last executing test programs: 13m0.065312504s ago: executing program 1 (id=180): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25050000000c00010002000000000000000c0001000400a3"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000300)="0cb5536b89808373fc11690d06830011a103d1a90b75826f0731d26aa4dafde1714c8d3c7b0028cf90f047ab7e36227807d75b8cb4c22f91a5ae2722af928d7a4458171cae598652eb958011ad42d4f0f85a17feae9abd1772202945a12c123f222ab9e4638d1ddc781e7819f8e44c9197509a7ffc3de5dc22d8dffb1c4489df302131d633ff1a806f0c780f2b206f6960837910a293517391f346fb45664a3cbcc2e48fa15c55a685fdcacd85f6212fcfebd601a498968b41b494f198c5d3632809a8b675500d379471bb4939dd3d96036d14b645f57525", 0x9, &(0x7f0000000400)="a6f5383e3acf61858acac43d1f6c9c1ed29d214fd4f0b4b01540728447f6a43c94e00476738ed0e15e8cc9bdeb6a5b475208c5a28bc6b685c44647afbd31f366f8b34a4fe46c2e5e040ed6c730c49ff01b3bd22ed2d80519705c087a4261e7d470bf9ea84e32b05eb2184649115bebcf52fcced3b5e59515fe41b7ce07be0a060d6dc10b37c8d1714b13f1ab447c5f5a6aca5d2f3b0c756b5b2c649197c8a0caee6fe077cac08f34595bb93141c065a092b93bac863655216b4e0858239cfe7232f839275ae9c4a223ae1c6201841df6eb8d79c29cf000a99ae977c7ffbf814962a616a31220939d3bf394e339685900237e75e26c6b", 0x0, &(0x7f0000000500)="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", &(0x7f0000000280)=0xffff3056}) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000000), r0) socket(0x2, 0x4, 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 12m59.849551994s ago: executing program 1 (id=183): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0x339401, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) lseek$auto(0x3, 0x4, 0x4) r4 = socket(0x2a, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto(r4, 0x8912, 0x38) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x4f0, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x101}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MLD_ADDR={0xa3, 0x13a, "03e7e781e8beca885f615a60d2db982f86496e83cb412c6b5aa18ada835ae904e988a406f675585f3a3647b201b0d1767e17c22c515aea052ad88be1f8bd1ad83712c46cd7816909d90c7d885ceb67c991023ef70c4d60e76c169d6f3ce9cce00b86d37c519acc9228e20e120a929d6f9225a3c5c73df9f1e54b0d0755199a80fffb3213f32e3c817f9d969d7a69d9c978977853e6f810255d203f26b34961"}, @NL80211_ATTR_SAE_PASSWORD={0x1f, 0x115, "6a37540b490f08099c405498d3c2d59b6d92aa7b17e9a1e984ea83"}, @NL80211_ATTR_SAE_PASSWORD={0x15, 0x115, "897339d1faf723efe0a3096394b64d9cd0"}, @NL80211_ATTR_PROBE_RESP={0x3f0, 0x91, "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"}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4000088}, 0x804) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$auto_TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000080)) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 12m59.205727866s ago: executing program 1 (id=188): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) sendfile$auto(r0, r0, &(0x7f00000001c0)=0x7, 0x0) (async) sendfile$auto(r0, r0, &(0x7f00000001c0)=0x7, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0x100000eb1, 0x404, 0x10008000) (async) mmap$auto(0x0, 0x2000d, 0x7, 0x100000eb1, 0x404, 0x10008000) mmap$auto(0x0, 0xe983, 0x7, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x806, @dev={0xac, 0x14, 0x14, 0x29}}, 0x206a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x806, @dev={0xac, 0x14, 0x14, 0x29}}, 0x206a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) (async) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r4, &(0x7f0000000380)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\xedi(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~S\xb1\xc6\xd1\xee\xc8\te\xc1w\xf05%\xd76]\x0f\n\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD~\xdc\x12\x9f\x00S\xd0\x82\xed\xcc\x84T\x90\xc6\a\x1c\xdd\x8bv\x00\x7f\xba\xb5\xfc\x05\xb2\xaf.\xc4o\x05xo\x1cc\xb8\x86F\xc9h\x9fP\x98\xd3\x9d\x88\xf8\x85\x1d:!\x18\xd8?+s\a\x83\x1d\xef\xa25\x01\xc6_\xec\xde\xbd\x9a\x0f\xc1\xfb9\xc1f\xc4\xc56l\xebf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020006, 0x3, 0x7fff, 0xffffffffffffffff, 0x100029000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r5 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r5, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x200000, 0x20499d, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 11m49.945458114s ago: executing program 0 (id=412): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40f00, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000001c0)=0x2) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r1) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000ffdbdf251a0000001c00018008000400200d00000800040005000000080004000f00000060000180140002006d6163767461703000000000000000001400020064756d6d79300000000000000000000008000400ef0000000800030006000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="140002007663616e30000000000000000000000044000180080003000200100008000300fe000000140002007665215f626f6e6400000014000200766574683000000000f4000000000000080003000400", @ANYRESHEX=r1, @ANYRES16=r0], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2504000000320001800800010003000000080000000000b3adec877737cc39ffff000001000010000a800c000180000002000500000008000800"/78, @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x14) sendmsg$auto_IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x9, 0x9, 0x847, 0x3, 0xfffff000) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x3, 0xffffffffffffffff}) ioctl$auto_USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000180)=0x42) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_prog_fd=0x4, 0x4, @old_map_fd=r7}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 11m49.067331994s ago: executing program 0 (id=414): r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x208801, 0x0) read$auto_mgts_fops_(r0, &(0x7f0000000100)=""/221, 0xdd) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x1) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@raw_tracepoint={0x8, r1, 0x0, 0x1}, 0xa3) 11m48.895112351s ago: executing program 0 (id=417): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/environ\x00', 0x82a00, 0x0) sendmsg$auto_NCSI_CMD_SEND_CMD(r1, 0x0, 0x20040081) read$auto_proc_environ_operations_base(r2, 0x0, 0x0) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x0, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000180)={@raw=0xb70, 0x1ff, 0x6, @btrfs_ioctl_vol_args_v2_3_0={0x3, &(0x7f0000000080)={0x0, 0x1, 0x4707, 0x1ff, {0x5, 0x3, 0xc, 0x3, 0x7}, [0x9, 0x7, 0xff]}}, @subvolid=0xeb}) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0p\x00', 0x40, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(r5, 0x40044102, &(0x7f0000001180)=0x7) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) listen$auto(r1, 0x7) r6 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_show_traces_fops_trace(r6, &(0x7f0000000640)=""/188, 0xbc) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) 11m33.750964765s ago: executing program 33 (id=417): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/environ\x00', 0x82a00, 0x0) sendmsg$auto_NCSI_CMD_SEND_CMD(r1, 0x0, 0x20040081) read$auto_proc_environ_operations_base(r2, 0x0, 0x0) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x0, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000180)={@raw=0xb70, 0x1ff, 0x6, @btrfs_ioctl_vol_args_v2_3_0={0x3, &(0x7f0000000080)={0x0, 0x1, 0x4707, 0x1ff, {0x5, 0x3, 0xc, 0x3, 0x7}, [0x9, 0x7, 0xff]}}, @subvolid=0xeb}) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0p\x00', 0x40, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(r5, 0x40044102, &(0x7f0000001180)=0x7) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) listen$auto(r1, 0x7) r6 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_show_traces_fops_trace(r6, &(0x7f0000000640)=""/188, 0xbc) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) 9m57.36242912s ago: executing program 3 (id=797): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = epoll_create$auto(0x3e) mq_open$auto(0x0, 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x8, 0x1, 0x3, 0x1, "e205a4a21d2ddd2d6313691c349dd9f8278b9af0992431a1d29c8fb607713f6c"}) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2, 0x6, 0xfffffffe) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0x9}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x1}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0xc}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0xc0a00, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94p\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x10fd42, 0x9) 9m53.372594769s ago: executing program 3 (id=812): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x20, 0x1}, 0x5b3}, 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x2001, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya1\x00', 0x101000, 0x0) ioctl$auto_TIOCGWINSZ2(r2, 0x5413, &(0x7f00000003c0)) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) r3 = socket(0x1e, 0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x2d, 0x1, 0x0, 0x6, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)) getdents$auto(r4, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/sit0/drop_unsolicited_na\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x44, 0xe, 0x7, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x1b\x00', 0x10000002fb) 9m52.932511138s ago: executing program 3 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = epoll_create1$auto(0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfffffffd) (async) r2 = socket(0x29, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r2, 0x89f0, 0x24) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r1) (async) shmctl$auto_IPC_INFO(0xfff, 0x3, &(0x7f0000000640)={{0x40, 0xee01, 0xee01, 0x2}, 0x0, 0x5a, 0x0, 0xffffffffffffffff, @inferred, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f00000005c0)="eacd71c6c191bff510e5168e628d8e3af50e7418b64a8491a10ccbfebfea0c7cfaa7b3ef90769974af3bed1ce0fb9eaeb56f859c0f77ede62754f5c48a1b38e81e4e68f32061c5f3ab25", &(0x7f0000001200)="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"}) (async) r4 = setfsuid$auto(0xee00) (async) r5 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r5, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e775f", 0x15) (async) setreuid$auto(r4, 0x0) (async) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x0, 0x9) (async) get_robust_list$auto(0x1, 0x0, 0x0) (async) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$auto_PPPIOCSFLAGS(r6, 0x40047459, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) mmap$auto(0x0, 0x20003, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) (async) pread64$auto(r6, 0x0, 0x8001, 0x2325) write$auto(r0, 0x0, 0x29a) 9m52.628421759s ago: executing program 3 (id=816): set_mempolicy$auto(0x3, &(0x7f0000000080)=0x8, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x7, 0x7, 0x0, @_sigpoll={0x3, r1}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x5}, {0x5, 0x7}, 0x7fffffffffffffff, 0x8, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r2, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r1, &(0x7f0000000840)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\x11\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97\x1c\xa7\xf2\aY\x9c=\xaa\xda\xc2C)\xcf\a\x00\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\x90\xc0\xbf\xd4[\xbf\xc7\x16\xbe\x01\x98\xd7lD\x97)\x0f\x97K\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\x1es\xb9\x00T\xc1\x00\x8ew\x01\xc1\xcb\xc6h,J\xe3\xf1\x9dS\x9c&P`g\xc7\xa0$\xc4\xc61\xd06\xe5\x96\xe8;\xc6].vT\f\xe6]\xab=', 0x40000000000000) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) r6 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r6, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000000200000000000000010009000000000001000400000000000200070000000000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262d91b7e4b6d005ebb201517953c89225c186080b4836ccb358d624f4b134a11c7ec39e49d80d2c40312c250508a0e8c0969f1fe6830e50c3f2623b31882a5409300737b3fe096e8da90fa050194db696c605c6f82e18f9fc334aa232483df49ed13478a9bd48a"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r4, @ANYRESOCT=r7], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 9m51.818403239s ago: executing program 3 (id=820): ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="6316a453eb82f8b185d747bf84071af70ab76647eb0c7d9be3da86d6f39f818c232e96fc09af7d5af592110e4d371f7a91c8c610d76456af95cfda0c8f8d1f4e1e483ecad44a8471ebac97453dd9f7ae6dfedb2f9cb79d5b245a89e8d59bb76862c6feada48fabd9e16e2b4dff7ed86c0e9a48043243a7c29863ea838c3cfb49cf7ff07ec596d39b20dc23557ac8702308415431569562a08750c236df3c859c53b7ee2029cea13de7c65888d054149c62e3df2b86b78aa104a6ba8f3b") r0 = socketpair$auto(0xfffffffa, 0xfffffffc, 0xb33f850, &(0x7f00000000c0)=0xf0f8) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000100)="a9a73de8ee5498f473c8d7397f738220da25bec244f65e7061d1e242558c64caeed03128bfd9bfe42fec8f1d0eaaebd81912153f8c2f51e892b09e0e0479067aaa2bc919676282dcd897d50649ba533e24af4b39a7734820d5fe15034134a3baab4f67ea13e98b711cf18b001593c99fe94638d45ed6e7ed4b4fc7085b23268c292a4406a01b04e2cd14a81aa64b04ae58db9f8f5b0cbe6939c12850a8983788fd9264d435c860b772529eb6cf0baa04f79c721ad3a16f37424d1b6bd4fc78563eb58a") write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)="69b13feae52929459ab5b1b1f5582967b27b5708e1e75eb216df686f37059c65b0f21286d9ed737357b0f58db68007b87b2383c2c5f3ca8e7352747738e0bce952380dea205a0c", 0x47) pwritev$auto(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)="449fa284595deeb092e422cf382b87f9586fa8e37fa705275c646c4a3f88ca8ed59faac30e4a4bd52e1d955d3296c80d2bc7b0d2c67f72218beb6eba761a99fcf3488c5af3f9", 0xfffffffffffffff9}, 0xa206, 0x0, 0x100000001) r1 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40000, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000001540)={r1, &(0x7f0000000380)="36a7e0e97ba2dad66d95343ed5e101b70858fa84ed1ecdb671e1a2e1715f475f61e9136a04a36c460072ecd5174a74d94220e4057f39b5751c45cad8d3d7a7f3f652e68bdebb8b8a9d21b0cc773d988ab9d51f7b23ddfff5d602d4c1169f0c132b0574af4353f2c34298af7f7202049e84470e778d19e230", 0x7, &(0x7f0000000400)="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", 0x6, &(0x7f0000001400)="6ca660a927d4cfe20e6d2a11559f15fa4e7655ae6a975fd306aef43a03b2ec242a0f86dbf8fc24a93a339d57ffe8a053477d7835fdce71ad1502d125aa665c18d15012945463f2ffbf6d746d8083a22172bcecdc2d6d3f682a29cfed0c8617eb3a769acff2a87a96796eab5eaf1b0de9754224abfbcc2a35392c055bf3f435086da9ec0db3246dac7e0238598970f23d6a7b303b0b940069f3c69a8bbcebb395cf48435f7613d49dc50a6a759af0ae5dd76b575ba60e00ef51b744ced3c9787b49c9c0d939319c16ee325b93cd1b4a55", &(0x7f0000001500)=0x8}) ioctl$auto_EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001580)={0x5, 0x7e, 0x7ff, 0xfffffff9, "723b73612058dcfc0a220b0816541f48a2ac322b28f5fe9633c6415f2928e4cd"}) fcntl$auto_F_RDLCK(r0, 0x3ff, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto(0x4, 0x1, 0x0, 0x28f, 0xfff) r3 = pipe$auto(&(0x7f00000015c0)=r2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/fail-nth\x00', 0x10000, 0x0) r5 = getpid() socket(0x29, 0x6, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), r0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r7, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), r2) sendmsg$auto_NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001800)={0x11ac, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x1}, @NL80211_ATTR_REG_RULES={0x1122, 0x22, 0x0, 0x1, [@generic="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", @typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@multicast1}, @generic="27ca1ceeec428078b88181a00e9e57e86f12e776183d5599f5603e42ad925fb57c4cf0654a2295bf5629ef0fb90601e46290bb0d8557f9eb67539ba2f99ba42db2281755f8a640b855da9b7fc72126e461f6f10016804fa15ff1f05cd89eb5704ee3c2f94875af280aa00c5f20676e33f27159", @generic="6fe6c96eb0beb04a171e043767adff0d22320476f871d95a19d8fdf8436ee63c4db0984d5e17776e1d79c551c4d0d59d7b03cf12a80b43621cb502516437a86aba6953e0859e769f71a08eadace95949e6d5e35b1ad287b5fe77abd14422260208d382a5b4391e1ec2723a63a1aafb6dc05e8d7268b296ce07e6a155bdac6a46cb5c4cb3663cfaa9cdfbb23206f6868b394a199127ba6ff6a941e0e5aef877da13df08"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x64, 0xbb, "bc89608744f44c939ef61590e282e8d4aec146acf419cad6e6c35894aafa3e0d2918e032bb49c0906561d2209e58e4f72400751a92c241ae5b0830f030330ef1295a1f2210e5e996633c812f75c29752bb5334a58eedf4380357b58843e36348"}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE2(r2, 0x4008af03, &(0x7f0000002a40)={0x5, 0x0, [{0x9, 0x2, 0xffffffffffffffff}, {0x5345, 0x2}]}) execve$auto(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b40)=&(0x7f0000002b00)='nl80211\x00', &(0x7f0000002bc0)=&(0x7f0000002b80)='/sys/kernel/debug/tracing/saved_tgids\x00') io_uring_enter$auto(r3, 0x1, 0x9, 0x8, &(0x7f0000002c00)="b8ade8e1725b8a7c8715014a249991fda52557c8af453ab0cf49f67d2429f1b4477804a01036f027c9c7ccbddb3bb8561bf71a29426d18e152172a6567a0500cb1378aeeb7a320b76f8c396ab6cca858c43315dcdcd37c62c3425affb47ced0bac82f1bc", 0x630) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000002d80)={&(0x7f0000002c80)=0x65, 0x5, &(0x7f0000002cc0)="cf084499f0b182b48f2d46c44149e547ab53976cd1e9c72d0897f2015ac10e1ad81a16341f867032007be4efcfdc37c7ea1e1500662b8c40714da23a92d803e71817da518035794accb4c0f5b2", &(0x7f0000002d40)=0x9aa8}) fchmodat2$auto(0xffffffffffffff9c, &(0x7f0000002dc0)='./file0\x00', 0x8000, 0xff) mmap$auto(0x7, 0xffffffffffffffff, 0x7, 0x1b, r4, 0x6) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000002e00)={0x400, 0x6, 0x7, 0x2, 0x400, r5}) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000002e80), r4) sendmsg$auto_NFC_CMD_GET_DEVICE(r0, &(0x7f0000003000)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0xc8, r9, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5f}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xc}, @NFC_ATTR_VENDOR_DATA={0x7d, 0x1f, "2c8edab791593eb8331a4d34a8f66134cb3b306c1523dece6122094025e650c2ef7df27d17fc292bbf3b4cbc693f746d7ca2823c03d9165189f23bd3c2c562ef99227925c51bffb34a0f902cc0fba3017c15170e98def8b77067f79115c1519a75c9d7fcde2f37efb3caa6bd1ecddb5147517a8caf1ad33412"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffffffd}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000003080)={0x110c, r8, 0x200, 0x70bd2b, 0xff, {}, [@NL80211_ATTR_HE_CAPABILITY={0x38, 0x10d, "1e568c02cb69d2b51da178de828a87285a4729d2d9eeecf12731e62bd9df4cfe68fc877da1eea26a8730c13b1bd7ce9c53d47023"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6b, 0xbe, "373b5ca84d7c97d62137b13b7d391b9ba8c6016be4aed52f9d649f7b7322d44fb2f9b6591f1f76fac77fe6ad1ac229fcaae9477e4dbe5efcdd8aa8a5ab8d8ff830157a7f862a1a8c6526c44b466cd501f8fa07de7416c0a18e7df8f8414d920bc36c128eb6331e"}, @NL80211_ATTR_NAN_FUNC={0x1052, 0xf0, 0x0, 0x1, [@generic="1efb126f3fb8e1e911992ea6f0d8fa6fd9201d91e753de9f560baabf3cfa4e088bf9ba369ed1", @nested={0x8, 0x8f, 0x0, 0x1, [@nested={0x4, 0xe5}]}, @nested={0x1004, 0x8b, 0x0, 0x1, [@generic="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"]}, @nested={0x1c, 0xc3, 0x0, 0x1, [@nested={0x4, 0x124}, @typed={0x8, 0x133, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x5}]}]}]}, 0x110c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 