fanotify_init$auto(0x65, 0x1) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, 0x0) io_uring_setup$auto(0x3, 0x0) r2 = prctl$auto(0xaf6d, 0x1, 0x0, 0xffffffffffffffff, 0x5) ioctl$auto(r1, 0x4b41, r2) socket(0x25, 0x2, 0x73) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kmsg\x00', 0x492940, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x101, 0x4, 0x0) pread64$auto(r3, 0x0, 0xfffe, 0x9) 1m9.877564001s ago: executing program 0 (id=4409): r0 = socket(0x2, 0x5, 0x0) mremap$auto(0x4000, 0x1000000000b6, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c8, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE_RIC={0x2ff, 0xb2, "5872845e0affe589e48034933121b8a5267dc17b1a8c8e8cd7ad26aaa447296d1008d5b9890e551ac10ee184e4f8efebc677c14dcc42b7a25d29f35d8275d1d0ad5bc498727504b3877a85428e13004c333d7bc58401cdf0a989d4819baaccc7e1c55578c6c3a1907c312c840a8e00bff2e8ece414371ec7951f7141a374fe0f408f74cf82c4b866213ac223d7d891e49890a4a42555858ddedf5a08f87eabbc195e80443cac37dd65e365a19a4a9663c5b792646064fe5fd1e7751bee67dd18fadb1bbef17ce8ee93d4011c835aa8b4bf72c83eb0590e157cca94fa0bf1edefdcc02d452f27a912b6a0337dbf2b50b7e0b2fedf29b1ffb334fc29c8eccf7fc707d243a121b50dfc508407c7283ba7073fc58241d5f37e7eda63c0f5be56a99555552a2750582f8583304c148d642817e8ddbcb75f7b9533a203386ad586013583d93d706538d64b53e1ebbb8804a2b11083968cf07d1b3d473e208257cce00f598a2a4b239af3d401c40f0da41ff00c4e4759c30d0ae97f7a43f7bb2009297d0102c5c449205398b9122455a9ba793e9669a4ed10b2996fcca1ef805c6e1ff5e63a7ad614b70a01a5c5e434dae1df1498beddeb9a26a9b3304efa67f9fac0d1a85975a86179decaa3c50d01b4d959e746d0d0e7b69b63d4acfab9cca5057124bd689ded115ee347b1d941a48fe98a3ae6cd4e185dfd7e5cc5cfb3a89cb070d257396280a7b0c538e634fdd4ca397d6718895551e91dc7cd9e1d5c17ec2e4310a9da36a4db34c9dbd9e351ca31d43a3eb6ed26df0fbb1f10cf778e89162d4efc96a946b3e9d1d7b8f10035f860ab1fc00702a97cc329eb02b4942c44db94cefa2395e1a18cd606ffbe7bd152a41071068d1a0544d8b127ca82286eb355ce8d01152401e3d26324ab8d5bc8dbb410f4f0f4c24f920701c2b0c2ad70a6cb7a8a27995b021662146520e951e47d935cba523361fffed7e1a7b48b7a467fdfa6a9c0daee36a3af3cb726e45dd305f6fabab2ba943e8adf804074ea1507b075b3e89a76baa052ab6f02840f6e1e91a437ea0ab4620cc24296ecc1260ce1"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x9c, 0x1a, "66128bc495dbe3402a704ef23213368ae99ec2e5a510961f5c4feb3ba7517742334847cdd20b5ba19f3ae07194e303837219e7fdea4945a56ede5cbb1ec417ffe4335607b8cdd6b103f54eb466e52eaf94897065e9850bb41ac921c8df7227924ba4ca32d0253b87bb5c5480829c0ec0a6d6b7950b54e1637e7190a84da5c75bb741569d0837aaface3dfc187ee576dfd1db605e6796c7ae"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x444}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3ff}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1m8.814603832s ago: executing program 0 (id=4413): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r1}, 0xa3) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x20081, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000080)={0x40000000001, 0x1, 0x7, 0x8, 0x2, 0xcb, "8a9750a07c00", 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x81}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b518bd9275d6ebd86d54e4ce977ad0390d1e723da135563c9819793424e7dd0a16591a47bde69f64d2aba654888cb24b50fa83152a952702f6b3051cc974aed1b0860b2cf6728"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0xe2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x401, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, &(0x7f00000001c0)={{0x3, 0xee01, 0x0, 0xfffffe01, 0x600000, 0x5e7, 0x3}, 0xff, 0x0, 0x6, 0x400, @inferred=0xffffffffffffffff, @inferred=r2, 0x10, 0x0, &(0x7f0000000540)="d310ca69ecf477cddf0cb3b04dee8ce01122da5e5180008d5c2bd519f9cf91f71d20fd131163c1c9857e5189f7aafa007105c0caf859b71797a98c23725571c3fcc25b437d170c71d03c83b532a60142e28ba90d888035991c3f0ab73b1693e4d17fa1a3712e70cf4644b9f9e8aae027f5b3ad79f9e459e6d406285b96d6df82f2f0c3b0c99976b63ac3bad3f7ae2b8762494ffc", &(0x7f00000000c0)="413ab74e5e5cba4762d2578630fbeaf3425ea65f73f15939818af0f33601acfb86b942e383359d1732ee08341f23efd8fe68ad33fb52e69fcf4619ef6377c0"}) getpriority$auto_PRIO_USER(0x2, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r3, 0x400084, 0x82, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x06\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1m8.112309181s ago: executing program 0 (id=4416): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x6, 0x810000, 0xffc, 0x17, 0x3, 0xe94e) madvise$auto(0xc, 0xcdb, 0x15) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x4, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2) process_madvise$auto_MADV_POPULATE_WRITE(r2, &(0x7f0000000040)={&(0x7f0000000340)="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", 0x6}, 0x7fff, 0x17, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x7}, 0x1) io_uring_setup$auto(0x2, &(0x7f00000000c0)={0x0, 0xd619, 0x7fff, 0xffffe000, 0x709, 0x2, r0, [0x40aa, 0x3, 0x6], {0x9, 0x7ff, 0x5, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x0, 0xe, 0x5, 0x2, 0x3, 0x7fffffff, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a709688232404c66678c74aed008920afcf6a57957b3ae24871b3167c040293f353060713d8b332530a29782e48fdff32bde2e6da8779a0ca51d", 0x7fffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/xfs/panic_mask\x00', 0xa0202, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_4={0x12, 0x1, 0xa6, r4}, 0x6f4) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0x3f1) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) 1m7.344271193s ago: executing program 0 (id=4420): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800030000", @ANYRES32=0x0, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r0, 0x4004550d, &(0x7f0000000180)=0x798) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x161242, 0x130) utimes$auto(&(0x7f0000000040)='./file0\x00', 0x0) 1m6.275306568s ago: executing program 0 (id=4424): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/cec9\x00', 0x2000, 0x0) ioctl$auto_CEC_G_MODE(r0, 0x80046108, &(0x7f0000002500)=0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0xc, 0xb0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x1e}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x44}}, 0x24048084) mmap$auto(0x184, 0x100000001, 0x4000000000df, 0x40eb2, r1, 0x300000000000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r3, 0x80044941, 0x0) prctl$auto(0xffffffff, 0x5, 0xffffffffffffffff, 0x55c6949e, 0xe) 1m0.983535769s ago: executing program 32 (id=4379): socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 50.574719564s ago: executing program 33 (id=4424): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/cec9\x00', 0x2000, 0x0) ioctl$auto_CEC_G_MODE(r0, 0x80046108, &(0x7f0000002500)=0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0xc, 0xb0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x1e}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x44}}, 0x24048084) mmap$auto(0x184, 0x100000001, 0x4000000000df, 0x40eb2, r1, 0x300000000000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r3, 0x80044941, 0x0) prctl$auto(0xffffffff, 0x5, 0xffffffffffffffff, 0x55c6949e, 0xe) 26.852296895s ago: executing program 4 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r1, 0x4004550a, &(0x7f0000000080)=0x6) r2 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x52000, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f0000000100)="a951a0b52f87685cb0b8227f2788c8387cec0479ebe5f86076aac7841cdf8449e8cea614da6ba96cf6bb46fbbf247a43dccd52dee8bab3420fc8be2bdcd504ec8e70d0e66f3a62958d9559dd895f4ca805c37f5d27daa689cb76d8746cd11404d2d9706e10232e7d0e16fbe48ca5bffe96174b123c58ac419da9e6f71e98054f83aa4e3297d6a714ea7042eea58ae30ec0f600c72414cac728a34efa15afb6dbef2e21aae18bead1cf52c6ff7114f99202f3a046c67e3bfd0f6838fb9cd73bf0bc395a03a90ecb29abdcfa2de995da9af3591a9b47f066ba5a3c02f6b67d516d64be69b5c6", 0x2, &(0x7f0000000200)="03237501b104656417ce5211544a34838dca01c7410d0375cd95c62f063e2b0e07898bb049bf34365cf2724833d090748c347dc3089f4391f9d15053ae84002f41009bb0c6679a9fce2523579d639b69265bcefb7b624eafead4065ff56fef223380e3c830f19db3c310d7905c937b735fd6482c90e74e111b7407c9cc1dd6d36175feb92ca32f58492810b4", 0x64, &(0x7f00000002c0)="d65e297a77c318d46b29f318abb4fb3ad00bc129b100ca899d184175d904e36a39568b844ef41b82a8eb761ea14910f2c91c8a0128760f4de0cdabd3414dd260a1f395cf0f79bd892ea7c2a7f3925346afee42cdadb75106fa30a9571e0f4f2dc8640749136cc09adba8dc767743a31ca9e7d2cb7e47e3c6e7fcbb35917b5f0a67f1a9575c36ff3c32c8b876408fc806966422b00084acec8ea8e36747336313cee7cf0cee6d25e5ab5782695167da378c399ef9aa045b2f3b7c73e91dea7f69e2439fa37ec27d51a3", &(0x7f00000003c0)=0x6}) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000480), r3) r5 = ioctl$auto_TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000004c0)=0xffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20048880) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xcc, 0x0, 0x410, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_NONCES={0xae, 0xf3, "aeb727925a4668742e658fb1314c0260990d317b2a3088e7bb927842e227bc2e692fbf73a8c861e8a10d00babecb98a042001707e9f74b3ec87f975f1f9b84ce475a6ef68f16c88527187cf0f6bdb6e9f696838d4a784836efe605f772af4c4e0803bfad749f58d9f39ed779ec18655b265a0b4868820373c3e3f24e97864d2272862fe74a326a0b119c2796fbb8e57ccb9f1bea8cb041cfb5cb86ace5c83508bd7a8bd41ca421db56db"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x90}, 0x804) r6 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x2, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r5, &(0x7f0000000800)=""/56, 0x38) r7 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000840), 0x34e02, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r5, 0x40305824, &(0x7f0000000880)={0x6, 0x0, 0x1, 0x8, 0x6, 0xffffffffffffffff}) r9 = syz_clone(0x200000, &(0x7f00000008c0)="06f119572e385a867e331d14f22dd3594bb05c5df03e5324a49ef91f0410a497be7fe7ac01ddcd006891c11504f1649bd6f5be00cca33f", 0x37, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="ae6b93bb8df39791204b218ced39ff9adcd5f8a5f85c6423347d520388ae07a7532ff2c6c5ec68397f5be2658c2c74a477237e74e9c454af") kcmp$auto_KCMP_FILE(r8, r9, 0x0, r7, r2) r10 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000a00), r3) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200080c0) remap_file_pages$auto(0x7, 0x7, 0x7, 0x4, 0x8) lsetxattr$auto(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', &(0x7f0000000b80)="62dd889bf63442ecbd5c18af09ecc4e69e1126ed08f0d686ff7f0b207852cfafeb300c94082d21fd0d3bf1c260f6ca2f45ef2105053ccd81065018ff9d864da2e095a61a98b53e17d254ccf0a01363cead3b3b2e48efdcfc624e31fc127a9617fd5265be1c2f5fc110254b454960a0f10ea9a3e712c4446de51dd840d1871b45171027b422c97a8496f614104535ba7d540b8d3355ae2be7d873ec14d7b24262b571346ba0581cd305b08341f9b93206021cde8d3c3b46b7d8479f29191e0d63eaacd71ac6cc6b037341fd6c766374f7928362f77afee88a6e2826811d7220e11f3ca7876d6c2376", 0x9, 0x7) statmount$auto(&(0x7f0000000c80)={0x8, @inferred=r1, 0x8, 0xc5d, 0x9}, &(0x7f0000000cc0)={0x8, 0xc, 0x3ff, 0x0, 0x2, 0x7, 0x1, 0xffffff00, 0x0, 0x5, 0x6, 0x2, 0x1, 0xe, 0x8, 0x1, 0xcb12, 0x9, 0x5, 0x5, 0x2, 0x8, 0x86, 0x1, 0x2a4b, 0x6, 0x7, 0x363f, 0xfd5, 0x8, 0x6, [0x17a9bea5, 0x5, 0x7, 0x821, 0x5, 0x5, 0x9, 0x5, 0xffffffffffffffb9, 0xffffffffffffffc0, 0x81, 0x7, 0x1ff, 0x8, 0x8, 0x74b62ba5, 0x9, 0xfffffffffffffff7, 0xfe5a, 0x2, 0x3, 0x7, 0x3, 0x8, 0x3, 0x914d, 0x401, 0x3c, 0x2, 0x4, 0x8, 0x298, 0xecc4f42, 0x5, 0xd49c, 0x0, 0x1, 0x80, 0x3, 0x8, 0x3, 0x217098df, 0x6], "e1a771a7988d0e4487e4d7a038575cd04ca38b1ed57bbb3525ab49196a788b8fd4fb3a11941e9426b946e977281f12dc40d3948a5f0611366b6245902647603bfabc74227958e6d1a2dd374b4833781ede42a5b976ec765999a50589e1e51a31031da905cbec275cae8c1174598e272d31840e509d4bf08ae722b548347c02d38ba6f8054665721dcc954b257eeb6eeb4e72908ad7765460679e5a3dca3e94822f7fc83888c88467f3b13d5a5256522d577dddffd831355cea26feaa21cf1716021e3ef4f6111ef61b38e890949b0ba5e6939d6438c3249fc252fc4c52edbdd2669703fc1b79101f6ddf25"}, 0x657, 0x2d0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x800, 0x0) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r5) sendmsg$auto_NL80211_CMD_SET_CQM(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r11, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) ioctl$auto_FIONREAD(r6, 0x541b, 0x0) r12 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/thread-self/mem\x00', 0x240000, 0x0) copy_file_range$auto(r12, &(0x7f0000001180), r5, &(0x7f00000011c0)=0x6d, 0xb, 0x3b) openat2$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x48a40, 0x0, 0x8}, 0x18) fsconfig$auto_SHMEM_HUGE_FORCE(r0, 0x9, &(0x7f0000001280)='nl80211\x00', &(0x7f00000012c0)="a97fc9fa07a0c206a6600284", 0xfffffffffffffffe) 26.284730137s ago: executing program 4 (id=4502): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, &(0x7f00000000c0)=0x6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c0006000b16581662321ff051abfb4a10031e390935d8624dd43bf0519b81d3aa5685f9d30c9c9196837758b16f145965c83d75b408b71ec88613a2383915bad4e9d8e8", @ANYRES16, @ANYBLOB="cb5b2cbd7000ffdb9f251f0000000500040000000000080003000900000008000200f7000000", @ANYBLOB="976e9fd11cb5233d9a36e742d76b5b7149a7abdb5ae0f5eb7d4e9f558f75d9a8315627ccb8f375d9ffc232484cf425dab2a0bd619213888e0ff30ed4ccf4683e00794ebf4899858d0e5217e0a3eca6d6b7381edafaf35ced566188e5d1bf4eadd05a939435253093589dd13c448de24a6415a85eddd0d5eb9458797bc247d802eccdf148ded44f262c5467ac1368f506388e5711fb4eb629fbb4fd91a5fe0b3673d4a059222eb6693dc72ff4e47659f251b1bdeb17605318080f14"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x82) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000005f137245f160d361ed375fd706a07ed34a2b9c798037ab357b38138c0f5ba5be321071b8b6928bac7319032853856d2665070ce7478214974c6ead01cb782eae7756c4440e6342bfebb95a1c443baf7dddf4dc64a77dfb1493fd4d36052cfe1b2dc56956a379f5a92b4417e0c21ea02037b3da6ed2c51ab1d07d23fa039ae5bb044455dcf769911fcdbaa1550b321809a0b6e63929a9b81bb196343c5eac4095d2467f202980328b9d2890bf1f6892a16080eb48ca", @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf25280000000700430099c8d5000400080153009d0073cd2c5dda7b64109a427c7e6fbe25abfff8316042d37b6add684d10bbcbcff581c7318e117c0d8b524f40e6c16dfb8ea16ab5240f57214b1ff000edeeb89ee841100a5ba787f13c01f629ef0ed84a"], 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) read$auto(0x3, 0x0, 0x8080) 24.66037776s ago: executing program 4 (id=4508): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r0, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x408001, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x5) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(0x0, 0x880c2, 0x95) close_range$auto(0x2, r1, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) close_range$auto(0x2, 0xa, 0x0) 23.592451713s ago: executing program 4 (id=4513): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x107000, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="085da1d6e16942fa8ce563a9b780a1fcd4092b45017cb9f41604135240bc1355e1395600f7a6aeea211728c5dce76cec22040ccb7cb38acfeb63acd76158f63499e52a436dee12293318cf638dc384e16ab88363723354b91085c96aaf02aacfd29c9003133a14ec6688b65fa509af6716a82b48a95fbe4dfdd3ccbb39c75c12e815528859588854fcabe678adb0bb6ac220e3de858812dc6bd65868dd734eebac5408a26ee042186e5f5d78c442af27f21a5cd8cbefd6b2f9510254df596c964dfb51483095b1bc74d58dcc3c229321", 0xd0) 23.13223785s ago: executing program 4 (id=4515): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110b27bd7000ffdbdf250900000800030000", @ANYRES32=0x0, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r0, 0x4004550d, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x161242, 0x130) utimes$auto(&(0x7f0000000040)='./file0\x00', 0x0) 21.987407836s ago: executing program 4 (id=4518): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000040)=':,\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) 8.043625644s ago: executing program 5 (id=4569): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x8) mmap$auto(0x8000000000000000, 0x9, 0x80000001, 0xebd, r0, 0x8000) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) clock_nanosleep$auto(0x5, 0x6, &(0x7f0000000840)={0x0, 0x8}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\xea\x85\x92\x06(#\xc4\xb6(\x9e\xfcKG\xc2\xd4\xc0\v\x02\x9f%C\x00\x01\x00@!\xa9\xce\x10Y\xd0\xeb\xed\x7f\xc8\xdc(\xd3\xe9\xf3\xddT\x18\x16#\xfdQ5\xaeA\xc3\xeay\x7f\xa2TR|js\xfd\n\xa3\x98\xc8\x91\xdd\x9e\x99}s\xe0x\a\x00\x00\x00\x00\x00\x00\x00.\xa8\xc5\xdbKx\x14l\xe6\x868\xb3\xd2\x00\xea\xf9\xd1z\x8f\xd9\x877J\"\xab\xf9\xdf\xbf\xa1\xa1ms\xaf\xd9&R\x03\x00\xc0u \xc3\xc2\xd61\x97V\xcah\r\x97M\xdb\xf9\x06\x95Z\xdfK\xbeY#/\xf5g\n\x10#\x10@Ft\x9c\xd9\xd3s\x94\x8aV\xeb\xee`e9(\xe0\x88\x06\xa6-;ZM\x9b\xe1-', 0x9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0xb5d) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080)="376c81c0b54c785c20e3f844d68d595b1009dd05aea517", 0x17) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rmdir$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) 6.95996087s ago: executing program 34 (id=4518): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000040)=':,\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) 6.893543213s ago: executing program 5 (id=4574): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, &(0x7f00000000c0)=0x6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c0006000b16581662321ff051abfb4a10031e390935d8624dd43bf0519b81d3aa5685f9d30c9c9196837758b16f145965c83d75b408b71ec88613a2383915bad4e9d8e8", @ANYRES16, @ANYBLOB="cb5b2cbd7000ffdb9f251f0000000500040000000000080003000900000008000200"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x82) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000005f137245f160d361ed375fd706a07ed34a2b9c798037ab357b38138c0f5ba5be321071b8b6928bac7319032853856d2665070ce7478214974c6ead01cb782eae7756c4440e6342bfebb95a1c443baf7dddf4dc64a77dfb1493fd4d36052cfe1b2dc56956a379f5a92b4417e0c21ea02037b3da6ed2c51ab1d07d23fa039ae5bb044455dcf769911fcdbaa1550b321809a0b6e63929a9b81bb196343c5eac4095d2467f202980328b9d2890bf1f6892a16080eb48ca", @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf25280000000700430099c8d5000400080153009d0073cd2c5dda7b64109a427c7e6fbe25abfff8316042d37b6add684d10bbcbcff581c7318e117c0d8b524f40e6c16dfb8ea16ab5240f57214b1ff000edeeb89ee841100a5ba787f13c01f629ef0ed84a00"], 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) read$auto(0x3, 0x0, 0x8080) 5.691190625s ago: executing program 5 (id=4577): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, &(0x7f00000000c0)=0x6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c0006000b16581662321ff051abfb4a10031e390935d8624dd43bf0519b81d3aa5685f9d30c9c9196837758b16f145965c83d75b408b71ec88613a2383915bad4e9d8e8", @ANYRES16, @ANYBLOB="cb5b2cbd7000ffdb9f251f0000000500040000000000080003000900000008000200f7000000", @ANYBLOB="976e9fd11cb5233d9a36e742d76b5b7149a7abdb5ae0f5eb7d4e9f558f75d9a8315627ccb8f375d9ffc232484cf425dab2a0bd619213888e0ff30ed4ccf4683e00794ebf4899858d0e5217e0a3eca6d6b7381edafaf35ced566188e5d1bf4eadd05a939435253093589dd13c448de24a6415a85eddd0d5eb9458797bc247d802eccdf148ded44f262c5467ac1368f506388e5711fb4eb629fbb4fd91a5fe0b3673d4a059222eb6693dc72ff4e47659f251b1bdeb17605318080f14"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x82) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf25280000000700430099c8d5000400080153009d0073cd2c5dda7b64109a427c7e6fbe25abfff8316042d37b6add684d10bbcbcff581c7318e117c0d8b524f40e6c16dfb8ea16ab5240f57214b1ff000edeeb89ee841100a5ba787f13c01f629ef0ed84a00"], 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) read$auto(0x3, 0x0, 0x8080) 5.349413644s ago: executing program 1 (id=4578): r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffefffffffffffa, 0x8) syslog$auto(0x4, &(0x7f0000000380)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000600)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa,;!