last executing test programs: 12m9.736830464s ago: executing program 2 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r1, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) (fail_nth: 1) 12m9.072706559s ago: executing program 2 (id=115): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0300001c", @ANYRES16=r2, @ANYBLOB="9bff29bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000002500)={0x149c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x32, 0x2, 0x0, 0x1, [@generic="6edcfc4bde8d1a9de1f6cd60725af0fc63c90282b2ef3ae8237c6dfcb5077985edf689d9c075", @typed={0x8, 0xc1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc0}, @IPVS_CMD_ATTR_DAEMON={0x1425, 0x3, 0x0, 0x1, [@typed={0x4, 0xc1}, @generic="8f5ae6265787d2e0405f5e4507a83738bedcdc32a337979e2a05c48ac8e1f11fb601d0d206489a6966af3046aa8fa19868492cd1fe4c7bbd4a2f1a9b4c6e8defe37f837d2dd894cf81b96f225a3342b97881aece015ae026946eddd232a540504e815e087d20d01fb910ea7a2ee4a790ddd650b64fd05b47d485e168f83fb8377273dac9afc6026173dacb1b003f386d47af818952fb5d6c74019ae0483f8902236c56f9ccb3715c035c106ab8c5ca052e6b5fa51eeea71b2f9b28cc17b779a7cbfa969962be21f90a8de09d8ad6ab09ad9ea9498de2b11d14e8e57ccec5a54fcf95e215dbc6450e1a9385f4ec490739", @generic="c3a425729f690f0bfcf3319541ec0772798bba78db224560839c8f305443f187a206768ddbd3949dfb34cfd30a7c992b6774472cd740ad125c3ad2eec6676af99baab8cc07c89d046f4950ef53218641eeb91945f219a21198f98b7a561e6d5302898cca50d6b20b364f2f808e011d1f6462dfeb2f2df01b728b807c9da280b63aae645cf53e0c2b8e43a42d9cbdf20d1c23ecdce905ab56ebf09321b7f6407b522a4dadcd3a996180", @generic="bc98c2e8af31a7a5c2b600658f381a70b8463f4388867fafd0845176a4951bf51ed3815cc062494031a9fffe216c0698b8a36e915288e82ca769bce8ac0cde070baf424f724c89d23bae8cc7b2aaa559b47fe4a5ce114bd738ab5c1981f46552ca5700be85bff00300b906f002ca53a4ef32e86b3c7c0d6c67150a69dcf1984538cdc9df7e2be03703e933fa956a57dbdcc10f6cabaf69771d01a1b089af094776463e101864679be5ab7189e2d18a7b11757de439f9411023b8478ac449837c09b00493aa895b6c0ab034f813df87683e6bde50c29bf97d1534f27ae3547ca0339e7253bc8249cdc2a56f52d61de53c96", @generic="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", @generic="a48600af10842abc6217c9eee9cb1e9c134375a5e7519713f6784ece659ee28fae54840f35c9821ca475f0e0d9103eef6f8d1e464b440c80a458b245b8da7e8c6bb4202ff647a30e1f75e687e53933794cf69d06dd021614ea3468f9c217c892abe7b55f69377f75dda81fc96052dfb21862acc8118e473691963734a32065a4545b54ca87bf7fc9f712c46f95df9a6fb14c176331f47b93a0d7db6c5d5dbd1af4d0c30d704a013100e7e95aec7e1c7259e44bb3bad8bdc60ed8c71b57d68d3ce6ae75072f1f14413daadd8a216882b4f44d4dcc25c17ad3298ef8e3d7e2d758fe", @generic="906fa7309f881bbdc2297e9d85576b1879054a9a64981ea4247a90bd4bd324f2fc46202c5b59dccd8e277b67aa045d5f3971b19e9846426318920fef5a4f8d440934a3338a9555ea14f0e16cdbfc58e71fc078d4b2fb2d3134494059881607af76a47bbb0353cd8b5577aa13bed7f457b7b8f7a1d41798f3f72c0ea8ee1c76af1032aa2eb5783c00c54714efdfa6f9e2da375e895d883c22b2cb71023b831ab875969e5b05f3e832d7e516928af7b55c77a9"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8b69}]}, 0x149c}, 0x1, 0x0, 0x0, 0x8800}, 0x48000) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(r6, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 12m6.571352114s ago: executing program 2 (id=119): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000000000, 0x128009, 0xa, 0xeb1, r0, 0x20000008000) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x7f, 0x2eb1, 0x401, 0x2000000000008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) readv$auto(r2, &(0x7f0000000140)={&(0x7f0000000200), 0x7}, 0x1000000000000008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_ifindex, 0x4, 0x20, 0x2, 0x3, @prog_cnt=0xc, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x91) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r4, &(0x7f0000000700)='!dev_\x00\x00\x00\x00\x00', 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) 12m4.891594796s ago: executing program 2 (id=121): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r0, 0x4004550d, r0) (fail_nth: 4) 12m4.337472859s ago: executing program 2 (id=123): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0300001c", @ANYRES16=r2, @ANYBLOB="9bff29bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000002500)={0x149c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x32, 0x2, 0x0, 0x1, [@generic="6edcfc4bde8d1a9de1f6cd60725af0fc63c90282b2ef3ae8237c6dfcb5077985edf689d9c075", @typed={0x8, 0xc1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc0}, @IPVS_CMD_ATTR_DAEMON={0x1425, 0x3, 0x0, 0x1, [@typed={0x4, 0xc1}, @generic="8f5ae6265787d2e0405f5e4507a83738bedcdc32a337979e2a05c48ac8e1f11fb601d0d206489a6966af3046aa8fa19868492cd1fe4c7bbd4a2f1a9b4c6e8defe37f837d2dd894cf81b96f225a3342b97881aece015ae026946eddd232a540504e815e087d20d01fb910ea7a2ee4a790ddd650b64fd05b47d485e168f83fb8377273dac9afc6026173dacb1b003f386d47af818952fb5d6c74019ae0483f8902236c56f9ccb3715c035c106ab8c5ca052e6b5fa51eeea71b2f9b28cc17b779a7cbfa969962be21f90a8de09d8ad6ab09ad9ea9498de2b11d14e8e57ccec5a54fcf95e215dbc6450e1a9385f4ec490739", @generic="c3a425729f690f0bfcf3319541ec0772798bba78db224560839c8f305443f187a206768ddbd3949dfb34cfd30a7c992b6774472cd740ad125c3ad2eec6676af99baab8cc07c89d046f4950ef53218641eeb91945f219a21198f98b7a561e6d5302898cca50d6b20b364f2f808e011d1f6462dfeb2f2df01b728b807c9da280b63aae645cf53e0c2b8e43a42d9cbdf20d1c23ecdce905ab56ebf09321b7f6407b522a4dadcd3a996180", @generic="bc98c2e8af31a7a5c2b600658f381a70b8463f4388867fafd0845176a4951bf51ed3815cc062494031a9fffe216c0698b8a36e915288e82ca769bce8ac0cde070baf424f724c89d23bae8cc7b2aaa559b47fe4a5ce114bd738ab5c1981f46552ca5700be85bff00300b906f002ca53a4ef32e86b3c7c0d6c67150a69dcf1984538cdc9df7e2be03703e933fa956a57dbdcc10f6cabaf69771d01a1b089af094776463e101864679be5ab7189e2d18a7b11757de439f9411023b8478ac449837c09b00493aa895b6c0ab034f813df87683e6bde50c29bf97d1534f27ae3547ca0339e7253bc8249cdc2a56f52d61de53c96", @generic="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", @generic="a48600af10842abc6217c9eee9cb1e9c134375a5e7519713f6784ece659ee28fae54840f35c9821ca475f0e0d9103eef6f8d1e464b440c80a458b245b8da7e8c6bb4202ff647a30e1f75e687e53933794cf69d06dd021614ea3468f9c217c892abe7b55f69377f75dda81fc96052dfb21862acc8118e473691963734a32065a4545b54ca87bf7fc9f712c46f95df9a6fb14c176331f47b93a0d7db6c5d5dbd1af4d0c30d704a013100e7e95aec7e1c7259e44bb3bad8bdc60ed8c71b57d68d3ce6ae75072f1f14413daadd8a216882b4f44d4dcc25c17ad3298ef8e3d7e2d758fe", @generic="906fa7309f881bbdc2297e9d85576b1879054a9a64981ea4247a90bd4bd324f2fc46202c5b59dccd8e277b67aa045d5f3971b19e9846426318920fef5a4f8d440934a3338a9555ea14f0e16cdbfc58e71fc078d4b2fb2d3134494059881607af76a47bbb0353cd8b5577aa13bed7f457b7b8f7a1d41798f3f72c0ea8ee1c76af1032aa2eb5783c00c54714efdfa6f9e2da375e895d883c22b2cb71023b831ab875969e5b05f3e832d7e516928af7b55c77a9"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8b69}]}, 0x149c}, 0x1, 0x0, 0x0, 0x8800}, 0x48000) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(r6, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 12m1.573132942s ago: executing program 2 (id=127): mmap$auto(0x0, 0x80000000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0xa, 0x3, 0x3b) (async) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) (async) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2c}, 0x18) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xb, 0x1, 0x948b, 0x3, 0x4, 0x10060000000, 0x6, 0x62, 0x8000001d, 0x8, 0x6d3b, 0x9, 0x8, 0x4]}, 0x0) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) socket(0x28, 0x800, 0x38) (rerun: 64) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r2, &(0x7f0000000000), 0x0) 11m46.370018838s ago: executing program 32 (id=127): mmap$auto(0x0, 0x80000000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0xa, 0x3, 0x3b) (async) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) (async) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2c}, 0x18) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xb, 0x1, 0x948b, 0x3, 0x4, 0x10060000000, 0x6, 0x62, 0x8000001d, 0x8, 0x6d3b, 0x9, 0x8, 0x4]}, 0x0) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) socket(0x28, 0x800, 0x38) (rerun: 64) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r2, &(0x7f0000000000), 0x0) 15.123121216s ago: executing program 4 (id=1857): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev7\x00', 0x900, 0x0) ioctl$auto(r1, 0xc0945662, r1) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440), 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r2, 0x11) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) tkill$auto(r2, 0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) 13.891356074s ago: executing program 4 (id=1861): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x2f, 0x1c, 0x0, 0x2) fsconfig$auto_FSCONFIG_CMD_CREATE_EXCL(r0, 0x8, &(0x7f0000000080)='\x00', &(0x7f0000000300)="8fcc557f9ccd4b76e1285e3a361b651404c3a1af53c86f73baaadf53e93a637feb68e7e6e1c2e20ca09ddef5bd62c3a9ac7b1a672be49a130a6e2e53541bcbe6be0f77ab41374e5773966fd3314a0ccc5eab341fff705221e7e104d4a2ab072066efc18d4c0e986ce2551b8d34de570a3e35dc3dd04e3f24aa1c7bc1caea82f53ce55023b654a12122aa6a94f03e55bcc4fce6eedd243e0ea08af53a8a9786b0b567eaa4535caff66b2639b52b8614254bbb3ca9f983a510a81898ed58ff8d22616ae5b168a8850f68be4fb085770ee22f056f", 0xe) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r4, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0x0}) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r11, &(0x7f0000000240)=""/118, 0x76) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r3, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80014) 8.054667252s ago: executing program 3 (id=1872): ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) ioperm$auto(0x7, 0x5ad2, 0x8) (async) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x40181, 0x0) read$auto(r0, &(0x7f00000001c0)='\t]^)\\\'-.-\x00', 0x3) (async) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x5, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) socketpair$auto(0x1e, 0x5, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x412c00, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711}, 0xffffff7f) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x20000) (async) syz_open_procfs$namespace(0x0, 0x0) read$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffffff, &(0x7f0000000200)=""/57, 0x39) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x248880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd2, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80100001, 0x3, 0x1, 0x4, 0x1, 0x800]}, 0x0) write$auto(r0, &(0x7f0000000540)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100080a3d9) 7.893263693s ago: executing program 1 (id=1873): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r2, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) flistxattr$auto(0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioperm$auto(0x2, 0x3, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x185002, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 6.964762983s ago: executing program 3 (id=1874): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0300001c", @ANYRES16=r2, @ANYBLOB="9bff29bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000002500)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x32, 0x2, 0x0, 0x1, [@generic="6edcfc4bde8d1a9de1f6cd60725af0fc63c90282b2ef3ae8237c6dfcb5077985edf689d9c075", @typed={0x8, 0xc1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8b69}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x48000) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(r6, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 6.918258764s ago: executing program 1 (id=1875): mmap$auto(0x2, 0x80020009, 0xdf, 0xeb1, 0x401, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x34c, 0x40009, 0x0, 0x9b72, 0xffffffffffffffff, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyua\x00', 0x200000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x52c7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x3) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae67, 0x38) ioctl$auto_XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000180)={0x2, 0x2000, 0x8001, 0x6}) r1 = socket(0x1e, 0x2, 0x759c74ac) setsockopt$auto(r1, 0x3a, 0x1, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\x87\x02\x1c\xfd\xac\xc7\xaa\n\xf9\x19\xc4#<^\x91\x1d\xda\xc4m\xef\xff(i\xc6@\x91_\vBj\x0eQ\xceV\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r2, 0x9, 0x0) getdents$auto(r1, 0x0, 0x62d4) 6.812705985s ago: executing program 4 (id=1876): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c04", @ANYRES16=0x0, @ANYBLOB="080429bd7000fddbdf250800000005001f000c00000005000f000200000008002a0005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc018) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x82802, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 6.780660639s ago: executing program 0 (id=1877): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) modify_ldt$auto(0x0, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x7, 0xa, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r1 = getpid() fcntl$auto(0xffffffffffffffff, 0x4, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, r1, 0x5, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) write$auto(r3, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) 6.286697521s ago: executing program 1 (id=1878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={@inferred=r1, "d5fda45f3c25da6a324b395b8ed81b757a8e54ae99dec51b778ad79e548ba63b5d35fec0e65af19c7c4b5782df0cbd0239ea42d68dee549da9ceb183864b483a4d28dfb85022566634980eefa62db008e49e13f134b7a4973d88f42d2bf87d015dc9b13c41592cecbda279b9b8cc3361afd2aaeb1bbde59d24224e62af252f7f3af47ae94513ff5f91f1db7b2a47f6602ec59edfa3834d2acee2a08519ebcbb15a52780332053df78ca592ed85166c88eefdfb20e4d225080d9a33adb07911b79f330fc5ad214efa606b9a4a67a82d460ea8611838d35d1799ed133e0421f4d9eb11c59c49bb95e66c7377914cbb91357533ab4da5c53cec1a444145b09aedd8ac5bbb2de528a1b3f6e40e574111bc2f6c61908c657e3b1f31461e6fb37b59e4447fed2805a4a2ad167ddb5fea01f7fe8c5a1270a62f66bd87d723bdf4836fc03f361a6d2d8cc6f8e1cfd2f3d4f0586c2b8504811f845ef5ec74be489a7b169a445c5df41652b682d4677aaf1c3a2a6982a5470ce7092d57908b65d62a36c87a30b2e2a5bafe8e2dcb88b2336234a9a42ba4adb7595d6e3f3c654b24a7f70e98c604fdc30ba64f1bb465949c057d578ca64b81bdc21c69124fce415bfab42abc483da0bd44308bf9f58eb0edcb14a68ae170ef4b8f4d24e7509854b2469b7afcbc2c15291049fc296745291fd4484814b64922e68e7d62c06547969c60fe105dd568ea6de680854ba14b122f80e8ac14e64a711bb08c5cde898c536feadba4266668db299a35d70ddb65cdd170ee855d740eaeb0f1fdac914cfdba6f5c75c9a3ec31ce84e592cffefd3dba51bff6bc9c39c555982b00165ad8164e16e120ef2d69d0e441a7faef904025d04d20b6f19028980af6d3dc6e2d0cac05ce3ac376879e80662e67d8a5a9a3e80d44e2e8380264738870930e9b37fb7d0c387fab6ff7cd0b5cfedaafc4a3d74b54f15258fff337daf5327baf3d8ca4a893c095827fb4555788c217ee0926b5c988fa282d16da8ff328bc7b2aceaf1c44f16012fb94e07f5b59345e8facb6d92c147ef93dfba8c25b0cb9ac5e74ca0c07cb420b9ffaa3672e4d54eccb75ee66f7351cb3cc87ff5bd189ce400c8993e5d4f9c2a9919f4c48f50f1e3dff87bd4a23d6ba171722b2cec78013fcf84d71faefa4d1f264c8706f39abf76c87e31904c48e062aedab3fd6977f734a217fe9433e836aecadce68f8f4f33bc0cdb40c3fe76d8f279d505c8ffa5c4ac0e21921d75f9583c8799b351015c1109a758a85aae80bf0cf32c103e2b0f00c5dce962d81c7a502c851a878387fe0b6fc59077d07ce71e029d7179a7cd18d7b8339a4b0179693ee6d68f3434f95ce0c85313112f41e58affabfec015a9d6470cc444699b11a9fb331f0a7468c7198e3ba09579938cf775494bc9fbf852d13b292cdcfe91b2450bc7608d6c2adc01f1760fc79292fa0a3d0bf622ca0efe8ec0f7155dec4bda7522fd1de89d03dfc8fcdffcb057f2196c2c5d7501c80bc37419f6b62e7d7569ed51d559114dfdfe4f1915df821b5b6230f781a3b797eba91203974ce4748619b61ee053b4b80a8c00466f4cf6c2035556d045398c1b5b26910a3c71dac3d989256586bccc3b6c46a23f67f97f0f586a43005714dd60f44bec6b30d4706d6826557686599d5ad34b134d59f2ccc936a3b1865f884eee23e8e170cb613b4df9356e452011804816a6013347672cae5d6e7e3b3a55ef91bdc5a8ba1e9f35f3ebffaec937371478a81c0cccb4972eee981bf5f819b69f30bb915e22cf1564153174408f6ff04b36ccbe12bee615670a7347016a21575fb0d9ca3f29ac69e891ed1c26038533e1782f777aa03fe7a7c938d45a27b5ce7b818c366b80af7cd7a22c313f6d5c06b319cdc156c9f2e1818c0046a1dcf5a513ad73beb9e9defd2c32ebc82661b1814dfe0ac07e60d05eabdad4096b815bb8d3aa752318f45727d6252f52f181796f3e509abc2874ea24fdbf6606f4c6e708e7e927e447d20eecd08eae52a76236a3abe4549efb6333af1610b9b116c815610d9ac45b4247ef71e160fd1eea60412c7ece6d631c9d7da6a1ff3c701e60bf05275937bc6abd3179094a1446b6bab2d409409319e6a261773790a27caeabcc534742a3b71cd299adf9f6fb027c128d344e22b8b9acbdf85f8d34921882531cd179e2f3e585dae280507883dc75e830a08b94ba26baf77ccf8b07d3c2a725bf83f4071205ce8774845142eae2df9d36c032e458a5c4972134f66b3f13b678b92602bb6c9f0c8ff6cfe0133e4542693d73013e7975a02fe9969fbf3cf6052267d45b5cec899175763e3ae7a5593c58af3445d78a3e1ff8e1078fd84e9b8f4ef67b273a141ec61f3b089273195368ca200846e5e776fd5db181082bf0ef4a3905ee3b878d769292b01823ac2a7fc0071bda291816d4a1b184e643f4c653ff2f99dd47c9f4fe7d591f586a7b8851d5a51d8b40839fe9ebc2b6b07851a457571ddf9044fd8c8f851786d1e4afc707e324f559be2a9db70476c5667720aabc98dbaacc22620b9a3a681f239d8679f05db264ad2980990528dd321f2eadd6f207b04e2032496a62e0d996b2c376f7729bde5cd40cac132ec2731e9372f96ed0eaf943d5f0fe75a6c883bc955a27df7f932678f45cdf697f4df2956dda536a3fbf63c08d33eb08a8af5c99c2387cdb63099a66595c7ad46739d15d2df773cc0f80e2171ac5c20df5cebf75b8b9ac198df8db55b984e50b7ae8c900cc84a2b9bb206e7f33a5ca94a160dc5addc3e3e41740fbba53dc46580bd772f15be307a585f12bcfef849e3b3fc8f8e96b0b7347b7d5788ec82dd2761d73577e0d07d0827d28ccae05747877d7cbfabf874f26a45bb98dc17b74999c87f2b8c6acf29e50ddc0088602f48275effef3f8b6c7644f851cda08199a8fd52827b80eb112d9f688511cb79bf6613cf3c26a463b5932f49dacba844770d55341154240ce5375e3a61e5821a426a0533ff16c21088a6e0beaf3683d8208a9b81254b0d349c9ec4061c2bff7e2e750b4ff4a3072f5d65e2fe027e0144c21fe11c3a02c1c14da0c4f7288c92e5a506e8092eeae55be70e2669b9cc7a24a0f1e67d28cfff47c23e8cfc006b1f15864f18417fadf88e0efc2e7fc245dd180721f3034d14a62fa8cf0d9f949b8d005a0c8cfe9715da13c439860d1dea05005b70edc5b38ba0069435a0ec706cbe3a60241f14c2cbe5010701123eb4748c4f4eb5bef65357d8bb7a33005fe84cf7c0cf2f2103f2aa2c0fa491d0e20e4dbd2af2b0b57279183da4cab8dc84ea4a6a74fd39f7e42713700792c9b2bdc2d7ea7f82f865b28c6791ace9cfd8a4bbb8c4ad944fd54e8589c24356e1a7dc6cb13a1efceb46757b6c6c29829351a94b69e345fe40443e28a63d470d033dcae14375d21737065ddcc8c4f91a3bd402790661046958c50f29d36deef8bc18edb40e59d3af6638d4315fd31d8a7efb34184d09da34884c5305649854e94036862e67fb65e37de60c20a904d63444a02976ff4eb156b8ac7df916b1cab676853e393b0022c80852009cade7b98b01fa7f1c3e5bb25d7c4f49b1aae62ba155cd807a25c85789b1dbcda053d7ae4c329dc4449b68c6abf700d4031904b4fab975756fa4f1358434afde7a21c0eb3f1fe930f4ca4cb574d664b20108afee5cff3459db7337ed52259acf199ff440859bf185498db741c60976e171385f059f5414943d97cf7bf72d18557912f3916c3cef83ddf5126a66244a4664bbf8d9a0c78ba376ebea7cedfb92c6b9a9924f74ac6cc3dbacbc34392b074284812c798c4a85afce224bd812bf8cd7644ee0532557f67ad237289b3db59a38eaf36f5cc36a3cab6b9b262965cf09719e139834f2ae4752b12ee629daeeccdbb028d9623b1642a3a8774310d138d4e77fbad8fe6b7a6eaecacb20a529b01181ea8208cfc8b16bb34b9763fca444f97818b0f1a96a2d51cdec993b4ea7a1f25b7b99e2e5aa7ab2600a22b36fe89efb4de9aa48ad8308580a10fca54c41103347f354348425c62d071afacba826619b173da10e4323fdeba4c69aad981171395d9afea1fb4297d9a5f9d6dc06f78500ca384af3d939a0b3fde034589eab18310affa62198233d1efdd19a20041a1b96c35ea15fc2917c4b76eee160e8b6e4e0b9da29b02519276a2f9bc52c3f2d9ede94aa152e154965ee416793cfe028e80d126027913734cd34632b0d552587832a16a4571cf2f0151388144ee1256aa90d3218dc5ba538307828962600fd61e14ca9a47421f49e1019bbaa0a7cac699747febbeda9d1ba836822bd239ed00c628542e0be9f934dc3e6840155719784f098ffdcb004dbe9a0b47f35e7ff1ecc8dae1305806f162a4ba4285f58d40a28951cf4649a75ff2409469245101f6d549411cff4db0ebf861f45494676ad292475aa4cc223cdaf98f17d65c98ef23749ec3fdab172aded2de05c1e41629d88fef75a04e33dfeee93af1522a1d26adcd35af6ab2bbf9260b70c6e13c81e5095da7fcd98cc0e8fbcc2c5d527e925ceb20e51b4f958ce6a36c00aacb4bc5207f348a37f50cc091bcd695efa2bd9370fc60e403d862454b8fe73235111593d77bb49d1ca8fd19c30bdba7cb98a74ffcbce21fd70c6dbab2bd052a5f454d5535b39286824d02ad0eeae3e23c0e8def6e38f6bf66eac4c9b40ce28b1fd3a59e5bfdc85a69a6f35501b63fd8a6e5120287fd6678e62361275e5f78930f365ae1b10da0d99695e3bdfe2ab2c6cee4da0a369a542fc7d9baf3c98e07a92b8105e66b6481e6615fb51fdaad671f1d390e0a972516e1deec3fcb3cd37ddeabe6aff05dd99d93b48bb7393575867df406640f5d18626f94543ae2ceb82f6ecb9261f461fabed06a2ea006044b727e414890d94c676f676960a39da52b3b9ad699bc197bddf2448ae4ef8f9caadce9ab0a68a9959fe79486db89ac0e3556d1d5cda6031d5bade3f4b3c2c45eddb3c912122ac794292d6e0952931315fc13905f3a76bd4e781b301b64bf08cd044f8bcd48f1a029288d707fdcee658e538142d65287baed60b777808cfd3ded3759c5c142948ae0b4660b0bd3fc752430b781112839f014de97f74c07b136d1b1e270259898bae1972bb5a420dd35dd380bb462899571d50d23c8afa3889580e5363e2b57534fd36c2aaa3a8f6baf091f79a5775d5e55241f642061cca73018fb7d8916af451fe24a927874f4d3be3a982a30c08a0bf15fff91c43eea9de242b108b3d7eff373eb47340fed697c50f20cad76c2e5affbabdeaeca1c2582e078aeaa43713332ab4cf06cc642260c0a5e6f78d2ab8f208282157f5d34c51f698ae7604833ffdadca0da915d5ea77fcbea6a5e8aaa4ea41fc0f1c11a4786137c1ed21870f2ddccc3a87f5d267fb0f195ac3914fa47091e221f5da2b5757c9d801254f970e593e5f8b74e44cb4ff2d238cdc4699ed6e6e67bf6a54172a408edbf70ffd88329c86826acf6fe6f03b9c263e3e6dc31b562edce6e842dadf2a6dddc20c12a47c2f078f3aacbbc8aa3646d4c9273704601d0e5bf3d9bc694413de47d6548e8109a895fd6528a884a53d2f4059f818e8cbf7180f62d8314390e68b2d1d8ed6ee925aa84328ba42f699df9ee67604a5a2434ddc65ed86d2d956fa27946fe591bcaafd0e03720c2b08da64bf0cfb3e68d563a11339074da842141f96f318fd4ed7cd91f9e7daae48513a17fb7de21aa562bea95e44cc76fbafb7bfead84176ce8afc33"}) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) r3 = socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r4, @new_map_fd=r2, 0x91e, @old_map_fd=r3}, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) socketpair$auto(0x1, 0x2, 0xfffffffc, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) sysfs$auto(0x2, 0x810000000000003a, 0x0) getsockopt$auto(r5, 0x84, 0x1d, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)=0x2) 4.96954012s ago: executing program 1 (id=1879): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) socket(0x1e, 0x1, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xf, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) socket(0xa, 0x2, 0x88) setsockopt$auto(r2, 0x11, 0x1, 0x0, 0x4) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r4, 0x40084149, &(0x7f00000003c0)=0x8) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = mq_open$auto(&(0x7f0000000180)='\x02\x00D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0\xf7>\x04|\x83\xb8\x00\xa1\x06\x00\xb3\x13_Y&\xa9\x88\xe4\x8a\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2^\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\xf3\xbe\x1b\xaf\x93\x16C\x15\x14', 0x63, 0xfffc, 0x0) mq_timedreceive$auto(r6, 0x0, 0x1000000000004dcd, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x2100, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7e, 0x0, 0x1b00}}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x80100, 0x0) msgctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000000340)={{0x8, 0xee01, 0xee00, 0x94, 0x1, 0x0, 0x7fff}, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x4, 0x5, 0x5, 0x10, 0x3, 0x1ff, 0x6, 0x4, 0x80, @raw=0x8, @raw=0x9}) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="28020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="4d701c4811f7e06711d1aa695b901e0cbaa20d55309934130643d9b3993f3b922304cb30c328a14f4888c1bcff93c70d385e1c1a5b33c83aadc6698e5e8b493d38fed7197387a755690399f02d", @ANYRES32=0x0, @ANYBLOB="00afb4b82a6840da41d7cd7b26992a165a1af920a3b9afd78e16cb56d8c9cf0c894f599f4bf0008d9571f31f99bfd8eff759ed9b808d37997f000000000000"], 0x228}, 0x1, 0x0, 0x0, 0x40800}, 0x14) inotify_init1$auto(0x403) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(r9, 0x5407, 0x38) 4.380103484s ago: executing program 3 (id=1880): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0300001c", @ANYRES16=r2, @ANYBLOB="9bff29bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000002500)={0x109c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x32, 0x2, 0x0, 0x1, [@generic="6edcfc4bde8d1a9de1f6cd60725af0fc63c90282b2ef3ae8237c6dfcb5077985edf689d9c075", @typed={0x8, 0xc1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc0}, @IPVS_CMD_ATTR_DAEMON={0x1025, 0x3, 0x0, 0x1, [@typed={0x4, 0xc1}, @generic="8f5ae6265787d2e0405f5e4507a83738bedcdc32a337979e2a05c48ac8e1f11fb601d0d206489a6966af3046aa8fa19868492cd1fe4c7bbd4a2f1a9b4c6e8defe37f837d2dd894cf81b96f225a3342b97881aece015ae026946eddd232a540504e815e087d20d01fb910ea7a2ee4a790ddd650b64fd05b47d485e168f83fb8377273dac9afc6026173dacb1b003f386d47af818952fb5d6c74019ae0483f8902236c56f9ccb3715c035c106ab8c5ca052e6b5fa51eeea71b2f9b28cc17b779a7cbfa969962be21f90a8de09d8ad6ab09ad9ea9498de2b11d14e8e57ccec5a54fcf95e215dbc6450e1a9385f4ec490739", @generic="c3a425729f690f0bfcf3319541ec0772798bba78db224560839c8f305443f187a206768ddbd3949dfb34cfd30a7c992b6774472cd740ad125c3ad2eec6676af99baab8cc07c89d046f4950ef53218641eeb91945f219a21198f98b7a561e6d5302898cca50d6b20b364f2f808e011d1f6462dfeb2f2df01b728b807c9da280b63aae645cf53e0c2b8e43a42d9cbdf20d1c23ecdce905ab56ebf09321b7f6407b522a4dadcd3a996180", @generic="bc98c2e8af31a7a5c2b600658f381a70b8463f4388867fafd0845176a4951bf51ed3815cc062494031a9fffe216c0698b8a36e915288e82ca769bce8ac0cde070baf424f724c89d23bae8cc7b2aaa559b47fe4a5ce114bd738ab5c1981f46552ca5700be85bff00300b906f002ca53a4ef32e86b3c7c0d6c67150a69dcf1984538cdc9df7e2be03703e933fa956a57dbdcc10f6cabaf69771d01a1b089af094776463e101864679be5ab7189e2d18a7b11757de439f9411023b8478ac449837c09b00493aa895b6c0ab034f813df87683e6bde50c29bf97d1534f27ae3547ca0339e7253bc8249cdc2a56f52d61de53c96", @generic="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", @generic="a48600af10842abc6217c9eee9cb1e9c134375a5e7519713f6784ece659ee28fae54840f35c9821ca475f0e0d9103eef6f8d1e464b440c80a458b245b8da7e8c6bb4202ff647a30e1f75e687e53933794cf69d06dd021614ea3468f9c217c892abe7b55f69377f75dda81fc96052dfb21862acc8118e473691963734a32065a4545b54ca87bf7fc9f712c46f95df9a6fb14c176331f47b93a0d7db6c5d5dbd1af4d0c30d704a013100e7e95aec7e1c7259e44bb3bad8bdc60ed8c71b57d68d3ce6ae75072f1f14413daadd8a216882b4f44d4dcc25c17ad3298ef8e3d7e2d758fe", @generic="906fa7309f881bbdc2297e9d85576b1879054a9a64981ea4247a90bd4bd324f2fc46202c5b59dccd8e277b67aa045d5f3971b19e9846426318920fef5a4f8d440934a3338a9555ea14f0e16cdbfc58e71fc078d4b2fb2d3134494059881607af76a47bbb0353cd8b5577aa13bed7f457b7b8f7a1d41798f3f72c0ea8ee1c76af1032aa2eb5783c00c54714efdfa6f9e2da375e895d883c22b2cb71023b831ab875969e5b05f3e832d7e516928af7b55c77a9"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8b69}]}, 0x109c}, 0x1, 0x0, 0x0, 0x8800}, 0x48000) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r4 = socket(0x2, 0x2, 0x88) setsockopt$auto(r4, 0x0, 0x20, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r8) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) ioctl$auto_TCFLSH2(r7, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 3.571793971s ago: executing program 4 (id=1881): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 3.163952784s ago: executing program 4 (id=1882): socket(0x2, 0x80001, 0x40) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) unshare$auto(0x40000080) r1 = eventfd2$auto(0x6, 0x4) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, 0x0) ioctl$auto_FS_IOC_RESVSP64(r2, 0x4030582a, 0x80000001) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48094}, 0x48084) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) getrandom$auto(0x0, 0x2, 0x3) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap$auto(0x0, 0x8001, 0x3, 0xeb1, r0, 0x5) lseek$auto(0x3, 0x8, 0x3) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r4, 0x0, 0x3, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230000, 0x200001, 0x6) 2.01054067s ago: executing program 0 (id=1883): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 1.644121074s ago: executing program 0 (id=1884): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x10000, 0x3, 0x0, 0x0, 0x3012d954) socket(0x10, 0x4, 0xffffffc0) (async) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x200000, 0x402000d, 0xdf, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0xa, 0x1) (async) socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) ioctl$auto(0x1, 0x890c, 0x8) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r1, 0x20000008000) (async) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r1, 0x20000008000) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x20342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x20342, 0x0) mmap$auto(0x0, 0xfffffffffffff54a, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_setup$auto(0x1000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) (async) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r4, r5, 0x4, 0x1ff, r3, @relative_fd=r2, 0x100000e600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.482940679s ago: executing program 1 (id=1885): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) (fail_nth: 1) 1.080572028s ago: executing program 0 (id=1886): socket(0x2, 0x80001, 0x40) unshare$auto(0x40000080) eventfd2$auto(0x6, 0x4) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x2, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) lseek$auto(0x3, 0x8, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230500, 0x200001, 0x6) 621.670313ms ago: executing program 3 (id=1887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x100) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x40000000f42c, 0x80002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x6c, 0x0, 0x400, 0x70bd6a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_AGGR_MAX_FRAMES={0x8, 0x1b, 0x7}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_COALESCE_RX_PROFILE={0x3c, 0x1d, 0x0, 0x1, [@ETHTOOL_A_PROFILE_IRQ_MODERATION={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xc710}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x8}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0x40}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x4}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x7}]}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4089c}, 0x0) 358.360176ms ago: executing program 1 (id=1888): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x3ff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0xab81c0, 0x0) madvise$auto(0x600, 0x2003f0, 0x17) connect$auto(0xffffffffffffffff, 0x0, 0x55) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, 0x0) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) socket(0x2, 0x3, 0xa) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) 0s ago: executing program 3 (id=1889): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) mlockall$auto(0x7) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b67, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kernel console output (not intermixed with test programs): ), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 666.921376][T13716] zswap: compressor not available [ 667.007060][T13729] CIFS mount error: No usable UNC path provided in device string! [ 667.007060][T13729] [ 667.249681][T13729] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 667.276582][T13727] svc: failed to register nfsdv3 RPC service (errno 111). [ 667.368473][T13727] svc: failed to register nfsaclv3 RPC service (errno 111). [ 667.572504][T13726] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108 [ 668.070711][T13722] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 668.801300][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1295'. [ 668.861691][T13740] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 672.209692][T13759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 672.219832][T13759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 672.230192][T13759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 672.384242][T13759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.413347][T13759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 672.524889][T13759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 673.305972][T13509] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.263666][T13509] Bluetooth: hci1: command 0x0c1a tx timeout [ 674.376817][T13817] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 674.429651][T13509] Bluetooth: hci2: command 0x0c1a tx timeout [ 674.435752][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 674.579804][T13509] Bluetooth: hci4: command 0x0c1a tx timeout [ 674.789016][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 675.952528][T13872] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110 [ 676.160841][T13849] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 676.339588][T13509] Bluetooth: hci1: command 0x0c1a tx timeout [ 676.450745][T13874] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 676.504717][T13865] zswap: compressor not available [ 677.464860][T13891] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 677.929111][T13887] zswap: compressor not available [ 678.452006][T13892] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 679.998874][T13911] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 680.925396][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 684.477084][T13972] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 684.972661][T13991] FAULT_INJECTION: forcing a failure. [ 684.972661][T13991] name failslab, interval 1, probability 0, space 0, times 0 [ 685.009964][T13991] CPU: 0 UID: 0 PID: 13991 Comm: syz.4.1336 Tainted: G U syzkaller #0 PREEMPT(full) [ 685.010016][T13991] Tainted: [U]=USER [ 685.010027][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.010064][T13991] Call Trace: [ 685.010076][T13991] [ 685.010088][T13991] dump_stack_lvl+0x16c/0x1f0 [ 685.010128][T13991] should_fail_ex+0x512/0x640 [ 685.010180][T13991] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 685.010219][T13991] should_failslab+0xc2/0x120 [ 685.010259][T13991] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 685.010293][T13991] ? acpi_ds_init_callbacks+0xd3/0x320 [ 685.010343][T13991] ? acpi_ut_create_integer_object+0x64/0x180 [ 685.010390][T13991] acpi_ut_create_integer_object+0x64/0x180 [ 685.010431][T13991] acpi_ps_execute_method+0x516/0xb30 [ 685.010489][T13991] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 685.010529][T13991] acpi_ns_evaluate+0x76c/0xca0 [ 685.010587][T13991] ? kasan_save_track+0x14/0x30 [ 685.010624][T13991] acpi_evaluate_object+0x1fa/0xa90 [ 685.010673][T13991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.010711][T13991] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 685.010766][T13991] ? __mutex_trylock_common+0xe9/0x250 [ 685.010829][T13991] acpi_evaluate_integer+0xdd/0x200 [ 685.010870][T13991] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 685.010931][T13991] ? __pfx_status_show+0x10/0x10 [ 685.010977][T13991] status_show+0xa0/0x120 [ 685.011023][T13991] ? __pfx_status_show+0x10/0x10 [ 685.011083][T13991] dev_attr_show+0x56/0xe0 [ 685.011121][T13991] ? __pfx_dev_attr_show+0x10/0x10 [ 685.011153][T13991] sysfs_kf_seq_show+0x213/0x3e0 [ 685.011196][T13991] seq_read_iter+0x509/0x12c0 [ 685.011275][T13991] kernfs_fop_read_iter+0x46c/0x610 [ 685.011327][T13991] ? rw_verify_area+0xcf/0x6c0 [ 685.011380][T13991] vfs_read+0x8bf/0xcf0 [ 685.011417][T13991] ? __pfx___mutex_lock+0x10/0x10 [ 685.011451][T13991] ? __pfx_vfs_read+0x10/0x10 [ 685.011510][T13991] ksys_read+0x12a/0x250 [ 685.011541][T13991] ? __pfx_ksys_read+0x10/0x10 [ 685.011584][T13991] do_syscall_64+0xcd/0x4b0 [ 685.011622][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.011654][T13991] RIP: 0033:0x7f3c7798eec9 [ 685.011681][T13991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.011714][T13991] RSP: 002b:00007f3c75bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 685.011752][T13991] RAX: ffffffffffffffda RBX: 00007f3c77be6180 RCX: 00007f3c7798eec9 [ 685.011775][T13991] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 685.011796][T13991] RBP: 00007f3c77a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 685.011817][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.011837][T13991] R13: 00007f3c77be6218 R14: 00007f3c77be6180 R15: 00007ffd57e64a08 [ 685.011882][T13991] [ 685.012385][T13991] ACPI Error: Could not allocate an object descriptor (20250807/utobject-180) [ 685.349945][T13991] ACPI Error: ffff888030861000 walk still has a scope list (20250807/dswstate-694) [ 685.418532][T13996] FAULT_INJECTION: forcing a failure. [ 685.418532][T13996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.481983][T13994] netlink: zone id is out of range [ 685.487220][T13994] netlink: zone id is out of range [ 685.565898][T13994] netlink: zone id is out of range [ 685.569932][T13996] CPU: 0 UID: 0 PID: 13996 Comm: syz.0.1337 Tainted: G U syzkaller #0 PREEMPT(full) [ 685.569990][T13996] Tainted: [U]=USER [ 685.570002][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.570026][T13996] Call Trace: [ 685.570037][T13996] [ 685.570051][T13996] dump_stack_lvl+0x16c/0x1f0 [ 685.570113][T13996] should_fail_ex+0x512/0x640 [ 685.570179][T13996] _copy_from_user+0x2e/0xd0 [ 685.570218][T13996] get_user_ifreq+0x77/0x1c0 [ 685.570266][T13996] sock_do_ioctl+0x16b/0x280 [ 685.570311][T13996] ? __pfx_sock_do_ioctl+0x10/0x10 [ 685.570378][T13996] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 685.570472][T13996] sock_ioctl+0x227/0x6b0 [ 685.570529][T13996] ? __pfx_sock_ioctl+0x10/0x10 [ 685.570577][T13996] ? hook_file_ioctl_common+0x145/0x410 [ 685.570632][T13996] ? __fget_files+0x20e/0x3c0 [ 685.570697][T13996] ? __pfx_sock_ioctl+0x10/0x10 [ 685.570751][T13996] __x64_sys_ioctl+0x18e/0x210 [ 685.570806][T13996] do_syscall_64+0xcd/0x4b0 [ 685.570849][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.570887][T13996] RIP: 0033:0x7f271458eec9 [ 685.570916][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.570954][T13996] RSP: 002b:00007f2715416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.570990][T13996] RAX: ffffffffffffffda RBX: 00007f27147e6180 RCX: 00007f271458eec9 [ 685.571017][T13996] RDX: 00002000000000c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 685.571041][T13996] RBP: 00007f2714611f91 R08: 0000000000000000 R09: 0000000000000000 [ 685.571063][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.571083][T13996] R13: 00007f27147e6218 R14: 00007f27147e6180 R15: 00007ffe5b32e608 [ 685.571123][T13996] [ 685.801829][T13994] netlink: zone id is out of range [ 685.827449][T13994] netlink: zone id is out of range [ 685.904331][T13994] netlink: zone id is out of range [ 685.909651][T13994] netlink: zone id is out of range [ 685.914908][T13994] netlink: zone id is out of range [ 685.921191][T13994] netlink: zone id is out of range [ 685.926432][T13994] netlink: zone id is out of range [ 