9m51.660404543s ago: executing program 3 (id=821): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) setsockopt$auto_SO_RESERVE_MEM(r2, 0x8, 0x49, &(0x7f0000000180)='\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xc, 0x0, 0x4) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0xfffffffe, 0x0, 0xff9, 0xfffffffffffffffe, 0x0) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 9m36.470850374s ago: executing program 34 (id=821): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) setsockopt$auto_SO_RESERVE_MEM(r2, 0x8, 0x49, &(0x7f0000000180)='\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xc, 0x0, 0x4) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0xfffffffe, 0x0, 0xff9, 0xfffffffffffffffe, 0x0) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 9.778830663s ago: executing program 5 (id=3037): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x752, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket(0x21, 0x3, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) (async) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) r3 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) open_by_handle_at$auto(r3, &(0x7f0000000080)={0x8, 0x100fe, "9700000000000000"}, 0x2) (async) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000180)={r0, 0x4}) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x202000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x6, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) (async, rerun: 64) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 64) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$auto_RTC_PARAM_GET(r5, 0x40187013, &(0x7f0000000040)={0x0, @uvalue=0x2, 0x9}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 7.891888256s ago: executing program 5 (id=3042): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0xf4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r3, 0x2a027614b719b9cb, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r4}, 0x1) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r5, 0x0, 0x6) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 5.408967233s ago: executing program 4 (id=3050): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) bpf$auto(0x0, 0x0, 0x7f) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, 0x0, 0x45a500, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c") ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) close_range$auto(0x2, 0xa, 0x0) socket(0xb, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) socket(0x21, 0x5, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xb}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8a}]}, 0x2c}}, 0x1) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder1\x00', 0x101100, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi7\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(r4, 0xc0945662, r4) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/available_events\x00', 0x4042, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$auto(r5, &(0x7f0000000080)=@in={0x28}, 0x68) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff}, 0x6a) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf1, 0xb0, @raw=0xfffff00c}}) 4.594794798s ago: executing program 5 (id=3053): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='5', 0x1) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x8}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) ptrace$auto(0x4, 0x0, 0x7fffffff, 0x9) mmap$auto(0x800000080000001, 0xa, 0x6, 0x7ab3, r2, 0x8) socket(0x18, 0x3, 0x1) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x45c, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = io_uring_setup$auto(0x2, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) set_mempolicy$auto(0xffffffff, &(0x7f0000000080)=0x3, 0x100005) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r7 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r7, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40603d07, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 4.265974126s ago: executing program 4 (id=3057): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ieee802154/6lowpan/6lowpanfrag_low_thresh\x00', 0x80, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x8002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r7, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 4.024454122s ago: executing program 6 (id=3058): sysfs$auto(0x2, 0x10000000000002a, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) write$auto(r0, &(0x7f0000000240)='7\x00\xb1\x9a\xc0\xf9\xc0\xfbf\xe3\x03\x0f\xc9\xd1\xb2\x16\xcde\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000180)) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x100000001, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x400, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x400, 0x1d, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x7f, 0x0, 0x0, 0xfff, 0x8658) r3 = socket(0x2, 0x801, 0x100) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) r5 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) r6 = open_by_handle_at$auto(r5, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) sendfile$auto(r3, r6, 0x0, 0xffff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) 3.11484256s ago: executing program 5 (id=3060): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb5, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0xc2, 0x6, 0x1, 0x5, 0x3, 0x0}) mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0x2, 0x8000) madvise$auto(0xffffffffffffffff, 0x58, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x100000004, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x9, 0x400, 0xfffffffffffffffb, 0x9, 0xffffffff80000000, 0x1, 0x65, 0x103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2bb, 0x6, 0x9) socket(0x11, 0x80003, 0x300) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x06\x01e\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14N\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xd4f, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x7ffe) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) semctl$auto_SEM_INFO(0x5, 0x4, 0x13, 0x0) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd5/sched/owned_by_driver\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000100)=""/169, 0xa9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) 2.955646147s ago: executing program 6 (id=3061): socket(0xf, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd06, &(0x7f00000001c0)) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x120800, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x0, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={0x0, 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) ioctl$auto(0xffffffffffffffff, 0xab04, 0xffffffffffffffff) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000380)={0x5, 0xe, 0xec, @lost_msgs={0x5}}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 2.950497392s ago: executing program 4 (id=3062): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xffffffffffffffff, 0x800400eb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r1, 0x0, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x0, 0x80000001, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5}, 0x81, 0x4) ioctl$auto(0xffffffffffffffff, 0x0, 0xfffffffffffff4e0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) open(0x0, 0x383840, 0x120) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) socket(0x11, 0x80000, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x3, 0x1, 0x0, 0x1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.466655066s ago: executing program 2 (id=3063): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x40440, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000002c0)={0x40, 0x5}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) write$auto(r1, &(0x7f0000000040)='!\x00', 0x63f) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@raw_tracepoint={0x1, r2, 0x0, 0x2}, 0x10000) read$auto(r2, 0x0, 0x20) r3 = socket(0x10, 0x1, 0x7893) setsockopt$auto(r3, 0x111, 0x7f, 0x0, 0x400) r4 = pipe$auto(0x0) r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0xffff) r6 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x80044943, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x240800, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r8, 0x0, 0x1) write$auto_fops_x16_ro_(r8, &(0x7f00000001c0)="3a7c5aab6b418fa535b0ca4934b9bda0dd37e535289159c1e3f28dfb47b6196354f121eca567a1647c11b50963d49a363c401d86e28e5eb7268cd5b56bbefecb852f4be34db378514ac27f4e4241b73c83d3ad4f3e446ebb56f76ced2c9f8d72039b51a96df6dcff1bcb37d3db6d708d64a862a0ca1a71392e867c78c935f3cc7eca5eccec87e65ec21061adbd22ad7385bc30554f05598683d3d21d03ff614ce9aafe6f374244ac0713815166ece165ed31a2", 0xb3) r9 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x5, 0x0) write$auto(r9, 0x0, 0x6) ioctl$auto_PPPIOCSDEBUG(r7, 0x40047440, 0x0) ioctl$auto_I2C_SMBUS(r5, 0x720, 0x0) 2.314662588s ago: executing program 4 (id=3064): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) pread64$auto(r0, 0x0, 0x5, 0x7fff) 2.068421328s ago: executing program 4 (id=3065): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) pread64$auto(r0, 0x0, 0x5, 0x7fff) (fail_nth: 1) 2.047808897s ago: executing program 2 (id=3066): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/devices/virtual/mtd/mtd0/ecc_step_size\x00', 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x3) r2 = prctl$auto(0x2, 0x8000000000000001, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYBLOB="0000000000000008398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) bpf$auto(0x0, 0x0, 0x6f4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r3 = socket(0x18, 0xa, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) capset$auto(&(0x7f0000000100)={0x10001, 0xffffffffffffffff}, &(0x7f0000000140)={0x6291d0b4, 0xe9e, 0xffff}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0xc8c0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0880, 0x0) ioctl$auto(r7, 0x8008563f, r7) r8 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r8, &(0x7f0000000a00)='\n', 0x1) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r8, 0x8, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x0, 0x40) mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0xc, 0xffffffffffffff94, 0x3, 0x7ff, 0x100) madvise$auto(0x0, 0xffffffffffff0001, 0x15) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x0, 0x2, 0x1000, 0x0) tgkill$auto(r1, r4, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x1, 0x9, 0xff, 0x5, 0x7, 0xfbfffffe, 0x5, 0x7fb, 0x7, 0x9}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.524436013s ago: executing program 4 (id=3067): socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x100000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) semctl$auto_IPC_INFO(0xa7, 0xf, 0x3, 0x0) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x1e, 0x1, 0x0) r2 = memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001800), 0x101101, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x4}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x7fff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x101}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000200)={0xeaf, 0x0, 0x8000000000006, 0x1000000000000001}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b66, 0x1) ioctl$auto(r1, 0x5459, 0x0) 1.520726648s ago: executing program 2 (id=3068): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20540, 0x0) ioctl$auto(r0, 0x40046103, 0x81) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x6, 0x0, [{0x4, 0x7, 0x100000002}, {0x6, 0x3, 0x40}]}) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) shutdown$auto(0x200000003, 0x2) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xffffffffffff0001, 0x14) 1.517666375s ago: executing program 6 (id=3069): r0 = prctl$auto(0x4, 0x81, 0x0, 0x248, 0x204000000000) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x1, r0, 0x8f27, 0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x4010ae42, 0x38) 1.127846628s ago: executing program 6 (id=3070): socket(0x28, 0x80003, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown$auto(r0, 0xee00, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) timer_create$auto(0x3, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r2, 0x0, @sival_ptr=0x0}}}) clone3$auto(0x0, 0x9) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) 892.499771ms ago: executing program 2 (id=3071): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x2400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 833.756356ms ago: executing program 6 (id=3072): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x80008000) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x28342, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x6}, 0x106f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) r1 = socket(0x6, 0x800, 0x9) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x46, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r1, 0x0, 0x2, 0x3) bpf$auto(0x100000001, 0x0, 0x0) socket(0x2, 0x2, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x9, 0x98, 0x0, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xea) 701.435435ms ago: executing program 2 (id=3073): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/hard_block_reasons\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x26, 0x1, 0x1) listen$auto(0x3, 0x81) io_setup$auto(0xf50, &(0x7f0000000040)=0x2) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_fd=r2, r2, 0x4, 0x10, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x4000000f) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x62280, 0x0) ioctl$auto(0xffffffffffffffff, 0x46, 0xffffffffffffffff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) unshare$auto(0x20000) unshare$auto(0x20004) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) pread64$auto(0xffffffffffffffff, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) mmap$auto(0x0, 0x80000000001, 0x800000df, 0x4000000000eb1, 0x3fd, 0x8000) prctl$auto(0x23, 0xe, 0x0, 0x6c, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26860, 0x0) 344.354446ms ago: executing program 5 (id=3074): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) pread64$auto(r0, 0x0, 0x5, 0x7fff) 95.770479ms ago: executing program 5 (id=3075): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event\x00', 0x40800, 0x0) pread64$auto(r0, 0x0, 0x5, 0x7fff) (fail_nth: 2) 61.485565ms ago: executing program 6 (id=3076): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x6) (async) r0 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x1ff80000000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x80342, 0x0) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x3, 0x2) (async) socket(0x11, 0x3, 0x2) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=3077): mmap$auto(0x3, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0xb, 0x200, 0x400, 0x1, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000003, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x2, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="5dda42986e8bbbbcf6826918070ff2cdc2cb03d4b09419b7da899d6644cc80c24597c16023a345e780b9b298fb674331a3a82fa71b2b3b7754e5fc570608f89ae7dd1c55ef214a5bbe83ca4a1b5d60bd487b07ab17a0ad42ce3fae94ee57b6e38c7f7460d6e6205e079a63ecf8ddd611614020b5df6f616a886d8427c968fb327aa7a6e705609a2e375ae205921f99152df436265815ced6e0bb6277bbcee13f15017f694cecd4c023ae8c5957aa1ea58a851c8f0ed3b67fd4bed497ce15b3060163abb5633df7f49a82b2cb64d8273cef"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x23, 0x800, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kernel console output (not intermixed with test programs): 296] Invalid ELF header magic: != ELF [ 702.442980][T18291] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2318'. [ 702.614208][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 703.403747][ T30] audit: type=1800 audit(4294967335.770:69): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2322" name="mtdblock0" dev="tmpfs" ino=2399 res=0 errno=0 [ 704.893688][T18365] Invalid ELF header magic: != ELF [ 706.094187][T18369] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 706.551325][T18403] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2342'. [ 708.370546][T18434] Invalid ELF header magic: != ELF [ 709.283516][T18431] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 709.546358][T18450] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2352'. [ 715.011686][T18562] netlink: zone id is out of range [ 715.060542][T18562] netlink: zone id is out of range [ 715.089644][T18562] netlink: zone id is out of range [ 715.136759][T18562] netlink: zone id is out of range [ 715.162488][T18562] netlink: zone id is out of range [ 715.203310][T18562] netlink: zone id is out of range [ 715.260648][T18562] netlink: zone id is out of range [ 715.298831][T18562] netlink: zone id is out of range [ 715.333385][T18562] netlink: zone id is out of range [ 715.353286][T18562] netlink: zone id is out of range [ 716.350628][T18574] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2379'. [ 716.413422][T18582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 716.426556][T18582] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 716.486597][T18582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.492615][T18582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.540781][T18582] CPU0 is offline. [ 717.973464][T11808] Bluetooth: hci1: command 0x0c1a tx timeout [ 718.453239][T11808] Bluetooth: hci4: command 0x0c1a tx timeout [ 718.475587][T18634] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 718.533346][ T5186] Bluetooth: hci3: command 0x0c1a tx timeout [ 718.539489][T11808] Bluetooth: hci2: command 0x0c1a tx timeout [ 719.305438][T18652] random: crng reseeded on system resumption [ 720.121817][T18664] random: crng reseeded on system resumption [ 724.267979][T18742] could not allocate digest TFM handle [ 724.295534][T18741] could not allocate digest TFM handle [ 725.384034][T18774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'. [ 725.512221][T11808] Bluetooth: hci4: ACL packet too small [ 725.518170][T11808] Bluetooth: hci4: ACL packet too small [ 725.844102][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 727.464345][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.476383][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.484657][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.494956][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.502392][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.692575][T18812] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 727.692575][T18812] The task syz.5.2428 (18812) triggered the difference, watch for misbehavior. [ 728.367192][T18784] Process accounting resumed [ 729.324531][T18810] chnl_net:caif_netlink_parms(): no params data found [ 729.578812][ T5186] Bluetooth: hci0: command tx timeout [ 729.826766][T18810] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.868716][T18810] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.906136][T18810] bridge_slave_0: entered allmulticast mode [ 729.941445][T18810] bridge_slave_0: entered promiscuous