last executing test programs: 13m3.942208515s ago: executing program 2 (id=1391): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x32f1c0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x2a, 0x2, 0x8001) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x9, r0, 0x4, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) prctl$auto(0x83e, 0x3, 0x0, 0x1, 0x4000) select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x7ff, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x60001, 0x0) read$auto_dynamic_events_ops_trace_dynevent(r2, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0x400, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0xa8246, 0x0) write$auto(r3, 0x0, 0x100000a3d9) 13m3.084618116s ago: executing program 2 (id=1393): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x10ba02, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x400000000006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r5 = socket(0x11, 0xa, 0x9) bind$auto(r5, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/9/effective_affinity\x00', 0x20041, 0x0) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) sendmsg$auto_OVS_FLOW_CMD_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4d612601759041d9}, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x10, 0xe233, 0x14, r1, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 13m1.904130336s ago: executing program 2 (id=1398): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) arch_prctl$auto(0x1004, 0xe735) (async) arch_prctl$auto(0x1004, 0xe735) socket(0x29, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) (async) setreuid$auto(r1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x19, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) 13m1.708918058s ago: executing program 2 (id=1399): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) r0 = prctl$auto(0x80, 0x6, 0x0, 0x27c, 0xffffffff) utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @dev}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 13m1.006092169s ago: executing program 2 (id=1401): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7fffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x100000000, 0x0, 0x3) 12m59.549036157s ago: executing program 2 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000e00), 0x20000, 0x0) ioctl$auto_TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000e40)=0x4) ioctl$auto_HDIO_GETGEO(r1, 0x301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r5], 0x28}}, 0x400c080) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub6/info\x00', 0x414300, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x5, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0xc8, 0x800454e0, 0x5) setsockopt$auto_SO_RCVPRIORITY(r0, 0x1, 0x52, 0x0, 0x8) 12m44.242658024s ago: executing program 32 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000e00), 0x20000, 0x0) ioctl$auto_TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000e40)=0x4) ioctl$auto_HDIO_GETGEO(r1, 0x301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r5], 0x28}}, 0x400c080) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub6/info\x00', 0x414300, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x15, 0x5, 0x0) setsockopt$auto(r7, 0x114, 0x5, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0xc8, 0x800454e0, 0x5) setsockopt$auto_SO_RCVPRIORITY(r0, 0x1, 0x52, 0x0, 0x8) 7m3.357454655s ago: executing program 4 (id=2766): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x47, &(0x7f0000000040)='\xa1\x00', 0x4) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x831d, 0xa78) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) prctl$auto(0x42, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) r4 = socket(0xa, 0x3, 0x3) close_range$auto(r4, 0x8, 0x0) socket(0xa, 0x1, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, r5, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bind$auto(r4, 0x0, 0x6f) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) ioctl$auto(r6, 0x5609, r6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r6, &(0x7f0000000100)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 7m1.252439145s ago: executing program 4 (id=2775): mmap$auto(0x0, 0x2020006, 0x2000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xd, 0x9b74, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x3}}, 0x22) close_range$auto(0x0, 0xfffffffffffff000, 0x0) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000040), r0) ioctl$auto(0xffffffffffffffff, 0x5761, 0x4) 7m0.976150286s ago: executing program 4 (id=2777): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket(0x2b, 0x1, 0x1) r1 = socket(0x2c, 0x80003, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r1, 0x0, 0x40) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x22, 0x805, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x141083, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop6/rqos/wbt/id\x00', 0x101a00, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x6, 0xd, 0x8fd6, 0x948b, 0x4, 0xe, 0x100000000003, 0x3, 0x62, 0x80000001, 0x40000000000007, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) madvise$auto(0x0, 0x10, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 6m58.985957855s ago: executing program 4 (id=2782): socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) (async) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000500)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x8000, 0x1ffde, 0x6, 0x5, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x7, 0xd, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x86, 0x0, 0x0, 0x0, 0x7f, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], "58cd43a33e0c2407ab0f8f7adc244b07df0d7ddf9a7340b1b0fb7ab7356a624fa16d5e76399c99f5f3fa7c319c01e24addadca4079c04784223d8f822bc6a4a563e74963d19b394f8bf9fc1de4a4b5d6bd5f441b671d9d971ad3b651c0165e038c983a96e7f64c"}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) (async) fcntl$auto(0x0, 0x407, 0x100000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) open$dir(0x0, 0x507180, 0x25c) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 6m58.670598343s ago: executing program 4 (id=2786): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x29, 0x5, 0x0) socket(0xa, 0x3, 0x3a) socket(0x2, 0xa, 0x1) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 6m58.244991345s ago: executing program 4 (id=2787): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) ioctl$auto(r0, 0x5100, 0xffffffffffffffff) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mlockall$auto(0x6) setreuid$auto(0x40000000003, 0xdf36) brk$auto(0x7b5900000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x1ff) ioctl$auto(0xc8, 0x800454df, 0x5c8d) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdf3) 6m43.262075644s ago: executing program 33 (id=2787): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) ioctl$auto(r0, 0x5100, 0xffffffffffffffff) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mlockall$auto(0x6) setreuid$auto(0x40000000003, 0xdf36) brk$auto(0x7b5900000000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x1ff) ioctl$auto(0xc8, 0x800454df, 0x5c8d) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdf3) 45.219049462s ago: executing program 5 (id=4253): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) (async) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) (async) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/power/active_duration\x00', 0xa2600, 0x0) read$auto(r2, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) (async) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x408) (async) r4 = open(0x0, 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) (async) getdents$auto(r4, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x800, 0x78) 44.043230333s ago: executing program 5 (id=4256): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8140, 0x0) r2 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, r1, 0x0, 0x40, 0xd36a, 0x9, r2, 0x7, 0xc01}, 0x10) 43.508358596s ago: executing program 5 (id=4258): prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x7, 0xc8, 0x2, 0x6) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x9, 0x8ace, 0x1, 0x7fffffffffffffff) (async, rerun: 32) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x7ff, 0x80, 0x8, 0x0) (rerun: 32) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x8, 0x7, 0x0, 0x7) (async, rerun: 64) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x7fffffff, 0x9b73, 0x8, 0x3) (async, rerun: 64) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x589a7eb6, 0x7, 0x6e, 0x2) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x7, 0x10001, 0x4, 0x7) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0xffffffffffffffff, 0x59b2, 0x155, 