last executing test programs: 26m36.144191383s ago: executing program 2 (id=145): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x3968, 0x1, 0x1, 0x1}, "654c6dbc7a4d30983899a7e1325bc5d82b3f184410ba9f74e82a3fa6c3ccf1bf"}) mkdir$auto(0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000180)="0a1b9a5c3000006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x38) r4 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r5 = open_tree$auto(r4, &(0x7f0000000000)='./file0\x00', 0x7) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100025bd701787f73d2ccf04263d2034f400df25"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0xc0, 0xe}, 0x18) 26m35.740414962s ago: executing program 2 (id=149): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="81ffdbdf250100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x71, 0x7f, "0381100bcba05ccd9953343909f61fd2a0ae4a831b552cf91382b6c004e7228fa9d41c89f04d5ffc28659aa244fa7ff4e5363238d27626750d02ff28f4808003fd6e6fccdf25911c5f0e7c7098d84ac566bb465569809c013d86a5cac873f83ec557f1488daaeb684aa97af3c8"}]}, 0x8c}}, 0x4000010) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x101, 0x38, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)=0x401) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x7f, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffe) msync$auto(0x0, 0x2000000005, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x80100, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01e92bbd7000fbdbdf251c000000140004007475676c3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) 26m34.225958589s ago: executing program 2 (id=152): mmap$auto(0x0, 0x8, 0x7f, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) landlock_create_ruleset$auto(0x0, 0x4, 0xfffffffd) write$auto(0x3, 0x0, 0x5c8) inotify_init1$auto(0x3000000000000) setitimer$auto_ITIMER_VIRTUAL(0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000080)={0xc9}) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0xc0, 0xe}, 0x18) 26m33.381489301s ago: executing program 2 (id=157): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x8000450a, 0x10000000000402) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) io_uring_enter$auto(r1, 0x40, 0xfff, 0x1ff, &(0x7f00000003c0)="5d37dd93ec9f11983f4b3104260cce42ba467eefc1c1c958a5324fa97e7ceb41d71ed76cf2615c247f565869902331f1a3db77d77a3d2cf9cca4396b49ec0b0f3e4913eedd6846e4d200645d76be92e62f3cfc9a00e55cc6b73853c05905ec1e1ff8be7332a44794e1642832352322a3b6cb0a500843cadcfc389416f21c2d211c45f56372890cf4a2f8c51e18d0602ee6d0b5f7c20a0891429eb9d04e9ef7d42484b3bb7b106db3bacee82a1f71ad6b9ddf74c42bafe7e1a1cfbcda2344", 0x401) read$auto(0xffffffffffffffff, 0x0, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x200, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x2, 0x6, @_rt={0xffffffffffffffff, 0xee00, @sival_ptr=&(0x7f0000000200)="d6d36a9264dc4e5dc340"}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0xf0}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x9, 0x9, 0xb871, 0x6, 0x3, 0xffffffffffffffff, 0x3, 0x40f8c5, 0x1000, 0x81, 0x9, 0xd}) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x6, 0x8, 0x4, 0x2, 0x1ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 26m30.93924406s ago: executing program 3 (id=162): memfd_secret$auto(0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket(0x1a, 0x1, 0x0) (async) epoll_create$auto(0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) (async) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000002c0)={0x0, 0x59, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x5d, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x8}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x0, 0x1, "69f0cf2fe7a41ffba86aa636e002"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250f00000005002e000400000008000300", @ANYRES32, @ANYBLOB="0500380000000000050033"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, r3, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async) sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x418, 0x0, 0x501, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c3, 0x25, 0x0, 0x1, [@nested={0x266, 0x46, 0x0, 0x1, [@generic="97560e56f81663593f8bcb1d8258b18e106f9cddb66585fd8c5619b4902089756275449d01fb1351031c2a09ce3dd4260de08da740e6bcbbcec1f0d3f578a01fbe63156b59a9e2c1bcb7b7eeba4f39349678b97e20ea1fd9af4c697a7313290b944fa1ed87e077a1caec9c0bbefb291a877dfe6947b8083974c5678c8a2211d626f52522f05688d3a657d4b4107e1347ba309f2539a55ae47a24840f4df98d8a1952d722024dc4e0a5fa2f2e6d211e5d94f850", @nested={0x4, 0x141}, @generic="4e44f416a32a8a3b52997644fe8afe3afe4d691e12f613f19207d1d42df4e50e62b28abe9bd8ce9a28e671954b5e5392089bc0eb088ba1ca94d0b68e7c6671fe046b350a9084ffd119464df7fa3da3d25da9da0045aed64adc793d23bd2d3c69eefc9847d0bdb69f6b812487bcbef989f82c61ef7b1d9697341a0de6250b06b54256d39fc22d4829f517b8684a87ce22bf4e4e08d5333b02f5a5022713b2bf05ed8744279918df6572b9a23caaec62b75989641cdb3cf6917f7335eeb022c1620d2a", @typed={0x8, 0xe3, 0x0, 0x0, @fd=r0}, @generic="91ba0e727cbbbb0ef7ec186dc352d6c1e808e45481013e8ed18ba15d8bb7c7b34002756a0d94ba3996e24a432f4d3b44b7bd2e5f0d02e816ba72290322d36c6c0f343e883331efe97332f2cb2d92c9df900e80690f214c665d1c2a0ecf44a1876f072d98bec8afceb65f2f92a6dbd94952f9e16bf959ad80496bb8cc3bd7cfa14ca4aa89e5f454c1cd8cbcf4ef75030f57500a14e9faa9e3558ed356ccabf2ae3c020b35eeb902a1e56fad547aad90fa5d6054a438ccf3e6a3ec0ab326cd3dabca97ed75745717a7fe1e25311546656c2e72c6cd13275ad8a1c22ea1ca", @nested={0x4, 0x45}]}, @typed={0x8, 0xee, 0x0, 0x0, @pid}, @generic="d485d434c608510d0a481ba77fc742c63f047b14e7a8311aee2f0a46739993c9f0dced4480b1eece656366810fff6354aa6b7e353622dd3ba1130bf8030a0b15c06da93f3c2cf0ba3ac0bc22ee52f3"]}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xdf, 0xcd, "211928bccd4eef3fbae75a4e3400e951b9acb26964a33aad0cad1387343202bab8cb5d5ec83ab2f9b44b6878c27133610b7cd22f1f4d5cae031b0ee2c71a35d403798819aa877704141a410ce40d797d79188a0188c99878e8b823a8db3e10324b7b6c935563af2ecd01064593d367bc14eb4d980c57fa3fc52418d949568fed28ee313993fd9235a410fe98ced9b3bf7e421af4b3ed480df6342f3e744b62b112fe8e582872abc5659afe24c7396286d51959f6943c902cde69a00565fa8df7e37bddd394a6d11a08f77a8d5bac85ea25566ae34ae000bed4703f"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x8000}, @NL80211_ATTR_MBSSID_CONFIG={0x3c, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x2a}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x49}, 0x0) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) listmount$auto(&(0x7f0000000100)={0x1f, @inferred=r5, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) (async) socket(0x2b, 0x1, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8) (async) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) (async) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 26m30.66431979s ago: executing program 2 (id=164): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x80000030009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 26m29.897506159s ago: executing program 3 (id=166): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r0, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r1, 0x1, 0x0, 0x0) (async) landlock_add_rule$auto(r1, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) (async) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x80044943, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x8300, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x8300, 0x0) read$auto(r4, &(0x7f0000000240)='nl80211\x00', 0x7) (async) read$auto(r4, &(0x7f0000000240)='nl80211\x00', 0x7) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000000040)="01000000000d0000624c492f4aa7d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0deefa78dc1e77a5d", 0x30) (async) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000000040)="01000000000d0000624c492f4aa7d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0deefa78dc1e77a5d", 0x30) 26m29.865749369s ago: executing program 3 (id=167): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x2, 0x1, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) r0 = socket(0xa, 0x2, 0x3a) bind$auto(r0, &(0x7f0000000040)=@generic={0xa}, 0x66) 26m29.673424664s ago: executing program 2 (id=168): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000280)='/dev/usbmon29\x00', 0x2440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2) (async) prctl$auto(0x3e, 0x1, 0x0, 0x3ffffb, 0xffffffffffffffff) (async) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) io_setup$auto(0x7ffe, &(0x7f0000000000)) (async, rerun: 32) mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptycf/power/control\x00', 0x26582, 0x0) sendfile$auto(r0, r2, 0x0, 0x8) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async, rerun: 32) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) (async, rerun: 32) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) (async, rerun: 64) setresuid$auto(0x0, 0x0, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x2000b, 0x8, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x90803, 0x0) ioctl$auto(r3, 0x3b82, 0x38) (async, rerun: 32) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) (async, rerun: 32) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r4, 0xfffe, 0x7ff) (async) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x84\xb6rRviA\x8b\xa4U\x953.O\xc6\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95', 0x100000a3d9) (async) mmap$auto(0x0, 0x1000000007, 0x4000000000df, 0x40eb0, 0x401, 0x300000000000) (async) sched_setattr$auto(0x0, 0x0, 0x7b) 26m28.657781392s ago: executing program 3 (id=172): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="81ffdbdf250100000008", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x71, 0x7f, "0381100bcba05ccd9953343909f61fd2a0ae4a831b552cf91382b6c004e7228fa9d41c89f04d5ffc28659aa244fa7ff4e5363238d27626750d02ff28f4808003fd6e6fccdf25911c5f0e7c7098d84ac566bb465569809c013d86a5cac873f83ec557f1488daaeb684aa97af3c8"}]}, 0x8c}}, 0x4000010) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x101, 0x38, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)=0x401) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x7f, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffe) msync$auto(0x0, 0x2000000005, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x80100, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01e92bbd7000fbdbdf251c000000140004007475676c3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) 26m24.190428656s ago: executing program 3 (id=186): semtimedop$auto(0x4, 0x0, 0x10001, 0xfffffffffffffffd) mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, r0, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, r1, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r1, r1}, 0x7ff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) 26m21.605961753s ago: executing program 3 (id=191): mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) socket(0x2, 0x800, 0xa) mmap$auto(0x0, 0x400e983, 0x3, 0xe31, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x254, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0x2) sendmmsg$auto(r0, 0x0, 0x9a6, 0x1000) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0xc600, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb0, r1, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fsopen$auto(0x0, 0x3) 26m14.504614955s ago: executing program 32 (id=168): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000280)='/dev/usbmon29\x00', 0x2440, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2) (async) prctl$auto(0x3e, 0x1, 0x0, 0x3ffffb, 0xffffffffffffffff) (async) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) io_setup$auto(0x7ffe, &(0x7f0000000000)) (async, rerun: 32) mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptycf/power/control\x00', 0x26582, 0x0) sendfile$auto(r0, r2, 0x0, 0x8) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async, rerun: 32) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) (async, rerun: 32) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) (async, rerun: 64) setresuid$auto(0x0, 0x0, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x2000b, 0x8, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x90803, 0x0) ioctl$auto(r3, 0x3b82, 0x38) (async, rerun: 32) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0) (async, rerun: 32) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r4, 0xfffe, 0x7ff) (async) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x84\xb6rRviA\x8b\xa4U\x953.O\xc6\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95', 0x100000a3d9) (async) mmap$auto(0x0, 0x1000000007, 0x4000000000df, 0x40eb0, 0x401, 0x300000000000) (async) sched_setattr$auto(0x0, 0x0, 0x7b) 26m6.151904354s ago: executing program 33 (id=191): mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) socket(0x2, 0x800, 0xa) mmap$auto(0x0, 0x400e983, 0x3, 0xe31, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x254, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0x2) sendmmsg$auto(r0, 0x0, 0x9a6, 0x1000) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0xc600, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb0, r1, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fsopen$auto(0x0, 0x3) 21m58.986018684s ago: executing program 1 (id=1125): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x40101, 0x0) close_range$auto(r2, r0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x400008, 0x5, 0x9b72, 0x2, 0x737ebc5) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) write$auto(0x3, 0x0, 0xfffffdef) r4 = socket(0x2, 0xa, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r4, 0x10000, r1}, 0x401) syz_clone(0x10001000, &(0x7f0000000080)="802771c47a158be1dfe4a7a64487572ba77445b751ba580c74214e7fc2fc6c5ab2388b82401745d2ed592c387d5f8c48b306", 0x32, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="213c380d77315b688cf287e9da4b315d6ad16b356e3f759f232756f62c66dd50e85ab7aae0cae3cf6ffce24b23fefd9618657d8830d598d7e95293f0fbc794bcc1b89cdb5a95bdc4aaa15ad705287cc585d29af3fc4268653c88722f7c3df1a42ead26cd0abbabed073b86c15bd0d9d334118be5aa8c06fea11c6f90183207ba53bc3a0bbd8ee577812133092a5f5dc4a7119584cb4d3bd3093a2db91b356fceb36227cea36af80416a4b53b6a0b491e316734acfac69d2ce4290b55c268397351ad9f62d6848c8816b12f078a2447c75e3743ba2d6aaede8b833b7af43df36ea5001847ddc8839e9426db0536f01b18368610235891") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x1c000, 0x0) 21m57.797373412s ago: executing program 1 (id=1131): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) mmap$auto(0x3, 0x1, 0xdf, 0xf5, 0x2, 0x8002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r0, &(0x7f000000b040)='\x00', 0x7, 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x40044620, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) (async) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x20003e, 0x1, 0x0, 0x6, 0x1000000000000000) (async) write$auto(r4, 0x0, 0x100000a3d9) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f00000010c0)=""/22, 0x16) writev$auto(0xffffffffffffffff, 0x0, 0x9) (async) mmap$auto(0x0, 0x4020009, 0x103, 0xeb1, 0xffffffffffffffff, 0x8000) 21m57.477443876s ago: executing program 1 (id=1133): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x22, 0x2, 0x0) (async) socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) (async) r0 = socket(0xa, 0x5, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) (async) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) (async) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) (async) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r0, 0xfff) (async) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) (async) socket(0x2, 0x3, 0x6) (async) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/numa_maps\x00', 0x26000, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) 21m57.029291235s ago: executing program 1 (id=1134): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="12", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000440)={{0x401, 0xee01, 0xee01, 0x9, 0x3, 0x3, 0x5}, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x4, 0x200, 0x5, 0x85, 0x800, 0x8, 0x8, 0x9d22, 0x6, @inferred=0xffffffffffffffff}) ioctl$auto(r0, 0x89f0, 0x24) 21m55.94454622s ago: executing program 1 (id=1138): memfd_create$auto(0x0, 0x9) mmap$auto(0x40100000000, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = socket(0x10, 0x2, 0x4) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3000000) 21m55.498578521s ago: executing program 1 (id=1140): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x12080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xbf\xff\xff\x1fj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x420b5bf1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty27\x00', 0x200, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 21m40.207302757s ago: executing program 34 (id=1140): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x12080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xbf\xff\xff\x1fj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x420b5bf1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty27\x00', 0x200, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 12m4.957374321s ago: executing program 5 (id=2857): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x101, 0x2, 0x5) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) write$auto(r0, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7) setresuid$auto(0x0, 0x0, 0x0) getpid() pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x1) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) read$auto_tracing_fops_trace(r1, &(0x7f0000000580)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r3, r2, 0x0, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r4 = syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(r4, 0x0, 0x7b) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r5 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r5, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) setrlimit$auto(0x1000000007, 0x0) 12m2.4397271s ago: executing program 5 (id=2867): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mknod$auto(0x0, 0x1001, 0x4) (async, rerun: 32) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyua\x00', 0xc8002, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) (async) open(0x0, 0x189a40, 0x2d9) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20499d, 0x9) (async) pkey_free$auto(0xfffffffd) (async, rerun: 32) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) (rerun: 32) sendfile$auto(r2, r2, 0x0, 0x200) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r3, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) (async, rerun: 32) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000001280)=""/231, 0x152) (rerun: 32) 12m1.337818186s ago: executing program 5 (id=2872): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) io_uring_setup$auto(0x4, 0x0) ioctl$auto(0x3, 0x6f41, 0xffffffffffffffff) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffff, 0x14, &(0x7f0000000000)='/sys/module/scsi_mod/parameters/scan\x00', &(0x7f0000000080)=0x7fff) 11m59.324705621s ago: executing program 5 (id=2875): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) 11m58.651798968s ago: executing program 5 (id=2878): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x101120, 0x0) ioctl$auto_PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x4) ioctl$auto_PPPIOCSDEBUG(r0, 0x4004743c, 0x0) 11m53.849528127s ago: executing program 5 (id=2887): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x3000000000000) connect$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x100020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) fcntl$auto(r2, 0x400, 0x1) setresuid$auto(0x2, 0xee01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x163) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x9b71, 0xffffffffffffffff, 0x7fff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50080, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4c004) preadv$auto(r3, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) write$auto(r3, 0x0, 0x7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x5, 0x0) connect$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 11m38.764270452s ago: executing program 35 (id=2887): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x3000000000000) connect$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x100020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) fcntl$auto(r2, 0x400, 0x1) setresuid$auto(0x2, 0xee01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x163) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x9b71, 0xffffffffffffffff, 0x7fff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50080, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4c004) preadv$auto(r3, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) write$auto(r3, 0x0, 0x7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x5, 0x0) connect$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 4.442011107s ago: executing program 6 (id=5436): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0481, 0x0) close_range$auto(r0, r1, 0xfffffffe) bpf$auto(0x80001c, 0xffffffffffffffff, 0x7) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='%!