\x1a\x00\x00\x00\x00\xcf\xc5D\xccG(\xe0\xbe\xf8\xc3\xe8\xa5Z3\x9b\xcb\xb6&Cy\x98\xc6\x9a=\xaaK\xfa\x8dD\xa6\xf34\xbdo\x95Xt\xbc-\x7f[\xba\xeb\xb1\xd0\xf0\xca\x81\xc3\x8f\x97\xf7\xf1\x81\x95~\xaf\xd2\xf7J\xbdE\xe5\x9f{\x95\x1a\x9c\x84$\xf4\xa9\x95]\xb0}_\x10\x86\xe5\xcdR\xed \xa30x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130026bd70d58471177fa56fd51a4fafa8b9006b68e11636178b6608000000207fb56767dfddd03e527871c177dfba87c63acdd3be49a3eef1d1e5562a6815823534b631e1a46c2d06082e7155955aa1d981b49e25375f75c77ef0b18e5cf503d65f65d6745cc8f976a3c5e8ac7fdb7bc215068505ca1570e586da5b1092cc3244a5abe08b104a52c1894740bc", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x20040894) listen$auto(0x3, 0x83) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) setreuid$auto(0x40000000003, 0xdf36) getrlimit$auto(0x3, &(0x7f0000000200)={0x3, 0x3}) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r9, 0x14, 0xfffffffa, 0x0, 0x28e) umount2$auto(0x0, 0x0) 5.11444611s ago: executing program 3 (id=4579): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x7fffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, 0x0, 0x5, 0x68) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) seccomp$auto(0x8, 0xd, &(0x7f0000000100)="9306cee2") ioctl$auto_OSS_ALSAEMULVER(r0, 0x40086602, &(0x7f0000000100)) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 4.542497291s ago: executing program 5 (id=4580): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x9, &(0x7f0000000080)={0x0, 0x9, 'p>5n3&', "09183c91d686"}) getsockopt$auto(r1, 0xf, 0x3c, 0x0, &(0x7f00000000c0)=0x1f) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x7, 0x7fd, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x80000001}]}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x2019) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYBLOB="010031bd7000fddbdf250c000000920003806631bb4b8fd6aa7e63933df7b1cac618ca54249fa19cd8db9d33dec9ff64a84d176db85a694e0ca965bc3d6cc402ebb354b45d3528375369553834ecb0e88005bd55e319683bca92ca92c87aef0b79d7bcf2bade97db15eb3cd82a2a2720b87226d999d74c66d7632d375bc7f37e6b9a9725960a15a4ba8ed687b568694da4963a0bf8ffffff71b8000000000000000018000180140002006e657464657673696d3000000000"], 0xc0}}, 0x24048084) 4.515098963s ago: executing program 3 (id=4581): prctl$auto_PR_SCHED_CORE_SHARE_TO(0x9, 0x2, 0xffffffffffffffff, 0x0, 0x4) mq_unlink$auto(0x0) r0 = bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc00", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf255f0000006800c8002cc63c58a5b98fa7d6eca4e325a871c9238b1227015c8ff1128759b6"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) madvise$auto(0x0, 0x8, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) futex_wait$auto(0x0, 0x0, 0x7f, 0xa, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3ff, 0x65, 0x8000001f, 0x1000, 0x86d3e, 0x5, 0x2, 0x7]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) ioctl$auto_UI_SET_KEYBIT(r0, 0x40045565, &(0x7f0000000140)=0xc) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 4.123540749s ago: executing program 1 (id=4582): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x4100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0x7) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x10100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) (async) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) cachestat$auto(0x1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) (async) cachestat$auto(0x1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) write$auto(r0, &(0x7f0000008d40)='(%}\xad)#@\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a000006000700008000000800", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) 3.524274578s ago: executing program 1 (id=4583): mmap$auto(0x0, 0x0, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/mounts\x00', 0x8a0000, 0x0) socket(0x1f, 0xa, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x200, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}, 0x54) r1 = socket(0x2, 0x80002, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_clone3(0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) io_destroy$auto(0xed) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/modules\x00', 0x250003, 0x0) bind$auto(0x3, &(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x6a) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000200)={&(0x7f0000000240)="7fd285a9862d95c2c869ce10b3888fcff14cf890d971c3f73b675cc3b75a1e4d178855764e898ad6456c324705a4c3263c1a1a7bf35997daaa9478be7594c3c9ae0695b1522b7bec5f73d100"/88, 0x45fc, 0x0, 0x6, 0x0, 0x10000000000100, 0x13}, 0x9) r3 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64$auto(r3, 0x0, 0x4, 0x80000000000006) io_uring_setup$auto(0xe1f, 0x0) close_range$auto(0x2, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) 3.357607936s ago: executing program 3 (id=4584): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/evt_mode_parameter_change_reported\x00', 0x1a2b02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r1, &(0x7f0000000040)='.G+*@sys\x00', 0x9) (async) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, &(0x7f00000010c0)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G\xf68\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8fQ\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\xe9\xf2\x0e\xc8\x00\x00\x00\x00', 0x100) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) bpf$auto(0x0, 0x0, 0x6f3) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) getsockopt$auto(0x6, 0x107, 0x18, 0x0, 0x0) (async) ioctl$auto(r2, 0x80045518, 0xffffffffffffffff) 3.187330993s ago: executing program 1 (id=4585): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b00)={0x1c, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x20000000) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94070000", @ANYRES16=r3, @ANYBLOB="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"], 0x794}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk\x00', 0x500, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x2b, 0x1, 0x40106) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x1) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) write$auto(r5, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) 2.852361579s ago: executing program 3 (id=4586): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) socket(0x15, 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x6, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0xa, 0x1f, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x1]}, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) arch_prctl$auto(0x1003, 0xffffffffffffffff) (async) arch_prctl$auto(0x1003, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) inotify_init1$auto(0x4) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0x4004af07, &(0x7f00000001c0)=r3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="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", 0xace) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) 2.35317893s ago: executing program 5 (id=4587): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) mmap$auto(0x1000000000000, 0x2020009, 0x3, 0xeb2, r0, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) futex_waitv$auto(0x0, 0x6, 0x5, &(0x7f0000000100)={0xa4, 0x4}, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)='1', 0x1) 1.747527315s ago: executing program 3 (id=4588): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, &(0x7f00000000c0)=0x6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c0006000b16581662321ff051abfb4a10031e390935d8624dd43bf0519b81d3aa5685f9d30c9c9196837758b16f145965c83d75b408b71ec88613a2383915bad4e9d8e8", @ANYRES16, @ANYBLOB="cb5b2cbd7000ffdb9f251f0000000500040000000000080003000900000008000200f7000000", @ANYBLOB="976e9fd11cb5233d9a36e742d76b5b7149a7abdb5ae0f5eb7d4e9f558f75d9a8315627ccb8f375d9ffc232484cf425dab2a0bd619213888e0ff30ed4ccf4683e00794ebf4899858d0e5217e0a3eca6d6b7381edafaf35ced566188e5d1bf4eadd05a939435253093589dd13c448de24a6415a85eddd0d5eb9458797bc247d802eccdf148ded44f262c5467ac1368f506388e5711fb4eb629fbb4fd91a5fe0b3673d4a059222eb6693dc72ff4e47659f251b1bdeb17605318080f14"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x82) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040026bd7000fddbdf25280000000700430099c8d5000400080153009d0073cd2c5dda7b64109a427c7e6fbe25abfff8316042d37b6add684d10bbcbcff581c7318e117c0d8b524f40e6c16dfb8ea16ab5240f57214b1ff000edeeb89ee841100a5ba787f13c01f629ef0ed84a00"], 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) read$auto(0x3, 0x0, 0x8080) 657.825141ms ago: executing program 3 (id=4589): socket(0x2, 0x2, 0x18000002) ioprio_set$auto(0x3, 0x0, 0x4b34) setitimer$auto(0x0, &(0x7f0000000140)={{0x40000000002, 0x5}, {0x20000, 0x8}}, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) syslog$auto(0x400, &(0x7f0000001300)='.k\xac\x8c\x1d\x0e\x98\x8d\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2$\x12\x93\xc7\xed\a\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#\v\x00\x00\x00\x00\x00\x00\x00\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x05\xa9 1q\xff\x7f\x00\x00^\xc1\xb6\xa1q\x0f\xd1\x013\x87\x88T/\xe2\x16\xbc\xf4]\x8d\x1e\xa0\x9e\xd3\x17.\x8a\xdd\xa7\x8e\x856]\xe9j\xca\x8a\xa8T\x9fk\xc0E\xde\x92\xa7\x1e|\x98\xf2\xdfj\x03\x1f\x9b\xf9&\xa9\xb3\xa8\\\"\x90\xbaqq\x1b\xcfg\xc5u\x8fN\xfb\xc7*\xd0\t\a\xbd\x95L*\xe0\x88k\"\"LP\xf9\x9b\x00\xe6\xeb\v\xc5\x8e\xf1G\x90g\xef\x10\r\xee\x86\x1a49\x98g\x01\xc6\x1ba\x9f\xfaI\x17\xec\x92\xbcKS\xf6\xa1\xf8s\xfbV\xc3\x9f\x95\xd9\xb9o\xbb\x8f)\x9e\xcc\x01\x94j\xcdF\xd2c\x15b}TL\x89\xfdj\x1e\xc1)\xf5N\xe1\x00\x00\ng\xad&Q\xf4\xfe>\xae\xe0\x03\xa8\xfb\xe4\xffx\xa7\xc8$\xe3\xd4\xac\xe4K\x06\xdf\b\xb5\x9e\xe8\xa7\xe9\xa1p\xf2\x9b\xacsR\xf3#\x91\x88\x12k\xa3\xbd\xd0\x8eS;\x1b\xbf4\x10 \xe9\x0e7T\xec-\xdfN\'\x1bK\x8c\xf6-sb\xbd\xed;38FG\xf8\xa6V\x15\xe5\xabjbfq\x97\x87\x9dB(\xa7\x13\xca\x0f\xbf\x97P\x96z\x11t\x169\xf4.\\ \xf4a\x87+s\x93\"\x05\xc5\xdb\xc80\x8f\xa9Q\x83\xb61\x17\x1c\x86\x99\x87@T\xe0qo\x83-\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x21) r0 = socket(0xa, 0x3, 0x87) mremap$auto(0x110c230000, 0x4, 0x8, 0x7, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timerfd_gettime$auto(r0, &(0x7f0000000340)={{0x4, 0x7}, {0x81, 0x6}}) setsockopt$auto(0x3, 0x1, 0x52, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/fail-nth\x00', 0xc42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="67130000", @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="04002580"], 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x200408d4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0xff, 0x4) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000080)={0x200, 0x3, 0x1, 0x6401, 0x7f, 0x0}) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000034c0)={0x460, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x442, 0x2, 0x0, 0x1, [@generic="dcd005bbb126efc3fda27ed6d5dbfe3746e50571796d4a2c7c3216d126bc8a34d3f3282c421a5f68a8f2b0046e89f2eb39b9c1fd6c1949f59299248ec28e51d446ba0a4842675d11dcc6e3ce3d05204bbee2380fdf3b4fbd788ee3aba059efca15fb9e50b7e656b68df7d1034415a255282b5d26118db1df594e41da6ce8929751ca9c79fe5607560cff58ce334e03aa271610e4c589a1b4a699261a298777fbbb07d361b6803b962e5ec43e2a2b9b070410470745611c2fe0b80e3f63e5859a4c793e53d9f2fd18b4f82a26df55bd9b005e240a63396f7d52f9", @nested={0x107, 0x143, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @uid}, @nested={0x4}, @generic="13316ff46155d36e508feb3b935c1585c30b38f759f746b8", @nested={0x4, 0xe9}, @nested={0x4, 0x91}, @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x1}, @typed={0x10, 0xa2, 0x0, 0x0, @str='}-!#%,)\\)-/\x00'}, @typed={0x8, 0x17, 0x0, 0x0, @uid}, @generic="e49d24e2af5f599187b6b6b949baa5b9f3fdd424d0f9cfe6ac9094e0bfa79faf1b7c7257a376dfbcf65dc3", @generic="116e901fe3e7215f2305c7052aa47f8cebdd8fef77f0c1d92d1475c40698bf06b36a01009647e3dcd15d3be5bc26ecff6fee1e56a1f6e761e40b9428a9f7cb3bb0a952d1b17a0abedd78dadc9fed53601b3291687f393423170d5a1ff1999c552ee921dedeff2f6d4c6e3816658d4b9fc540d46177b2f17f7942fd54a9efeae8f94233bba1b63ed4e933ae1a"]}, @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x6}, @nested={0x17f, 0x66, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @pid=r7}, @generic="2b1a63017b924b55cf3ed1f909ee0922eef0add32fde128a5c63395dd911c8d73673087b9bdf91b791b937c1018d6d570d8dd93c08918d54983917e2c5f1767517386ac0e6e99e80e9f22d3dc6f054134a3b8385b969465d9cf31c0dcff7c8a9f38b5dd46eb64ad62ae44de506c71057d82b9aff161ab527135ac58923761e8ac3cc1900467621d137964be072a10d1468295e4c3cb34bc2bebd0b83cef0a37cad7aa5ba5fb1ab2ed0cf5a82bffe371f598800d4d626fc3acde1fae7fa9452a2d4bdb21f193a29832e41f860826207ed9e0f142305d021bae79f98e33e920f7bd8cb49cf0e1ceff269c204", @nested={0x4, 0x71}, @generic="3fdb1992", @typed={0xc, 0xd2, 0x0, 0x0, @u64=0x7ff}, @generic="bc41b01217d32eb48a1b8e7d574dcadd0b98665a6611b522d85c08edfedbd3900725fcf85fabdde0a58ce1f349e6d5810b82c46109fc1b05606877974b2416cfcf741d0745b3ffc52123a51834d14803997a9ad9bbf3c2612284c5ba39b494ec8ca2eab766f66d008f749ff39ffac4e57ca8256a"]}, @nested={0x14, 0x9, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @fd}, @typed={0x8, 0xf2, 0x0, 0x0, @pid}]}, @typed={0x8, 0x4f, 0x0, 0x0, @uid}, @typed={0xb5, 0xa3, 0x0, 0x0, @binary="d92901bf29a98c82e9e469139c8e99049ec2ca983448fd600e5a1d049a5831b1656d2bff4d4ac64113239e54656f1364b8506626e88be2d50c6170e1004c270118b446abe5122cf5f96dabefe9ef74f876cd3789003c678bb5a18104c213dc3a2464398292186d38bb87fffc380f67d129df68545c6b6050938310aea919c01139e4a0e146e926bc70b1f7904c5bf9b65187a77fd0a31a3da05cf7fac7493473e2b2daaa1548a8614919310712bb56f000"}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x460}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket(0x1d, 0x2, 0x6) 498.816444ms ago: executing program 5 (id=4590): r0 = mq_open$auto(&(0x7f0000000000)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\b\x00\x00\x00\x00\x00\x00\x00\xff\xc8u5srQ', 0xe2ce, 0xc, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d01, 0x400, 0x3ff}]}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mq_timedreceive$auto(r0, 0x0, 0x3, 0x0, 0x0) 498.315287ms ago: executing program 1 (id=4591): select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0xfffffffffffff761, 0x103, 0xa, 0x4, 0x7fff, 0x5, 0x4006]}, 0x0, 0x0) 0s ago: executing program 1 (id=4592): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40044) open(&(0x7f0000000000)='./file0\x00', 0x28400, 0x82) open(&(0x7f00000001c0)='./file0\x00', 0x40841, 0x118) kernel console output (not intermixed with test programs): do_pte_missing+0x2202/0x3ba0 [ 853.135826][T19359] ? find_held_lock+0x2b/0x80 [ 853.135859][T19359] __handle_mm_fault+0x1556/0x2aa0 [ 853.135908][T19359] ? __pfx___handle_mm_fault+0x10/0x10 [ 853.135950][T19359] ? __pte_offset_map_lock+0x174/0x310 [ 853.135982][T19359] ? find_held_lock+0x2b/0x80 [ 853.136016][T19359] ? follow_page_pte+0x5cf/0x1390 [ 853.136055][T19359] handle_mm_fault+0x589/0xd10 [ 853.136100][T19359] __get_user_pages+0x54e/0x3530 [ 853.136148][T19359] ? __pfx___get_user_pages+0x10/0x10 [ 853.136191][T19359] populate_vma_page_range+0x267/0x3f0 [ 853.136230][T19359] ? __pfx_populate_vma_page_range+0x10/0x10 [ 853.136266][T19359] ? __pfx_find_vma_intersection+0x10/0x10 [ 853.136301][T19359] ? do_mmap+0x69c/0x1210 [ 853.136336][T19359] __mm_populate+0x1d8/0x380 [ 853.136374][T19359] ? __pfx___mm_populate+0x10/0x10 [ 853.136412][T19359] ? up_write+0x1b2/0x520 [ 853.136453][T19359] vm_mmap_pgoff+0x37f/0x470 [ 853.136489][T19359] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 853.136529][T19359] ? __x64_sys_futex+0x1e0/0x4c0 [ 853.136567][T19359] ? __x64_sys_futex+0x1e9/0x4c0 [ 853.136606][T19359] ksys_mmap_pgoff+0x7d/0x5c0 [ 853.136637][T19359] ? xfd_validate_state+0x61/0x180 [ 853.136673][T19359] ? __pfx_do_writev+0x10/0x10 [ 853.136702][T19359] __x64_sys_mmap+0x125/0x190 [ 853.136744][T19359] do_syscall_64+0xcd/0xfa0 [ 853.136778][T19359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.136804][T19359] RIP: 0033:0x7f6e6ed8f6c9 [ 853.136823][T19359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.136849][T19359] RSP: 002b:00007f6e6fcaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 853.136874][T19359] RAX: ffffffffffffffda RBX: 00007f6e6efe5fa0 RCX: 00007f6e6ed8f6c9 [ 853.136890][T19359] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 853.136905][T19359] RBP: 00007f6e6ee11f91 R08: 0000000000000007 R09: 0000000000028000 [ 853.136921][T19359] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 853.136937][T19359] R13: 00007f6e6efe6038 R14: 00007f6e6efe5fa0 R15: 00007ffd7aaab5e8 [ 853.136971][T19359] [ 854.290701][T19378] blktrace: Concurrent blktraces are not allowed on loop2 [ 854.734443][T19388] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 855.003118][T19394] FAULT_INJECTION: forcing a failure. [ 855.003118][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 855.028280][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3312'. [ 855.314152][T19394] CPU: 1 UID: 0 PID: 19394 Comm: syz.0.3318 Not tainted syzkaller #0 PREEMPT(full) [ 855.314186][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.314201][T19394] Call Trace: [ 855.314210][T19394] [ 855.314219][T19394] dump_stack_lvl+0x16c/0x1f0 [ 855.314254][T19394] should_fail_ex+0x512/0x640 [ 855.314292][T19394] ? __kmalloc_noprof+0xca/0x880 [ 855.314335][T19394] should_failslab+0xc2/0x120 [ 855.314369][T19394] __kmalloc_noprof+0xdd/0x880 [ 855.314407][T19394] ? __lock_acquire+0x622/0x1c90 [ 855.314441][T19394] ? sk_prot_alloc+0x1a8/0x2a0 [ 855.314477][T19394] ? sk_prot_alloc+0x1a8/0x2a0 [ 855.314505][T19394] sk_prot_alloc+0x1a8/0x2a0 [ 855.314547][T19394] sk_alloc+0x36/0xc20 [ 855.314587][T19394] pppoe_create+0x32/0x360 [ 855.314619][T19394] pppox_create+0x15c/0x2c0 [ 855.314651][T19394] __sock_create+0x338/0x8d0 [ 855.314689][T19394] __sys_socket+0x14d/0x260 [ 855.314721][T19394] ? __fget_files+0x20e/0x3c0 [ 855.314751][T19394] ? __pfx___sys_socket+0x10/0x10 [ 855.314785][T19394] ? xfd_validate_state+0x61/0x180 [ 855.314829][T19394] __x64_sys_socket+0x72/0xb0 [ 855.314861][T19394] ? lockdep_hardirqs_on+0x7c/0x110 [ 855.314892][T19394] do_syscall_64+0xcd/0xfa0 [ 855.314925][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.314950][T19394] RIP: 0033:0x7f21e158f6c9 [ 855.314970][T19394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.314994][T19394] RSP: 002b:00007f21e23ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 855.315017][T19394] RAX: ffffffffffffffda RBX: 00007f21e17e6180 RCX: 00007f21e158f6c9 [ 855.315034][T19394] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 855.315049][T19394] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 