0x6) (async) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40000, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r0, &(0x7f0000000040)="e83678945a3e1e0bea7d335e61eb75b48d24ccd4e8cb5fd064926eee550ca8b95138499922ccd7b7a4be38c1ae5f8ba6e44c9108b71f58b42ab0e36b9121389eca546048bd28398b0cfad17a62981f7b6dffefadd1acc155984ea24cf75760ec846faed707ee4ddc49a9bfef4a55fc556369a10730ce57630bc795cbba90c943e4d458c6dbd1285ce12ca103394998f8751ac36b7375d8a8", 0x98) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x4, 0xffffffffffffff47, 0x8000, 0x6) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x100000000, 0x800, 0x5, 0x0) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0xfffffffffffffffc, 0xfff, 0xfffffffffffffffd, 0x0) (async) ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000100)="2f91b001") prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x9, 0x5, 0xb, 0x2) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0xffffffffffffff01, 0x7fff, 0x0, 0xf113) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x7, 0x200, 0x80000001, 0xffc0000000000000) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x8, 0xd2, 0x8, 0x8) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x100000000, 0x4, 0xf6b8) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop9\x00', 0x480000, 0x0) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0xf, 0x3, 0x3, 0xb) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x1, 0x8001, 0xf, 0x4) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x10001, 0xa8b, 0x0, 0x1db8) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x8, 0xffffffffffffffff, 0x4, 0x9) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x4, 0xffffffff, 0xffffffff7fffffff, 0x7) r1 = getsockopt$auto_SO_PEERPIDFD(r0, 0x7e, 0x4d, &(0x7f0000000180)='\x00', &(0x7f00000001c0)) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x81}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x10}, @NL802154_ATTR_COORDINATOR={0x8, 0x1e, 0x0, 0x1, [@typed={0x4, 0x1c}]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_SEC_DEVKEY={0xf6, 0x2f, 0x0, 0x1, [@generic="27d535d13d996b4159d78506d06fe700effd6ab611b7e61c13fe89480e204b3c157453be47fb1339504a1141c825a74f6f7938fa14564b1204678394a9ce073fecdb8cbac23aef3d8e3c96277869218d297ba7aa3eb8b214f3a77d2db551bcdce89866a1579831bd62f04b11956e780ef153fefb6eee2270c643bb96a3090499290292a070e2af93faa8e8346aa54ad9543d54c6ce78362fb3180f68b50fbc51bd5e2e90dba6cf6e95c6ea018939c1bd4b0c256c51484dd22dd356025608ae18dd25fc12cef0bfae97d984b5154a0c4c157517baab8d5f1263f52636bac5070bcabf3ebc337fbf1863ede4f1ca137b708c33"]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x6, 0xece3, 0x1ff, 0x1) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x0, 0xa9, 0x2, 0x7) 43.189139664s ago: executing program 5 (id=4259): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram5\x00', 0x80b42, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (rerun: 32) read$auto(r3, 0x0, 0x20) (async) mmap$auto(0xfffffffffffffff9, 0x7, 0x5, 0x37e, r0, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) (async, rerun: 32) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, 0x0) (async) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) (async, rerun: 64) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x64) (async, rerun: 64) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) (async) r4 = open(0x0, 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x8202, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 40.510984575s ago: executing program 5 (id=4272): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) setrlimit$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0xa, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/batadv0/bc_forwarding\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) mmap$auto(0xbfd, 0x20014, 0x1, 0xeb1, 0x404, 0xf) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x2, 0x40000088) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, "697bd40d12247637a91c7fbcb857fab4efe0d4495298042faf3bda24aa76784cb389ca7003be00f06539670f09cad1a954f664dfdf15f8aeaebc6b0c0285bef993d40a30398d5028331bcd70ef7f01767d6f22170e3eb1481446b8b07229c2a4037de23e32750d503cf21b4c8fef02b68d9ef41a158f6db3aa0bb0"}, 0x90}}, 0x8004) close_range$auto(r0, r1, 0xfffffffe) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 38.704903752s ago: executing program 5 (id=4278): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) read$auto_ptdump_fops_(r1, &(0x7f00000000c0)=""/41, 0x29) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x10000) write$auto_event_trigger_fops_trace(r2, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x21) 23.438752572s ago: executing program 34 (id=4278): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) read$auto_ptdump_fops_(r1, &(0x7f00000000c0)=""/41, 0x29) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x10000) write$auto_event_trigger_fops_trace(r2, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x21) 10.02486001s ago: executing program 0 (id=4347): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xd7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x5602, r0) mremap$auto(0x4000, 0x3bcdf546, 0x13fd4, 0xffffffffffffffff, 0xfffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_tracing_fops_trace(r1, &(0x7f0000000580)=""/4096, 0x1000) 8.359321983s ago: executing program 0 (id=4352): r0 = syz_clone(0x80000000, &(0x7f0000000140)="0f92193d056b875996cae2f9a4e0e0dfeee94e456f78fec55a483278a2c1f1e3fc4dd50c8f3d96750fa9b0c41e309dbd91f7e0fac94efc540a13b9cb38ef1608356e8a52f25ac5205f5924d0271c98efd5f9a9b1bf8b11d915207eb15d9f33d1cf1a11c7c9e8d8bd709bf84d4ad40544675cef4b6cf94823da4100ed22e3880a719b8daa7bc135f318f4493beddc17a09fe51ccc97f9ce10d0d1b0eea8d6a9c87b457171892bbc8096555cc7dac8", 0xae, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000300)="6dd39bd5da8e5859763221c6c00580a9463e3f62837e6b546d567f4206a85d414111486c92cae7d543bbac24a2b07b675002aba3f9b4aa626b060fbd059483c9b12c037a652a0749ccecb707edce11e96aea30b87da7a8a23b97e48ecde5965ec1327313660f5e53195e81ec73e8e00d23595a5de1d065979d28796efe071b792cdc14fcc892a377e7302b322e2a202918aabed2c1424fe4d4067ce16df3b553984e4457d48c9fe11df7997d29e0635f0f29d21d45782f410ad4549ce245ec30c7acc6d6e1178debe4ba30f94d424f689fc305133be8007879334d00387720e5b0d9fb87e21e3b4478d12ae0fee444558b") syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/cgroup\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, 0x0, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0xc0}, 0x8) unshare$auto(0x40000080) semget$auto(0x7eb, 0xc7, 0xfffffffd) r2 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYBLOB="01002dbd70726adbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000400)={{0x0, 0x2506, &(0x7f0000000000)={0x0, 0xac}, 0x7fffffffffffffff, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 6.134255349s ago: executing program 1 (id=4359): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x10806, 0x0, 0xfffffffffffffffd) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm1c/sub1/xrun_injection\x00', 0x366982, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000240), 0x408501, 0x0) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) getsockopt$auto_SO_MEMINFO(r1, 0x7, 0x37, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r3, 0x0, 0x81, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/023/001\x00', 0x122202, 0x0) mmap$auto(0x8000000000000001, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000200)={0x23, 0x0, 0x14, 0x2006, 0x7fa, 0x7fb, &(0x7f00000002c0)}) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) close_range$auto(0x2, 0x8, 0x0) 4.957212148s ago: executing program 0 (id=4360): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143222, 0x0) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820181, 0x0) write$auto_nvram_misc_fops_nvram(r1, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) 4.7699851s ago: executing program 3 (id=4361): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/xt_recent/parameters/ip_list_uid\x00', 0x10b142, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x1cb842, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) (async, rerun: 32) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3b04cccd6472ed3c00000000", @ANYRES16=r0, @ANYBLOB="130026bd7000f9dbdf250200000000001d000400000000000b0102000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x31) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x0, 0xeb4, 0xfffffffffffffffa, 0x8000) fcntl$auto(r1, 0x40a, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) (async) bpf$auto(0x5, &(0x7f0000000000)=@test={0x8, 0x80000001, 0x1, 0x1, 0x8, 0x63a, 0x10001, 0x8, 0xc511, 0x7, 0xff, 0x49, 0xff, 0x4, 0x9f31}, 0x779) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r3}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) flock$auto(r2, 0x1) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x40000000009, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x100006}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r7 = open(0x0, 0x161342, 0x100) write$auto(r7, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r8, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) 