\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250300000009000200cacd2dff11000000040012"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$auto(0x3, 0x0, 0x7) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)) r3 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0x2000000000000df, 0x11, 0x2, 0x8000) 4.439940403s ago: executing program 7 (id=5437): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram5/queue/hw_sector_size\x00', 0x20400, 0x0) (rerun: 64) readv$auto(r0, &(0x7f0000001680)={&(0x7f0000000680), 0x7}, 0x5) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x154, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x132, 0x2f, 0x0, 0x1, [@nested={0x8, 0xd8, 0x0, 0x1, [@typed={0x4, 0xa9}]}, @generic="d5f9a97088940004d57073723b249875917910838c27fd3aeff8b46810c015b6c5f5688bee3fc2d88aa6ca6e91fc88cb7ea5d66cc2e666bb3c61d93a6dcd4623e2eee71b2abc5f8d6974e4025570e5f0d811d1bf0f95ca68f0592c0a6c23d79ed50b1eb8e2ef3e29b20090dfde01b8214e101a79397daca7ff0d11d4edaea2f37fc43b1d575b68af926718aa08a237eb533411d88426f86865e789ad9a1a083127b13ae2917dae87482ec6047f57d869024989723ff5ae456732f91844e65a928292dcb458a166e938d24132b30357d969830ef21635c7da694834cb5beae0e7e7f32b3af280bac80dac08683f978009d0684e3c52b5b35a7d458ce27bd3ac918bcf80d18331a3c8e3437ef1422b7425dd782b76602e098e473a2f2448ac6c0797b6e5638f3f"]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xbf}]}, 0x154}, 0x1, 0x0, 0x0, 0x890}, 0x44044) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 32) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004081) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.082213506s ago: executing program 7 (id=5439): r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/health/break_health\x00', 0x402, 0x0) pwritev$auto(r0, &(0x7f0000000100)={&(0x7f0000000040)="7770d2e23220634780427302ccfebd8a738daf8476dd0516b032ae7f9a932a10964bf105dcad41119933ed8cfbd2d36484899bac1cac50f78f712d96396e6eec61fd54c0c2aef5741b5cda5beb03c92f3007171b503cf01cc742e5dee031e9f7794168a9b26a4f77693bbc46089f9394dffc411c41348c7496fd775e01b54253d54ab72624295bd00ab9a89d5cef97d5f0abc17eeeca696bcaadcce256b2b080749898f69894ac328379af2abe", 0x5}, 0x100000001, 0x8, 0x1) write$auto(r0, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/health/break_health\x00', 0xdb) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x20080, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000001c0)='!\x00', &(0x7f0000000200)="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", 0xee01) io_uring_register$auto_IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000001200)="0b480290e247157e72dddaf9234add256f0f04af4e980d18682b35b4c92806eccba08a45aa159513cfd6892a1cb8eede22f852a75258534ccb3f4fa026d6df4ecf1e7af5adac92498ae59aa1ed0265aa69fed1d588fd9a30e254fdc2", 0x6) lsm_get_self_attr$auto(0x2, &(0x7f0000001280)={0xfffffffffffffffc, 0x4eb, 0x7, 0xbc, "4987ac811356b5ea20b569aaef88b8ca4bcdafd8145e87ad2ad8fbc239c123bee94a48767f29fda7b965650f7ca4249077f915a7f34246ede92d4a9bebf47e7bfd1d438771a17ce85ae4d6edcac3d0d9d1d0ef855a4e069936be4b579f1bc7a77dd36c1ed3cd4f32eadecf8a4e165ed08fa3d1da6f71892d509f1c4577ce8b59a9a7c5642ee9b17abc4a31f3b86b7137789dd8423c1e075ee3276cbec447f4b886699d8eba23440edee282de8c9c473a1eb30caff1e5df3c168bf9fc"}, &(0x7f0000001380)=0x1, 0x79) r2 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f00000013c0)={0xfffffffffffffc01, 0x0, r0}) ioctl$auto_USBDEVFS_CONTROL32(r2, 0xc0105500, &(0x7f0000001400)={0xf, 0xf, 0x5, 0xa1, 0x3, 0xfffffffb}) io_uring_setup$auto(0x10001, &(0x7f0000001440)={0x33, 0x6ae5, 0xffffce79, 0x3, 0x9, 0x1, r3, [0x5b, 0x3, 0x1], {0x9, 0x3, 0x3, 0x7, 0x4, 0x1ff, 0x200, 0x3, 0x4}, {0x3, 0xc, 0x4, 0x7, 0x9, 0x7, 0x1c7c, 0x2, 0x70}}) r5 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000001500)={@siginfo_0_0={0x0, 0x2, 0xfffffbbc, @_rt={0xffffffffffffffff, 0xee00, @sival_int=0x8}}}, 0x9, &(0x7f0000001580)={{0x3, 0x2}, {0x2, 0x7}, 0x1000, 0x7, 0x8, 0x4, 0x80000001, 0x4, 0x6, 0xff, 0x2fe, 0x3, 0x3ff, 0x8000000000000001, 0x0, 0x81}) r6 = geteuid() r7 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000001640), 0x410300, 0x0) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000002bc0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b80)={&(0x7f0000001680)={0x14f8, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x295, 0x3, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @u32=0x5}, @typed={0x7, 0x5a, 0x0, 0x0, @str='3/\x00'}, @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@remote}, @nested={0x10d, 0x132, 0x0, 0x1, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x117}, @nested={0x4, 0x92}, @nested={0x4, 0x138}, @typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @generic="aa293471758e22d3b1bb472f12016290fc5555129391a46418f5cd2279d72c826431da7500638746ef58c5f79cc082e024913309a5118449e24d16a26751dda66563d32dcf754cf779ac7809573360db06b6629a51bb3949c8a63f344d8df928fba1a6fbc9d8e8a7d5fc0d405ab263c402736326ad744ccbee43664db497763f063551a7593500d30a0aa087da69589e43136faf80203d1f45d5d4f8a6ffc94322c9f8904f6c6f038e002efa4b9257e3a9954924a0ae813a3de31d1844acb71ce80b396bb5be50e5b7b4d61651fd35373317209b0b1d8425ed1ad7e071b57043b992a9dbc608f5b688"]}, @generic="6c2a30df8d9b3ca01909d2a3f6539dd39d567bbd0e7dd2bda206d10873675df234afd3bd931ff370707ae738a3a4114405dfc70cdce6fcf32531b6349d167a742af923ac13fa2dbaabd8fae5330a3e64a6bbe5d4245bf308941f58c9f7d1d8ea26c88893f8675839b14d691fbe155605fae7919d712b5f1e44f636b66b71473a60b7a3f2316eb1409441f49c0b8979b3360ec1cffd2acd59f1282b45a8adb6d8499b3aef1f010e68bf62e71638fcc1f19202bf21a376286cfb04954c75280c2a91174ea24b1fa73bd2da100f89bff4cc22c9fcd69f9d9e4d92b7abc82a406c541cdeec9395", @generic, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x1}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="5e6323b6d7c22fe533ff53b33575573f947221d33ea3b90e24cd6d7daa3663912a0956130f254cfe286faabc5075b674c407596d5c51e87d33e93b99b424c5784a21189cc59b0d0a83144ee4057ace3ddbfa9fb811eb1f9569bb36de"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcd}, @IPVS_CMD_ATTR_DEST={0x1118, 0x2, 0x0, 0x1, [@typed={0xc, 0x10b, 0x0, 0x0, @u64=0x83c}, @nested={0x10fc, 0x65, 0x0, 0x1, [@typed={0xf0, 0xf5, 0x0, 0x0, @binary="38cb0c59d7c742ca750faf173b3f3eceacfa8a5d3ead6f67be944e05e16bdaf06e6b5d9df749645a725eaf7135a143ca9a0322342533be496b24084f10cee8506a3c23b9ce962c238313e96a3bd51df87cc1b6ac5a522f94edcbfdeb4a37d5264b634fc0f9036ce952fce861f7b5129536e1bb8b89ccbc3c57407eaf1e973057a9f57a9a81577909d4add5ee72587557d81fd8f026aef279d98cbd6361ea3aa87b078c4b433d6d99338d2fe13e908d5535bdc9b016e49159faf130503da455096443fe08f0ccec971f51effd0f4d72332f9772566866dca4e78ef48100994e380fe779f971680e9019fdf7fa"}, @nested={0x4, 0x97}, @nested={0x4, 0x11d}, @generic="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"]}, @typed={0xc, 0xe7, 0x0, 0x0, @u64=0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x7a, 0x3, 0x0, 0x1, [@typed={0x8, 0x10e, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x109, 0x0, 0x0, @u64=0xaf5a}, @generic="a93f171987677fdcf97f10192c5f", @nested={0x52, 0xc3, 0x0, 0x1, [@generic="be1b38f64be5a4e245680c725f554f969df93e4812b0ee645f5c68a4291cb536719db794e3e40fd883733ea41fc787677a4e4fae577cf45b598bde1b72c560fff22befb054796635a12e1fe0b6b0"]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@nested={0x30, 0xa, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @fd=r1}, @typed={0x5, 0x151, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xc6}, @nested={0x4, 0x80}, @typed={0x8, 0x151, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x14c, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x47}]}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@nested={0x6d, 0x67, 0x0, 0x1, [@generic="3e33fabfa2cb41720ba394bbc06b2d80e8f37d1a99c8a257dad2ed4cd45ed1c678a6712a07832891f2fc26af80691582f0b391be2cb5314eec8da062c8f0b610e31b1bca3e4553c44bd0321ebbf3ecbd4739d9e58526d2330496dd53abb95ddc6edf447ed54d7dd345"]}]}]}, 0x14f8}, 0x1, 0x0, 0x0, 0x894}, 0x200480d5) r8 = prctl$auto_PR_SET_MM_ENV_END(0x7, 0xb, r5, 0x6, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000002c00)={0x3, 0x0, [{0x560, 0x5, 0x9}, {0x3800000000000, 0xa, 0xc}, {0xe364, 0xb, 0x3}, {0x7fffffffffffffff, 0x5, 0x3}]}) r9 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002d00), r8) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x58, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FLOW={0x6, 0x6, 0x9}, @GTPA_TID={0xc, 0x3, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0xb57}, @GTPA_TID={0xc, 0x3, 0x9}, @GTPA_O_TEI={0x8, 0x9, 0x7ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002e40)='/dev/ptyz2\x00', 0x40900, 0x0) r11 = ioctl$auto_TIOCGPTPEER2(r10, 0x5441, 0x0) r12 = prctl$auto_PR_SET_MM_ARG_END(0x0, 0x9, r5, 0x6, 0x1d3) mmap$auto(0x2, 0x4, 0xffff, 0x10, r12, 0x5f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/devices/virtual/tty/ttyv8/power/runtime_active_time\x00', 0x402000, 0x0) r13 = ioctl$auto_NS_GET_PID_IN_PIDNS(r11, 0x8004b708, &(0x7f0000002ec0)=0x7ff) write$auto(r13, &(0x7f0000002f00)='3/\x00', 0x4) ioctl$auto_NS_GET_OWNER_UID(r13, 0xb704, 0x0) socket(0x1, 0x1, 0x7) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r11, 0x80044dfe, &(0x7f0000002f40)="02da2692c8fa2bda5973773231472f57520e886709217f7b16dea14141f88d1413ca2936ca5d45293c370a3a3d9349bad76d73302defd917a9c9aaee74f394fecbd48207a6124e98b9f940ab274e333dc90d0f73b2d94e44a3dbcc8825beef3ade1a3c89daa0bf180182565fa933c0ad30df788f844cc26d88a6f4ce3bd922dfc25061bc5d96742fec560f5e4e99ea23d7d06fb7135d505748cb4c3abceee9") ioctl$auto_FIOASYNC(r7, 0x5452, 0x4) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000003000)='/sys/kernel/debug/bluetooth/hci4/force_devcoredump\x00', 0x80, 0x0) 3.896678602s ago: executing program 7 (id=5441): write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0) socket(0x2c, 0x1, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1523353"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000140), 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x7, 0x200, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x8, 0x100000004, 0x6, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socketcall$auto(0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x20000009b72, 0x2, 0x8000) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1000, 0x0, 0x4000000, 0x100009}, 0x4}, 0x5, 0x8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1}, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fanotify_init$auto(0x5, 0x0) mbind$auto(0x4, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) 3.414488365s ago: executing program 6 (id=5446): write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) semctl$auto(0xa, 0x2, 0x13, 0x5) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x6f7250c4) 3.317816665s ago: executing program 4 (id=5447): sync_file_range$auto(0xffffffffffffffff, 0x1, 0xa31e, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0x800454da, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) bpf$auto_BPF_PROG_DETACH(0x9, 0x0, 0xff) r0 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x200000, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0xa06) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x830) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x200000, 0x7, 0x3fd6, 0x3, 0x20000000) write$auto(r1, 0x0, 0x30fe) 3.10505121s ago: executing program 4 (id=5448): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r2 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r2, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xa) sysfs$auto(0x2, 0x100000000000035, 0x0) fsopen$auto(0x0, 0x1) r3 = open(0x0, 0x261c2, 0x84) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xd) 2.969358862s ago: executing program 4 (id=5449): mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capget$auto(&(0x7f0000000040)={0x1, 0x0}, &(0x7f0000000080)={0xfffffff7, 0x6, 0xffff}) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg1\x00', 0x51d4c0, 0x0) ioctl$auto_SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000380)) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x24, 0x0, 0x8) r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x40, 0x0) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)=@task_fd_query={r0, r1, 0x3, 0x5, 0x5, 0x3, r2, 0x1, 0xffff}, 0x200) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r3, 0x6a, 0x2, 0x0, 0x3) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2.670725925s ago: executing program 6 (id=5450): socket(0x8, 0x6, 0x84) mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) pipe$auto(0x0) r0 = socket(0x2, 0x80002, 0x73) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x1, 0x14, &(0x7f0000000000)='\x00', &(0x7f0000000100)=0x68) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0xe, 0x3e6a, 0x10001, 0x9, 0xa3bf, 0x6, 0x6, 0x7, 0xc8b, 0x81, 0x14, 0x5, 0x1, 0x0, 0x8, 0x9, 0x9c6, 0x513e, "6376055beb66c5c00f8dd2a9037383b576a3a4155295434f95b3c11d4cab177819ea235c"}) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) open(0x0, 0x0, 0x40) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353) unlink$auto(&(0x7f00000000c0)='#(//\x00') r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000003c0)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x1904, 0x2, 0x3}, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x28, 0xc, 0x454a, 0x81, 0x7, 0x1, 0x7, 0x3, 0xb5, @inferred, @raw=0x10000}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r3, r4, 0x0, 0x1) 2.594263007s ago: executing program 7 (id=5451): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) 2.414084407s ago: executing program 7 (id=5452): r0 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000040)=0xda8d) mmap$auto(0x8004, 0xde, 0x9b, 0x14, r0, 0x5) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x13) (async) close_range$auto(0x2, r1, 0x13) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) (async) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r3, 0x0, 0x0, 0xfffff29f) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, 0x0) 2.213759103s ago: executing program 7 (id=5454): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x42, 0x65, 0x0, 0x1, [@nested={0x4, 0x7b}, @typed={0xb, 0x9c, 0x0, 0x0, @str='@-#/%-\x00'}, @generic="c70281ec57884a3193bef843145644e35c4feb0b586b8ce3603d36301f264866ce4380bdd368616b13ec35d09c82"]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe339}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40) r2 = socket(0x2, 0x3, 0x1) splice$auto(r2, &(0x7f0000000000)=0x200, r0, 0x0, 0x4, 0x6) ioctl$auto_FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)="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") mmap$auto(0x0, 0xffffffffffffffc0, 0x8000c00000071, 0x8b72, 0xffffffffffffffff, 0x4008000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) r3 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r3, &(0x7f0000000200)=@generic={0x11, "0000000000000000d29e006300"}, 0x80) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) pidfd_open$auto(0x0, 0x0) timer_create$auto(0x8, 0x0, 0x0) 1.927413391s ago: executing program 4 (id=5456): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigtimedwait$auto(&(0x7f0000004dc0)={0x80000000}, 0x0, &(0x7f0000004e80)={0x8, 0xffffffffffffffff}, 0x8) socket(0x3, 0x80000, 0xa) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x10a01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x0, 0x0) socketpair$auto(0x1e, 0x0, 0x7, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0xa042, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x80, 0xffff) sysfs$auto(0x7, 0x9, 0xffffffff) r2 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) mmap$auto(0x80, 0x2020009, 0x2000000003, 0x3fc, r2, 0x3fb) socket(0x2, 0x3, 0xa) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) 1.894349307s ago: executing program 0 (id=5457): r0 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r0, 0x0, 0x8, 0x7) r1 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x0, 0x9, 0x0, 0x0) r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xfffffffe, 0x0, 0x0, 0x0, 0x2) close_range$auto(r2, r0, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101a40, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_BUSY_POLL_BUDGET(r6, 0x1, 0x46, &(0x7f0000005ac0)='!+.\x00', 0x7) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000021, 0x400, 0x2}]}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000100)="0e43f57ca0d96f079a4228062e2a5a789ab71e9edf10d630ac099a99e68ec9e35d24f9a730c5c9582dcd81efef84ff15bc595be4621c23fd488fe9f52bea430bbdaba15f8bbdb14ebb39b0904ca0f2f44be97788c3f379cc75297ebac7fb1527616af272c074cec68db5ff5080c0b59c4dc26aff1ef70846816d9eab8385516159a890bc7b7dae14ec8b572bb7") ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x1, r6, 0x4, "ce2eda7692a1ed5988823cc2a6abd2ae"}) r7 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline\x00', 0x8180, 0x0) finit_module$auto(r7, 0x0, 0x1) 1.407371548s ago: executing program 6 (id=5458): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x3, 0x6, 0x4000000000e7, 0x1c, r0, 0xa21a) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)=@bpf_attr_5={@target_fd=r0, r0, 0x1, 0xffff, r0, @relative_id=0x2c, 0xffffffff}, 0x3) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x8080a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_KVM_CREATE_VM(r1, 0x4140aecd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) 1.208353267s ago: executing program 4 (id=5459): write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0x400) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000f2, 0x400, 0x2}]}) semctl$auto(0x7, 0x2, 0x13, 0x5) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x84) setsockopt$auto(r4, 0x0, 0x40, 0x0, 0x6f7250c4) 1.109524322s ago: executing program 0 (id=5460): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80285442, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x2, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty7\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 986.170572ms ago: executing program 4 (id=5461): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) io_uring_setup$auto(0x1, &(0x7f0000000140)={0x9, 0x0, 0x4, 0x4cbd, 0x10, 0x4, r0, [0x2, 0x7, 0x5], {0x4, 0x2, 0x3, 0x20000000, 0x2, 0x4, 0xff, 0xfff, 0x6}, {0x7, 0xedea, 0x4f, 0xe7ab, 0x1ff, 0x6, 0x1, 0xd, 0xa1f}}) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r0, 0x8004) close_range$auto(0x2, 0x8, 0x2) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x486, 0x400, 0x9}]}) mmap$auto(0x0, 0x2020006, 0x4, 0xeb1, 0xffffffffffffffff, 0x7ffd) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20540, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x5, &(0x7f0000000280)=0xfb, 0x400, 0x3) set_mempolicy_home_node$auto(0x0, 0x10001, 0x0, 0x0) semctl$auto_SEM_INFO(0x5, 0x4, 0x13, 0x0) ioctl$auto(r1, 0x40046103, 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) mbind$auto(0x3, 0x9, 0x9, &(0x7f0000000000)=0x8, 0x2b51, 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000060007000600000008000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004880) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 783.131368ms ago: executing program 0 (id=5462): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x6af82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x7, 0x0, [{0x40000081, 0x200402, 0x9}]}) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2}) socket(0x10, 0x3, 0xc) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x7a340, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(r1, 0x1ff, r0) (async) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x80dd, 0x0, [{0x40000073, 0x400, 0xffffffffffffffff}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8000000000000001, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x800000802) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x80c4}, 0x1, 0x0, 0x0, 0xd}, 0x7}, 0x3, 0x0) (async) socketpair$auto(0xf, 0x8, 0xffffffff, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 672.044165ms ago: executing program 0 (id=5463): sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf2503000000080006"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f00000000c0)='0\n\xf48\x97\xff*\x8a\xeb+l\\\x9e@\\}\x04|\x03\xcb\x12\xfa\b\x1c\vr\xc0\\\x17\xcb\xb4Q\xe1)@J}\x7fw\xc7\xe58,.\xf6p\x8d\xa0\x1f\xe3\xc5\xff\r\xde\xaf\x84\xd6P\b\xdf\xfe\x1f\xa1\xb4\x89\xa0\xac\x9a\xb8\x88\xca\x00\x15\x9d`>\xcd\xcb\xbe#k\xaf\xe9\x9a0\xb6\xe2#\xc1u\xfa\xe1\x19\x92qH\x80\xb9\xa4a\xba%\xc7\xc5\xb8\v\x00\xa5\xdd\xa2\x8c\xacBY\x9b\"\x14*\xfd\x87\x84~\x94\xb5\xfd/\xe2\xadz9\xbe!7\xf9\x88F\xe9@L\x1cD\xc2ia*\x81\x10L\x8d\xde\xdf\xc5)$\x03,\xb5\x88\a\xfe\x8c\xea\x16|\x11x\xdaE\x1c\xce\xe1\xdb\xc1\x86\xd9!.