mode [ 730.359813][T18810] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.394948][T18810] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.441309][T18810] bridge_slave_1: entered allmulticast mode [ 730.466240][T18810] bridge_slave_1: entered promiscuous mode [ 730.687298][T18810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.765522][T18810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.015780][T18810] team0: Port device team_slave_0 added [ 731.049167][T18810] team0: Port device team_slave_1 added [ 731.310678][T18810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.358323][T18810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.424314][T18864] FAULT_INJECTION: forcing a failure. [ 731.424314][T18864] name failslab, interval 1, probability 0, space 0, times 0 [ 731.455731][T18810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.466853][T18864] CPU: 1 UID: 0 PID: 18864 Comm: syz.6.2442 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 731.466879][T18864] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 731.466887][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 731.466896][T18864] Call Trace: [ 731.466902][T18864] [ 731.466907][T18864] dump_stack_lvl+0x16c/0x1f0 [ 731.466935][T18864] should_fail_ex+0x512/0x640 [ 731.466956][T18864] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 731.466977][T18864] should_failslab+0xc2/0x120 [ 731.466997][T18864] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 731.467015][T18864] ? alloc_inode+0x61/0x240 [ 731.467037][T18864] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 731.467052][T18864] alloc_inode+0x61/0x240 [ 731.467072][T18864] new_inode+0x22/0x1c0 [ 731.467093][T18864] __debugfs_create_file+0x11c/0x6b0 [ 731.467113][T18864] debugfs_create_file_full+0x41/0x60 [ 731.467132][T18864] ref_tracker_dir_debugfs+0x19d/0x290 [ 731.467147][T18864] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 731.467177][T18864] ? lockdep_init_map_type+0x5c/0x280 [ 731.467200][T18864] preinit_net+0x296/0x8f0 [ 731.467222][T18864] copy_net_ns+0x1da/0x5f0 [ 731.467239][T18864] create_new_namespaces+0x3ea/0xa90 [ 731.467260][T18864] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 731.467279][T18864] ksys_unshare+0x45b/0xa40 [ 731.467298][T18864] ? __pfx_ksys_unshare+0x10/0x10 [ 731.467317][T18864] ? xfd_validate_state+0x61/0x180 [ 731.467343][T18864] __x64_sys_unshare+0x31/0x40 [ 731.467362][T18864] do_syscall_64+0xcd/0x4c0 [ 731.467385][T18864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.467399][T18864] RIP: 0033:0x7f6f95d8eec9 [ 731.467412][T18864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.467426][T18864] RSP: 002b:00007f6f96d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 731.467441][T18864] RAX: ffffffffffffffda RBX: 00007f6f95fe5fa0 RCX: 00007f6f95d8eec9 [ 731.467450][T18864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 731.467459][T18864] RBP: 00007f6f95e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 731.467468][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.467476][T18864] R13: 00007f6f95fe6038 R14: 00007f6f95fe5fa0 R15: 00007ffe67258388 [ 731.467495][T18864] [ 731.467511][T18864] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88803176a5b0' [ 731.733061][T18810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.761573][T18810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.789709][ T5186] Bluetooth: hci0: command tx timeout [ 731.806662][T18810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.957251][T18810] hsr_slave_0: entered promiscuous mode [ 731.978632][T18810] hsr_slave_1: entered promiscuous mode [ 732.694072][T18810] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.867410][T18810] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.966703][T18810] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.055870][T18810] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.453518][T18810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.479242][T18810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 733.567040][T18810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 733.616413][T18810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 733.817889][ T5186] Bluetooth: hci0: command tx timeout [ 734.019356][T18810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.123872][T18810] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.226889][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.234048][T10297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.311379][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.318557][T10297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.277468][T18810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.899630][ T5186] Bluetooth: hci0: command tx timeout [ 736.535229][T18810] veth0_vlan: entered promiscuous mode [ 736.659457][T18810] veth1_vlan: entered promiscuous mode [ 736.952842][T18810] veth0_macvtap: entered promiscuous mode [ 737.020288][T18810] veth1_macvtap: entered promiscuous mode [ 737.061828][T18810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.149089][T18810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.249149][ T1314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.285446][ T1314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.376684][ T1314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.429486][T18973] net_ratelimit: 5 callbacks suppressed [ 737.429504][T18973] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 737.456464][ T1314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.759271][T10059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.806071][T10059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.908512][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.938894][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.232098][T11808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.246983][T11808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.255372][T11808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.265843][T11808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.283623][T11808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.774466][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.924203][T19006] random: crng reseeded on system resumption [ 739.960364][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 740.097396][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.306549][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.567832][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.145638][T18993] chnl_net:caif_netlink_parms(): no params data found [ 741.334104][T11808] Bluetooth: hci1: command tx timeout [ 742.143443][ T59] vlan1: left allmulticast mode [ 742.155445][ T59] veth0_vlan: left allmulticast mode [ 742.186660][ T59] vlan1: left promiscuous mode [ 742.230709][ T59] bridge0: port 3(vlan1) entered disabled state [ 742.286038][ T59] bridge_slave_1: left allmulticast mode [ 742.317416][ T59] bridge_slave_1: left promiscuous mode [ 742.323196][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.380274][ T59] bridge_slave_0: left allmulticast mode [ 742.416443][ T59] bridge_slave_0: left promiscuous mode [ 742.449204][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.962866][T19052] ubi0: attaching mtd0 [ 742.982058][T19052] ubi0: scanning is finished [ 743.012975][T19052] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 743.240160][T19052] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 743.418692][T11808] Bluetooth: hci1: command tx timeout [ 743.848756][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.882678][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.910241][ T59] bond0 (unregistering): Released all slaves [ 743.928108][T18993] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.939462][T18993] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.968506][T18993] bridge_slave_0: entered allmulticast mode [ 743.987703][T18993] bridge_slave_0: entered promiscuous mode [ 744.043703][ T59] HSR: left promiscuous mode [ 744.115482][T18993] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.122595][T18993] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.177189][T18993] bridge_slave_1: entered allmulticast mode [ 744.205475][T18993] bridge_slave_1: entered promiscuous mode [ 744.355595][T18993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.411892][T18993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.679366][T18993] team0: Port device team_slave_0 added [ 744.725923][T18993] team0: Port device team_slave_1 added [ 745.012452][T18993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.059226][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.236382][T18993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.362560][T18993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.407419][T19091] netlink: 'syz.5.2485': attribute type 1 has an invalid length. [ 745.429862][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.495818][T11808] Bluetooth: hci1: command tx timeout [ 745.589857][T18993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.758014][T19098] KVM: debugfs: duplicate directory 19098-4 [ 745.890786][T18993] hsr_slave_0: entered promiscuous mode [ 745.933591][T18993] hsr_slave_1: entered promiscuous mode [ 745.966251][T18993] debugfs: 'hsr0' already exists in 'hsr' [ 746.010835][T18993] Cannot create hsr debugfs directory [ 747.177857][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.184351][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.405960][T19135] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2492'. [ 747.541443][T19139] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2492'. [ 747.577012][T11808] Bluetooth: hci1: command tx timeout [ 748.236823][ T59] hsr_slave_0: left promiscuous mode [ 748.289279][ T59] hsr_slave_1: left promiscuous mode [ 748.343771][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.409314][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.498444][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.545303][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.699209][ T59] veth1_macvtap: left promiscuous mode [ 748.725039][ T59] veth0_macvtap: left promiscuous mode [ 748.770266][ T59] veth1_vlan: left promiscuous mode [ 748.821395][ T59] veth0_vlan: left promiscuous mode [ 749.429611][T19180] Invalid ELF header magic: != ELF [ 749.482503][T19183] program syz.6.2500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.452908][ T59] team0 (unregistering): Port device team_slave_1 removed [ 751.587815][ T59] team0 (unregistering): Port device team_slave_0 removed [ 753.237865][T18993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 753.294881][T18993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 753.370987][T18993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 753.400630][T18993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 754.128491][T18993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.311260][T18993] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.502413][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.509588][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.638112][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.645373][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.104639][T19272] FAULT_INJECTION: forcing a failure. [ 755.104639][T19272] name failslab, interval 1, probability 0, space 0, times 0 [ 755.216513][T19272] CPU: 1 UID: 0 PID: 19272 Comm: syz.4.2523 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 755.216544][T19272] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 755.216550][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 755.216559][T19272] Call Trace: [ 755.216565][T19272] [ 755.216572][T19272] dump_stack_lvl+0x16c/0x1f0 [ 755.216599][T19272] should_fail_ex+0x512/0x640 [ 755.216621][T19272] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 755.216644][T19272] should_failslab+0xc2/0x120 [ 755.216662][T19272] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 755.216681][T19272] ? cache_create_net+0x2b/0x220 [ 755.216703][T19272] kmemdup_noprof+0x29/0x60 [ 755.216721][T19272] cache_create_net+0x2b/0x220 [ 755.216740][T19272] gss_svc_init_net+0x122/0x660 [ 755.216757][T19272] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 755.216779][T19272] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 755.216797][T19272] ops_init+0x1df/0x5f0 [ 755.216821][T19272] setup_net+0x10f/0x380 [ 755.216833][T19272] ? lockdep_init_map_type+0x5c/0x280 [ 755.216852][T19272] ? __pfx_setup_net+0x10/0x10 [ 755.216866][T19272] ? debug_mutex_init+0x37/0x70 [ 755.216882][T19272] copy_net_ns+0x2a6/0x5f0 [ 755.216898][T19272] create_new_namespaces+0x3ea/0xa90 [ 755.216919][T19272] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 755.216938][T19272] ksys_unshare+0x45b/0xa40 [ 755.216957][T19272] ? __pfx_ksys_unshare+0x10/0x10 [ 755.216986][T19272] ? xfd_validate_state+0x61/0x180 [ 755.217014][T19272] __x64_sys_unshare+0x31/0x40 [ 755.217033][T19272] do_syscall_64+0xcd/0x4c0 [ 755.217057][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.217071][T19272] RIP: 0033:0x7f47c6f8eec9 [ 755.217084][T19272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.217097][T19272] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 755.217111][T19272] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 755.217121][T19272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 755.217130][T19272] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 755.217139][T19272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.217148][T19272] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 755.217167][T19272] [ 755.457651][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.467825][T18993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.571841][T18993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.939380][T18993] veth0_vlan: entered promiscuous mode [ 758.018549][T18993] veth1_vlan: entered promiscuous mode [ 758.177569][T18993] veth0_macvtap: entered promiscuous mode [ 758.230695][T18993] veth1_macvtap: entered promiscuous mode [ 758.399306][T18993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.698132][T18993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.101708][ T1314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.155338][ T1314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.300463][ T1314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.349990][ T1314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.822857][T10052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.875528][T10052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.985048][T10855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.016643][T10855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.292278][T19384] netlink: 'syz.5.2534': attribute type 11 has an invalid length. [ 760.338775][T19389] random: crng reseeded on system resumption [ 761.480988][T19426] program syz.6.2539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.496924][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 761.593604][T19426] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2539'. [ 762.620068][T19433] blktrace: Concurrent blktraces are not allowed on loop2 [ 763.003376][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 763.295539][T19471] serio: Serial port pty6 [ 763.650676][T19477] FAULT_INJECTION: forcing a failure. [ 763.650676][T19477] name failslab, interval 1, probability 0, space 0, times 0 [ 763.715700][T19477] CPU: 1 UID: 0 PID: 19477 Comm: syz.2.2547 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 763.715730][T19477] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 763.715737][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.715746][T19477] Call Trace: [ 763.715753][T19477] [ 763.715759][T19477] dump_stack_lvl+0x16c/0x1f0 [ 763.715785][T19477] should_fail_ex+0x512/0x640 [ 763.715813][T19477] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 763.715832][T19477] should_failslab+0xc2/0x120 [ 763.715852][T19477] __kmalloc_cache_noprof+0x6a/0x3e0 [ 763.715868][T19477] ? query_regdb+0x916/0xca0 [ 763.715892][T19477] query_regdb+0x916/0xca0 [ 763.715917][T19477] query_regdb_file+0xac/0x130 [ 763.715937][T19477] reg_process_hint+0x291/0x1440 [ 763.715951][T19477] ? kasan_save_track+0x14/0x30 [ 763.715969][T19477] reg_reload_regdb+0x389/0x460 [ 763.715983][T19477] ? __pfx_reg_reload_regdb+0x10/0x10 [ 763.715997][T19477] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 763.716015][T19477] ? nl80211_pre_doit+0x1b0/0xb10 [ 763.716034][T19477] genl_family_rcv_msg_doit+0x209/0x2f0 [ 763.716052][T19477] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 763.716067][T19477] ? rcu_is_watching+0x12/0xc0 [ 763.716087][T19477] ? bpf_lsm_capable+0x9/0x10 [ 763.716105][T19477] ? security_capable+0x7e/0x260 [ 763.716124][T19477] genl_rcv_msg+0x55c/0x800 [ 763.716142][T19477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.716157][T19477] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 763.716173][T19477] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 763.716194][T19477] ? __pfx_nl80211_post_doit+0x10/0x10 [ 763.716214][T19477] netlink_rcv_skb+0x158/0x420 [ 763.716235][T19477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 763.716251][T19477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 763.716280][T19477] ? netlink_deliver_tap+0x1ae/0xd30 [ 763.716311][T19477] genl_rcv+0x28/0x40 [ 763.716324][T19477] netlink_unicast+0x5a7/0x870 [ 763.716349][T19477] ? __pfx_netlink_unicast+0x10/0x10 [ 763.716372][T19477] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 763.716393][T19477] ? __lock_acquire+0xb97/0x1ce0 [ 763.716418][T19477] netlink_sendmsg+0x8d1/0xdd0 [ 763.716442][T19477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.716466][T19477] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 763.716485][T19477] ____sys_sendmsg+0xa98/0xc70 [ 763.716502][T19477] ? copy_msghdr_from_user+0x10a/0x160 [ 763.716522][T19477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.716542][T19477] ? __pfx_futex_wake_mark+0x10/0x10 [ 763.716566][T19477] ___sys_sendmsg+0x134/0x1d0 [ 763.716588][T19477] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.716633][T19477] __sys_sendmsg+0x16d/0x220 [ 763.716654][T19477] ? __pfx___sys_sendmsg+0x10/0x10 [ 763.716674][T19477] ? __x64_sys_futex+0x1e0/0x4c0 [ 763.716706][T19477] do_syscall_64+0xcd/0x4c0 [ 763.716730][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.716746][T19477] RIP: 0033:0x7fba93d8eec9 [ 763.716759][T19477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.716774][T19477] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.716789][T19477] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 763.716799][T19477] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 763.716808][T19477] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 763.716818][T19477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.716827][T19477] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 763.716846][T19477] [ 766.187598][T19528] FAULT_INJECTION: forcing a failure. [ 