855.315064][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.315079][T19394] R13: 00007f21e17e6218 R14: 00007f21e17e6180 R15: 00007ffc47f8a368 [ 855.315111][T19394] [ 855.549865][T19385] ima: policy update failed [ 855.851331][ T30] audit: type=1802 audit(4294969390.778:85): pid=19385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3318" res=0 errno=0 [ 858.914238][T19447] ptrace attach of "./syz-executor exec"[19451] was attempted by "./syz-executor exec"[19447] [ 861.108455][T19482] blktrace: Concurrent blktraces are not allowed on loop2 [ 861.968206][T15152] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9 [ 867.936810][T19596] netlink: zone id is out of range [ 867.977229][T19596] netlink: zone id is out of range [ 868.043167][T19596] netlink: zone id is out of range [ 868.110027][T19596] netlink: zone id is out of range [ 868.243023][T19596] netlink: zone id is out of range [ 868.303997][T19596] netlink: zone id is out of range [ 868.348667][T19596] netlink: zone id is out of range [ 868.440431][T19596] netlink: del zone limit has 8 unknown bytes [ 869.584557][T19623] ptrace attach of "./syz-executor exec"[15618] was attempted by "./syz-executor exec"[19623] [ 873.145034][T19699] blktrace: Concurrent blktraces are not allowed on loop2 [ 873.897052][T19705] ptrace attach of "./syz-executor exec"[19708] was attempted by "./syz-executor exec"[19705] [ 874.112185][T19716] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 874.112185][T19716] MÅ' is too long [ 874.163952][T19716] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 874.163952][T19716] ††½WÏõ›ú «ú' is too long [ 874.276986][T19721] random: crng reseeded on system resumption [ 874.447583][T19726] sd 0:0:1:0: PR command failed: 1026 [ 874.473398][T19726] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 874.486629][T19726] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 874.753103][T19732] sd 0:0:1:0: PR command failed: 1026 [ 874.787670][T19732] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 874.820970][T19732] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 876.004567][T19747] random: crng reseeded on system resumption [ 876.959412][T19761] FAULT_INJECTION: forcing a failure. [ 876.959412][T19761] name failslab, interval 1, probability 0, space 0, times 0 [ 877.054379][T19761] CPU: 1 UID: 0 PID: 19761 Comm: syz.1.3410 Not tainted syzkaller #0 PREEMPT(full) [ 877.054411][T19761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 877.054426][T19761] Call Trace: [ 877.054434][T19761] [ 877.054444][T19761] dump_stack_lvl+0x16c/0x1f0 [ 877.054482][T19761] should_fail_ex+0x512/0x640 [ 877.054517][T19761] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 877.054549][T19761] should_failslab+0xc2/0x120 [ 877.054580][T19761] __kvmalloc_node_noprof+0x141/0x9c0 [ 877.054607][T19761] ? stack_depot_save_flags+0x29/0x9c0 [ 877.054644][T19761] ? v4l2_ctrl_new+0x982/0x2190 [ 877.054674][T19761] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 877.054718][T19761] ? v4l2_ctrl_new+0x982/0x2190 [ 877.054747][T19761] v4l2_ctrl_new+0x982/0x2190 [ 877.054780][T19761] ? do_sys_openat2+0x90/0x1d0 [ 877.054822][T19761] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 877.054861][T19761] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 877.054903][T19761] v4l2_ctrl_new_std+0x1be/0x290 [ 877.054943][T19761] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 877.054976][T19761] ? rcu_is_watching+0x12/0xc0 [ 877.055002][T19761] ? trace_kmalloc+0x2b/0xd0 [ 877.055030][T19761] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 877.055065][T19761] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 877.055103][T19761] ? media_request_object_init+0x100/0x180 [ 877.055134][T19761] vim2m_open+0x140/0x890 [ 877.055172][T19761] v4l2_open+0x1d2/0x5e0 [ 877.055200][T19761] ? __pfx_v4l2_open+0x10/0x10 [ 877.055228][T19761] chrdev_open+0x234/0x6a0 [ 877.055258][T19761] ? __pfx_apparmor_file_open+0x10/0x10 [ 877.055297][T19761] ? __pfx_chrdev_open+0x10/0x10 [ 877.055329][T19761] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 877.055363][T19761] do_dentry_open+0x982/0x1530 [ 877.055392][T19761] ? __pfx_chrdev_open+0x10/0x10 [ 877.055428][T19761] vfs_open+0x82/0x3f0 [ 877.055466][T19761] path_openat+0x1de4/0x2cb0 [ 877.055505][T19761] ? __pfx_path_openat+0x10/0x10 [ 877.055534][T19761] ? __lock_acquire+0xb8a/0x1c90 [ 877.055571][T19761] do_filp_open+0x20b/0x470 [ 877.055599][T19761] ? __pfx_do_filp_open+0x10/0x10 [ 877.055648][T19761] ? alloc_fd+0x471/0x7d0 [ 877.055681][T19761] do_sys_openat2+0x11b/0x1d0 [ 877.055718][T19761] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.055766][T19761] __x64_sys_openat+0x174/0x210 [ 877.055803][T19761] ? __pfx___x64_sys_openat+0x10/0x10 [ 877.055853][T19761] do_syscall_64+0xcd/0xfa0 [ 877.055885][T19761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.055910][T19761] RIP: 0033:0x7f33cad8f6c9 [ 877.055929][T19761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.055954][T19761] RSP: 002b:00007f33cbb6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 877.055977][T19761] RAX: ffffffffffffffda RBX: 00007f33cafe5fa0 RCX: 00007f33cad8f6c9 [ 877.055994][T19761] RDX: 000000000002aa81 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 877.056009][T19761] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 877.056024][T19761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.056039][T19761] R13: 00007f33cafe6038 R14: 00007f33cafe5fa0 R15: 00007fffbdcf4098 [ 877.056077][T19761] [ 877.835098][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.847057][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.834129][T19785] can: request_module (can-proto-3) failed. [ 878.905021][T19785] ptrace attach of "./syz-executor exec"[19790] was attempted by "./syz-executor exec"[19785] [ 879.613825][T19806] blktrace: Concurrent blktraces are not allowed on loop2 [ 881.479210][T19845] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 881.479210][T19845] MÅ' is too long [ 881.524350][T19845] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 881.524350][T19845] ††½WÏõ›ú «ú' is too long [ 882.221335][T19859] ptrace attach of "./syz-executor exec"[19862] was attempted by "./syz-executor exec"[19859] [ 882.912388][T19870] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 883.389732][T19881] FAULT_INJECTION: forcing a failure. [ 883.389732][T19881] name fail_futex, interval 1, probability 0, space 0, times 0 [ 883.427694][T19881] CPU: 1 UID: 0 PID: 19881 Comm: syz.1.3439 Not tainted syzkaller #0 PREEMPT(full) [ 883.427727][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 883.427743][T19881] Call Trace: [ 883.427751][T19881] [ 883.427760][T19881] dump_stack_lvl+0x16c/0x1f0 [ 883.427795][T19881] should_fail_ex+0x512/0x640 [ 883.427836][T19881] get_futex_key+0x1d0/0x1560 [ 883.427876][T19881] ? __pfx_get_futex_key+0x10/0x10 [ 883.427908][T19881] ? __mutex_trylock_common+0xe9/0x250 [ 883.427959][T19881] futex_wake+0xea/0x530 [ 883.428000][T19881] ? __pfx_futex_wake+0x10/0x10 [ 883.428036][T19881] ? __lock_acquire+0xb8a/0x1c90 [ 883.428082][T19881] do_futex+0x1e3/0x350 [ 883.428116][T19881] ? __pfx_do_futex+0x10/0x10 [ 883.428148][T19881] ? __might_fault+0xe3/0x190 [ 883.428182][T19881] mm_release+0x24e/0x300 [ 883.428210][T19881] do_exit+0x68e/0x2bf0 [ 883.428250][T19881] ? __pfx_do_exit+0x10/0x10 [ 883.428284][T19881] ? do_raw_spin_lock+0x12c/0x2b0 [ 883.428322][T19881] ? find_held_lock+0x2b/0x80 [ 883.428352][T19881] do_group_exit+0xd3/0x2a0 [ 883.428389][T19881] get_signal+0x2671/0x26d0 [ 883.428428][T19881] ? __pfx_get_signal+0x10/0x10 [ 883.428456][T19881] ? do_futex+0x122/0x350 [ 883.428489][T19881] ? __pfx_do_futex+0x10/0x10 [ 883.428525][T19881] arch_do_signal_or_restart+0x8f/0x790 [ 883.428558][T19881] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 883.428598][T19881] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 883.428633][T19881] exit_to_user_mode_loop+0x85/0x130 [ 883.428673][T19881] do_syscall_64+0x426/0xfa0 [ 883.428705][T19881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.428730][T19881] RIP: 0033:0x7f33cad8f6c9 [ 883.428749][T19881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.428774][T19881] RSP: 002b:00007f33cbb4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 883.428798][T19881] RAX: fffffffffffffe00 RBX: 00007f33cafe6098 RCX: 00007f33cad8f6c9 [ 883.428816][T19881] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33cafe6098 [ 883.428832][T19881] RBP: 00007f33cafe6090 R08: 0000000000000000 R09: 0000000000000000 [ 883.428849][T19881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.428865][T19881] R13: 00007f33cafe6128 R14: 00007fffbdcf3fb0 R15: 00007fffbdcf4098 [ 883.428897][T19881] [ 884.878067][T19906] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 884.922460][T19906] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 884.984304][ T30] audit: type=1800 audit(4294969420.351:86): pid=19909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3447" name="version" dev="configfs" ino=88159 res=0 errno=0 [ 885.232056][T19906] blktrace: Concurrent blktraces are not allowed on loop2 [ 885.886830][T19924] ptrace attach of "./syz-executor exec"[19926] was attempted by "./syz-executor exec"[19924] [ 887.000881][T19942] netlink: 74 bytes leftover after parsing attributes in process `syz.3.3454'. [ 888.450447][T19970] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3460'. [ 890.289808][T20001] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3468'. [ 891.221553][T20025] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3474'. [ 891.429058][T20008] delete_channel: no stack [ 892.283311][T20042] FAULT_INJECTION: forcing a failure. [ 892.283311][T20042] name failslab, interval 1, probability 0, space 0, times 0 [ 892.337457][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'. [ 892.419604][T20042] CPU: 1 UID: 0 PID: 20042 Comm: syz.0.3478 Not tainted syzkaller #0 PREEMPT(full) [ 892.419640][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 892.419657][T20042] Call Trace: [ 892.419665][T20042] [ 892.419674][T20042] dump_stack_lvl+0x16c/0x1f0 [ 892.419710][T20042] should_fail_ex+0x512/0x640 [ 892.419748][T20042] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 892.419778][T20042] should_failslab+0xc2/0x120 [ 892.419812][T20042] kmem_cache_alloc_noprof+0x75/0x6e0 [ 892.419839][T20042] ? seq_open+0x55/0x170 [ 892.419878][T20042] ? seq_open+0x55/0x170 [ 892.419909][T20042] seq_open+0x55/0x170 [ 892.419944][T20042] __seq_open_private+0x3e/0xd0 [ 892.419987][T20042] tracing_open+0x25f/0xdf0 [ 892.420025][T20042] do_dentry_open+0x982/0x1530 [ 892.420056][T20042] ? __pfx_tracing_open+0x10/0x10 [ 892.420095][T20042] vfs_open+0x82/0x3f0 [ 892.420147][T20042] path_openat+0x1de4/0x2cb0 [ 892.420190][T20042] ? __pfx_path_openat+0x10/0x10 [ 892.420221][T20042] ? __lock_acquire+0xb8a/0x1c90 [ 892.420259][T20042] do_filp_open+0x20b/0x470 [ 892.420289][T20042] ? __pfx_do_filp_open+0x10/0x10 [ 892.420339][T20042] ? alloc_fd+0x471/0x7d0 [ 892.420372][T20042] do_sys_openat2+0x11b/0x1d0 [ 892.420410][T20042] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.420460][T20042] __x64_sys_openat+0x174/0x210 [ 892.420499][T20042] ? __pfx___x64_sys_openat+0x10/0x10 [ 892.420540][T20042] ? syscall_user_dispatch+0x78/0x140 [ 892.420571][T20042] do_syscall_64+0xcd/0xfa0 [ 892.420604][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.420629][T20042] RIP: 0033:0x7f21e158f6c9 [ 892.420650][T20042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.420677][T20042] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.420702][T20042] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 892.420720][T20042] RDX: 0000000000002040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 892.420737][T20042] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 892.420753][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.420768][T20042] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 892.420802][T20042] [ 893.868847][T20055] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3482'. [ 894.509628][T20069] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3486'. [ 896.543405][T20096] ptrace attach of "./syz-executor exec"[20097] was attempted by "./syz-executor exec"[20096] [ 897.143092][T20107] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3498'. [ 901.178136][T20186] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3515'. [ 901.228614][T20186] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3515'. [ 902.189708][T15152] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 904.067395][T20229] ptrace attach of "./syz-executor exec"[20233] was attempted by "./syz-executor exec"[20229] [ 904.396351][T20245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3527'. [ 905.312948][T20262] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3533'. [ 905.395623][T20266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3534'. [ 905.659464][T20266] veth1_macvtap: left promiscuous mode [ 907.224564][T15152] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 907.232194][T15152] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 908.886406][T20316] ptrace attach of "./syz-executor exec"[20321] was attempted by "./syz-executor exec"[20316] [ 909.339581][T20299] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 909.594389][T20333] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3552'. [ 909.913059][T20342] deleting an unspecified loop device is not supported. [ 910.003683][T20342] FAULT_INJECTION: forcing a failure. [ 910.003683][T20342] name failslab, interval 1, probability 0, space 0, times 0 [ 910.079934][T20342] CPU: 1 UID: 0 PID: 20342 Comm: syz.0.3553 Not tainted syzkaller #0 PREEMPT(full) [ 910.079976][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 910.079992][T20342] Call Trace: [ 910.080000][T20342] [ 910.080010][T20342] dump_stack_lvl+0x16c/0x1f0 [ 910.080045][T20342] should_fail_ex+0x512/0x640 [ 910.080084][T20342] ? __kmalloc_noprof+0xca/0x880 [ 910.080127][T20342] should_failslab+0xc2/0x120 [ 910.080161][T20342] __kmalloc_noprof+0xdd/0x880 [ 910.080199][T20342] ? __pfx_sprintf+0x10/0x10 [ 910.080234][T20342] ? do_syscall_64+0xcd/0xfa0 [ 910.080265][T20342] ? ima_write_template_field_data+0x5d/0x1f0 [ 910.080302][T20342] ? ima_write_template_field_data+0x5d/0x1f0 [ 910.080333][T20342] ima_write_template_field_data+0x5d/0x1f0 [ 910.080369][T20342] ima_eventdigest_init_common+0x154/0x430 [ 910.080403][T20342] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 910.080454][T20342] ? trace_kmalloc+0x2b/0xd0 [ 910.080484][T20342] ? __kmalloc_noprof+0x34f/0x880 [ 910.080524][T20342] ? ima_alloc_init_template+0x19d/0x720 [ 910.080571][T20342] ima_alloc_init_template+0x3a0/0x720 [ 910.080619][T20342] ima_store_measurement+0x1eb/0x5c0 [ 910.080646][T20342] ? __pfx_ima_store_measurement+0x10/0x10 [ 910.080672][T20342] ? vfs_getxattr_alloc+0xec/0x350 [ 910.080706][T20342] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 910.080750][T20342] process_measurement+0x1ddb/0x23e0 [ 910.080800][T20342] ? __lock_acquire+0x622/0x1c90 [ 910.080833][T20342] ? __pfx_process_measurement+0x10/0x10 [ 910.080869][T20342] ? __kasan_slab_alloc+0x89/0x90 [ 910.080899][T20342] ? security_file_alloc+0x34/0x2b0 [ 910.080924][T20342] ? alloc_empty_file+0x73/0x1e0 [ 910.080958][T20342] ? alloc_file_pseudo+0x13a/0x230 [ 910.081006][T20342] ? find_held_lock+0x2b/0x80 [ 910.081068][T20342] ima_file_mmap+0x1b1/0x1d0 [ 910.081105][T20342] ? __pfx_ima_file_mmap+0x10/0x10 [ 910.081150][T20342] security_mmap_file+0x88c/0x990 [ 910.081179][T20342] vm_mmap_pgoff+0xec/0x470 [ 910.081221][T20342] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 910.081251][T20342] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 910.081290][T20342] ? hugetlbfs_get_inode+0x31f/0x730 [ 910.081328][T20342] ksys_mmap_pgoff+0x1c8/0x5c0 [ 910.081366][T20342] __x64_sys_mmap+0x125/0x190 [ 910.081409][T20342] do_syscall_64+0xcd/0xfa0 [ 910.081441][T20342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.081467][T20342] RIP: 0033:0x7f21e158f6c9 [ 910.081487][T20342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.081511][T20342] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 910.081534][T20342] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 910.081551][T20342] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 910.081567][T20342] RBP: 00007f21e1611f91 R08: ffffffffffffffff R09: 0000300000000000 [ 910.081583][T20342] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 910.081599][T20342] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 910.081632][T20342] [ 910.532962][ T30] audit: type=1804 audit(4294969449.994:87): pid=20342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.3553" name="anon_hugepage" dev="hugetlbfs" ino=90960 res=0 errno=0 [ 910.635539][T20345] zswap: compressor û not available [ 911.741188][T20360] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3556'. [ 912.228406][T20371] vhci_hcd: invalid port number 16 [ 912.258129][T20371] vhci_hcd: invalid port number 16 [ 913.241721][T20386] FAULT_INJECTION: forcing a failure. [ 913.241721][T20386] name failslab, interval 1, probability 0, space 0, times 0 [ 913.311003][T20386] CPU: 1 UID: 0 PID: 20386 Comm: syz.1.3563 Not tainted syzkaller #0 PREEMPT(full) [ 913.311063][T20386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.311080][T20386] Call Trace: [ 913.311088][T20386] [ 913.311098][T20386] dump_stack_lvl+0x16c/0x1f0 [ 913.311133][T20386] should_fail_ex+0x512/0x640 [ 913.311179][T20386] ? __kmalloc_cache_noprof+0x5f/0x780 [ 913.311211][T20386] should_failslab+0xc2/0x120 [ 913.311252][T20386] __kmalloc_cache_noprof+0x72/0x780 [ 913.311275][T20386] ? do_raw_spin_unlock+0x172/0x230 [ 913.311297][T20386] ? snd_mixer_oss_open+0x11d/0x300 [ 913.311332][T20386] ? snd_mixer_oss_open+0x11d/0x300 [ 913.311360][T20386] snd_mixer_oss_open+0x11d/0x300 [ 913.311387][T20386] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 913.311417][T20386] soundcore_open+0x40c/0x580 [ 913.311449][T20386] ? __pfx_soundcore_open+0x10/0x10 [ 913.311478][T20386] chrdev_open+0x234/0x6a0 [ 913.311508][T20386] ? __pfx_apparmor_file_open+0x10/0x10 [ 913.311546][T20386] ? __pfx_chrdev_open+0x10/0x10 [ 913.311579][T20386] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 913.311613][T20386] do_dentry_open+0x982/0x1530 [ 913.311642][T20386] ? __pfx_chrdev_open+0x10/0x10 [ 913.311678][T20386] vfs_open+0x82/0x3f0 [ 913.311717][T20386] path_openat+0x1de4/0x2cb0 [ 913.311754][T20386] ? __pfx_path_openat+0x10/0x10 [ 913.311784][T20386] ? __lock_acquire+0xb8a/0x1c90 [ 913.311821][T20386] do_filp_open+0x20b/0x470 [ 913.311849][T20386] ? __pfx_do_filp_open+0x10/0x10 [ 913.311898][T20386] ? alloc_fd+0x471/0x7d0 [ 913.311930][T20386] do_sys_openat2+0x11b/0x1d0 [ 913.311968][T20386] ? __pfx_do_sys_openat2+0x10/0x10 [ 913.312022][T20386] __x64_sys_openat+0x174/0x210 [ 913.312061][T20386] ? __pfx___x64_sys_openat+0x10/0x10 [ 913.312111][T20386] do_syscall_64+0xcd/0xfa0 [ 913.312146][T20386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.312171][T20386] RIP: 0033:0x7f33cad8f6c9 [ 913.312191][T20386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.312216][T20386] RSP: 002b:00007f33cbb6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 913.312240][T20386] RAX: ffffffffffffffda RBX: 00007f33cafe5fa0 RCX: 00007f33cad8f6c9 [ 913.312257][T20386] RDX: 0000000000000902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 913.312275][T20386] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 913.312291][T20386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.312307][T20386] R13: 00007f33cafe6038 R14: 00007f33cafe5fa0 R15: 00007fffbdcf4098 [ 913.312339][T20386] [ 914.823066][T20407] WARNING! power/level is deprecated; use power/control instead [ 918.874883][T20493] blktrace: Concurrent blktraces are not allowed on loop2 [ 919.427667][ T5843] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 919.745844][T20512] openvswitch: netlink: IP tunnel dst address not specified [ 920.073109][T20517] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3600'. [ 923.689476][T20608] ptrace attach of "./syz-executor exec"[20610] was attempted by "./syz-executor exec"[20608] [ 924.122126][T20604] ovs_ÿþ: entered promiscuous mode [ 924.177209][T20621] FAULT_INJECTION: forcing a failure. [ 924.177209][T20621] name failslab, interval 1, probability 0, space 0, times 0 [ 924.232811][T20621] CPU: 1 UID: 0 PID: 20621 Comm: syz.0.3634 Not tainted syzkaller #0 PREEMPT(full) [ 924.232846][T20621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.232861][T20621] Call Trace: [ 924.232870][T20621] [ 924.232879][T20621] dump_stack_lvl+0x16c/0x1f0 [ 924.232914][T20621] should_fail_ex+0x512/0x640 [ 924.232953][T20621] ? __kmalloc_cache_noprof+0x5f/0x780 [ 924.232981][T20621] should_failslab+0xc2/0x120 [ 924.233015][T20621] __kmalloc_cache_noprof+0x72/0x780 [ 924.233038][T20621] ? aa_get_newest_label+0xd2/0x250 [ 924.233085][T20621] ? fsnotify_alloc_group+0x92/0x330 [ 924.233119][T20621] ? fsnotify_alloc_group+0x92/0x330 [ 924.233146][T20621] fsnotify_alloc_group+0x92/0x330 [ 924.233175][T20621] __do_sys_fanotify_init+0x287/0xc80 [ 924.233214][T20621] ? rcu_is_watching+0x12/0xc0 [ 924.233243][T20621] do_syscall_64+0xcd/0xfa0 [ 924.233275][T20621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.233300][T20621] RIP: 0033:0x7f21e158f6c9 [ 924.233322][T20621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.233346][T20621] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 924.233369][T20621] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 924.233385][T20621] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 00000000000006a1 [ 924.233401][T20621] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.233416][T20621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.233431][T20621] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 924.233463][T20621] [ 926.172345][T20649] FAULT_INJECTION: forcing a failure. [ 926.172345][T20649] name failslab, interval 1, probability 0, space 0, times 0 [ 926.239029][T20649] CPU: 1 UID: 0 PID: 20649 Comm: syz.0.3641 Not tainted syzkaller #0 PREEMPT(full) [ 926.239064][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.239079][T20649] Call Trace: [ 926.239088][T20649] [ 926.239097][T20649] dump_stack_lvl+0x16c/0x1f0 [ 926.239132][T20649] should_fail_ex+0x512/0x640 [ 926.239171][T20649] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 926.239201][T20649] should_failslab+0xc2/0x120 [ 926.239237][T20649] kmem_cache_alloc_noprof+0x75/0x6e0 [ 926.239263][T20649] ? seq_open+0x55/0x170 [ 926.239302][T20649] ? seq_open+0x55/0x170 [ 926.239333][T20649] seq_open+0x55/0x170 [ 926.239367][T20649] __seq_open_private+0x3e/0xd0 [ 926.239406][T20649] tracing_open+0x25f/0xdf0 [ 926.239444][T20649] do_dentry_open+0x982/0x1530 [ 926.239475][T20649] ? __pfx_tracing_open+0x10/0x10 [ 926.239513][T20649] vfs_open+0x82/0x3f0 [ 926.239553][T20649] path_openat+0x1de4/0x2cb0 [ 926.239591][T20649] ? __pfx_path_openat+0x10/0x10 [ 926.239621][T20649] ? __lock_acquire+0xb8a/0x1c90 [ 926.239659][T20649] do_filp_open+0x20b/0x470 [ 926.239687][T20649] ? __pfx_do_filp_open+0x10/0x10 [ 926.239737][T20649] ? alloc_fd+0x471/0x7d0 [ 926.239769][T20649] do_sys_openat2+0x11b/0x1d0 [ 926.239807][T20649] ? __pfx_do_sys_openat2+0x10/0x10 [ 926.239856][T20649] __x64_sys_openat+0x174/0x210 [ 926.239894][T20649] ? __pfx___x64_sys_openat+0x10/0x10 [ 926.239954][T20649] do_syscall_64+0xcd/0xfa0 [ 926.239988][T20649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.240013][T20649] RIP: 0033:0x7f21e158f6c9 [ 926.240032][T20649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.240057][T20649] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 926.240080][T20649] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 926.240097][T20649] RDX: 0000000000002040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 926.240113][T20649] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 926.240128][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.240144][T20649] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 926.240176][T20649] [ 928.417448][T20698] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3659'. [ 929.157861][T20713] ptrace attach of "./syz-executor exec"[20714] was attempted by "./syz-executor exec"[20713] [ 930.235177][T20727] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(36.1048576.7388455), cmd(5) [ 931.053517][T20730] kexec: Could not allocate control_code_buffer [ 932.432008][T20776] blktrace: Concurrent blktraces are not allowed on loop2 [ 933.413171][T20798] FAULT_INJECTION: forcing a failure. [ 933.413171][T20798] name failslab, interval 1, probability 0, space 0, times 0 [ 933.503377][T20798] CPU: 1 UID: 0 PID: 20798 Comm: syz.0.3691 Not tainted syzkaller #0 PREEMPT(full) [ 933.503412][T20798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 933.503428][T20798] Call Trace: [ 933.503436][T20798] [ 933.503446][T20798] dump_stack_lvl+0x16c/0x1f0 [ 933.503495][T20798] should_fail_ex+0x512/0x640 [ 933.503533][T20798] ? fs_reclaim_acquire+0xae/0x150 [ 933.503570][T20798] should_failslab+0xc2/0x120 [ 933.503604][T20798] __kmalloc_noprof+0xdd/0x880 [ 933.503644][T20798] ? kfree+0x252/0x6d0 [ 933.503664][T20798] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.503700][T20798] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.503729][T20798] tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.503768][T20798] tomoyo_check_open_permission+0x2ab/0x3c0 [ 933.503811][T20798] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 933.503882][T20798] ? lock_acquire+0x179/0x350 [ 933.503916][T20798] ? find_held_lock+0x2b/0x80 [ 933.503943][T20798] ? mnt_get_write_access+0x52/0x2f0 [ 933.503981][T20798] tomoyo_file_open+0x6b/0x90 [ 933.504015][T20798] security_file_open+0x84/0x1e0 [ 933.504042][T20798] do_dentry_open+0x596/0x1530 [ 933.504081][T20798] vfs_open+0x82/0x3f0 [ 933.504120][T20798] path_openat+0x1de4/0x2cb0 [ 933.504157][T20798] ? __pfx_path_openat+0x10/0x10 [ 933.504186][T20798] ? __lock_acquire+0xb8a/0x1c90 [ 933.504224][T20798] do_filp_open+0x20b/0x470 [ 933.504252][T20798] ? __pfx_do_filp_open+0x10/0x10 [ 933.504290][T20798] ? __pfx_kfree_link+0x10/0x10 [ 933.504334][T20798] ? alloc_fd+0x471/0x7d0 [ 933.504367][T20798] do_sys_openat2+0x11b/0x1d0 [ 933.504404][T20798] ? __pfx_do_sys_openat2+0x10/0x10 [ 933.504453][T20798] __x64_sys_openat+0x174/0x210 [ 933.504608][T20798] ? __pfx___x64_sys_openat+0x10/0x10 [ 933.504663][T20798] do_syscall_64+0xcd/0xfa0 [ 933.504697][T20798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.504724][T20798] RIP: 0033:0x7f21e158f6c9 [ 933.504744][T20798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.504769][T20798] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 933.504792][T20798] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 933.504809][T20798] RDX: 0000000000008802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 933.504826][T20798] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 933.504842][T20798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.504857][T20798] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 933.504891][T20798] [ 933.504902][T20798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 936.830481][T20869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3713'. [ 938.535737][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.542470][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.810383][T20908] i2c i2c-0: new_device: Missing parameters [ 938.916120][T20909] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 940.572235][T20940] binder: 20938:20940 unknown command 7 [ 940.578069][T20940] binder: 20938:20940 ioctl c0306201 0 returned -22 [ 942.410225][T20979] tipc: Started in network mode [ 942.432174][T20979] tipc: Node identity 45e5412, cluster identity 4711 [ 942.522057][T20981] delete_channel: no stack [ 942.531804][T20985] FAULT_INJECTION: forcing a failure. [ 942.531804][T20985] name failslab, interval 1, probability 0, space 0, times 0 [ 942.550302][T20979] tipc: Node number set to 73290770 [ 942.605857][T20985] CPU: 1 UID: 0 PID: 20985 Comm: syz.0.3741 Not tainted syzkaller #0 PREEMPT(full) [ 942.605903][T20985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.605918][T20985] Call Trace: [ 942.605926][T20985] [ 942.605936][T20985] dump_stack_lvl+0x16c/0x1f0 [ 942.605971][T20985] should_fail_ex+0x512/0x640 [ 942.606009][T20985] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 942.606039][T20985] should_failslab+0xc2/0x120 [ 942.606074][T20985] kmem_cache_alloc_noprof+0x75/0x6e0 [ 942.606099][T20985] ? alloc_empty_file+0x55/0x1e0 [ 942.606141][T20985] ? alloc_empty_file+0x55/0x1e0 [ 942.606174][T20985] ? _raw_spin_unlock+0x28/0x50 [ 942.606199][T20985] alloc_empty_file+0x55/0x1e0 [ 942.606236][T20985] alloc_file_pseudo+0x13a/0x230 [ 942.606285][T20985] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 942.606331][T20985] __shmem_file_setup+0x1a3/0x330 [ 942.606375][T20985] shmem_zero_setup+0x93/0x1a0 [ 942.606404][T20985] __mmap_region+0x2076/0x27a0 [ 942.606433][T20985] ? __pfx___mmap_region+0x10/0x10 [ 942.606457][T20985] ? finish_task_switch.isra.0+0x21c/0xc10 [ 942.606485][T20985] ? rcu_is_watching+0x12/0xc0 [ 942.606512][T20985] ? finish_task_switch.isra.0+0x221/0xc10 [ 942.606537][T20985] ? lockdep_hardirqs_on+0x7c/0x110 [ 942.606568][T20985] ? finish_task_switch.isra.0+0x221/0xc10 [ 942.606620][T20985] ? __pfx___schedule+0x10/0x10 [ 942.606681][T20985] ? trace_cap_capable+0x18d/0x200 [ 942.606729][T20985] mmap_region+0x1ab/0x3f0 [ 942.606754][T20985] ? __get_unmapped_area+0x267/0x440 [ 942.606790][T20985] do_mmap+0xa3e/0x1210 [ 942.606828][T20985] ? __pfx_do_mmap+0x10/0x10 [ 942.606914][T20985] ? __pfx_down_write_killable+0x10/0x10 [ 942.606957][T20985] vm_mmap_pgoff+0x29e/0x470 [ 942.606995][T20985] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 942.607035][T20985] ? __x64_sys_futex+0x1e0/0x4c0 [ 942.607069][T20985] ? __x64_sys_futex+0x1e9/0x4c0 [ 942.607107][T20985] ksys_mmap_pgoff+0x7d/0x5c0 [ 942.607138][T20985] ? xfd_validate_state+0x61/0x180 [ 942.607173][T20985] ? __pfx_do_writev+0x10/0x10 [ 942.607201][T20985] __x64_sys_mmap+0x125/0x190 [ 942.607242][T20985] do_syscall_64+0xcd/0xfa0 [ 942.607275][T20985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.607300][T20985] RIP: 0033:0x7f21e158f6c9 [ 942.607321][T20985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.607347][T20985] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 942.607370][T20985] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 942.607388][T20985] RDX: 4000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 942.607403][T20985] RBP: 00007f21e1611f91 R08: fffffffffffffffa R09: 0000000000008000 [ 942.607420][T20985] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 942.607435][T20985] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 942.607468][T20985] [ 945.158197][T21035] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3753'. [ 945.345550][T21038] netlink: 'syz.1.3754': attribute type 1 has an invalid length. [ 947.470399][T21087] blktrace: Concurrent blktraces are not allowed on loop2 [ 949.734893][T21129] usb usb40: usbfs: process 21129 (syz.0.3774) did not claim interface 0 before use [ 950.294487][T21139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3777'. [ 950.783783][T21145] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3779'. [ 951.999725][T21167] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3785'. [ 952.283878][T21172] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3786'. [ 954.108520][T21194] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 954.108520][T21194] MÅ' is too long [ 954.190101][T21194] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 954.190101][T21194] ††½WÏõ›ú «ú' is too long [ 955.642451][T21209] futex_wake_op: syz.3.3792 tries to shift op by -2048; fix this program [ 956.114941][T21216] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3796'. [ 956.554214][T21225] netlink: 'syz.0.3794': attribute type 2 has an invalid length. [ 958.119591][T21254] bonding: no command found in bonding_masters - use +ifname or -ifname [ 959.244658][T21273] blktrace: Concurrent blktraces are not allowed on loop2 [ 960.157669][T21301] FAULT_INJECTION: forcing a failure. [ 960.157669][T21301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.223058][T21301] CPU: 1 UID: 0 PID: 21301 Comm: syz.0.3815 Not tainted syzkaller #0 PREEMPT(full) [ 960.223090][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 960.223105][T21301] Call Trace: [ 960.223113][T21301] [ 960.223122][T21301] dump_stack_lvl+0x16c/0x1f0 [ 960.223156][T21301] should_fail_ex+0x512/0x640 [ 960.223197][T21301] _copy_to_user+0x32/0xd0 [ 960.223238][T21301] simple_read_from_buffer+0xcb/0x170 [ 960.223280][T21301] proc_fail_nth_read+0x197/0x240 [ 960.223308][T21301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.223339][T21301] ? rw_verify_area+0xcf/0x6c0 [ 960.223362][T21301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.223389][T21301] vfs_read+0x1e4/0xcf0 [ 960.223419][T21301] ? __pfx___mutex_lock+0x10/0x10 [ 960.223452][T21301] ? __pfx_vfs_read+0x10/0x10 [ 960.223486][T21301] ? __fget_files+0x20e/0x3c0 [ 960.223509][T21301] ? file_check_and_advance_wb_err+0x10/0x340 [ 960.223558][T21301] ksys_read+0x12a/0x250 [ 960.223583][T21301] ? __pfx_ksys_read+0x10/0x10 [ 960.223608][T21301] ? syscall_user_dispatch+0x78/0x140 [ 960.223631][T21301] ? fput+0x9b/0xd0 [ 960.223666][T21301] do_syscall_64+0xcd/0xfa0 [ 960.223697][T21301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.223721][T21301] RIP: 0033:0x7f21e158e0dc [ 960.223746][T21301] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 960.223770][T21301] RSP: 002b:00007f21e242f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 960.223793][T21301] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158e0dc [ 960.223809][T21301] RDX: 000000000000000f RSI: 00007f21e242f0a0 RDI: 0000000000000004 [ 960.223824][T21301] RBP: 00007f21e242f090 R08: 0000000000000000 R09: 0000000000000000 [ 960.223838][T21301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.223853][T21301] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 960.223884][T21301] [ 960.708539][T21305] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3818'. [ 966.127154][T21434] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3854'. [ 966.177108][T21438] netlink: 93 bytes leftover after parsing attributes in process `syz.1.3854'. [ 966.318120][T21436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 966.525922][T21436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 966.645212][T21436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 966.946973][ T30] audit: type=1800 audit(4294969506.737:88): pid=21450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3855" name="file0" dev="tmpfs" ino=1804 res=0 errno=0 [ 967.566003][T21462] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 967.983723][T21469] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 967.983723][T21469] MÅ' is too long [ 968.028037][T21469] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 968.028037][T21469] ††½WÏõ›ú «ú' is too long [ 968.637429][T21483] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3865'. [ 969.565913][T21493] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3868'. [ 970.387950][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.395493][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.407141][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.414927][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.423903][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.432401][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.440512][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.448063][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.455913][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.463397][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.471679][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.479258][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.487404][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.494830][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.507090][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.514861][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.525030][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.532574][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.540360][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.548473][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.558477][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.566135][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.573510][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.581754][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.589830][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.597552][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.606778][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.614269][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.624374][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.632028][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.639533][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.649682][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 970.657186][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 971.432747][T21524] blktrace: Concurrent blktraces are not allowed on loop2 [ 973.420338][T21564] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3887'. [ 978.213927][T21641] FAULT_INJECTION: forcing a failure. [ 978.213927][T21641] name failslab, interval 1, probability 0, space 0, times 0 [ 978.357347][T21641] CPU: 1 UID: 0 PID: 21641 Comm: syz.0.3904 Not tainted syzkaller #0 PREEMPT(full) [ 978.357382][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 978.357398][T21641] Call Trace: [ 978.357406][T21641] [ 978.357416][T21641] dump_stack_lvl+0x16c/0x1f0 [ 978.357452][T21641] should_fail_ex+0x512/0x640 [ 978.357491][T21641] ? __kmalloc_cache_noprof+0x5f/0x780 [ 978.357519][T21641] should_failslab+0xc2/0x120 [ 978.357560][T21641] __kmalloc_cache_noprof+0x72/0x780 [ 978.357584][T21641] ? _raw_read_unlock_irqrestore+0x3b/0x80 [ 978.357615][T21641] ? snd_pcm_attach_substream+0x441/0xd60 [ 978.357647][T21641] ? snd_pcm_attach_substream+0x441/0xd60 [ 978.357672][T21641] snd_pcm_attach_substream+0x441/0xd60 [ 978.357705][T21641] snd_pcm_open_substream+0x8d/0x17f0 [ 978.357732][T21641] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 978.357775][T21641] ? rcu_is_watching+0x12/0xc0 [ 978.357807][T21641] snd_pcm_open+0x29e/0x730 [ 978.357834][T21641] ? __pfx_snd_pcm_open+0x10/0x10 [ 978.357861][T21641] ? __pfx_default_wake_function+0x10/0x10 [ 978.357897][T21641] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 978.357921][T21641] snd_pcm_playback_open+0x86/0xe0 [ 978.357945][T21641] snd_open+0x22d/0x4c0 [ 978.357977][T21641] ? __pfx_snd_open+0x10/0x10 [ 978.358007][T21641] chrdev_open+0x234/0x6a0 [ 978.358036][T21641] ? __pfx_apparmor_file_open+0x10/0x10 [ 978.358075][T21641] ? __pfx_chrdev_open+0x10/0x10 [ 978.358107][T21641] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 978.358142][T21641] do_dentry_open+0x982/0x1530 [ 978.358172][T21641] ? __pfx_chrdev_open+0x10/0x10 [ 978.358209][T21641] vfs_open+0x82/0x3f0 [ 978.358248][T21641] path_openat+0x1de4/0x2cb0 [ 978.358286][T21641] ? __pfx_path_openat+0x10/0x10 [ 978.358316][T21641] ? __lock_acquire+0xb8a/0x1c90 [ 978.358354][T21641] do_filp_open+0x20b/0x470 [ 978.358382][T21641] ? __pfx_do_filp_open+0x10/0x10 [ 978.358432][T21641] ? alloc_fd+0x471/0x7d0 [ 978.358465][T21641] do_sys_openat2+0x11b/0x1d0 [ 978.358501][T21641] ? __pfx_do_sys_openat2+0x10/0x10 [ 978.358551][T21641] __x64_sys_openat+0x174/0x210 [ 978.358594][T21641] ? __pfx___x64_sys_openat+0x10/0x10 [ 978.358645][T21641] do_syscall_64+0xcd/0xfa0 [ 978.358678][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.358704][T21641] RIP: 0033:0x7f21e158f6c9 [ 978.358727][T21641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.358758][T21641] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 978.358781][T21641] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 978.358798][T21641] RDX: 0000000000000040 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 978.358814][T21641] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 978.358830][T21641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.358845][T21641] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 978.358879][T21641] [ 978.663061][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.184679][ T30] audit: type=1804 audit(4294969518.850:89): pid=21650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3904" name="/newroot/351/file0" dev="tmpfs" ino=1952 res=1 errno=0 [ 979.288476][ T30] audit: type=1800 audit(4294969518.850:90): pid=21650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3904" name="file0" dev="tmpfs" ino=1952 res=0 errno=0 [ 979.309479][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.380463][T21676] base or size exceeds the MTRR width [ 982.464753][T21701] FAULT_INJECTION: forcing a failure. [ 982.464753][T21701] name fail_futex, interval 1, probability 0, space 0, times 0 [ 982.530894][T21701] CPU: 1 UID: 0 PID: 21701 Comm: syz.1.3924 Not tainted syzkaller #0 PREEMPT(full) [ 982.530930][T21701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 982.530946][T21701] Call Trace: [ 982.530954][T21701] [ 982.530964][T21701] dump_stack_lvl+0x16c/0x1f0 [ 982.530998][T21701] should_fail_ex+0x512/0x640 [ 982.531041][T21701] get_futex_key+0x1d0/0x1560 [ 982.531078][T21701] ? __pfx_get_futex_key+0x10/0x10 [ 982.531135][T21701] ? stack_trace_save+0x8e/0xc0 [ 982.531164][T21701] ? __pfx_stack_trace_save+0x10/0x10 [ 982.531194][T21701] ? stack_depot_save_flags+0x29/0x9c0 [ 982.531239][T21701] futex_wait_setup+0x9d/0x550 [ 982.531270][T21701] __futex_wait+0x193/0x2f0 [ 982.531294][T21701] ? __pfx___futex_wait+0x10/0x10 [ 982.531322][T21701] ? __pfx_futex_wake_mark+0x10/0x10 [ 982.531366][T21701] ? futex_hash+0x2c5/0x380 [ 982.531401][T21701] ? futex_private_hash_put+0xd5/0x190 [ 982.531436][T21701] futex_wait+0xe8/0x380 [ 982.531458][T21701] ? __pfx_futex_wait+0x10/0x10 [ 982.531486][T21701] ? kmem_cache_free+0x2d4/0x6c0 [ 982.531513][T21701] ? putname+0x154/0x1a0 [ 982.531552][T21701] do_futex+0x229/0x350 [ 982.531593][T21701] ? __pfx_do_futex+0x10/0x10 [ 982.531636][T21701] __x64_sys_futex+0x1e0/0x4c0 [ 982.531673][T21701] ? __x64_sys_openat+0x174/0x210 [ 982.531712][T21701] ? __pfx___x64_sys_futex+0x10/0x10 [ 982.531759][T21701] do_syscall_64+0xcd/0xfa0 [ 982.531792][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.531817][T21701] RIP: 0033:0x7f33cad8f6c9 [ 982.531836][T21701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.531860][T21701] RSP: 002b:00007f33cbb6d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 982.531884][T21701] RAX: ffffffffffffffda RBX: 00007f33cafe5fa8 RCX: 00007f33cad8f6c9 [ 982.531901][T21701] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33cafe5fa8 [ 982.531916][T21701] RBP: 00007f33cafe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 982.531932][T21701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.531947][T21701] R13: 00007f33cafe6038 R14: 00007fffbdcf3fb0 R15: 00007fffbdcf4098 [ 982.531979][T21701] [ 982.753417][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.448751][T21714] netlink: 'syz.3.3928': attribute type 11 has an invalid length. [ 983.474367][T21714] netlink: 'syz.3.3928': attribute type 11 has an invalid length. [ 983.498788][T21714] netlink: 'syz.3.3928': attribute type 11 has an invalid length. [ 984.441646][T21721] Invalid ELF header magic: != ELF [ 984.483097][T21742] netlink: 1480 bytes leftover after parsing attributes in process `syz.3.3935'. [ 985.417633][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 985.514178][T21750] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3938'. [ 985.973532][T21760] blktrace: Concurrent blktraces are not allowed on loop2 [ 987.212498][T21780] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 988.458215][T21804] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3953'. [ 988.923395][T21802] FAULT_INJECTION: forcing a failure. [ 988.923395][T21802] name failslab, interval 1, probability 0, space 0, times 0 [ 989.172849][T21802] CPU: 1 UID: 0 PID: 21802 Comm: syz.0.3950 Not tainted syzkaller #0 PREEMPT(full) [ 989.172884][T21802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 989.172901][T21802] Call Trace: [ 989.172909][T21802] [ 989.172919][T21802] dump_stack_lvl+0x16c/0x1f0 [ 989.172955][T21802] should_fail_ex+0x512/0x640 [ 989.172993][T21802] ? __kmalloc_cache_noprof+0x5f/0x780 [ 989.173020][T21802] should_failslab+0xc2/0x120 [ 989.173054][T21802] __kmalloc_cache_noprof+0x72/0x780 [ 989.173078][T21802] ? snd_midi_event_new+0x6f/0x210 [ 989.173113][T21802] ? snd_midi_event_new+0x6f/0x210 [ 989.173141][T21802] snd_midi_event_new+0x6f/0x210 [ 989.173171][T21802] snd_virmidi_input_open+0x107/0x4d0 [ 989.173208][T21802] open_substream+0x480/0x990 [ 989.173251][T21802] rawmidi_open_priv+0x4db/0x6e0 [ 989.173295][T21802] snd_rawmidi_open+0x4cb/0xbf0 [ 989.173344][T21802] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 989.173386][T21802] ? __pfx_default_wake_function+0x10/0x10 [ 989.173415][T21802] ? soundcore_open+0x35a/0x580 [ 989.173445][T21802] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 989.173487][T21802] soundcore_open+0x40c/0x580 [ 989.173521][T21802] ? __pfx_soundcore_open+0x10/0x10 [ 989.173551][T21802] chrdev_open+0x234/0x6a0 [ 989.173582][T21802] ? __pfx_apparmor_file_open+0x10/0x10 [ 989.173620][T21802] ? __pfx_chrdev_open+0x10/0x10 [ 989.173653][T21802] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 989.173687][T21802] do_dentry_open+0x982/0x1530 [ 989.173717][T21802] ? __pfx_chrdev_open+0x10/0x10 [ 989.173754][T21802] vfs_open+0x82/0x3f0 [ 989.173793][T21802] path_openat+0x1de4/0x2cb0 [ 989.173831][T21802] ? __pfx_path_openat+0x10/0x10 [ 989.173871][T21802] ? __lock_acquire+0xb8a/0x1c90 [ 989.173910][T21802] do_filp_open+0x20b/0x470 [ 989.173939][T21802] ? __pfx_do_filp_open+0x10/0x10 [ 989.173989][T21802] ? alloc_fd+0x471/0x7d0 [ 989.174023][T21802] do_sys_openat2+0x11b/0x1d0 [ 989.174060][T21802] ? __pfx_do_sys_openat2+0x10/0x10 [ 989.174114][T21802] __x64_sys_openat+0x174/0x210 [ 989.174153][T21802] ? __pfx___x64_sys_openat+0x10/0x10 [ 989.174208][T21802] do_syscall_64+0xcd/0xfa0 [ 989.174241][T21802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.174267][T21802] RIP: 0033:0x7f21e158f6c9 [ 989.174287][T21802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.174312][T21802] RSP: 002b:00007f21e240e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 989.174336][T21802] RAX: ffffffffffffffda RBX: 00007f21e17e6090 RCX: 00007f21e158f6c9 [ 989.174353][T21802] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 989.174370][T21802] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 989.174386][T21802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.174402][T21802] R13: 00007f21e17e6128 R14: 00007f21e17e6090 R15: 00007ffc47f8a368 [ 989.174435][T21802] [ 990.649568][T21819] blktrace: Concurrent blktraces are not allowed on loop2 [ 994.773635][T21874] blktrace: Concurrent blktraces are not allowed on loop2 [ 996.572934][T21882] kexec: Could not allocate control_code_buffer [ 998.364362][T21949] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 998.421938][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3987'. [ 998.493729][T21949] veth1_macvtap: left promiscuous mode [ 998.879729][T21958] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3990'. [ 999.221546][T21964] netlink: zone id is out of range [ 999.252101][T21964] netlink: zone id is out of range [ 999.275722][T21964] netlink: zone id is out of range [ 999.333991][T21964] netlink: zone id is out of range [ 999.423216][T21964] netlink: zone id is out of range [ 999.464551][T21964] netlink: zone id is out of range [ 999.498224][T21964] netlink: zone id is out of range [ 999.522502][T21964] netlink: zone id is out of range [ 999.570731][T21964] netlink: zone id is out of range [ 999.583950][T21964] netlink: zone id is out of range [ 999.647496][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.654004][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.505405][T22004] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1001.535505][T22006] Line length is too long: Should be less than 4094 [ 1004.391524][T22045] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1004.998366][T22051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4013'. [ 1005.762813][T22053] FAULT_INJECTION: forcing a failure. [ 1005.762813][T22053] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.032705][T22053] CPU: 1 UID: 0 PID: 22053 Comm: syz.1.4012 Not tainted syzkaller #0 PREEMPT(full) [ 1006.032743][T22053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.032759][T22053] Call Trace: [ 1006.032766][T22053] [ 1006.032776][T22053] dump_stack_lvl+0x16c/0x1f0 [ 1006.032817][T22053] should_fail_ex+0x512/0x640 [ 1006.032856][T22053] ? __kmalloc_noprof+0xca/0x880 [ 1006.032900][T22053] should_failslab+0xc2/0x120 [ 1006.032934][T22053] __kmalloc_noprof+0xdd/0x880 [ 1006.032973][T22053] ? do_init_timer+0xc9/0x110 [ 1006.033002][T22053] ? ops_init+0x77/0x5f0 [ 1006.033031][T22053] ? ops_init+0x77/0x5f0 [ 1006.033054][T22053] ops_init+0x77/0x5f0 [ 1006.033083][T22053] setup_net+0x100/0x390 [ 1006.033110][T22053] ? __pfx_setup_net+0x10/0x10 [ 1006.033137][T22053] ? debug_mutex_init+0x37/0x70 [ 1006.033167][T22053] copy_net_ns+0x2f8/0x690 [ 1006.033199][T22053] create_new_namespaces+0x3ea/0xa90 [ 1006.033236][T22053] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1006.033267][T22053] ksys_unshare+0x45b/0xa40 [ 1006.033301][T22053] ? __pfx_ksys_unshare+0x10/0x10 [ 1006.033337][T22053] ? syscall_user_dispatch+0x78/0x140 [ 1006.033373][T22053] __x64_sys_unshare+0x31/0x40 [ 1006.033406][T22053] do_syscall_64+0xcd/0xfa0 [ 1006.033439][T22053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.033464][T22053] RIP: 0033:0x7f33cad8f6c9 [ 1006.033485][T22053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.033509][T22053] RSP: 002b:00007f33cbb4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1006.033537][T22053] RAX: ffffffffffffffda RBX: 00007f33cafe6090 RCX: 00007f33cad8f6c9 [ 1006.033554][T22053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1006.033570][T22053] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.033585][T22053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.033601][T22053] R13: 00007f33cafe6128 R14: 00007f33cafe6090 R15: 00007fffbdcf4098 [ 1006.033634][T22053] [ 1007.906660][T22080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4020'. [ 1008.255195][T22080] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 1010.314437][T22123] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 1010.314437][T22123] MÅ' is too long [ 1010.364294][T22123] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 1010.364294][T22123] ††½WÏõ›ú «ú' is too long [ 1012.279651][T22166] FAULT_INJECTION: forcing a failure. [ 1012.279651][T22166] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.356681][T22166] CPU: 1 UID: 0 PID: 22166 Comm: syz.1.4040 Not tainted syzkaller #0 PREEMPT(full) [ 1012.356716][T22166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1012.356733][T22166] Call Trace: [ 1012.356742][T22166] [ 1012.356751][T22166] dump_stack_lvl+0x16c/0x1f0 [ 1012.356786][T22166] should_fail_ex+0x512/0x640 [ 1012.356825][T22166] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1012.356851][T22166] should_failslab+0xc2/0x120 [ 1012.356885][T22166] __kmalloc_cache_noprof+0x72/0x780 [ 1012.356908][T22166] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1012.356952][T22166] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1012.356989][T22166] apply_subsystem_event_filter+0x460/0x17e0 [ 1012.357034][T22166] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1012.357078][T22166] ? _copy_from_user+0x59/0xd0 [ 1012.357121][T22166] subsystem_filter_write+0x95/0x120 [ 1012.357159][T22166] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1012.357194][T22166] vfs_write+0x2a0/0x11d0 [ 1012.357225][T22166] ? __pfx___mutex_lock+0x10/0x10 [ 1012.357266][T22166] ? __pfx_vfs_write+0x10/0x10 [ 1012.357309][T22166] ? __fget_files+0x20e/0x3c0 [ 1012.357343][T22166] ksys_write+0x12a/0x250 [ 1012.357375][T22166] ? __pfx_ksys_write+0x10/0x10 [ 1012.357412][T22166] do_syscall_64+0xcd/0xfa0 [ 1012.357445][T22166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.357471][T22166] RIP: 0033:0x7f33cad8f6c9 [ 1012.357490][T22166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.357514][T22166] RSP: 002b:00007f33cbb4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1012.357537][T22166] RAX: ffffffffffffffda RBX: 00007f33cafe6090 RCX: 00007f33cad8f6c9 [ 1012.357554][T22166] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000008 [ 1012.357569][T22166] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.357585][T22166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.357599][T22166] R13: 00007f33cafe6128 R14: 00007f33cafe6090 R15: 00007fffbdcf4098 [ 1012.357632][T22166] [ 1012.792451][T22174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4042'. [ 1012.854570][T22178] netlink: 93 bytes leftover after parsing attributes in process `syz.3.4042'. [ 1015.176401][T22225] netlink: 'syz.3.4053': attribute type 2 has an invalid length. [ 1015.650650][T22241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1016.700667][T22259] random: crng reseeded on system resumption [ 1017.094459][T22269] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4067'. [ 1017.206953][T22273] netlink: 'syz.3.4068': attribute type 1 has an invalid length. [ 1017.281257][T22276] netlink: 'syz.3.4068': attribute type 1 has an invalid length. [ 1017.321524][T22273] netlink: 322 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1017.374785][T22276] netlink: 322 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1018.515547][T22311] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4074'. [ 1020.333273][T22340] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1021.654472][T22372] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1021.902989][T22377] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1022.013495][T22381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4088'. [ 1022.108603][T22382] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4088'. [ 1023.703879][T22409] Invalid ELF header magic: != ELF [ 1024.008652][T22423] futex_wake_op: syz.1.4102 tries to shift op by -2048; fix this program [ 1024.927369][T22425] Process accounting resumed [ 1025.241659][T22444] blktrace: Concurrent blktraces are not allowed on loop2 [ 1026.166711][T22464] FAULT_INJECTION: forcing a failure. [ 1026.166711][T22464] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.179801][T22464] CPU: 1 UID: 0 PID: 22464 Comm: syz.1.4112 Not tainted syzkaller #0 PREEMPT(full) [ 1026.179836][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.179852][T22464] Call Trace: [ 1026.179863][T22464] [ 1026.179873][T22464] dump_stack_lvl+0x116/0x1f0 [ 1026.179910][T22464] should_fail_ex+0x512/0x640 [ 1026.179956][T22464] should_failslab+0xc2/0x120 [ 1026.179991][T22464] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1026.180018][T22464] ? __send_signal_locked+0x159/0x12c0 [ 1026.180067][T22464] ? __send_signal_locked+0x159/0x12c0 [ 1026.180107][T22464] __send_signal_locked+0x159/0x12c0 [ 1026.180155][T22464] group_send_sig_info+0x2a4/0x300 [ 1026.180188][T22464] ? __pfx_group_send_sig_info+0x10/0x10 [ 1026.180228][T22464] ? kill_pid_info_type+0x1a/0x2a0 [ 1026.180258][T22464] kill_pid_info_type+0x92/0x2a0 [ 1026.180293][T22464] kill_proc_info+0x6f/0x1b0 [ 1026.180325][T22464] kill_something_info+0x2a2/0x310 [ 1026.180356][T22464] ? __task_pid_nr_ns+0x1ff/0x500 [ 1026.180397][T22464] __x64_sys_kill+0xd7/0x140 [ 1026.180430][T22464] ? __pfx___x64_sys_kill+0x10/0x10 [ 1026.180472][T22464] ? rcu_is_watching+0x12/0xc0 [ 1026.180502][T22464] do_syscall_64+0xcd/0xfa0 [ 1026.180542][T22464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.180569][T22464] RIP: 0033:0x7f33cad8f6c9 [ 1026.180589][T22464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.180614][T22464] RSP: 002b:00007f33cbb6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 1026.180636][T22464] RAX: ffffffffffffffda RBX: 00007f33cafe5fa0 RCX: 00007f33cad8f6c9 [ 1026.180653][T22464] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000000000000060a [ 1026.180668][T22464] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1026.180683][T22464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.180698][T22464] R13: 00007f33cafe6038 R14: 00007f33cafe5fa0 R15: 00007fffbdcf4098 [ 1026.180731][T22464] [ 1027.706919][T22492] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1028.070259][T22500] netlink: 62 bytes leftover after parsing attributes in process `syz.2.4122'. [ 1029.431387][T22535] FAULT_INJECTION: forcing a failure. [ 1029.431387][T22535] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.496435][T22535] CPU: 1 UID: 0 PID: 22535 Comm: syz.1.4133 Not tainted syzkaller #0 PREEMPT(full) [ 1029.496470][T22535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1029.496485][T22535] Call Trace: [ 1029.496493][T22535] [ 1029.496503][T22535] dump_stack_lvl+0x16c/0x1f0 [ 1029.496544][T22535] should_fail_ex+0x512/0x640 [ 1029.496584][T22535] ? __kmalloc_noprof+0xca/0x880 [ 1029.496628][T22535] should_failslab+0xc2/0x120 [ 1029.496663][T22535] __kmalloc_noprof+0xdd/0x880 [ 1029.496703][T22535] ? lsm_blob_alloc+0x68/0x90 [ 1029.496740][T22535] ? lsm_blob_alloc+0x68/0x90 [ 1029.496770][T22535] lsm_blob_alloc+0x68/0x90 [ 1029.496802][T22535] security_sk_alloc+0x30/0x270 [ 1029.496842][T22535] sk_prot_alloc+0x1c7/0x2a0 [ 1029.496876][T22535] sk_alloc+0x36/0xc20 [ 1029.496917][T22535] __netlink_create+0x5e/0x2c0 [ 1029.496954][T22535] ? __wake_up+0x3f/0x60 [ 1029.496984][T22535] netlink_create+0x39e/0x620 [ 1029.497006][T22535] ? __pfx_genl_bind+0x10/0x10 [ 1029.497034][T22535] ? __pfx_genl_unbind+0x10/0x10 [ 1029.497060][T22535] ? __pfx_genl_release+0x10/0x10 [ 1029.497094][T22535] __sock_create+0x338/0x8d0 [ 1029.497133][T22535] __sys_socket+0x14d/0x260 [ 1029.497168][T22535] ? __pfx___sys_socket+0x10/0x10 [ 1029.497244][T22535] ? do_user_addr_fault+0x843/0x1370 [ 1029.497280][T22535] __x64_sys_socket+0x72/0xb0 [ 1029.497313][T22535] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.497345][T22535] do_syscall_64+0xcd/0xfa0 [ 1029.497379][T22535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.497409][T22535] RIP: 0033:0x7f33cad915e7 [ 1029.497430][T22535] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.497454][T22535] RSP: 002b:00007f33cbb6bfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1029.497477][T22535] RAX: ffffffffffffffda RBX: 00007f33cafe5fa0 RCX: 00007f33cad915e7 [ 1029.497494][T22535] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1029.497509][T22535] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1029.497526][T22535] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1029.497542][T22535] R13: 00007f33cafe6038 R14: 00007f33cafe5fa0 R15: 00007fffbdcf4098 [ 1029.497574][T22535] [ 1030.376100][T22552] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4137'. [ 1031.993020][T22595] net_ratelimit: 371 callbacks suppressed [ 1031.993039][T22595] openvswitch: netlink: Multiple metadata blocks provided [ 1032.328581][T22607] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1033.149580][T22624] FAULT_INJECTION: forcing a failure. [ 1033.149580][T22624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1033.212677][T22624] CPU: 1 UID: 0 PID: 22624 Comm: syz.1.4155 Not tainted syzkaller #0 PREEMPT(full) [ 1033.212710][T22624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.212726][T22624] Call Trace: [ 1033.212734][T22624] [ 1033.212743][T22624] dump_stack_lvl+0x16c/0x1f0 [ 1033.212777][T22624] should_fail_ex+0x512/0x640 [ 1033.212819][T22624] get_futex_key+0x1d0/0x1560 [ 1033.212854][T22624] ? __pfx_get_futex_key+0x10/0x10 [ 1033.212886][T22624] ? __mutex_trylock_common+0xe9/0x250 [ 1033.212930][T22624] futex_wake+0xea/0x530 [ 1033.212971][T22624] ? __pfx_futex_wake+0x10/0x10 [ 1033.213007][T22624] ? __lock_acquire+0xb8a/0x1c90 [ 1033.213060][T22624] do_futex+0x1e3/0x350 [ 1033.213095][T22624] ? __pfx_do_futex+0x10/0x10 [ 1033.213126][T22624] ? __might_fault+0xe3/0x190 [ 1033.213159][T22624] mm_release+0x24e/0x300 [ 1033.213187][T22624] do_exit+0x68e/0x2bf0 [ 1033.213227][T22624] ? __pfx_do_exit+0x10/0x10 [ 1033.213261][T22624] ? do_raw_spin_lock+0x12c/0x2b0 [ 1033.213299][T22624] ? find_held_lock+0x2b/0x80 [ 1033.213329][T22624] do_group_exit+0xd3/0x2a0 [ 1033.213367][T22624] get_signal+0x2671/0x26d0 [ 1033.213400][T22624] ? __lock_acquire+0x622/0x1c90 [ 1033.213438][T22624] ? __pfx_get_signal+0x10/0x10 [ 1033.213465][T22624] ? do_futex+0x122/0x350 [ 1033.213499][T22624] ? __pfx_do_futex+0x10/0x10 [ 1033.213535][T22624] arch_do_signal_or_restart+0x8f/0x790 [ 1033.213568][T22624] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1033.213608][T22624] ? xfd_validate_state+0x61/0x180 [ 1033.213642][T22624] ? __pfx_ksys_read+0x10/0x10 [ 1033.213675][T22624] exit_to_user_mode_loop+0x85/0x130 [ 1033.213718][T22624] do_syscall_64+0x426/0xfa0 [ 1033.213750][T22624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.213776][T22624] RIP: 0033:0x7f33cad8f6c9 [ 1033.213795][T22624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.213819][T22624] RSP: 002b:00007f33cbb6d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1033.213841][T22624] RAX: fffffffffffffe00 RBX: 00007f33cafe5fa8 RCX: 00007f33cad8f6c9 [ 1033.213858][T22624] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33cafe5fa8 [ 1033.213873][T22624] RBP: 00007f33cafe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.213889][T22624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.213904][T22624] R13: 00007f33cafe6038 R14: 00007fffbdcf3fb0 R15: 00007fffbdcf4098 [ 1033.213935][T22624] [ 1034.218166][T22652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1034.746674][T22667] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4167'. [ 1035.266434][T22671] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1035.266434][T22671] ME' is too long [ 1035.305655][T22671] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1035.305655][T22671] =WOuz +z' is too long [ 1035.513122][T22674] Invalid ELF header magic: != ELF [ 1037.359696][T22710] blktrace: Concurrent blktraces are not allowed on loop2 [ 1041.566283][T22803] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1041.566283][T22803] ME' is too long [ 1041.596756][T22803] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1041.596756][T22803] =WOuz +z' is too long [ 1042.059567][T22811] blktrace: Concurrent blktraces are not allowed on loop2 [ 1042.421678][T22821] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1042.428569][T22821] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1043.537895][T22838] netlink: 'syz.1.4211': attribute type 64 has an invalid length. [ 1043.559761][T22838] netlink: 74 bytes leftover after parsing attributes in process `syz.1.4211'. [ 1044.062134][T22846] FAULT_INJECTION: forcing a failure. [ 1044.062134][T22846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1044.165469][T22846] CPU: 1 UID: 0 PID: 22846 Comm: syz.1.4213 Not tainted syzkaller #0 PREEMPT(full) [ 1044.165504][T22846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1044.165521][T22846] Call Trace: [ 1044.165530][T22846] [ 1044.165539][T22846] dump_stack_lvl+0x16c/0x1f0 [ 1044.165578][T22846] should_fail_ex+0x512/0x640 [ 1044.165622][T22846] should_fail_alloc_page+0xe7/0x130 [ 1044.165659][T22846] prepare_alloc_pages+0x3c2/0x610 [ 1044.165693][T22846] ? kernel_text_address+0x8d/0x100 [ 1044.165720][T22846] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1044.165760][T22846] ? stack_trace_save+0x8e/0xc0 [ 1044.165790][T22846] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1044.165818][T22846] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1044.165859][T22846] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1044.165883][T22846] ? __pmd_alloc+0xbf/0x8b0 [ 1044.165915][T22846] ? copy_page_range+0x46c5/0x6930 [ 1044.165952][T22846] ? dup_mmap+0xe80/0x2280 [ 1044.165984][T22846] ? copy_process+0x3f0c/0x76a0 [ 1044.166013][T22846] ? kernel_clone+0xfc/0x930 [ 1044.166042][T22846] ? __do_sys_clone+0xce/0x120 [ 1044.166071][T22846] ? do_syscall_64+0xcd/0xfa0 [ 1044.166100][T22846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.166127][T22846] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1044.166170][T22846] ? policy_nodemask+0xea/0x4e0 [ 1044.166207][T22846] alloc_pages_mpol+0x1fb/0x550 [ 1044.166242][T22846] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1044.166285][T22846] alloc_pages_noprof+0x131/0x390 [ 1044.166320][T22846] pte_alloc_one+0x1e/0x350 [ 1044.166357][T22846] copy_huge_pmd+0x1ae/0x3470 [ 1044.166400][T22846] ? do_raw_spin_lock+0x12c/0x2b0 [ 1044.166440][T22846] ? find_held_lock+0x2b/0x80 [ 1044.166466][T22846] ? __pmd_alloc+0x64a/0x8b0 [ 1044.166499][T22846] ? __pfx_copy_huge_pmd+0x10/0x10 [ 1044.166538][T22846] ? do_raw_spin_unlock+0x172/0x230 [ 1044.166561][T22846] ? _raw_spin_unlock+0x28/0x50 [ 1044.166592][T22846] copy_page_range+0x1e25/0x6930 [ 1044.166666][T22846] ? __pfx_copy_page_range+0x10/0x10 [ 1044.166709][T22846] ? mas_store+0x860/0x1030 [ 1044.166741][T22846] ? __pfx___might_resched+0x10/0x10 [ 1044.166769][T22846] ? find_held_lock+0x2b/0x80 [ 1044.166795][T22846] ? __pfx_mas_store+0x10/0x10 [ 1044.166828][T22846] ? __vma_enter_locked+0x163/0x3f0 [ 1044.166884][T22846] dup_mmap+0xe80/0x2280 [ 1044.166931][T22846] ? __pfx_dup_mmap+0x10/0x10 [ 1044.166987][T22846] copy_process+0x3f0c/0x76a0 [ 1044.167018][T22846] ? __pfx___futex_wait+0x10/0x10 [ 1044.167052][T22846] ? __pfx_copy_process+0x10/0x10 [ 1044.167090][T22846] ? futex_private_hash_put+0xd5/0x190 [ 1044.167144][T22846] kernel_clone+0xfc/0x930 [ 1044.167178][T22846] ? __pfx_kernel_clone+0x10/0x10 [ 1044.167227][T22846] __do_sys_clone+0xce/0x120 [ 1044.167258][T22846] ? __pfx___do_sys_clone+0x10/0x10 [ 1044.167289][T22846] ? __sys_sendmsg+0x18c/0x220 [ 1044.167326][T22846] ? xfd_validate_state+0x61/0x180 [ 1044.167377][T22846] do_syscall_64+0xcd/0xfa0 [ 1044.167410][T22846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.167436][T22846] RIP: 0033:0x7f33cad8f6c9 [ 1044.167456][T22846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.167480][T22846] RSP: 002b:00007f33c87affe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1044.167504][T22846] RAX: ffffffffffffffda RBX: 00007f33cafe6360 RCX: 00007f33cad8f6c9 [ 1044.167521][T22846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1044.167537][T22846] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1044.167553][T22846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1044.167568][T22846] R13: 00007f33cafe63f8 R14: 00007f33cafe6360 R15: 00007fffbdcf4098 [ 1044.167602][T22846] [ 1045.248085][T22863] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1045.484960][T22863] PCI: Can't parse resource_alignment parameter: B?Fjtl [ 1045.589934][T22863] FAULT_INJECTION: forcing a failure. [ 1045.589934][T22863] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.656614][T22863] CPU: 1 UID: 0 PID: 22863 Comm: syz.0.4214 Not tainted syzkaller #0 PREEMPT(full) [ 1045.656649][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1045.656664][T22863] Call Trace: [ 1045.656673][T22863] [ 1045.656683][T22863] dump_stack_lvl+0x16c/0x1f0 [ 1045.656718][T22863] should_fail_ex+0x512/0x640 [ 1045.656757][T22863] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1045.656787][T22863] should_failslab+0xc2/0x120 [ 1045.656821][T22863] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1045.656847][T22863] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1045.656889][T22863] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1045.656925][T22863] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1045.656962][T22863] acpi_ut_create_internal_object_dbg+0x51/0x270 [ 1045.657002][T22863] acpi_ut_create_package_object+0x4a/0x1a0 [ 1045.657039][T22863] acpi_ut_copy_eobject_to_iobject+0x46e/0xb40 [ 1045.657081][T22863] ? acpi_evaluate_object+0x2b6/0xdf0 [ 1045.657123][T22863] acpi_evaluate_object+0x3ed/0xdf0 [ 1045.657166][T22863] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1045.657221][T22863] acpi_evaluate_dsm+0x194/0x290 [ 1045.657251][T22863] ? __pfx_acpi_evaluate_dsm+0x10/0x10 [ 1045.657296][T22863] ? __kernfs_create_file+0x2a9/0x350 [ 1045.657327][T22863] ? __pfx_smbios_attr_is_visible+0x10/0x10 [ 1045.657350][T22863] acpi_check_dsm+0x51/0x260 [ 1045.657381][T22863] ? __pfx_smbios_attr_is_visible+0x10/0x10 [ 1045.657404][T22863] smbios_attr_is_visible+0xac/0x1c0 [ 1045.657429][T22863] internal_create_group+0x504/0xf30 [ 1045.657471][T22863] ? __pfx_internal_create_group+0x10/0x10 [ 1045.657505][T22863] ? do_raw_spin_lock+0x12c/0x2b0 [ 1045.657546][T22863] ? find_held_lock+0x2b/0x80 [ 1045.657572][T22863] ? bus_to_subsys+0x10f/0x160 [ 1045.657603][T22863] internal_create_groups+0x9d/0x150 [ 1045.657644][T22863] bus_add_device+0xb8/0x480 [ 1045.657677][T22863] device_add+0x986/0x1aa0 [ 1045.657720][T22863] ? __pfx_device_add+0x10/0x10 [ 1045.657757][T22863] ? pci_device_add+0x7d4/0x1420 [ 1045.657784][T22863] ? down_write+0x14d/0x200 [ 1045.657820][T22863] ? pcibios_device_add+0x492/0x600 [ 1045.657857][T22863] ? up_write+0x1b2/0x520 [ 1045.657892][T22863] ? pci_init_reset_methods+0x112/0x1d0 [ 1045.657936][T22863] pci_device_add+0x83b/0x1420 [ 1045.657967][T22863] ? __pfx_pci_device_add+0x10/0x10 [ 1045.657999][T22863] ? __raw_spin_lock_init+0x3a/0x110 [ 1045.658044][T22863] pci_scan_single_device+0x252/0x310 [ 1045.658072][T22863] ? __pfx_pci_scan_single_device+0x10/0x10 [ 1045.658110][T22863] pci_scan_slot+0x1c0/0x760 [ 1045.658142][T22863] ? __pfx_pci_scan_slot+0x10/0x10 [ 1045.658167][T22863] ? __pfx___mutex_lock+0x10/0x10 [ 1045.658210][T22863] ? __up_read+0x1f8/0x750 [ 1045.658250][T22863] pci_scan_child_bus_extend+0x6b/0x730 [ 1045.658281][T22863] ? pci_find_next_bus+0x60/0xb0 [ 1045.658317][T22863] pci_rescan_bus+0x18/0x40 [ 1045.658346][T22863] rescan_store+0xfb/0x130 [ 1045.658373][T22863] ? __pfx_rescan_store+0x10/0x10 [ 1045.658402][T22863] ? sysfs_file_kobj+0xe4/0x290 [ 1045.658430][T22863] ? __pfx_rescan_store+0x10/0x10 [ 1045.658456][T22863] bus_attr_store+0x74/0xb0 [ 1045.658480][T22863] ? __pfx_bus_attr_store+0x10/0x10 [ 1045.658503][T22863] sysfs_kf_write+0xf2/0x150 [ 1045.658533][T22863] kernfs_fop_write_iter+0x3af/0x570 [ 1045.658555][T22863] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1045.658587][T22863] vfs_write+0x7d3/0x11d0 [ 1045.658615][T22863] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1045.658641][T22863] ? __pfx___mutex_lock+0x10/0x10 [ 1045.658674][T22863] ? __pfx_vfs_write+0x10/0x10 [ 1045.658721][T22863] ksys_write+0x12a/0x250 [ 1045.658749][T22863] ? __pfx_ksys_write+0x10/0x10 [ 1045.658785][T22863] do_syscall_64+0xcd/0xfa0 [ 1045.658818][T22863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.658844][T22863] RIP: 0033:0x7f21e158f6c9 [ 1045.658865][T22863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.658889][T22863] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1045.658913][T22863] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 1045.658930][T22863] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 1045.658945][T22863] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1045.658961][T22863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.658976][T22863] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 1045.659010][T22863] [ 1046.606351][T22863] ACPI Error: Could not allocate an object descriptor (20250807/utobject-139) [ 1046.692178][T22863] ACPI: \_SB_.PCI0.ISA_: failed to evaluate _DSM d037c9e5-5335-7a4d-9117-ea4d19c3434d rev:2 func:0 (0x4) [ 1048.055927][T22932] netlink: 'syz.3.4239': attribute type 4 has an invalid length. [ 1048.102270][T22932] netlink: 'syz.3.4239': attribute type 5 has an invalid length. [ 1048.149188][T22932] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4239'. [ 1050.098258][T22971] input: f, as /devices/virtual/input/input52 [ 1051.637073][T22996] zswap: compressor 000 not available [ 1051.676671][ T5843] Bluetooth: hci4: unexpected event 0x36 length: 123 > 7 [ 1051.900286][T23007] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1053.167985][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1053.365241][ T5843] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 1053.531980][T23039] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1053.531980][T23039] ME' is too long [ 1053.593240][T23039] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1053.593240][T23039] =WOuz +z' is too long [ 1055.163623][T23039] Process accounting paused [ 1056.149774][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1057.012500][T23088] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1057.045128][T23088] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1057.290907][T23092] blktrace: Concurrent blktraces are not allowed on loop2 [ 1057.944619][T23104] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1060.781048][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.789399][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.711774][T23200] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4291'. [ 1063.200342][T23207] netlink: 206 bytes leftover after parsing attributes in process `syz.3.4293'. [ 1063.589346][T23218] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1063.920729][T23228] ovs_: entered promiscuous mode [ 1064.002494][T23234] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1064.002494][T23234] ME' is too long [ 1064.056536][T23234] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1064.056536][T23234] =WOuz +z' is too long [ 1065.698638][ T5843] Bluetooth: hci1: Malformed Event: 0x02 [ 1066.110632][T23271] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1066.749403][T23281] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1066.779377][T23281] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1066.795619][T23280] ovs_: entered promiscuous mode [ 1067.025287][T23282] blktrace: Concurrent blktraces are not allowed on loop2 [ 1067.285202][ T5843] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 1069.838400][T23346] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1070.649595][T23373] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1070.649595][T23373] ME' is too long [ 1070.698949][T23373] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1070.698949][T23373] =WOuz +z' is too long [ 1072.535091][T23420] can: request_module (can-proto-0) failed. [ 1073.809638][T23419] kexec: Could not allocate control_code_buffer [ 1074.366438][T23449] erspan0: entered allmulticast mode [ 1074.734583][T23456] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1075.655016][T23470] kAFS: unparsable volume name [ 1077.211841][T23498] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1077.211841][T23498] The task syz.1.4361 (23498) triggered the difference, watch for misbehavior. [ 1078.075087][T23514] FAULT_INJECTION: forcing a failure. [ 1078.075087][T23514] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.138962][T23514] CPU: 1 UID: 0 PID: 23514 Comm: syz.0.4368 Not tainted syzkaller #0 PREEMPT(full) [ 1078.138997][T23514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1078.139012][T23514] Call Trace: [ 1078.139021][T23514] [ 1078.139031][T23514] dump_stack_lvl+0x16c/0x1f0 [ 1078.139068][T23514] should_fail_ex+0x512/0x640 [ 1078.139107][T23514] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1078.139143][T23514] should_failslab+0xc2/0x120 [ 1078.139185][T23514] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1078.139219][T23514] ? register_pidns_sysctls+0x4b/0x1b0 [ 1078.139264][T23514] ? kmemdup_noprof+0x29/0x60 [ 1078.139292][T23514] ? __pfx_set_is_seen+0x10/0x10 [ 1078.139323][T23514] kmemdup_noprof+0x29/0x60 [ 1078.139350][T23514] register_pidns_sysctls+0x4b/0x1b0 [ 1078.139388][T23514] ? __ns_common_init+0x2a4/0x3b0 [ 1078.139419][T23514] copy_pid_ns+0x548/0xca0 [ 1078.139450][T23514] ? __pfx_copy_pid_ns+0x10/0x10 [ 1078.139481][T23514] ? rcu_is_watching+0x12/0xc0 [ 1078.139508][T23514] ? copy_mnt_ns+0xac/0xac0 [ 1078.139535][T23514] ? rcu_is_watching+0x12/0xc0 [ 1078.139564][T23514] ? copy_ipcs+0xb6/0x550 [ 1078.139605][T23514] create_new_namespaces+0x2aa/0xa90 [ 1078.139640][T23514] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1078.139672][T23514] ksys_unshare+0x45b/0xa40 [ 1078.139706][T23514] ? __pfx_ksys_unshare+0x10/0x10 [ 1078.139740][T23514] ? xfd_validate_state+0x61/0x180 [ 1078.139785][T23514] __x64_sys_unshare+0x31/0x40 [ 1078.139818][T23514] do_syscall_64+0xcd/0xfa0 [ 1078.139851][T23514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.139876][T23514] RIP: 0033:0x7f21e158f6c9 [ 1078.139895][T23514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.139919][T23514] RSP: 002b:00007f21e242f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1078.139942][T23514] RAX: ffffffffffffffda RBX: 00007f21e17e5fa0 RCX: 00007f21e158f6c9 [ 1078.139959][T23514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1078.139975][T23514] RBP: 00007f21e1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1078.139991][T23514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.140006][T23514] R13: 00007f21e17e6038 R14: 00007f21e17e5fa0 R15: 00007ffc47f8a368 [ 1078.140039][T23514] [ 1079.355499][T23527] netlink: 'syz.3.4371': attribute type 17 has an invalid length. [ 1079.386521][T23527] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1080.017027][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 1081.207144][T23547] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4378'. [ 1082.782265][T23581] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 1083.562182][T23596] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1084.756162][T23612] netlink: 'syz.3.4398': attribute type 9 has an invalid length. [ 1084.774854][T23612] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1084.799274][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1085.463734][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 1085.928919][T23640] FAULT_INJECTION: forcing a failure. [ 1085.928919][T23640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.022863][T23640] CPU: 1 UID: 0 PID: 23640 Comm: syz.0.4402 Not tainted syzkaller #0 PREEMPT(full) [ 1086.022896][T23640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1086.022911][T23640] Call Trace: [ 1086.022919][T23640] [ 1086.022928][T23640] dump_stack_lvl+0x16c/0x1f0 [ 1086.022962][T23640] should_fail_ex+0x512/0x640 [ 1086.023007][T23640] _copy_from_user+0x2e/0xd0 [ 1086.023048][T23640] core_sys_select+0x2c8/0xc20 [ 1086.023080][T23640] ? __pfx_core_sys_select+0x10/0x10 [ 1086.023134][T23640] ? read_tsc+0x9/0x20 [ 1086.023162][T23640] ? ktime_get_ts64+0x256/0x400 [ 1086.023202][T23640] kern_select+0x15d/0x1e0 [ 1086.023225][T23640] ? __pfx_kern_select+0x10/0x10 [ 1086.023253][T23640] ? __pfx_ksys_write+0x10/0x10 [ 1086.023286][T23640] __x64_sys_select+0xbd/0x160 [ 1086.023309][T23640] ? do_syscall_64+0x91/0xfa0 [ 1086.023338][T23640] ? lockdep_hardirqs_on+0x7c/0x110 [ 1086.023369][T23640] do_syscall_64+0xcd/0xfa0 [ 1086.023402][T23640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.023427][T23640] RIP: 0033:0x7f21e158f6c9 [ 1086.023446][T23640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.023470][T23640] RSP: 002b:00007f21e23ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1086.023493][T23640] RAX: ffffffffffffffda RBX: 00007f21e17e6180 RCX: 00007f21e158f6c9 [ 1086.023510][T23640] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1086.023526][T23640] RBP: 00007f21e23ed090 R08: 0000200000000280 R09: 0000000000000000 [ 1086.023542][T23640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.023556][T23640] R13: 00007f21e17e6218 R14: 00007f21e17e6180 R15: 00007ffc47f8a368 [ 1086.023588][T23640] [ 1086.282040][T23597] Process accounting resumed [ 1088.787937][T23685] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1088.787937][T23685] ME' is too long [ 1088.799028][T23685] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1088.799028][T23685] =WOuz +z' is too long [ 1089.746607][T23705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1091.353787][T23048] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1091.367893][T23048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1091.376342][T23048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1091.386942][T23048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1091.394525][T23048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1091.872859][T23161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.030456][T23161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.183890][T23161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.245264][T23738] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1092.245264][T23738] ME' is too long [ 1092.286768][T23738] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1092.286768][T23738] =WOuz +z' is too long [ 1092.334593][T23161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.695236][T23727] chnl_net:caif_netlink_parms(): no params data found [ 1093.033121][T23161] bridge_slave_1: left allmulticast mode [ 1093.051205][T23161] bridge_slave_1: left promiscuous mode [ 1093.082441][T23161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.236239][T23161] bridge_slave_0: left allmulticast mode [ 1093.267592][T23161] bridge_slave_0: left promiscuous mode [ 1093.291185][T23161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.490811][T23048] Bluetooth: hci3: command tx timeout [ 1094.716537][T23775] blktrace: Concurrent blktraces are not allowed on loop2 [ 1094.783333][T23161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.809368][T23161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.831466][T23161] bond0 (unregistering): Released all slaves [ 1095.004581][T23161] HfR: left promiscuous mode [ 1095.045955][T23727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.062033][T23727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.078899][T23727] bridge_slave_0: entered allmulticast mode [ 1095.099213][T23727] bridge_slave_0: entered promiscuous mode [ 1095.126155][T23161] ovs_: left promiscuous mode [ 1095.158530][T23727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.175396][T23727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.202252][T23727] bridge_slave_1: entered allmulticast mode [ 1095.238011][T23727] bridge_slave_1: entered promiscuous mode [ 1095.257920][T23161] tipc: Left network mode [ 1095.442009][T23727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.487100][T23727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.545338][T23048] Bluetooth: hci3: command tx timeout [ 1095.796139][T23727] team0: Port device team_slave_0 added [ 1095.844767][T23727] team0: Port device team_slave_1 added [ 1096.075733][T23727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.098756][T23727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.176482][T23727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.233297][T23727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.240278][T23727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.352643][T23727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.432151][T23161] hsr_slave_0: left promiscuous mode [ 1096.495067][T23161] hsr_slave_1: left promiscuous mode [ 1096.650124][T23161] veth0_macvtap: left promiscuous mode [ 1096.655790][T23161] veth1_vlan: left promiscuous mode [ 1096.701315][T23161] veth0_vlan: left promiscuous mode [ 1097.616707][T23048] Bluetooth: hci3: command tx timeout [ 1097.698274][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1097.710035][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1097.719472][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1097.727506][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1097.735786][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1098.480272][T23161] team0 (unregistering): Port device team_slave_1 removed [ 1098.594773][T23161] team0 (unregistering): Port device team_slave_0 removed [ 1099.683428][ T5843] Bluetooth: hci3: command tx timeout [ 1099.843835][ T5843] Bluetooth: hci4: command tx timeout [ 1100.036605][T23727] hsr_slave_0: entered promiscuous mode [ 1100.072306][T23727] hsr_slave_1: entered promiscuous mode [ 1100.078552][T23727] debugfs: 'hsr0' already exists in 'hsr' [ 1100.110158][T23727] Cannot create hsr debugfs directory [ 1101.614876][T23798] chnl_net:caif_netlink_parms(): no params data found [ 1101.912171][ T5843] Bluetooth: hci4: command tx timeout [ 1102.175509][T23798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.200204][T23798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.207693][T23798] bridge_slave_0: entered allmulticast mode [ 1102.258786][T23798] bridge_slave_0: entered promiscuous mode [ 1102.384364][T23798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.405075][T23798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.428838][T23798] bridge_slave_1: entered allmulticast mode [ 1102.452965][T23798] bridge_slave_1: entered promiscuous mode [ 1102.718319][T23727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1102.770492][T23727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1102.842190][T23798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.910031][T23798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.958040][T23727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1103.011519][T23727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1103.154324][T23798] team0: Port device team_slave_0 added [ 1103.188321][T23798] team0: Port device team_slave_1 added [ 1103.441572][T23798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.482848][T23798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.584719][T23798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.648845][T23798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.676568][T23798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.777138][T23798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.983014][ T5843] Bluetooth: hci4: command tx timeout [ 1104.034841][T23798] hsr_slave_0: entered promiscuous mode [ 1104.068188][T23798] hsr_slave_1: entered promiscuous mode [ 1104.102670][T23798] debugfs: 'hsr0' already exists in 'hsr' [ 1104.108489][T23798] Cannot create hsr debugfs directory [ 1104.796103][T23727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.084529][T23727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.170240][T23162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.177533][T23162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.307453][T23162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.314719][T23162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.447190][T23798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1105.531973][T23798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1105.632946][T23798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1105.677689][T23798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1106.052270][ T5843] Bluetooth: hci4: command tx timeout [ 1106.163104][T23901] FAULT_INJECTION: forcing a failure. [ 1106.163104][T23901] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.309239][T23901] CPU: 1 UID: 0 PID: 23901 Comm: syz.1.4440 Not tainted syzkaller #0 PREEMPT(full) [ 1106.309274][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1106.309291][T23901] Call Trace: [ 1106.309299][T23901] [ 1106.309309][T23901] dump_stack_lvl+0x16c/0x1f0 [ 1106.309344][T23901] should_fail_ex+0x512/0x640 [ 1106.309391][T23901] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1106.309420][T23901] should_failslab+0xc2/0x120 [ 1106.309454][T23901] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1106.309478][T23901] ? anon_vma_clone+0x405/0x5c0 [ 1106.309517][T23901] ? anon_vma_fork+0xe6/0x620 [ 1106.309561][T23901] ? anon_vma_fork+0xe6/0x620 [ 1106.309598][T23901] anon_vma_fork+0xe6/0x620 [ 1106.309636][T23901] ? vm_area_dup+0x5a1/0x8d0 [ 1106.309660][T23901] dup_mmap+0x151f/0x2280 [ 1106.309707][T23901] ? __pfx_dup_mmap+0x10/0x10 [ 1106.309762][T23901] copy_process+0x3f0c/0x76a0 [ 1106.309793][T23901] ? __pfx___futex_wait+0x10/0x10 [ 1106.309815][T23901] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1106.309856][T23901] ? __pfx_copy_process+0x10/0x10 [ 1106.309887][T23901] ? find_held_lock+0x2b/0x80 [ 1106.309917][T23901] ? futex_private_hash_put+0xd5/0x190 [ 1106.309955][T23901] kernel_clone+0xfc/0x930 [ 1106.309988][T23901] ? __pfx_kernel_clone+0x10/0x10 [ 1106.310037][T23901] __do_sys_clone+0xce/0x120 [ 1106.310068][T23901] ? __pfx___do_sys_clone+0x10/0x10 [ 1106.310099][T23901] ? __sys_sendmsg+0x18c/0x220 [ 1106.310136][T23901] ? xfd_validate_state+0x61/0x180 [ 1106.310183][T23901] do_syscall_64+0xcd/0xfa0 [ 1106.310215][T23901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.310241][T23901] RIP: 0033:0x7f33cad8f6c9 [ 1106.310261][T23901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.310286][T23901] RSP: 002b:00007f33c87affe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1106.310310][T23901] RAX: ffffffffffffffda RBX: 00007f33cafe6360 RCX: 00007f33cad8f6c9 [ 1106.310327][T23901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1106.310343][T23901] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1106.310359][T23901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1106.310380][T23901] R13: 00007f33cafe63f8 R14: 00007f33cafe6360 R15: 00007fffbdcf4098 [ 1106.310413][T23901] [ 1107.171504][T23727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.227308][T23798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.308878][T23798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.381071][T23161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.388285][T23161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.435251][T23161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.442973][T23161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.854065][T23727] veth0_vlan: entered promiscuous mode [ 1108.065707][T23048] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1108.078050][T23048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1108.091199][T23727] veth1_vlan: entered promiscuous mode [ 1108.099264][T23048] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1108.115685][T23048] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1108.131219][T23048] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1108.391338][T23727] veth0_macvtap: entered promiscuous mode [ 1108.460654][T23727] veth1_macvtap: entered promiscuous mode [ 1108.596696][T23727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.709524][T23727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.776352][T21917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.785143][T21917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.870328][T21917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.950647][T21917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.484693][T23930] FAULT_INJECTION: forcing a failure. [ 1109.484693][T23930] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.543021][T23930] CPU: 1 UID: 0 PID: 23930 Comm: syz.1.4443 Not tainted syzkaller #0 PREEMPT(full) [ 1109.543055][T23930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1109.543078][T23930] Call Trace: [ 1109.543086][T23930] [ 1109.543096][T23930] dump_stack_lvl+0x16c/0x1f0 [ 1109.543131][T23930] should_fail_ex+0x512/0x640 [ 1109.543169][T23930] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1109.543200][T23930] should_failslab+0xc2/0x120 [ 1109.543235][T23930] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1109.543262][T23930] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1109.543298][T23930] ? __d_alloc+0x32/0xae0 [ 1109.543332][T23930] ? __d_alloc+0x32/0xae0 [ 1109.543358][T23930] __d_alloc+0x32/0xae0 [ 1109.543390][T23930] path_from_stashed+0x427/0x750 [ 1109.543426][T23930] open_namespace+0x8e/0x190 [ 1109.543453][T23930] ? __pfx_open_namespace+0x10/0x10 [ 1109.543482][T23930] ? bpf_lsm_capable+0x9/0x10 [ 1109.543522][T23930] open_related_ns+0x41/0x70 [ 1109.543548][T23930] __tun_chr_ioctl+0x1fae/0x4880 [ 1109.543574][T23930] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1109.543616][T23930] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1109.543645][T23930] ? hook_file_ioctl_common+0x145/0x410 [ 1109.543678][T23930] ? __fget_files+0x20e/0x3c0 [ 1109.543708][T23930] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1109.543735][T23930] __x64_sys_ioctl+0x18e/0x210 [ 1109.543775][T23930] do_syscall_64+0xcd/0xfa0 [ 1109.543808][T23930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.543833][T23930] RIP: 0033:0x7f33cad8f6c9 [ 1109.543854][T23930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.543878][T23930] RSP: 002b:00007f33cbb4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.543901][T23930] RAX: ffffffffffffffda RBX: 00007f33cafe6090 RCX: 00007f33cad8f6c9 [ 1109.543918][T23930] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 1109.543933][T23930] RBP: 00007f33cae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1109.543948][T23930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.543963][T23930] R13: 00007f33cafe6128 R14: 00007f33cafe6090 R15: 00007fffbdcf4098 [ 1109.543996][T23930] [ 1109.913519][T23798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.023236][T23159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.041732][T23160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.060826][T23159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.089231][T23160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.223269][ T5843] Bluetooth: hci5: command tx timeout [ 1110.342583][T23912] chnl_net:caif_netlink_parms(): no params data found [ 1110.872426][T23912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.927972][T23912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.973877][T23912] bridge_slave_0: entered allmulticast mode [ 1111.028442][T23912] bridge_slave_0: entered promiscuous mode [ 1111.272591][T23912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.310727][T23912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.364298][T23912] bridge_slave_1: entered allmulticast mode [ 1111.435178][T23912] bridge_slave_1: entered promiscuous mode [ 1111.534190][T21917] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.724020][T23912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.782730][T23912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.946318][T23912] team0: Port device team_slave_0 added [ 1112.012980][T23912] team0: Port device team_slave_1 added [ 1112.065253][T23798] veth0_vlan: entered promiscuous mode [ 1112.261055][ T5843] Bluetooth: hci5: command tx timeout [ 1112.273506][T23912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.298764][T23912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.417438][T23912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.477081][T23912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.517829][T23912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.636408][T23912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.680464][T23798] veth1_vlan: entered promiscuous mode [ 1112.866602][T23912] hsr_slave_0: entered promiscuous mode [ 1112.893329][T23912] hsr_slave_1: entered promiscuous mode [ 1112.929492][T23912] debugfs: 'hsr0' already exists in 'hsr' [ 1112.958964][T23912] Cannot create hsr debugfs directory [ 1113.248582][T23798] veth0_macvtap: entered promiscuous mode [ 1113.357764][T23798] veth1_macvtap: entered promiscuous mode [ 1113.753771][T23798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.837046][T23798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.008357][T23159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.129196][T23159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.231306][T23159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.286670][T23159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.328172][ T5843] Bluetooth: hci5: command tx timeout [ 1114.498151][T23163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.506013][T23163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.578964][T23912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1114.619435][T23912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1114.736016][T23912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1114.778240][T23912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1114.802547][T23160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.834142][T23160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.313561][T23980] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1115.793648][T23912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.898900][T23912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.005191][T21917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.012425][T21917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.097687][T21917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.105416][T21917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.253608][T23991] hub 1-0:1.0: USB hub found [ 1116.328228][T23991] hub 1-0:1.0: 1 port detected [ 1116.405499][ T5843] Bluetooth: hci5: command tx timeout [ 1116.521265][T23994] hub 1-0:1.0: USB hub found [ 1116.557632][T23994] hub 1-0:1.0: 1 port detected [ 1117.324736][T23912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.383195][T23997] Process accounting paused [ 1117.642557][T24010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4454'. [ 1117.952442][T24010] team0: Port device team_slave_0 removed [ 1118.301545][T24017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1119.062087][T23912] veth0_vlan: entered promiscuous mode [ 1119.161692][T23912] veth1_vlan: entered promiscuous mode [ 1119.333844][T23912] veth0_macvtap: entered promiscuous mode [ 1119.408047][T23912] veth1_macvtap: entered promiscuous mode [ 1119.713893][T23912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.781894][T23912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.052407][T23160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.074952][T24039] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1120.106235][T23160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.175916][T23160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.353088][T24039] veth1_macvtap: left promiscuous mode [ 1120.387230][T24034] Invalid ELF header magic: != ELF [ 1120.397909][T24039] macsec0: entered promiscuous mode [ 1120.515498][T24039] macsec0: entered allmulticast mode [ 1120.607478][T23160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.127866][T23160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.198200][T23160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.357567][T23162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.409106][T23162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.441687][T24049] scsi_strcpy_devinfo: vendor string 'mY/&c@~n] r | [ 1121.441687][T24049] ME' is too long [ 1121.524289][T24049] scsi_strcpy_devinfo: model string 'Dd5 UK2b[ [ 1121.524289][T24049] =WOuz +z' is too long [ 1121.908241][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.917987][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.789148][T24059] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1126.466672][T24119] capability: warning: `syz.4.4476' uses deprecated v2 capabilities in a way that may be insecure [ 1126.777883][T24128] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1126.807164][T24128] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1126.838101][T24128] veth0_to_bridge: entered allmulticast mode [ 1126.923779][T24128] veth0_to_bridge: entered promiscuous mode [ 1126.970411][T24128] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1127.136608][T24128] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1127.144071][T24128] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1128.104370][T24155] sg_read: process 53 (syz.3.4483) changed security contexts after opening file descriptor, this is not allowed. [ 1128.181308][T24157] binder: 24156:24157 ioctl 400c620e 200000000280 returned -22 [ 1128.311373][T24157] ovs_: entered promiscuous mode [ 1129.362564][T24187] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4491'. [ 1131.420349][T24225] i2c i2c-0: delete_device: Extra parameters [ 1131.791774][T24230] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4503'. [ 1132.232391][T24235] FAULT_INJECTION: forcing a failure. [ 1132.232391][T24235] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.314749][T24235] CPU: 1 UID: 0 PID: 24235 Comm: syz.3.4504 Not tainted syzkaller #0 PREEMPT(full) [ 1132.314784][T24235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.314800][T24235] Call Trace: [ 1132.314808][T24235] [ 1132.314817][T24235] dump_stack_lvl+0x16c/0x1f0 [ 1132.314853][T24235] should_fail_ex+0x512/0x640 [ 1132.314890][T24235] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1132.314927][T24235] should_failslab+0xc2/0x120 [ 1132.314961][T24235] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1132.314994][T24235] ? register_pidns_sysctls+0x4b/0x1b0 [ 1132.315039][T24235] ? kmemdup_noprof+0x29/0x60 [ 1132.315064][T24235] ? __pfx_set_is_seen+0x10/0x10 [ 1132.315096][T24235] kmemdup_noprof+0x29/0x60 [ 1132.315123][T24235] register_pidns_sysctls+0x4b/0x1b0 [ 1132.315161][T24235] ? __ns_common_init+0x2a4/0x3b0 [ 1132.315193][T24235] copy_pid_ns+0x548/0xca0 [ 1132.315223][T24235] ? __pfx_copy_pid_ns+0x10/0x10 [ 1132.315255][T24235] ? rcu_is_watching+0x12/0xc0 [ 1132.315282][T24235] ? copy_mnt_ns+0xac/0xac0 [ 1132.315310][T24235] ? rcu_is_watching+0x12/0xc0 [ 1132.315339][T24235] ? copy_ipcs+0xb6/0x550 [ 1132.315380][T24235] create_new_namespaces+0x2aa/0xa90 [ 1132.315415][T24235] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1132.315447][T24235] ksys_unshare+0x45b/0xa40 [ 1132.315481][T24235] ? __pfx_ksys_unshare+0x10/0x10 [ 1132.315522][T24235] ? xfd_validate_state+0x61/0x180 [ 1132.315566][T24235] __x64_sys_unshare+0x31/0x40 [ 1132.315599][T24235] do_syscall_64+0xcd/0xfa0 [ 1132.315633][T24235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.315658][T24235] RIP: 0033:0x7ff54d38f6c9 [ 1132.315684][T24235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.315709][T24235] RSP: 002b:00007ff54e1d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1132.315733][T24235] RAX: ffffffffffffffda RBX: 00007ff54d5e5fa0 RCX: 00007ff54d38f6c9 [ 1132.315751][T24235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1132.315766][T24235] RBP: 00007ff54d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1132.315781][T24235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.315796][T24235] R13: 00007ff54d5e6038 R14: 00007ff54d5e5fa0 R15: 00007ffd8cd05c88 [ 1132.315828][T24235] [ 1134.643588][T24275] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4515'. [ 1135.742477][T24287] random: crng reseeded on system resumption [ 1135.928817][T24290] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1136.233877][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1137.678688][T24317] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1139.006885][T24337] random: crng reseeded on system resumption [ 1139.476185][T24343] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1140.133243][T24348] zswap: compressor not available [ 1142.196295][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1142.996461][T24396] netlink: 'syz.5.4543': attribute type 11 has an invalid length. [ 1147.182407][T24465] netlink: 'syz.3.4559': attribute type 2 has an invalid length. [ 1147.310979][T24442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1147.345831][T24442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1147.427171][T24442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1147.451967][T24442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1147.465032][T24442] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1147.492135][T24442] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1147.510974][T24442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1147.526925][T24442] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1147.546380][T24442] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1147.568683][T24442] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1147.580630][T24442] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1147.615073][T24442] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1147.631213][T24442] CPU0 is offline. [ 1147.825712][T24449] Process accounting resumed [ 1148.158552][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.345164][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1149.425594][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 1149.513452][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 1149.519746][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 1149.584493][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout [ 1149.855883][T24507] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4570'. [ 1150.024431][T24514] sctp: [Deprecated]: syz.1.4570 (pid 24514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1150.024431][T24514] Use struct sctp_sack_info instead [ 1151.574126][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 1151.580361][T23048] Bluetooth: hci4: command 0x0c1a tx timeout [ 1151.654248][T23048] Bluetooth: hci5: command 0x0c1a tx timeout [ 1152.015103][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1152.026571][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1152.038974][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1152.057489][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1152.065362][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1153.076605][T24537] chnl_net:caif_netlink_parms(): no params data found [ 1153.644065][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 1153.650170][T23048] Bluetooth: hci3: command 0x0c1a tx timeout [ 1153.723002][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout [ 1153.751731][T24537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.813619][T24537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.876039][T24537] bridge_slave_0: entered allmulticast mode [ 1153.926232][T24537] bridge_slave_0: entered promiscuous mode [ 1153.992619][T24537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.042492][T24537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.080712][T24537] bridge_slave_1: entered allmulticast mode [ 1154.135997][ T5843] Bluetooth: hci6: command tx timeout [ 1154.146000][T24537] bridge_slave_1: entered promiscuous mode [ 1154.384345][ T5843] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1154.499884][T24537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.583604][T24537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.746386][T24537] team0: Port device team_slave_0 added [ 1154.793096][T24537] team0: Port device team_slave_1 added [ 1155.040208][T24537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.085534][T24537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.254365][T24537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.336444][T24537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.385016][T24537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.561932][T24537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.029877][T24537] hsr_slave_0: entered promiscuous mode [ 1156.062763][T24537] hsr_slave_1: entered promiscuous mode [ 1156.093527][T24537] debugfs: 'hsr0' already exists in 'hsr' [ 1156.119383][T24537] Cannot create hsr debugfs directory [ 1156.189712][ T5843] Bluetooth: hci6: command tx timeout [ 1157.099403][T24611] FAULT_INJECTION: forcing a failure. [ 1157.099403][T24611] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.184461][T24611] CPU: 1 UID: 0 PID: 24611 Comm: syz.3.4589 Not tainted syzkaller #0 PREEMPT(full) [ 1157.184496][T24611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1157.184511][T24611] Call Trace: [ 1157.184519][T24611] [ 1157.184530][T24611] dump_stack_lvl+0x16c/0x1f0 [ 1157.184564][T24611] should_fail_ex+0x512/0x640 [ 1157.184603][T24611] ? __kmalloc_noprof+0xca/0x880 [ 1157.184646][T24611] should_failslab+0xc2/0x120 [ 1157.184681][T24611] __kmalloc_noprof+0xdd/0x880 [ 1157.184721][T24611] ? __register_sysctl_table+0xea2/0x1900 [ 1157.184765][T24611] ? __register_sysctl_table+0xea2/0x1900 [ 1157.184803][T24611] __register_sysctl_table+0xea2/0x1900 [ 1157.184848][T24611] ? __pfx___register_sysctl_table+0x10/0x10 [ 1157.184890][T24611] ? __asan_memcpy+0x3c/0x60 [ 1157.184919][T24611] register_pidns_sysctls+0x119/0x1b0 [ 1157.184958][T24611] ? __ns_common_init+0x2a4/0x3b0 [ 1157.184996][T24611] copy_pid_ns+0x548/0xca0 [ 1157.185028][T24611] ? __pfx_copy_pid_ns+0x10/0x10 [ 1157.185060][T24611] ? rcu_is_watching+0x12/0xc0 [ 1157.185087][T24611] ? copy_mnt_ns+0xac/0xac0 [ 1157.185115][T24611] ? rcu_is_watching+0x12/0xc0 [ 1157.185144][T24611] ? copy_ipcs+0xb6/0x550 [ 1157.185185][T24611] create_new_namespaces+0x2aa/0xa90 [ 1157.185221][T24611] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1157.185252][T24611] ksys_unshare+0x45b/0xa40 [ 1157.185286][T24611] ? __pfx_ksys_unshare+0x10/0x10 [ 1157.185321][T24611] ? xfd_validate_state+0x61/0x180 [ 1157.185365][T24611] __x64_sys_unshare+0x31/0x40 [ 1157.185397][T24611] do_syscall_64+0xcd/0xfa0 [ 1157.185430][T24611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.185455][T24611] RIP: 0033:0x7ff54d38f6c9 [ 1157.185475][T24611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.185499][T24611] RSP: 002b:00007ff54e1d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1157.185523][T24611] RAX: ffffffffffffffda RBX: 00007ff54d5e5fa0 RCX: 00007ff54d38f6c9 [ 1157.185540][T24611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1157.185555][T24611] RBP: 00007ff54d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1157.185570][T24611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.185585][T24611] R13: 00007ff54d5e6038 R14: 00007ff54d5e5fa0 R15: 00007ffd8cd05c88 [ 1157.185617][T24611] [ 1157.185627][T24611] sysctl could not get directory: /kernel -12 [ 1160.291833][ T5843] Bluetooth: hci6: command tx timeout [ 1165.272531][ T5843] Bluetooth: hci6: command tx timeout [ 1188.152269][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1194.267713][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1260.613897][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1261.660942][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1261.667930][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24615/1:b..l [ 1261.676494][ C1] rcu: (detected by 1, t=10502 jiffies, g=163781, q=1166 ncpus=1) [ 1261.684402][ C1] task:syz.3.4589 state:R running task stack:29112 pid:24615 tgid:24610 ppid:23727 task_flags:0x400040 flags:0x00080000 [ 1261.699172][ C1] Call Trace: [ 1261.702470][ C1] [ 1261.705415][ C1] __schedule+0x1190/0x5de0 [ 1261.709967][ C1] ? __pfx___schedule+0x10/0x10 [ 1261.714863][ C1] ? mark_held_locks+0x49/0x80 [ 1261.719651][ C1] preempt_schedule_irq+0x51/0x90 [ 1261.724708][ C1] irqentry_exit+0x36/0x90 [ 1261.729166][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1261.735175][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 1261.740743][ C1] Code: 0f c1 05 38 24 09 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 4d e2 08 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1261.760377][ C1] RSP: 0018:ffffc9000c44f6b0 EFLAGS: 00000206 [ 1261.766460][ C1] RAX: ac5e76b769cf7500 RBX: ffffffff8e3c45e0 RCX: ffffc9000c44f6bc [ 1261.774528][ C1] RDX: 0000000000000001 RSI: ffffffff8da033ab RDI: ffffffff8bf075c0 [ 1261.782511][ C1] RBP: 0000000000000001 R08: ffffffff911adfb6 R09: 0000000000000000 [ 1261.790490][ C1] R10: 0000000000000000 R11: 000000000000a76f R12: ffffffff816bb704 [ 1261.798560][ C1] R13: 0000000000000206 R14: ffff888027f4dac0 R15: 0000000000000002 [ 1261.806568][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1261.811839][ C1] unwind_next_frame+0x3f9/0x20a0 [ 1261.816878][ C1] ? stack_trace_save+0x8e/0xc0 [ 1261.821748][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 1261.826523][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1261.832696][ C1] arch_stack_walk+0x94/0x100 [ 1261.837391][ C1] ? kasan_save_stack+0x33/0x60 [ 1261.842284][ C1] stack_trace_save+0x8e/0xc0 [ 1261.846981][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1261.852377][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1261.857368][ C1] kasan_save_stack+0x33/0x60 [ 1261.862128][ C1] kasan_save_track+0x14/0x30 [ 1261.866845][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1261.871481][ C1] __kmalloc_noprof+0x32f/0x880 [ 1261.876369][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 1261.881253][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 1261.886119][ C1] tomoyo_encode2+0x100/0x3e0 [ 1261.890824][ C1] tomoyo_encode+0x29/0x50 [ 1261.895335][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1261.901049][ C1] ? tomoyo_profile+0x47/0x60 [ 1261.905792][ C1] tomoyo_path_number_perm+0x245/0x580 [ 1261.911289][ C1] ? tomoyo_path_number_perm+0x237/0x580 [ 1261.916996][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1261.923062][ C1] ? find_held_lock+0x2b/0x80 [ 1261.927792][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 1261.933387][ C1] ? __fget_files+0x20e/0x3c0 [ 1261.938105][ C1] security_file_ioctl+0x9b/0x240 [ 1261.943242][ C1] __x64_sys_ioctl+0xb7/0x210 [ 1261.947982][ C1] do_syscall_64+0xcd/0xfa0 [ 1261.952512][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.958423][ C1] RIP: 0033:0x7ff54d38f2cb [ 1261.962874][ C1] RSP: 002b:00007ff54e1b8050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.971312][ C1] RAX: ffffffffffffffda RBX: 00007ff54d5e6128 RCX: 00007ff54d38f2cb [ 1261.979326][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d9 [ 1261.987429][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd8cd05c87 [ 1261.995435][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1262.003438][ C1] R13: 00007ff54d5e6128 R14: 00007ffd8cd05ba0 R15: 00007ffd8cd05c88 [ 1262.011456][ C1]