4.603118913s ago: executing program 1 (id=4362): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r3, 0x80086601, 0x7fffffffbfffffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) madvise$auto(0x8000, 0x7fffffffffffffff, 0x1000a) unshare$auto(0x40000080) getsockopt$auto(r1, 0x1, 0x2, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) 4.40315031s ago: executing program 3 (id=4364): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0x9, 0x401, 0x0, 0x20000006, 0xe}, 0x8002, 0x1, 0x7fffffff) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd26, 0x65dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5a) msync$auto(0x7292, 0x3e, 0x3) mmap$auto(0x0, 0x3, 0x40000000001, 0x20000040eb1, 0x401, 0x300000000000) r5 = epoll_create$auto(0x0) epoll_pwait2$auto(r5, 0x0, 0x8, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = pidfd_open$auto(0x1, 0x0) setns(r6, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x283) epoll_pwait$auto(r5, 0x0, 0x9, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) 4.007688826s ago: executing program 3 (id=4365): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ttyzc/power/runtime_status\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/version\x00', 0x8240, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/125, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd1\x00', 0x200000, 0x0) getrlimit$auto(0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xfffffffffffff000, 0x200000000000000, 0xfffffffffffffff4, 0x0) setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/lockdep\x00', 0x2, 0x0) 3.929989001s ago: executing program 0 (id=4366): mmap$auto(0xfff, 0x40000b, 0x400008, 0x9b72, 0x2, 0x37e8fceb) (async) socket(0xa, 0x1, 0x84) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0) write$auto(r0, &(0x7f0000000040)='\xf3\xc1\xbf\xa0', 0x7) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snd/midiC2D1\x00', 0x4b8000, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r3, 0x2271, 0x38) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x4802, 0x0) (async) statx$auto(r2, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) (async) madvise$auto(0x0, 0x200007, 0x19) (async) link$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54) r4 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfd7, &(0x7f00000000c0)="904c4d2f7609039a2aead81250760754a5a610ed581e3ce17a9e1e7e5dd85823265ce98b5a7a30a1da97418adf51da3a6fc428ac864599177aa37951952e067f42ecd54a969e8fadb9884830d7a6153c4f8cb7aecead14ac2804f7802fae85eb81b1ee6647f2a52f7ab72204dee5") (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r7 = getpgid(0xffffffffffffffff) kill$auto_SIGCONT(r7, 0x12) (async) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r5, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) (async) sendmsg$auto_TIPC_NL_PUBL_GET(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xf, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="14c74064", @ANYRES16=r6, @ANYBLOB="00012bbd7000ffdbdf3507000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async) execveat$auto(r5, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)=&(0x7f0000000600)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', &(0x7f00000006c0)=&(0x7f0000000680)='\xf3\xc1\xbf\xa0', 0x4) (async) setsockopt$auto(0x3, 0x4, 0x72, 0x0, 0xc) 3.341625293s ago: executing program 3 (id=4367): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/sun\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/sun\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) (async) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) (async) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r4, 0x40044620, 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) sendfile$auto(r5, r5, 0x0, 0x5) getsockopt$auto_SO_MAX_PACING_RATE(r4, 0x87, 0x2f, &(0x7f0000000040)='&-\x00', &(0x7f0000000080)=0x1c) (async) getsockopt$auto_SO_MAX_PACING_RATE(r4, 0x87, 0x2f, &(0x7f0000000040)='&-\x00', &(0x7f0000000080)=0x1c) 3.162934203s ago: executing program 6 (id=4368): mmap$auto(0x7, 0x4, 0xb, 0x16, 0xffffffffffffffff, 0x4000000000008000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x40140, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) fstat$auto(0x2, 0x0) r3 = socket(0x28, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x8001, &(0x7f0000000080)={&(0x7f00000003c0)="86b6ac823615940b7c9a511cd0342cc990863c956314b71b587863c713fae3bdcd8a12c878a882fb76b77ff478b24b8826622c751c7b9883471317b8ed909ccb5c3c7d437fa45a8eb47871d3aee5c969ccae159ae602e3cc98293bd7619a5b2c73eb521b65762648c99db0b263e0ea20ea4a8c4325e1cad72781f74e8398e4d85004944f558bcd", 0x6}, 0x0, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x5}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYBLOB='f'], 0x1ac}}, 0x40000) getsockopt$auto(r3, 0x28, 0x0, 0x0, 0x0) r6 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(r6, 0x0, 0x1005, 0x9) mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000) setsockopt$auto(r0, 0x4, 0x0, &(0x7f0000000100)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00', 0x10004) mremap$auto(0x0, 0x7e8, 0x3fd9, 0x0, 0x20000020000000) read$auto(0x3, 0x0, 0xfdef) ioctl$auto(r1, 0x4b49, 0x9) statmount$auto(0x0, &(0x7f0000000480)={0x8, 0x2, 0x6, 0x7, 0x23e, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x7, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1000], "5fe5911a544c895d8915ce3ce22fa822699e627d74908dfb603a2e640b1a66184618ac536b56a28b15cd744be94b260c61a2e92e8c2bde0056"}, 0x9, 0x200d) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 3.15770909s ago: executing program 1 (id=4369): r0 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c855}, 0x40805) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r1, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) write$auto(r1, 0x0, 0x4) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250000000008000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="06002abd700087"], 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.894079164s ago: executing program 0 (id=4370): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x23, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = socket(0x22, 0x2, 0x1) fstat$auto(r2, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r3, 0x3b85, 0x38) r4 = getuid() setresuid$auto(0x0, 0x0, r4) r5 = setfsuid$auto(0xee01) setresuid$auto(0x0, r5, 0x0) r6 = clone3$auto(&(0x7f0000000080)={0x8640, 0x2, 0x0, 0x7, 0x81, 0x1, 0x3, 0x100000001, 0x101, 0xfff, 0x500}, 0x36) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000100)=0x6) r8 = getpgid(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r10, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r10, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000001b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f0000000140)={0x19d8, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x197, 0x9, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @uid=r4}, @typed={0x5, 0x52, 0x0, 0x0, @str='\x00'}, @generic="c53bd71c53f00438bb0fe66ee0ddd44a88fdb9d3af1932fa051b831925351e7fd9058a7942e13559a8e046d064fd4eceb8a7ace6d59e769e91086135011af0", @generic="956cbefc52ff4391f0519f9ef6ef648459fff1106cba78cbfc9a27b772a072b65127b49e663b7088c455528db750d7729cf644b0b740d4fe10dc8f856e628fc6385af35678933ca9ace247d0e0c81bff8779dfeb12b4b0fdf62873df68ecb02cadd19248f71a3ca37b0f068989678aea6d084a7b3d7c42d49fc127d6e616bae104bb2638d32a3f9917290c6738fe94d4c2c0c3e45504ffda2ec3b211a698a355", @generic="1d11d9404488ae450f8366156abd8d8c6f116dc6c0", @typed={0x8, 0x8e, 0x0, 0x0, @uid}, @generic="787d1977d6826d578bd91a9ad6841ba81f9faa348959928e684ac7122b07f2a5b4073d661153d74719525fd48816446e06a9e9bafcbb42eba0887effa27baa784e4288364b215c627f4cd65f1b1ad5fce04d1a91cea69e57b983b74f73ada40bdbeb2ddb675bc7535ef214b46a5251ae85a8e79b09ccbfe35c66d1a66495b37fba811c", @typed={0x4, 0x123}]}, @MACSEC_ATTR_OFFLOAD={0x4}, @MACSEC_ATTR_OFFLOAD={0x1d5, 0x9, 0x0, 0x1, [@generic="3799c583aab2a28b75fae25d7d741766610eeefbfad915786a3b112023e7e65cc46ebd11853ecbcf3d91a070f7c85529ed111fee867ba5cd2f280d2a94ff4bf90ff37bf97ff312b226b92faca482069ee4903fbaa224c4b2fc9cef8caa1822a8ed127cf0247634efe8fe5814dfe79467da5ec992c2739d676c3c3a9dcc4cf99b506a4f2e58c5c0f6399865fc894df326112a6d1466376f6fd8c4a4c162636708d56f99380aa8f50b5a3e5b910f93d79ca746a60f55c930c81efa06a9c25d390123f091d389575996f9bd224256", @nested={0x101, 0xf0, 0x0, 0x1, [@generic="d541d97f09857f6600b55f468c0394f68816da26bbdb56a499f3a11fe958a17f04b1f1626bc60dea38766a5df06e10fbfa1ab609cec24c17c0d010d5d236206f824a0db9aced02e087423183954d6605948e28cce371707133c57725264c30a9fdcf14422ec698e2cdc6c9954a3792881d4e6273dcea69b446cdbcbc01bb7e355e695c8ef801e981df24e56d573f85337a8da0595fa246d80acd4ddaa6cd4c2c06f9f37219cf9a82e84ae93268fe814228e2435aba671dfd35364090dc982258769ab617fbd87b106a52e3d0e0e60fc42fe29afde4055742ced2c2d3e1e9c528255b05", @generic="174f1ac0bd7c92c221bba13894dc", @typed={0xa, 0x121, 0x0, 