766.187598][T19528] name failslab, interval 1, probability 0, space 0, times 0 [ 766.267559][T19528] CPU: 1 UID: 0 PID: 19528 Comm: syz.4.2562 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 766.267591][T19528] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 766.267598][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 766.267608][T19528] Call Trace: [ 766.267614][T19528] [ 766.267621][T19528] dump_stack_lvl+0x16c/0x1f0 [ 766.267648][T19528] should_fail_ex+0x512/0x640 [ 766.267671][T19528] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 766.267692][T19528] should_failslab+0xc2/0x120 [ 766.267711][T19528] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 766.267728][T19528] ? acpi_ut_create_thread_state+0x63/0x170 [ 766.267750][T19528] acpi_ut_create_thread_state+0x63/0x170 [ 766.267775][T19528] acpi_ps_parse_aml+0x79/0xcb0 [ 766.267800][T19528] acpi_ps_execute_method+0x55a/0xb30 [ 766.267824][T19528] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 766.267841][T19528] acpi_ns_evaluate+0x76c/0xca0 [ 766.267866][T19528] ? kasan_save_track+0x14/0x30 [ 766.267884][T19528] acpi_evaluate_object+0x1fa/0xa90 [ 766.267905][T19528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.267926][T19528] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 766.267946][T19528] ? __mutex_trylock_common+0xe9/0x250 [ 766.267971][T19528] acpi_evaluate_integer+0xdd/0x200 [ 766.267989][T19528] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 766.268006][T19528] ? intel_dp_aux_ch+0x5f4/0x7c0 [ 766.268027][T19528] ? __pfx_status_show+0x10/0x10 [ 766.268045][T19528] status_show+0xa0/0x120 [ 766.268064][T19528] ? __pfx_status_show+0x10/0x10 [ 766.268087][T19528] dev_attr_show+0x53/0xe0 [ 766.268103][T19528] ? __pfx_dev_attr_show+0x10/0x10 [ 766.268116][T19528] sysfs_kf_seq_show+0x213/0x3e0 [ 766.268136][T19528] seq_read_iter+0x506/0x12c0 [ 766.268159][T19528] kernfs_fop_read_iter+0x46c/0x610 [ 766.268174][T19528] ? rw_verify_area+0xcf/0x6c0 [ 766.268190][T19528] vfs_read+0x8bf/0xcf0 [ 766.268209][T19528] ? __pfx___mutex_lock+0x10/0x10 [ 766.268235][T19528] ? __pfx_vfs_read+0x10/0x10 [ 766.268264][T19528] ksys_read+0x12a/0x250 [ 766.268281][T19528] ? __pfx_ksys_read+0x10/0x10 [ 766.268304][T19528] do_syscall_64+0xcd/0x4c0 [ 766.268327][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.268342][T19528] RIP: 0033:0x7f47c6f8eec9 [ 766.268354][T19528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.268368][T19528] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 766.268383][T19528] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 766.268393][T19528] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 766.268402][T19528] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 766.268412][T19528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.268421][T19528] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 766.268441][T19528] [ 766.268916][T19528] ACPI Error: [ 766.602810][T19535] program syz.2.2563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.693455][T19535] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2563'. [ 767.846292][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2572'. [ 767.866850][T19528] ffff88805e84e000 walk still has a scope list (20250404/dswstate-694) [ 768.471768][T19584] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2574'. [ 768.976842][T19590] kafs: addr_prefs: Invalid Command [ 769.379870][T19598] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 770.514923][T19626] netlink: 62 bytes leftover after parsing attributes in process `syz.2.2587'. [ 772.557893][T19661] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 773.403073][T19682] FAULT_INJECTION: forcing a failure. [ 773.403073][T19682] name failslab, interval 1, probability 0, space 0, times 0 [ 773.471586][T19682] CPU: 1 UID: 0 PID: 19682 Comm: syz.2.2601 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 773.471617][T19682] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 773.471624][T19682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 773.471633][T19682] Call Trace: [ 773.471639][T19682] [ 773.471645][T19682] dump_stack_lvl+0x16c/0x1f0 [ 773.471671][T19682] should_fail_ex+0x512/0x640 [ 773.471693][T19682] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 773.471714][T19682] should_failslab+0xc2/0x120 [ 773.471740][T19682] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 773.471758][T19682] ? acpi_ut_create_thread_state+0x63/0x170 [ 773.471781][T19682] acpi_ut_create_thread_state+0x63/0x170 [ 773.471801][T19682] acpi_ps_parse_aml+0x79/0xcb0 [ 773.471825][T19682] acpi_ps_execute_method+0x55a/0xb30 [ 773.471848][T19682] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 773.471864][T19682] acpi_ns_evaluate+0x76c/0xca0 [ 773.471887][T19682] ? kasan_save_track+0x14/0x30 [ 773.471905][T19682] acpi_evaluate_object+0x1fa/0xa90 [ 773.471925][T19682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.471942][T19682] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 773.471961][T19682] ? __mutex_trylock_common+0xe9/0x250 [ 773.471993][T19682] acpi_evaluate_integer+0xdd/0x200 [ 773.472012][T19682] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 773.472029][T19682] ? intel_dp_aux_ch+0x5f4/0x7c0 [ 773.472051][T19682] ? __pfx_status_show+0x10/0x10 [ 773.472073][T19682] status_show+0xa0/0x120 [ 773.472093][T19682] ? __pfx_status_show+0x10/0x10 [ 773.472116][T19682] dev_attr_show+0x53/0xe0 [ 773.472133][T19682] ? __pfx_dev_attr_show+0x10/0x10 [ 773.472146][T19682] sysfs_kf_seq_show+0x213/0x3e0 [ 773.472166][T19682] seq_read_iter+0x506/0x12c0 [ 773.472191][T19682] kernfs_fop_read_iter+0x46c/0x610 [ 773.472206][T19682] ? rw_verify_area+0xcf/0x6c0 [ 773.472223][T19682] vfs_read+0x8bf/0xcf0 [ 773.472242][T19682] ? __pfx___mutex_lock+0x10/0x10 [ 773.472264][T19682] ? __pfx_vfs_read+0x10/0x10 [ 773.472293][T19682] ksys_read+0x12a/0x250 [ 773.472309][T19682] ? __pfx_ksys_read+0x10/0x10 [ 773.472332][T19682] do_syscall_64+0xcd/0x4c0 [ 773.472355][T19682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.472369][T19682] RIP: 0033:0x7fba93d8eec9 [ 773.472383][T19682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.472397][T19682] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.472412][T19682] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 773.472422][T19682] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 773.472432][T19682] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 773.472441][T19682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.472449][T19682] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 773.472470][T19682] [ 773.472515][T19682] ACPI Error: [ 774.078371][T19688] FAULT_INJECTION: forcing a failure. [ 774.078371][T19688] name failslab, interval 1, probability 0, space 0, times 0 [ 774.142647][T19688] CPU: 1 UID: 0 PID: 19688 Comm: syz.4.2603 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 774.142679][T19688] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 774.142686][T19688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 774.142695][T19688] Call Trace: [ 774.142701][T19688] [ 774.142708][T19688] dump_stack_lvl+0x16c/0x1f0 [ 774.142738][T19688] should_fail_ex+0x512/0x640 [ 774.142761][T19688] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 774.142779][T19688] should_failslab+0xc2/0x120 [ 774.142799][T19688] __kmalloc_cache_noprof+0x6a/0x3e0 [ 774.142814][T19688] ? mpi_alloc+0x46/0x230 [ 774.142835][T19688] mpi_alloc+0x46/0x230 [ 774.142851][T19688] rsa_enc+0x88/0x3b0 [ 774.142868][T19688] ? __pfx_rsa_enc+0x10/0x10 [ 774.142883][T19688] ? __virt_addr_valid+0x81/0x610 [ 774.142899][T19688] ? __phys_addr+0xe8/0x180 [ 774.142916][T19688] ? sg_init_one+0xf5/0x1b0 [ 774.142937][T19688] rsassa_pkcs1_verify+0x4ff/0xb60 [ 774.142961][T19688] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 774.142996][T19688] ? rsa_max_size+0xd/0x70 [ 774.143011][T19688] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 774.143033][T19688] public_key_verify_signature+0x672/0x970 [ 774.143053][T19688] ? __pfx_public_key_verify_signature+0x10/0x10 [ 774.143086][T19688] x509_check_for_self_signed+0x31a/0x500 [ 774.143108][T19688] x509_cert_parse+0x5f8/0x900 [ 774.143124][T19688] ? kasan_save_stack+0x42/0x60 [ 774.143142][T19688] ? kasan_save_stack+0x33/0x60 [ 774.143157][T19688] ? kasan_save_track+0x14/0x30 [ 774.143174][T19688] pkcs7_extract_cert+0xa4/0x320 [ 774.143196][T19688] asn1_ber_decoder+0xc5f/0x1df0 [ 774.143219][T19688] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 774.143250][T19688] pkcs7_parse_message+0x288/0x720 [ 774.143272][T19688] verify_pkcs7_signature+0x30/0xa0 [ 774.143295][T19688] valid_regdb+0x211/0x590 [ 774.143317][T19688] ? __pfx___mutex_lock+0x10/0x10 [ 774.143339][T19688] ? __pfx_valid_regdb+0x10/0x10 [ 774.143363][T19688] reg_reload_regdb+0x11a/0x460 [ 774.143377][T19688] ? __pfx_reg_reload_regdb+0x10/0x10 [ 774.143392][T19688] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 774.143409][T19688] ? nl80211_pre_doit+0x1b0/0xb10 [ 774.143429][T19688] genl_family_rcv_msg_doit+0x209/0x2f0 [ 774.143447][T19688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 774.143462][T19688] ? rcu_is_watching+0x12/0xc0 [ 774.143483][T19688] ? bpf_lsm_capable+0x9/0x10 [ 774.143496][T19688] ? security_capable+0x7e/0x260 [ 774.143514][T19688] genl_rcv_msg+0x55c/0x800 [ 774.143531][T19688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.143546][T19688] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 774.143562][T19688] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 774.143582][T19688] ? __pfx_nl80211_post_doit+0x10/0x10 [ 774.143602][T19688] netlink_rcv_skb+0x158/0x420 [ 774.143623][T19688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.143639][T19688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.143668][T19688] ? netlink_deliver_tap+0x1ae/0xd30 [ 774.143691][T19688] genl_rcv+0x28/0x40 [ 774.143703][T19688] netlink_unicast+0x5a7/0x870 [ 774.143726][T19688] ? __pfx_netlink_unicast+0x10/0x10 [ 774.143747][T19688] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 774.143767][T19688] ? __lock_acquire+0xb97/0x1ce0 [ 774.143790][T19688] netlink_sendmsg+0x8d1/0xdd0 [ 774.143815][T19688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.143838][T19688] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 774.143864][T19688] ____sys_sendmsg+0xa98/0xc70 [ 774.143881][T19688] ? copy_msghdr_from_user+0x10a/0x160 [ 774.143902][T19688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.143924][T19688] ? __pfx_futex_wake_mark+0x10/0x10 [ 774.143947][T19688] ___sys_sendmsg+0x134/0x1d0 [ 774.143969][T19688] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.144020][T19688] __sys_sendmsg+0x16d/0x220 [ 774.144042][T19688] ? __pfx___sys_sendmsg+0x10/0x10 [ 774.144063][T19688] ? __x64_sys_futex+0x1e0/0x4c0 [ 774.144094][T19688] do_syscall_64+0xcd/0x4c0 [ 774.144116][T19688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.144132][T19688] RIP: 0033:0x7f47c6f8eec9 [ 774.144145][T19688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.144160][T19688] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.144175][T19688] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 774.144185][T19688] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 774.144194][T19688] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.144203][T19688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.144213][T19688] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 774.144232][T19688] [ 775.148647][T19695] tipc: Started in network mode [ 775.163482][T19695] tipc: Node identity ee00, cluster identity 4711 [ 775.182266][T19695] tipc: Node number set to 60928 [ 775.304209][T19682] ffff888079722000 walk still has a scope list (20250404/dswstate-694) [ 776.183436][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2607'. [ 776.440986][T19720] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 778.309425][T19766] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2618'. [ 778.893668][T19772] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2620'. [ 780.881289][T19836] Invalid ELF header magic: != ELF [ 781.115445][T19819] Process accounting resumed [ 782.131893][T19869] random: crng reseeded on system resumption [ 786.579588][T19951] random: crng reseeded on system resumption [ 787.097319][T19969] Unrecognized hibernate image header format! [ 787.225104][T19969] PM: hibernation: Image mismatch: architecture specific data [ 787.426237][T19978] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2663'. [ 788.097509][T19984] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2666'. [ 790.156818][T20033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2675'. [ 790.509015][T20033] bond0: (slave bond_slave_1): Releasing backup interface [ 791.664768][T20057] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 791.691232][T20050] openvswitch: HfR: Dropping previously announced user features [ 792.813658][T20083] random: crng reseeded on system resumption [ 793.799664][T20099] random: crng reseeded on system resumption [ 794.285323][T20113] Invalid ELF header magic: != ELF [ 797.106622][T20188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2701'. [ 799.795979][T20242] random: crng reseeded on system resumption [ 800.131328][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 800.145708][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 800.154270][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 800.162900][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 800.170406][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 800.803040][T20250] Unrecognized hibernate image header format! [ 800.904062][T20250] PM: hibernation: Image mismatch: architecture specific data [ 801.032445][T20246] chnl_net:caif_netlink_parms(): no params data found [ 801.659231][T16898] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.073776][T20275] : Can't lookup blockdev [ 802.122035][T16898] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.223287][T11808] Bluetooth: hci4: command tx timeout [ 802.527134][T16898] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.605652][T20246] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.640606][T20246] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.679902][T20246] bridge_slave_0: entered allmulticast mode [ 802.709153][T20246] bridge_slave_0: entered promiscuous mode [ 802.749158][T20246] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.795900][T20246] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.835272][T20246] bridge_slave_1: entered allmulticast mode [ 802.870593][T20246] bridge_slave_1: entered promiscuous mode [ 803.029589][T16898] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.335414][T20246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.377895][T20246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.690030][T20246] team0: Port device team_slave_0 added [ 803.827663][T20246] team0: Port device team_slave_1 added [ 804.280096][T20246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.296969][T11808] Bluetooth: hci4: command tx timeout [ 804.322768][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.413278][T20246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.454811][T20246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.482173][T20246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.585420][T20246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.217376][T20305] device-mapper: ioctl: device name cannot contain '/' [ 806.373504][T11808] Bluetooth: hci4: command tx timeout [ 806.986243][T16898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.019481][T16898] bond0 (unregistering): Released all slaves [ 807.149044][T20246] hsr_slave_0: entered promiscuous mode [ 807.176830][T20246] hsr_slave_1: entered promiscuous mode [ 807.203858][T20246] debugfs: 'hsr0' already exists in 'hsr' [ 807.231918][T20246] Cannot create hsr debugfs directory [ 807.282916][T16898] HfR: left promiscuous mode [ 807.439625][T16898] tipc: Left network mode [ 808.170052][T20321] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 808.453540][T11808] Bluetooth: hci4: command tx timeout [ 808.617662][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.624162][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.909096][T20336] Invalid ELF header magic: != ELF [ 809.249771][T20344] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 810.095660][ T30] audit: type=1326 audit(4294967442.460:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20358 comm="syz.6.2724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f95d8eec9 code=0x0 [ 810.538189][T20347] HfR: entered promiscuous mode [ 810.741742][T16898] hsr_slave_1: left promiscuous mode [ 810.787994][T16898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.853285][T16898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.943733][T16898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.951125][T16898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.087950][T16898] veth1_vlan: left promiscuous mode [ 811.145164][T16898] veth0_vlan: left promiscuous mode [ 812.438439][T16898] team0 (unregistering): Port device team_slave_0 removed [ 813.811832][T20358] Process accounting paused [ 813.907694][T20246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 814.032944][T20246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 814.072313][T20246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 814.131951][T20246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 814.654584][T20431] random: crng reseeded on system resumption [ 814.760862][T20436] FAULT_INJECTION: forcing a failure. [ 814.760862][T20436] name failslab, interval 1, probability 0, space 0, times 0 [ 814.779767][T20246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.883610][T20436] CPU: 1 UID: 0 PID: 20436 Comm: syz.6.2730 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 814.883644][T20436] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 814.883652][T20436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 814.883662][T20436] Call Trace: [ 814.883667][T20436] [ 814.883674][T20436] dump_stack_lvl+0x16c/0x1f0 [ 814.883701][T20436] should_fail_ex+0x512/0x640 [ 814.883723][T20436] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 814.883741][T20436] should_failslab+0xc2/0x120 [ 814.883760][T20436] __kmalloc_cache_noprof+0x6a/0x3e0 [ 814.883775][T20436] ? input_allocate_device+0x44/0x350 [ 814.883795][T20436] input_allocate_device+0x44/0x350 [ 814.883811][T20436] uinput_ioctl_handler.isra.0+0x8bb/0x1df0 [ 814.883833][T20436] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 814.883858][T20436] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 814.883883][T20436] ? find_held_lock+0x2b/0x80 [ 814.883907][T20436] ? __pfx_uinput_ioctl+0x10/0x10 [ 814.883928][T20436] __x64_sys_ioctl+0x18b/0x210 [ 814.883951][T20436] do_syscall_64+0xcd/0x4c0 [ 814.883973][T20436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.883988][T20436] RIP: 0033:0x7f6f95d8eec9 [ 814.884001][T20436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.884015][T20436] RSP: 