\xfb\xb7\xd4%\\\x1eJ\x175\x9c\xc0\x83\x89k+\x1bKk\xc4\x8f\xb01\x9a\x94_r\xa5W\xe0\x16A', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x6f2d, 0x2000) ptrace$auto(0xfffffffffffffff8, r1, 0x4, 0x420) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) r3 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f00000001c0)=0x2) r4 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim6/ports/2/ethtool/ring/rx_max_pending\x00', 0x24c2, 0x0) sendfile$auto(r3, r4, &(0x7f0000000280)=0xd, 0x8) 470.481483ms ago: executing program 0 (id=5464): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) msync$auto(0x0, 0x2000000005, 0x6) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\x006\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) process_madvise$auto_MADV_MERGEABLE(r2, &(0x7f0000000000)={&(0x7f00000000c0)="ee346de91ca53893a4ef750d5a249df69eef0ef649150ca4e81f1f349b7c4516f369e845932182a1146117e534d57b963c52248406061985b1caf6638786c2a26de75ea1f47b4d00fc7034e32dac61db11a83edd87d6fca1c0e493ee39ae7b708f17e4e24f371bfedab35f5032fb41638c3ee5620f56480f353143bdd180ac99d3d9b017804274a2f9998bdcfe549897ae41d15e6b55e8ca6bf4497358d3ba77ff60d549aa1e5174d6ecc8d828232ec6dd67e4fb91a8e67710f33445ce3a", 0x4}, 0x7, 0xc, 0x1) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) 390.220803ms ago: executing program 6 (id=5465): close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) mmap$auto(0x2, 0x9, 0x2000000000000005, 0x15, r1, 0x9) (async) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) 61.800021ms ago: executing program 6 (id=5466): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socket(0x10, 0x2, 0xc) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) socket(0x25, 0x3, 0x6) socket(0x10, 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x3, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x5, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x81, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0x3, 0x1ff, 0xecd, 0x101, 0xe4, 0x6, r0}, 0x5) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) 0s ago: executing program 0 (id=5467): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x13) (rerun: 64) madvise$auto(0x0, 0x200007, 0x1d) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) (async) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram0\x00', 0x60782, 0x0) (async) r4 = open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) open_by_handle_at$auto(r4, &(0x7f00000003c0)={0x7fc, 0x7, "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"}, 0x7) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) (rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) kernel console output (not intermixed with test programs): e/Google Compute Engine, BIOS Google 10/25/2025 [ 1537.478498][T27500] Call Trace: [ 1537.478503][T27500] [ 1537.478509][T27500] dump_stack_lvl+0x16c/0x1f0 [ 1537.478532][T27500] should_fail_ex+0x512/0x640 [ 1537.478557][T27500] get_futex_key+0x1d0/0x1560 [ 1537.478580][T27500] ? __pfx_get_futex_key+0x10/0x10 [ 1537.478605][T27500] futex_wake+0xea/0x530 [ 1537.478627][T27500] ? rcu_is_watching+0x12/0xc0 [ 1537.478643][T27500] ? __pfx_futex_wake+0x10/0x10 [ 1537.478666][T27500] ? kmem_cache_free+0x2d4/0x6c0 [ 1537.478682][T27500] ? putname+0x154/0x1a0 [ 1537.478704][T27500] do_futex+0x1e3/0x350 [ 1537.478724][T27500] ? __pfx_do_futex+0x10/0x10 [ 1537.478748][T27500] __x64_sys_futex+0x1e0/0x4c0 [ 1537.478769][T27500] ? __x64_sys_openat+0x174/0x210 [ 1537.478790][T27500] ? __pfx___x64_sys_futex+0x10/0x10 [ 1537.478817][T27500] do_syscall_64+0xcd/0xfa0 [ 1537.478836][T27500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.478851][T27500] RIP: 0033:0x7f7450b8f749 [ 1537.478876][T27500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1537.478891][T27500] RSP: 002b:00007f7451a2b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1537.478906][T27500] RAX: ffffffffffffffda RBX: 00007f7450de5fa8 RCX: 00007f7450b8f749 [ 1537.478917][T27500] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7450de5fac [ 1537.478926][T27500] RBP: 00007f7450de5fa0 R08: 00007f7451a2c000 R09: 0000000000000000 [ 1537.478936][T27500] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1537.478945][T27500] R13: 00007f7450de6038 R14: 00007ffedef80b00 R15: 00007ffedef80be8 [ 1537.478965][T27500] [ 1537.857859][T27501] CPU: 0 UID: 0 PID: 27501 Comm: syz.0.4694 Not tainted syzkaller #0 PREEMPT(full) [ 1537.857883][T27501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1537.857893][T27501] Call Trace: [ 1537.857899][T27501] [ 1537.857905][T27501] dump_stack_lvl+0x16c/0x1f0 [ 1537.857928][T27501] should_fail_ex+0x512/0x640 [ 1537.857950][T27501] ? fs_reclaim_acquire+0xae/0x150 [ 1537.857972][T27501] should_failslab+0xc2/0x120 [ 1537.857992][T27501] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1537.858007][T27501] ? __pfx_map_id_range_down+0x10/0x10 [ 1537.858020][T27501] ? security_inode_alloc+0x3b/0x2b0 [ 1537.858045][T27501] ? security_inode_alloc+0x3b/0x2b0 [ 1537.858065][T27501] security_inode_alloc+0x3b/0x2b0 [ 1537.858087][T27501] inode_init_always_gfp+0xce4/0x1030 [ 1537.858107][T27501] alloc_inode+0x86/0x240 [ 1537.858126][T27501] new_inode+0x22/0x1c0 [ 1537.858147][T27501] debugfs_create_dir+0xdd/0x5f0 [ 1537.858164][T27501] drm_debugfs_clients_add+0x6f/0x200 [ 1537.858184][T27501] drm_file_alloc+0x5c6/0xb40 [ 1537.858208][T27501] drm_open_helper+0x204/0x550 [ 1537.858230][T27501] drm_open+0x1a0/0x3e0 [ 1537.858249][T27501] ? __pfx_drm_open+0x10/0x10 [ 1537.858268][T27501] drm_stub_open+0x20f/0x380 [ 1537.858289][T27501] ? __pfx_drm_stub_open+0x10/0x10 [ 1537.858308][T27501] chrdev_open+0x234/0x6a0 [ 1537.858325][T27501] ? __pfx_apparmor_file_open+0x10/0x10 [ 1537.858346][T27501] ? __pfx_chrdev_open+0x10/0x10 [ 1537.858365][T27501] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1537.858386][T27501] do_dentry_open+0x982/0x1530 [ 1537.858403][T27501] ? __pfx_chrdev_open+0x10/0x10 [ 1537.858424][T27501] vfs_open+0x82/0x3f0 [ 1537.858447][T27501] path_openat+0x1de4/0x2cb0 [ 1537.858469][T27501] ? __pfx_path_openat+0x10/0x10 [ 1537.858487][T27501] ? __lock_acquire+0xb8a/0x1c90 [ 1537.858519][T27501] do_filp_open+0x20b/0x470 [ 1537.858537][T27501] ? __pfx_do_filp_open+0x10/0x10 [ 1537.858568][T27501] ? alloc_fd+0x471/0x7d0 [ 1537.858589][T27501] do_sys_openat2+0x11b/0x1d0 [ 1537.858610][T27501] ? __pfx_do_sys_openat2+0x10/0x10 [ 1537.858640][T27501] __x64_sys_openat+0x174/0x210 [ 1537.858661][T27501] ? __pfx___x64_sys_openat+0x10/0x10 [ 1537.858690][T27501] do_syscall_64+0xcd/0xfa0 [ 1537.858710][T27501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.858725][T27501] RIP: 0033:0x7f736238f749 [ 1537.858738][T27501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1537.858755][T27501] RSP: 002b:00007f73631ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1537.858770][T27501] RAX: ffffffffffffffda RBX: 00007f73625e5fa0 RCX: 00007f736238f749 [ 1537.858780][T27501] RDX: 0000000000020100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1537.858789][T27501] RBP: 00007f7362413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1537.858799][T27501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1537.858808][T27501] R13: 00007f73625e6038 R14: 00007f73625e5fa0 R15: 00007ffcbf010648 [ 1537.858830][T27501] [ 1537.858856][T27501] debugfs: out of free dentries, can not create directory 'client-133' [ 1538.349666][T27505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1538.435483][ T30] audit: type=1800 audit(4294967341.453:46): pid=27505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4696" name="members" dev="configfs" ino=131438 res=0 errno=0 [ 1538.532535][T27458] Bluetooth: hci3: command 0x0c1a tx timeout [ 1539.118805][T27529] FAULT_INJECTION: forcing a failure. [ 1539.118805][T27529] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1539.176367][T27529] CPU: 0 UID: 0 PID: 27529 Comm: syz.4.4701 Not tainted syzkaller #0 PREEMPT(full) [ 1539.176391][T27529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1539.176400][T27529] Call Trace: [ 1539.176406][T27529] [ 1539.176413][T27529] dump_stack_lvl+0x16c/0x1f0 [ 1539.176436][T27529] should_fail_ex+0x512/0x640 [ 1539.176471][T27529] get_futex_key+0x1d0/0x1560 [ 1539.176494][T27529] ? __pfx_get_futex_key+0x10/0x10 [ 1539.176519][T27529] futex_wake+0xea/0x530 [ 1539.176538][T27529] ? futex_wait+0x120/0x380 [ 1539.176553][T27529] ? __pfx_futex_wake+0x10/0x10 [ 1539.176574][T27529] ? __lock_acquire+0x622/0x1c90 [ 1539.176602][T27529] do_futex+0x1e3/0x350 [ 1539.176622][T27529] ? __pfx_do_futex+0x10/0x10 [ 1539.176646][T27529] __x64_sys_futex+0x1e0/0x4c0 [ 1539.176668][T27529] ? __pfx___x64_sys_futex+0x10/0x10 [ 1539.176686][T27529] ? __sys_getsockopt+0x144/0x1b0 [ 1539.176707][T27529] do_syscall_64+0xcd/0xfa0 [ 1539.176726][T27529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.176740][T27529] RIP: 0033:0x7fbef8d8f749 [ 1539.176753][T27529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.176767][T27529] RSP: 002b:00007fbef9b910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1539.176782][T27529] RAX: ffffffffffffffda RBX: 00007fbef8fe5fa8 RCX: 00007fbef8d8f749 [ 1539.176792][T27529] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbef8fe5fac [ 1539.176801][T27529] RBP: 00007fbef8fe5fa0 R08: 00007fbef9b92000 R09: 0000000000000000 [ 1539.176810][T27529] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1539.176819][T27529] R13: 00007fbef8fe6038 R14: 00007ffe4cd51600 R15: 00007ffe4cd516e8 [ 1539.176840][T27529] [ 1542.112905][T27603] Unable to find swap-space signature [ 1543.592455][T27594] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1545.221377][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.227933][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.947739][T17781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1546.959743][T17781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1546.972230][T17781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1546.980534][T17781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1546.990865][T17781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1547.385037][T27725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4744'. [ 1547.987214][T24356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.853470][T24356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.988336][T27716] chnl_net:caif_netlink_parms(): no params data found [ 1549.050668][T17781] Bluetooth: hci5: command tx timeout [ 1549.210056][T27753] Invalid ELF header magic: != ELF [ 1549.254777][T24356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.288373][T27750] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1550.174594][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.212238][T27716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.239057][T27716] bridge_slave_0: entered allmulticast mode [ 1550.279303][T27716] bridge_slave_0: entered promiscuous mode [ 1550.577996][T27716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.606933][T27716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.634307][T27768] netlink: 'syz.6.4753': attribute type 1 has an invalid length. [ 1550.651041][T27716] bridge_slave_1: entered allmulticast mode [ 1550.668901][T27716] bridge_slave_1: entered promiscuous mode [ 1550.860303][T24356] bridge_slave_1: left allmulticast mode [ 1550.887268][T24356] bridge_slave_1: left promiscuous mode [ 1550.921341][T24356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.997686][T24356] bridge_slave_0: left allmulticast mode [ 1551.040971][T24356] bridge_slave_0: left promiscuous mode [ 1551.069198][T24356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.109826][T17781] Bluetooth: hci5: command tx timeout [ 1553.180353][T17781] Bluetooth: hci5: command tx timeout [ 1553.240712][T24356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.311557][T24356] bond0 (unregistering): (slave ): Releasing backup interface [ 1553.348821][T24356] bond0 (unregistering): Released all slaves [ 1553.660694][T24356] HfR: left promiscuous mode [ 1553.684056][T27716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.752793][T27716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.166675][T27716] team0: Port device team_slave_0 added [ 1554.222533][T27716] team0: Port device team_slave_1 added [ 1554.618825][T27716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.682321][T27716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.870962][T27716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.952299][T27716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.001463][T27716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.193886][T27716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.251933][T17781] Bluetooth: hci5: command tx timeout [ 1555.811549][T27821] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1555.864065][T27823] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1556.106250][T27716] hsr_slave_0: entered promiscuous mode [ 1556.112942][T27716] hsr_slave_1: entered promiscuous mode [ 1556.179120][T27716] debugfs: 'hsr0' already exists in 'hsr' [ 1556.217829][T27716] Cannot create hsr debugfs directory [ 1556.533225][T24356] hsr_slave_0: left promiscuous mode [ 1556.581986][T24356] hsr_slave_1: left promiscuous mode [ 1556.709251][T24356] veth1_macvtap: left promiscuous mode [ 1556.745271][T24356] veth1_vlan: left promiscuous mode [ 1556.772136][T24356] veth0_vlan: left promiscuous mode [ 1557.088245][T27839] Invalid ELF header magic: != ELF [ 1559.143056][T24356] team0 (unregistering): Port device team_slave_1 removed [ 1559.385300][T24356] team0 (unregistering): Port device team_slave_0 removed [ 1563.078165][T27716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1563.138660][T27716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1563.272650][T27716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1563.333666][T27716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1563.762899][T27716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.911741][T27716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.950420][T27904] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4769'. [ 1564.017139][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.024347][T12712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.101490][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.108691][T12712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.129969][T27716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.502927][T27716] veth0_vlan: entered promiscuous mode [ 1565.622547][T27716] veth1_vlan: entered promiscuous mode [ 1565.784068][T27716] veth0_macvtap: entered promiscuous mode [ 1565.864768][T27716] veth1_macvtap: entered promiscuous mode [ 1565.946220][T27716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.037237][T27716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.347146][T24349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.389774][T24349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.549574][T24349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.604090][T24349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.656561][T27946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1566.666080][T27946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1566.684926][T27946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1566.754879][T27946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1566.829678][T27946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1566.856385][T27946] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1566.897456][T27946] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1567.066837][T24355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.154486][T24355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.463211][T24355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.520897][T24355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.990000][T27458] Bluetooth: hci1: command 0x0c1a tx timeout [ 1568.709024][T27458] Bluetooth: hci0: command 0x0c1a tx timeout [ 1568.715105][T17781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1568.786794][T27458] Bluetooth: hci3: command 0x0c1a tx timeout [ 1568.865665][T27458] Bluetooth: hci5: command 0x0c1a tx timeout [ 1569.954971][T28057] ptrace attach of "./syz-executor exec"[19585] was attempted by "./syz-executor exec"[28057] [ 1570.477750][T28061] serio: Serial port ttyS2 [ 1570.936407][T27458] Bluetooth: hci5: command 0x0c1a tx timeout [ 1572.382975][T28089] can: request_module (can-proto-5) failed. [ 1573.006005][T27458] Bluetooth: hci5: command 0x0c1a tx timeout [ 1573.542670][T28102] random: crng reseeded on system resumption [ 1574.716430][T28107] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1579.508130][T28169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 1581.681591][T28235] netlink: 326 bytes leftover after parsing attributes in process `syz.7.4831'. [ 1581.958271][T28237] FAULT_INJECTION: forcing a failure. [ 1581.958271][T28237] name failslab, interval 1, probability 393216, space 0, times 0 [ 1582.043347][T28237] CPU: 0 UID: 0 PID: 28237 Comm: syz.4.4832 Not tainted syzkaller #0 PREEMPT(full) [ 1582.043371][T28237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1582.043381][T28237] Call Trace: [ 1582.043387][T28237] [ 1582.043394][T28237] dump_stack_lvl+0x16c/0x1f0 [ 1582.043417][T28237] should_fail_ex+0x512/0x640 [ 1582.043440][T28237] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1582.043457][T28237] should_failslab+0xc2/0x120 [ 1582.043477][T28237] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1582.043492][T28237] ? mas_preallocate+0xe6a/0x11f0 [ 1582.043514][T28237] ? mas_preallocate+0xe6a/0x11f0 [ 1582.043531][T28237] mas_preallocate+0xe6a/0x11f0 [ 1582.043552][T28237] ? __pfx_mas_preallocate+0x10/0x10 [ 1582.043569][T28237] ? find_held_lock+0x2b/0x80 [ 1582.043592][T28237] ? __pfx___might_resched+0x10/0x10 [ 1582.043609][T28237] vma_link+0x12e/0x6a0 [ 1582.043623][T28237] ? anon_vma_clone+0x3fe/0x5c0 [ 1582.043646][T28237] ? __pfx_vma_link+0x10/0x10 [ 1582.043664][T28237] ? anon_vma_clone+0x405/0x5c0 [ 1582.043690][T28237] copy_vma+0x6b7/0xa90 [ 1582.043708][T28237] ? __pfx_copy_vma+0x10/0x10 [ 1582.043737][T28237] ? rcu_is_watching+0x12/0xc0 [ 1582.043752][T28237] ? finish_task_switch.isra.0+0x221/0xc10 [ 1582.043767][T28237] ? lockdep_hardirqs_on+0x7c/0x110 [ 1582.043787][T28237] copy_vma_and_data+0x1cf/0x790 [ 1582.043804][T28237] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1582.043823][T28237] ? __vma_enter_locked+0x163/0x3f0 [ 1582.043846][T28237] ? find_held_lock+0x2b/0x80 [ 1582.043861][T28237] ? move_vma+0x52e/0x1770 [ 1582.043873][T28237] ? __vm_enough_memory+0x184/0x3f0 [ 1582.043896][T28237] move_vma+0x540/0x1770 [ 1582.043913][T28237] ? __pfx_move_vma+0x10/0x10 [ 1582.043941][T28237] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1582.043961][T28237] ? cap_mmap_addr+0x4b/0x120 [ 1582.043982][T28237] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1582.043999][T28237] ? security_mmap_addr+0x6c/0x1e0 [ 1582.044016][T28237] ? __get_unmapped_area+0x267/0x440 [ 1582.044036][T28237] ? vrm_set_new_addr+0x208/0x290 [ 1582.044052][T28237] mremap_to+0x1b7/0x450 [ 1582.044067][T28237] do_mremap+0x13a8/0x2020 [ 1582.044083][T28237] ? futex_private_hash_put+0x60/0x190 [ 1582.044106][T28237] ? __pfx_do_mremap+0x10/0x10 [ 1582.044132][T28237] __do_sys_mremap+0x119/0x170 [ 1582.044146][T28237] ? __pfx___do_sys_mremap+0x10/0x10 [ 1582.044162][T28237] ? find_held_lock+0x2b/0x80 [ 1582.044179][T28237] ? __x64_sys_futex+0x1e0/0x4c0 [ 1582.044210][T28237] do_syscall_64+0xcd/0xfa0 [ 1582.044229][T28237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.044244][T28237] RIP: 0033:0x7fbef8d8f749 [ 1582.044258][T28237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1582.044272][T28237] RSP: 002b:00007fbef9b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1582.044287][T28237] RAX: ffffffffffffffda RBX: 00007fbef8fe5fa0 RCX: 00007fbef8d8f749 [ 1582.044297][T28237] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1582.044306][T28237] RBP: 00007fbef8e13f91 R08: 0000000100000000 R09: 0000000000000000 [ 1582.044315][T28237] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1582.044325][T28237] R13: 00007fbef8fe6038 R14: 00007fbef8fe5fa0 R15: 00007ffe4cd516e8 [ 1582.044346][T28237] [ 1583.890832][ T30] audit: type=1400 audit(4294967387.187:47): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=28253 comm="syz.4.4836" [ 1584.547830][T28258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4837'. [ 1584.669016][T28262] netlink: 186 bytes leftover after parsing attributes in process `syz.6.4837'. [ 1585.120156][T28272] FAULT_INJECTION: forcing a failure. [ 1585.120156][T28272] name failslab, interval 1, probability 393216, space 0, times 0 [ 1585.215631][T28272] CPU: 