0x0, @str='()*:-\x00'}]}]}, @MACSEC_ATTR_OFFLOAD={0x258, 0x9, 0x0, 0x1, [@generic="5b01ceee357f07157da26554a4e6222aec4146ba20ccda110c7c40c3ed38520838048fc5c97eb16a29b772ce2702edac77319a897f6296fe780bfd9c88896fde3b4f5530c26b66348d6196f02af2503583383358480d452153d2e60f9df12c85fc7a0230114c667d5d4cd4b7a04e0c51", @nested={0x1e4, 0xd6, 0x0, 0x1, [@typed={0x4, 0x63}, @generic="4145ff0b47c8dfd219729c8abda66aeb3a6ef98893073870ad0ecbb06b360cd85a06612cf1b12fc084ee4b4811a5475a9a01775fa1a90c85f5a5990c611e6e451506ae45544ac2e74a16d9ae277e6fe55d9f76f2aee35380f02f2a8df8dbd66128277956c2f0fc7de0ed111f5946bd599a3d6fb11fbb366c52dc5c3862daf578c5fe55c8f5a8227b04f7da4973da9824107902fbea8d317fb6720ed81bd284d46ab641e6ddc926918f5d26bf86a1f3c024f7b9b3c60b06c28eb67d5fc03c1608fd8b63", @generic="b56a3ee44bb9d8458df068b73b891e946f1fdbd9b25cfafea88c19e0d148135c8a766b8bfd2b2b026f4b2098eb77715ee2239d8f14c93e3efa73c705f0ef8dc151b52dad724c7e97589134b1b633d1beed051f491c9a59d2e898b2d350c64e5c9c82a84096e8ffcdaae9c2c3baa8f9ae6d317b0324a9b16e33405b84835783861764c47ad8149a0278cde85cdfb813a22569b59742dfa81bf188b4f7225e3c9816bb7e727253703c3690c84525af8c0281d915024688ba105eb932164ed904028c175262a08b1afdd7da7d1c41239bb87c0465ca2000a47850a33327c91cbca80ac342d82eb011af", @nested={0x4, 0xf4}, @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x2}, @generic="cac0eec22f55bc5c22ab4880b06695fa7e370b0b25cdddcd0a", @typed={0x7, 0xbb, 0x0, 0x0, @str='\'-\x00'}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x13e5, 0x2, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @pid=r6}, @generic="008512062cf7ae80b6657508c4c94922dd897d14919629721660bcc305c7604b58", @nested={0x245, 0x89, 0x0, 0x1, [@generic="81bcec6e02aa8942ede02c62956e5e9fc71a3e78487e145dae43a91a77000f28faf36c66268ce810d7da2cc7d1d2b180c441bf95784e3eb08a7a79760cc30b37794f0b26b78d884e63aaabba071caa2a48af13768ca55913d3a858b847afddc83722756e1551bbe076db0fc4abd4c1ae25ec2cf0db1dd0564f1e78a185fa6ce065c93a86ceb37645", @typed={0x8, 0xee, 0x0, 0x0, @pid=r7}, @generic="88063f9b500a849f7d4ac4a282047de5bfc84b8eaaf2d667976eb36bea8c3692e4ec103b41b35cd5", @typed={0x8, 0xff, 0x0, 0x0, @pid=r8}, @generic="b9ff4874cf1201f8b004603221aa3366d75451d26cc4ceee3e08ec0afdc66042c67c3d00f8759a754dfc9400090422562a4ac0e5753894c8555e5d1e2063709d12a56508560f16caa66c65bfd663c378d91dffdb54d4538b95c788475088acf7e2a0c9537a0e4f238adcef9740b46463cc80ebcf55bf99ae8f12d0131b05f6fc46fb727474efb9a10a10512580c5ff6e93e6eaf179aeb8155b9b0b3371320c0d60140a7f765021df8f531d", @generic="51239ba5a349897ba7cc0f68a021d837e66ff94acd855a42bea38cb3f96a0c9734add41c695ba5a1340d50f5f7fee01311e687394e9858f43daa2bda7961ed7448eb5d75cabb12c7d21864f17b227a9c03b2021f46729e402694310c1b21ccf5f82a2a7b708a68a36c197c895643819ed52a2451b95987b6daaac4010040f4750f9792894b50259cdbf847c966dba151cadc6912b2e66667add3a3a77f5ea4336a9c94c0", @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x2}, @generic="3c10975952f612e07452f3a4b28b15b8d68b97d0df76", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x10000}, @nested={0x4, 0xd4}]}, @generic="d5d748bfaebcc42b2e7d571a308481b0e29688d98b164381889b2e9b79d47aa3f3b4ce465faa6533a5f07c23df2cc7314ab91851021435380af6c602210ebcc877aa89e3e0142f664f5af97ce6d21bb06a6104ffdad493c4d4a2736661471464bafc7d3277961e27", @generic="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", @generic="01287baa127ce8bb124f724c404779200f772bb2a3360d95b5b501bc3ca60b9015ef103e68c1db0bab8529a8252324c0cf75e11a7187db71baec396b7ca2165b24bdc4f694cce61a7b9f0041011c4478e3fa39bb1637190ca71ae18f5b160b7512a2e249a7ed15e70e248331bad8ab7b0e9c103ce28ef1e41303589cef5ed1ab100371a71292", @nested={0xc, 0xa1, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="efa0d953412d8d42b259c733a0b50dce8e2695a625af0e55d5d19c9354fbcafba1e85a21dac59ce45fa6c18890b4c03b20037b6b9017c9a0aba55ec00000c3874b7daee60ba1fbe00f2964d740b14392795ed7feb9a774cd60ff680434b61c4d9de93fd880eb", @typed={0x8, 0xdf, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r10}]}, 0x19d8}, 0x1, 0x0, 0x0, 0x810}, 0x4008881) getsockopt$auto(r0, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0) 2.823559006s ago: executing program 1 (id=4371): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/led\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000600)=""/210, 0xfffffffffffffe96) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x8, r0}) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7e) (async, rerun: 32) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000340)='nfsd\x00\xd7\xdd\x00\x00\x008\x00\x00\x00\xe2\x97#\xca\xb7\xbd\xcao\x86#\xc0\xb4\x16L\xa8\x91\x00\x00\x00\x00\x00\x00\x00$\xf4lhG\r\xe8\xf5\x00\x00\x01\x00\x00\x00\x00\x00\x10I\x88n8\xe7\xc1\xc6\x06\xe9V\xe1\x1e\xf9\xc7\xebq\x15\x8c0\x9b^\xe7\xcb\x98\xb7:\xfb\xfd;\x84\x8c\x9f@_\xab\xbeM\x86,\x04\x92\x9f\x14\xf0K:\xcbIJ\x83\xf2W1\xe6\x93\xeer\xedJ|\x8d\x9f\n\x87\x8d^\xd3\xba\xa0g\x83\x92\x04i\xfc\x02\x10rL\xac\xe9}T\xe1\xba\x91\xef\xbb\xa0', 0x7, 0x0) rmdir$auto(&(0x7f00000000c0)='}[,&*}\x00') (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) pwrite64$auto(r0, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a-@\xf0\xcd_\xdd*\xd1\x14^\xbe\xa2\xa1>\x0eY\x8f\x0f\x84\xcf}\xd90\x93D/3=\xef\xd6&\v\x9d\xc4\f\xbb]\"\x10\xbb\xef\t\xcbG+\xd53\r\xc1\x8c\x8c\x11\xce\xdd\x17!\xed\x99rS_\xfa\xe0_w-\xecyt\xb4w\a\xdc\xdb\x1c\x968p/\x03e\xd2?\xc4', 0x4e, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (rerun: 64) r3 = socket(0x2b, 0x1, 0x1) sendmmsg$auto(r3, 0x0, 0x7, 0x20020000) (async) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x0) (async) listmount$auto(0x0, &(0x7f0000000240)=0x8001, 0x8000, 0xdce) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x679, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2.699749679s ago: executing program 0 (id=4372): r0 = setfsgid$auto(0xee01) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0xa, 0x300) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000c800", @ANYRES16=r0, @ANYBLOB="6291d69f2bac38d131cb3655528047b382ae51a5411d91668cc7cf8d1f3d041907410b63caccf62b350f4123ab"], 0x30}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000) io_uring_register$auto(r2, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, &(0x7f0000000000)='^{\x00', 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_transaction_log_fops_(r3, &(0x7f0000000180)=""/50, 0x32) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) write$auto(r1, &(0x7f0000000080)='nfsd\x00', 0x100000000) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0119c4312d00ffdb608ff1a8847cbd9334b9efd5051aeedbd8445b8d207a9b616cbbe405"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 2.291059188s ago: executing program 3 (id=4373): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) (async, rerun: 64) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (rerun: 64) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00) (async) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) (async) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0xb, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xfc2, 0x26f, @inferred, @raw=0x9}) (rerun: 64) setresgid$auto(0x0, 0xffffffffffffffff, r2) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9]}, 0x4, 0x40000081) (async, rerun: 64) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) r5 = socket(0x10, 0x2, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) 2.118231189s ago: executing program 6 (id=4374): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143222, 0x0) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820181, 0x0) write$auto_nvram_misc_fops_nvram(r1, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) 1.72370802s ago: executing program 6 (id=4375): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x2062, 0x0) (rerun: 32) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/uptime\x00', 0x4d4400, 0x0) (async) r2 = getpid() bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000380)=@task_fd_query={r2, r1, 0x6, 0x63, 0x10000, 0x9, r0, 0x2}, 0x200) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.371092025s ago: executing program 6 (id=4376): memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) r0 = prctl$auto_PR_SET_MM_BRK(0x8, 0x7, 0xffffffffffffffff, 0x8, 0x8) bind$auto(r0, &(0x7f0000000000)=@llc={0x1a, 0x302, 0x7, 0x38, 0x7, 0x3, @multicast}, 0x6d0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) 1.370783024s ago: executing program 3 (id=4377): socket(0xa, 0x802, 0x3a) (async) socket(0xa, 0x802, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x2, 0x8, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x58) socketpair$auto(0x3, 0x80001, 0x7d, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x23, 0x1, 0x8, 0x805, 0x7fa, 0x10000, &(0x7f0000000480)}) (async) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x23, 0x1, 0x8, 0x805, 0x7fa, 0x10000, &(0x7f0000000480)}) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x52) (async) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x52) socket(0x2000000000000021, 