002b:00007f6f96ce0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.884029][T20436] RAX: ffffffffffffffda RBX: 00007f6f95fe6090 RCX: 00007f6f95d8eec9 [ 814.884039][T20436] RDX: 0000000000000000 RSI: 00000000c06855c8 RDI: 000000000000000e [ 814.884047][T20436] RBP: 00007f6f95e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.884056][T20436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.884071][T20436] R13: 00007f6f95fe6128 R14: 00007f6f95fe6090 R15: 00007ffe67258388 [ 814.884090][T20436] [ 815.082728][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.092334][T20246] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.466565][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.473732][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.561115][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.568290][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.885857][T20246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 816.358021][T20472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2738'. [ 816.451783][T20472] bridge_slave_1: left allmulticast mode [ 816.488636][T20472] bridge_slave_1: left promiscuous mode [ 816.566658][T20472] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.601529][T20472] bridge_slave_0: left allmulticast mode [ 816.616775][T20472] bridge_slave_0: left promiscuous mode [ 816.622758][T20472] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.801074][T20246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.515374][T20508] FAULT_INJECTION: forcing a failure. [ 817.515374][T20508] name failslab, interval 1, probability 0, space 0, times 0 [ 817.585369][T20508] CPU: 1 UID: 0 PID: 20508 Comm: syz.4.2744 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 817.585402][T20508] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 817.585411][T20508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.585419][T20508] Call Trace: [ 817.585426][T20508] [ 817.585432][T20508] dump_stack_lvl+0x16c/0x1f0 [ 817.585460][T20508] should_fail_ex+0x512/0x640 [ 817.585482][T20508] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 817.585500][T20508] should_failslab+0xc2/0x120 [ 817.585520][T20508] __kmalloc_cache_noprof+0x6a/0x3e0 [ 817.585534][T20508] ? do_raw_spin_lock+0x12c/0x2b0 [ 817.585556][T20508] ? single_open+0x4d/0x1f0 [ 817.585578][T20508] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 817.585595][T20508] single_open+0x4d/0x1f0 [ 817.585616][T20508] tracing_trace_options_open+0xa7/0x100 [ 817.585638][T20508] do_dentry_open+0x97f/0x1530 [ 817.585656][T20508] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 817.585679][T20508] vfs_open+0x82/0x3f0 [ 817.585701][T20508] path_openat+0x1de4/0x2cb0 [ 817.585724][T20508] ? __pfx_path_openat+0x10/0x10 [ 817.585746][T20508] do_filp_open+0x20b/0x470 [ 817.585763][T20508] ? __pfx_do_filp_open+0x10/0x10 [ 817.585793][T20508] ? alloc_fd+0x471/0x7d0 [ 817.585813][T20508] do_sys_openat2+0x11b/0x1d0 [ 817.585833][T20508] ? __pfx_do_sys_openat2+0x10/0x10 [ 817.585861][T20508] __x64_sys_openat+0x174/0x210 [ 817.585874][T20508] ? __pfx___x64_sys_openat+0x10/0x10 [ 817.585895][T20508] do_syscall_64+0xcd/0x4c0 [ 817.585917][T20508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.585932][T20508] RIP: 0033:0x7f47c6f8eec9 [ 817.585945][T20508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.585959][T20508] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 817.585973][T20508] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 817.585983][T20508] RDX: 0000000000084100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 817.585993][T20508] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 817.586002][T20508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.586012][T20508] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 817.586031][T20508] [ 817.823562][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.988448][T20246] veth0_vlan: entered promiscuous mode [ 817.998211][T20246] veth1_vlan: entered promiscuous mode [ 818.017932][T20246] veth0_macvtap: entered promiscuous mode [ 818.026919][T20246] veth1_macvtap: entered promiscuous mode [ 818.041867][T20246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.051907][T20246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.678337][T10709] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.695827][T10709] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.839635][T10709] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.894487][T10709] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.009942][T20524] FAULT_INJECTION: forcing a failure. [ 819.009942][T20524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.111945][T10709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.164028][T10709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.192805][T20524] CPU: 1 UID: 0 PID: 20524 Comm: syz.4.2747 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 819.192835][T20524] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 819.192843][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.192852][T20524] Call Trace: [ 819.192858][T20524] [ 819.192864][T20524] dump_stack_lvl+0x16c/0x1f0 [ 819.192890][T20524] should_fail_ex+0x512/0x640 [ 819.192916][T20524] _copy_to_user+0x32/0xd0 [ 819.192933][T20524] do_pages_stat+0x631/0x820 [ 819.192959][T20524] ? __pfx_do_pages_stat+0x10/0x10 [ 819.192995][T20524] ? do_raw_spin_unlock+0x172/0x230 [ 819.193021][T20524] kernel_move_pages+0xfa8/0x1380 [ 819.193044][T20524] ? do_futex+0x122/0x350 [ 819.193062][T20524] ? __pfx_do_futex+0x10/0x10 [ 819.193080][T20524] ? __pfx_kernel_move_pages+0x10/0x10 [ 819.193103][T20524] ? __x64_sys_futex+0x1e0/0x4c0 [ 819.193120][T20524] ? __x64_sys_futex+0x1e9/0x4c0 [ 819.193150][T20524] ? xfd_validate_state+0x61/0x180 [ 819.193170][T20524] ? __pfx_do_writev+0x10/0x10 [ 819.193190][T20524] __x64_sys_move_pages+0xe0/0x1c0 [ 819.193210][T20524] ? do_syscall_64+0x91/0x4c0 [ 819.193231][T20524] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.193250][T20524] do_syscall_64+0xcd/0x4c0 [ 819.193272][T20524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.193286][T20524] RIP: 0033:0x7f47c6f8eec9 [ 819.193299][T20524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.193313][T20524] RSP: 002b:00007f47c4db2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 819.193327][T20524] RAX: ffffffffffffffda RBX: 00007f47c71e6270 RCX: 00007f47c6f8eec9 [ 819.193337][T20524] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 819.193346][T20524] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 8000400000000000 [ 819.193355][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.193363][T20524] R13: 00007f47c71e6308 R14: 00007f47c71e6270 R15: 00007ffc24943be8 [ 819.193380][T20524] [ 819.397635][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.726382][T10855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.745084][T10855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.024460][ T30] audit: type=1326 audit(4294967452.370:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.5.2707" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82c5b8eec9 code=0x0 [ 820.179700][T20540] FAULT_INJECTION: forcing a failure. [ 820.179700][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 820.253275][T20540] CPU: 1 UID: 0 PID: 20540 Comm: syz.5.2707 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 820.253310][T20540] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 820.253318][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.253327][T20540] Call Trace: [ 820.253333][T20540] [ 820.253340][T20540] dump_stack_lvl+0x16c/0x1f0 [ 820.253367][T20540] should_fail_ex+0x512/0x640 [ 820.253389][T20540] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 820.253409][T20540] should_failslab+0xc2/0x120 [ 820.253430][T20540] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 820.253447][T20540] ? _copy_from_iter+0x15d/0x1720 [ 820.253461][T20540] ? sctp_chunkify+0x51/0x2d0 [ 820.253480][T20540] sctp_chunkify+0x51/0x2d0 [ 820.253497][T20540] _sctp_make_chunk+0x148/0x270 [ 820.253516][T20540] sctp_make_datafrag_empty+0x16f/0x240 [ 820.253535][T20540] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 820.253559][T20540] sctp_datamsg_from_user+0x595/0x1320 [ 820.253585][T20540] sctp_sendmsg_to_asoc+0xaf5/0x1bf0 [ 820.253608][T20540] ? sctp_assoc_set_primary+0x177/0x300 [ 820.253638][T20540] ? sctp_assoc_add_peer+0x252/0x1550 [ 820.253663][T20540] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 820.253683][T20540] ? sctp_connect_new_asoc+0x41e/0x770 [ 820.253698][T20540] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 820.253716][T20540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 820.253739][T20540] sctp_sendmsg+0xea2/0x1e10 [ 820.253759][T20540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 820.253771][T20540] ? __pfx___might_resched+0x10/0x10 [ 820.253785][T20540] ? __pfx_futex_wake_mark+0x10/0x10 [ 820.253809][T20540] ? aa_sk_perm+0x2f4/0xb10 [ 820.253829][T20540] ? __pfx_aa_sk_perm+0x10/0x10 [ 820.253845][T20540] ? __might_fault+0xe3/0x190 [ 820.253867][T20540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 820.253881][T20540] inet_sendmsg+0x11c/0x140 [ 820.253900][T20540] __sys_sendto+0x43c/0x520 [ 820.253926][T20540] ? __pfx___sys_sendto+0x10/0x10 [ 820.253952][T20540] ? fd_install+0x225/0x750 [ 820.253977][T20540] ? xfd_validate_state+0x61/0x180 [ 820.253998][T20540] ? __pfx_do_writev+0x10/0x10 [ 820.254015][T20540] __x64_sys_sendto+0xe0/0x1c0 [ 820.254034][T20540] ? do_syscall_64+0x91/0x4c0 [ 820.254054][T20540] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.254080][T20540] do_syscall_64+0xcd/0x4c0 [ 820.254103][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.254119][T20540] RIP: 0033:0x7f82c5b8eec9 [ 820.254132][T20540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.254146][T20540] RSP: 002b:00007f82c6996038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 820.254160][T20540] RAX: ffffffffffffffda RBX: 00007f82c5de6180 RCX: 00007f82c5b8eec9 [ 820.254170][T20540] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000008 [ 820.254180][T20540] RBP: 00007f82c5c11f91 R08: 0000200000000000 R09: 000000000000001c [ 820.254190][T20540] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000000 [ 820.254199][T20540] R13: 00007f82c5de6218 R14: 00007f82c5de6180 R15: 00007ffeb3218d78 [ 820.254218][T20540] [ 820.566385][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.579573][T20541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'. [ 821.324073][T11808] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 822.072384][T20571] openvswitch: HfR: Dropping previously announced user features [ 822.193672][T20571] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input24 [ 823.433054][T20606] netlink: 346 bytes leftover after parsing attributes in process `syz.4.2762'. [ 823.617041][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 823.706875][ T30] audit: type=1800 audit(4294967456.080:72): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2761" name="members" dev="configfs" ino=80047 res=0 errno=0 [ 824.138963][T20613] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2764'. [ 826.311955][T20642] FAULT_INJECTION: forcing a failure. [ 826.311955][T20642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.348420][T20642] CPU: 1 UID: 0 PID: 20642 Comm: syz.6.2770 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 826.348452][T20642] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 826.348461][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 826.348470][T20642] Call Trace: [ 826.348476][T20642] [ 826.348482][T20642] dump_stack_lvl+0x16c/0x1f0 [ 826.348511][T20642] should_fail_ex+0x512/0x640 [ 826.348537][T20642] _copy_to_user+0x32/0xd0 [ 826.348554][T20642] do_pages_stat+0x631/0x820 [ 826.348581][T20642] ? __pfx_do_pages_stat+0x10/0x10 [ 826.348617][T20642] ? do_raw_spin_unlock+0x172/0x230 [ 826.348647][T20642] kernel_move_pages+0xfa8/0x1380 [ 826.348670][T20642] ? do_futex+0x122/0x350 [ 826.348688][T20642] ? __pfx_do_futex+0x10/0x10 [ 826.348707][T20642] ? __pfx_kernel_move_pages+0x10/0x10 [ 826.348732][T20642] ? __x64_sys_futex+0x1e0/0x4c0 [ 826.348748][T20642] ? __x64_sys_futex+0x1e9/0x4c0 [ 826.348769][T20642] ? xfd_validate_state+0x61/0x180 [ 826.348788][T20642] ? __pfx_do_writev+0x10/0x10 [ 826.348806][T20642] __x64_sys_move_pages+0xe0/0x1c0 [ 826.348826][T20642] ? do_syscall_64+0x91/0x4c0 [ 826.348846][T20642] ? lockdep_hardirqs_on+0x7c/0x110 [ 826.348866][T20642] do_syscall_64+0xcd/0x4c0 [ 826.348888][T20642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.348903][T20642] RIP: 0033:0x7f6f95d8eec9 [ 826.348916][T20642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.348930][T20642] RSP: 002b:00007f6f96d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 826.348945][T20642] RAX: ffffffffffffffda RBX: 00007f6f95fe5fa0 RCX: 00007f6f95d8eec9 [ 826.348954][T20642] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 826.348963][T20642] RBP: 00007f6f95e11f91 R08: 0000000000000000 R09: 8000400000000000 [ 826.348972][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.348980][T20642] R13: 00007f6f95fe6038 R14: 00007f6f95fe5fa0 R15: 00007ffe67258388 [ 826.348999][T20642] [ 826.731124][T20654] random: crng reseeded on system resumption [ 828.107376][T20678] ptrace attach of "./syz-executor exec"[20681] was attempted by "./syz-executor exec"[20678] [ 829.287753][T20691] futex_wake_op: syz.6.2777 tries to shift op by -2048; fix this program [ 829.346069][T20691] futex_wake_op: syz.6.2777 tries to shift op by -2048; fix this program [ 829.760145][T14398] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 830.185632][T20718] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2782'. [ 831.716830][ T30] audit: type=1800 audit(4294967464.070:73): pid=20741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2786" name="features" dev="configfs" ino=80565 res=0 errno=0 [ 833.104605][T20769] input: f¬ as /devices/virtual/input/input25 [ 836.052444][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2807'. [ 836.149744][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2807'. [ 836.685350][T20843] Invalid ELF header magic: != ELF [ 836.999410][T20849] FAULT_INJECTION: forcing a failure. [ 836.999410][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 837.092474][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.2.2810 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 837.092506][T20849] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 837.092514][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.092524][T20849] Call Trace: [ 837.092530][T20849] [ 837.092536][T20849] dump_stack_lvl+0x16c/0x1f0 [ 837.092563][T20849] should_fail_ex+0x512/0x640 [ 837.092585][T20849] ? fs_reclaim_acquire+0xae/0x150 [ 837.092610][T20849] should_failslab+0xc2/0x120 [ 837.092629][T20849] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 837.092647][T20849] ? __kernfs_new_node+0xd2/0x8e0 [ 837.092668][T20849] __kernfs_new_node+0xd2/0x8e0 [ 837.092689][T20849] ? __pfx___kernfs_new_node+0x10/0x10 [ 837.092712][T20849] ? find_held_lock+0x2b/0x80 [ 837.092727][T20849] ? kernfs_root+0xee/0x2a0 [ 837.092755][T20849] kernfs_new_node+0x13c/0x1e0 [ 837.092779][T20849] __kernfs_create_file+0x53/0x350 [ 837.092797][T20849] sysfs_add_file_mode_ns+0x207/0x3c0 [ 837.092821][T20849] internal_create_group+0x578/0xf30 [ 837.092845][T20849] ? __pfx_internal_create_group+0x10/0x10 [ 837.092867][T20849] ? kernfs_create_link+0x1bd/0x240 [ 837.092885][T20849] internal_create_groups+0x9d/0x150 [ 837.092905][T20849] device_add+0x731/0x1aa0 [ 837.092923][T20849] ? __pfx_device_add+0x10/0x10 [ 837.092936][T20849] ? __pfx___might_resched+0x10/0x10 [ 837.092950][T20849] ? is_dynamic_key+0xb4/0x160 [ 837.092974][T20849] __add_disk+0x457/0xf00 [ 837.092999][T20849] add_disk_fwnode+0x13f/0x5d0 [ 837.093022][T20849] nbd_dev_add+0x783/0xbb0 [ 837.093045][T20849] ? __pfx_nbd_dev_add+0x10/0x10 [ 837.093077][T20849] ? bpf_lsm_capable+0x9/0x10 [ 837.093091][T20849] ? __radix_tree_lookup+0x21f/0x2c0 [ 837.093115][T20849] nbd_genl_connect+0x8b0/0x1c60 [ 837.093136][T20849] ? __pfx_nbd_genl_connect+0x10/0x10 [ 837.093150][T20849] ? __nla_parse+0x40/0x60 [ 837.093168][T20849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 837.093186][T20849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 837.093207][T20849] genl_family_rcv_msg_doit+0x209/0x2f0 [ 837.093233][T20849] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 837.093249][T20849] ? genl_get_cmd+0x194/0x580 [ 837.093270][T20849] ? __radix_tree_lookup+0x21f/0x2c0 [ 837.093294][T20849] genl_rcv_msg+0x55c/0x800 [ 837.093312][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.093328][T20849] ? __pfx_nbd_genl_connect+0x10/0x10 [ 837.093356][T20849] netlink_rcv_skb+0x158/0x420 [ 837.093378][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.093394][T20849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.093424][T20849] ? netlink_deliver_tap+0x1ae/0xd30 [ 837.093447][T20849] genl_rcv+0x28/0x40 [ 837.093459][T20849] netlink_unicast+0x5a7/0x870 [ 837.093484][T20849] ? __pfx_netlink_unicast+0x10/0x10 [ 837.093505][T20849] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 837.093525][T20849] ? __lock_acquire+0xb97/0x1ce0 [ 837.093549][T20849] netlink_sendmsg+0x8d1/0xdd0 [ 837.093573][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.093597][T20849] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 837.093616][T20849] ____sys_sendmsg+0xa98/0xc70 [ 837.093633][T20849] ? copy_msghdr_from_user+0x10a/0x160 [ 837.093653][T20849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.093674][T20849] ? __pfx_futex_wake_mark+0x10/0x10 [ 837.093698][T20849] ___sys_sendmsg+0x134/0x1d0 [ 837.093720][T20849] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.093765][T20849] __sys_sendmsg+0x16d/0x220 [ 837.093786][T20849] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.093806][T20849] ? __x64_sys_futex+0x1e0/0x4c0 [ 837.093836][T20849] do_syscall_64+0xcd/0x4c0 [ 837.093859][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.093874][T20849] RIP: 0033:0x7fba93d8eec9 [ 837.093887][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.093902][T20849] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.093917][T20849] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 837.093927][T20849] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 837.093936][T20849] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 837.093946][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.093955][T20849] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 837.093975][T20849] [ 838.400913][T20861] tipc: Can't bind to reserved service type 1 [ 838.755767][ T30] audit: type=1800 audit(4294967471.080:74): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2813" name="dbroot" dev="configfs" ino=81301 res=0 errno=0 [ 838.895815][T20849] nbd: failed to add new device [ 839.041655][T20849] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 840.244584][T20894] FAULT_INJECTION: forcing a failure. [ 840.244584][T20894] name failslab, interval 1, probability 0, space 