686.506785][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 687.015395][T14021] FAULT_INJECTION: forcing a failure. [ 687.015395][T14021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 687.065030][T14021] CPU: 1 UID: 0 PID: 14021 Comm: syz.1.1344 Tainted: G U syzkaller #0 PREEMPT(full) [ 687.065086][T14021] Tainted: [U]=USER [ 687.065098][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.065118][T14021] Call Trace: [ 687.065128][T14021] [ 687.065140][T14021] dump_stack_lvl+0x16c/0x1f0 [ 687.065180][T14021] should_fail_ex+0x512/0x640 [ 687.065237][T14021] should_fail_alloc_page+0xe7/0x130 [ 687.065279][T14021] prepare_alloc_pages+0x3c2/0x610 [ 687.065330][T14021] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 687.065367][T14021] ? stack_trace_save+0x8e/0xc0 [ 687.065420][T14021] ? __pfx_stack_trace_save+0x10/0x10 [ 687.065461][T14021] ? rcu_is_watching+0x12/0xc0 [ 687.065500][T14021] ? stack_depot_save_flags+0x29/0x9c0 [ 687.065562][T14021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 687.065593][T14021] ? __kasan_slab_alloc+0x89/0x90 [ 687.065624][T14021] ? __pmd_alloc+0xbf/0x930 [ 687.065665][T14021] ? handle_mm_fault+0x589/0xd10 [ 687.065707][T14021] ? do_user_addr_fault+0x7a6/0x1370 [ 687.065741][T14021] ? exc_page_fault+0x5c/0xb0 [ 687.065787][T14021] ? asm_exc_page_fault+0x26/0x30 [ 687.065818][T14021] ? rep_movs_alternative+0x4a/0x90 [ 687.065860][T14021] ? _copy_from_iter+0x383/0x1720 [ 687.065909][T14021] ? netlink_sendmsg+0x829/0xdd0 [ 687.065946][T14021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.065991][T14021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 687.066028][T14021] ? policy_nodemask+0xea/0x4e0 [ 687.066068][T14021] alloc_pages_mpol+0x1fb/0x550 [ 687.066108][T14021] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 687.066156][T14021] alloc_pages_noprof+0x131/0x390 [ 687.066194][T14021] pte_alloc_one+0x1c/0x3a0 [ 687.066234][T14021] do_pte_missing+0x1afc/0x3ba0 [ 687.066285][T14021] ? do_raw_spin_unlock+0x172/0x230 [ 687.066321][T14021] ? __pmd_alloc+0x3fb/0x930 [ 687.066393][T14021] __handle_mm_fault+0x152a/0x2a50 [ 687.066449][T14021] ? mt_find+0x3ef/0xa30 [ 687.066489][T14021] ? __pfx___handle_mm_fault+0x10/0x10 [ 687.066536][T14021] ? __pfx_mt_find+0x10/0x10 [ 687.066610][T14021] ? find_vma+0xbf/0x140 [ 687.066645][T14021] ? __pfx_find_vma+0x10/0x10 [ 687.066684][T14021] handle_mm_fault+0x589/0xd10 [ 687.066734][T14021] ? __pkru_allows_pkey+0x31/0xb0 [ 687.066768][T14021] do_user_addr_fault+0x7a6/0x1370 [ 687.066807][T14021] ? rcu_is_watching+0x12/0xc0 [ 687.066850][T14021] exc_page_fault+0x5c/0xb0 [ 687.066902][T14021] asm_exc_page_fault+0x26/0x30 [ 687.066933][T14021] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 687.066978][T14021] Code: 23 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 687.067008][T14021] RSP: 0018:ffffc90002f677d0 EFLAGS: 00050206 [ 687.067034][T14021] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 687.067054][T14021] RDX: ffffed100b78c951 RSI: 0000000000000000 RDI: ffff88805bc649c0 [ 687.067075][T14021] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100b78c950 [ 687.067094][T14021] R10: ffff88805bc64a83 R11: 0000000000000000 R12: ffffc90002f67d60 [ 687.067113][T14021] R13: 00000000000000c4 R14: ffff88805bc649c0 R15: 00007ffffffff000 [ 687.067154][T14021] _copy_from_iter+0x383/0x1720 [ 687.067212][T14021] ? __alloc_skb+0x200/0x380 [ 687.067263][T14021] ? __pfx__copy_from_iter+0x10/0x10 [ 687.067318][T14021] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 687.067350][T14021] ? __lock_acquire+0xb97/0x1ce0 [ 687.067417][T14021] netlink_sendmsg+0x829/0xdd0 [ 687.067458][T14021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.067498][T14021] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 687.067557][T14021] ____sys_sendmsg+0xa95/0xc70 [ 687.067601][T14021] ? copy_msghdr_from_user+0x10a/0x160 [ 687.067633][T14021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.067682][T14021] ? __pfx__kstrtoull+0x10/0x10 [ 687.067729][T14021] ___sys_sendmsg+0x134/0x1d0 [ 687.067763][T14021] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.067814][T14021] ? find_held_lock+0x2b/0x80 [ 687.067875][T14021] __sys_sendmmsg+0x200/0x420 [ 687.067912][T14021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 687.067956][T14021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 687.068008][T14021] ? fput+0x9b/0xd0 [ 687.068047][T14021] ? ksys_write+0x1ac/0x250 [ 687.068077][T14021] ? __pfx_ksys_write+0x10/0x10 [ 687.068115][T14021] __x64_sys_sendmmsg+0x9c/0x100 [ 687.068146][T14021] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.068175][T14021] do_syscall_64+0xcd/0x4b0 [ 687.068209][T14021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.068240][T14021] RIP: 0033:0x7f32f618eec9 [ 687.068265][T14021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.068295][T14021] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.068323][T14021] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 687.068344][T14021] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 687.068362][T14021] RBP: 00007f32f6f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 687.068387][T14021] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.068405][T14021] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 687.068446][T14021] [ 690.351864][T14071] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 692.896270][T14119] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 692.934380][T14119] ima: policy update failed [ 693.006754][ T30] audit: type=1802 audit(4294967299.600:20): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1357" res=0 errno=0 [ 694.405736][T14149] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 694.541533][T14142] zswap: compressor not available [ 695.077711][T14157] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 695.770111][T14164] zswap: compressor not available [ 695.853924][T14132] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 696.348151][T14179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1367'. [ 696.358471][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.365787][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.672720][T14185] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 698.383315][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 699.936006][T14230] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 702.201923][T14263] hub 8-0:1.0: USB hub found [ 702.288263][T14263] hub 8-0:1.0: 1 port detected [ 702.756003][T14258] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 705.323733][T14299] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 708.332029][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 709.371050][T14343] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1395'. [ 709.466218][T14343] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1395'. [ 710.050840][T14347] sp0: Synchronizing with TNC [ 712.210296][T14392] netlink: 'syz.4.1400': attribute type 1 has an invalid length. [ 713.469698][T14424] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 713.563151][T14416] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 716.773349][T14480] FAULT_INJECTION: forcing a failure. [ 716.773349][T14480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 716.787335][T14480] CPU: 0 UID: 0 PID: 14480 Comm: syz.1.1412 Tainted: G U syzkaller #0 PREEMPT(full) [ 716.787386][T14480] Tainted: [U]=USER [ 716.787396][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 716.787415][T14480] Call Trace: [ 716.787425][T14480] [ 716.787437][T14480] dump_stack_lvl+0x16c/0x1f0 [ 716.787475][T14480] should_fail_ex+0x512/0x640 [ 716.787532][T14480] should_fail_alloc_page+0xe7/0x130 [ 716.787573][T14480] prepare_alloc_pages+0x3c2/0x610 [ 716.787614][T14480] ? arch_stack_walk+0xa6/0x100 [ 716.787657][T14480] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 716.787700][T14480] ? stack_trace_save+0x8e/0xc0 [ 716.787740][T14480] ? __pfx_stack_trace_save+0x10/0x10 [ 716.787783][T14480] ? stack_depot_save_flags+0x29/0x9c0 [ 716.787838][T14480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 716.787874][T14480] ? kasan_save_stack+0x42/0x60 [ 716.787902][T14480] ? kasan_save_stack+0x33/0x60 [ 716.787930][T14480] ? kasan_save_track+0x14/0x30 [ 716.787958][T14480] ? __kasan_slab_alloc+0x89/0x90 [ 716.787988][T14480] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 716.788018][T14480] ? security_inode_alloc+0x3b/0x2b0 [ 716.788048][T14480] ? inode_init_always_gfp+0xce4/0x1030 [ 716.788102][T14480] ? do_syscall_64+0xcd/0x4b0 [ 716.788133][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.788176][T14480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 716.788213][T14480] ? policy_nodemask+0xea/0x4e0 [ 716.788253][T14480] alloc_pages_mpol+0x1fb/0x550 [ 716.788303][T14480] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 716.788350][T14480] ? sk_prot_alloc+0x1a8/0x2a0 [ 716.788387][T14480] ___kmalloc_large_node+0xed/0x160 [ 716.788435][T14480] ? sk_prot_alloc+0x1a8/0x2a0 [ 716.788470][T14480] __kmalloc_large_node_noprof+0x1c/0x70 [ 716.788517][T14480] __kmalloc_noprof.cold+0xc/0x61 [ 716.788575][T14480] sk_prot_alloc+0x1a8/0x2a0 [ 716.788618][T14480] sk_alloc+0x36/0xc20 [ 716.788669][T14480] can_create+0x1e5/0x630 [ 716.788726][T14480] __sock_create+0x335/0x8d0 [ 716.788776][T14480] __sys_socket+0x14d/0x260 [ 716.788820][T14480] ? __pfx___sys_socket+0x10/0x10 [ 716.788865][T14480] ? xfd_validate_state+0x61/0x180 [ 716.788914][T14480] ? __pfx_ksys_write+0x10/0x10 [ 716.788953][T14480] __x64_sys_socket+0x72/0xb0 [ 716.788994][T14480] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.789024][T14480] do_syscall_64+0xcd/0x4b0 [ 716.789059][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.789091][T14480] RIP: 0033:0x7f32f618eec9 [ 716.789116][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.789148][T14480] RSP: 002b:00007f32f6f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 716.789179][T14480] RAX: ffffffffffffffda RBX: 00007f32f63e6180 RCX: 00007f32f618eec9 [ 716.789200][T14480] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 716.789220][T14480] RBP: 00007f32f6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 716.789239][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.789259][T14480] R13: 00007f32f63e6218 R14: 00007f32f63e6180 R15: 00007ffea552ddc8 [ 716.789309][T14480] [ 717.266217][T14480] IPVS: length: 7562853 != 24 [ 721.770159][T14544] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 723.284927][T14578] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 727.594559][T14638] openvswitch: HfR: Dropping previously announced user features [ 727.641046][T14641] warning: `syz.0.1440' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 728.364465][ T30] audit: type=1804 audit(4294967302.340:21): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1441" name="/newroot/300/file0" dev="tmpfs" ino=1583 res=1 errno=0 [ 728.385834][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.095956][T14672] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 730.106133][T14684] mtrr: base(0x40000000000) is not aligned on a size(0x0000) boundary [ 730.895341][T14685] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 731.073513][T14687] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 733.329705][T14706] netlink: 'syz.0.1454': attribute type 1 has an invalid length. [ 736.193750][T14765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 736.231977][T14765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 736.248164][T14765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.248858][T14765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 736.379915][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 736.396493][T14765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 738.260027][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.260098][T10809] Bluetooth: hci1: command 0x0c1a tx timeout [ 738.260104][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 738.260372][T13509] Bluetooth: hci3: command 0x0c1a tx timeout [ 738.348054][T13509] Bluetooth: hci4: command 0x0c1a tx timeout [ 739.189782][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'. [ 739.655566][T14805] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 741.190579][T14814] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 742.059885][T14809] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 743.728811][T14860] FAULT_INJECTION: forcing a failure. [ 743.728811][T14860] name failslab, interval 1, probability 0, space 0, times 0 [ 743.797447][T14860] CPU: 0 UID: 0 PID: 14860 Comm: syz.3.1480 Tainted: G U syzkaller #0 PREEMPT(full) [ 743.797485][T14860] Tainted: [U]=USER [ 743.797492][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 743.797507][T14860] Call Trace: [ 743.797513][T14860] [ 743.797522][T14860] dump_stack_lvl+0x16c/0x1f0 [ 743.797552][T14860] should_fail_ex+0x512/0x640 [ 743.797600][T14860] ? __kmalloc_noprof+0xbf/0x510 [ 743.797626][T14860] ? lsm_blob_alloc+0x68/0x90 [ 743.797657][T14860] should_failslab+0xc2/0x120 [ 743.797683][T14860] __kmalloc_noprof+0xd2/0x510 [ 743.797711][T14860] lsm_blob_alloc+0x68/0x90 [ 743.797742][T14860] security_sk_alloc+0x30/0x270 [ 743.797765][T14860] sk_prot_alloc+0x1c7/0x2a0 [ 743.797795][T14860] sk_alloc+0x36/0xc20 [ 743.797831][T14860] can_create+0x1e5/0x630 [ 743.797870][T14860] __sock_create+0x335/0x8d0 [ 743.797905][T14860] __sys_socket+0x14d/0x260 [ 743.797935][T14860] ? __pfx___sys_socket+0x10/0x10 [ 743.797965][T14860] ? xfd_validate_state+0x61/0x180 [ 743.798000][T14860] ? __pfx_ksys_write+0x10/0x10 [ 743.798028][T14860] __x64_sys_socket+0x72/0xb0 [ 743.798057][T14860] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.798077][T14860] do_syscall_64+0xcd/0x4b0 [ 743.798102][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.798125][T14860] RIP: 0033:0x7fcda8b8eec9 [ 743.798143][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.798165][T14860] RSP: 002b:00007fcda9998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 743.798186][T14860] RAX: ffffffffffffffda RBX: 00007fcda8de6180 RCX: 00007fcda8b8eec9 [ 743.798200][T14860] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 743.798214][T14860] RBP: 00007fcda8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 743.798227][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.798241][T14860] R13: 00007fcda8de6218 R14: 00007fcda8de6180 R15: 00007fff35ae22f8 [ 743.798269][T14860] [ 744.230727][T14860] IPVS: length: 7562853 != 24 [ 744.283823][T14860] FAULT_INJECTION: forcing a failure. [ 744.283823][T14860] name failslab, interval 1, probability 0, space 0, times 0 [ 744.333705][T14860] CPU: 0 UID: 0 PID: 14860 Comm: syz.3.1480 Tainted: G U syzkaller #0 PREEMPT(full) [ 744.333761][T14860] Tainted: [U]=USER [ 744.333772][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 744.333793][T14860] Call Trace: [ 744.333804][T14860] [ 744.333816][T14860] dump_stack_lvl+0x16c/0x1f0 [ 744.333858][T14860] should_fail_ex+0x512/0x640 [ 744.333921][T14860] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 744.333975][T14860] should_failslab+0xc2/0x120 [ 744.334011][T14860] __kmalloc_cache_noprof+0x6a/0x3e0 [ 744.334064][T14860] ? pidlist_array_load+0x524/0x9c0 [ 744.334109][T14860] ? cgroup_pidlist_find+0x129/0x1c0 [ 744.334155][T14860] pidlist_array_load+0x524/0x9c0 [ 744.334204][T14860] ? __pfx_pidlist_array_load+0x10/0x10 [ 744.334248][T14860] ? __pfx___mutex_lock+0x10/0x10 [ 744.334299][T14860] ? kernfs_root+0xf8/0x2a0 [ 744.334344][T14860] cgroup_pidlist_start+0x3a3/0x4f0 [ 744.334399][T14860] ? __pfx_cgroup_seqfile_start+0x10/0x10 [ 744.334446][T14860] kernfs_seq_start+0x130/0x2a0 [ 744.334497][T14860] seq_read_iter+0x2c1/0x12c0 [ 744.334543][T14860] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 744.334591][T14860] kernfs_fop_read_iter+0x46c/0x610 [ 744.334742][T14860] copy_splice_read+0x615/0xc20 [ 744.334801][T14860] ? __pfx_copy_splice_read+0x10/0x10 [ 744.334856][T14860] ? look_up_lock_class+0x59/0x150 [ 744.334896][T14860] ? lockdep_init_map_type+0x5c/0x280 [ 744.334948][T14860] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 744.334979][T14860] ? __pfx_copy_splice_read+0x10/0x10 [ 744.335026][T14860] do_splice_read+0x285/0x370 [ 744.335078][T14860] splice_direct_to_actor+0x2a1/0xa30 [ 744.335129][T14860] ? __pfx_direct_splice_actor+0x10/0x10 [ 744.335187][T14860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 744.335236][T14860] ? get_pid_task+0xfc/0x250 [ 744.335296][T14860] do_splice_direct+0x174/0x240 [ 744.335347][T14860] ? __pfx_do_splice_direct+0x10/0x10 [ 744.335411][T14860] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 744.335468][T14860] ? rw_verify_area+0xcf/0x6c0 [ 744.335522][T14860] do_sendfile+0xb06/0xe50 [ 744.335581][T14860] ? __pfx_do_sendfile+0x10/0x10 [ 744.335633][T14860] ? __fget_files+0x20e/0x3c0 [ 744.335694][T14860] __x64_sys_sendfile64+0x1d8/0x220 [ 744.335727][T14860] ? ksys_write+0x1ac/0x250 [ 744.335748][T14860] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 744.335785][T14860] do_syscall_64+0xcd/0x4b0 [ 744.335811][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.335834][T14860] RIP: 0033:0x7fcda8b8eec9 [ 744.335852][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.335875][T14860] RSP: 002b:00007fcda9998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 744.335897][T14860] RAX: ffffffffffffffda RBX: 00007fcda8de6180 RCX: 00007fcda8b8eec9 [ 744.335913][T14860] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 744.335927][T14860] RBP: 00007fcda9998090 R08: 0000000000000000 R09: 0000000000000000 [ 744.335941][T14860] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 744.335955][T14860] R13: 00007fcda8de6218 R14: 00007fcda8de6180 R15: 00007fff35ae22f8 [ 744.335985][T14860] [ 745.313806][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 745.353763][T14873] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1482'. [ 746.165497][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'. [ 746.174630][T14893] nbd: must specify a device to reconfigure [ 746.869197][T14885] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 748.739947][T14894] netlink: 'syz.0.1483': attribute type 1 has an invalid length. [ 749.252628][T14914] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 750.505634][T14941] FAULT_INJECTION: forcing a failure. [ 750.505634][T14941] name failslab, interval 1, probability 0, space 0, times 0 [ 750.612419][T14941] CPU: 0 UID: 0 PID: 14941 Comm: syz.4.1494 Tainted: G U syzkaller #0 PREEMPT(full) [ 750.612457][T14941] Tainted: [U]=USER [ 750.612466][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 750.612481][T14941] Call Trace: [ 750.612490][T14941] [ 750.612499][T14941] dump_stack_lvl+0x16c/0x1f0 [ 750.612528][T14941] should_fail_ex+0x512/0x640 [ 750.612565][T14941] ? __kvmalloc_node_noprof+0x124/0x620 [ 750.612607][T14941] should_failslab+0xc2/0x120 [ 750.612633][T14941] __kvmalloc_node_noprof+0x137/0x620 [ 750.612673][T14941] ? io_alloc_cache_init+0x33/0x170 [ 750.612714][T14941] ? io_alloc_cache_init+0x33/0x170 [ 750.612748][T14941] io_alloc_cache_init+0x33/0x170 [ 750.612785][T14941] io_uring_setup+0x61a/0x20c0 [ 750.612820][T14941] ? __pfx_io_uring_setup+0x10/0x10 [ 750.612849][T14941] ? rcu_is_watching+0x12/0xc0 [ 750.612877][T14941] ? irqentry_exit+0x3b/0x90 [ 750.612898][T14941] ? lockdep_hardirqs_on+0x7c/0x110 [ 