0x2, 0x10000000000002) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x84) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video11\x00', 0x280, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video11\x00', 0x280, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r2, 0x80085617, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x4, 0xfffffff8) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) acct$auto(&(0x7f00000000c0)='/dev/video11\x00') bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @none, 0x4}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x1, 0x0, 0x9}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x1, 0x0, 0x9}, 0x54) 1.159286284s ago: executing program 6 (id=4378): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000bc0)={0x3, [{[0x7, 0x9000, 0x800, 0xfffffff8, 0x0, 0x1, 0xffffffff, 0x3]}, {[0x3, 0x8, 0x7, 0x3ff, 0x5, 0x40, 0xfffffffa, 0x7]}, {[0x6, 0x9, 0x127, 0x6, 0x7, 0x2, 0x3, 0x7]}], [{[0x8, 0x101, 0x7, 0x8, 0x6, 0x4, 0x10001, 0x1]}, {[0x100, 0x8, 0x41ae7084, 0x80, 0xb0, 0x0, 0x5, 0xca0]}, {[0x8, 0x401, 0x4, 0x101, 0x1, 0x1, 0x5df, 0x4a]}, {[0x9, 0x9, 0x1ff, 0x8, 0x80000000, 0x9, 0x81]}, {[0x200, 0xe, 0x7, 0x1, 0x80000000, 0xffff, 0x2, 0xfffffffb]}], [{0x60c7, 0x40, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7ff, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x4d, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x0, 0x1}, {0xea, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xf1d, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}, {0x8355, 0x73, 0x0, 0x1, 0x1}, {0x76f8a09a, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x0, 0x1}], [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x23d0, 0x1, 0x1, 0x1, 0x1}, {0x1fe, 0x101, 0x0, 0x0, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x81, 0x0, 0x0, 0x1}], 0x6, 0x401, 0x76, 0xaa4b, 0x3, 0x2, 0xb3, "9d20b74a1aced68b22e321b837399cbb", "bf6dbd401453c0de51a607143edab27f7c2b3a328fd113a6fdd154e4410911ce36d282fe93f6be63c877e9c681e82516"}) (async) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000bc0)={0x3, [{[0x7, 0x9000, 0x800, 0xfffffff8, 0x0, 0x1, 0xffffffff, 0x3]}, {[0x3, 0x8, 0x7, 0x3ff, 0x5, 0x40, 0xfffffffa, 0x7]}, {[0x6, 0x9, 0x127, 0x6, 0x7, 0x2, 0x3, 0x7]}], [{[0x8, 0x101, 0x7, 0x8, 0x6, 0x4, 0x10001, 0x1]}, {[0x100, 0x8, 0x41ae7084, 0x80, 0xb0, 0x0, 0x5, 0xca0]}, {[0x8, 0x401, 0x4, 0x101, 0x1, 0x1, 0x5df, 0x4a]}, {[0x9, 0x9, 0x1ff, 0x8, 0x80000000, 0x9, 0x81]}, {[0x200, 0xe, 0x7, 0x1, 0x80000000, 0xffff, 0x2, 0xfffffffb]}], [{0x60c7, 0x40, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x7ff, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x4d, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x0, 0x1}, {0xea, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xf1d, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}, {0x8355, 0x73, 0x0, 0x1, 0x1}, {0x76f8a09a, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x0, 0x1}], [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x23d0, 0x1, 0x1, 0x1, 0x1}, {0x1fe, 0x101, 0x0, 0x0, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x81, 0x0, 0x0, 0x1}], 0x6, 0x401, 0x76, 0xaa4b, 0x3, 0x2, 0xb3, "9d20b74a1aced68b22e321b837399cbb", "bf6dbd401453c0de51a607143edab27f7c2b3a328fd113a6fdd154e4410911ce36d282fe93f6be63c877e9c681e82516"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) write$auto(r1, &(0x7f0000000440)='Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9m\x1a\xab\xd5\xef\xc0\x04z\xd0I:\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1a}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcbP\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x19\xcb\xdd\x81\xbe\xdeL/\x06(\x03\x00\x00\x00\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1aC\xcaF\x00\x1f\xa2\x1d\xa2\xe2\xb7\xb5\xcc\xc3\xf55_\x95\x03\xc6\x84\xfe)I\xbf\xa1\x92\xe6\x8amP\xac\xa3\"\x05^\xfa\xb3\xc6\x9foy@l+y65\r\xaei\x00\x00\x00\x00\x00', 0x3ff) (async) write$auto(r1, &(0x7f0000000440)='Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9m\x1a\xab\xd5\xef\xc0\x04z\xd0I:\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1a}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcbP\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x19\xcb\xdd\x81\xbe\xdeL/\x06(\x03\x00\x00\x00\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1aC\xcaF\x00\x1f\xa2\x1d\xa2\xe2\xb7\xb5\xcc\xc3\xf55_\x95\x03\xc6\x84\xfe)I\xbf\xa1\x92\xe6\x8amP\xac\xa3\"\x05^\xfa\xb3\xc6\x9foy@l+y65\r\xaei\x00\x00\x00\x00\x00', 0x3ff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) (async) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000040)={0x10, 0x3}) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r4, r4, 0x0, 0x4000000000001) (async) sendfile$auto(r4, r4, 0x0, 0x4000000000001) read$auto(r3, 0x0, 0x20) (async) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x100082) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000009, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x7f, 0x800, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000004, 0xa, 0xfffffffffffffffd, 0x6, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x706, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffbfff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0x4, 0x40, 0x5, 0x7, 0x2, 0x3, 0x10000000008, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) write$auto(r0, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1ff) (async) write$auto(r0, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1ff) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) 286.240027ms ago: executing program 1 (id=4380): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202002, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) ioctl$auto_I2C_FUNCS(r0, 0x705, &(0x7f00000000c0)) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/wMaxPacketSize\x00', 0x9a2, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000480)=ANY=[@ANYBLOB="eb3d4e7b38aee54214860d3248611cd275da97c88460e37ef7dbbff265396b502cd76dc266bd40c98c202036f3765a5fd4e2c12a40aa3e9d8b1a36d8fd65c8f83a03c89f526cc0ccd444d1faa01158b6b0", @ANYRES16=r4, @ANYBLOB="010325bd7000ffdbdf250a00000008000200247b2c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) (async) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0xfff) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x62}, 0xf) (async) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='^\x00', @ANYBLOB="e4ac932c75e718d7"], 0x1ac}, 0x1, 0x0, 0x0, 0x100}, 0x40000) recvmmsg$auto(r9, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000440), 0x200}, 0x4, 0x0, 0xa, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100c2cbd7000ffdbdf252700000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0) sysfs$auto(0x2, 0x11, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0) (async) socket(0x10, 0x2, 0x4) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="149c1400", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x0, 0x10014, 0x8000, 0x2, 0x5f, 0x20000000000803, 0x2000000000000003}, 0x6f0) 55.171252ms ago: executing program 6 (id=4381): ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) (async) openat$auto_fops_u32_ro_(0xffffffffffffff9c, 0x0, 0x20082, 0x0) r0 = dup$auto(0xffffffffffffffff) ioctl$auto_SCSI_IOCTL_DOORLOCK(r0, 0x5380, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) (async) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, 0x0, 0x6a) (async) connect$auto(0x3, 0x0, 0x54) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40980, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) (async) newfstatat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8, 0x2, 0x0, 0xfc7, 0xee01, 0xee00, 0x0, 0x1, 0x9, 0x1000, 0x4, 0x5, 0x101, 0x1df, 0x6, 0x5, 0x4}, 0x7) r3 = setfsgid$auto(r2) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0xef18, 0x1, 0x9, 0x80, r1, r3, 0x0, 0xa, 0x3, 0xf, 0x2, 0x0, 0x1, 0x1, 0x1ff, 0x2ed4, 0x3ff}, 0xda8e) (async) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) fsopen$auto(0x0, 0x3) 0s ago: executing program 1 (id=4382): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r1, 0x8004b70a, 0x1) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r3, &(0x7f00000001c0)="b69c0eaafa990e0e39c64803de4ef7c80df051000000", 0x16) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x501480, 0x0) setsockopt$auto_SO_WIFI_STATUS(r5, 0x1ff, 0x29, &(0x7f0000000200)='-\x00', 0x8f) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) ioctl$auto_TUNSETNOCSUM(r5, 0x400454c8, &(0x7f0000000080)=0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYRES64=r7, @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250400000008000c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) ioctl$auto_SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r9, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) ioctl$auto(r9, 0x40045612, 0x38) kernel console output (not intermixed with test programs): /0x1c0 [ 