0, times 0 [ 840.420819][T20894] CPU: 1 UID: 0 PID: 20894 Comm: syz.2.2817 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 840.420850][T20894] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 840.420859][T20894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 840.420868][T20894] Call Trace: [ 840.420874][T20894] [ 840.420880][T20894] dump_stack_lvl+0x16c/0x1f0 [ 840.420908][T20894] should_fail_ex+0x512/0x640 [ 840.420931][T20894] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 840.420951][T20894] should_failslab+0xc2/0x120 [ 840.420970][T20894] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 840.420987][T20894] ? sk_prot_alloc+0x60/0x2a0 [ 840.421006][T20894] sk_prot_alloc+0x60/0x2a0 [ 840.421021][T20894] sk_alloc+0x36/0xc20 [ 840.421041][T20894] kcm_create+0xfc/0x690 [ 840.421060][T20894] __sock_create+0x338/0x8d0 [ 840.421080][T20894] __sys_socket+0x14d/0x260 [ 840.421097][T20894] ? __pfx___sys_socket+0x10/0x10 [ 840.421114][T20894] ? xfd_validate_state+0x61/0x180 [ 840.421147][T20894] __x64_sys_socket+0x72/0xb0 [ 840.421164][T20894] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.421185][T20894] do_syscall_64+0xcd/0x4c0 [ 840.421208][T20894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.421223][T20894] RIP: 0033:0x7fba93d8eec9 [ 840.421235][T20894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.421249][T20894] RSP: 002b:00007fba91bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 840.421263][T20894] RAX: ffffffffffffffda RBX: 00007fba93fe6270 RCX: 00007fba93d8eec9 [ 840.421273][T20894] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 840.421281][T20894] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 840.421290][T20894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.421298][T20894] R13: 00007fba93fe6308 R14: 00007fba93fe6270 R15: 00007fff49334d68 [ 840.421316][T20894] [ 840.422724][T20871] kexec: Could not allocate control_code_buffer [ 841.421339][T20912] bridge0: port 3(gretap0) entered blocking state [ 841.497152][T20912] bridge0: port 3(gretap0) entered disabled state [ 841.699414][T20927] random: crng reseeded on system resumption [ 841.718490][T20912] gretap0: entered allmulticast mode [ 841.864313][T20912] gretap0: entered promiscuous mode [ 841.869913][T20912] bridge0: port 3(gretap0) entered blocking state [ 841.876436][T20912] bridge0: port 3(gretap0) entered forwarding state [ 844.568521][T20974] netlink: 1120 bytes leftover after parsing attributes in process `syz.5.2833'. [ 844.692686][T20974] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2833'. [ 844.841708][T20949] Process accounting resumed [ 845.620743][T20994] __vm_enough_memory: pid: 20994, comm: syz.5.2836, bytes: 4398046511104 not enough memory for the allocation [ 845.634132][T20992] zswap: compressor not available [ 846.173414][T21010] random: crng reseeded on system resumption [ 846.241690][T20977] kexec: Could not allocate control_code_buffer [ 846.806171][T21020] Console: switching to colour frame buffer device 128x48 [ 846.925476][T21024] blktrace: Concurrent blktraces are not allowed on ram7 [ 847.121637][T21025] ptrace attach of "./syz-executor exec"[21026] was attempted by "./syz-executor exec"[21025] [ 847.168430][T21028] netlink: 'syz.2.2845': attribute type 2 has an invalid length. [ 847.346149][T21028] FAULT_INJECTION: forcing a failure. [ 847.346149][T21028] name failslab, interval 1, probability 0, space 0, times 0 [ 847.415843][T21028] CPU: 1 UID: 0 PID: 21028 Comm: syz.2.2845 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 847.415874][T21028] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 847.415883][T21028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 847.415893][T21028] Call Trace: [ 847.415899][T21028] [ 847.415905][T21028] dump_stack_lvl+0x16c/0x1f0 [ 847.415934][T21028] should_fail_ex+0x512/0x640 [ 847.415956][T21028] ? __kvmalloc_node_noprof+0x124/0x620 [ 847.415975][T21028] should_failslab+0xc2/0x120 [ 847.415994][T21028] __kvmalloc_node_noprof+0x137/0x620 [ 847.416010][T21028] ? lockdep_init_map_type+0x5c/0x280 [ 847.416029][T21028] ? alloc_netdev_mqs+0xae5/0x1530 [ 847.416054][T21028] ? alloc_netdev_mqs+0xae5/0x1530 [ 847.416073][T21028] alloc_netdev_mqs+0xae5/0x1530 [ 847.416098][T21028] slip_open+0x35c/0x1150 [ 847.416128][T21028] ? __pfx___might_resched+0x10/0x10 [ 847.416143][T21028] ? __pfx_n_tty_close+0x10/0x10 [ 847.416159][T21028] ? find_held_lock+0x2b/0x80 [ 847.416173][T21028] ? __pfx_slip_open+0x10/0x10 [ 847.416193][T21028] ? down_write+0x14d/0x200 [ 847.416209][T21028] ? __pfx_slip_open+0x10/0x10 [ 847.416233][T21028] tty_ldisc_open+0x9f/0x120 [ 847.416252][T21028] tty_set_ldisc+0x32b/0x780 [ 847.416274][T21028] tty_ioctl+0xc2e/0x1680 [ 847.416295][T21028] ? __pfx_tty_ioctl+0x10/0x10 [ 847.416321][T21028] ? find_held_lock+0x2b/0x80 [ 847.416334][T21028] ? hook_file_ioctl_common+0x145/0x410 [ 847.416357][T21028] ? __fget_files+0x20e/0x3c0 [ 847.416376][T21028] ? __pfx_tty_ioctl+0x10/0x10 [ 847.416397][T21028] __x64_sys_ioctl+0x18b/0x210 [ 847.416420][T21028] do_syscall_64+0xcd/0x4c0 [ 847.416443][T21028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.416458][T21028] RIP: 0033:0x7fba93d8eec9 [ 847.416470][T21028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.416485][T21028] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.416500][T21028] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 847.416511][T21028] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008 [ 847.416520][T21028] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 847.416528][T21028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.416537][T21028] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 847.416556][T21028] [ 847.665448][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.024712][T21032] vivid-003: ================= START STATUS ================= [ 848.074940][T21032] vivid-003: Radio HW Seek Mode: Bounded [ 848.080603][T21032] vivid-003: Radio Programmable HW Seek: false [ 848.109468][T21032] vivid-003: RDS Rx I/O Mode: Block I/O [ 848.143166][T21032] vivid-003: Generate RBDS Instead of RDS: false [ 848.202403][T21032] vivid-003: RDS Reception: true [ 848.243333][T21032] vivid-003: RDS Program Type: 0 inactive [ 848.290096][T21032] vivid-003: RDS PS Name: inactive [ 848.343934][T21032] vivid-003: RDS Radio Text: inactive [ 848.380913][T21032] vivid-003: RDS Traffic Announcement: false inactive [ 848.413390][T21032] vivid-003: RDS Traffic Program: false inactive [ 848.442147][T21032] vivid-003: RDS Music: false inactive [ 848.451686][T21032] vivid-003: ================== END STATUS ================== [ 848.475896][T21036] zswap: compressor 000 not available [ 849.043903][T21036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 849.054792][T21036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 849.092793][T21036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 849.121025][T21036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 849.156475][T21036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 849.189059][T21036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 849.217694][T21036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 849.246428][T21036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 849.270711][T21036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 849.292285][T21036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 849.310433][T21036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 849.326070][T21036] CPU0 is offline. [ 850.453282][ T5186] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 850.693446][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 850.930587][T21082] Console: switching to colour VGA+ 32x100 [ 851.093352][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 851.253127][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 851.333651][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 852.670802][T21101] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2859'. [ 852.773883][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 853.173562][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 853.333584][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 853.415664][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 854.755676][T21125] Invalid ELF header magic: != ELF [ 855.222191][T21132] serio: Serial port ttyS0 [ 855.257717][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 855.413518][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 855.493192][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 856.942726][T21148] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2866'. [ 856.999518][T21158] FAULT_INJECTION: forcing a failure. [ 856.999518][T21158] name failslab, interval 1, probability 0, space 0, times 0 [ 857.099831][T21158] CPU: 1 UID: 0 PID: 21158 Comm: syz.2.2868 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 857.099861][T21158] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 857.099868][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 857.099877][T21158] Call Trace: [ 857.099883][T21158] [ 857.099889][T21158] dump_stack_lvl+0x16c/0x1f0 [ 857.099915][T21158] should_fail_ex+0x512/0x640 [ 857.099937][T21158] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 857.099956][T21158] should_failslab+0xc2/0x120 [ 857.099974][T21158] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 857.099991][T21158] ? create_new_namespaces+0x30/0xa90 [ 857.100011][T21158] create_new_namespaces+0x30/0xa90 [ 857.100026][T21158] ? bpf_lsm_capable+0x9/0x10 [ 857.100040][T21158] ? security_capable+0x7e/0x260 [ 857.100057][T21158] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 857.100074][T21158] ksys_unshare+0x45b/0xa40 [ 857.100101][T21158] ? __pfx_ksys_unshare+0x10/0x10 [ 857.100120][T21158] ? xfd_validate_state+0x61/0x180 [ 857.100145][T21158] __x64_sys_unshare+0x31/0x40 [ 857.100163][T21158] do_syscall_64+0xcd/0x4c0 [ 857.100186][T21158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.100200][T21158] RIP: 0033:0x7fba93d8eec9 [ 857.100213][T21158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.100226][T21158] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 857.100241][T21158] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 857.100251][T21158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 857.100259][T21158] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 857.100267][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.100275][T21158] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 857.100293][T21158] [ 857.701497][T21171] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2871'. [ 857.757147][T21175] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 857.853929][T21174] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2873'. [ 859.310290][T21194] blktrace: Concurrent blktraces are not allowed on loop2 [ 859.725127][T21200] FAULT_INJECTION: forcing a failure. [ 859.725127][T21200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 859.817969][T21200] CPU: 1 UID: 0 PID: 21200 Comm: syz.2.2878 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 859.818001][T21200] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 859.818009][T21200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.818019][T21200] Call Trace: [ 859.818025][T21200] [ 859.818031][T21200] dump_stack_lvl+0x16c/0x1f0 [ 859.818058][T21200] should_fail_ex+0x512/0x640 [ 859.818083][T21200] should_fail_alloc_page+0xe7/0x130 [ 859.818104][T21200] prepare_alloc_pages+0x3c2/0x610 [ 859.818129][T21200] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 859.818152][T21200] ? __up_read+0x1f8/0x750 [ 859.818174][T21200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 859.818209][T21200] __folio_alloc_noprof+0x11/0x220 [ 859.818226][T21200] alloc_migration_target+0x2bf/0x770 [ 859.818248][T21200] migrate_pages_batch+0x39f/0x3bd0 [ 859.818271][T21200] ? __pfx_alloc_migration_target+0x10/0x10 [ 859.818298][T21200] ? __pfx_migrate_pages_batch+0x10/0x10 [ 859.818322][T21200] ? __pfx_walk_pgd_range+0x10/0x10 [ 859.818341][T21200] migrate_pages_sync+0x12d/0x8a0 [ 859.818363][T21200] ? __pfx_alloc_migration_target+0x10/0x10 [ 859.818386][T21200] ? queue_pages_test_walk+0x279/0x410 [ 859.818406][T21200] ? __pfx_migrate_pages_sync+0x10/0x10 [ 859.818427][T21200] ? walk_page_test+0x9b/0x180 [ 859.818445][T21200] ? walk_page_range_mm+0x235/0xb40 [ 859.818465][T21200] migrate_pages+0x1b67/0x23b0 [ 859.818488][T21200] ? __pfx_alloc_migration_target+0x10/0x10 [ 859.818513][T21200] ? __pfx_migrate_pages+0x10/0x10 [ 859.818534][T21200] ? queue_pages_range+0x11e/0x180 [ 859.818554][T21200] ? __pfx___up_read+0x10/0x10 [ 859.818578][T21200] ? do_migrate_pages+0x458/0x750 [ 859.818601][T21200] do_migrate_pages+0x48e/0x750 [ 859.818625][T21200] ? __pfx_do_migrate_pages+0x10/0x10 [ 859.818645][T21200] ? rcu_is_watching+0x12/0xc0 [ 859.818663][T21200] ? cap_capable+0xb3/0x250 [ 859.818677][T21200] ? get_task_mm+0xc2/0xf0 [ 859.818693][T21200] ? security_capable+0x250/0x260 [ 859.818710][T21200] kernel_migrate_pages+0x55b/0x700 [ 859.818729][T21200] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 859.818749][T21200] ? __pfx_do_writev+0x10/0x10 [ 859.818767][T21200] __x64_sys_migrate_pages+0x96/0x100 [ 859.818787][T21200] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.818807][T21200] do_syscall_64+0xcd/0x4c0 [ 859.818829][T21200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.818844][T21200] RIP: 0033:0x7fba93d8eec9 [ 859.818857][T21200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.818878][T21200] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 859.818894][T21200] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 859.818904][T21200] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 859.818913][T21200] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 859.818922][T21200] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 859.818931][T21200] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 859.818950][T21200] [ 860.159975][T21196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 860.166090][T21196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 860.172073][T21196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 860.178103][T21196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 860.184067][T21196] CPU0 is offline. [ 860.262758][T21209] blktrace: Concurrent blktraces are not allowed on ram7 [ 860.980512][T21234] vhci_hcd: vhci_device speed not set [ 861.059025][T21236] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2886'. [ 861.653065][T20248] Bluetooth: hci2: command 0x0c1a tx timeout [ 861.707588][T21240] FAULT_INJECTION: forcing a failure. [ 861.707588][T21240] name failslab, interval 1, probability 0, space 0, times 0 [ 861.808466][T21243] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 861.878641][T21240] CPU: 1 UID: 0 PID: 21240 Comm: syz.5.2887 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 861.878674][T21240] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 861.878682][T21240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 861.878693][T21240] Call Trace: [ 861.878698][T21240] [ 861.878705][T21240] dump_stack_lvl+0x16c/0x1f0 [ 861.878732][T21240] should_fail_ex+0x512/0x640 [ 861.878755][T21240] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 861.878773][T21240] should_failslab+0xc2/0x120 [ 861.878793][T21240] __kmalloc_cache_noprof+0x6a/0x3e0 [ 861.878808][T21240] ? ww_mutex_lock+0x37/0x160 [ 861.878829][T21240] ? vkms_plane_duplicate_state+0x45/0x130 [ 861.878844][T21240] ? modeset_lock+0x114/0x6e0 [ 861.878860][T21240] vkms_plane_duplicate_state+0x45/0x130 [ 861.878875][T21240] drm_atomic_get_plane_state+0x20e/0x590 [ 861.878894][T21240] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 861.878912][T21240] ? __pfx___might_resched+0x10/0x10 [ 861.878933][T21240] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 861.878951][T21240] ? __mutex_lock+0x1c5/0x1060 [ 861.878970][T21240] ? rcu_is_watching+0x12/0xc0 [ 861.879004][T21240] drm_client_modeset_commit_locked+0x14d/0x580 [ 861.879025][T21240] drm_client_modeset_commit+0x4f/0x80 [ 861.879043][T21240] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 861.879062][T21240] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 861.879084][T21240] drm_fbdev_client_restore+0x2c/0x40 [ 861.879105][T21240] drm_client_dev_restore+0x1f3/0x2a0 [ 861.879125][T21240] drm_release+0x2c4/0x360 [ 861.879143][T21240] ? __pfx_drm_release+0x10/0x10 [ 861.879157][T21240] __fput+0x3ff/0xb70 [ 861.879182][T21240] task_work_run+0x14d/0x240 [ 861.879205][T21240] ? __pfx_task_work_run+0x10/0x10 [ 861.879226][T21240] ? __pfx___do_sys_close_range+0x10/0x10 [ 861.879248][T21240] exit_to_user_mode_loop+0xeb/0x110 [ 861.879270][T21240] do_syscall_64+0x41c/0x4c0 [ 861.879293][T21240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.879307][T21240] RIP: 0033:0x7f82c5b8eec9 [ 861.879320][T21240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.879335][T21240] RSP: 002b:00007f82c69d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 861.879349][T21240] RAX: 0000000000000000 RBX: 00007f82c5de5fa0 RCX: 00007f82c5b8eec9 [ 861.879359][T21240] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 861.879367][T21240] RBP: 00007f82c5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.879376][T21240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.879385][T21240] R13: 00007f82c5de6038 R14: 00007f82c5de5fa0 R15: 00007ffeb3218d78 [ 861.879405][T21240] [ 862.159114][T21244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 862.480737][ T30] audit: type=1800 audit(4294967494.640:75): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2885" name="dbroot" dev="configfs" ino=83495 res=0 errno=0 [ 862.509446][T20248] Bluetooth: hci4: command 0x0c1a tx timeout [ 862.515626][T20248] Bluetooth: hci1: command 0x0c1a tx timeout [ 862.521611][T20248] Bluetooth: hci0: command 0x0c1a tx timeout [ 862.554676][T21247] futex_wake_op: syz.2.2888 tries to shift op by -9; fix this program [ 863.191446][T21254] FAULT_INJECTION: forcing a failure. [ 863.191446][T21254] name failslab, interval 1, probability 0, space 0, times 0 [ 863.302921][T21254] CPU: 1 UID: 0 PID: 21254 Comm: syz.6.2891 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 863.302952][T21254] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 863.302960][T21254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 863.302969][T21254] Call Trace: [ 863.302974][T21254] [ 863.302981][T21254] dump_stack_lvl+0x16c/0x1f0 [ 863.303006][T21254] should_fail_ex+0x512/0x640 [ 863.303028][T21254] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 863.303046][T21254] should_failslab+0xc2/0x120 [ 863.303065][T21254] __kmalloc_cache_noprof+0x6a/0x3e0 [ 863.303080][T21254] ? sctp_auth_shkey_create+0x9e/0x210 [ 863.303103][T21254] sctp_auth_shkey_create+0x9e/0x210 [ 863.303124][T21254] sctp_endpoint_new+0x562/0xcd0 [ 863.303147][T21254] sctp_init_sock+0xe2d/0x1330 [ 863.303166][T21254] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 863.303185][T21254] sctp_v6_init_sock+0x16/0x70 [ 863.303202][T21254] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 