0 UID: 0 PID: 28272 Comm: syz.4.4840 Not tainted syzkaller #0 PREEMPT(full) [ 1585.215655][T28272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1585.215665][T28272] Call Trace: [ 1585.215671][T28272] [ 1585.215677][T28272] dump_stack_lvl+0x16c/0x1f0 [ 1585.215700][T28272] should_fail_ex+0x512/0x640 [ 1585.215723][T28272] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1585.215741][T28272] should_failslab+0xc2/0x120 [ 1585.215762][T28272] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1585.215777][T28272] ? vm_area_alloc+0x1f/0x160 [ 1585.215794][T28272] ? vm_area_alloc+0x1f/0x160 [ 1585.215806][T28272] vm_area_alloc+0x1f/0x160 [ 1585.215819][T28272] __mmap_region+0xf85/0x27a0 [ 1585.215835][T28272] ? find_held_lock+0x2b/0x80 [ 1585.215850][T28272] ? __pfx___mmap_region+0x10/0x10 [ 1585.215864][T28272] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1585.215880][T28272] ? rcu_is_watching+0x12/0xc0 [ 1585.215896][T28272] ? finish_task_switch.isra.0+0x221/0xc10 [ 1585.215910][T28272] ? lockdep_hardirqs_on+0x7c/0x110 [ 1585.215929][T28272] ? finish_task_switch.isra.0+0x221/0xc10 [ 1585.215962][T28272] ? __pfx___schedule+0x10/0x10 [ 1585.216001][T28272] ? trace_cap_capable+0x18d/0x200 [ 1585.216029][T28272] mmap_region+0x1ab/0x3f0 [ 1585.216043][T28272] ? __get_unmapped_area+0x267/0x440 [ 1585.216063][T28272] do_mmap+0xa3e/0x1210 [ 1585.216085][T28272] ? __pfx_do_mmap+0x10/0x10 [ 1585.216104][T28272] ? __pfx_down_write_killable+0x10/0x10 [ 1585.216127][T28272] vm_mmap_pgoff+0x29e/0x470 [ 1585.216149][T28272] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1585.216172][T28272] ? __x64_sys_futex+0x1e0/0x4c0 [ 1585.216191][T28272] ? __x64_sys_futex+0x1e9/0x4c0 [ 1585.216212][T28272] ksys_mmap_pgoff+0x7d/0x5c0 [ 1585.216229][T28272] ? xfd_validate_state+0x61/0x180 [ 1585.216253][T28272] __x64_sys_mmap+0x125/0x190 [ 1585.216276][T28272] do_syscall_64+0xcd/0xfa0 [ 1585.216295][T28272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.216309][T28272] RIP: 0033:0x7fbef8d8f749 [ 1585.216322][T28272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.216337][T28272] RSP: 002b:00007fbef9b4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1585.216352][T28272] RAX: ffffffffffffffda RBX: 00007fbef8fe6180 RCX: 00007fbef8d8f749 [ 1585.216362][T28272] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 1585.216371][T28272] RBP: 00007fbef8e13f91 R08: 0000000000000401 R09: 0000000000008000 [ 1585.216381][T28272] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1585.216390][T28272] R13: 00007fbef8fe6218 R14: 00007fbef8fe6180 R15: 00007ffe4cd516e8 [ 1585.216411][T28272] [ 1586.263662][T27458] Bluetooth: hci4: unexpected event 0x23 length: 127 > 13 [ 1586.735720][T28307] FAULT_INJECTION: forcing a failure. [ 1586.735720][T28307] name failslab, interval 1, probability 393216, space 0, times 0 [ 1586.879290][T28307] CPU: 0 UID: 0 PID: 28307 Comm: syz.6.4850 Not tainted syzkaller #0 PREEMPT(full) [ 1586.879313][T28307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1586.879323][T28307] Call Trace: [ 1586.879329][T28307] [ 1586.879335][T28307] dump_stack_lvl+0x16c/0x1f0 [ 1586.879359][T28307] should_fail_ex+0x512/0x640 [ 1586.879393][T28307] ? fs_reclaim_acquire+0xae/0x150 [ 1586.879416][T28307] should_failslab+0xc2/0x120 [ 1586.879437][T28307] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1586.879454][T28307] ? __kernfs_new_node+0xd2/0x8e0 [ 1586.879476][T28307] ? __kernfs_new_node+0xd2/0x8e0 [ 1586.879493][T28307] __kernfs_new_node+0xd2/0x8e0 [ 1586.879513][T28307] ? __pfx___kernfs_new_node+0x10/0x10 [ 1586.879537][T28307] ? find_held_lock+0x2b/0x80 [ 1586.879552][T28307] ? kernfs_root+0xee/0x2a0 [ 1586.879574][T28307] kernfs_new_node+0x13c/0x1e0 [ 1586.879598][T28307] __kernfs_create_file+0x53/0x350 [ 1586.879616][T28307] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1586.879639][T28307] internal_create_group+0x578/0xf30 [ 1586.879663][T28307] ? __pfx_internal_create_group+0x10/0x10 [ 1586.879686][T28307] ? kernfs_create_link+0x1bd/0x240 [ 1586.879704][T28307] internal_create_groups+0x9d/0x150 [ 1586.879724][T28307] device_add+0x731/0x1aa0 [ 1586.879740][T28307] ? __pfx_device_add+0x10/0x10 [ 1586.879752][T28307] ? __pfx___might_resched+0x10/0x10 [ 1586.879767][T28307] ? is_dynamic_key+0xb4/0x160 [ 1586.879792][T28307] __add_disk+0x457/0xf00 [ 1586.879816][T28307] add_disk_fwnode+0x13f/0x5d0 [ 1586.879837][T28307] nbd_dev_add+0x783/0xbb0 [ 1586.879858][T28307] ? __pfx_nbd_dev_add+0x10/0x10 [ 1586.879893][T28307] ? bpf_lsm_capable+0x9/0x10 [ 1586.879912][T28307] ? __radix_tree_lookup+0x21f/0x2c0 [ 1586.879932][T28307] nbd_genl_connect+0x8b0/0x1c60 [ 1586.879958][T28307] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1586.879980][T28307] ? __nla_parse+0x40/0x60 [ 1586.879998][T28307] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1586.880019][T28307] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1586.880042][T28307] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1586.880062][T28307] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1586.880080][T28307] ? genl_get_cmd+0x194/0x580 [ 1586.880103][T28307] ? __radix_tree_lookup+0x21f/0x2c0 [ 1586.880122][T28307] genl_rcv_msg+0x55c/0x800 [ 1586.880142][T28307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1586.880161][T28307] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1586.880189][T28307] netlink_rcv_skb+0x158/0x420 [ 1586.880205][T28307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1586.880224][T28307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1586.880248][T28307] ? netlink_deliver_tap+0x1ae/0xd30 [ 1586.880266][T28307] genl_rcv+0x28/0x40 [ 1586.880282][T28307] netlink_unicast+0x5aa/0x870 [ 1586.880300][T28307] ? __pfx_netlink_unicast+0x10/0x10 [ 1586.880324][T28307] netlink_sendmsg+0x8c8/0xdd0 [ 1586.880343][T28307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.880362][T28307] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1586.880393][T28307] ____sys_sendmsg+0xa98/0xc70 [ 1586.880416][T28307] ? copy_msghdr_from_user+0x10a/0x160 [ 1586.880437][T28307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1586.880461][T28307] ? __pfx_futex_wake_mark+0x10/0x10 [ 1586.880489][T28307] ___sys_sendmsg+0x134/0x1d0 [ 1586.880506][T28307] ? __pfx____sys_sendmsg+0x10/0x10 [ 1586.880519][T28307] ? __lock_acquire+0x622/0x1c90 [ 1586.880563][T28307] __sys_sendmsg+0x16d/0x220 [ 1586.880578][T28307] ? __pfx___sys_sendmsg+0x10/0x10 [ 1586.880592][T28307] ? __x64_sys_futex+0x1e0/0x4c0 [ 1586.880624][T28307] do_syscall_64+0xcd/0xfa0 [ 1586.880643][T28307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.880658][T28307] RIP: 0033:0x7f7450b8f749 [ 1586.880672][T28307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1586.880686][T28307] RSP: 002b:00007f7451a2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.880702][T28307] RAX: ffffffffffffffda RBX: 00007f7450de5fa0 RCX: 00007f7450b8f749 [ 1586.880712][T28307] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1586.880722][T28307] RBP: 00007f7450c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1586.880731][T28307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1586.880740][T28307] R13: 00007f7450de6038 R14: 00007f7450de5fa0 R15: 00007ffedef80be8 [ 1586.880762][T28307] [ 1588.939607][T28307] nbd: failed to add new device [ 1589.162899][T28336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4855'. [ 1589.966546][T27458] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1590.136576][T28351] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 1590.240716][T28351] ep_00: uevent: failed to send synthetic uevent: -22 [ 1590.754039][T28365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4861'. [ 1591.105483][T28386] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 1592.869353][T28409] FAULT_INJECTION: forcing a failure. [ 1592.869353][T28409] name failslab, interval 1, probability 393216, space 0, times 0 [ 1593.060757][T28409] CPU: 0 UID: 60928 PID: 28409 Comm: syz.6.4871 Not tainted syzkaller #0 PREEMPT(full) [ 1593.060781][T28409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1593.060791][T28409] Call Trace: [ 1593.060797][T28409] [ 1593.060803][T28409] dump_stack_lvl+0x16c/0x1f0 [ 1593.060828][T28409] should_fail_ex+0x512/0x640 [ 1593.060854][T28409] should_failslab+0xc2/0x120 [ 1593.060875][T28409] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1593.060891][T28409] ? skb_clone+0x190/0x3f0 [ 1593.060910][T28409] ? skb_clone+0x190/0x3f0 [ 1593.060922][T28409] skb_clone+0x190/0x3f0 [ 1593.060938][T28409] netlink_deliver_tap+0xabd/0xd30 [ 1593.060959][T28409] netlink_unicast+0x64c/0x870 [ 1593.060978][T28409] ? __pfx_netlink_unicast+0x10/0x10 [ 1593.061003][T28409] netlink_sendmsg+0x8c8/0xdd0 [ 1593.061022][T28409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.061047][T28409] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1593.061074][T28409] __sys_sendto+0x4a3/0x520 [ 1593.061097][T28409] ? __pfx___sys_sendto+0x10/0x10 [ 1593.061135][T28409] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 1593.061158][T28409] ? syscall_user_dispatch+0x78/0x140 [ 1593.061175][T28409] __x64_sys_sendto+0xe0/0x1c0 [ 1593.061196][T28409] ? syscall_trace_enter+0x5e/0x240 [ 1593.061219][T28409] do_syscall_64+0xcd/0xfa0 [ 1593.061238][T28409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.061252][T28409] RIP: 0033:0x7f7450b915dc [ 1593.061264][T28409] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1593.061279][T28409] RSP: 002b:00007f7451a29ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1593.061297][T28409] RAX: ffffffffffffffda RBX: 00007f7451a29fc0 RCX: 00007f7450b915dc [ 1593.061307][T28409] RDX: 0000000000000024 RSI: 00007f7451a2a010 RDI: 0000000000000004 [ 1593.061315][T28409] RBP: 0000000000000000 R08: 00007f7451a29f14 R09: 000000000000000c [ 1593.061324][T28409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1593.061332][T28409] R13: 00007f7451a29f68 R14: 00007f7451a2a010 R15: 0000000000000000 [ 1593.061353][T28409] [ 1593.266962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.753778][T28430] FAULT_INJECTION: forcing a failure. [ 1593.753778][T28430] name failslab, interval 1, probability 393216, space 0, times 0 [ 1593.828712][T28430] CPU: 0 UID: 0 PID: 28430 Comm: syz.0.4876 Not tainted syzkaller #0 PREEMPT(full) [ 1593.828736][T28430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1593.828746][T28430] Call Trace: [ 1593.828752][T28430] [ 1593.828758][T28430] dump_stack_lvl+0x16c/0x1f0 [ 1593.828781][T28430] should_fail_ex+0x512/0x640 [ 1593.828804][T28430] ? fs_reclaim_acquire+0xae/0x150 [ 1593.828826][T28430] should_failslab+0xc2/0x120 [ 1593.828847][T28430] __kmalloc_noprof+0xdd/0x880 [ 1593.828869][T28430] ? tomoyo_encode2+0x100/0x3e0 [ 1593.828915][T28430] ? tomoyo_encode2+0x100/0x3e0 [ 1593.828931][T28430] tomoyo_encode2+0x100/0x3e0 [ 1593.828951][T28430] tomoyo_encode+0x29/0x50 [ 1593.828967][T28430] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1593.828991][T28430] tomoyo_mkdev_perm+0x22b/0x570 [ 1593.829003][T28430] ? tomoyo_mkdev_perm+0x217/0x570 [ 1593.829018][T28430] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1593.829033][T28430] ? do_raw_spin_lock+0x12c/0x2b0 [ 1593.829060][T28430] ? do_raw_spin_unlock+0x172/0x230 [ 1593.829084][T28430] ? __pfx_current_check_access_path+0x10/0x10 [ 1593.829102][T28430] ? simple_lookup+0x105/0x1d0 [ 1593.829121][T28430] tomoyo_path_mknod+0x12a/0x190 [ 1593.829139][T28430] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1593.829159][T28430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1593.829186][T28430] security_path_mknod+0x161/0x310 [ 1593.829202][T28430] do_mknodat+0x239/0x5d0 [ 1593.829220][T28430] ? __pfx_do_mknodat+0x10/0x10 [ 1593.829235][T28430] ? getname_flags.part.0+0x1c5/0x550 [ 1593.829260][T28430] __x64_sys_mknod+0x87/0xb0 [ 1593.829276][T28430] do_syscall_64+0xcd/0xfa0 [ 1593.829295][T28430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.829310][T28430] RIP: 0033:0x7f068738f749 [ 1593.829323][T28430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1593.829338][T28430] RSP: 002b:00007f0688237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1593.829352][T28430] RAX: ffffffffffffffda RBX: 00007f06875e5fa0 RCX: 00007f068738f749 [ 1593.829362][T28430] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1593.829371][T28430] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1593.829379][T28430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.829387][T28430] R13: 00007f06875e6038 R14: 00007f06875e5fa0 R15: 00007ffd4e5260a8 [ 1593.829408][T28430] [ 1593.829424][T28430] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1594.660767][T28446] netlink: 'syz.7.4881': attribute type 12 has an invalid length. [ 1595.351906][T28463] netlink: 334 bytes leftover after parsing attributes in process `syz.7.4884'. [ 1595.979128][T27458] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1596.715298][T28503] netlink: 62 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1598.009799][T17781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1599.933385][T28574] FAULT_INJECTION: forcing a failure. [ 1599.933385][T28574] name failslab, interval 1, probability 393216, space 0, times 0 [ 1600.016306][T28574] CPU: 0 UID: 0 PID: 28574 Comm: syz.6.4912 Not tainted syzkaller #0 PREEMPT(full) [ 1600.016331][T28574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1600.016340][T28574] Call Trace: [ 1600.016346][T28574] [ 1600.016353][T28574] dump_stack_lvl+0x16c/0x1f0 [ 1600.016376][T28574] should_fail_ex+0x512/0x640 [ 1600.016399][T28574] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1600.016421][T28574] should_failslab+0xc2/0x120 [ 1600.016440][T28574] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1600.016458][T28574] ? kstrdup_const+0x63/0x80 [ 1600.016478][T28574] ? kstrdup+0x53/0x100 [ 1600.016492][T28574] kstrdup+0x53/0x100 [ 1600.016508][T28574] kstrdup_const+0x63/0x80 [ 1600.016523][T28574] kvasprintf_const+0x10f/0x1a0 [ 1600.016539][T28574] kobject_set_name_vargs+0x5a/0x140 [ 1600.016560][T28574] kobject_init_and_add+0xe7/0x190 [ 1600.016580][T28574] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1600.016605][T28574] ? up_write+0x1b2/0x520 [ 1600.016630][T28574] sysfs_slab_add+0x194/0x1f0 [ 1600.016646][T28574] do_kmem_cache_create+0x5bb/0x740 [ 1600.016668][T28574] __kmem_cache_create_args+0x202/0x3c0 [ 1600.016693][T28574] mon_text_open+0x333/0x510 [ 1600.016711][T28574] ? __pfx_mon_text_open+0x10/0x10 [ 1600.016730][T28574] ? __pfx_mon_text_ctor+0x10/0x10 [ 1600.016755][T28574] ? __pfx_apparmor_file_open+0x10/0x10 [ 1600.016777][T28574] ? lockdown_is_locked_down+0x3f/0x130 [ 1600.016798][T28574] ? bpf_lsm_locked_down+0x9/0x10 [ 1600.016820][T28574] ? __pfx_mon_text_open+0x10/0x10 [ 1600.016837][T28574] full_proxy_open_regular+0x1b9/0x360 [ 1600.016860][T28574] do_dentry_open+0x982/0x1530 [ 1600.016877][T28574] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1600.016902][T28574] vfs_open+0x82/0x3f0 [ 1600.016924][T28574] path_openat+0x1de4/0x2cb0 [ 1600.016947][T28574] ? __pfx_path_openat+0x10/0x10 [ 1600.016964][T28574] ? __lock_acquire+0xb8a/0x1c90 [ 1600.016986][T28574] do_filp_open+0x20b/0x470 [ 1600.017002][T28574] ? __pfx_do_filp_open+0x10/0x10 [ 1600.017032][T28574] ? alloc_fd+0x471/0x7d0 [ 1600.017052][T28574] do_sys_openat2+0x11b/0x1d0 [ 1600.017072][T28574] ? __pfx_do_sys_openat2+0x10/0x10 [ 1600.017100][T28574] __x64_sys_openat+0x174/0x210 [ 1600.017121][T28574] ? __pfx___x64_sys_openat+0x10/0x10 [ 1600.017150][T28574] do_syscall_64+0xcd/0xfa0 [ 1600.017169][T28574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.017184][T28574] RIP: 0033:0x7f7450b8f749 [ 1600.017197][T28574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.017211][T28574] RSP: 002b:00007f7451a2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1600.017226][T28574] RAX: ffffffffffffffda RBX: 00007f7450de5fa0 RCX: 00007f7450b8f749 [ 1600.017236][T28574] RDX: 0000000000000800 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1600.017245][T28574] RBP: 00007f7450c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1600.017254][T28574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.017263][T28574] R13: 00007f7450de6038 R14: 00007f7450de5fa0 R15: 00007ffedef80be8 [ 1600.017284][T28574] [ 1600.017292][T28574] kobject: can not set name properly! [ 1600.441174][T28577] FAULT_INJECTION: forcing a failure. [ 1600.441174][T28577] name failslab, interval 1, probability 393216, space 0, times 0 [ 1600.498452][T28577] CPU: 0 UID: 0 PID: 28577 Comm: syz.4.4913 Not tainted syzkaller #0 PREEMPT(full) [ 1600.498476][T28577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1600.498486][T28577] Call Trace: [ 1600.498492][T28577] [ 1600.498498][T28577] dump_stack_lvl+0x16c/0x1f0 [ 1600.498521][T28577] should_fail_ex+0x512/0x640 [ 1600.498543][T28577] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1600.498561][T28577] should_failslab+0xc2/0x120 [ 1600.498581][T28577] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1600.498596][T28577] ? __pmd_alloc+0xbf/0x8b0 [ 1600.498619][T28577] ? __pmd_alloc+0xbf/0x8b0 [ 1600.498640][T28577] __pmd_alloc+0xbf/0x8b0 [ 1600.498662][T28577] huge_pte_alloc+0x41d/0x5b0 [ 1600.498680][T28577] hugetlb_fault+0x373/0x2f40 [ 1600.498698][T28577] ? __pfx_hugetlb_fault+0x10/0x10 [ 1600.498721][T28577] ? find_vma+0xbf/0x140 [ 1600.498744][T28577] ? __pfx_find_vma+0x10/0x10 [ 1600.498763][T28577] handle_mm_fault+0xbfa/0xd10 [ 1600.498787][T28577] ? __pkru_allows_pkey+0x21/0xb0 [ 1600.498811][T28577] do_user_addr_fault+0x7a6/0x1370 [ 1600.498827][T28577] ? rcu_is_watching+0x12/0xc0 [ 1600.498846][T28577] exc_page_fault+0x64/0xc0 [ 1600.498865][T28577] asm_exc_page_fault+0x26/0x30 [ 1600.498879][T28577] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1600.498902][T28577] Code: c4 10 e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 [ 1600.498916][T28577] RSP: 0018:ffffc90000107d20 EFLAGS: 00050202 [ 1600.498928][T28577] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1600.498937][T28577] RDX: fffff52000020fb7 RSI: 0000000000000000 RDI: ffffc90000107db8 [ 1600.498947][T28577] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000020fb7 [ 1600.498955][T28577] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 1600.498964][T28577] R13: ffffc90000107db8 R14: 0000000000000000 R15: 0000000000000009 [ 1600.498983][T28577] _copy_from_user+0x98/0xd0 [ 1600.499007][T28577] do_timer_create+0xed9/0x14c0 [ 1600.499031][T28577] ? do_futex+0x122/0x350 [ 1600.499050][T28577] ? __pfx_do_timer_create+0x10/0x10 [ 1600.499070][T28577] ? __pfx_do_futex+0x10/0x10 [ 1600.499090][T28577] ? cap_task_prctl+0x2af/0xa80 [ 1600.499115][T28577] __x64_sys_timer_create+0x199/0x1d0 [ 1600.499137][T28577] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 1600.499161][T28577] ? xfd_validate_state+0x61/0x180 [ 1600.499181][T28577] ? __pfx___do_sys_prctl+0x10/0x10 [ 1600.499210][T28577] do_syscall_64+0xcd/0xfa0 [ 1600.499229][T28577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.499243][T28577] RIP: 0033:0x7fbef8d8f749 [ 1600.499255][T28577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.499269][T28577] RSP: 002b:00007fbef9b70038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1600.499282][T28577] RAX: ffffffffffffffda RBX: 00007fbef8fe6090 RCX: 00007fbef8d8f749 [ 1600.499292][T28577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1600.499300][T28577] RBP: 00007fbef8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1600.499309][T28577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.499317][T28577] R13: 00007fbef8fe6128 R14: 00007fbef8fe6090 R15: 00007ffe4cd516e8 [ 1600.499338][T28577] [ 1601.749928][T28574] SLUB: Unable to add cache mon_text_ffff88805f2f7800 to sysfs [ 1601.799130][T28593] FAULT_INJECTION: forcing a failure. [ 1601.799130][T28593] name failslab, interval 1, probability 393216, space 0, times 0 [ 1601.866986][T28593] CPU: 0 UID: 0 PID: 28593 Comm: syz.6.4912 Not tainted syzkaller #0 PREEMPT(full) [ 1601.867010][T28593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1601.867019][T28593] Call Trace: [ 1601.867024][T28593] [ 1601.867031][T28593] dump_stack_lvl+0x16c/0x1f0 [ 1601.867056][T28593] should_fail_ex+0x512/0x640 [ 1601.867078][T28593] ? __kmalloc_noprof+0xca/0x880 [ 1601.867103][T28593] should_failslab+0xc2/0x120 [ 1601.867123][T28593] __kmalloc_noprof+0xdd/0x880 [ 1601.867146][T28593] ? process_preds+0x46c/0x1c50 [ 1601.867169][T28593] ? process_preds+0x46c/0x1c50 [ 1601.867187][T28593] process_preds+0x46c/0x1c50 [ 1601.867210][T28593] ? create_filter_start.constprop.0+0x56/0x300 [ 1601.867233][T28593] create_filter+0x140/0x210 [ 1601.867253][T28593] ? __pfx_create_filter+0x10/0x10 [ 1601.867273][T28593] ? __pfx___mutex_lock+0x10/0x10 [ 1601.867291][T28593] ? find_held_lock+0x2b/0x80 [ 1601.867308][T28593] apply_event_filter+0x220/0x500 [ 1601.867329][T28593] ? __pfx_apply_event_filter+0x10/0x10 [ 1601.867355][T28593] event_filter_write+0x16d/0x290 [ 1601.867371][T28593] ? __pfx_event_filter_write+0x10/0x10 [ 1601.867385][T28593] vfs_write+0x2a0/0x11d0 [ 1601.867404][T28593] ? __pfx___mutex_lock+0x10/0x10 [ 1601.867431][T28593] ? __pfx_vfs_write+0x10/0x10 [ 1601.867454][T28593] ? __fget_files+0x20e/0x3c0 [ 1601.867476][T28593] ksys_write+0x12a/0x250 [ 1601.867493][T28593] ? __pfx_ksys_write+0x10/0x10 [ 1601.867516][T28593] do_syscall_64+0xcd/0xfa0 [ 1601.867536][T28593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.867552][T28593] RIP: 0033:0x7f7450b8f749 [ 1601.867565][T28593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.867579][T28593] RSP: 002b:00007f7451a0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1601.867595][T28593] RAX: ffffffffffffffda RBX: 00007f7450de6090 RCX: 00007f7450b8f749 [ 1601.867605][T28593] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1601.867613][T28593] RBP: 00007f7450c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1601.867622][T28593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.867630][T28593] R13: 00007f7450de6128 R14: 00007f7450de6090 R15: 00007ffedef80be8 [ 1601.867651][T28593] [ 1602.825825][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1602.907102][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1602.938087][T28605] Invalid ELF header magic: != ELF [ 1603.047381][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1603.348450][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1603.466248][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1603.539630][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1603.621925][T28602] futex_wake_op: syz.4.4917 tries to shift op by -2048; fix this program [ 1604.723187][T28642] FAULT_INJECTION: forcing a failure. [ 1604.723187][T28642] name failslab, interval 1, probability 393216, space 0, times 0 [ 1604.800100][T28642] CPU: 0 UID: 0 PID: 28642 Comm: syz.0.4925 Not tainted syzkaller #0 PREEMPT(full) [ 1604.800124][T28642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1604.800133][T28642] Call Trace: [ 1604.800139][T28642] [ 1604.800145][T28642] dump_stack_lvl+0x16c/0x1f0 [ 1604.800169][T28642] should_fail_ex+0x512/0x640 [ 1604.800192][T28642] ? fs_reclaim_acquire+0xae/0x150 [ 1604.800214][T28642] should_failslab+0xc2/0x120 [ 1604.800239][T28642] __kmalloc_noprof+0xdd/0x880 [ 1604.800264][T28642] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1604.800287][T28642] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1604.800303][T28642] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1604.800323][T28642] ? tomoyo_profile+0x47/0x60 [ 1604.800344][T28642] tomoyo_path_number_perm+0x245/0x580 [ 1604.800357][T28642] ? tomoyo_path_number_perm+0x237/0x580 [ 1604.800373][T28642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1604.800394][T28642] ? find_held_lock+0x2b/0x80 [ 1604.800421][T28642] ? __pfx___d_add+0x10/0x10 [ 1604.800439][T28642] ? d_alloc+0x176/0x1e0 [ 1604.800453][T28642] ? current_check_access_path+0x33c/0x460 [ 1604.800472][T28642] ? __pfx_current_check_access_path+0x10/0x10 [ 1604.800491][T28642] ? simple_lookup+0x105/0x1d0 [ 1604.800506][T28642] ? lookup_one_qstr_excl+0xb3/0x250 [ 1604.800528][T28642] tomoyo_path_mkdir+0x9b/0xe0 [ 1604.800547][T28642] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1604.800572][T28642] security_path_mkdir+0x154/0x2f0 [ 1604.800588][T28642] do_mkdirat+0x175/0x3e0 [ 1604.800605][T28642] ? __pfx_do_mkdirat+0x10/0x10 [ 1604.800623][T28642] ? getname_flags.part.0+0x1c5/0x550 [ 1604.800646][T28642] __x64_sys_mkdir+0xef/0x140 [ 1604.800663][T28642] do_syscall_64+0xcd/0xfa0 [ 1604.800682][T28642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.800697][T28642] RIP: 0033:0x7f068738f749 [ 1604.800710][T28642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.800724][T28642] RSP: 002b:00007f0688216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1604.800738][T28642] RAX: ffffffffffffffda RBX: 00007f06875e6090 RCX: 00007f068738f749 [ 1604.800748][T28642] RDX: 0000000000000000 RSI: 0000000000008003 RDI: 0000000000000000 [ 1604.800757][T28642] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1604.800766][T28642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.800776][T28642] R13: 00007f06875e6128 R14: 00007f06875e6090 R15: 00007ffd4e5260a8 [ 1604.800798][T28642] [ 1604.800804][T28642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1605.458443][T28613] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1605.468481][T17781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1606.114870][T28613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1606.121314][T28613] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1606.132416][T28613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1606.143189][T28613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1606.164760][T28613] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1606.372580][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.387498][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.564043][T17781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1607.832220][T28693] FAULT_INJECTION: forcing a failure. [ 1607.832220][T28693] name failslab, interval 1, probability 393216, space 0, times 0 [ 1607.939629][T28693] CPU: 0 UID: 0 PID: 28693 Comm: syz.0.4931 Not tainted syzkaller #0 PREEMPT(full) [ 1607.939653][T28693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1607.939663][T28693] Call Trace: [ 1607.939668][T28693] [ 1607.939674][T28693] dump_stack_lvl+0x16c/0x1f0 [ 1607.939698][T28693] should_fail_ex+0x512/0x640 [ 1607.939721][T28693] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1607.939741][T28693] should_failslab+0xc2/0x120 [ 1607.939760][T28693] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1607.939775][T28693] ? vm_area_dup+0x27/0x8d0 [ 1607.939793][T28693] ? vm_area_dup+0x27/0x8d0 [ 1607.939806][T28693] vm_area_dup+0x27/0x8d0 [ 1607.939820][T28693] __split_vma+0x18e/0x1070 [ 1607.939836][T28693] ? __pfx___split_vma+0x10/0x10 [ 1607.939855][T28693] ? __pfx_mas_prev+0x10/0x10 [ 1607.939878][T28693] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1607.939896][T28693] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1607.939910][T28693] ? mark_held_locks+0x49/0x80 [ 1607.939929][T28693] ? finish_task_switch.isra.0+0x221/0xc10 [ 1607.939944][T28693] ? lockdep_hardirqs_on+0x7c/0x110 [ 1607.939961][T28693] ? finish_task_switch.isra.0+0x221/0xc10 [ 1607.939977][T28693] ? rcu_is_watching+0x12/0xc0 [ 1607.939992][T28693] ? trace_sched_exit_tp+0xd1/0x120 [ 1607.940017][T28693] do_vmi_align_munmap+0x286/0x7e0 [ 1607.940034][T28693] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1607.940086][T28693] do_vmi_munmap+0x204/0x3e0 [ 1607.940104][T28693] do_munmap+0xb6/0xf0 [ 1607.940124][T28693] ? __pfx_do_munmap+0x10/0x10 [ 1607.940147][T28693] ? may_expand_vm+0xe8/0x430 [ 1607.940172][T28693] mremap_to+0x236/0x450 [ 1607.940189][T28693] do_mremap+0xd89/0x2020 [ 1607.940204][T28693] ? futex_private_hash_put+0xd5/0x190 [ 1607.940225][T28693] ? futex_wait+0x120/0x380 [ 1607.940238][T28693] ? __pfx_futex_wait+0x10/0x10 [ 1607.940251][T28693] ? __pfx_do_mremap+0x10/0x10 [ 1607.940276][T28693] __do_sys_mremap+0x119/0x170 [ 1607.940290][T28693] ? __pfx___do_sys_mremap+0x10/0x10 [ 1607.940310][T28693] ? __x64_sys_futex+0x1e0/0x4c0 [ 1607.940341][T28693] do_syscall_64+0xcd/0xfa0 [ 1607.940361][T28693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.940375][T28693] RIP: 0033:0x7f068738f749 [ 1607.940389][T28693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.940403][T28693] RSP: 002b:00007f06881d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1607.940418][T28693] RAX: ffffffffffffffda RBX: 00007f06875e6270 RCX: 00007f068738f749 [ 1607.940428][T28693] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 000000110c230000 [ 1607.940436][T28693] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1607.940445][T28693] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1607.940454][T28693] R13: 00007f06875e6308 R14: 00007f06875e6270 R15: 00007ffd4e5260a8 [ 1607.940475][T28693] [ 1608.600136][T17781] Bluetooth: hci5: command 0x0c1a tx timeout [ 1608.606180][T17781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1608.612255][T17781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1609.372225][T28712] FAULT_INJECTION: forcing a failure. [ 1609.372225][T28712] name failslab, interval 1, probability 393216, space 0, times 0 [ 1609.446704][T28712] CPU: 0 UID: 0 PID: 28712 Comm: syz.4.4939 Not tainted syzkaller #0 PREEMPT(full) [ 1609.446729][T28712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1609.446739][T28712] Call Trace: [ 1609.446746][T28712] [ 1609.446753][T28712] dump_stack_lvl+0x16c/0x1f0 [ 1609.446778][T28712] should_fail_ex+0x512/0x640 [ 1609.446800][T28712] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1609.446818][T28712] should_failslab+0xc2/0x120 [ 1609.446838][T28712] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1609.446853][T28712] ? vm_area_alloc+0x1f/0x160 [ 1609.446870][T28712] ? vm_area_alloc+0x1f/0x160 [ 1609.446881][T28712] vm_area_alloc+0x1f/0x160 [ 1609.446894][T28712] __mmap_region+0xf85/0x27a0 [ 1609.446914][T28712] ? find_held_lock+0x2b/0x80 [ 1609.446930][T28712] ? __pfx___mmap_region+0x10/0x10 [ 1609.446943][T28712] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1609.446960][T28712] ? rcu_is_watching+0x12/0xc0 [ 1609.446976][T28712] ? finish_task_switch.isra.0+0x221/0xc10 [ 1609.446991][T28712] ? lockdep_hardirqs_on+0x7c/0x110 [ 1609.447009][T28712] ? finish_task_switch.isra.0+0x221/0xc10 [ 1609.447043][T28712] ? __pfx___schedule+0x10/0x10 [ 1609.447082][T28712] ? trace_cap_capable+0x18d/0x200 [ 1609.447109][T28712] mmap_region+0x1ab/0x3f0 [ 1609.447124][T28712] ? __get_unmapped_area+0x267/0x440 [ 1609.447144][T28712] do_mmap+0xa3e/0x1210 [ 1609.447166][T28712] ? __pfx_do_mmap+0x10/0x10 [ 1609.447185][T28712] ? __pfx_down_write_killable+0x10/0x10 [ 1609.447209][T28712] vm_mmap_pgoff+0x29e/0x470 [ 1609.447230][T28712] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1609.447253][T28712] ? __x64_sys_futex+0x1e0/0x4c0 [ 1609.447271][T28712] ? __x64_sys_futex+0x1e9/0x4c0 [ 1609.447292][T28712] ksys_mmap_pgoff+0x7d/0x5c0 [ 1609.447309][T28712] ? xfd_validate_state+0x61/0x180 [ 1609.447329][T28712] ? __pfx_ksys_write+0x10/0x10 [ 1609.447347][T28712] __x64_sys_mmap+0x125/0x190 [ 1609.447370][T28712] do_syscall_64+0xcd/0xfa0 [ 1609.447389][T28712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.447405][T28712] RIP: 0033:0x7fbef8d8f749 [ 1609.447417][T28712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.447431][T28712] RSP: 002b:00007fbef9b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1609.447446][T28712] RAX: ffffffffffffffda RBX: 00007fbef8fe5fa0 RCX: 00007fbef8d8f749 [ 1609.447456][T28712] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1609.447465][T28712] RBP: 00007fbef8e13f91 R08: 0000000000000007 R09: 0000000000028000 [ 1609.447474][T28712] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1609.447483][T28712] R13: 00007fbef8fe6038 R14: 00007fbef8fe5fa0 R15: 00007ffe4cd516e8 [ 1609.447505][T28712] [ 1610.147302][T28714] KVM: debugfs: duplicate directory 28714-3 [ 1610.176446][T27458] Bluetooth: hci4: command 0x0c1a tx timeout [ 1610.899315][T28726] Unable to find swap-space signature [ 1611.482313][T28742] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1612.113159][T21647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.498454][T21647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.773589][T21647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.959245][T21647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.788394][T21647] bridge_slave_1: left allmulticast mode [ 1613.843740][T21647] bridge_slave_1: left promiscuous mode [ 1613.871235][T21647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.985705][T21647] bridge_slave_0: left allmulticast mode [ 1614.022400][T21647] bridge_slave_0: left promiscuous mode [ 1614.062392][T21647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.469951][T28814] netlink: zone id is out of range [ 1614.495718][T28814] netlink: zone id is out of range [ 1614.522139][T28814] netlink: zone id is out of range [ 1614.543965][T28814] netlink: zone id is out of range [ 1614.577091][T28814] netlink: zone id is out of range [ 1614.595719][T28814] netlink: zone id is out of range [ 1614.617753][T28814] netlink: zone id is out of range [ 1614.639030][T28814] netlink: zone id is out of range [ 1614.674548][T28814] netlink: zone id is out of range [ 1614.690165][T28814] netlink: zone id is out of range [ 1615.419903][T21647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.431753][T21647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.443307][T21647] bond0 (unregistering): Released all slaves [ 1615.985882][T28844] Invalid ELF header magic: != ELF [ 1616.111487][T21647] hsr_slave_0: left promiscuous mode [ 1616.132819][T28844] Invalid ELF header magic: != ELF [ 1616.147986][T21647] hsr_slave_1: left promiscuous mode [ 1616.185908][T21647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.225069][T21647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.255922][T28844] Invalid ELF header magic: != ELF [ 1616.267234][T21647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.300520][T21647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.314033][T28844] Invalid ELF header magic: != ELF [ 1616.374039][T28844] Invalid ELF header magic: != ELF [ 1616.417409][T21647] veth1_macvtap: left promiscuous mode [ 1616.431257][T28844] Invalid ELF header magic: != ELF [ 1616.448394][T21647] veth0_macvtap: left promiscuous mode [ 1616.481875][T28844] Invalid ELF header magic: != ELF [ 1616.491209][T21647] veth1_vlan: left promiscuous mode [ 1616.496513][T21647] veth0_vlan: left promiscuous mode [ 1617.412397][T21647] team0 (unregistering): Port device team_slave_1 removed [ 1617.471388][T21647] team0 (unregistering): Port device team_slave_0 removed [ 1618.797146][T28884] program syz.0.4971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1618.881572][T28883] program syz.0.4971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1619.198177][T28898] Unable to find swap-space signature [ 1620.468064][T28920] netlink: 354 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1620.898155][T28939] Console: switching to colour VGA+ 128x48 [ 1621.893645][T28958] net_ratelimit: 7 callbacks suppressed [ 1621.893661][T28958] netlink: set zone limit has 8 unknown bytes [ 1621.931054][T28961] netlink: ct_mark mask cannot be 0 [ 1623.256797][T28988] ptp ptp0: delete virtual clock ptp3 [ 1623.407708][T28990] random: crng reseeded on system resumption [ 1623.506349][T28988] ptp ptp0: delete virtual clock ptp2 [ 1623.744398][T17781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1623.758520][T17781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1623.768746][T17781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1623.777984][T17781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1623.800580][T17781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1623.820567][T28988] ptp ptp0: delete virtual clock ptp1 [ 1623.901918][T28988] ptp ptp0: only physical clock in use now [ 1624.825427][T28995] chnl_net:caif_netlink_parms(): no params data found [ 1625.021686][T29023] ovs_: entered promiscuous mode [ 1625.387447][T28995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.420574][T28995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.456372][T28995] bridge_slave_0: entered allmulticast mode [ 1625.505597][T28995] bridge_slave_0: entered promiscuous mode [ 1625.591319][T28995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.611584][T28995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.636360][T28995] bridge_slave_1: entered allmulticast mode [ 1625.661697][T28995] bridge_slave_1: entered promiscuous mode [ 1625.871504][T17781] Bluetooth: hci1: command tx timeout [ 1626.012922][T28995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.065530][T29045] netlink: 25 bytes leftover after parsing attributes in process `syz.6.5000'. [ 1626.075803][T28995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.324808][T29051] netlink: 'syz.6.5002': attribute type 27 has an invalid length. [ 1626.358159][T29051] netlink: 334 bytes leftover after parsing attributes in process `syz.6.5002'. [ 1626.500612][T28995] team0: Port device team_slave_0 added [ 1626.612413][T28995] team0: Port device team_slave_1 added [ 1627.015607][T28995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.072405][T28995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.194896][T28995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.283870][T28995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.290849][T28995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.419365][T28995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.818884][T28995] hsr_slave_0: entered promiscuous mode [ 1627.824851][T29076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5009'. [ 1627.844800][T28995] hsr_slave_1: entered promiscuous mode [ 1627.873453][T28995] debugfs: 'hsr0' already exists in 'hsr' [ 1627.879203][T28995] Cannot create hsr debugfs directory [ 1627.940472][T17781] Bluetooth: hci1: command tx timeout [ 1629.389418][T28995] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.010167][T17781] Bluetooth: hci1: command tx timeout [ 1630.159062][T28995] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.587872][T28995] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.022927][T28995] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.918690][T28995] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1631.984420][T28995] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1632.078956][T17781] Bluetooth: hci1: command tx timeout [ 1632.218161][T29156] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5018'. [ 1632.274209][T28995] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1632.364723][T28995] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1632.905852][T28995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.042524][T28995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.095617][T29188] __vm_enough_memory: pid: 29188, comm: syz.4.5022, bytes: 4398046511104 not enough memory for the allocation [ 1633.117964][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.125148][T21650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.198347][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.205552][T21650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.156932][T28995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.198570][T28995] veth0_vlan: entered promiscuous mode [ 1635.361082][T28995] veth1_vlan: entered promiscuous mode [ 1635.416084][T29243] Invalid ELF header magic: != ELF [ 1635.487641][T28995] veth0_macvtap: entered promiscuous mode [ 1635.557504][T28995] veth1_macvtap: entered promiscuous mode [ 1635.663643][T28995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.737109][T28995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.791363][T21642] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.834047][T21642] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.921690][T21642] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.966625][T21642] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.240465][T21642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.273609][T21642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.399130][T24361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.464746][T24361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.539114][T29291] FAULT_INJECTION: forcing a failure. [ 1637.539114][T29291] name failslab, interval 1, probability 393216, space 0, times 0 [ 1637.592477][T29294] ICMPv6: process `syz.4.5037' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 1637.667451][T29291] CPU: 0 UID: 0 PID: 29291 Comm: syz.6.5036 Not tainted syzkaller #0 PREEMPT(full) [ 1637.667474][T29291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1637.667483][T29291] Call Trace: [ 1637.667488][T29291] [ 1637.667494][T29291] dump_stack_lvl+0x16c/0x1f0 [ 1637.667517][T29291] should_fail_ex+0x512/0x640 [ 1637.667540][T29291] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1637.667558][T29291] should_failslab+0xc2/0x120 [ 1637.667578][T29291] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1637.667593][T29291] ? d_lookup+0xe7/0x190 [ 1637.667613][T29291] ? alloc_inode+0x64/0x240 [ 1637.667636][T29291] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1637.667659][T29291] ? alloc_inode+0x64/0x240 [ 