750.612936][T14941] ? ksys_write+0x1ac/0x250 [ 750.612958][T14941] ? __pfx_ksys_write+0x10/0x10 [ 750.612987][T14941] __x64_sys_io_uring_setup+0xc2/0x170 [ 750.613019][T14941] do_syscall_64+0xcd/0x4b0 [ 750.613046][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.613070][T14941] RIP: 0033:0x7f3c7798eec9 [ 750.613089][T14941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.613113][T14941] RSP: 002b:00007f3c7875d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 750.613143][T14941] RAX: ffffffffffffffda RBX: 00007f3c77be5fa0 RCX: 00007f3c7798eec9 [ 750.613160][T14941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 750.613175][T14941] RBP: 00007f3c7875d090 R08: 0000000000000000 R09: 0000000000000000 [ 750.613190][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.613205][T14941] R13: 00007f3c77be6038 R14: 00007f3c77be5fa0 R15: 00007ffd57e64a08 [ 750.613235][T14941] [ 751.260059][T14952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 752.065110][T14968] block nbd7: not configured, cannot reconfigure [ 754.852488][T14994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 754.858804][T14994] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 754.865373][T14994] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.872143][T14994] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 754.886094][T14994] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 755.619586][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 756.725009][T15049] netlink: 'syz.4.1508': attribute type 1 has an invalid length. [ 756.910705][T13509] Bluetooth: hci2: command 0x0c1a tx timeout [ 756.917270][T10809] Bluetooth: hci3: command 0x0c1a tx timeout [ 756.917272][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 756.939519][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 757.794691][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.809413][ T5158] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 757.816953][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.089243][T15097] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 764.000992][T15165] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 765.731072][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1533'. [ 766.206134][T15213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1535'. [ 766.951218][T15238] FAULT_INJECTION: forcing a failure. [ 766.951218][T15238] name failslab, interval 1, probability 0, space 0, times 0 [ 767.030415][T15238] CPU: 1 UID: 0 PID: 15238 Comm: syz.3.1537 Tainted: G U syzkaller #0 PREEMPT(full) [ 767.030461][T15238] Tainted: [U]=USER [ 767.030472][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.030490][T15238] Call Trace: [ 767.030499][T15238] [ 767.030509][T15238] dump_stack_lvl+0x16c/0x1f0 [ 767.030545][T15238] should_fail_ex+0x512/0x640 [ 767.030591][T15238] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 767.030624][T15238] should_failslab+0xc2/0x120 [ 767.030659][T15238] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 767.030689][T15238] ? __alloc_skb+0x2b2/0x380 [ 767.030742][T15238] __alloc_skb+0x2b2/0x380 [ 767.030788][T15238] ? __pfx___alloc_skb+0x10/0x10 [ 767.030836][T15238] ? __lock_acquire+0x530/0x1ce0 [ 767.030890][T15238] alloc_skb_with_frags+0xe0/0x860 [ 767.030934][T15238] sock_alloc_send_pskb+0x7f9/0x980 [ 767.031001][T15238] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 767.031050][T15238] ? find_held_lock+0x2b/0x80 [ 767.031085][T15238] ? sock_def_readable+0x1d9/0x600 [ 767.031142][T15238] unix_dgram_sendmsg+0x3e9/0x17e0 [ 767.031182][T15238] ? tomoyo_socket_sendmsg_permission+0x14c/0x3c0 [ 767.031224][T15238] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 767.031259][T15238] ? iovec_from_user+0xbb/0x140 [ 767.031292][T15238] ? __import_iovec+0x1dd/0x650 [ 767.031327][T15238] ? __might_fault+0xe3/0x190 [ 767.031354][T15238] ? __might_fault+0x13b/0x190 [ 767.031386][T15238] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 767.031424][T15238] ____sys_sendmsg+0xa95/0xc70 [ 767.031470][T15238] ? copy_msghdr_from_user+0x10a/0x160 [ 767.031501][T15238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.031544][T15238] ? kfree+0x24f/0x4d0 [ 767.031601][T15238] ? __pfx__kstrtoull+0x10/0x10 [ 767.031648][T15238] ___sys_sendmsg+0x134/0x1d0 [ 767.031683][T15238] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.031752][T15238] ? __pfx___might_resched+0x10/0x10 [ 767.031800][T15238] __sys_sendmmsg+0x200/0x420 [ 767.031837][T15238] ? __pfx___sys_sendmmsg+0x10/0x10 [ 767.031890][T15238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 767.031939][T15238] ? fput+0x9b/0xd0 [ 767.031976][T15238] ? ksys_write+0x1ac/0x250 [ 767.032011][T15238] ? __pfx_ksys_write+0x10/0x10 [ 767.032049][T15238] __x64_sys_sendmmsg+0x9c/0x100 [ 767.032079][T15238] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.032108][T15238] do_syscall_64+0xcd/0x4b0 [ 767.032143][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.032174][T15238] RIP: 0033:0x7fcda8b8eec9 [ 767.032199][T15238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.032229][T15238] RSP: 002b:00007fcda9998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 767.032257][T15238] RAX: ffffffffffffffda RBX: 00007fcda8de6180 RCX: 00007fcda8b8eec9 [ 767.032277][T15238] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 767.032296][T15238] RBP: 00007fcda9998090 R08: 0000000000000000 R09: 0000000000000000 [ 767.032315][T15238] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 767.032334][T15238] R13: 00007fcda8de6218 R14: 00007fcda8de6180 R15: 00007fff35ae22f8 [ 767.032373][T15238] [ 767.455818][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 767.466772][T15231] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1539'. [ 768.186431][T15216] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 768.401649][T15265] FAULT_INJECTION: forcing a failure. [ 768.401649][T15265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.415564][T15265] CPU: 1 UID: 0 PID: 15265 Comm: syz.3.1544 Tainted: G U syzkaller #0 PREEMPT(full) [ 768.415612][T15265] Tainted: [U]=USER [ 768.415623][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.415651][T15265] Call Trace: [ 768.415663][T15265] [ 768.415676][T15265] dump_stack_lvl+0x16c/0x1f0 [ 768.415715][T15265] should_fail_ex+0x512/0x640 [ 768.415771][T15265] _copy_from_user+0x2e/0xd0 [ 768.415803][T15265] trace_parse_run_command+0xbe/0x400 [ 768.415834][T15265] ? __pfx_create_dyn_event+0x10/0x10 [ 768.415878][T15265] ? __pfx_dyn_event_write+0x10/0x10 [ 768.415915][T15265] vfs_write+0x29d/0x11d0 [ 768.415953][T15265] ? __pfx___mutex_lock+0x10/0x10 [ 768.415986][T15265] ? __pfx_vfs_write+0x10/0x10 [ 768.416029][T15265] ? __fget_files+0x20e/0x3c0 [ 768.416093][T15265] ksys_write+0x12a/0x250 [ 768.416124][T15265] ? __pfx_ksys_write+0x10/0x10 [ 768.416168][T15265] do_syscall_64+0xcd/0x4b0 [ 768.416204][T15265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.416237][T15265] RIP: 0033:0x7fcda8b8eec9 [ 768.416263][T15265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.416296][T15265] RSP: 002b:00007fcda99da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.416326][T15265] RAX: ffffffffffffffda RBX: 00007fcda8de5fa0 RCX: 00007fcda8b8eec9 [ 768.416348][T15265] RDX: 000000000000002b RSI: 00002000000002c0 RDI: 0000000000000003 [ 768.416370][T15265] RBP: 00007fcda99da090 R08: 0000000000000000 R09: 0000000000000000 [ 768.416390][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.416410][T15265] R13: 00007fcda8de6038 R14: 00007fcda8de5fa0 R15: 00007fff35ae22f8 [ 768.416453][T15265] [ 771.958084][T15292] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 772.783755][T15303] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 774.859984][T15347] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 775.482660][T15351] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 775.564004][T15342] zswap: compressor not available [ 776.861105][T15368] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 778.435821][T15406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'. [ 780.408042][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 781.050594][T15425] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 784.179650][T15488] FAULT_INJECTION: forcing a failure. [ 784.179650][T15488] name failslab, interval 1, probability 0, space 0, times 0 [ 784.197035][T15488] CPU: 0 UID: 0 PID: 15488 Comm: syz.1.1578 Tainted: G U syzkaller #0 PREEMPT(full) [ 784.197089][T15488] Tainted: [U]=USER [ 784.197101][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 784.197123][T15488] Call Trace: [ 784.197135][T15488] [ 784.197149][T15488] dump_stack_lvl+0x16c/0x1f0 [ 784.197193][T15488] should_fail_ex+0x512/0x640 [ 784.197249][T15488] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 784.197291][T15488] should_failslab+0xc2/0x120 [ 784.197331][T15488] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 784.197370][T15488] ? __d_alloc+0x32/0xae0 [ 784.197411][T15488] __d_alloc+0x32/0xae0 [ 784.197452][T15488] d_alloc_pseudo+0x1c/0xc0 [ 784.197498][T15488] alloc_file_pseudo+0xcf/0x230 [ 784.197548][T15488] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 784.197609][T15488] __shmem_file_setup+0x1a3/0x330 [ 784.197667][T15488] shmem_zero_setup+0x93/0x1a0 [ 784.197706][T15488] __mmap_region+0x2081/0x27b0 [ 784.197745][T15488] ? finish_task_switch.isra.0+0x21c/0xc10 [ 784.197797][T15488] ? __pfx___mmap_region+0x10/0x10 [ 784.197832][T15488] ? rcu_is_watching+0x12/0xc0 [ 784.197884][T15488] ? rcu_is_watching+0x12/0xc0 [ 784.197925][T15488] ? trace_sched_exit_tp+0xd1/0x120 [ 784.197962][T15488] ? __schedule+0x11a3/0x5de0 [ 784.198015][T15488] ? __lock_acquire+0x62e/0x1ce0 [ 784.198092][T15488] ? __pfx___schedule+0x10/0x10 [ 784.198196][T15488] ? trace_cap_capable+0x18d/0x200 [ 784.198268][T15488] mmap_region+0x1ab/0x3f0 [ 784.198304][T15488] ? __get_unmapped_area+0x267/0x440 [ 784.198353][T15488] do_mmap+0xa3e/0x1210 [ 784.198431][T15488] ? __pfx_do_mmap+0x10/0x10 [ 784.198478][T15488] ? __pfx_down_write_killable+0x10/0x10 [ 784.198538][T15488] vm_mmap_pgoff+0x29e/0x470 [ 784.198591][T15488] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 784.198647][T15488] ? __x64_sys_futex+0x1e0/0x4c0 [ 784.198697][T15488] ? __x64_sys_futex+0x1e9/0x4c0 [ 784.198754][T15488] ksys_mmap_pgoff+0x7d/0x5c0 [ 784.198806][T15488] ? syscall_user_dispatch+0x78/0x140 [ 784.198849][T15488] __x64_sys_mmap+0x125/0x190 [ 784.198889][T15488] do_syscall_64+0xcd/0x4b0 [ 784.198929][T15488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.198966][T15488] RIP: 0033:0x7f32f618eec9 [ 784.198994][T15488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.199030][T15488] RSP: 002b:00007f32f6f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 784.199063][T15488] RAX: ffffffffffffffda RBX: 00007f32f63e6090 RCX: 00007f32f618eec9 [ 784.199087][T15488] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 784.199109][T15488] RBP: 00007f32f6211f91 R08: fffffffffffffffa R09: 0000000000008000 [ 784.199132][T15488] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 784.199155][T15488] R13: 00007f32f63e6128 R14: 00007f32f63e6090 R15: 00007ffea552ddc8 [ 784.199199][T15488] [ 784.556451][T15493] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 786.330662][T15519] block nbd0: not configured, cannot reconfigure [ 790.265719][T15579] zswap: compressor not available [ 792.156098][T15606] block nbd0: not configured, cannot reconfigure [ 792.690392][T15601] netlink: 'syz.3.1596': attribute type 1 has an invalid length. [ 793.613692][T15634] block nbd0: not configured, cannot reconfigure [ 794.473605][T15630] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 794.698712][T15650] Console: switching to colour VGA+ 80x25 [ 795.304792][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1607'. [ 797.995397][T15685] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 798.022283][T15679] netlink: 'syz.3.1612': attribute type 1 has an invalid length. [ 800.997484][T15744] CIFS: VFS: Invalid SecurityFlags: [ 801.312972][T15753] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 801.553397][T15750] zswap: compressor not available [ 801.677454][T15756] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 802.023396][T15765] FAULT_INJECTION: forcing a failure. [ 802.023396][T15765] name failslab, interval 1, probability 0, space 0, times 0 [ 802.060841][T15765] CPU: 0 UID: 0 PID: 15765 Comm: syz.0.1629 Tainted: G U syzkaller #0 PREEMPT(full) [ 802.060899][T15765] Tainted: [U]=USER [ 802.060910][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 802.060929][T15765] Call Trace: [ 802.060958][T15765] [ 802.060971][T15765] dump_stack_lvl+0x16c/0x1f0 [ 802.061011][T15765] should_fail_ex+0x512/0x640 [ 802.061062][T15765] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 802.061100][T15765] should_failslab+0xc2/0x120 [ 802.061138][T15765] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 802.061172][T15765] ? ptlock_alloc+0x1f/0x70 [ 802.061228][T15765] ptlock_alloc+0x1f/0x70 [ 802.061276][T15765] pte_alloc_one+0x82/0x3a0 [ 802.061319][T15765] do_pte_missing+0x1afc/0x3ba0 [ 802.061372][T15765] ? do_raw_spin_unlock+0x172/0x230 [ 802.061410][T15765] ? __pmd_alloc+0x3fb/0x930 [ 802.061457][T15765] __handle_mm_fault+0x152a/0x2a50 [ 802.061518][T15765] ? mt_find+0x3ef/0xa30 [ 802.061559][T15765] ? __pfx___handle_mm_fault+0x10/0x10 [ 802.061607][T15765] ? __pfx_mt_find+0x10/0x10 [ 802.061669][T15765] ? find_vma+0xbf/0x140 [ 802.061705][T15765] ? __pfx_find_vma+0x10/0x10 [ 802.061748][T15765] handle_mm_fault+0x589/0xd10 [ 802.061800][T15765] ? __pkru_allows_pkey+0x31/0xb0 [ 802.061838][T15765] do_user_addr_fault+0x7a6/0x1370 [ 802.061878][T15765] ? rcu_is_watching+0x12/0xc0 [ 802.061922][T15765] exc_page_fault+0x5c/0xb0 [ 802.061977][T15765] asm_exc_page_fault+0x26/0x30 [ 802.062009][T15765] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 802.062057][T15765] Code: 23 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 802.062089][T15765] RSP: 0018:ffffc900176177d0 EFLAGS: 00050206 [ 802.062116][T15765] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 802.062137][T15765] RDX: ffffed1006843819 RSI: 0000000000000000 RDI: ffff88803421c000 [ 802.062160][T15765] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006843818 [ 802.062181][T15765] R10: ffff88803421c0c3 R11: 0000000000000000 R12: ffffc90017617d60 [ 802.062204][T15765] R13: 00000000000000c4 R14: ffff88803421c000 R15: 00007ffffffff000 [ 802.062248][T15765] _copy_from_iter+0x383/0x1720 [ 802.062310][T15765] ? __alloc_skb+0x200/0x380 [ 802.062364][T15765] ? __pfx__copy_from_iter+0x10/0x10 [ 802.062423][T15765] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 802.062457][T15765] ? __lock_acquire+0xb97/0x1ce0 [ 802.062523][T15765] netlink_sendmsg+0x829/0xdd0 [ 802.062568][T15765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.062610][T15765] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 802.062671][T15765] ____sys_sendmsg+0xa95/0xc70 [ 802.062716][T15765] ? copy_msghdr_from_user+0x10a/0x160 [ 802.062750][T15765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.062800][T15765] ? __pfx__kstrtoull+0x10/0x10 [ 802.062850][T15765] ___sys_sendmsg+0x134/0x1d0 [ 802.062888][T15765] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.062943][T15765] ? find_held_lock+0x2b/0x80 [ 802.063008][T15765] __sys_sendmmsg+0x200/0x420 [ 802.063046][T15765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 802.063095][T15765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 802.063149][T15765] ? fput+0x9b/0xd0 [ 802.063190][T15765] ? ksys_write+0x1ac/0x250 [ 802.063222][T15765] ? __pfx_ksys_write+0x10/0x10 [ 802.063262][T15765] __x64_sys_sendmmsg+0x9c/0x100 [ 802.063296][T15765] ? lockdep_hardirqs_on+0x7c/0x110 [ 802.063326][T15765] do_syscall_64+0xcd/0x4b0 [ 802.063363][T15765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.063394][T15765] RIP: 0033:0x7f271458eec9 [ 802.063421][T15765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.063453][T15765] RSP: 002b:00007f2715458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 802.063483][T15765] RAX: ffffffffffffffda RBX: 00007f27147e5fa0 RCX: 00007f271458eec9 [ 802.063513][T15765] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 802.063534][T15765] RBP: 00007f2715458090 R08: 0000000000000000 R09: 0000000000000000 [ 802.063556][T15765] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.063578][T15765] R13: 00007f27147e6038 R14: 00007f27147e5fa0 R15: 00007ffe5b32e608 [ 802.063622][T15765] [ 805.603651][T15769] nfsd: Unknown parameter 'TšR‚Ð!' [ 805.635447][T15778] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 808.079515][T15803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 808.085897][T15803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 808.092016][T15803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 808.097969][T15803] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 808.118172][T15803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 808.140169][T15803] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 809.949643][T10809] Bluetooth: hci0: command 0x0c1a tx timeout [ 810.179478][T10809] Bluetooth: hci1: command 0x0c1a tx timeout [ 810.186401][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 810.186471][T13509] Bluetooth: hci2: command 0x0c1a tx timeout [ 810.192507][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 810.544117][T15850] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 812.260180][T13509] Bluetooth: hci3: command 0x0c1a tx timeout [ 813.994464][T15912] futex_wake_op: syz.1.1659 tries to shift op by -9; fix this program [ 814.202696][T15916] FAULT_INJECTION: forcing a failure. [ 814.202696][T15916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.279496][T15916] CPU: 1 UID: 0 PID: 15916 Comm: syz.4.1661 Tainted: G U syzkaller #0 PREEMPT(full) [ 814.279538][T15916] Tainted: [U]=USER [ 814.279546][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.279559][T15916] Call Trace: [ 814.279568][T15916] [ 814.279576][T15916] dump_stack_lvl+0x16c/0x1f0 [ 814.279604][T15916] should_fail_ex+0x512/0x640 [ 814.279644][T15916] _copy_to_user+0x32/0xd0 [ 814.279667][T15916] simple_read_from_buffer+0xcb/0x170 [ 814.279704][T15916] proc_fail_nth_read+0x197/0x240 [ 814.279744][T15916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.279784][T15916] ? rw_verify_area+0xcf/0x6c0 [ 814.279817][T15916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.279854][T15916] vfs_read+0x1e4/0xcf0 [ 814.279880][T15916] ? __pfx___mutex_lock+0x10/0x10 [ 814.279904][T15916] ? __pfx_vfs_read+0x10/0x10 [ 814.279933][T15916] ? __fget_files+0x20e/0x3c0 [ 814.279977][T15916] ksys_read+0x12a/0x250 [ 814.279998][T15916] ? __pfx_ksys_read+0x10/0x10 [ 814.280027][T15916] do_syscall_64+0xcd/0x4b0 [ 814.280054][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.280077][T15916] RIP: 0033:0x7f3c7798d8dc [ 814.280095][T15916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 814.280118][T15916] RSP: 002b:00007f3c7875d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 814.280141][T15916] RAX: ffffffffffffffda RBX: 00007f3c77be5fa0 RCX: 00007f3c7798d8dc [ 814.280163][T15916] RDX: 000000000000000f RSI: 00007f3c7875d0a0 RDI: 0000000000000004 [ 814.280183][T15916] RBP: 00007f3c7875d090 R08: 0000000000000000 R09: 0000000000000000 [ 814.280203][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 