863.303220][T21254] inet6_create+0xb2d/0x12b0 [ 863.303238][T21254] ? inet6_create+0x7f/0x12b0 [ 863.303255][T21254] __sock_create+0x338/0x8d0 [ 863.303276][T21254] inet_ctl_sock_create+0x94/0x230 [ 863.303293][T21254] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 863.303307][T21254] ? lockdep_init_map_type+0x5c/0x280 [ 863.303327][T21254] ? do_init_timer+0xc9/0x110 [ 863.303346][T21254] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 863.303363][T21254] sctp_ctrlsock_init+0x40/0xf0 [ 863.303381][T21254] ops_init+0x1df/0x5f0 [ 863.303404][T21254] setup_net+0x10f/0x380 [ 863.303415][T21254] ? lockdep_init_map_type+0x5c/0x280 [ 863.303440][T21254] ? __pfx_setup_net+0x10/0x10 [ 863.303454][T21254] ? debug_mutex_init+0x37/0x70 [ 863.303470][T21254] copy_net_ns+0x2a6/0x5f0 [ 863.303486][T21254] create_new_namespaces+0x3ea/0xa90 [ 863.303507][T21254] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 863.303525][T21254] ksys_unshare+0x45b/0xa40 [ 863.303544][T21254] ? __pfx_ksys_unshare+0x10/0x10 [ 863.303564][T21254] ? xfd_validate_state+0x61/0x180 [ 863.303590][T21254] __x64_sys_unshare+0x31/0x40 [ 863.303608][T21254] do_syscall_64+0xcd/0x4c0 [ 863.303630][T21254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.303644][T21254] RIP: 0033:0x7f6f95d8eec9 [ 863.303656][T21254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.303670][T21254] RSP: 002b:00007f6f96d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 863.303684][T21254] RAX: ffffffffffffffda RBX: 00007f6f95fe5fa0 RCX: 00007f6f95d8eec9 [ 863.303693][T21254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 863.303701][T21254] RBP: 00007f6f95e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 863.303710][T21254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.303718][T21254] R13: 00007f6f95fe6038 R14: 00007f6f95fe5fa0 R15: 00007ffe67258388 [ 863.303737][T21254] [ 864.276324][T21266] netlink: 62 bytes leftover after parsing attributes in process `syz.4.2892'. [ 864.359834][T21268] FAULT_INJECTION: forcing a failure. [ 864.359834][T21268] name failslab, interval 1, probability 0, space 0, times 0 [ 864.374772][T21268] CPU: 1 UID: 0 PID: 21268 Comm: syz.4.2893 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 864.374804][T21268] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 864.374813][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 864.374822][T21268] Call Trace: [ 864.374828][T21268] [ 864.374835][T21268] dump_stack_lvl+0x16c/0x1f0 [ 864.374862][T21268] should_fail_ex+0x512/0x640 [ 864.374885][T21268] ? fs_reclaim_acquire+0xae/0x150 [ 864.374908][T21268] ? tomoyo_open_control+0x51f/0xa30 [ 864.374922][T21268] should_failslab+0xc2/0x120 [ 864.374941][T21268] __kmalloc_noprof+0xd2/0x510 [ 864.374962][T21268] tomoyo_open_control+0x51f/0xa30 [ 864.374979][T21268] do_dentry_open+0x97f/0x1530 [ 864.374997][T21268] ? __pfx_tomoyo_open+0x10/0x10 [ 864.375020][T21268] vfs_open+0x82/0x3f0 [ 864.375043][T21268] path_openat+0x1de4/0x2cb0 [ 864.375066][T21268] ? __pfx_path_openat+0x10/0x10 [ 864.375087][T21268] do_filp_open+0x20b/0x470 [ 864.375104][T21268] ? __pfx_do_filp_open+0x10/0x10 [ 864.375134][T21268] ? alloc_fd+0x471/0x7d0 [ 864.375154][T21268] do_sys_openat2+0x11b/0x1d0 [ 864.375175][T21268] ? __pfx_do_sys_openat2+0x10/0x10 [ 864.375203][T21268] __x64_sys_openat+0x174/0x210 [ 864.375216][T21268] ? __pfx___x64_sys_openat+0x10/0x10 [ 864.375236][T21268] do_syscall_64+0xcd/0x4c0 [ 864.375258][T21268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.375274][T21268] RIP: 0033:0x7f47c6f8eec9 [ 864.375286][T21268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.375300][T21268] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 864.375334][T21268] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 864.375344][T21268] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 864.375354][T21268] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 864.375363][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.375372][T21268] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 864.375393][T21268] [ 866.621999][T21306] FAULT_INJECTION: forcing a failure. [ 866.621999][T21306] name failslab, interval 1, probability 0, space 0, times 0 [ 866.822454][T21306] CPU: 1 UID: 0 PID: 21306 Comm: syz.4.2900 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 866.822486][T21306] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 866.822494][T21306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 866.822503][T21306] Call Trace: [ 866.822510][T21306] [ 866.822516][T21306] dump_stack_lvl+0x16c/0x1f0 [ 866.822542][T21306] should_fail_ex+0x512/0x640 [ 866.822564][T21306] ? __kvmalloc_node_noprof+0x124/0x620 [ 866.822584][T21306] should_failslab+0xc2/0x120 [ 866.822603][T21306] __kvmalloc_node_noprof+0x137/0x620 [ 866.822619][T21306] ? lockdep_init_map_type+0x5c/0x280 [ 866.822639][T21306] ? open_substream+0x30c/0x990 [ 866.822661][T21306] ? open_substream+0x30c/0x990 [ 866.822678][T21306] ? open_substream+0x19a/0x990 [ 866.822694][T21306] open_substream+0x30c/0x990 [ 866.822712][T21306] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.822733][T21306] rawmidi_open_priv+0x543/0x6e0 [ 866.822758][T21306] snd_rawmidi_open+0x4cc/0xbf0 [ 866.822780][T21306] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 866.822800][T21306] ? __pfx_default_wake_function+0x10/0x10 [ 866.822817][T21306] ? kobject_get_unless_zero+0x156/0x1e0 [ 866.822833][T21306] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 866.822853][T21306] snd_open+0x22d/0x4c0 [ 866.822868][T21306] ? __pfx_snd_open+0x10/0x10 [ 866.822881][T21306] chrdev_open+0x231/0x6a0 [ 866.822899][T21306] ? __pfx_apparmor_file_open+0x10/0x10 [ 866.822915][T21306] ? __pfx_chrdev_open+0x10/0x10 [ 866.822934][T21306] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 866.822954][T21306] do_dentry_open+0x97f/0x1530 [ 866.822973][T21306] ? __pfx_chrdev_open+0x10/0x10 [ 866.822994][T21306] vfs_open+0x82/0x3f0 [ 866.823017][T21306] path_openat+0x1de4/0x2cb0 [ 866.823048][T21306] ? __pfx_path_openat+0x10/0x10 [ 866.823071][T21306] do_filp_open+0x20b/0x470 [ 866.823089][T21306] ? __pfx_do_filp_open+0x10/0x10 [ 866.823120][T21306] ? alloc_fd+0x471/0x7d0 [ 866.823142][T21306] do_sys_openat2+0x11b/0x1d0 [ 866.823163][T21306] ? __pfx_do_sys_openat2+0x10/0x10 [ 866.823186][T21306] ? __pfx___might_resched+0x10/0x10 [ 866.823205][T21306] __x64_sys_openat+0x174/0x210 [ 866.823218][T21306] ? __pfx___x64_sys_openat+0x10/0x10 [ 866.823239][T21306] do_syscall_64+0xcd/0x4c0 [ 866.823262][T21306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.823276][T21306] RIP: 0033:0x7f47c6f8eec9 [ 866.823289][T21306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.823304][T21306] RSP: 002b:00007f47c51f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 866.823319][T21306] RAX: ffffffffffffffda RBX: 00007f47c71e6090 RCX: 00007f47c6f8eec9 [ 866.823329][T21306] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 866.823338][T21306] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 866.823347][T21306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.823356][T21306] R13: 00007f47c71e6128 R14: 00007f47c71e6090 R15: 00007ffc24943be8 [ 866.823375][T21306] [ 867.217151][T21293] netlink: 'syz.2.2898': attribute type 1 has an invalid length. [ 868.242669][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2901'. [ 869.131632][T21341] blktrace: Concurrent blktraces are not allowed on sg0 [ 869.341289][T21346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 870.035882][ T30] audit: type=1804 audit(4294967300.490:76): pid=21365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2908" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=41 res=1 errno=0 [ 870.058862][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.089381][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.112703][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.606646][ T5186] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 872.606670][ T5186] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 872.625142][ T5186] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 872.625190][ T5186] Bluetooth: hci0: adv larger than maximum supported [ 872.634187][ T5186] Bluetooth: hci0: adv larger than maximum supported [ 872.640859][ T5186] Bluetooth: hci0: Malformed LE Event: 0x0d [ 875.073751][T21449] random: crng reseeded on system resumption [ 875.731111][T21419] Process accounting paused [ 875.908451][T21466] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 877.775810][T21494] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 878.810877][T21510] serio: Serial port ttyS0 [ 880.503683][T21531] vhci_hcd: invalid port number 255 [ 880.538446][T21531] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 881.414546][T21538] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 882.103083][T21551] random: crng reseeded on system resumption [ 884.914768][T21601] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2947'. [ 885.562927][T21609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 885.569212][T21609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 885.769686][T21609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 885.823448][T21609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 885.830640][T21609] CPU0 is offline. [ 886.060566][T21624] random: crng reseeded on system resumption [ 886.159792][T21624] FAULT_INJECTION: forcing a failure. [ 886.159792][T21624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 886.265666][T21624] CPU: 1 UID: 0 PID: 21624 Comm: syz.6.2952 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 886.265697][T21624] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 886.265706][T21624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 886.265715][T21624] Call Trace: [ 886.265721][T21624] [ 886.265727][T21624] dump_stack_lvl+0x16c/0x1f0 [ 886.265754][T21624] should_fail_ex+0x512/0x640 [ 886.265780][T21624] should_fail_alloc_page+0xe7/0x130 [ 886.265802][T21624] prepare_alloc_pages+0x3c2/0x610 [ 886.265823][T21624] ? rcu_is_watching+0x12/0xc0 [ 886.265841][T21624] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 886.265864][T21624] ? stack_trace_save+0x8e/0xc0 [ 886.265880][T21624] ? __pfx_stack_trace_save+0x10/0x10 [ 886.265898][T21624] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 886.265917][T21624] ? kasan_save_stack+0x42/0x60 [ 886.265933][T21624] ? kasan_save_stack+0x33/0x60 [ 886.265950][T21624] ? do_dentry_open+0x97f/0x1530 [ 886.265978][T21624] ? vfs_open+0x82/0x3f0 [ 886.265997][T21624] ? path_openat+0x1de4/0x2cb0 [ 886.266013][T21624] ? do_filp_open+0x20b/0x470 [ 886.266029][T21624] ? do_sys_openat2+0x11b/0x1d0 [ 886.266048][T21624] ? __x64_sys_openat+0x174/0x210 [ 886.266060][T21624] ? do_syscall_64+0xcd/0x4c0 [ 886.266080][T21624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.266095][T21624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 886.266116][T21624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 886.266137][T21624] ? policy_nodemask+0xea/0x4e0 [ 886.266157][T21624] alloc_pages_mpol+0x1fb/0x550 [ 886.266176][T21624] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 886.266200][T21624] alloc_pages_noprof+0x131/0x390 [ 886.266219][T21624] get_zeroed_page_noprof+0x18/0xb0 [ 886.266240][T21624] get_image_page+0x18/0x190 [ 886.266254][T21624] alloc_rtree_node+0x3c/0xb0 [ 886.266269][T21624] memory_bm_create+0x519/0x810 [ 886.266291][T21624] create_basic_memory_bitmaps+0x10b/0x320 [ 886.266311][T21624] snapshot_open+0x235/0x2b0 [ 886.266327][T21624] ? __pfx_snapshot_open+0x10/0x10 [ 886.266344][T21624] misc_open+0x35a/0x420 [ 886.266362][T21624] ? __pfx_misc_open+0x10/0x10 [ 886.266378][T21624] chrdev_open+0x231/0x6a0 [ 886.266396][T21624] ? __pfx_apparmor_file_open+0x10/0x10 [ 886.266412][T21624] ? __pfx_chrdev_open+0x10/0x10 [ 886.266431][T21624] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 886.266451][T21624] do_dentry_open+0x97f/0x1530 [ 886.266468][T21624] ? __pfx_chrdev_open+0x10/0x10 [ 886.266490][T21624] vfs_open+0x82/0x3f0 [ 886.266513][T21624] path_openat+0x1de4/0x2cb0 [ 886.266536][T21624] ? __pfx_path_openat+0x10/0x10 [ 886.266559][T21624] do_filp_open+0x20b/0x470 [ 886.266576][T21624] ? __pfx_do_filp_open+0x10/0x10 [ 886.266606][T21624] ? alloc_fd+0x471/0x7d0 [ 886.266627][T21624] do_sys_openat2+0x11b/0x1d0 [ 886.266648][T21624] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.266676][T21624] __x64_sys_openat+0x174/0x210 [ 886.266689][T21624] ? __pfx___x64_sys_openat+0x10/0x10 [ 886.266710][T21624] do_syscall_64+0xcd/0x4c0 [ 886.266733][T21624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.266747][T21624] RIP: 0033:0x7f6f95d8eec9 [ 886.266760][T21624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.266774][T21624] RSP: 002b:00007f6f96d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.266789][T21624] RAX: ffffffffffffffda RBX: 00007f6f95fe5fa0 RCX: 00007f6f95d8eec9 [ 886.266803][T21624] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 886.266812][T21624] RBP: 00007f6f95e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 886.266821][T21624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.266829][T21624] R13: 00007f6f95fe6038 R14: 00007f6f95fe5fa0 R15: 00007ffe67258388 [ 886.266849][T21624] [ 886.643172][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.658739][T20248] Bluetooth: hci0: command 0x0c1a tx timeout [ 887.665687][T20248] Bluetooth: hci2: command 0x0c1a tx timeout [ 887.869863][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 887.912899][ T5186] Bluetooth: hci4: command 0x0c1a tx timeout [ 889.773603][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'. [ 894.099213][T21731] svc: failed to register nfsdv3 RPC service (errno 111). [ 894.200757][T21731] svc: failed to register nfsaclv3 RPC service (errno 111). [ 894.230603][ T30] audit: type=1800 audit(4294967324.680:77): pid=21737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2971" name="lu_gp_id" dev="configfs" ino=85685 res=0 errno=0 [ 894.255818][T21737] kstrtoul() returned -22 for lu_gp_id [ 894.343776][T21734] netlink: 'syz.4.2970': attribute type 2 has an invalid length. [ 895.120668][T21752] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2973'. [ 895.830146][ T5186] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 896.666520][T21785] blktrace: Concurrent blktraces are not allowed on ram7 [ 898.713640][T21799] FAULT_INJECTION: forcing a failure. [ 898.713640][T21799] name failslab, interval 1, probability 0, space 0, times 0 [ 898.799886][T21799] CPU: 1 UID: 0 PID: 21799 Comm: syz.6.2985 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 898.799918][T21799] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 898.799925][T21799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 898.799935][T21799] Call Trace: [ 898.799941][T21799] [ 898.799947][T21799] dump_stack_lvl+0x16c/0x1f0 [ 898.799973][T21799] should_fail_ex+0x512/0x640 [ 898.799994][T21799] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 898.800013][T21799] should_failslab+0xc2/0x120 [ 898.800031][T21799] __kmalloc_cache_noprof+0x6a/0x3e0 [ 898.800046][T21799] ? tomoyo_path_number_perm+0x18d/0x580 [ 898.800063][T21799] ? loop_add+0xb6/0xb70 [ 898.800082][T21799] loop_add+0xb6/0xb70 [ 898.800099][T21799] ? __pfx_loop_add+0x10/0x10 [ 898.800127][T21799] ? find_held_lock+0x2b/0x80 [ 898.800146][T21799] loop_control_ioctl+0x13e/0x630 [ 898.800164][T21799] ? __pfx_loop_control_ioctl+0x10/0x10 [ 898.800184][T21799] ? __pfx_loop_control_ioctl+0x10/0x10 [ 898.800202][T21799] __x64_sys_ioctl+0x18b/0x210 [ 898.800225][T21799] do_syscall_64+0xcd/0x4c0 [ 898.800247][T21799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.800262][T21799] RIP: 0033:0x7f6f95d8eec9 [ 898.800274][T21799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.800288][T21799] RSP: 002b:00007f6f96d01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.800303][T21799] RAX: ffffffffffffffda RBX: 00007f6f95fe5fa0 RCX: 00007f6f95d8eec9 [ 898.800312][T21799] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 898.800321][T21799] RBP: 00007f6f95e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 898.800329][T21799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.800338][T21799] R13: 00007f6f95fe6038 R14: 00007f6f95fe5fa0 R15: 00007ffe67258388 [ 898.800356][T21799] [ 901.482954][T21825] FAULT_INJECTION: forcing a failure. [ 901.482954][T21825] name failslab, interval 1, probability 0, space 0, times 0 [ 901.545297][T21825] CPU: 1 UID: 0 PID: 21825 Comm: syz.2.2992 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 901.545330][T21825] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 901.545338][T21825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 901.545347][T21825] Call Trace: [ 901.545354][T21825] [ 901.545360][T21825] dump_stack_lvl+0x16c/0x1f0 [ 901.545387][T21825] should_fail_ex+0x512/0x640 [ 901.545411][T21825] should_failslab+0xc2/0x120 [ 901.545431][T21825] __kmalloc_cache_noprof+0x6a/0x3e0 [ 901.545447][T21825] ? proc_thread_self_get_link+0x1c6/0x240 [ 901.545470][T21825] proc_thread_self_get_link+0x1c6/0x240 [ 901.545490][T21825] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 901.545508][T21825] step_into+0x195b/0x2270 [ 901.545527][T21825] ? __pfx_step_into+0x10/0x10 [ 901.545544][T21825] ? lookup_fast+0x156/0x610 [ 901.545561][T21825] walk_component+0xfc/0x5b0 [ 901.545577][T21825] link_path_walk+0x627/0xe20 [ 901.545606][T21825] path_openat+0x1b0/0x2cb0 [ 901.545622][T21825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.545644][T21825] ? __pfx_path_openat+0x10/0x10 [ 901.545667][T21825] do_filp_open+0x20b/0x470 [ 901.545684][T21825] ? __pfx_do_filp_open+0x10/0x10 [ 901.545714][T21825] ? alloc_fd+0x471/0x7d0 [ 901.545735][T21825] do_sys_openat2+0x11b/0x1d0 [ 901.545756][T21825] ? __pfx_do_sys_openat2+0x10/0x10 [ 901.545776][T21825] ? find_held_lock+0x2b/0x80 [ 901.545791][T21825] ? handle_mm_fault+0x2ab/0xd10 [ 901.545810][T21825] __x64_sys_openat+0x174/0x210 [ 901.545823][T21825] ? __pfx___x64_sys_openat+0x10/0x10 [ 901.545837][T21825] ? do_user_addr_fault+0x843/0x1370 [ 901.545864][T21825] do_syscall_64+0xcd/0x4c0 [ 901.545887][T21825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.545901][T21825] RIP: 0033:0x7fba93d8d710 [ 901.545914][T21825] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 901.545941][T21825] RSP: 002b:00007fba94b82f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 901.545957][T21825] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba93d8d710 [ 901.545966][T21825] RDX: 0000000000000000 RSI: 00007fba94b82fa0 RDI: 00000000ffffff9c [ 901.545975][T21825] RBP: 00007fba94b82fa0 R08: 0000000000000000 R09: 0000000000000000 [ 901.545984][T21825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 901.545993][T21825] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 901.546016][T21825] [ 901.791296][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.143443][T21819] Falling back ldisc for ptm0. [ 902.407290][T21841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2994'. [ 902.856766][T21863] aoe: invalid