1637.667677][T29291] alloc_inode+0x64/0x240 [ 1637.667697][T29291] new_inode+0x22/0x1c0 [ 1637.667717][T29291] __debugfs_create_file+0x11c/0x6b0 [ 1637.667735][T29291] debugfs_create_file_full+0x41/0x60 [ 1637.667752][T29291] drm_debugfs_clients_add+0xd9/0x200 [ 1637.667773][T29291] drm_file_alloc+0x5c6/0xb40 [ 1637.667797][T29291] drm_open_helper+0x204/0x550 [ 1637.667820][T29291] drm_open+0x1a0/0x3e0 [ 1637.667839][T29291] ? __pfx_drm_open+0x10/0x10 [ 1637.667859][T29291] drm_stub_open+0x20f/0x380 [ 1637.667880][T29291] ? __pfx_drm_stub_open+0x10/0x10 [ 1637.667900][T29291] chrdev_open+0x234/0x6a0 [ 1637.667918][T29291] ? __pfx_apparmor_file_open+0x10/0x10 [ 1637.667940][T29291] ? __pfx_chrdev_open+0x10/0x10 [ 1637.667958][T29291] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1637.667979][T29291] do_dentry_open+0x982/0x1530 [ 1637.667997][T29291] ? __pfx_chrdev_open+0x10/0x10 [ 1637.668018][T29291] vfs_open+0x82/0x3f0 [ 1637.668041][T29291] path_openat+0x1de4/0x2cb0 [ 1637.668064][T29291] ? __pfx_path_openat+0x10/0x10 [ 1637.668088][T29291] ? __lock_acquire+0xb8a/0x1c90 [ 1637.668111][T29291] do_filp_open+0x20b/0x470 [ 1637.668128][T29291] ? __pfx_do_filp_open+0x10/0x10 [ 1637.668158][T29291] ? alloc_fd+0x471/0x7d0 [ 1637.668178][T29291] do_sys_openat2+0x11b/0x1d0 [ 1637.668199][T29291] ? __pfx_do_sys_openat2+0x10/0x10 [ 1637.668227][T29291] __x64_sys_openat+0x174/0x210 [ 1637.668249][T29291] ? __pfx___x64_sys_openat+0x10/0x10 [ 1637.668278][T29291] do_syscall_64+0xcd/0xfa0 [ 1637.668298][T29291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.668312][T29291] RIP: 0033:0x7f7450b8f749 [ 1637.668325][T29291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1637.668338][T29291] RSP: 002b:00007f7451a2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1637.668353][T29291] RAX: ffffffffffffffda RBX: 00007f7450de5fa0 RCX: 00007f7450b8f749 [ 1637.668363][T29291] RDX: 0000000000020100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1637.668372][T29291] RBP: 00007f7450c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1637.668381][T29291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1637.668390][T29291] R13: 00007f7450de6038 R14: 00007f7450de5fa0 R15: 00007ffedef80be8 [ 1637.668409][T29291] [ 1637.960365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.289230][T29291] debugfs: out of free dentries, can not create file 'proc_info' [ 1638.797644][T29315] ecryptfs_miscdev_write: Invalid packet size [0] [ 1639.823636][T29332] netlink: Setting conntrack mark requires 'commit' flag. [ 1641.380895][T29375] Invalid ELF header magic: != ELF [ 1641.449059][T29383] delete_channel: no stack [ 1641.563269][T29394] Invalid ELF header magic: != ELF [ 1641.730615][T29374] delete_channel: no stack [ 1642.704133][T29430] bridge0: port 3(gretap0) entered blocking state [ 1642.731010][T29430] bridge0: port 3(gretap0) entered disabled state [ 1642.793918][T29430] gretap0: entered allmulticast mode [ 1642.842897][T29430] gretap0: entered promiscuous mode [ 1642.873605][T29430] bridge0: port 3(gretap0) entered blocking state [ 1642.880213][T29430] bridge0: port 3(gretap0) entered forwarding state [ 1644.182165][T29456] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1646.286645][T29488] kafs: addr_prefs: Invalid Command [ 1646.320022][T29490] kafs: addr_prefs: Invalid Command [ 1647.442908][T29515] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 1647.496572][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1648.307573][T29540] zswap: compressor - not available [ 1648.361466][T29541] zswap: compressor - not available [ 1649.016312][T29563] delete_channel: no stack [ 1650.089213][T29583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5099'. [ 1650.179498][T29583] gretap0: left allmulticast mode [ 1650.271077][T29583] gretap0: left promiscuous mode [ 1650.297296][T29583] bridge0: port 3(gretap0) entered disabled state [ 1650.362368][T29585] zswap: compressor not available [ 1650.436820][T29583] bridge_slave_1: left allmulticast mode [ 1650.500222][T29583] bridge_slave_1: left promiscuous mode [ 1650.538958][T29583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.646166][T29583] bridge_slave_0: left allmulticast mode [ 1650.666050][T29583] bridge_slave_0: left promiscuous mode [ 1650.725643][T29583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.951372][T29616] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5105'. [ 1652.012489][ T30] audit: type=1800 audit(4294970526.640:48): pid=29622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5107" name="dbroot" dev="configfs" ino=142918 res=0 errno=0 [ 1652.425350][T29629] random: crng reseeded on system resumption [ 1653.127933][T17781] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1653.510073][T29637] netlink: set zone limit has 8 unknown bytes [ 1655.165067][T27458] Bluetooth: hci3: command 0x0c1a tx timeout [ 1655.506873][T29673] zswap: compressor not available [ 1658.048406][T29727] FAULT_INJECTION: forcing a failure. [ 1658.048406][T29727] name failslab, interval 1, probability 393216, space 0, times 0 [ 1658.134134][T29727] CPU: 0 UID: 0 PID: 29727 Comm: syz.0.5132 Not tainted syzkaller #0 PREEMPT(full) [ 1658.134157][T29727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1658.134167][T29727] Call Trace: [ 1658.134172][T29727] [ 1658.134178][T29727] dump_stack_lvl+0x16c/0x1f0 [ 1658.134202][T29727] should_fail_ex+0x512/0x640 [ 1658.134224][T29727] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1658.134293][T29727] should_failslab+0xc2/0x120 [ 1658.134315][T29727] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1658.134329][T29727] ? __pfx___might_resched+0x10/0x10 [ 1658.134346][T29727] ? sock_alloc_inode+0x25/0x1c0 [ 1658.134368][T29727] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1658.134383][T29727] ? sock_alloc_inode+0x25/0x1c0 [ 1658.134399][T29727] sock_alloc_inode+0x25/0x1c0 [ 1658.134416][T29727] alloc_inode+0x64/0x240 [ 1658.134440][T29727] sock_alloc+0x40/0x280 [ 1658.134457][T29727] __sock_create+0xc1/0x8d0 [ 1658.134476][T29727] ? fd_install+0x244/0x750 [ 1658.134491][T29727] __sys_socket+0x14d/0x260 [ 1658.134511][T29727] ? __pfx___sys_socket+0x10/0x10 [ 1658.134529][T29727] ? xfd_validate_state+0x61/0x180 [ 1658.134555][T29727] __x64_sys_socket+0x72/0xb0 [ 1658.134573][T29727] ? lockdep_hardirqs_on+0x7c/0x110 [ 1658.134591][T29727] do_syscall_64+0xcd/0xfa0 [ 1658.134610][T29727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.134624][T29727] RIP: 0033:0x7f068738f749 [ 1658.134637][T29727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.134651][T29727] RSP: 002b:00007f06881f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1658.134665][T29727] RAX: ffffffffffffffda RBX: 00007f06875e6180 RCX: 00007f068738f749 [ 1658.134675][T29727] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1658.134684][T29727] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1658.134692][T29727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1658.134701][T29727] R13: 00007f06875e6218 R14: 00007f06875e6180 R15: 00007ffd4e5260a8 [ 1658.134727][T29727] [ 1658.134735][T29727] socket: no more sockets [ 1659.271970][T29750] Console: switching to colour frame buffer device 128x48 [ 1660.146089][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5144'. [ 1660.804272][T29789] ubi31: attaching mtd0 [ 1660.838358][T29789] ubi31: scanning is finished [ 1660.858454][T29789] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1661.048397][T29789] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1663.103294][T29848] overlayfs: missing 'lowerdir' [ 1663.543151][T29866] FAULT_INJECTION: forcing a failure. [ 1663.543151][T29866] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1663.614125][T29866] CPU: 0 UID: 0 PID: 29866 Comm: syz.0.5164 Not tainted syzkaller #0 PREEMPT(full) [ 1663.614149][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1663.614159][T29866] Call Trace: [ 1663.614165][T29866] [ 1663.614171][T29866] dump_stack_lvl+0x16c/0x1f0 [ 1663.614194][T29866] should_fail_ex+0x512/0x640 [ 1663.614221][T29866] get_futex_key+0x1d0/0x1560 [ 1663.614242][T29866] ? look_up_lock_class+0x59/0x150 [ 1663.614258][T29866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.614275][T29866] ? __pfx_get_futex_key+0x10/0x10 [ 1663.614292][T29866] ? register_lock_class+0x41/0x4c0 [ 1663.614319][T29866] futex_wake+0xea/0x530 [ 1663.614343][T29866] ? __pfx_futex_wake+0x10/0x10 [ 1663.614368][T29866] ? __pfx___might_resched+0x10/0x10 [ 1663.614387][T29866] do_futex+0x1e3/0x350 [ 1663.614406][T29866] ? __pfx_do_futex+0x10/0x10 [ 1663.614426][T29866] ? up_write+0x1b2/0x520 [ 1663.614445][T29866] ? find_held_lock+0x2b/0x80 [ 1663.614462][T29866] __x64_sys_futex+0x1e0/0x4c0 [ 1663.614493][T29866] ? __pfx___x64_sys_futex+0x10/0x10 [ 1663.614512][T29866] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 1663.614539][T29866] do_syscall_64+0xcd/0xfa0 [ 1663.614559][T29866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.614575][T29866] RIP: 0033:0x7f068738f749 [ 1663.614588][T29866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1663.614602][T29866] RSP: 002b:00007f06882370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1663.614617][T29866] RAX: ffffffffffffffda RBX: 00007f06875e5fa8 RCX: 00007f068738f749 [ 1663.614626][T29866] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06875e5fac [ 1663.614635][T29866] RBP: 00007f06875e5fa0 R08: 00007f0688238000 R09: 0000000000000000 [ 1663.614644][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1663.614652][T29866] R13: 00007f06875e6038 R14: 00007ffd4e525fc0 R15: 00007ffd4e5260a8 [ 1663.614672][T29866] [ 1663.809324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1664.599377][T29879] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1665.215207][T29881] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 1665.418740][T29889] kexec: Could not allocate control_code_buffer [ 1666.149588][T29908] kernel read not supported for file /dynamic_events (pid: 29908 comm: syz.6.5176) [ 1666.188079][ T30] audit: type=1800 audit(4294968336.702:49): pid=29908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5176" name="dynamic_events" dev="tracefs" ino=31 res=0 errno=0 [ 1666.385080][T29913] hub 8-0:1.0: USB hub found [ 1666.426652][T29913] hub 8-0:1.0: 1 port detected [ 1666.442352][T29917] random: crng reseeded on system resumption [ 1667.512738][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1667.519273][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.458122][T29962] random: crng reseeded on system resumption [ 1669.150735][T29973] [U]  [ 1669.153556][T29973] [U] [ 1669.156243][T29973] [U] [ 1669.158924][T29973] [U] [ 1669.248981][T29973] [U] [ 1669.251721][T29973] [U] [ 1669.254398][T29973] [U] [ 1669.257073][T29973] [U] [ 1669.298663][T29973] [U] [ 1669.301388][T29973] [U] [ 1669.304071][T29973] [U] [ 1669.306743][T29973] [U] [ 1669.358541][T29973] [U] [ 1669.361271][T29973] [U] [ 1669.363953][T29973] [U] [ 1669.366626][T29973] [U] [ 1669.405157][T29973] [U] [ 1669.407881][T29973] [U] [ 1669.410557][T29973] [U] [ 1669.413232][T29973] [U] [ 1669.490647][T29973] [U] [ 1669.493376][T29973] [U] [ 1669.496060][T29973] [U] [ 1669.498737][T29973] [U] [ 1669.551516][T29973] [U] [ 1669.554240][T29973] [U] [ 1669.556960][T29973] [U] [ 1669.559633][T29973] [U] [ 1669.603695][T29973] [U] [ 1669.606414][T29973] [U] [ 1669.609094][T29973] [U] [ 1669.611768][T29973] [U] [ 1669.662476][T29973] [U] [ 1669.665203][T29973] [U] [ 1669.667882][T29973] [U] [ 1669.670552][T29973] [U] [ 1669.721208][T29973] [U] [ 1669.724012][T29973] [U] [ 1669.726698][T29973] [U] [ 1669.729375][T29973] [U] [ 1669.769282][T29973] [U] [ 1669.772011][T29973] [U] [ 1669.774693][T29973] [U] [ 1669.777371][T29973] [U] [ 1669.821404][T29973] [U] [ 1669.824134][T29973] [U] [ 1669.826809][T29973] [U] [ 1669.829480][T29973] [U] [ 1669.912811][T29973] [U] [ 1670.036208][T29988] bond0: invalid ARP target specified [ 1670.756946][T30006] random: crng reseeded on system resumption [ 1672.530502][T30012] kexec: Could not allocate control_code_buffer [ 1673.316028][T27458] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1673.316054][T27458] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1673.330890][T27458] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1673.330936][T27458] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 1673.338674][T27458] Bluetooth: hci0: adv larger than maximum supported [ 1673.347406][T27458] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1674.157035][T30052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1674.164236][T30052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1674.184177][T30052] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1674.225035][T30052] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1674.256974][T30052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1674.295076][T30052] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1674.395962][T30052] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1674.511072][T30058] KVM: debugfs: duplicate directory 30058-3 [ 1674.604572][T30060] ubi31: attaching mtd0 [ 1674.653063][T30060] ubi31: scanning is finished [ 1674.696903][T30060] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1675.968139][T30060] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1676.196132][T27458] Bluetooth: hci3: command 0x0c1a tx timeout [ 1676.202196][T27458] Bluetooth: hci0: command 0x0c1a tx timeout [ 1676.222824][T30074] FAULT_INJECTION: forcing a failure. [ 1676.222824][T30074] name failslab, interval 1, probability 393216, space 0, times 0 [ 1676.267100][T17781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1676.273184][T17781] Bluetooth: hci5: command 0x0c1a tx timeout [ 1676.283984][T30074] CPU: 0 UID: 0 PID: 30074 Comm: syz.0.5212 Not tainted syzkaller #0 PREEMPT(full) [ 1676.284006][T30074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1676.284015][T30074] Call Trace: [ 1676.284021][T30074] [ 1676.284026][T30074] dump_stack_lvl+0x16c/0x1f0 [ 1676.284049][T30074] should_fail_ex+0x512/0x640 [ 1676.284071][T30074] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1676.284089][T30074] should_failslab+0xc2/0x120 [ 1676.284109][T30074] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1676.284124][T30074] ? __alloc_skb+0x2b2/0x380 [ 1676.284151][T30074] ? __alloc_skb+0x2b2/0x380 [ 1676.284171][T30074] __alloc_skb+0x2b2/0x380 [ 1676.284192][T30074] ? __pfx___alloc_skb+0x10/0x10 [ 1676.284216][T30074] ? __pfx___might_resched+0x10/0x10 [ 1676.284236][T30074] netlink_alloc_large_skb+0x69/0x140 [ 1676.284254][T30074] netlink_sendmsg+0x698/0xdd0 [ 1676.284274][T30074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1676.284292][T30074] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1676.284317][T30074] __sys_sendto+0x4a3/0x520 [ 1676.284340][T30074] ? __pfx___sys_sendto+0x10/0x10 [ 1676.284378][T30074] ? ksys_write+0x1ac/0x250 [ 1676.284394][T30074] ? __pfx_ksys_write+0x10/0x10 [ 1676.284412][T30074] __x64_sys_sendto+0xe0/0x1c0 [ 1676.284433][T30074] ? do_syscall_64+0x91/0xfa0 [ 1676.284450][T30074] ? lockdep_hardirqs_on+0x7c/0x110 [ 1676.284467][T30074] do_syscall_64+0xcd/0xfa0 [ 1676.284485][T30074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.284500][T30074] RIP: 0033:0x7f06873915dc [ 1676.284512][T30074] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1676.284527][T30074] RSP: 002b:00007f0688235ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1676.284541][T30074] RAX: ffffffffffffffda RBX: 00007f0688235fc0 RCX: 00007f06873915dc [ 1676.284550][T30074] RDX: 0000000000000020 RSI: 00007f0688236010 RDI: 0000000000000003 [ 1676.284560][T30074] RBP: 0000000000000000 R08: 00007f0688235f14 R09: 000000000000000c [ 1676.284568][T30074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1676.284577][T30074] R13: 00007f0688235f68 R14: 00007f0688236010 R15: 0000000000000000 [ 1676.284596][T30074] [ 1676.500594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1678.256320][T17781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1678.336773][T17781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1679.781085][T30155] random: crng reseeded on system resumption [ 1680.408323][T17781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1680.630710][T30170] FAULT_INJECTION: forcing a failure. [ 1680.630710][T30170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.720793][T30172] FAULT_INJECTION: forcing a failure. [ 1680.720793][T30172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1680.734226][T30172] CPU: 0 UID: 0 PID: 30172 Comm: syz.7.5236 Not tainted syzkaller #0 PREEMPT(full) [ 1680.734247][T30172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1680.734257][T30172] Call Trace: [ 1680.734262][T30172] [ 1680.734267][T30172] dump_stack_lvl+0x16c/0x1f0 [ 1680.734296][T30172] should_fail_ex+0x512/0x640 [ 1680.734321][T30172] should_fail_futex+0x4c/0x60 [ 1680.734340][T30172] futex_lock_pi_atomic+0x148/0xd50 [ 1680.734366][T30172] futex_lock_pi+0x23f/0x7c0 [ 1680.734391][T30172] ? __pfx_futex_lock_pi+0x10/0x10 [ 1680.734411][T30172] ? preempt_schedule_common+0x44/0xc0 [ 1680.734429][T30172] ? preempt_schedule_thunk+0x16/0x30 [ 1680.734459][T30172] ? __pfx_try_to_wake_up+0x10/0x10 [ 1680.734478][T30172] ? futex_private_hash_put+0xd5/0x190 [ 1680.734499][T30172] ? __pfx_futex_wake_mark+0x10/0x10 [ 1680.734527][T30172] ? ksys_write+0x190/0x250 [ 1680.734547][T30172] do_futex+0x11a/0x350 [ 1680.734569][T30172] ? __pfx_do_futex+0x10/0x10 [ 1680.734593][T30172] __x64_sys_futex+0x1e0/0x4c0 [ 1680.734613][T30172] ? fput+0x9b/0xd0 [ 1680.734631][T30172] ? __pfx___x64_sys_futex+0x10/0x10 [ 1680.734651][T30172] ? xfd_validate_state+0x61/0x180 [ 1680.734670][T30172] ? __pfx_ksys_write+0x10/0x10 [ 1680.734692][T30172] do_syscall_64+0xcd/0xfa0 [ 1680.734711][T30172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.734725][T30172] RIP: 0033:0x7f65bc58f749 [ 1680.734738][T30172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.734752][T30172] RSP: 002b:00007f65bd4d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1680.734767][T30172] RAX: ffffffffffffffda RBX: 00007f65bc7e5fa0 RCX: 00007f65bc58f749 [ 1680.734778][T30172] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1680.734787][T30172] RBP: 00007f65bc613f91 R08: 0000000000000000 R09: 000000008000fff5 [ 1680.734796][T30172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1680.734806][T30172] R13: 00007f65bc7e6038 R14: 00007f65bc7e5fa0 R15: 00007fff5ad12168 [ 1680.734826][T30172] [ 1680.938301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.949340][T30170] CPU: 0 UID: 0 PID: 30170 Comm: syz.4.5235 Not tainted syzkaller #0 PREEMPT(full) [ 1680.949371][T30170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1680.949380][T30170] Call Trace: [ 1680.949385][T30170] [ 1680.949392][T30170] dump_stack_lvl+0x16c/0x1f0 [ 1680.949414][T30170] should_fail_ex+0x512/0x640 [ 1680.949439][T30170] _copy_from_iter+0x29f/0x1720 [ 1680.949464][T30170] ? __alloc_skb+0x200/0x380 [ 1680.949488][T30170] ? __pfx__copy_from_iter+0x10/0x10 [ 1680.949512][T30170] ? __pfx___might_resched+0x10/0x10 [ 1680.949534][T30170] netlink_sendmsg+0x820/0xdd0 [ 1680.949555][T30170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1680.949573][T30170] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1680.949599][T30170] __sys_sendto+0x4a3/0x520 [ 1680.949622][T30170] ? __pfx___sys_sendto+0x10/0x10 [ 1680.949667][T30170] ? ksys_write+0x1ac/0x250 [ 1680.949683][T30170] ? __pfx_ksys_write+0x10/0x10 [ 1680.949702][T30170] __x64_sys_sendto+0xe0/0x1c0 [ 1680.949722][T30170] ? do_syscall_64+0x91/0xfa0 [ 1680.949739][T30170] ? lockdep_hardirqs_on+0x7c/0x110 [ 1680.949757][T30170] do_syscall_64+0xcd/0xfa0 [ 1680.949776][T30170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.949791][T30170] RIP: 0033:0x7fbef8d915dc [ 1680.949803][T30170] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1680.949818][T30170] RSP: 002b:00007fbef9b8fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1680.949832][T30170] RAX: ffffffffffffffda RBX: 00007fbef9b8ffc0 RCX: 00007fbef8d915dc [ 1680.949842][T30170] RDX: 0000000000000020 RSI: 00007fbef9b90010 RDI: 0000000000000003 [ 1680.949852][T30170] RBP: 0000000000000000 R08: 00007fbef9b8ff14 R09: 000000000000000c [ 1680.949860][T30170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1680.949869][T30170] R13: 00007fbef9b8ff68 R14: 00007fbef9b90010 R15: 0000000000000000 [ 1680.949889][T30170] [ 1681.143350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.778516][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1681.810209][T30189] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1682.006147][T30192] netlink: 186 bytes leftover after parsing attributes in process `syz.4.5243'. [ 1682.582695][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5245'. [ 