814.280218][T15916] R13: 00007f3c77be6038 R14: 00007f3c77be5fa0 R15: 00007ffd57e64a08 [ 814.280248][T15916] [ 814.830100][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 815.569946][T15940] FAULT_INJECTION: forcing a failure. [ 815.569946][T15940] name failslab, interval 1, probability 0, space 0, times 0 [ 815.630665][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.0.1668 Tainted: G U syzkaller #0 PREEMPT(full) [ 815.630719][T15940] Tainted: [U]=USER [ 815.630731][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 815.630752][T15940] Call Trace: [ 815.630763][T15940] [ 815.630777][T15940] dump_stack_lvl+0x16c/0x1f0 [ 815.630818][T15940] should_fail_ex+0x512/0x640 [ 815.630869][T15940] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 815.630907][T15940] should_failslab+0xc2/0x120 [ 815.630945][T15940] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 815.630980][T15940] ? acpi_ut_create_thread_state+0x63/0x170 [ 815.631031][T15940] acpi_ut_create_thread_state+0x63/0x170 [ 815.631076][T15940] acpi_ps_parse_aml+0x79/0xcb0 [ 815.631131][T15940] acpi_ps_execute_method+0x55a/0xb30 [ 815.631186][T15940] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 815.631225][T15940] acpi_ns_evaluate+0x76c/0xca0 [ 815.631279][T15940] ? kasan_save_track+0x14/0x30 [ 815.631315][T15940] acpi_evaluate_object+0x1fa/0xa90 [ 815.631372][T15940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.631410][T15940] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 815.631455][T15940] ? __mutex_trylock_common+0xe9/0x250 [ 815.631515][T15940] acpi_evaluate_integer+0xdd/0x200 [ 815.631555][T15940] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 815.631613][T15940] ? __pfx_status_show+0x10/0x10 [ 815.631658][T15940] status_show+0xa0/0x120 [ 815.631700][T15940] ? __pfx_status_show+0x10/0x10 [ 815.631756][T15940] dev_attr_show+0x56/0xe0 [ 815.631793][T15940] ? __pfx_dev_attr_show+0x10/0x10 [ 815.631826][T15940] sysfs_kf_seq_show+0x213/0x3e0 [ 815.631867][T15940] seq_read_iter+0x509/0x12c0 [ 815.631932][T15940] kernfs_fop_read_iter+0x46c/0x610 [ 815.631984][T15940] ? rw_verify_area+0xcf/0x6c0 [ 815.632036][T15940] vfs_read+0x8bf/0xcf0 [ 815.632072][T15940] ? __pfx___mutex_lock+0x10/0x10 [ 815.632107][T15940] ? __pfx_vfs_read+0x10/0x10 [ 815.632165][T15940] ksys_read+0x12a/0x250 [ 815.632195][T15940] ? __pfx_ksys_read+0x10/0x10 [ 815.632240][T15940] do_syscall_64+0xcd/0x4b0 [ 815.632276][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.632309][T15940] RIP: 0033:0x7f271458eec9 [ 815.632344][T15940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.632377][T15940] RSP: 002b:00007f2715458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 815.632407][T15940] RAX: ffffffffffffffda RBX: 00007f27147e5fa0 RCX: 00007f271458eec9 [ 815.632430][T15940] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 815.632452][T15940] RBP: 00007f2714611f91 R08: 0000000000000000 R09: 0000000000000000 [ 815.632473][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.632501][T15940] R13: 00007f27147e6038 R14: 00007f27147e5fa0 R15: 00007ffe5b32e608 [ 815.632545][T15940] [ 815.632619][T15940] ACPI Error: [ 815.690761][T15948] net_ratelimit: 1 callbacks suppressed [ 815.690792][T15948] netlink: zone id is out of range [ 815.893514][T15940] ffff888040220000 walk still has a scope list [ 815.963229][T15955] FAULT_INJECTION: forcing a failure. [ 815.963229][T15955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.969918][T15940] (20250807/dswstate-694) [ 816.038316][T15948] netlink: zone id is out of range [ 816.091923][T15955] CPU: 0 UID: 0 PID: 15955 Comm: syz.4.1670 Tainted: G U syzkaller #0 PREEMPT(full) [ 816.091963][T15955] Tainted: [U]=USER [ 816.091971][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 816.091986][T15955] Call Trace: [ 816.091994][T15955] [ 816.092004][T15955] dump_stack_lvl+0x16c/0x1f0 [ 816.092034][T15955] should_fail_ex+0x512/0x640 [ 816.092076][T15955] _copy_from_iter+0x29f/0x1720 [ 816.092116][T15955] ? kernel_fpu_begin_mask+0x17f/0x2a0 [ 816.092148][T15955] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 816.092180][T15955] ? __pfx__copy_from_iter+0x10/0x10 [ 816.092216][T15955] ? do_raw_spin_lock+0x12c/0x2b0 [ 816.092241][T15955] ? find_held_lock+0x2b/0x80 [ 816.092270][T15955] ? rcu_is_watching+0x12/0xc0 [ 816.092296][T15955] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 816.092338][T15955] write_pool_user+0xe8/0x2f0 [ 816.092372][T15955] ? __pfx_write_pool_user+0x10/0x10 [ 816.092402][T15955] ? bpf_lsm_file_permission+0x9/0x10 [ 816.092432][T15955] ? security_file_permission+0x71/0x210 [ 816.092462][T15955] ? rw_verify_area+0xcf/0x6c0 [ 816.092499][T15955] vfs_write+0x7d0/0x11d0 [ 816.092523][T15955] ? __pfx_random_write_iter+0x10/0x10 [ 816.092551][T15955] ? __pfx_vfs_write+0x10/0x10 [ 816.092571][T15955] ? find_held_lock+0x2b/0x80 [ 816.092615][T15955] ksys_write+0x12a/0x250 [ 816.092637][T15955] ? __pfx_ksys_write+0x10/0x10 [ 816.092671][T15955] do_syscall_64+0xcd/0x4b0 [ 816.092699][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.092723][T15955] RIP: 0033:0x7f3c7798eec9 [ 816.092742][T15955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.092765][T15955] RSP: 002b:00007f3c7875d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 816.092787][T15955] RAX: ffffffffffffffda RBX: 00007f3c77be5fa0 RCX: 00007f3c7798eec9 [ 816.092803][T15955] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 816.092818][T15955] RBP: 00007f3c7875d090 R08: 0000000000000000 R09: 0000000000000000 [ 816.092833][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.092847][T15955] R13: 00007f3c77be6038 R14: 00007f3c77be5fa0 R15: 00007ffd57e64a08 [ 816.092878][T15955] [ 816.094769][T15948] netlink: zone id is out of range [ 816.329912][T15948] netlink: zone id is out of range [ 816.335078][T15948] netlink: zone id is out of range [ 816.363327][T15948] netlink: zone id is out of range [ 816.368630][T15948] netlink: zone id is out of range [ 816.393423][T15948] netlink: zone id is out of range [ 816.398610][T15948] netlink: zone id is out of range [ 816.459519][T15948] netlink: zone id is out of range [ 816.654364][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 819.259140][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.309454][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.701805][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1682'. [ 819.774006][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 820.070490][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 822.003533][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 822.056829][T16047] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1695'. [ 822.311574][T16035] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 823.026842][T16064] FAULT_INJECTION: forcing a failure. [ 823.026842][T16064] name failslab, interval 1, probability 0, space 0, times 0 [ 823.049422][T16064] CPU: 1 UID: 0 PID: 16064 Comm: syz.3.1697 Tainted: G U syzkaller #0 PREEMPT(full) [ 823.049468][T16064] Tainted: [U]=USER [ 823.049476][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 823.049491][T16064] Call Trace: [ 823.049499][T16064] [ 823.049509][T16064] dump_stack_lvl+0x16c/0x1f0 [ 823.049537][T16064] should_fail_ex+0x512/0x640 [ 823.049575][T16064] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 823.049602][T16064] should_failslab+0xc2/0x120 [ 823.049629][T16064] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 823.049651][T16064] ? acpi_evaluate_integer+0xdd/0x200 [ 823.049677][T16064] ? status_show+0xa0/0x120 [ 823.049707][T16064] ? dev_attr_show+0x56/0xe0 [ 823.049730][T16064] ? acpi_ps_alloc_op+0x25f/0x310 [ 823.049765][T16064] ? vfs_read+0x8bf/0xcf0 [ 823.049788][T16064] acpi_ps_alloc_op+0x25f/0x310 [ 823.049822][T16064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.049848][T16064] acpi_ps_create_op+0x3dc/0xc20 [ 823.049884][T16064] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 823.049929][T16064] acpi_ps_parse_loop+0xdd8/0x1d00 [ 823.049970][T16064] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 823.050001][T16064] ? trace_kmem_cache_alloc+0x28/0xc0 [ 823.050034][T16064] ? acpi_ut_create_thread_state+0x63/0x170 [ 823.050078][T16064] acpi_ps_parse_aml+0x3c1/0xcb0 [ 823.050119][T16064] acpi_ps_execute_method+0x55a/0xb30 [ 823.050158][T16064] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 823.050186][T16064] acpi_ns_evaluate+0x76c/0xca0 [ 823.050227][T16064] ? kasan_save_track+0x14/0x30 [ 823.050253][T16064] acpi_evaluate_object+0x1fa/0xa90 [ 823.050287][T16064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.050314][T16064] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 823.050345][T16064] ? __mutex_trylock_common+0xe9/0x250 [ 823.050387][T16064] acpi_evaluate_integer+0xdd/0x200 [ 823.050415][T16064] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 823.050456][T16064] ? __pfx_status_show+0x10/0x10 [ 823.050488][T16064] status_show+0xa0/0x120 [ 823.050521][T16064] ? __pfx_status_show+0x10/0x10 [ 823.050562][T16064] dev_attr_show+0x56/0xe0 [ 823.050587][T16064] ? __pfx_dev_attr_show+0x10/0x10 [ 823.050610][T16064] sysfs_kf_seq_show+0x213/0x3e0 [ 823.050645][T16064] seq_read_iter+0x509/0x12c0 [ 823.050693][T16064] kernfs_fop_read_iter+0x46c/0x610 [ 823.050733][T16064] ? rw_verify_area+0xcf/0x6c0 [ 823.050771][T16064] vfs_read+0x8bf/0xcf0 [ 823.050797][T16064] ? __pfx___mutex_lock+0x10/0x10 [ 823.050822][T16064] ? __pfx_vfs_read+0x10/0x10 [ 823.050882][T16064] ksys_read+0x12a/0x250 [ 823.050904][T16064] ? __pfx_ksys_read+0x10/0x10 [ 823.050936][T16064] do_syscall_64+0xcd/0x4b0 [ 823.050968][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.050993][T16064] RIP: 0033:0x7fcda8b8eec9 [ 823.051013][T16064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.051037][T16064] RSP: 002b:00007fcda99da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 823.051059][T16064] RAX: ffffffffffffffda RBX: 00007fcda8de5fa0 RCX: 00007fcda8b8eec9 [ 823.051082][T16064] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 823.051098][T16064] RBP: 00007fcda8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 823.051113][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.051127][T16064] R13: 00007fcda8de6038 R14: 00007fcda8de5fa0 R15: 00007fff35ae22f8 [ 823.051159][T16064] [ 823.051557][T16064] ACPI Error: [ 823.477568][T16065] net_ratelimit: 1 callbacks suppressed [ 823.477589][T16065] netlink: zone id is out of range [ 823.493439][T16046] FAULT_INJECTION: forcing a failure. [ 823.493439][T16046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.544451][T16065] netlink: zone id is out of range [ 823.609543][T16065] netlink: zone id is out of range [ 823.662486][T16046] CPU: 1 UID: 0 PID: 16046 Comm: syz.4.1694 Tainted: G U syzkaller #0 PREEMPT(full) [ 823.662539][T16046] Tainted: [U]=USER [ 823.662551][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 823.662570][T16046] Call Trace: [ 823.662581][T16046] [ 823.662594][T16046] dump_stack_lvl+0x16c/0x1f0 [ 823.662632][T16046] should_fail_ex+0x512/0x640 [ 823.662686][T16046] should_fail_alloc_page+0xe7/0x130 [ 823.662756][T16046] prepare_alloc_pages+0x3c2/0x610 [ 823.662800][T16046] ? kasan_save_stack+0x42/0x60 [ 823.662830][T16046] ? kasan_save_stack+0x33/0x60 [ 823.662864][T16046] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 823.662898][T16046] ? swapin_readahead+0x13a/0xd60 [ 823.662945][T16046] ? __handle_mm_fault+0x1719/0x2a50 [ 823.663003][T16046] ? __lock_acquire+0x62e/0x1ce0 [ 823.663060][T16046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 823.663115][T16046] ? filemap_get_entry+0x1a7/0x3b0 [ 823.663151][T16046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.663190][T16046] ? policy_nodemask+0xea/0x4e0 [ 823.663229][T16046] alloc_pages_mpol+0x1fb/0x550 [ 823.663270][T16046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 823.663306][T16046] ? _raw_spin_unlock+0x28/0x50 [ 823.663353][T16046] ? swap_entry_swapped+0x122/0x190 [ 823.663389][T16046] ? __pfx_swap_entry_swapped+0x10/0x10 [ 823.663401][T16064] Aborting method [ 823.663431][T16046] folio_alloc_mpol_noprof+0x36/0x2f0 [ 823.663484][T16046] __read_swap_cache_async+0x3b6/0x5a0 [ 823.663556][T16046] ? __pfx___read_swap_cache_async+0x10/0x10 [ 823.663612][T16046] ? swp_swap_info+0xce/0x130 [ 823.663656][T16046] ? __pfx_swp_swap_info+0x10/0x10 [ 823.663712][T16046] swap_cluster_readahead+0x3eb/0x710 [ 823.663796][T16046] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 823.663888][T16046] ? get_vma_policy+0x242/0x3c0 [ 823.663952][T16046] swapin_readahead+0x13a/0xd60 [ 823.664025][T16046] ? __pfx_swapin_readahead+0x10/0x10 [ 823.664079][T16046] ? __filemap_get_folio+0x32b/0xc30 [ 823.664132][T16046] ? swap_cache_get_folio+0x1df/0x450 [ 823.664192][T16046] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 823.664246][T16046] ? __pfx_get_swap_device+0x10/0x10 [ 823.664288][T16046] ? do_swap_page+0x12e/0x6600 [ 823.664361][T16046] do_swap_page+0x5c7/0x6600 [ 823.664415][T16046] ? __lock_acquire+0x62e/0x1ce0 [ 823.664487][T16046] ? __pfx_do_swap_page+0x10/0x10 [ 823.664541][T16046] ? __pfx_default_wake_function+0x10/0x10 [ 823.664591][T16046] ? __lock_acquire+0x62e/0x1ce0 [ 823.664652][T16046] ? rcu_is_watching+0x12/0xc0 [ 823.664698][T16046] ? ___pte_offset_map+0x2ad/0x4f0 [ 823.664761][T16046] __handle_mm_fault+0x1719/0x2a50 [ 823.664837][T16046] ? __pfx___handle_mm_fault+0x10/0x10 [ 823.664901][T16046] ? lock_vma_under_rcu+0x1eb/0x530 [ 823.664977][T16046] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 823.665051][T16046] handle_mm_fault+0x589/0xd10 [ 823.665111][T16046] ? __pkru_allows_pkey+0x31/0xb0 [ 823.665154][T16046] do_user_addr_fault+0x60c/0x1370 [ 823.665201][T16046] ? rcu_is_watching+0x12/0xc0 [ 823.665252][T16046] exc_page_fault+0x5c/0xb0 [ 823.665315][T16046] asm_exc_page_fault+0x26/0x30 [ 823.665353][T16046] RIP: 0033:0x7f3c7785ed04 [ 823.665385][T16046] Code: 83 c4 68 5b 5d 41 5c 41 5e c3 0f 1f 40 00 48 8b 44 24 18 48 8b 1c 24 48 8b b0 80 00 00 00 8b 78 08 48 8d 53 30 e8 dc 57 ff ff <48> 89 83 88 00 00 00 e9 45 fe ff ff 8b 7c 24 14 48 8d 74 24 40 ba [ 823.665426][T16046] RSP: 002b:00007f3c7875d060 EFLAGS: 00010202 [ 823.665457][T16046] RAX: ffffffffffffffff RBX: 00007f3c77be5fa0 RCX: 00007f3c77a11f91 [ 823.665484][T16046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.665508][T16046] RBP: 00007f3c77a11f91 R08: 0000000000000009 R09: 0000000000000000 [ 823.665531][T16046] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 823.665556][T16046] R13: 00007f3c77be6038 R14: 00007f3c77be5fa0 R15: 00007ffd57e64a08 [ 823.665606][T16046] [ 823.667497][T16065] netlink: zone id is out of range [ 824.088746][T16064] \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 824.183710][T16065] netlink: zone id is out of range [ 824.188903][T16065] netlink: zone id is out of range [ 824.194318][T16065] netlink: zone id is out of range [ 824.199498][T16065] netlink: zone id is out of range [ 824.204650][T16065] netlink: zone id is out of range [ 824.233406][T16065] netlink: zone id is out of range [ 824.561200][T16076] FAULT_INJECTION: forcing a failure. [ 824.561200][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 824.584123][T16076] CPU: 0 UID: 0 PID: 16076 Comm: syz.1.1698 Tainted: G U syzkaller #0 PREEMPT(full) [ 824.584179][T16076] Tainted: [U]=USER [ 824.584192][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.584214][T16076] Call Trace: [ 824.584225][T16076] [ 824.584239][T16076] dump_stack_lvl+0x16c/0x1f0 [ 824.584279][T16076] should_fail_ex+0x512/0x640 [ 824.584333][T16076] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 824.584374][T16076] should_failslab+0xc2/0x120 [ 824.584414][T16076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 824.584449][T16076] ? acpi_ds_init_callbacks+0xd3/0x320 [ 824.584499][T16076] ? acpi_ut_create_integer_object+0x64/0x180 [ 824.584546][T16076] acpi_ut_create_integer_object+0x64/0x180 [ 824.584588][T16076] acpi_ps_execute_method+0x516/0xb30 [ 824.584645][T16076] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 824.584686][T16076] acpi_ns_evaluate+0x76c/0xca0 [ 824.584759][T16076] ? kasan_save_track+0x14/0x30 [ 824.584798][T16076] acpi_evaluate_object+0x1fa/0xa90 [ 824.584849][T16076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.584889][T16076] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 824.584937][T16076] ? __mutex_trylock_common+0xe9/0x250 [ 824.584999][T16076] acpi_evaluate_integer+0xdd/0x200 [ 824.585039][T16076] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 824.585098][T16076] ? __pfx_status_show+0x10/0x10 [ 824.585144][T16076] status_show+0xa0/0x120 [ 824.585190][T16076] ? __pfx_status_show+0x10/0x10 [ 824.585246][T16076] dev_attr_show+0x56/0xe0 [ 824.585283][T16076] ? __pfx_dev_attr_show+0x10/0x10 [ 824.585316][T16076] sysfs_kf_seq_show+0x213/0x3e0 [ 824.585360][T16076] seq_read_iter+0x509/0x12c0 [ 824.585429][T16076] kernfs_fop_read_iter+0x46c/0x610 [ 824.585483][T16076] ? rw_verify_area+0xcf/0x6c0 [ 824.585538][T16076] vfs_read+0x8bf/0xcf0 [ 824.585575][T16076] ? __pfx___mutex_lock+0x10/0x10 [ 824.585611][T16076] ? __pfx_vfs_read+0x10/0x10 [ 824.585672][T16076] ksys_read+0x12a/0x250 [ 824.585713][T16076] ? __pfx_ksys_read+0x10/0x10 [ 824.585759][T16076] do_syscall_64+0xcd/0x4b0 [ 824.585799][T16076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.585833][T16076] RIP: 0033:0x7f32f618eec9 [ 824.585862][T16076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.585897][T16076] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 824.585930][T16076] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 824.585954][T16076] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 824.585976][T16076] RBP: 00007f32f6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 824.585998][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.586020][T16076] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 824.586067][T16076] [ 824.586083][T16076] ACPI Error: [ 824.782476][T16084] FAULT_INJECTION: forcing a failure. [ 824.782476][T16084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.839591][T16076] Could not allocate an object descriptor (20250807/utobject-180) [ 825.022764][T16076] ACPI Error: ffff8880433fd000 walk still has a scope list (20250807/dswstate-694) [ 825.055185][T16084] CPU: 0 UID: 0 PID: 16084 Comm: syz.0.1700 Tainted: G U syzkaller #0 PREEMPT(full) [ 825.055238][T16084] Tainted: [U]=USER [ 825.055250][T16084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 825.055270][T16084] Call Trace: [ 825.055282][T16084] [ 825.055295][T16084] dump_stack_lvl+0x16c/0x1f0 [ 825.055335][T16084] should_fail_ex+0x512/0x640 [ 825.055394][T16084] should_fail_alloc_page+0xe7/0x130 [ 825.055435][T16084] prepare_alloc_pages+0x3c2/0x610 [ 825.055476][T16084] ? arch_stack_walk+0xa6/0x100 [ 825.055530][T16084] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 825.055578][T16084] ? stack_trace_save+0x8e/0xc0 [ 825.055620][T16084] ? __pfx_stack_trace_save+0x10/0x10 [ 825.055673][T16084] ? stack_depot_save_flags+0x29/0x9c0 [ 825.055729][T16084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 825.055766][T16084] ? kasan_save_stack+0x42/0x60 [ 825.055794][T16084] ? kasan_save_stack+0x33/0x60 [ 825.055824][T16084] ? kasan_save_track+0x14/0x30 [ 825.055854][T16084] ? __kasan_slab_alloc+0x89/0x90 [ 825.055886][T16084] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 