955.392614][T22507] ? __pfx_tipc_sk_leave+0x10/0x10 [ 955.392642][T22507] ? __pfx_woken_wake_function+0x10/0x10 [ 955.392680][T22507] ? tipc_sk_filtering+0x47d/0x590 [ 955.392703][T22507] tipc_release+0x11f/0x1640 [ 955.392723][T22507] ? down_write+0x146/0x1f0 [ 955.392750][T22507] ? __pfx_down_write+0x10/0x10 [ 955.392778][T22507] ? __pfx_locks_remove_file+0x10/0x10 [ 955.392804][T22507] __sock_release+0xb3/0x260 [ 955.392837][T22507] ? __pfx_sock_close+0x10/0x10 [ 955.392869][T22507] sock_close+0x1c/0x30 [ 955.392900][T22507] __fput+0x3ff/0xb40 [ 955.392934][T22507] task_work_run+0x150/0x240 [ 955.392968][T22507] ? __pfx_task_work_run+0x10/0x10 [ 955.393007][T22507] exit_to_user_mode_loop+0x100/0x4b0 [ 955.393038][T22507] ? rcu_is_watching+0x12/0xc0 [ 955.393065][T22507] do_syscall_64+0x4ea/0xf80 [ 955.393093][T22507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.393115][T22507] RIP: 0033:0x7f1bcf39acb9 [ 955.393132][T22507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.393152][T22507] RSP: 002b:00007f1bcd5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 955.393172][T22507] RAX: 0000000000000000 RBX: 00007f1bcf615fa0 RCX: 00007f1bcf39acb9 [ 955.393186][T22507] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000002 [ 955.393198][T22507] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 955.393211][T22507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.393224][T22507] R13: 00007f1bcf616038 R14: 00007f1bcf615fa0 R15: 00007ffdd3561738 [ 955.393251][T22507] [ 955.393269][T22507] tipc: Withdrawal distribution failure [ 955.990723][T12712] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 955.990757][T12712] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 956.005883][T12712] bt_err_ratelimited: 155 callbacks suppressed [ 956.005901][T12712] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 956.014053][T12712] Bluetooth: hci1: adv larger than maximum supported [ 956.021384][T12712] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 956.028124][T12712] Bluetooth: hci1: adv larger than maximum supported [ 956.037918][T12712] Bluetooth: hci1: adv larger than maximum supported [ 956.045252][T12712] Bluetooth: hci1: Malformed LE Event: 0x0d [ 956.152870][T22511] zswap: compressor not available [ 956.471860][T22526] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3561'. [ 958.116388][T22536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 958.145781][T22536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 958.171252][T22536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 958.209748][T22536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 958.729523][T22555] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3568'. [ 959.464292][T16430] Bluetooth: hci0: command 0x0c1a tx timeout [ 960.180300][T12712] Bluetooth: hci1: command 0x0c1a tx timeout [ 960.186394][T16430] Bluetooth: hci3: command 0x0c1a tx timeout [ 960.261067][T16430] Bluetooth: hci2: command 0x0c1a tx timeout [ 960.402073][T22583] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 962.375269][T22608] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 964.012801][T22637] nvme_fcloop: unknown parameter or missing value '7' [ 964.749256][T22645] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 965.684429][T22659] sd 0:0:1:0: PR command failed: 1026 [ 965.690238][T22670] FAULT_INJECTION: forcing a failure. [ 965.690238][T22670] name failslab, interval 1, probability 0, space 0, times 0 [ 965.754184][T22656] binder: 22653:22656 ioctl 5380 2000000000c0 returned -22 [ 965.779307][T22670] CPU: 0 UID: 0 PID: 22670 Comm: syz.3.3596 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 965.779353][T22670] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 965.779365][T22670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 965.779378][T22670] Call Trace: [ 965.779385][T22670] [ 965.779394][T22670] dump_stack_lvl+0x100/0x190 [ 965.779423][T22670] should_fail_ex.cold+0x5/0xa [ 965.779458][T22670] should_failslab+0xc2/0x120 [ 965.779489][T22670] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 965.779519][T22670] ? __d_alloc+0x34/0xa80 [ 965.779550][T22670] ? __d_alloc+0x34/0xa80 [ 965.779573][T22670] __d_alloc+0x34/0xa80 [ 965.779601][T22670] d_alloc_pseudo+0x1c/0xc0 [ 965.779634][T22670] alloc_file_pseudo+0xcf/0x230 [ 965.779667][T22670] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 965.779703][T22670] ? alloc_fd+0x476/0x790 [ 965.779728][T22670] ? do_raw_spin_unlock+0x145/0x1e0 [ 965.779764][T22670] __anon_inode_getfile+0xe8/0x280 [ 965.779796][T22670] anon_inode_getfile_fmode+0x37/0xa0 [ 965.779826][T22670] __do_sys_fanotify_init+0xa79/0xe50 [ 965.779851][T22670] do_syscall_64+0xc9/0xf80 [ 965.779878][T22670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.779900][T22670] RIP: 0033:0x7f5d6339acb9 [ 965.779917][T22670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.779938][T22670] RSP: 002b:00007f5d641e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 965.779960][T22670] RAX: ffffffffffffffda RBX: 00007f5d63615fa0 RCX: 00007f5d6339acb9 [ 965.779974][T22670] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000200 [ 965.779987][T22670] RBP: 00007f5d63408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 965.779999][T22670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.780012][T22670] R13: 00007f5d63616038 R14: 00007f5d63615fa0 R15: 00007ffe038fd4b8 [ 965.780038][T22670] [ 966.201949][T22659] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 966.208778][T22659] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 966.729356][ T30] audit: type=1804 audit(4294968348.137:42): pid=22683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3601" name="/newroot/391/file0" dev="tmpfs" ino=2053 res=1 errno=0 [ 967.023658][T22688] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 970.165591][T22752] FAULT_INJECTION: forcing a failure. [ 970.165591][T22752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.251333][T22752] CPU: 0 UID: 0 PID: 22752 Comm: syz.3.3614 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 970.251384][T22752] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 970.251398][T22752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 970.251412][T22752] Call Trace: [ 970.251421][T22752] [ 970.251430][T22752] dump_stack_lvl+0x100/0x190 [ 970.251463][T22752] should_fail_ex.cold+0x5/0xa [ 970.251502][T22752] _copy_from_iter+0x1f4/0x1690 [ 970.251545][T22752] ? __pfx__copy_from_iter+0x10/0x10 [ 970.251580][T22752] ? rcu_is_watching+0x12/0xc0 [ 970.251604][T22752] ? trace_kmalloc+0x83/0xb0 [ 970.251636][T22752] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 970.251669][T22752] ? security_capable+0x80/0x260 [ 970.251698][T22752] ? proc_sys_call_handler+0x2c7/0x5a0 [ 970.251734][T22752] ? ns_capable_noaudit+0xb1/0x100 [ 970.251777][T22752] proc_sys_call_handler+0x3ed/0x5a0 [ 970.251811][T22752] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 970.251852][T22752] vfs_write+0x6ac/0x1070 [ 970.251878][T22752] ? __pfx_proc_sys_write+0x10/0x10 [ 970.251912][T22752] ? __pfx_vfs_write+0x10/0x10 [ 970.251934][T22752] ? find_held_lock+0x2b/0x80 [ 970.251971][T22752] ksys_write+0x12a/0x250 [ 970.251995][T22752] ? __pfx_ksys_write+0x10/0x10 [ 970.252026][T22752] do_syscall_64+0xc9/0xf80 [ 970.252054][T22752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.252076][T22752] RIP: 0033:0x7f5d6339acb9 [ 970.252093][T22752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.252114][T22752] RSP: 002b:00007f5d641e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 970.252134][T22752] RAX: ffffffffffffffda RBX: 00007f5d63615fa0 RCX: 00007f5d6339acb9 [ 970.252149][T22752] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 970.252162][T22752] RBP: 00007f5d641e6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.252175][T22752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.252188][T22752] R13: 00007f5d63616038 R14: 00007f5d63615fa0 R15: 00007ffe038fd4b8 [ 970.252216][T22752] [ 972.944901][T22798] FAULT_INJECTION: forcing a failure. [ 972.944901][T22798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.021034][T22798] CPU: 0 UID: 0 PID: 22798 Comm: syz.5.3625 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 973.021082][T22798] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 973.021094][T22798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 973.021108][T22798] Call Trace: [ 973.021115][T22798] [ 973.021124][T22798] dump_stack_lvl+0x100/0x190 [ 973.021154][T22798] should_fail_ex.cold+0x5/0xa [ 973.021189][T22798] _copy_to_user+0x32/0xd0 [ 973.021223][T22798] simple_read_from_buffer+0xcb/0x170 [ 973.021247][T22798] proc_fail_nth_read+0x1af/0x230 [ 973.021274][T22798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 973.021301][T22798] ? rw_verify_area+0xce/0x6d0 [ 973.021321][T22798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 973.021346][T22798] vfs_read+0x1e4/0xb30 [ 973.021374][T22798] ? __pfx_vfs_read+0x10/0x10 [ 973.021406][T22798] ? find_held_lock+0x2b/0x80 [ 973.021449][T22798] ? __fget_files+0x215/0x3d0 [ 973.021477][T22798] ? __fget_files+0x21f/0x3d0 [ 973.021507][T22798] ksys_read+0x12a/0x250 [ 973.021530][T22798] ? __pfx_ksys_read+0x10/0x10 [ 973.021561][T22798] do_syscall_64+0xc9/0xf80 [ 973.021588][T22798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.021610][T22798] RIP: 0033:0x7f7c9cf5b58e [ 973.021626][T22798] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 973.021646][T22798] RSP: 002b:00007f7c9de54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 973.021666][T22798] RAX: ffffffffffffffda RBX: 00007f7c9de556c0 RCX: 00007f7c9cf5b58e [ 973.021681][T22798] RDX: 000000000000000f RSI: 00007f7c9de550a0 RDI: 0000000000000005 [ 973.021694][T22798] RBP: 00007f7c9de55090 R08: 0000000000000000 R09: 0000000000000000 [ 973.021707][T22798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.021719][T22798] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 973.021747][T22798] [ 973.562528][T22804] binder: 22802:22804 ioctl c0306201 2000000000c0 returned -14 [ 973.881778][T22809] FAULT_INJECTION: forcing a failure. [ 973.881778][T22809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.986162][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.1.3629 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 973.986217][T22809] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 973.986232][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 973.986246][T22809] Call Trace: [ 973.986255][T22809] [ 973.986264][T22809] dump_stack_lvl+0x100/0x190 [ 973.986315][T22809] should_fail_ex.cold+0x5/0xa [ 973.986356][T22809] strncpy_from_user+0x3b/0x2d0 [ 973.986407][T22809] getname_flags.part.0+0x8f/0x540 [ 973.986447][T22809] getname_flags+0x93/0xf0 [ 973.986471][T22809] do_sys_openat2+0xc5/0x220 [ 973.986508][T22809] ? __pfx_do_sys_openat2+0x10/0x10 [ 973.986565][T22809] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 973.986603][T22809] __x64_sys_openat+0x12d/0x210 [ 973.986642][T22809] ? __pfx___x64_sys_openat+0x10/0x10 [ 973.986679][T22809] ? xfd_validate_state+0x129/0x190 [ 973.986728][T22809] do_syscall_64+0xc9/0xf80 [ 973.986761][T22809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.986786][T22809] RIP: 0033:0x7f7d6dd9acb9 [ 973.986805][T22809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.986830][T22809] RSP: 002b:00007f7d6ecc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 973.986854][T22809] RAX: ffffffffffffffda RBX: 00007f7d6e015fa0 RCX: 00007f7d6dd9acb9 [ 973.986871][T22809] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 973.986887][T22809] RBP: 00007f7d6de08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 973.986903][T22809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.986918][T22809] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff66c808d8 [ 973.986949][T22809] [ 975.032762][ T30] audit: type=1800 audit(4294968356.546:43): pid=22826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3632" name="dbroot" dev="configfs" ino=105483 res=0 errno=0 [ 975.823208][T22833] program syz.0.3634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 977.245853][ T30] audit: type=1800 audit(4294968358.777:44): pid=22876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3643" name="features" dev="configfs" ino=105766 res=0 errno=0 [ 977.329022][T22855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 977.337383][T22855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 977.360603][T22855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 977.391613][T22855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 978.734634][T16430] Bluetooth: hci0: command 0x0c1a tx timeout [ 978.800103][T22898] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 979.370053][T16430] Bluetooth: hci3: command 0x0c1a tx timeout [ 979.377235][T12712] Bluetooth: hci1: command 0x0c1a tx timeout [ 979.449600][T16430] Bluetooth: hci2: command 0x0c1a tx timeout [ 980.440611][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 980.826951][T22931] FAULT_INJECTION: forcing a failure. [ 980.826951][T22931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.896474][T22931] CPU: 0 UID: 0 PID: 22931 Comm: syz.5.3652 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 980.896534][T22931] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 980.896546][T22931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 980.896558][T22931] Call Trace: [ 980.896566][T22931] [ 980.896574][T22931] dump_stack_lvl+0x100/0x190 [ 980.896603][T22931] should_fail_ex.cold+0x5/0xa [ 980.896639][T22931] _copy_from_iter+0x1f4/0x1690 [ 980.896678][T22931] ? __pfx__copy_from_iter+0x10/0x10 [ 980.896766][T22931] ? rcu_is_watching+0x12/0xc0 [ 980.896789][T22931] ? trace_kmalloc+0x83/0xb0 [ 980.896818][T22931] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 980.896843][T22931] ? security_capable+0x80/0x260 [ 980.896869][T22931] ? proc_sys_call_handler+0x2c7/0x5a0 [ 980.896901][T22931] ? ns_capable_noaudit+0xb1/0x100 [ 980.896931][T22931] proc_sys_call_handler+0x3ed/0x5a0 [ 980.896976][T22931] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 980.897015][T22931] vfs_write+0x6ac/0x1070 [ 980.897038][T22931] ? __pfx_proc_sys_write+0x10/0x10 [ 980.897071][T22931] ? __pfx_vfs_write+0x10/0x10 [ 980.897091][T22931] ? find_held_lock+0x2b/0x80 [ 980.897126][T22931] ksys_write+0x12a/0x250 [ 980.897148][T22931] ? __pfx_ksys_write+0x10/0x10 [ 980.897177][T22931] do_syscall_64+0xc9/0xf80 [ 980.897204][T22931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.897224][T22931] RIP: 0033:0x7f7c9cf9acb9 [ 980.897241][T22931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.897261][T22931] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.897280][T22931] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 980.897293][T22931] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 980.897305][T22931] RBP: 00007f7c9de55090 R08: 0000000000000000 R09: 0000000000000000 [ 980.897318][T22931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.897329][T22931] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 980.897355][T22931] [ 981.559635][T22942] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 982.979733][T22949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.224663][T22949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.413627][T22949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.606034][T23005] vivid-007: ================= START STATUS ================= [ 985.624882][T23005] vivid-007: Generate PTS: true [ 985.634944][T23005] vivid-007: Generate SCR: true [ 985.645510][T23005] tpg source WxH: 320x240 (Y'CbCr) [ 985.701073][T23005] tpg field: 1 [ 985.735722][T23005] tpg crop: (0,0)/320x240 [ 985.798739][T23005] tpg compose: (0,0)/320x240 [ 985.887813][T23005] tpg colorspace: 8 [ 985.949351][T23005] tpg transfer function: 0/0 [ 985.986416][T23005] tpg Y'CbCr encoding: 0/0 [ 986.046007][T23005] tpg quantization: 0/0 [ 986.076822][T23005] tpg RGB range: 0/2 [ 986.092545][T23005] vivid-007: ================== END STATUS ================== [ 986.245842][T23017] nvme_fcloop: unknown parameter or missing value '7' [ 986.731051][T23035] FAULT_INJECTION: forcing a failure. [ 986.731051][T23035] name failslab, interval 1, probability 0, space 0, times 0 [ 986.781115][T23035] CPU: 0 UID: 0 PID: 23035 Comm: syz.0.3674 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 986.781176][T23035] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 986.781189][T23035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 986.781202][T23035] Call Trace: [ 986.781210][T23035] [ 986.781218][T23035] dump_stack_lvl+0x100/0x190 [ 986.781248][T23035] should_fail_ex.cold+0x5/0xa [ 986.781284][T23035] should_failslab+0xc2/0x120 [ 986.781314][T23035] kmem_cache_alloc_noprof+0x83/0x780 [ 986.781343][T23035] ? __pmd_alloc+0xbf/0x9c0 [ 986.781380][T23035] ? __pmd_alloc+0xbf/0x9c0 [ 986.781412][T23035] __pmd_alloc+0xbf/0x9c0 [ 986.781443][T23035] ? mt_find+0x687/0x8e0 [ 986.781473][T23035] huge_pte_alloc+0x5ee/0x730 [ 986.781511][T23035] hugetlb_fault+0x363/0x14f0 [ 986.781535][T23035] ? __pfx_hugetlb_fault+0x10/0x10 [ 986.781569][T23035] ? find_vma+0xbf/0x140 [ 986.781597][T23035] ? __pfx_find_vma+0x10/0x10 [ 986.781629][T23035] handle_mm_fault+0x5f1/0xa20 [ 986.781658][T23035] do_user_addr_fault+0x74c/0x12f0 [ 986.781689][T23035] exc_page_fault+0x6f/0xd0 [ 986.781715][T23035] asm_exc_page_fault+0x26/0x30 [ 986.781736][T23035] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 986.781769][T23035] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 986.781790][T23035] RSP: 0018:ffffc90004937b38 EFLAGS: 00050202 [ 986.781808][T23035] RAX: 0000000000000001 RBX: ffff888077ead820 RCX: 0000000000000009 [ 986.781822][T23035] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888077ead820 [ 