1683.687490][T30222] FAULT_INJECTION: forcing a failure. [ 1683.687490][T30222] name failslab, interval 1, probability 393216, space 0, times 0 [ 1683.767035][T30222] CPU: 0 UID: 0 PID: 30222 Comm: syz.4.5248 Not tainted syzkaller #0 PREEMPT(full) [ 1683.767064][T30222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1683.767073][T30222] Call Trace: [ 1683.767079][T30222] [ 1683.767085][T30222] dump_stack_lvl+0x16c/0x1f0 [ 1683.767108][T30222] should_fail_ex+0x512/0x640 [ 1683.767134][T30222] should_failslab+0xc2/0x120 [ 1683.767154][T30222] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1683.767170][T30222] ? skb_clone+0x190/0x3f0 [ 1683.767189][T30222] ? skb_clone+0x190/0x3f0 [ 1683.767201][T30222] skb_clone+0x190/0x3f0 [ 1683.767216][T30222] netlink_deliver_tap+0xabd/0xd30 [ 1683.767237][T30222] netlink_unicast+0x64c/0x870 [ 1683.767259][T30222] ? __pfx_netlink_unicast+0x10/0x10 [ 1683.767281][T30222] ? __pfx___might_resched+0x10/0x10 [ 1683.767305][T30222] netlink_sendmsg+0x8c8/0xdd0 [ 1683.767326][T30222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1683.767344][T30222] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1683.767369][T30222] __sys_sendto+0x4a3/0x520 [ 1683.767393][T30222] ? __pfx___sys_sendto+0x10/0x10 [ 1683.767431][T30222] ? ksys_write+0x1ac/0x250 [ 1683.767446][T30222] ? __pfx_ksys_write+0x10/0x10 [ 1683.767465][T30222] __x64_sys_sendto+0xe0/0x1c0 [ 1683.767486][T30222] ? do_syscall_64+0x91/0xfa0 [ 1683.767504][T30222] ? lockdep_hardirqs_on+0x7c/0x110 [ 1683.767521][T30222] do_syscall_64+0xcd/0xfa0 [ 1683.767540][T30222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.767555][T30222] RIP: 0033:0x7fbef8d915dc [ 1683.767567][T30222] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1683.767582][T30222] RSP: 002b:00007fbef9b8fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1683.767596][T30222] RAX: ffffffffffffffda RBX: 00007fbef9b8ffc0 RCX: 00007fbef8d915dc [ 1683.767606][T30222] RDX: 0000000000000020 RSI: 00007fbef9b90010 RDI: 0000000000000003 [ 1683.767615][T30222] RBP: 0000000000000000 R08: 00007fbef9b8ff14 R09: 000000000000000c [ 1683.767626][T30222] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1683.767636][T30222] R13: 00007fbef9b8ff68 R14: 00007fbef9b90010 R15: 0000000000000000 [ 1683.767656][T30222] [ 1684.780363][T30247] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5255'. [ 1684.799158][T30247] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5255'. [ 1684.848993][T30246] ima: policy update failed [ 1684.864111][ T30] audit: type=1802 audit(4294968355.460:50): pid=30246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5255" res=0 errno=0 [ 1685.468287][T30260] serio: Serial port ttyS2 [ 1685.652203][T30271] FAULT_INJECTION: forcing a failure. [ 1685.652203][T30271] name failslab, interval 1, probability 393216, space 0, times 0 [ 1685.729416][T30271] CPU: 0 UID: 0 PID: 30271 Comm: syz.6.5259 Not tainted syzkaller #0 PREEMPT(full) [ 1685.729438][T30271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1685.729447][T30271] Call Trace: [ 1685.729452][T30271] [ 1685.729458][T30271] dump_stack_lvl+0x16c/0x1f0 [ 1685.729481][T30271] should_fail_ex+0x512/0x640 [ 1685.729503][T30271] ? __kmalloc_noprof+0xca/0x880 [ 1685.729528][T30271] should_failslab+0xc2/0x120 [ 1685.729547][T30271] __kmalloc_noprof+0xdd/0x880 [ 1685.729570][T30271] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1685.729591][T30271] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1685.729615][T30271] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1685.729634][T30271] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1685.729659][T30271] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1685.729679][T30271] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1685.729697][T30271] ? genl_get_cmd+0x194/0x580 [ 1685.729720][T30271] ? __radix_tree_lookup+0x21f/0x2c0 [ 1685.729739][T30271] genl_rcv_msg+0x55c/0x800 [ 1685.729760][T30271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1685.729779][T30271] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1685.729805][T30271] netlink_rcv_skb+0x158/0x420 [ 1685.729820][T30271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1685.729840][T30271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1685.729864][T30271] ? netlink_deliver_tap+0x1ae/0xd30 [ 1685.729882][T30271] genl_rcv+0x28/0x40 [ 1685.729897][T30271] netlink_unicast+0x5aa/0x870 [ 1685.729916][T30271] ? __pfx_netlink_unicast+0x10/0x10 [ 1685.729932][T30271] ? __pfx___might_resched+0x10/0x10 [ 1685.729954][T30271] netlink_sendmsg+0x8c8/0xdd0 [ 1685.729973][T30271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1685.729992][T30271] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1685.730025][T30271] __sys_sendto+0x4a3/0x520 [ 1685.730048][T30271] ? __pfx___sys_sendto+0x10/0x10 [ 1685.730090][T30271] ? ksys_write+0x1ac/0x250 [ 1685.730106][T30271] ? __pfx_ksys_write+0x10/0x10 [ 1685.730125][T30271] __x64_sys_sendto+0xe0/0x1c0 [ 1685.730148][T30271] ? do_syscall_64+0x91/0xfa0 [ 1685.730167][T30271] ? lockdep_hardirqs_on+0x7c/0x110 [ 1685.730185][T30271] do_syscall_64+0xcd/0xfa0 [ 1685.730203][T30271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.730218][T30271] RIP: 0033:0x7f7450b915dc [ 1685.730231][T30271] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1685.730244][T30271] RSP: 002b:00007f7451a29ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1685.730258][T30271] RAX: ffffffffffffffda RBX: 00007f7451a29fc0 RCX: 00007f7450b915dc [ 1685.730268][T30271] RDX: 0000000000000020 RSI: 00007f7451a2a010 RDI: 0000000000000003 [ 1685.730277][T30271] RBP: 0000000000000000 R08: 00007f7451a29f14 R09: 000000000000000c [ 1685.730286][T30271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1685.730294][T30271] R13: 00007f7451a29f68 R14: 00007f7451a2a010 R15: 0000000000000000 [ 1685.730314][T30271] [ 1686.288911][ T30] audit: type=1800 audit(4294968356.696:51): pid=30276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5261" name="lu_gp_id" dev="configfs" ino=147342 res=0 errno=0 [ 1686.309968][ T30] audit: type=1800 audit(4294968356.706:52): pid=30278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5261" name="lu_gp_id" dev="configfs" ino=147344 res=0 errno=0 [ 1687.162103][T30320] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5269'. [ 1687.208868][T30320] bridge_slave_1: left allmulticast mode [ 1687.229217][T30322] FAULT_INJECTION: forcing a failure. [ 1687.229217][T30322] name failslab, interval 1, probability 393216, space 0, times 0 [ 1687.271067][T30320] bridge_slave_1: left promiscuous mode [ 1687.295300][T30322] CPU: 0 UID: 0 PID: 30322 Comm: syz.7.5270 Not tainted syzkaller #0 PREEMPT(full) [ 1687.295323][T30322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.295332][T30322] Call Trace: [ 1687.295337][T30322] [ 1687.295343][T30322] dump_stack_lvl+0x16c/0x1f0 [ 1687.295366][T30322] should_fail_ex+0x512/0x640 [ 1687.295387][T30322] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1687.295406][T30322] should_failslab+0xc2/0x120 [ 1687.295426][T30322] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1687.295441][T30322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1687.295460][T30322] ? __alloc_skb+0x2b2/0x380 [ 1687.295486][T30322] ? __alloc_skb+0x2b2/0x380 [ 1687.295506][T30322] __alloc_skb+0x2b2/0x380 [ 1687.295528][T30322] ? __pfx___alloc_skb+0x10/0x10 [ 1687.295550][T30322] ? genl_rcv_msg+0x4bb/0x800 [ 1687.295574][T30322] netlink_ack+0x15d/0xb80 [ 1687.295596][T30322] netlink_rcv_skb+0x332/0x420 [ 1687.295614][T30322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1687.295639][T30322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1687.295663][T30322] ? netlink_deliver_tap+0x1ae/0xd30 [ 1687.295681][T30322] genl_rcv+0x28/0x40 [ 1687.295697][T30322] netlink_unicast+0x5aa/0x870 [ 1687.295716][T30322] ? __pfx_netlink_unicast+0x10/0x10 [ 1687.295731][T30322] ? __pfx___might_resched+0x10/0x10 [ 1687.295754][T30322] netlink_sendmsg+0x8c8/0xdd0 [ 1687.295773][T30322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1687.295791][T30322] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1687.295816][T30322] __sys_sendto+0x4a3/0x520 [ 1687.295839][T30322] ? __pfx___sys_sendto+0x10/0x10 [ 1687.295884][T30322] ? ksys_write+0x1ac/0x250 [ 1687.295900][T30322] ? __pfx_ksys_write+0x10/0x10 [ 1687.295918][T30322] __x64_sys_sendto+0xe0/0x1c0 [ 1687.295939][T30322] ? do_syscall_64+0x91/0xfa0 [ 1687.295956][T30322] ? lockdep_hardirqs_on+0x7c/0x110 [ 1687.295973][T30322] do_syscall_64+0xcd/0xfa0 [ 1687.295992][T30322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.296007][T30322] RIP: 0033:0x7f65bc5915dc [ 1687.296019][T30322] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1687.296034][T30322] RSP: 002b:00007f65bd4d1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1687.296048][T30322] RAX: ffffffffffffffda RBX: 00007f65bd4d1fc0 RCX: 00007f65bc5915dc [ 1687.296058][T30322] RDX: 0000000000000020 RSI: 00007f65bd4d2010 RDI: 0000000000000003 [ 1687.296067][T30322] RBP: 0000000000000000 R08: 00007f65bd4d1f14 R09: 000000000000000c [ 1687.296075][T30322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1687.296084][T30322] R13: 00007f65bd4d1f68 R14: 00007f65bd4d2010 R15: 0000000000000000 [ 1687.296104][T30322] [ 1687.299633][T30320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.956831][T30333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'. [ 1688.432806][T30320] bridge_slave_0: left allmulticast mode [ 1688.462230][T30320] bridge_slave_0: left promiscuous mode [ 1688.499446][T30320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.631954][T30333] ovs_: entered promiscuous mode [ 1688.823431][T17781] Bluetooth: hci5: unexpected event 0x02 length: 726 > 260 [ 1689.426110][T30360] random: crng reseeded on system resumption [ 1690.887029][T30392] netlink: 186 bytes leftover after parsing attributes in process `syz.0.5286'. [ 1692.083322][T30421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1692.128755][T30423] netlink: ct_mark mask cannot be 0 [ 1692.145135][T30426] netlink: 'syz.0.5302': attribute type 1 has an invalid length. [ 1692.196171][T30421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1692.216268][T30426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5302'. [ 1692.253483][T30421] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1692.316577][T30426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1692.352816][T30421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1692.798707][T30437] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1692.965350][T30437] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1693.313277][T30454] nvme_fabrics: missing parameter 'transport=%s' [ 1693.354082][T30454] nvme_fabrics: missing parameter 'nqn=%s' [ 1694.103902][T17781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1694.262184][T17781] Bluetooth: hci5: command 0x0c1a tx timeout [ 1694.268337][T27458] Bluetooth: hci3: command 0x0c1a tx timeout [ 1694.420393][T17781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1695.148528][T30487] FAULT_INJECTION: forcing a failure. [ 1695.148528][T30487] name failslab, interval 1, probability 393216, space 0, times 0 [ 1695.192262][T30487] CPU: 0 UID: 0 PID: 30487 Comm: syz.4.5308 Not tainted syzkaller #0 PREEMPT(full) [ 1695.192285][T30487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1695.192295][T30487] Call Trace: [ 1695.192301][T30487] [ 1695.192308][T30487] dump_stack_lvl+0x16c/0x1f0 [ 1695.192331][T30487] should_fail_ex+0x512/0x640 [ 1695.192353][T30487] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1695.192371][T30487] should_failslab+0xc2/0x120 [ 1695.192392][T30487] __kmalloc_cache_noprof+0x72/0x780 [ 1695.192405][T30487] ? _raw_read_unlock_irqrestore+0x3b/0x80 [ 1695.192430][T30487] ? snd_pcm_attach_substream+0x441/0xd60 [ 1695.192450][T30487] ? snd_pcm_attach_substream+0x441/0xd60 [ 1695.192465][T30487] snd_pcm_attach_substream+0x441/0xd60 [ 1695.192486][T30487] snd_pcm_open_substream+0x8d/0x17f0 [ 1695.192502][T30487] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1695.192518][T30487] ? rcu_is_watching+0x12/0xc0 [ 1695.192538][T30487] snd_pcm_open+0x29e/0x730 [ 1695.192554][T30487] ? __pfx_snd_pcm_open+0x10/0x10 [ 1695.192571][T30487] ? __pfx_default_wake_function+0x10/0x10 [ 1695.192592][T30487] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1695.192606][T30487] snd_pcm_playback_open+0x86/0xe0 [ 1695.192624][T30487] snd_open+0x22d/0x4c0 [ 1695.192645][T30487] ? __pfx_snd_open+0x10/0x10 [ 1695.192661][T30487] chrdev_open+0x234/0x6a0 [ 1695.192679][T30487] ? __pfx_apparmor_file_open+0x10/0x10 [ 1695.192701][T30487] ? __pfx_chrdev_open+0x10/0x10 [ 1695.192719][T30487] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1695.192739][T30487] do_dentry_open+0x982/0x1530 [ 1695.192759][T30487] ? __pfx_chrdev_open+0x10/0x10 [ 1695.192780][T30487] vfs_open+0x82/0x3f0 [ 1695.192803][T30487] path_openat+0x1de4/0x2cb0 [ 1695.192826][T30487] ? __pfx_path_openat+0x10/0x10 [ 1695.192843][T30487] ? __lock_acquire+0xb8a/0x1c90 [ 1695.192865][T30487] do_filp_open+0x20b/0x470 [ 1695.192881][T30487] ? __pfx_do_filp_open+0x10/0x10 [ 1695.192912][T30487] ? alloc_fd+0x471/0x7d0 [ 1695.192932][T30487] do_sys_openat2+0x11b/0x1d0 [ 1695.192952][T30487] ? __pfx_do_sys_openat2+0x10/0x10 [ 1695.192971][T30487] ? trace_kmalloc+0x2b/0xd0 [ 1695.192989][T30487] ? lsm_blob_alloc+0x68/0x90 [ 1695.193012][T30487] __x64_sys_openat+0x174/0x210 [ 1695.193033][T30487] ? __pfx___x64_sys_openat+0x10/0x10 [ 1695.193062][T30487] do_syscall_64+0xcd/0xfa0 [ 1695.193081][T30487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.193096][T30487] RIP: 0033:0x7fbef8d8f749 [ 1695.193109][T30487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.193124][T30487] RSP: 002b:00007fbef9b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1695.193139][T30487] RAX: ffffffffffffffda RBX: 00007fbef8fe5fa0 RCX: 00007fbef8d8f749 [ 1695.193150][T30487] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1695.193160][T30487] RBP: 00007fbef8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1695.193169][T30487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.193178][T30487] R13: 00007fbef8fe6038 R14: 00007fbef8fe5fa0 R15: 00007ffe4cd516e8 [ 1695.193199][T30487] [ 1695.497910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1698.699364][T30501] hub 3-0:1.0: USB hub found [ 1698.723297][T30501] hub 3-0:1.0: 1 port detected [ 1698.729802][T30501] usb usb3: authorized to connect [ 1698.747515][T30501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5311'. [ 1698.949266][T30501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.970591][T30501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.015541][T30501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1699.049127][T30501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.873965][T30550] netlink: 330 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1702.243758][T30574] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 1702.313844][T30570] hub 8-0:1.0: USB hub found [ 1702.431889][T30570] hub 8-0:1.0: 1 port detected [ 1702.965935][T30588] ptrace attach of "./syz-executor exec"[28995] was attempted by "4.wOp4ʠOU|Bwvy_LŎ\x09j|m؇X|(Op2ܺo\x07kOaL<\x5cHf*r`l}Y^Ϋ\x0bz͊r6,'7Z(_\x0ax{Sr XTx<#Ib\x0c8DGdPk\x07_<+WBr+7!(@}x#I'2i!Vu>[.K6v?imaHQZp8~X#LÍ%(1`x\x0csJ>Xc+dt@fIyа.]2&{S\x07MP~XWGr&\x07gF\x0bex\x22.vTxfRՉb!c=[VUX :WkI&'m|\x0d?U6cϺtJ\x5cL1b_$@a\x09|:=_7x\x1b)\x09_)k|g\x1bIbXA_\x22y<®`bP@zT_ 8-䌧mAZőֻEXdmbTXOT!~i:ƫ [ 1703.024384][T30590] random: crng reseeded on system resumption [ 1703.601657][T30590] vhci_hcd: invalid port number 23 [ 1703.618926][T30590] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 1704.688640][T30626] netlink: 'syz.0.5344': attribute type 1 has an invalid length. [ 1705.443517][T30636] FAULT_INJECTION: forcing a failure. [ 1705.443517][T30636] name failslab, interval 1, probability 393216, space 0, times 0 [ 1705.526146][T30636] CPU: 0 UID: 0 PID: 30636 Comm: syz.7.5347 Not tainted syzkaller #0 PREEMPT(full) [ 1705.526170][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1705.526180][T30636] Call Trace: [ 1705.526185][T30636] [ 1705.526191][T30636] dump_stack_lvl+0x16c/0x1f0 [ 1705.526215][T30636] should_fail_ex+0x512/0x640 [ 1705.526237][T30636] ? __kmalloc_noprof+0xca/0x880 [ 1705.526262][T30636] should_failslab+0xc2/0x120 [ 1705.526282][T30636] __kmalloc_noprof+0xdd/0x880 [ 1705.526304][T30636] ? lsm_blob_alloc+0x68/0x90 [ 1705.526327][T30636] ? lsm_blob_alloc+0x68/0x90 [ 1705.526343][T30636] lsm_blob_alloc+0x68/0x90 [ 1705.526361][T30636] security_sk_alloc+0x30/0x270 [ 1705.526384][T30636] sk_prot_alloc+0x1c7/0x2a0 [ 1705.526405][T30636] sk_alloc+0x36/0xc20 [ 1705.526428][T30636] __netlink_create+0x5e/0x2c0 [ 1705.526449][T30636] ? __wake_up+0x3f/0x60 [ 1705.526467][T30636] netlink_create+0x39e/0x620 [ 1705.526481][T30636] ? __pfx_genl_bind+0x10/0x10 [ 1705.526496][T30636] ? __pfx_genl_unbind+0x10/0x10 [ 1705.526511][T30636] ? __pfx_genl_release+0x10/0x10 [ 1705.526541][T30636] __sock_create+0x338/0x8d0 [ 1705.526564][T30636] __sys_socket+0x14d/0x260 [ 1705.526584][T30636] ? __pfx___sys_socket+0x10/0x10 [ 1705.526603][T30636] ? xfd_validate_state+0x61/0x180 [ 1705.526623][T30636] ? __pfx_ksys_read+0x10/0x10 [ 1705.526647][T30636] __x64_sys_socket+0x72/0xb0 [ 1705.526665][T30636] ? lockdep_hardirqs_on+0x7c/0x110 [ 1705.526684][T30636] do_syscall_64+0xcd/0xfa0 [ 1705.526703][T30636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.526718][T30636] RIP: 0033:0x7f65bc58f749 [ 1705.526730][T30636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1705.526744][T30636] RSP: 002b:00007f65bd4d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1705.526758][T30636] RAX: ffffffffffffffda RBX: 00007f65bc7e5fa0 RCX: 00007f65bc58f749 [ 1705.526768][T30636] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1705.526776][T30636] RBP: 00007f65bc613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1705.526785][T30636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1705.526793][T30636] R13: 00007f65bc7e6038 R14: 00007f65bc7e5fa0 R15: 00007fff5ad12168 [ 1705.526813][T30636] [ 1705.751876][ C0] vkms_vblank_simulate: vblank timer overrun [ 1706.396002][T30651] dyndbg: bad flag-op , at start of g4^Iu]ۦ3!K,asOcס7 [ 1706.479768][T30651] dyndbg: flags parse failed [ 1706.565213][T30649] ptp ptp0: new virtual clock ptp1 [ 1706.599186][T30649] ptp ptp0: new virtual clock ptp2 [ 1706.630184][T30649] ptp ptp0: new virtual clock ptp3 [ 1706.654214][T30649] ptp ptp0: guarantee physical clock free running [ 1707.597218][T30667] FAULT_INJECTION: forcing a failure. [ 1707.597218][T30667] name failslab, interval 1, probability 393216, space 0, times 0 [ 1707.672081][T30667] CPU: 0 UID: 0 PID: 30667 Comm: syz.0.5354 Not tainted syzkaller #0 PREEMPT(full) [ 1707.672106][T30667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1707.672115][T30667] Call Trace: [ 1707.672121][T30667] [ 1707.672128][T30667] dump_stack_lvl+0x16c/0x1f0 [ 1707.672151][T30667] should_fail_ex+0x512/0x640 [ 1707.672174][T30667] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1707.672192][T30667] should_failslab+0xc2/0x120 [ 1707.672212][T30667] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1707.672227][T30667] ? security_file_alloc+0x34/0x2b0 [ 1707.672246][T30667] ? security_file_alloc+0x34/0x2b0 [ 1707.672261][T30667] security_file_alloc+0x34/0x2b0 [ 1707.672277][T30667] init_file+0x93/0x4c0 [ 1707.672296][T30667] alloc_empty_file+0x73/0x1e0 [ 1707.672317][T30667] path_openat+0xda/0x2cb0 [ 1707.672340][T30667] ? __pfx_path_openat+0x10/0x10 [ 1707.672357][T30667] ? __lock_acquire+0xb8a/0x1c90 [ 1707.672379][T30667] do_filp_open+0x20b/0x470 [ 1707.672395][T30667] ? __pfx_do_filp_open+0x10/0x10 [ 1707.672426][T30667] ? alloc_fd+0x471/0x7d0 [ 1707.672446][T30667] do_sys_openat2+0x11b/0x1d0 [ 1707.672466][T30667] ? __pfx_do_sys_openat2+0x10/0x10 [ 1707.672494][T30667] __x64_sys_openat+0x174/0x210 [ 1707.672515][T30667] ? __pfx___x64_sys_openat+0x10/0x10 [ 1707.672543][T30667] do_syscall_64+0xcd/0xfa0 [ 1707.672562][T30667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.672577][T30667] RIP: 0033:0x7f068738f749 [ 1707.672589][T30667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.672602][T30667] RSP: 002b:00007f0688237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1707.672625][T30667] RAX: ffffffffffffffda RBX: 00007f06875e5fa0 RCX: 00007f068738f749 [ 1707.672638][T30667] RDX: 0000000000020681 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1707.672648][T30667] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1707.672657][T30667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.672665][T30667] R13: 00007f06875e6038 R14: 00007f06875e5fa0 R15: 00007ffd4e5260a8 [ 