825.055917][T16084] ? security_inode_alloc+0x3b/0x2b0 [ 825.055947][T16084] ? inode_init_always_gfp+0xce4/0x1030 [ 825.056005][T16084] ? do_syscall_64+0xcd/0x4b0 [ 825.056037][T16084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.056081][T16084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 825.056119][T16084] ? policy_nodemask+0xea/0x4e0 [ 825.056159][T16084] alloc_pages_mpol+0x1fb/0x550 [ 825.056198][T16084] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 825.056244][T16084] ? sk_prot_alloc+0x1a8/0x2a0 [ 825.056282][T16084] ___kmalloc_large_node+0xed/0x160 [ 825.056333][T16084] ? sk_prot_alloc+0x1a8/0x2a0 [ 825.056366][T16084] __kmalloc_large_node_noprof+0x1c/0x70 [ 825.056411][T16084] __kmalloc_noprof.cold+0xc/0x61 [ 825.056467][T16084] sk_prot_alloc+0x1a8/0x2a0 [ 825.056509][T16084] sk_alloc+0x36/0xc20 [ 825.056560][T16084] can_create+0x1e5/0x630 [ 825.056617][T16084] __sock_create+0x335/0x8d0 [ 825.056690][T16084] __sys_socket+0x14d/0x260 [ 825.056736][T16084] ? __pfx___sys_socket+0x10/0x10 [ 825.056781][T16084] ? xfd_validate_state+0x61/0x180 [ 825.056832][T16084] ? __pfx_ksys_write+0x10/0x10 [ 825.056872][T16084] __x64_sys_socket+0x72/0xb0 [ 825.056915][T16084] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.056945][T16084] do_syscall_64+0xcd/0x4b0 [ 825.056981][T16084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.057013][T16084] RIP: 0033:0x7f271458eec9 [ 825.057039][T16084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.057072][T16084] RSP: 002b:00007f2715437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 825.057102][T16084] RAX: ffffffffffffffda RBX: 00007f27147e6090 RCX: 00007f271458eec9 [ 825.057124][T16084] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 825.057144][T16084] RBP: 00007f2714611f91 R08: 0000000000000000 R09: 0000000000000000 [ 825.057165][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.057184][T16084] R13: 00007f27147e6128 R14: 00007f27147e6090 R15: 00007ffe5b32e608 [ 825.057226][T16084] [ 827.545473][T16131] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 827.892184][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 829.510446][T16139] kexec: Could not allocate control_code_buffer [ 831.204750][T16162] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 833.883096][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 833.916466][T16205] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1719'. [ 834.690903][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 834.770211][T16214] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1721'. [ 836.327907][T16226] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 836.974597][T16257] FAULT_INJECTION: forcing a failure. [ 836.974597][T16257] name failslab, interval 1, probability 0, space 0, times 0 [ 837.029519][T16257] CPU: 1 UID: 0 PID: 16257 Comm: syz.1.1728 Tainted: G U syzkaller #0 PREEMPT(full) [ 837.029571][T16257] Tainted: [U]=USER [ 837.029582][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.029603][T16257] Call Trace: [ 837.029614][T16257] [ 837.029626][T16257] dump_stack_lvl+0x16c/0x1f0 [ 837.029665][T16257] should_fail_ex+0x512/0x640 [ 837.029720][T16257] ? __kvmalloc_node_noprof+0x124/0x620 [ 837.029779][T16257] should_failslab+0xc2/0x120 [ 837.029825][T16257] __kvmalloc_node_noprof+0x137/0x620 [ 837.029878][T16257] ? io_alloc_cache_init+0x33/0x170 [ 837.029943][T16257] ? io_alloc_cache_init+0x33/0x170 [ 837.029989][T16257] io_alloc_cache_init+0x33/0x170 [ 837.030044][T16257] io_uring_setup+0x633/0x20c0 [ 837.030223][T16257] ? __pfx_io_uring_setup+0x10/0x10 [ 837.030270][T16257] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 837.030310][T16257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 837.030349][T16257] ? __fget_files+0x20e/0x3c0 [ 837.030412][T16257] ? ksys_write+0x1ac/0x250 [ 837.030445][T16257] ? __pfx_ksys_write+0x10/0x10 [ 837.030484][T16257] __x64_sys_io_uring_setup+0xc2/0x170 [ 837.030530][T16257] do_syscall_64+0xcd/0x4b0 [ 837.030567][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.030601][T16257] RIP: 0033:0x7f32f618eec9 [ 837.030627][T16257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.030659][T16257] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 837.030689][T16257] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 837.030710][T16257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 837.030730][T16257] RBP: 00007f32f6f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 837.030749][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.030768][T16257] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 837.030809][T16257] [ 837.350857][T16259] FAULT_INJECTION: forcing a failure. [ 837.350857][T16259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.539530][T16259] CPU: 1 UID: 0 PID: 16259 Comm: syz.4.1727 Tainted: G U syzkaller #0 PREEMPT(full) [ 837.539580][T16259] Tainted: [U]=USER [ 837.539591][T16259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.539611][T16259] Call Trace: [ 837.539622][T16259] [ 837.539635][T16259] dump_stack_lvl+0x16c/0x1f0 [ 837.539674][T16259] should_fail_ex+0x512/0x640 [ 837.539731][T16259] _copy_to_user+0x32/0xd0 [ 837.539766][T16259] snd_timer_user_status64.isra.0+0x210/0x2e0 [ 837.539809][T16259] ? __pfx_snd_timer_user_status64.isra.0+0x10/0x10 [ 837.539875][T16259] __snd_timer_user_ioctl.isra.0+0xdf5/0x2520 [ 837.539928][T16259] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 837.539977][T16259] ? rcu_is_watching+0x12/0xc0 [ 837.540015][T16259] ? trace_contention_end+0xdd/0x130 [ 837.540077][T16259] ? __mutex_lock+0x1c5/0x1060 [ 837.540111][T16259] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 837.540167][T16259] ? __pfx___mutex_lock+0x10/0x10 [ 837.540203][T16259] ? find_held_lock+0x2b/0x80 [ 837.540254][T16259] snd_timer_user_ioctl+0x76/0xd0 [ 837.540295][T16259] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 837.540342][T16259] __x64_sys_ioctl+0x18e/0x210 [ 837.540388][T16259] do_syscall_64+0xcd/0x4b0 [ 837.540426][T16259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.540458][T16259] RIP: 0033:0x7f3c7798eec9 [ 837.540485][T16259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.540515][T16259] RSP: 002b:00007f3c7875d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.540544][T16259] RAX: ffffffffffffffda RBX: 00007f3c77be5fa0 RCX: 00007f3c7798eec9 [ 837.540564][T16259] RDX: 0000200000000000 RSI: 0000000080605414 RDI: 0000000000000005 [ 837.540584][T16259] RBP: 00007f3c7875d090 R08: 0000000000000000 R09: 0000000000000000 [ 837.540604][T16259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.540624][T16259] R13: 00007f3c77be6038 R14: 00007f3c77be5fa0 R15: 00007ffd57e64a08 [ 837.540667][T16259] [ 838.513813][T16272] ICMPv6: process `syz.4.1730' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 838.886174][T16291] capability: warning: `syz.4.1730' uses 32-bit capabilities (legacy support in use) [ 840.754371][T16313] netlink: 'syz.1.1737': attribute type 1 has an invalid length. [ 844.233986][T16361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1746'. [ 845.853223][T16382] FAULT_INJECTION: forcing a failure. [ 845.853223][T16382] name failslab, interval 1, probability 0, space 0, times 0 [ 845.964059][T16382] CPU: 0 UID: 0 PID: 16382 Comm: syz.4.1751 Tainted: G U syzkaller #0 PREEMPT(full) [ 845.964118][T16382] Tainted: [U]=USER [ 845.964131][T16382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 845.964153][T16382] Call Trace: [ 845.964166][T16382] [ 845.964179][T16382] dump_stack_lvl+0x16c/0x1f0 [ 845.964223][T16382] should_fail_ex+0x512/0x640 [ 845.964278][T16382] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 845.964319][T16382] should_failslab+0xc2/0x120 [ 845.964360][T16382] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 845.964400][T16382] ? acpi_ds_init_callbacks+0xd3/0x320 [ 845.964458][T16382] ? acpi_ut_create_integer_object+0x64/0x180 [ 845.964508][T16382] acpi_ut_create_integer_object+0x64/0x180 [ 845.964551][T16382] acpi_ps_execute_method+0x516/0xb30 [ 845.964611][T16382] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 845.964653][T16382] acpi_ns_evaluate+0x76c/0xca0 [ 845.964712][T16382] ? kasan_save_track+0x14/0x30 [ 845.964750][T16382] acpi_evaluate_object+0x1fa/0xa90 [ 845.964801][T16382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.964841][T16382] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 845.964888][T16382] ? __mutex_trylock_common+0xe9/0x250 [ 845.964952][T16382] acpi_evaluate_integer+0xdd/0x200 [ 845.964993][T16382] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 845.965054][T16382] ? __pfx_status_show+0x10/0x10 [ 845.965102][T16382] status_show+0xa0/0x120 [ 845.965151][T16382] ? __pfx_status_show+0x10/0x10 [ 845.965211][T16382] dev_attr_show+0x56/0xe0 [ 845.965250][T16382] ? __pfx_dev_attr_show+0x10/0x10 [ 845.965284][T16382] sysfs_kf_seq_show+0x213/0x3e0 [ 845.965327][T16382] seq_read_iter+0x509/0x12c0 [ 845.965397][T16382] kernfs_fop_read_iter+0x46c/0x610 [ 845.965457][T16382] ? rw_verify_area+0xcf/0x6c0 [ 845.965516][T16382] vfs_read+0x8bf/0xcf0 [ 845.965555][T16382] ? __pfx___mutex_lock+0x10/0x10 [ 845.965590][T16382] ? __pfx_vfs_read+0x10/0x10 [ 845.965650][T16382] ksys_read+0x12a/0x250 [ 845.965682][T16382] ? __pfx_ksys_read+0x10/0x10 [ 845.965727][T16382] do_syscall_64+0xcd/0x4b0 [ 845.965766][T16382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.965801][T16382] RIP: 0033:0x7f3c7798eec9 [ 845.965829][T16382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.965865][T16382] RSP: 002b:00007f3c7875d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.965897][T16382] RAX: ffffffffffffffda RBX: 00007f3c77be5fa0 RCX: 00007f3c7798eec9 [ 845.965922][T16382] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 845.965944][T16382] RBP: 00007f3c77a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 845.965967][T16382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.965989][T16382] R13: 00007f3c77be6038 R14: 00007f3c77be5fa0 R15: 00007ffd57e64a08 [ 845.966037][T16382] [ 846.384078][T16382] ACPI Error: Could not allocate an object descriptor (20250807/utobject-180) [ 846.604354][T16382] ACPI Error: ffff88807f03a000 walk still has a scope list (20250807/dswstate-694) [ 846.659862][T16386] net_ratelimit: 12 callbacks suppressed [ 846.659888][T16386] netlink: zone id is out of range [ 846.769679][T16386] netlink: zone id is out of range [ 846.774869][T16386] netlink: zone id is out of range [ 847.046605][T16386] netlink: zone id is out of range [ 847.076042][T16385] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 847.125629][T16386] netlink: zone id is out of range [ 847.169537][T16386] netlink: zone id is out of range [ 847.194030][T16386] netlink: zone id is out of range [ 847.242482][T16386] netlink: zone id is out of range [ 847.276501][T16386] netlink: zone id is out of range [ 847.283211][T16396] zswap: compressor not available [ 847.386457][T16386] netlink: zone id is out of range [ 850.423721][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 851.204945][T16472] FAULT_INJECTION: forcing a failure. [ 851.204945][T16472] name failslab, interval 1, probability 0, space 0, times 0 [ 851.303812][T16472] CPU: 1 UID: 0 PID: 16472 Comm: syz.3.1767 Tainted: G U syzkaller #0 PREEMPT(full) [ 851.303870][T16472] Tainted: [U]=USER [ 851.303882][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 851.303904][T16472] Call Trace: [ 851.303916][T16472] [ 851.303930][T16472] dump_stack_lvl+0x16c/0x1f0 [ 851.303971][T16472] should_fail_ex+0x512/0x640 [ 851.304026][T16472] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 851.304066][T16472] should_failslab+0xc2/0x120 [ 851.304104][T16472] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 851.304147][T16472] ? acpi_evaluate_integer+0xdd/0x200 [ 851.304185][T16472] ? status_show+0xa0/0x120 [ 851.304227][T16472] ? dev_attr_show+0x56/0xe0 [ 851.304258][T16472] ? acpi_ps_alloc_op+0x25f/0x310 [ 851.304307][T16472] ? vfs_read+0x8bf/0xcf0 [ 851.304339][T16472] acpi_ps_alloc_op+0x25f/0x310 [ 851.304386][T16472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 851.304424][T16472] acpi_ps_create_op+0x3dc/0xc20 [ 851.304474][T16472] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 851.304537][T16472] acpi_ps_parse_loop+0xdd8/0x1d00 [ 851.304590][T16472] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 851.304634][T16472] ? trace_kmem_cache_alloc+0x28/0xc0 [ 851.304679][T16472] ? acpi_ut_create_thread_state+0x63/0x170 [ 851.304728][T16472] acpi_ps_parse_aml+0x3c1/0xcb0 [ 851.304783][T16472] acpi_ps_execute_method+0x55a/0xb30 [ 851.304850][T16472] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 851.304891][T16472] acpi_ns_evaluate+0x76c/0xca0 [ 851.304945][T16472] ? kasan_save_track+0x14/0x30 [ 851.304983][T16472] acpi_evaluate_object+0x1fa/0xa90 [ 851.305031][T16472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.305069][T16472] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 851.305114][T16472] ? __mutex_trylock_common+0xe9/0x250 [ 851.305175][T16472] acpi_evaluate_integer+0xdd/0x200 [ 851.305215][T16472] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 851.305275][T16472] ? __pfx_status_show+0x10/0x10 [ 851.305323][T16472] status_show+0xa0/0x120 [ 851.305369][T16472] ? __pfx_status_show+0x10/0x10 [ 851.305427][T16472] dev_attr_show+0x56/0xe0 [ 851.305462][T16472] ? __pfx_dev_attr_show+0x10/0x10 [ 851.305495][T16472] sysfs_kf_seq_show+0x213/0x3e0 [ 851.305535][T16472] seq_read_iter+0x509/0x12c0 [ 851.305601][T16472] kernfs_fop_read_iter+0x46c/0x610 [ 851.305652][T16472] ? rw_verify_area+0xcf/0x6c0 [ 851.305706][T16472] vfs_read+0x8bf/0xcf0 [ 851.305743][T16472] ? __pfx___mutex_lock+0x10/0x10 [ 851.305778][T16472] ? __pfx_vfs_read+0x10/0x10 [ 851.305850][T16472] ksys_read+0x12a/0x250 [ 851.305883][T16472] ? __pfx_ksys_read+0x10/0x10 [ 851.305928][T16472] do_syscall_64+0xcd/0x4b0 [ 851.305966][T16472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.306000][T16472] RIP: 0033:0x7fcda8b8eec9 [ 851.306026][T16472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.306060][T16472] RSP: 002b:00007fcda99da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 851.306091][T16472] RAX: ffffffffffffffda RBX: 00007fcda8de5fa0 RCX: 00007fcda8b8eec9 [ 851.306114][T16472] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 851.306134][T16472] RBP: 00007fcda8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 851.306154][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.306175][T16472] R13: 00007fcda8de6038 R14: 00007fcda8de5fa0 R15: 00007fff35ae22f8 [ 851.306217][T16472] [ 851.329512][T16472] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 852.857438][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1770'. [ 853.402474][T16485] netlink: 'syz.3.1769': attribute type 1 has an invalid length. [ 853.487626][T16503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 853.759066][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.055757][T16503] bridge_slave_1 (unregistering): left allmulticast mode [ 854.109518][T16503] bridge_slave_1 (unregistering): left promiscuous mode [ 854.220565][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.795861][T16521] FAULT_INJECTION: forcing a failure. [ 854.795861][T16521] name failslab, interval 1, probability 0, space 0, times 0 [ 854.808852][T16521] CPU: 0 UID: 0 PID: 16521 Comm: syz.1.1777 Tainted: G U syzkaller #0 PREEMPT(full) [ 854.808889][T16521] Tainted: [U]=USER [ 854.808897][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.808924][T16521] Call Trace: [ 854.808931][T16521] [ 854.808940][T16521] dump_stack_lvl+0x16c/0x1f0 [ 854.808966][T16521] should_fail_ex+0x512/0x640 [ 854.809020][T16521] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 854.809047][T16521] should_failslab+0xc2/0x120 [ 854.809073][T16521] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 854.809097][T16521] ? acpi_ds_init_callbacks+0xd3/0x320 [ 854.809130][T16521] ? acpi_ut_create_integer_object+0x64/0x180 [ 854.809162][T16521] acpi_ut_create_integer_object+0x64/0x180 [ 854.809190][T16521] acpi_ps_execute_method+0x516/0xb30 [ 854.809229][T16521] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 854.809264][T16521] acpi_ns_evaluate+0x76c/0xca0 [ 854.809326][T16521] ? kasan_save_track+0x14/0x30 [ 854.809363][T16521] acpi_evaluate_object+0x1fa/0xa90 [ 854.809400][T16521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.809427][T16521] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 854.809458][T16521] ? __mutex_trylock_common+0xe9/0x250 [ 854.809501][T16521] acpi_evaluate_integer+0xdd/0x200 [ 854.809529][T16521] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 854.809579][T16521] ? __pfx_status_show+0x10/0x10 [ 854.809612][T16521] status_show+0xa0/0x120 [ 854.809644][T16521] ? __pfx_status_show+0x10/0x10 [ 854.809685][T16521] dev_attr_show+0x56/0xe0 [ 854.809712][T16521] ? __pfx_dev_attr_show+0x10/0x10 [ 854.809734][T16521] sysfs_kf_seq_show+0x213/0x3e0 [ 854.809764][T16521] seq_read_iter+0x509/0x12c0 [ 854.809813][T16521] kernfs_fop_read_iter+0x46c/0x610 [ 854.809850][T16521] ? rw_verify_area+0xcf/0x6c0 [ 854.809906][T16521] vfs_read+0x8bf/0xcf0 [ 854.809941][T16521] ? __pfx___mutex_lock+0x10/0x10 [ 854.809966][T16521] ? __pfx_vfs_read+0x10/0x10 [ 854.810007][T16521] ksys_read+0x12a/0x250 [ 854.810028][T16521] ? __pfx_ksys_read+0x10/0x10 [ 854.810059][T16521] do_syscall_64+0xcd/0x4b0 [ 854.810090][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.810123][T16521] RIP: 0033:0x7f32f618eec9 [ 854.810168][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.810200][T16521] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.810245][T16521] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 854.810268][T16521] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 854.810290][T16521] RBP: 00007f32f6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 854.810308][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.810322][T16521] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 854.810354][T16521] [ 855.170474][T16523] net_ratelimit: 12 callbacks suppressed [ 855.170502][T16523] netlink: zone id is out of range [ 855.241496][T16521] ACPI Error: Could not allocate an object descriptor (20250807/utobject-180) [ 855.250570][T16521] ACPI Error: ffff88807e5c9000 walk still has a scope list (20250807/dswstate-694) [ 855.272215][T16523] netlink: zone id is out of range [ 855.277370][T16523] netlink: zone id is out of range [ 855.282613][T16523] netlink: zone id is out of range [ 855.287725][T16523] netlink: zone id is out of range [ 855.341490][T16523] netlink: zone id is out of range [ 855.346685][T16523] netlink: zone id is out of range [ 855.405216][T16523] netlink: zone id is out of range [ 855.411629][T16523] netlink: zone id is out of range [ 855.417235][T16523] netlink: zone id is out of range [ 855.763635][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 855.852187][T16533] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 855.901749][T16533] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1779'. [ 856.218984][T16543] FAULT_INJECTION: forcing a failure. [ 856.218984][T16543] name failslab, interval 1, probability 0, space 0, times 0 [ 856.301412][T16543] CPU: 0 UID: 0 PID: 16543 Comm: syz.3.1782 Tainted: G U syzkaller #0 PREEMPT(full) [ 856.301473][T16543] Tainted: [U]=USER [ 856.301485][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 