device specification [ 903.079995][T21841] bond0: (slave bond_slave_0): Releasing backup interface [ 903.997825][T21868] FAULT_INJECTION: forcing a failure. [ 903.997825][T21868] name failslab, interval 1, probability 0, space 0, times 0 [ 903.997870][T21868] CPU: 1 UID: 0 PID: 21868 Comm: syz.4.2999 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 903.997897][T21868] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 903.997905][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 903.997915][T21868] Call Trace: [ 903.997921][T21868] [ 903.997926][T21868] dump_stack_lvl+0x16c/0x1f0 [ 903.997952][T21868] should_fail_ex+0x512/0x640 [ 903.997974][T21868] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 903.997992][T21868] should_failslab+0xc2/0x120 [ 903.998011][T21868] __kmalloc_cache_noprof+0x6a/0x3e0 [ 903.998026][T21868] ? con_set_default_unimap+0x534/0x6d0 [ 903.998043][T21868] con_set_default_unimap+0x534/0x6d0 [ 903.998063][T21868] vc_allocate+0x6a6/0x880 [ 903.998082][T21868] ? __pfx_vc_allocate+0x10/0x10 [ 903.998118][T21868] con_install+0xa1/0x600 [ 903.998141][T21868] ? __pfx_con_install+0x10/0x10 [ 903.998164][T21868] ? __pfx_con_install+0x10/0x10 [ 903.998185][T21868] tty_init_dev.part.0+0x99/0x500 [ 903.998201][T21868] tty_open+0xa50/0xf90 [ 903.998218][T21868] ? __pfx_tty_open+0x10/0x10 [ 903.998231][T21868] ? chrdev_open+0x58c/0x6a0 [ 903.998253][T21868] ? __pfx_tty_open+0x10/0x10 [ 903.998265][T21868] chrdev_open+0x231/0x6a0 [ 903.998283][T21868] ? __pfx_chrdev_open+0x10/0x10 [ 903.998302][T21868] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 903.998322][T21868] do_dentry_open+0x97f/0x1530 [ 903.998340][T21868] ? __pfx_chrdev_open+0x10/0x10 [ 903.998362][T21868] vfs_open+0x82/0x3f0 [ 903.998385][T21868] path_openat+0x1de4/0x2cb0 [ 903.998408][T21868] ? __pfx_path_openat+0x10/0x10 [ 903.998431][T21868] do_filp_open+0x20b/0x470 [ 903.998447][T21868] ? __pfx_do_filp_open+0x10/0x10 [ 903.998478][T21868] ? alloc_fd+0x471/0x7d0 [ 903.998499][T21868] do_sys_openat2+0x11b/0x1d0 [ 903.998520][T21868] ? __pfx_do_sys_openat2+0x10/0x10 [ 903.998548][T21868] __x64_sys_openat+0x174/0x210 [ 903.998562][T21868] ? __pfx___x64_sys_openat+0x10/0x10 [ 903.998583][T21868] do_syscall_64+0xcd/0x4c0 [ 903.998606][T21868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.998620][T21868] RIP: 0033:0x7f47c6f8eec9 [ 903.998633][T21868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.998648][T21868] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 903.998663][T21868] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 903.998673][T21868] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 903.998682][T21868] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 903.998691][T21868] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 903.998699][T21868] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 903.998719][T21868] [ 906.666517][T21868] tty tty26: ldisc open failed (-12), clearing slot 25 [ 907.681952][T21898] Process accounting resumed [ 908.395371][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'. [ 908.445383][T21936] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 908.789932][T21936] zswap: compressor 000 not available [ 909.079579][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 909.224161][T21949] random: crng reseeded on system resumption [ 911.147647][T21975] can: request_module (can-proto-0) failed. [ 912.080734][T21988] delete_channel: no stack [ 912.553180][T22004] netlink: 'syz.6.3028': attribute type 1 has an invalid length. [ 912.842981][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.843054][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.850136][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.857657][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.864800][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.878736][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.885931][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.893049][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.900110][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 912.907262][ T5186] Bluetooth: hci2: unexpected event 0x3c length: 728 > 7 [ 913.823671][T22027] futex_wake_op: syz.6.3031 tries to shift op by -9; fix this program [ 913.867650][T22023] Invalid ELF header magic: != ELF [ 916.749775][T22065] Invalid ELF header magic: != ELF [ 917.153588][T22065] Invalid ELF header magic: != ELF [ 917.353021][T22087] FAULT_INJECTION: forcing a failure. [ 917.353021][T22087] name failslab, interval 1, probability 0, space 0, times 0 [ 917.436788][T22087] CPU: 1 UID: 0 PID: 22087 Comm: syz.2.3041 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 917.436819][T22087] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 917.436827][T22087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 917.436836][T22087] Call Trace: [ 917.436842][T22087] [ 917.436849][T22087] dump_stack_lvl+0x16c/0x1f0 [ 917.436876][T22087] should_fail_ex+0x512/0x640 [ 917.436899][T22087] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 917.436916][T22087] should_failslab+0xc2/0x120 [ 917.436936][T22087] __kmalloc_cache_noprof+0x6a/0x3e0 [ 917.436951][T22087] ? fuse_dev_alloc+0x8e/0x280 [ 917.436973][T22087] ? kasan_save_track+0x14/0x30 [ 917.436991][T22087] fuse_dev_alloc+0x8e/0x280 [ 917.437013][T22087] fuse_dev_alloc_install+0x13/0x40 [ 917.437035][T22087] cuse_channel_open+0x100/0x7f0 [ 917.437058][T22087] ? __pfx_cuse_channel_open+0x10/0x10 [ 917.437078][T22087] misc_open+0x35a/0x420 [ 917.437096][T22087] ? __pfx_misc_open+0x10/0x10 [ 917.437112][T22087] chrdev_open+0x231/0x6a0 [ 917.437130][T22087] ? __pfx_apparmor_file_open+0x10/0x10 [ 917.437147][T22087] ? __pfx_chrdev_open+0x10/0x10 [ 917.437165][T22087] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 917.437185][T22087] do_dentry_open+0x97f/0x1530 [ 917.437203][T22087] ? __pfx_chrdev_open+0x10/0x10 [ 917.437224][T22087] vfs_open+0x82/0x3f0 [ 917.437247][T22087] path_openat+0x1de4/0x2cb0 [ 917.437270][T22087] ? __pfx_path_openat+0x10/0x10 [ 917.437292][T22087] do_filp_open+0x20b/0x470 [ 917.437309][T22087] ? __pfx_do_filp_open+0x10/0x10 [ 917.437339][T22087] ? alloc_fd+0x471/0x7d0 [ 917.437360][T22087] do_sys_openat2+0x11b/0x1d0 [ 917.437380][T22087] ? __pfx_do_sys_openat2+0x10/0x10 [ 917.437409][T22087] __x64_sys_openat+0x174/0x210 [ 917.437422][T22087] ? __pfx___x64_sys_openat+0x10/0x10 [ 917.437442][T22087] do_syscall_64+0xcd/0x4c0 [ 917.437465][T22087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.437480][T22087] RIP: 0033:0x7fba93d8eec9 [ 917.437492][T22087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.437507][T22087] RSP: 002b:00007fba94b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 917.437523][T22087] RAX: ffffffffffffffda RBX: 00007fba93fe5fa0 RCX: 00007fba93d8eec9 [ 917.437532][T22087] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 917.437541][T22087] RBP: 00007fba93e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 917.437550][T22087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.437558][T22087] R13: 00007fba93fe6038 R14: 00007fba93fe5fa0 R15: 00007fff49334d68 [ 917.437578][T22087] [ 918.602044][T22095] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3043'. [ 919.977772][ T5186] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 919.985208][ T5186] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 920.404518][T22130] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3049'. [ 920.814590][T22137] FAULT_INJECTION: forcing a failure. [ 920.814590][T22137] name failslab, interval 1, probability 0, space 0, times 0 [ 920.907594][T22137] CPU: 1 UID: 0 PID: 22137 Comm: syz.4.3050 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 920.907627][T22137] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 920.907635][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 920.907644][T22137] Call Trace: [ 920.907651][T22137] [ 920.907657][T22137] dump_stack_lvl+0x16c/0x1f0 [ 920.907683][T22137] should_fail_ex+0x512/0x640 [ 920.907705][T22137] ? __kmalloc_noprof+0xbf/0x510 [ 920.907724][T22137] ? binder_open+0x168/0xde0 [ 920.907744][T22137] should_failslab+0xc2/0x120 [ 920.907764][T22137] __kmalloc_noprof+0xd2/0x510 [ 920.907784][T22137] binder_open+0x168/0xde0 [ 920.907805][T22137] ? __pfx_apparmor_file_open+0x10/0x10 [ 920.907821][T22137] ? __pfx_binder_open+0x10/0x10 [ 920.907843][T22137] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 920.907863][T22137] do_dentry_open+0x97f/0x1530 [ 920.907881][T22137] ? __pfx_binder_open+0x10/0x10 [ 920.907905][T22137] vfs_open+0x82/0x3f0 [ 920.907927][T22137] path_openat+0x1de4/0x2cb0 [ 920.907951][T22137] ? __pfx_path_openat+0x10/0x10 [ 920.907972][T22137] do_filp_open+0x20b/0x470 [ 920.907989][T22137] ? __pfx_do_filp_open+0x10/0x10 [ 920.908018][T22137] ? alloc_fd+0x471/0x7d0 [ 920.908038][T22137] do_sys_openat2+0x11b/0x1d0 [ 920.908059][T22137] ? __pfx_do_sys_openat2+0x10/0x10 [ 920.908087][T22137] __x64_sys_openat+0x174/0x210 [ 920.908100][T22137] ? __pfx___x64_sys_openat+0x10/0x10 [ 920.908120][T22137] do_syscall_64+0xcd/0x4c0 [ 920.908143][T22137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.908157][T22137] RIP: 0033:0x7f47c6f8eec9 [ 920.908170][T22137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.908184][T22137] RSP: 002b:00007f47c51d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 920.908198][T22137] RAX: ffffffffffffffda RBX: 00007f47c71e6180 RCX: 00007f47c6f8eec9 [ 920.908208][T22137] RDX: 0000000000101100 RSI: 0000200000000bc0 RDI: ffffffffffffff9c [ 920.908217][T22137] RBP: 00007f47c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 920.908226][T22137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.908234][T22137] R13: 00007f47c71e6218 R14: 00007f47c71e6180 R15: 00007ffc24943be8 [ 920.908254][T22137] [ 922.335386][T22161] bridge0: port 3(gretap0) entered blocking state [ 922.404043][T22161] bridge0: port 3(gretap0) entered disabled state [ 922.476092][T22161] gretap0: entered allmulticast mode [ 922.556911][T22161] gretap0: entered promiscuous mode [ 922.591486][T22161] bridge0: port 3(gretap0) entered blocking state [ 922.598032][T22161] bridge0: port 3(gretap0) entered forwarding state [ 922.650114][T22165] CIFS mount error: No usable UNC path provided in device string! [ 922.650114][T22165] [ 922.715145][T22165] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 922.843989][T22164] svc: failed to register nfsdv3 RPC service (errno 111). [ 922.928391][T22164] svc: failed to register nfsaclv3 RPC service (errno 111). [ 923.739521][T22185] Setting dangerous option i915.mitigations - tainting kernel [ 923.991789][T22191] FAULT_INJECTION: forcing a failure. [ 923.991789][T22191] name failslab, interval 1, probability 0, space 0, times 0 [ 924.087630][T22191] CPU: 1 UID: 0 PID: 22191 Comm: syz.4.3065 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 924.087660][T22191] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 924.087667][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.087677][T22191] Call Trace: [ 924.087682][T22191] [ 924.087688][T22191] dump_stack_lvl+0x16c/0x1f0 [ 924.087714][T22191] should_fail_ex+0x512/0x640 [ 924.087736][T22191] ? __kvmalloc_node_noprof+0x124/0x620 [ 924.087754][T22191] should_failslab+0xc2/0x120 [ 924.087773][T22191] __kvmalloc_node_noprof+0x137/0x620 [ 924.087789][T22191] ? __pfx___mutex_lock+0x10/0x10 [ 924.087810][T22191] ? traverse.part.0.constprop.0+0x392/0x640 [ 924.087829][T22191] ? traverse.part.0.constprop.0+0x392/0x640 [ 924.087842][T22191] traverse.part.0.constprop.0+0x392/0x640 [ 924.087857][T22191] ? aa_file_perm+0x28f/0x12e0 [ 924.087881][T22191] seq_read_iter+0x932/0x12c0 [ 924.087899][T22191] ? __pfx_aa_file_perm+0x10/0x10 [ 924.087929][T22191] seq_read+0x3a3/0x570 [ 924.087943][T22191] ? __pfx_seq_read+0x10/0x10 [ 924.087957][T22191] ? get_pid_task+0xfc/0x250 [ 924.087985][T22191] ? rw_verify_area+0xcf/0x6c0 [ 924.087999][T22191] ? __pfx_seq_read+0x10/0x10 [ 924.088013][T22191] vfs_read+0x1e1/0xcf0 [ 924.088032][T22191] ? __pfx_vfs_read+0x10/0x10 [ 924.088046][T22191] ? find_held_lock+0x2b/0x80 [ 924.088060][T22191] ? __fget_files+0x204/0x3c0 [ 924.088078][T22191] ? __fget_files+0x20e/0x3c0 [ 924.088092][T22191] ? __fget_files+0x1d0/0x3c0 [ 924.088111][T22191] __x64_sys_pread64+0x1eb/0x250 [ 924.088128][T22191] ? __pfx___x64_sys_pread64+0x10/0x10 [ 924.088151][T22191] do_syscall_64+0xcd/0x4c0 [ 924.088173][T22191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.088187][T22191] RIP: 0033:0x7f47c6f8eec9 [ 924.088199][T22191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.088213][T22191] RSP: 002b:00007f47c7d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 924.088227][T22191] RAX: ffffffffffffffda RBX: 00007f47c71e5fa0 RCX: 00007f47c6f8eec9 [ 924.088236][T22191] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 924.088244][T22191] RBP: 00007f47c7d54090 R08: 0000000000000000 R09: 0000000000000000 [ 924.088253][T22191] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 924.088261][T22191] R13: 00007f47c71e6038 R14: 00007f47c71e5fa0 R15: 00007ffc24943be8 [ 924.088279][T22191] [ 925.155932][T22211] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3071'. [ 926.119539][T22224] FAULT_INJECTION: forcing a failure. [ 926.119539][T22224] name failslab, interval 1, probability 0, space 0, times 0 [ 926.250770][T22224] CPU: 1 UID: 0 PID: 22224 Comm: syz.5.3075 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 926.250801][T22224] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 926.250809][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 926.250818][T22224] Call Trace: [ 926.250824][T22224] [ 926.250829][T22224] dump_stack_lvl+0x16c/0x1f0 [ 926.250855][T22224] should_fail_ex+0x512/0x640 [ 926.250877][T22224] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 926.250894][T22224] should_failslab+0xc2/0x120 [ 926.250913][T22224] __kmalloc_cache_noprof+0x6a/0x3e0 [ 926.250927][T22224] ? rcu_is_watching+0x12/0xc0 [ 926.250942][T22224] ? s_start+0x7b/0x320 [ 926.250963][T22224] s_start+0x7b/0x320 [ 926.250985][T22224] traverse.part.0.constprop.0+0xac/0x640 [ 926.251001][T22224] ? aa_file_perm+0x28f/0x12e0 [ 926.251025][T22224] seq_read_iter+0x932/0x12c0 [ 926.251043][T22224] ? __pfx_aa_file_perm+0x10/0x10 [ 926.251066][T22224] seq_read+0x3a3/0x570 [ 926.251080][T22224] ? __pfx_seq_read+0x10/0x10 [ 926.251093][T22224] ? get_pid_task+0xfc/0x250 [ 926.251121][T22224] ? rw_verify_area+0xcf/0x6c0 [ 926.251135][T22224] ? __pfx_seq_read+0x10/0x10 [ 926.251149][T22224] vfs_read+0x1e1/0xcf0 [ 926.251168][T22224] ? __pfx_vfs_read+0x10/0x10 [ 926.251183][T22224] ? find_held_lock+0x2b/0x80 [ 926.251197][T22224] ? __fget_files+0x204/0x3c0 [ 926.251215][T22224] ? __fget_files+0x20e/0x3c0 [ 926.251229][T22224] ? __fget_files+0x1d0/0x3c0 [ 926.251248][T22224] __x64_sys_pread64+0x1eb/0x250 [ 926.251266][T22224] ? __pfx___x64_sys_pread64+0x10/0x10 [ 926.251288][T22224] do_syscall_64+0xcd/0x4c0 [ 926.251311][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.251325][T22224] RIP: 0033:0x7f82c5b8eec9 [ 926.251337][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.251350][T22224] RSP: 002b:00007f82c69d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 926.251365][T22224] RAX: ffffffffffffffda RBX: 00007f82c5de5fa0 RCX: 00007f82c5b8eec9 [ 926.251374][T22224] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 926.251382][T22224] RBP: 00007f82c69d8090 R08: 0000000000000000 R09: 0000000000000000 [ 926.251391][T22224] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 926.251399][T22224] R13: 00007f82c5de6038 R14: 00007f82c5de5fa0 R15: 00007ffeb3218d78 [ 926.251417][T22224] [ 926.251425][T22224] [ 926.493066][T22224] ===================================== [ 926.498584][T22224] WARNING: bad unlock balance detected! [ 926.504104][T22224] syzkaller #0 Tainted: GF R U I [ 926.510054][T22224] ------------------------------------- [ 926.515568][T22224] syz.5.3075/22224 is trying to release lock (event_mutex) at: [ 926.523095][T22224] [] traverse.part.0.constprop.0+0x2c0/0x640 [ 926.530623][T22224] but there are no more locks to release! [ 926.536310][T22224] [ 926.536310][T22224] other info that might help us debug this: [ 926.544340][T22224] 1 lock held by syz.5.3075/22224: [ 926.549435][T22224] #0: ffff88807cfa0c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 926.558292][T22224] [ 926.558292][T22224] stack backtrace: [ 926.564162][T22224] CPU: 1 UID: 0 PID: 22224 Comm: syz.5.3075 Tainted: GF R U I syzkaller #0 PREEMPT(full) [ 926.564187][T22224] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER, [I]=FIRMWARE_WORKAROUND [ 926.564194][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 926.564203][T22224] Call Trace: [ 926.564210][T22224] [ 926.564217][T22224] dump_stack_lvl+0x116/0x1f0 [ 926.564239][T22224] ? traverse.part.0.constprop.0+0x2c0/0x640 [ 926.564254][T22224] print_unlock_imbalance_bug+0x11b/0x130 [ 926.564271][T22224] ? traverse.part.0.constprop.0+0x2c0/0x640 [ 926.564285][T22224] lock_release+0x242/0x2f0 [ 926.564303][T22224] __mutex_unlock_slowpath+0xa2/0x7b0 [ 926.564325][T22224] ? rcu_is_watching+0x12/0xc0 [ 926.564339][T22224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.564359][T22224] ? __kmalloc_cache_noprof+0x249/0x3e0 [ 926.564374][T22224] ? rcu_is_watching+0x12/0xc0 [ 926.564387][T22224] ? kfree+0x24f/0x4d0 [ 926.564400][T22224] ? s_start+0x28c/0x320 [ 926.564419][T22224] traverse.part.0.constprop.0+0x2c0/0x640 [ 926.564434][T22224] ? aa_file_perm+0x28f/0x12e0 [ 926.564456][T22224] seq_read_iter+0x932/0x12c0 [ 926.564470][T22224] ? __pfx_aa_file_perm+0x10/0x10 [ 926.564491][T22224] seq_read+0x3a3/0x570 [ 926.564503][T22224] ? __pfx_seq_read+0x10/0x10 [ 926.564516][T22224] ? get_pid_task+0xfc/0x250 [ 926.564538][T22224] ? rw_verify_area+0xcf/0x6c0 [ 926.564552][T22224] ? __pfx_seq_read+0x10/0x10 [ 926.564565][T22224] vfs_read+0x1e1/0xcf0 [ 926.564581][T22224] ? __pfx_vfs_read+0x10/0x10 [ 926.564595][T22224] ? find_held_lock+0x2b/0x80 [ 926.564608][T22224] ? __fget_files+0x204/0x3c0 [ 926.564624][T22224] ? __fget_files+0x20e/0x3c0 [ 926.564637][T22224] ? __fget_files+0x1d0/0x3c0 [ 926.564653][T22224] __x64_sys_pread64+0x1eb/0x250 [ 926.564677][T22224] ? __pfx___x64_sys_pread64+0x10/0x10 [ 926.564696][T22224] do_syscall_64+0xcd/0x4c0 [ 926.564717][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.564732][T22224] RIP: 0033:0x7f82c5b8eec9 [ 926.564744][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.564758][T22224] RSP: 002b:00007f82c69d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 926.564771][T22224] RAX: ffffffffffffffda RBX: 00007f82c5de5fa0 RCX: 00007f82c5b8eec9 [ 926.564780][T22224] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 926.564789][T22224] RBP: 00007f82c69d8090 R08: 0000000000000000 R09: 0000000000000000 [ 926.564797][T22224] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 926.564806][T22224] R13: 00007f82c5de6038 R14: 00007f82c5de5fa0 R15: 00007ffeb3218d78 [ 926.564819][T22224] [ 931.512801][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.519612][ T1303] ieee802154 phy1 wpan1: encryption failed: -22