1707.672685][T30667] [ 1707.886129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1710.490881][T30700] syz.6.5362: vmalloc error: size 8003584, failed to allocated page array size 15632, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1710.580115][T30729] svc: failed to register nfsdv3 RPC service (errno 111). [ 1710.608684][T30729] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1710.837066][T30700] CPU: 0 UID: 0 PID: 30700 Comm: syz.6.5362 Not tainted syzkaller #0 PREEMPT(full) [ 1710.837090][T30700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1710.837099][T30700] Call Trace: [ 1710.837105][T30700] [ 1710.837111][T30700] dump_stack_lvl+0x16c/0x1f0 [ 1710.837135][T30700] warn_alloc+0x248/0x3a0 [ 1710.837152][T30700] ? __pfx_warn_alloc+0x10/0x10 [ 1710.837174][T30700] ? __do_sys_listmount+0x27f/0xf00 [ 1710.837197][T30700] ? __vmalloc_node_noprof+0xad/0xf0 [ 1710.837222][T30700] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1710.837249][T30700] ? __do_sys_listmount+0x27f/0xf00 [ 1710.837276][T30700] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1710.837300][T30700] ? ___kmalloc_large_node+0xed/0x160 [ 1710.837324][T30700] __kvmalloc_node_noprof+0x431/0x9c0 [ 1710.837341][T30700] ? __do_sys_listmount+0x27f/0xf00 [ 1710.837364][T30700] ? __do_sys_listmount+0x27f/0xf00 [ 1710.837385][T30700] ? _copy_from_user+0x59/0xd0 [ 1710.837411][T30700] ? __do_sys_listmount+0x27f/0xf00 [ 1710.837432][T30700] __do_sys_listmount+0x27f/0xf00 [ 1710.837456][T30700] ? __pfx_task_mm_cid_work+0x10/0x10 [ 1710.837471][T30700] ? __pfx___might_resched+0x10/0x10 [ 1710.837487][T30700] ? __pfx___do_sys_listmount+0x10/0x10 [ 1710.837512][T30700] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1710.837539][T30700] do_syscall_64+0xcd/0xfa0 [ 1710.837559][T30700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.837574][T30700] RIP: 0033:0x7f7450b8f749 [ 1710.837586][T30700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.837601][T30700] RSP: 002b:00007f74519e9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1710.837615][T30700] RAX: ffffffffffffffda RBX: 00007f7450de6180 RCX: 00007f7450b8f749 [ 1710.837624][T30700] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1710.837633][T30700] RBP: 00007f7450c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1710.837642][T30700] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1710.837650][T30700] R13: 00007f7450de6218 R14: 00007f7450de6180 R15: 00007ffedef80be8 [ 1710.837676][T30700] [ 1710.837682][T30700] Mem-Info: [ 1713.162010][T30792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5377'. [ 1713.239936][T30700] active_anon:7333 inactive_anon:14668 isolated_anon:0 [ 1713.239936][T30700] active_file:13667 inactive_file:37264 isolated_file:0 [ 1713.239936][T30700] unevictable:19833 dirty:824 writeback:0 [ 1713.239936][T30700] slab_reclaimable:12919 slab_unreclaimable:101496 [ 1713.239936][T30700] mapped:33810 shmem:4485 pagetables:1859 [ 1713.239936][T30700] sec_pagetables:0 bounce:0 [ 1713.239936][T30700] kernel_misc_reclaimable:0 [ 1713.239936][T30700] free:1271099 free_pcp:21347 free_cma:0 [ 1713.321677][T30792] veth0_vlan: entered allmulticast mode [ 1713.616927][T30700] Node 0 active_anon:29288kB inactive_anon:62516kB active_file:54932kB inactive_file:148668kB unevictable:77796kB isolated(anon):0kB isolated(file):0kB mapped:135300kB dirty:3300kB writeback:0kB shmem:16376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:79872kB kernel_stack:14480kB pagetables:7148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1713.859301][T30700] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1714.029501][T30700] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1714.199336][T30700] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1714.242728][T30700] Node 0 DMA32 free:1189240kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29288kB inactive_anon:60564kB active_file:54932kB inactive_file:148668kB unevictable:77796kB writepending:3300kB zspages:740kB present:3129332kB managed:2545064kB mlocked:76260kB bounce:0kB free_pcp:57872kB local_pcp:57872kB free_cma:0kB [ 1714.459481][T30700] lowmem_reserve[]: 0 0 1 1 1 [ 1714.490340][T30700] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1714.594837][T30700] lowmem_reserve[]: 0 0 0 0 0 [ 1714.613103][T30700] Node 1 Normal free:3875240kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:33796kB local_pcp:33796kB free_cma:0kB [ 1714.749802][T30700] lowmem_reserve[]: 0 0 0 0 0 [ 1714.781147][T30700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1714.834501][T30700] Node 0 DMA32: 10044*4kB (UM) 6916*8kB (UME) 3756*16kB (UME) 2341*32kB (UM) 1793*64kB (UME) 980*128kB (UME) 624*256kB (UM) 366*512kB (UME) 172*1024kB (UME) 3*2048kB (UE) 48*4096kB (UM) = 1196720kB [ 1714.941728][T30700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1714.990254][T30700] Node 1 Normal: 14*4kB (UME) 44*8kB (UME) 33*16kB (UME) 28*32kB (UME) 6*64kB (UME) 12*128kB (UME) 5*256kB (UE) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (ME) 943*4096kB (M) = 3875240kB [ 1715.128017][T30700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1715.181780][T30700] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1715.252609][T30700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1715.304602][T30700] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1715.359870][T30700] 63310 total pagecache pages [ 1715.382168][T30700] 11 pages in swap cache [ 1715.406723][T30700] Free swap = 124792kB [ 1715.423149][T30700] Total swap = 124996kB [ 1715.450360][T30700] 2097051 pages RAM [ 1715.487955][T30700] 0 pages HighMem/MovableOnly [ 1715.513549][T30700] 428695 pages reserved [ 1715.535901][T30700] 0 pages cma reserved [ 1716.562359][T30913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5395'. [ 1716.625783][T30913] FAULT_INJECTION: forcing a failure. [ 1716.625783][T30913] name failslab, interval 1, probability 393216, space 0, times 0 [ 1716.734415][T30913] CPU: 0 UID: 0 PID: 30913 Comm: syz.7.5395 Not tainted syzkaller #0 PREEMPT(full) [ 1716.734440][T30913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1716.734449][T30913] Call Trace: [ 1716.734455][T30913] [ 1716.734462][T30913] dump_stack_lvl+0x16c/0x1f0 [ 1716.734486][T30913] should_fail_ex+0x512/0x640 [ 1716.734508][T30913] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1716.734526][T30913] should_failslab+0xc2/0x120 [ 1716.734546][T30913] __kmalloc_cache_noprof+0x72/0x780 [ 1716.734561][T30913] ? ovs_flow_tbl_init+0x8b/0x600 [ 1716.734580][T30913] ? ovs_flow_tbl_init+0x8b/0x600 [ 1716.734595][T30913] ovs_flow_tbl_init+0x8b/0x600 [ 1716.734612][T30913] ovs_dp_cmd_new+0x251/0xe60 [ 1716.734634][T30913] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1716.734653][T30913] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1716.734674][T30913] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1716.734698][T30913] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1716.734718][T30913] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1716.734743][T30913] ? bpf_lsm_capable+0x9/0x10 [ 1716.734762][T30913] ? security_capable+0x7e/0x260 [ 1716.734783][T30913] ? ns_capable+0xd7/0x110 [ 1716.734800][T30913] genl_rcv_msg+0x55c/0x800 [ 1716.734821][T30913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1716.734840][T30913] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1716.734862][T30913] netlink_rcv_skb+0x158/0x420 [ 1716.734878][T30913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1716.734897][T30913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1716.734921][T30913] ? netlink_deliver_tap+0x1ae/0xd30 [ 1716.734939][T30913] genl_rcv+0x28/0x40 [ 1716.734955][T30913] netlink_unicast+0x5aa/0x870 [ 1716.734974][T30913] ? __pfx_netlink_unicast+0x10/0x10 [ 1716.734989][T30913] ? __pfx___might_resched+0x10/0x10 [ 1716.735011][T30913] netlink_sendmsg+0x8c8/0xdd0 [ 1716.735031][T30913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1716.735049][T30913] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1716.735074][T30913] ____sys_sendmsg+0xa98/0xc70 [ 1716.735094][T30913] ? copy_msghdr_from_user+0x10a/0x160 [ 1716.735108][T30913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1716.735132][T30913] ? __pfx_futex_wake_mark+0x10/0x10 [ 1716.735157][T30913] ___sys_sendmsg+0x134/0x1d0 [ 1716.735173][T30913] ? __pfx____sys_sendmsg+0x10/0x10 [ 1716.735186][T30913] ? __lock_acquire+0x622/0x1c90 [ 1716.735230][T30913] __sys_sendmsg+0x16d/0x220 [ 1716.735255][T30913] ? __pfx___sys_sendmsg+0x10/0x10 [ 1716.735270][T30913] ? __x64_sys_futex+0x1e0/0x4c0 [ 1716.735302][T30913] do_syscall_64+0xcd/0xfa0 [ 1716.735323][T30913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.735340][T30913] RIP: 0033:0x7f65bc58f749 [ 1716.735353][T30913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1716.735367][T30913] RSP: 002b:00007f65bd4d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1716.735381][T30913] RAX: ffffffffffffffda RBX: 00007f65bc7e5fa0 RCX: 00007f65bc58f749 [ 1716.735395][T30913] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1716.735405][T30913] RBP: 00007f65bc613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1716.735413][T30913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.735422][T30913] R13: 00007f65bc7e6038 R14: 00007f65bc7e5fa0 R15: 00007fff5ad12168 [ 1716.735442][T30913] [ 1718.474798][T30955] Invalid ELF header magic: != ELF [ 1718.753537][T17781] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1718.909117][T30968] FAULT_INJECTION: forcing a failure. [ 1718.909117][T30968] name failslab, interval 1, probability 393216, space 0, times 0 [ 1718.994893][T30968] CPU: 0 UID: 0 PID: 30968 Comm: syz.0.5408 Not tainted syzkaller #0 PREEMPT(full) [ 1718.994915][T30968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1718.994925][T30968] Call Trace: [ 1718.994930][T30968] [ 1718.994936][T30968] dump_stack_lvl+0x16c/0x1f0 [ 1718.994959][T30968] should_fail_ex+0x512/0x640 [ 1718.994980][T30968] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1718.994998][T30968] should_failslab+0xc2/0x120 [ 1718.995018][T30968] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1718.995033][T30968] ? __proc_create+0x2ce/0x8e0 [ 1718.995058][T30968] ? __proc_create+0x2ce/0x8e0 [ 1718.995077][T30968] __proc_create+0x2ce/0x8e0 [ 1718.995098][T30968] ? __pfx___proc_create+0x10/0x10 [ 1718.995121][T30968] ? _raw_write_unlock+0x28/0x50 [ 1718.995138][T30968] ? proc_register+0x559/0x8b0 [ 1718.995162][T30968] proc_create_reg+0x7d/0x180 [ 1718.995185][T30968] proc_create_net_data+0x8e/0x1c0 [ 1718.995208][T30968] ? __pfx_proc_create_net_data+0x10/0x10 [ 1718.995235][T30968] ? __pfx_ip6mr_net_init+0x10/0x10 [ 1718.995250][T30968] ip6mr_net_init+0x2ce/0x4e0 [ 1718.995265][T30968] ? __pfx_ip6mr_net_init+0x10/0x10 [ 1718.995279][T30968] ops_init+0x1e2/0x5f0 [ 1718.995297][T30968] setup_net+0x100/0x390 [ 1718.995313][T30968] ? __pfx_setup_net+0x10/0x10 [ 1718.995329][T30968] ? debug_mutex_init+0x37/0x70 [ 1718.995348][T30968] copy_net_ns+0x2f8/0x690 [ 1718.995367][T30968] create_new_namespaces+0x3ea/0xa90 [ 1718.995389][T30968] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1718.995408][T30968] ksys_unshare+0x45b/0xa40 [ 1718.995431][T30968] ? __pfx_ksys_unshare+0x10/0x10 [ 1718.995451][T30968] ? xfd_validate_state+0x61/0x180 [ 1718.995477][T30968] __x64_sys_unshare+0x31/0x40 [ 1718.995496][T30968] do_syscall_64+0xcd/0xfa0 [ 1718.995515][T30968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.995530][T30968] RIP: 0033:0x7f068738f749 [ 1718.995543][T30968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1718.995557][T30968] RSP: 002b:00007f0688216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1718.995572][T30968] RAX: ffffffffffffffda RBX: 00007f06875e6090 RCX: 00007f068738f749 [ 1718.995582][T30968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1718.995591][T30968] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1718.995599][T30968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.995608][T30968] R13: 00007f06875e6128 R14: 00007f06875e6090 R15: 00007ffd4e5260a8 [ 1718.995628][T30968] [ 1720.778143][T27458] Bluetooth: hci3: command 0x0c1a tx timeout [ 1723.077272][T31036] zswap: compressor not available [ 1723.171492][T31043] block2mtd: illegal erase size [ 1725.213954][T31082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5432'. [ 1725.277937][T31084] netlink: 354 bytes leftover after parsing attributes in process `syz.6.5432'. [ 1725.346251][T31082] netlink: 354 bytes leftover after parsing attributes in process `syz.6.5432'. [ 1725.410528][T31087] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1725.501564][T31089] svc: failed to register nfsdv3 RPC service (errno 111). [ 1725.546569][T31089] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1725.822457][T31088] svc: failed to register nfsdv3 RPC service (errno 111). [ 1725.878882][T31088] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1726.330812][T31098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5435'. [ 1726.891925][T31121] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1726.905747][T31122] netlink: 338 bytes leftover after parsing attributes in process `syz.7.5441'. [ 1726.951084][T31121] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1726.959061][T31122] netlink: 338 bytes leftover after parsing attributes in process `syz.7.5441'. [ 1728.672054][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1728.678432][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1728.711187][T29939] bridge_slave_1: left allmulticast mode [ 1728.739043][T29939] bridge_slave_1: left promiscuous mode [ 1728.764361][T29939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.852043][T29939] bridge_slave_0: left allmulticast mode [ 1728.883448][T29939] bridge_slave_0: left promiscuous mode [ 1728.907563][T29939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.916645][T31182] FAULT_INJECTION: forcing a failure. [ 1728.916645][T31182] name failslab, interval 1, probability 393216, space 0, times 0 [ 1728.988410][T31182] CPU: 0 UID: 0 PID: 31182 Comm: syz.0.5457 Not tainted syzkaller #0 PREEMPT(full) [ 1728.988434][T31182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1728.988444][T31182] Call Trace: [ 1728.988450][T31182] [ 1728.988456][T31182] dump_stack_lvl+0x16c/0x1f0 [ 1728.988480][T31182] should_fail_ex+0x512/0x640 [ 1728.988502][T31182] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1728.988520][T31182] should_failslab+0xc2/0x120 [ 1728.988539][T31182] __kmalloc_cache_noprof+0x72/0x780 [ 1728.988553][T31182] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1728.988570][T31182] ? sctp_endpoint_new+0xfc/0xb20 [ 1728.988592][T31182] ? sctp_endpoint_new+0xfc/0xb20 [ 1728.988609][T31182] sctp_endpoint_new+0xfc/0xb20 [ 1728.988629][T31182] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1728.988647][T31182] ? lockdep_init_map_type+0x5c/0x280 [ 1728.988669][T31182] ? lockdep_init_map_type+0x5c/0x280 [ 1728.988692][T31182] sctp_init_sock+0xe2b/0x12f0 [ 1728.988717][T31182] ? __pfx_sctp_init_sock+0x10/0x10 [ 1728.988735][T31182] inet_create+0x939/0x1040 [ 1728.988757][T31182] ? inet_create+0x93/0x1040 [ 1728.988781][T31182] __sock_create+0x338/0x8d0 [ 1728.988804][T31182] __sys_socket+0x14d/0x260 [ 1728.988823][T31182] ? __pfx___sys_socket+0x10/0x10 [ 1728.988841][T31182] ? xfd_validate_state+0x61/0x180 [ 1728.988860][T31182] ? __pfx_ksys_write+0x10/0x10 [ 1728.988880][T31182] __x64_sys_socket+0x72/0xb0 [ 1728.988898][T31182] ? lockdep_hardirqs_on+0x7c/0x110 [ 1728.988915][T31182] do_syscall_64+0xcd/0xfa0 [ 1728.988933][T31182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.988948][T31182] RIP: 0033:0x7f068738f749 [ 1728.988961][T31182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1728.988975][T31182] RSP: 002b:00007f0688237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1728.988990][T31182] RAX: ffffffffffffffda RBX: 00007f06875e5fa0 RCX: 00007f068738f749 [ 1728.989000][T31182] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 1728.989009][T31182] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1728.989018][T31182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.989026][T31182] R13: 00007f06875e6038 R14: 00007f06875e5fa0 R15: 00007ffd4e5260a8 [ 1728.989046][T31182] [ 1729.235028][T31186] Invalid ELF header magic: != ELF [ 1730.801626][T31224] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1730.809456][T31224] #PF: supervisor instruction fetch in kernel mode [ 1730.815965][T31224] #PF: error_code(0x0010) - not-present page [ 1730.821921][T31224] PGD 800000008cb5a067 P4D 800000008cb5a067 PUD 0 [ 1730.828414][T31224] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 1730.833767][T31224] CPU: 0 UID: 0 PID: 31224 Comm: syz.0.5467 Not tainted syzkaller #0 PREEMPT(full) [ 1730.843116][T31224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1730.853211][T31224] RIP: 0010:0x0 [ 1730.856667][T31224] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1730.864010][T31224] RSP: 0018:ffffc9000427f9a0 EFLAGS: 00010293 [ 1730.870063][T31224] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f3b27e [ 1730.878025][T31224] RDX: ffff88802f855ac0 RSI: ffffea00028df6c0 RDI: ffff88805ab4e540 [ 1730.886001][T31224] RBP: ffffea00028df6c0 R08: 0000000000000007 R09: 0000000000000000 [ 1730.893966][T31224] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200084ff35 [ 1730.901923][T31224] R13: ffff88805ab4e540 R14: 0000000000000000 R15: dffffc0000000000 [ 1730.909898][T31224] FS: 00007f06882376c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 1730.918812][T31224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1730.925381][T31224] CR2: ffffffffffffffd6 CR3: 000000002f404000 CR4: 00000000003526f0 [ 1730.933339][T31224] Call Trace: [ 1730.936605][T31224] [ 1730.939518][T31224] filemap_read_folio+0xc8/0x2a0 [ 1730.944444][T31224] ? __pfx_filemap_read_folio+0x10/0x10 [ 1730.949974][T31224] ? __filemap_get_folio+0x32b/0xc30 [ 1730.955243][T31224] ? down_read+0x13d/0x480 [ 1730.959668][T31224] do_read_cache_folio+0x263/0x5c0 [ 1730.964770][T31224] freader_get_folio+0x337/0x930 [ 1730.969693][T31224] freader_fetch+0xc2/0x5e0 [ 1730.974182][T31224] ? query_matching_vma+0x345/0x7d0 [ 1730.979370][T31224] __build_id_parse.isra.0+0xec/0x7a0 [ 1730.984729][T31224] ? query_matching_vma+0x48e/0x7d0 [ 1730.990004][T31224] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 1730.995987][T31224] do_procmap_query+0xb0e/0x1080 [ 1731.000915][T31224] ? __pfx_do_procmap_query+0x10/0x10 [ 1731.006274][T31224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1731.012160][T31224] ? do_vfs_ioctl+0x128/0x14f0 [ 1731.016924][T31224] ? __fget_files+0x20e/0x3c0 [ 1731.021584][T31224] procfs_procmap_ioctl+0x9d/0xe0 [ 1731.026595][T31224] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1731.032302][T31224] __x64_sys_ioctl+0x18e/0x210 [ 1731.037053][T31224] do_syscall_64+0xcd/0xfa0 [ 1731.041545][T31224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.047424][T31224] RIP: 0033:0x7f068738f749 [ 1731.051823][T31224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1731.071420][T31224] RSP: 002b:00007f0688237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.079817][T31224] RAX: ffffffffffffffda RBX: 00007f06875e5fa0 RCX: 00007f068738f749 [ 1731.087770][T31224] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 1731.095725][T31224] RBP: 00007f0687413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1731.103683][T31224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1731.111636][T31224] R13: 00007f06875e6038 R14: 00007f06875e5fa0 R15: 00007ffd4e5260a8 [ 1731.119597][T31224] [ 1731.122596][T31224] Modules linked in: [ 1731.126484][T31224] CR2: 0000000000000000 [ 1731.130615][T31224] ---[ end trace 0000000000000000 ]--- [ 1731.136048][T31224] RIP: 0010:0x0 [ 1731.139500][T31224] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1731.146842][T31224] RSP: 0018:ffffc9000427f9a0 EFLAGS: 00010293 [ 1731.152892][T31224] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f3b27e [ 1731.160849][T31224] RDX: ffff88802f855ac0 RSI: ffffea00028df6c0 RDI: ffff88805ab4e540 [ 1731.168815][T31224] RBP: ffffea00028df6c0 R08: 0000000000000007 R09: 0000000000000000 [ 1731.176768][T31224] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200084ff35 [ 1731.184729][T31224] R13: ffff88805ab4e540 R14: 0000000000000000 R15: dffffc0000000000 [ 1731.192687][T31224] FS: 00007f06882376c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 1731.201602][T31224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1731.208173][T31224] CR2: ffffffffffffffd6 CR3: 000000002f404000 CR4: 00000000003526f0 [ 1731.216149][T31224] Kernel panic - not syncing: Fatal exception [ 1731.222248][T31224] Kernel Offset: disabled [ 1731.226577][T31224] Rebooting in 86400 seconds..