856.301506][T16543] Call Trace: [ 856.301517][T16543] [ 856.301529][T16543] dump_stack_lvl+0x16c/0x1f0 [ 856.301568][T16543] should_fail_ex+0x512/0x640 [ 856.301618][T16543] ? fs_reclaim_acquire+0xae/0x150 [ 856.301664][T16543] ? tomoyo_encode2+0x100/0x3e0 [ 856.301703][T16543] should_failslab+0xc2/0x120 [ 856.301741][T16543] __kmalloc_noprof+0xd2/0x510 [ 856.301772][T16543] ? d_absolute_path+0x136/0x1a0 [ 856.301821][T16543] tomoyo_encode2+0x100/0x3e0 [ 856.301868][T16543] tomoyo_encode+0x29/0x50 [ 856.301907][T16543] tomoyo_realpath_from_path+0x18f/0x6e0 [ 856.301962][T16543] tomoyo_path_number_perm+0x245/0x580 [ 856.301996][T16543] ? tomoyo_path_number_perm+0x237/0x580 [ 856.302036][T16543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 856.302074][T16543] ? find_held_lock+0x2b/0x80 [ 856.302148][T16543] ? find_held_lock+0x2b/0x80 [ 856.302183][T16543] ? hook_file_ioctl_common+0x145/0x410 [ 856.302231][T16543] ? __fget_files+0x20e/0x3c0 [ 856.302289][T16543] security_file_ioctl+0x9b/0x240 [ 856.302328][T16543] __x64_sys_ioctl+0xb7/0x210 [ 856.302375][T16543] do_syscall_64+0xcd/0x4b0 [ 856.302413][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.302446][T16543] RIP: 0033:0x7fcda8b8eec9 [ 856.302480][T16543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.302514][T16543] RSP: 002b:00007fcda99da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.302546][T16543] RAX: ffffffffffffffda RBX: 00007fcda8de5fa0 RCX: 00007fcda8b8eec9 [ 856.302568][T16543] RDX: 0000200000000840 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 856.302590][T16543] RBP: 00007fcda99da090 R08: 0000000000000000 R09: 0000000000000000 [ 856.302611][T16543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.302632][T16543] R13: 00007fcda8de6038 R14: 00007fcda8de5fa0 R15: 00007fff35ae22f8 [ 856.302676][T16543] [ 856.302706][T16543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 857.717939][T16549] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 858.520320][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1792'. [ 860.275316][T16625] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 860.839781][T16620] zswap: compressor not available [ 860.840567][T16628] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 861.851109][T16645] FAULT_INJECTION: forcing a failure. [ 861.851109][T16645] name failslab, interval 1, probability 0, space 0, times 0 [ 861.875649][T16645] CPU: 1 UID: 0 PID: 16645 Comm: syz.3.1804 Tainted: G U syzkaller #0 PREEMPT(full) [ 861.875710][T16645] Tainted: [U]=USER [ 861.875724][T16645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 861.875745][T16645] Call Trace: [ 861.875756][T16645] [ 861.875769][T16645] dump_stack_lvl+0x16c/0x1f0 [ 861.875811][T16645] should_fail_ex+0x512/0x640 [ 861.875864][T16645] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 861.875902][T16645] should_failslab+0xc2/0x120 [ 861.875941][T16645] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 861.875986][T16645] ? getname_flags.part.0+0x4c/0x550 [ 861.876033][T16645] getname_flags.part.0+0x4c/0x550 [ 861.876080][T16645] getname_flags+0x93/0xf0 [ 861.876138][T16645] do_sys_openat2+0xb8/0x1d0 [ 861.876182][T16645] ? __pfx_do_sys_openat2+0x10/0x10 [ 861.876241][T16645] __x64_sys_openat+0x174/0x210 [ 861.876304][T16645] ? __pfx___x64_sys_openat+0x10/0x10 [ 861.876367][T16645] do_syscall_64+0xcd/0x4b0 [ 861.876406][T16645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.876440][T16645] RIP: 0033:0x7fcda8b8eec9 [ 861.876467][T16645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.876501][T16645] RSP: 002b:00007fcda99da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 861.876534][T16645] RAX: ffffffffffffffda RBX: 00007fcda8de5fa0 RCX: 00007fcda8b8eec9 [ 861.876557][T16645] RDX: 0000000000149240 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 861.876580][T16645] RBP: 00007fcda8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.876601][T16645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.876621][T16645] R13: 00007fcda8de6038 R14: 00007fcda8de5fa0 R15: 00007fff35ae22f8 [ 861.876664][T16645] [ 862.144065][T16642] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 862.925465][T16655] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1808'. [ 862.986105][T16661] FAULT_INJECTION: forcing a failure. [ 862.986105][T16661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.098255][T16661] CPU: 0 UID: 0 PID: 16661 Comm: syz.3.1807 Tainted: G U syzkaller #0 PREEMPT(full) [ 863.098313][T16661] Tainted: [U]=USER [ 863.098325][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 863.098345][T16661] Call Trace: [ 863.098356][T16661] [ 863.098369][T16661] dump_stack_lvl+0x16c/0x1f0 [ 863.098407][T16661] should_fail_ex+0x512/0x640 [ 863.098464][T16661] _copy_to_user+0x32/0xd0 [ 863.098498][T16661] simple_read_from_buffer+0xcb/0x170 [ 863.098548][T16661] proc_fail_nth_read+0x197/0x240 [ 863.098603][T16661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.098658][T16661] ? rw_verify_area+0xcf/0x6c0 [ 863.098704][T16661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.098756][T16661] vfs_read+0x1e4/0xcf0 [ 863.098792][T16661] ? __pfx___mutex_lock+0x10/0x10 [ 863.098824][T16661] ? __pfx_vfs_read+0x10/0x10 [ 863.098865][T16661] ? __fget_files+0x20e/0x3c0 [ 863.098926][T16661] ksys_read+0x12a/0x250 [ 863.098955][T16661] ? __pfx_ksys_read+0x10/0x10 [ 863.098982][T16661] ? syscall_user_dispatch+0x78/0x140 [ 863.099027][T16661] do_syscall_64+0xcd/0x4b0 [ 863.099064][T16661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.099096][T16661] RIP: 0033:0x7fcda8b8d8dc [ 863.099122][T16661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 863.099155][T16661] RSP: 002b:00007fcda99da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.099185][T16661] RAX: ffffffffffffffda RBX: 00007fcda8de5fa0 RCX: 00007fcda8b8d8dc [ 863.099207][T16661] RDX: 000000000000000f RSI: 00007fcda99da0a0 RDI: 0000000000000005 [ 863.099227][T16661] RBP: 00007fcda99da090 R08: 0000000000000000 R09: 0000000000000000 [ 863.099252][T16661] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 863.099272][T16661] R13: 00007fcda8de6038 R14: 00007fcda8de5fa0 R15: 00007fff35ae22f8 [ 863.099320][T16661] [ 863.725431][T16673] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 863.725431][T16673] program syz.3.1812 not setting count and/or reply_len properly [ 864.313689][T16678] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1812'. [ 864.325019][T16678] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1812'. [ 864.341315][T16678] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1812'. [ 864.947940][T16693] FAULT_INJECTION: forcing a failure. [ 864.947940][T16693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.997685][T16693] CPU: 0 UID: 0 PID: 16693 Comm: syz.1.1813 Tainted: G U syzkaller #0 PREEMPT(full) [ 864.997745][T16693] Tainted: [U]=USER [ 864.997755][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 864.997773][T16693] Call Trace: [ 864.997783][T16693] [ 864.997795][T16693] dump_stack_lvl+0x16c/0x1f0 [ 864.997876][T16693] should_fail_ex+0x512/0x640 [ 864.997930][T16693] _copy_from_user+0x2e/0xd0 [ 864.997961][T16693] copy_msghdr_from_user+0x98/0x160 [ 864.997994][T16693] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 864.998031][T16693] ? kfree+0x24f/0x4d0 [ 864.998074][T16693] ? __lock_acquire+0x62e/0x1ce0 [ 864.998127][T16693] ___sys_recvmsg+0xdb/0x1a0 [ 864.998157][T16693] ? __pfx____sys_recvmsg+0x10/0x10 [ 864.998209][T16693] ? __pfx___might_resched+0x10/0x10 [ 864.998254][T16693] do_recvmmsg+0x2fe/0x750 [ 864.998290][T16693] ? __pfx_do_recvmmsg+0x10/0x10 [ 864.998329][T16693] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 864.998372][T16693] ? __fget_files+0x20e/0x3c0 [ 864.998430][T16693] __x64_sys_recvmmsg+0x22a/0x280 [ 864.998465][T16693] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 864.998510][T16693] do_syscall_64+0xcd/0x4b0 [ 864.998544][T16693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.998576][T16693] RIP: 0033:0x7f32f618eec9 [ 864.998600][T16693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.998629][T16693] RSP: 002b:00007f32f6f49038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 864.998658][T16693] RAX: ffffffffffffffda RBX: 00007f32f63e6180 RCX: 00007f32f618eec9 [ 864.998680][T16693] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 864.998699][T16693] RBP: 00007f32f6f49090 R08: 0000000000000000 R09: 0000000000000000 [ 864.998718][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.998737][T16693] R13: 00007f32f63e6218 R14: 00007f32f63e6180 R15: 00007ffea552ddc8 [ 864.998778][T16693] [ 865.492711][T16678] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1812'. [ 868.013888][T16714] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 869.269803][T16729] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 870.400858][T16766] FAULT_INJECTION: forcing a failure. [ 870.400858][T16766] name failslab, interval 1, probability 0, space 0, times 0 [ 870.489623][T16766] CPU: 1 UID: 0 PID: 16766 Comm: syz.1.1824 Tainted: G U syzkaller #0 PREEMPT(full) [ 870.489677][T16766] Tainted: [U]=USER [ 870.489689][T16766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 870.489718][T16766] Call Trace: [ 870.489730][T16766] [ 870.489744][T16766] dump_stack_lvl+0x16c/0x1f0 [ 870.489785][T16766] should_fail_ex+0x512/0x640 [ 870.489836][T16766] ? fs_reclaim_acquire+0xae/0x150 [ 870.489884][T16766] should_failslab+0xc2/0x120 [ 870.489921][T16766] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 870.489954][T16766] ? __kernfs_new_node+0xd2/0x8e0 [ 870.489996][T16766] __kernfs_new_node+0xd2/0x8e0 [ 870.490037][T16766] ? __pfx___kernfs_new_node+0x10/0x10 [ 870.490084][T16766] ? find_held_lock+0x2b/0x80 [ 870.490126][T16766] ? kernfs_root+0xee/0x2a0 [ 870.490173][T16766] kernfs_new_node+0x13c/0x1e0 [ 870.490225][T16766] __kernfs_create_file+0x53/0x350 [ 870.490282][T16766] sysfs_add_file_mode_ns+0x207/0x3c0 [ 870.490329][T16766] internal_create_group+0x578/0xf30 [ 870.490380][T16766] ? __pfx_internal_create_group+0x10/0x10 [ 870.490428][T16766] ? kernfs_create_link+0x1bd/0x240 [ 870.490486][T16766] internal_create_groups+0x9d/0x150 [ 870.490530][T16766] device_add+0x731/0x1aa0 [ 870.490571][T16766] ? __pfx_device_add+0x10/0x10 [ 870.490603][T16766] ? __pfx___might_resched+0x10/0x10 [ 870.490642][T16766] ? is_dynamic_key+0xb4/0x160 [ 870.490720][T16766] __add_disk+0x457/0xf00 [ 870.490775][T16766] add_disk_fwnode+0x13f/0x5d0 [ 870.490826][T16766] nbd_dev_add+0x783/0xbb0 [ 870.490881][T16766] ? __pfx_nbd_dev_add+0x10/0x10 [ 870.490956][T16766] ? bpf_lsm_capable+0x9/0x10 [ 870.491003][T16766] ? __radix_tree_lookup+0x21f/0x2c0 [ 870.491064][T16766] nbd_genl_connect+0x8b0/0x1c60 [ 870.491103][T16766] ? __pfx_nbd_genl_connect+0x10/0x10 [ 870.491139][T16766] ? __nla_parse+0x40/0x60 [ 870.491181][T16766] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 870.491225][T16766] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 870.491270][T16766] genl_family_rcv_msg_doit+0x209/0x2f0 [ 870.491308][T16766] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 870.491344][T16766] ? genl_get_cmd+0x194/0x580 [ 870.491386][T16766] ? __radix_tree_lookup+0x21f/0x2c0 [ 870.491434][T16766] genl_rcv_msg+0x55c/0x800 [ 870.491473][T16766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.491509][T16766] ? __pfx_nbd_genl_connect+0x10/0x10 [ 870.491550][T16766] netlink_rcv_skb+0x158/0x420 [ 870.491578][T16766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.491615][T16766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 870.491658][T16766] ? netlink_deliver_tap+0x1ae/0xd30 [ 870.491699][T16766] genl_rcv+0x28/0x40 [ 870.491730][T16766] netlink_unicast+0x5a7/0x870 [ 870.491766][T16766] ? __pfx_netlink_unicast+0x10/0x10 [ 870.491797][T16766] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 870.491824][T16766] ? __lock_acquire+0xb97/0x1ce0 [ 870.491876][T16766] netlink_sendmsg+0x8d1/0xdd0 [ 870.491912][T16766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 870.491947][T16766] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 870.491998][T16766] ____sys_sendmsg+0xa95/0xc70 [ 870.492037][T16766] ? copy_msghdr_from_user+0x10a/0x160 [ 870.492064][T16766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 870.492108][T16766] ? __pfx_futex_wake_mark+0x10/0x10 [ 870.492140][T16766] ___sys_sendmsg+0x134/0x1d0 [ 870.492169][T16766] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.492239][T16766] __sys_sendmsg+0x16d/0x220 [ 870.492267][T16766] ? __pfx___sys_sendmsg+0x10/0x10 [ 870.492294][T16766] ? __x64_sys_futex+0x1e0/0x4c0 [ 870.492356][T16766] do_syscall_64+0xcd/0x4b0 [ 870.492387][T16766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.492416][T16766] RIP: 0033:0x7f32f618eec9 [ 870.492439][T16766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.492479][T16766] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.492507][T16766] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 870.492526][T16766] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000006 [ 870.492544][T16766] RBP: 00007f32f6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 870.492562][T16766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.492580][T16766] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 870.492616][T16766] [ 871.453917][T16764] FAULT_INJECTION: forcing a failure. [ 871.453917][T16764] name failslab, interval 1, probability 0, space 0, times 0 [ 871.473003][T16764] CPU: 1 UID: 0 PID: 16764 Comm: syz.4.1823 Tainted: G U syzkaller #0 PREEMPT(full) [ 871.473059][T16764] Tainted: [U]=USER [ 871.473072][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 871.473094][T16764] Call Trace: [ 871.473106][T16764] [ 871.473120][T16764] dump_stack_lvl+0x16c/0x1f0 [ 871.473163][T16764] should_fail_ex+0x512/0x640 [ 871.473218][T16764] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 871.473259][T16764] should_failslab+0xc2/0x120 [ 871.473299][T16764] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 871.473335][T16764] ? vm_area_dup+0x27/0x8d0 [ 871.473426][T16764] vm_area_dup+0x27/0x8d0 [ 871.473481][T16764] __split_vma+0x18e/0x1070 [ 871.473544][T16764] ? __pfx___split_vma+0x10/0x10 [ 871.473609][T16764] ? __pfx_mas_prev+0x10/0x10 [ 871.473655][T16764] vms_gather_munmap_vmas+0x3b1/0x1340 [ 871.473719][T16764] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 871.473782][T16764] ? mas_walk+0x6f5/0x980 [ 871.473850][T16764] __mmap_region+0x436/0x27b0 [ 871.473886][T16764] ? finish_task_switch.isra.0+0x21c/0xc10 [ 871.473927][T16764] ? __pfx___mmap_region+0x10/0x10 [ 871.473959][T16764] ? rcu_is_watching+0x12/0xc0 [ 871.474009][T16764] ? rcu_is_watching+0x12/0xc0 [ 871.474048][T16764] ? trace_sched_exit_tp+0xd1/0x120 [ 871.474083][T16764] ? __schedule+0x11a3/0x5de0 [ 871.474131][T16764] ? __lock_acquire+0x62e/0x1ce0 [ 871.474195][T16764] ? __lock_acquire+0x62e/0x1ce0 [ 871.474250][T16764] ? __pfx___schedule+0x10/0x10 [ 871.474350][T16764] ? trace_cap_capable+0x18d/0x200 [ 871.474426][T16764] mmap_region+0x1ab/0x3f0 [ 871.474461][T16764] ? __get_unmapped_area+0x267/0x440 [ 871.474509][T16764] do_mmap+0xa3e/0x1210 [ 871.474559][T16764] ? __pfx_do_mmap+0x10/0x10 [ 871.474602][T16764] ? __pfx_down_write_killable+0x10/0x10 [ 871.474652][T16764] vm_mmap_pgoff+0x29e/0x470 [ 871.474703][T16764] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 871.474742][T16764] ? __sock_release+0x20b/0x270 [ 871.474789][T16764] ? __x64_sys_futex+0x1e0/0x4c0 [ 871.474836][T16764] ? __x64_sys_futex+0x1e9/0x4c0 [ 871.474890][T16764] ksys_mmap_pgoff+0x7d/0x5c0 [ 871.474931][T16764] ? xfd_validate_state+0x61/0x180 [ 871.474986][T16764] ? __pfx_ksys_write+0x10/0x10 [ 871.475025][T16764] __x64_sys_mmap+0x125/0x190 [ 871.475064][T16764] do_syscall_64+0xcd/0x4b0 [ 871.475103][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.475138][T16764] RIP: 0033:0x7f3c7798eec9 [ 871.475167][T16764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.475202][T16764] RSP: 002b:00007f3c75bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 871.475235][T16764] RAX: ffffffffffffffda RBX: 00007f3c77be6090 RCX: 00007f3c7798eec9 [ 871.475259][T16764] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 871.475281][T16764] RBP: 00007f3c77a11f91 R08: 0000000000000007 R09: 0000000000028000 [ 871.475303][T16764] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 871.475325][T16764] R13: 00007f3c77be6128 R14: 00007f3c77be6090 R15: 00007ffd57e64a08 [ 871.475370][T16764] [ 871.800231][T16766] nbd: failed to add new device [ 871.826626][T16766] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 874.580223][T16814] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1833'. [ 876.898533][T16844] program syz.0.1841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.019497][T16825] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 880.663412][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.670239][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.830594][T16896] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 882.958226][T16948] bridge0: port 2(veth1_macvtap) entered blocking state [ 882.971193][T16948] bridge0: port 2(veth1_macvtap) entered disabled state [ 882.988155][T16948] veth1_macvtap: entered allmulticast mode [ 883.036326][T16948] veth1_macvtap: left allmulticast mode [ 884.050398][T16967] random: crng reseeded on system resumption [ 884.926680][T16988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1861'. [ 885.094292][T16990] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1861'. [ 885.356465][T16973] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 886.457006][T17003] FAULT_INJECTION: forcing a failure. [ 886.457006][T17003] name failslab, interval 1, probability 0, space 0, times 0 [ 886.473904][T17003] CPU: 1 UID: 0 PID: 17003 Comm: syz.0.1862 Tainted: G U syzkaller #0 PREEMPT(full) [ 886.473958][T17003] Tainted: [U]=USER [ 886.473971][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 886.473993][T17003] Call Trace: [ 886.474006][T17003] [ 886.474019][T17003] dump_stack_lvl+0x16c/0x1f0 [ 886.474061][T17003] should_fail_ex+0x512/0x640 [ 886.474113][T17003] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 886.474152][T17003] should_failslab+0xc2/0x120 [ 886.474191][T17003] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 886.474224][T17003] ? acpi_ds_init_callbacks+0xd3/0x320 [ 886.474270][T17003] ? acpi_ut_create_integer_object+0x64/0x180 [ 886.474312][T17003] acpi_ut_create_integer_object+0x64/0x180 [ 886.474360][T17003] acpi_ps_execute_method+0x516/0xb30 [ 886.474413][T17003] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 886.474454][T17003] acpi_ns_evaluate+0x76c/0xca0 [ 886.474513][T17003] ? kasan_save_track+0x14/0x30 [ 886.474550][T17003] acpi_evaluate_object+0x1fa/0xa90 [ 886.474600][T17003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.474639][T17003] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 886.474686][T17003] ? __mutex_trylock_common+0xe9/0x250 [ 886.474748][T17003] acpi_evaluate_integer+0xdd/0x200 [ 886.474790][T17003] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 886.474851][T17003] ? __pfx_status_show+0x10/0x10 [ 886.474899][T17003] status_show+0xa0/0x120 [ 886.474947][T17003] ? __pfx_status_show+0x10/0x10 [ 886.475006][T17003] dev_attr_show+0x56/0xe0 [ 886.475046][T17003] ? __pfx_dev_attr_show+0x10/0x10 [ 886.475078][T17003] sysfs_kf_seq_show+0x213/0x3e0 [ 886.475121][T17003] seq_read_iter+0x509/0x12c0 [ 886.475190][T17003] kernfs_fop_read_iter+0x46c/0x610 [ 886.475243][T17003] ? rw_verify_area+0xcf/0x6c0 [ 886.475298][T17003] vfs_read+0x8bf/0xcf0 [ 886.475342][T17003] ? __pfx___mutex_lock+0x10/0x10 [ 886.475379][T17003] ? __pfx_vfs_read+0x10/0x10 [ 886.475439][T17003] ksys_read+0x12a/0x250 [ 886.475472][T17003] ? __pfx_ksys_read+0x10/0x10 [ 886.475519][T17003] do_syscall_64+0xcd/0x4b0 [ 886.475558][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.475592][T17003] RIP: 0033:0x7f271458eec9 [ 886.475621][T17003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.475656][T17003] RSP: 002b:00007f2715437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 886.475689][T17003] RAX: ffffffffffffffda RBX: 00007f27147e6090 RCX: 00007f271458eec9 [ 886.475713][T17003] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 886.475734][T17003] RBP: 00007f2714611f91 R08: 0000000000000000 R09: 0000000000000000 [ 886.475756][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.475776][T17003] R13: 00007f27147e6128 R14: 00007f27147e6090 R15: 00007ffe5b32e608 [ 886.475821][T17003] [ 886.511240][T17003] ACPI Error: Could not allocate an object descriptor (20250807/utobject-180) [ 887.033781][T17003] ACPI Error: ffff88802f569000 walk still has a scope list (20250807/dswstate-694) [ 888.026444][T17021] FAULT_INJECTION: forcing a failure. [ 888.026444][T17021] name failslab, interval 1, probability 0, space 0, times 0 [ 888.050808][T17021] CPU: 1 UID: 0 PID: 17021 Comm: syz.1.1865 Tainted: G U syzkaller #0 PREEMPT(full) [ 888.050856][T17021] Tainted: [U]=USER [ 888.050868][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.050886][T17021] Call Trace: [ 888.050897][T17021] [ 888.050909][T17021] dump_stack_lvl+0x16c/0x1f0 [ 888.050945][T17021] should_fail_ex+0x512/0x640 [ 888.050993][T17021] ? __kmalloc_noprof+0xbf/0x510 [ 888.051026][T17021] ? io_cache_alloc_new+0x45/0xf0 [ 888.051071][T17021] should_failslab+0xc2/0x120 [ 888.051106][T17021] __kmalloc_noprof+0xd2/0x510 [ 888.051145][T17021] io_cache_alloc_new+0x45/0xf0 [ 888.051193][T17021] io_rsrc_node_alloc+0x221/0x2b0 [ 888.051242][T17021] io_sqe_buffer_register+0x104/0x2010 [ 888.051316][T17021] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 888.051365][T17021] ? rcu_is_watching+0x12/0xc0 [ 888.051412][T17021] ? iovec_from_user+0xbb/0x140 [ 888.051446][T17021] io_sqe_buffers_register+0x1ed/0x860 [ 888.051505][T17021] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 888.051586][T17021] ? __mutex_trylock_common+0xe9/0x250 [ 888.051636][T17021] ? __pfx___mutex_trylock_common+0x10/0x10 [ 888.051691][T17021] __io_uring_register+0x21e2/0x23c0 [ 888.051737][T17021] ? trace_contention_end+0xdd/0x130 [ 888.051788][T17021] ? __pfx___io_uring_register+0x10/0x10 [ 888.051844][T17021] ? __pfx___mutex_lock+0x10/0x10 [ 888.051887][T17021] ? __fget_files+0x20e/0x3c0 [ 888.051948][T17021] __x64_sys_io_uring_register+0x169/0x280 [ 888.052002][T17021] do_syscall_64+0xcd/0x4b0 [ 888.052038][T17021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.052072][T17021] RIP: 0033:0x7f32f618eec9 [ 888.052098][T17021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.052130][T17021] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 888.052161][T17021] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 888.052183][T17021] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 888.052217][T17021] RBP: 00007f32f6f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 888.052237][T17021] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 888.052258][T17021] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 888.052300][T17021] [ 888.574460][T17030] FAULT_INJECTION: forcing a failure. [ 888.574460][T17030] name failslab, interval 1, probability 0, space 0, times 0 [ 888.644442][T17030] CPU: 0 UID: 0 PID: 17030 Comm: syz.1.1868 Tainted: G U syzkaller #0 PREEMPT(full) [ 888.644481][T17030] Tainted: [U]=USER [ 888.644490][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.644505][T17030] Call Trace: [ 888.644513][T17030] [ 888.644523][T17030] dump_stack_lvl+0x16c/0x1f0 [ 888.644552][T17030] should_fail_ex+0x512/0x640 [ 888.644591][T17030] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 888.644619][T17030] should_failslab+0xc2/0x120 [ 888.644647][T17030] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 888.644673][T17030] ? shmem_alloc_inode+0x25/0x50 [ 888.644706][T17030] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 888.644735][T17030] shmem_alloc_inode+0x25/0x50 [ 888.644763][T17030] alloc_inode+0x64/0x240 [ 888.644793][T17030] new_inode+0x22/0x1c0 [ 888.644829][T17030] shmem_get_inode+0x19a/0xfb0 [ 888.644880][T17030] shmem_mknod+0x1a8/0x450 [ 888.644915][T17030] ? __pfx_shmem_create+0x10/0x10 [ 888.644945][T17030] lookup_open.isra.0+0x11d3/0x1580 [ 888.644986][T17030] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 888.645037][T17030] ? __pfx_down_write+0x10/0x10 [ 888.645062][T17030] ? mnt_get_write_access+0x20c/0x300 [ 888.645096][T17030] path_openat+0x893/0x2cb0 [ 888.645128][T17030] ? __pfx_path_openat+0x10/0x10 [ 888.645153][T17030] ? __lock_acquire+0xb97/0x1ce0 [ 888.645191][T17030] do_filp_open+0x20b/0x470 [ 888.645214][T17030] ? __pfx_do_filp_open+0x10/0x10 [ 888.645263][T17030] ? _raw_spin_unlock+0x28/0x50 [ 888.645298][T17030] ? alloc_fd+0x471/0x7d0 [ 888.645342][T17030] do_sys_openat2+0x11b/0x1d0 [ 888.645374][T17030] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.645417][T17030] __x64_sys_open+0x153/0x1e0 [ 888.645450][T17030] ? __pfx___x64_sys_open+0x10/0x10 [ 888.645488][T17030] ? rcu_is_watching+0x12/0xc0 [ 888.645518][T17030] do_syscall_64+0xcd/0x4b0 [ 888.645545][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.645569][T17030] RIP: 0033:0x7f32f618eec9 [ 888.645588][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.645612][T17030] RSP: 002b:00007f32f6f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 888.645634][T17030] RAX: ffffffffffffffda RBX: 00007f32f63e6090 RCX: 00007f32f618eec9 [ 888.645650][T17030] RDX: 000000000000012c RSI: 00000000000001c0 RDI: 0000000000000000 [ 888.645664][T17030] RBP: 00007f32f6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 888.645678][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.645692][T17030] R13: 00007f32f63e6128 R14: 00007f32f63e6090 R15: 00007ffea552ddc8 [ 888.645722][T17030] [ 890.013358][T17017] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 890.534580][T17048] FAULT_INJECTION: forcing a failure. [ 890.534580][T17048] name failslab, interval 1, probability 0, space 0, times 0 [ 890.694094][T17048] CPU: 1 UID: 0 PID: 17048 Comm: syz.0.1871 Tainted: G U syzkaller #0 PREEMPT(full) [ 890.694148][T17048] Tainted: [U]=USER [ 890.694160][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 890.694180][T17048] Call Trace: [ 890.694191][T17048] [ 890.694204][T17048] dump_stack_lvl+0x16c/0x1f0 [ 890.694243][T17048] should_fail_ex+0x512/0x640 [ 890.694311][T17048] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 890.694366][T17048] should_failslab+0xc2/0x120 [ 890.694404][T17048] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 890.694437][T17048] ? acpi_ds_init_callbacks+0xd3/0x320 [ 890.694485][T17048] ? acpi_ut_create_integer_object+0x64/0x180 [ 890.694533][T17048] acpi_ut_create_integer_object+0x64/0x180 [ 890.694574][T17048] acpi_ps_execute_method+0x516/0xb30 [ 890.694632][T17048] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 890.694672][T17048] acpi_ns_evaluate+0x76c/0xca0 [ 890.694730][T17048] ? kasan_save_track+0x14/0x30 [ 890.694768][T17048] acpi_evaluate_object+0x1fa/0xa90 [ 890.694817][T17048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.694855][T17048] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 890.694901][T17048] ? __mutex_trylock_common+0xe9/0x250 [ 890.694962][T17048] acpi_evaluate_integer+0xdd/0x200 [ 890.695002][T17048] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 890.695062][T17048] ? __pfx_status_show+0x10/0x10 [ 890.695108][T17048] status_show+0xa0/0x120 [ 890.695156][T17048] ? __pfx_status_show+0x10/0x10 [ 890.695214][T17048] dev_attr_show+0x56/0xe0 [ 890.695252][T17048] ? __pfx_dev_attr_show+0x10/0x10 [ 890.695285][T17048] sysfs_kf_seq_show+0x213/0x3e0 [ 890.695334][T17048] seq_read_iter+0x509/0x12c0 [ 890.695404][T17048] kernfs_fop_read_iter+0x46c/0x610 [ 890.695457][T17048] ? rw_verify_area+0xcf/0x6c0 [ 890.695511][T17048] vfs_read+0x8bf/0xcf0 [ 890.695549][T17048] ? __pfx___mutex_lock+0x10/0x10 [ 890.695584][T17048] ? __pfx_vfs_read+0x10/0x10 [ 890.695644][T17048] ksys_read+0x12a/0x250 [ 890.695675][T17048] ? __pfx_ksys_read+0x10/0x10 [ 890.695720][T17048] do_syscall_64+0xcd/0x4b0 [ 890.695758][T17048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.695792][T17048] RIP: 0033:0x7f271458eec9 [ 890.695820][T17048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.695854][T17048] RSP: 002b:00007f2715416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 890.695886][T17048] RAX: ffffffffffffffda RBX: 00007f27147e6180 RCX: 00007f271458eec9 [ 890.695909][T17048] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 890.695930][T17048] RBP: 00007f2714611f91 R08: 0000000000000000 R09: 0000000000000000 [ 890.695952][T17048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.695973][T17048] R13: 00007f27147e6218 R14: 00007f27147e6180 R15: 00007ffe5b32e608 [ 890.696018][T17048] [ 890.696033][T17048] ACPI Error: Could not allocate an object descriptor (20250807/utobject-180) [ 891.105033][T17045] net_ratelimit: 1 callbacks suppressed [ 891.105065][T17045] netlink: zone id is out of range [ 891.169568][T17045] netlink: zone id is out of range [ 891.174766][T17045] netlink: zone id is out of range [ 891.218514][T17045] netlink: zone id is out of range [ 891.223859][T17045] netlink: zone id is out of range [ 891.229108][T17045] netlink: zone id is out of range [ 891.234648][T17048] ACPI Error: ffff88803b14b000 walk still has a scope list (20250807/dswstate-694) [ 891.255405][T17045] netlink: zone id is out of range [ 891.284292][T17045] netlink: zone id is out of range [ 891.305367][T17045] netlink: zone id is out of range [ 891.469470][T17045] netlink: zone id is out of range [ 892.857864][T17076] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 895.206339][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'. [ 895.254616][T17115] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 895.265379][T17115] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1881'. [ 895.849063][T17105] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 897.475902][T17140] FAULT_INJECTION: forcing a failure. [ 897.475902][T17140] name failslab, interval 1, probability 0, space 0, times 0 [ 897.579771][T17140] CPU: 1 UID: 0 PID: 17140 Comm: syz.1.1885 Tainted: G U syzkaller #0 PREEMPT(full) [ 897.579818][T17140] Tainted: [U]=USER [ 897.579829][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 897.579848][T17140] Call Trace: [ 897.579858][T17140] [ 897.579870][T17140] dump_stack_lvl+0x16c/0x1f0 [ 897.579908][T17140] should_fail_ex+0x512/0x640 [ 897.579954][T17140] ? __kvmalloc_node_noprof+0x124/0x620 [ 897.580008][T17140] should_failslab+0xc2/0x120 [ 897.580042][T17140] __kvmalloc_node_noprof+0x137/0x620 [ 897.580094][T17140] ? seq_read_iter+0x826/0x12c0 [ 897.580144][T17140] ? seq_read_iter+0x826/0x12c0 [ 897.580187][T17140] seq_read_iter+0x826/0x12c0 [ 897.580247][T17140] kernfs_fop_read_iter+0x46c/0x610 [ 897.580296][T17140] ? rw_verify_area+0xcf/0x6c0 [ 897.580346][T17140] vfs_read+0x8bf/0xcf0 [ 897.580380][T17140] ? __pfx___mutex_lock+0x10/0x10 [ 897.580416][T17140] ? __pfx_vfs_read+0x10/0x10 [ 897.580471][T17140] ksys_read+0x12a/0x250 [ 897.580499][T17140] ? __pfx_ksys_read+0x10/0x10 [ 897.580539][T17140] do_syscall_64+0xcd/0x4b0 [ 897.580574][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.580612][T17140] RIP: 0033:0x7f32f618eec9 [ 897.580636][T17140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.580666][T17140] RSP: 002b:00007f32f6f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 897.580695][T17140] RAX: ffffffffffffffda RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 897.580716][T17140] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 897.580736][T17140] RBP: 00007f32f6f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 897.580755][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.580774][T17140] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 897.580814][T17140] [ 898.900236][T17059] ------------[ cut here ]------------ [ 898.905755][T17059] WARNING: CPU: 1 PID: 17059 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 898.916590][T17059] Modules linked in: [ 898.921240][T17059] CPU: 1 UID: 0 PID: 17059 Comm: syz.1.1873 Tainted: G U syzkaller #0 PREEMPT(full) [ 898.932413][T17059] Tainted: [U]=USER [ 898.936235][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 898.946727][T17059] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 898.953415][T17059] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 87 4b fb ff 85 db 75 0a 48 83 c4 08 5b e9 39 50 fb ff e8 34 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 26 50 fb ff e8 61 d3 61 00 eb 87 e8 8a [ 898.973598][T17059] RSP: 0018:ffffc90016e3f9c0 EFLAGS: 00010293 [ 898.980034][T17059] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf3869 [ 898.988627][T17059] RDX: ffff88805f560000 RSI: ffffffff81bf387c RDI: 0000000000000005 [ 898.997114][T17059] RBP: ffffffff81bf37a0 R08: 0000000000000005 R09: 0000000000000000 [ 899.005410][T17059] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807908d548 [ 899.013653][T17059] R13: dffffc0000000000 R14: ffffc90016e3fa58 R15: 0000000000000000 [ 899.021918][T17059] FS: 0000000000000000(0000) GS:ffff888124f66000(0000) knlGS:0000000000000000 [ 899.031136][T17059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.037743][T17059] CR2: 0000001b31a1bff8 CR3: 0000000036fda000 CR4: 00000000003526f0 [ 899.046248][T17059] Call Trace: [ 899.049964][T17059] [ 899.052921][T17059] remove_vma+0x88/0x160 [ 899.057211][T17059] exit_mmap+0x511/0xb90 [ 899.062103][T17059] ? __pfx_exit_mmap+0x10/0x10 [ 899.066915][T17059] ? __lock_acquire+0xb97/0x1ce0 [ 899.072185][T17059] ? arch_uprobe_clear_state+0x16/0x150 [ 899.077778][T17059] __mmput+0x12a/0x410 [ 899.082119][T17059] mmput+0x62/0x70 [ 899.086300][T17059] do_exit+0x7c7/0x2bf0 [ 899.090722][T17059] ? proc_coredump_connector+0x2d1/0x4f0 [ 899.096382][T17059] ? __pfx_do_exit+0x10/0x10 [ 899.101274][T17059] do_group_exit+0xd3/0x2a0 [ 899.105812][T17059] get_signal+0x2671/0x26d0 [ 899.110780][T17059] ? force_sig_fault+0xc4/0x100 [ 899.115672][T17059] ? __pfx_get_signal+0x10/0x10 [ 899.120602][T17059] arch_do_signal_or_restart+0x8f/0x790 [ 899.126194][T17059] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 899.132329][T17059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 899.138526][T17059] irqentry_exit_to_user_mode+0x138/0x290 [ 899.144349][T17059] asm_exc_page_fault+0x26/0x30 [ 899.149211][T17059] RIP: 0033:0x41000 [ 899.153246][T17059] Code: Unable to access opcode bytes at 0x40fd6. [ 899.159682][T17059] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 899.165759][T17059] RAX: 0000000000000000 RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 899.173764][T17059] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 899.181773][T17059] RBP: 00007f32f6211f91 R08: 0000000000000002 R09: 0000000000000000 [ 899.190037][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.198025][T17059] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 899.206064][T17059] [ 899.209117][T17059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 899.216510][T17059] CPU: 1 UID: 0 PID: 17059 Comm: syz.1.1873 Tainted: G U syzkaller #0 PREEMPT(full) [ 899.227582][T17059] Tainted: [U]=USER [ 899.231436][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 899.241605][T17059] Call Trace: [ 899.244915][T17059] [ 899.247854][T17059] dump_stack_lvl+0x3d/0x1f0 [ 899.252554][T17059] vpanic+0x6e8/0x7a0 [ 899.256579][T17059] ? __pfx_vpanic+0x10/0x10 [ 899.261115][T17059] ? tracing_buffers_mmap_close+0xdd/0x130 [ 899.266938][T17059] panic+0xca/0xd0 [ 899.270700][T17059] ? __pfx_panic+0x10/0x10 [ 899.275184][T17059] ? check_panic_on_warn+0x1f/0xb0 [ 899.280413][T17059] check_panic_on_warn+0xab/0xb0 [ 899.285377][T17059] __warn+0xf6/0x3c0 [ 899.289291][T17059] ? tracing_buffers_mmap_close+0xdd/0x130 [ 899.295141][T17059] report_bug+0x3c3/0x580 [ 899.299496][T17059] ? tracing_buffers_mmap_close+0xdd/0x130 [ 899.305337][T17059] handle_bug+0x184/0x210 [ 899.309683][T17059] exc_invalid_op+0x17/0x50 [ 899.314305][T17059] asm_exc_invalid_op+0x1a/0x20 [ 899.319163][T17059] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 899.325618][T17059] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 87 4b fb ff 85 db 75 0a 48 83 c4 08 5b e9 39 50 fb ff e8 34 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 26 50 fb ff e8 61 d3 61 00 eb 87 e8 8a [ 899.345249][T17059] RSP: 0018:ffffc90016e3f9c0 EFLAGS: 00010293 [ 899.351367][T17059] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf3869 [ 899.359383][T17059] RDX: ffff88805f560000 RSI: ffffffff81bf387c RDI: 0000000000000005 [ 899.367363][T17059] RBP: ffffffff81bf37a0 R08: 0000000000000005 R09: 0000000000000000 [ 899.375352][T17059] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807908d548 [ 899.383336][T17059] R13: dffffc0000000000 R14: ffffc90016e3fa58 R15: 0000000000000000 [ 899.391424][T17059] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 899.397696][T17059] ? tracing_buffers_mmap_close+0xc9/0x130 [ 899.403526][T17059] ? tracing_buffers_mmap_close+0xdc/0x130 [ 899.409372][T17059] remove_vma+0x88/0x160 [ 899.413679][T17059] exit_mmap+0x511/0xb90 [ 899.417966][T17059] ? __pfx_exit_mmap+0x10/0x10 [ 899.422793][T17059] ? __lock_acquire+0xb97/0x1ce0 [ 899.427790][T17059] ? arch_uprobe_clear_state+0x16/0x150 [ 899.433358][T17059] __mmput+0x12a/0x410 [ 899.437467][T17059] mmput+0x62/0x70 [ 899.441202][T17059] do_exit+0x7c7/0x2bf0 [ 899.445385][T17059] ? proc_coredump_connector+0x2d1/0x4f0 [ 899.451048][T17059] ? __pfx_do_exit+0x10/0x10 [ 899.455674][T17059] do_group_exit+0xd3/0x2a0 [ 899.460220][T17059] get_signal+0x2671/0x26d0 [ 899.464811][T17059] ? force_sig_fault+0xc4/0x100 [ 899.469701][T17059] ? __pfx_get_signal+0x10/0x10 [ 899.474600][T17059] arch_do_signal_or_restart+0x8f/0x790 [ 899.480194][T17059] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 899.486282][T17059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 899.492503][T17059] irqentry_exit_to_user_mode+0x138/0x290 [ 899.498251][T17059] asm_exc_page_fault+0x26/0x30 [ 899.503115][T17059] RIP: 0033:0x41000 [ 899.506928][T17059] Code: Unable to access opcode bytes at 0x40fd6. [ 899.513340][T17059] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 899.519512][T17059] RAX: 0000000000000000 RBX: 00007f32f63e5fa0 RCX: 00007f32f618eec9 [ 899.527497][T17059] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 899.535476][T17059] RBP: 00007f32f6211f91 R08: 0000000000000002 R09: 0000000000000000 [ 899.543455][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.551487][T17059] R13: 00007f32f63e6038 R14: 00007f32f63e5fa0 R15: 00007ffea552ddc8 [ 899.559488][T17059] [ 899.562951][T17059] Kernel Offset: disabled [ 899.567303][T17059] Rebooting in 86400 seconds..