986.781835][T23035] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100efd5b05 [ 986.781849][T23035] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004937d88 [ 986.781862][T23035] R13: 0000000000000000 R14: 0000000000000009 R15: 0000000000000000 [ 986.781889][T23035] _copy_from_iter+0x355/0x1690 [ 986.781930][T23035] ? __pfx__copy_from_iter+0x10/0x10 [ 986.781961][T23035] ? rcu_is_watching+0x12/0xc0 [ 986.781982][T23035] ? trace_kmalloc+0x83/0xb0 [ 986.782011][T23035] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 986.782036][T23035] ? security_capable+0x80/0x260 [ 986.782062][T23035] ? proc_sys_call_handler+0x2c7/0x5a0 [ 986.782094][T23035] ? ns_capable_noaudit+0xb1/0x100 [ 986.782134][T23035] proc_sys_call_handler+0x3ed/0x5a0 [ 986.782209][T23035] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 986.782255][T23035] vfs_write+0x6ac/0x1070 [ 986.782283][T23035] ? __pfx_proc_sys_write+0x10/0x10 [ 986.782321][T23035] ? __pfx_vfs_write+0x10/0x10 [ 986.782345][T23035] ? find_held_lock+0x2b/0x80 [ 986.782388][T23035] ksys_write+0x12a/0x250 [ 986.782414][T23035] ? __pfx_ksys_write+0x10/0x10 [ 986.782450][T23035] do_syscall_64+0xc9/0xf80 [ 986.782481][T23035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.782505][T23035] RIP: 0033:0x7f1bcf39acb9 [ 986.782523][T23035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.782546][T23035] RSP: 002b:00007f1bcd5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 986.782567][T23035] RAX: ffffffffffffffda RBX: 00007f1bcf615fa0 RCX: 00007f1bcf39acb9 [ 986.782583][T23035] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 986.782598][T23035] RBP: 00007f1bcd5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 986.782613][T23035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.782627][T23035] R13: 00007f1bcf616038 R14: 00007f1bcf615fa0 R15: 00007ffdd3561738 [ 986.782659][T23035] [ 987.220359][T23038] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 988.179180][T23066] FAULT_INJECTION: forcing a failure. [ 988.179180][T23066] name failslab, interval 1, probability 0, space 0, times 0 [ 988.272748][T23066] CPU: 0 UID: 0 PID: 23066 Comm: syz.5.3682 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 988.272796][T23066] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 988.272809][T23066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 988.272823][T23066] Call Trace: [ 988.272830][T23066] [ 988.272839][T23066] dump_stack_lvl+0x100/0x190 [ 988.272869][T23066] should_fail_ex.cold+0x5/0xa [ 988.272917][T23066] should_failslab+0xc2/0x120 [ 988.272947][T23066] __kmalloc_cache_noprof+0x80/0x810 [ 988.272968][T23066] ? trace_kmem_cache_alloc+0x80/0xb0 [ 988.273005][T23066] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 988.273033][T23066] ? copy_net_ns+0x135/0x7c0 [ 988.273058][T23066] ? copy_net_ns+0x135/0x7c0 [ 988.273096][T23066] copy_net_ns+0x135/0x7c0 [ 988.273116][T23066] ? copy_cgroup_ns+0x71/0x970 [ 988.273147][T23066] create_new_namespaces+0x3ea/0xab0 [ 988.273179][T23066] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 988.273207][T23066] ksys_unshare+0x455/0xab0 [ 988.273241][T23066] ? __pfx_ksys_unshare+0x10/0x10 [ 988.273273][T23066] ? xfd_validate_state+0x129/0x190 [ 988.273316][T23066] __x64_sys_unshare+0x31/0x40 [ 988.273347][T23066] do_syscall_64+0xc9/0xf80 [ 988.273376][T23066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.273399][T23066] RIP: 0033:0x7f7c9cf9acb9 [ 988.273417][T23066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.273439][T23066] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 988.273460][T23066] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 988.273475][T23066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 988.273489][T23066] RBP: 00007f7c9d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 988.273503][T23066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.273516][T23066] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 988.273549][T23066] [ 988.966568][T23079] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 989.041498][T23083] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 989.773680][T23107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3688'. [ 989.811453][T23108] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 989.889638][T23107] team0: Port device team_slave_1 removed [ 990.322094][T23122] ubi31: attaching mtd0 [ 990.351176][T23122] ubi31: scanning is finished [ 990.365133][T23122] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 990.514713][T23122] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 990.667421][T23127] mkiss: ax0: crc mode is auto. [ 990.715877][T23130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 990.780196][T23131] Line length is too long: Should be less than 4094 [ 991.228950][T16430] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 991.239193][T12712] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 991.529813][T23155] vhci_hcd vhci_hcd.0: invalid port number 16 [ 991.681662][T23159] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 991.731334][T23162] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 992.250953][T23177] netlink: 'syz.3.3707': attribute type 1 has an invalid length. [ 992.539253][T23188] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 992.718324][T23186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 992.810751][T23186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 992.889644][T23186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 992.974041][T23186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 993.066366][T23186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 993.150155][T23186] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3710'. [ 993.190126][T23204] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3713'. [ 993.607370][T23190] kexec: Could not allocate control_code_buffer [ 994.333660][T23215] binder: 23214:23215 ioctl c018620c 0 returned -1 [ 995.215489][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.228094][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.857361][T23265] mkiss: ax0: crc mode is auto. [ 996.938611][T23268] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 999.133270][T23310] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 999.754990][T23324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 999.793601][T23324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 999.861292][T23324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 999.923401][T23324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1001.656986][T12712] Bluetooth: hci0: command 0x0c1a tx timeout [ 1001.815187][T12712] Bluetooth: hci1: command 0x0c1a tx timeout [ 1001.894435][T12712] Bluetooth: hci3: command 0x0c1a tx timeout [ 1001.973753][T12712] Bluetooth: hci2: command 0x0c1a tx timeout [ 1002.243911][T23384] bridge0: port 3(batadv0) entered blocking state [ 1002.250412][T23384] bridge0: port 3(batadv0) entered disabled state [ 1002.302276][T23386] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1002.334257][T23389] [U] [ 1002.337072][T23389] [U] [ 1002.339796][T23389] [U] [ 1002.342491][T23389] [U] [ 1002.348051][T23384] batadv0: entered allmulticast mode [ 1002.379884][T23384] batadv0: entered promiscuous mode [ 1002.411956][T23389] [U] [ 1002.414700][T23389] [U] 6@ &]D3أ96gLbgs(J5YaLkβYm%|*>+O9+$7ttZdJnܷ͐k,& 1壔΃0 E& [ 1002.427650][T23389] [U] 1ڹ{>!|SV=¡8)zx%r@Gb̍UZSl~G!`&Qhk;Th8k]eJ$>tGk$e'3fG,?ǨBMv_`W̃[kEeulEMJZth2k)P-`j|=Hδ_8 3\} 2T%kOr hbz:.)Mۉ0b*F굻vR s ܡyPPNqp53Ħbn,RHٞ"iN#w³ 2[sU{V#Q+?!߬߳y^$ G]vl@/YG [ 1002.467168][T23389] [U] |}%l$%d؛p8|4w K8&mc j [ 1002.474389][T23389] [U] Ȥ&2ؘ9#l4AH{ͨZ: [ 1002.479674][T23389] [U] $od(\CFk|$@ A`X$-H9m8`3F\ǺaC}Lla M[n1HLwkPe [ 1002.491392][T23389] [U] D}pdQ`ȯ)1aawa,GGN [ 1002.498507][T23389] [U] q 6DhVRUBw+f*]NNfgRp%kwXDq3M嬻]5u@Ȟ8B(c#uf Ԯi'd)YF)ʋ<.U4tf3|s) [ 1002.513960][T23389] [U] (V~:x|/йnB~Z0A J=@?Oe|mz^R((ʻ06ࡆ [ 1002.524039][T23389] [U] ?בZD3A&Y_:^))Ę*]g`1h ~P AG$^5u [ 1002.533241][T23389] [U] Aa+oYÐ4Tc_G/xu5ml懘Mך| E{W 0l#ƠL[V>s [ 1002.543837][T23389] [U] +ֽOJ^AƕX,/er_߸ 8WK<l8u%tl [ 1002.551560][T23389] [U] GQ 7 [ 1003.664977][T23410] nfs: Unknown parameter 'nl802154' [ 1003.773350][T23389] [U] $/@T\g"+G9fV%Kމ18% $Aӿ7NPHȈ"Ǡ]`^J<22 +zՖD+hsn3}H&_PQ/H:]qJWYlCQB,gQy_ ";qa£8PX2d:zI뒡5J7&=-ůI@Z{_E1+mbZM8mQ} MM jP \_LK|2 [ 1003.801866][T23389] [U] 1}gcr%I9&RV"+^d鰖5rop)⬗ [ 1003.810288][T23389] [U] `-ZWq*,{XT%%O [ 1003.858583][T23389] [U] v/ V?Ajkt.sf] YPM&wۥ}rxwR^CwB jaSRy((SOq [ 1003.869160][T23389] [U] űݫ`^&;f_Y#_^/ [ 1003.875571][T23389] [U] 5 [ 1003.878334][T23389] [U] JTP\C}Ih%ɕ=5W+%SF?U{1`XfU,C|VhP [ 1003.886997][T23389] [U] guH1uސ#q0-]~%7 [ 1003.891932][T23389] [U] jBװ8Dp{ [ 1003.895834][T23389] [U] HA򄊡@KHk5*E{=Ș-з EE Xe$b^5U= ᾃ NF3ov~E,D]ܒQW!k揄^&gQcWyx͇I PJUsV3<G0 Xg/ S&' %+XZZAr,E [ 1003.914239][T23389] [U] nByt2yN}0$3Z$m;ujQ [ 1003.919959][T23389] [U] fA؍3^äi+2m5#aײ~2&FRlK [ 1004.157092][T23422] __nla_validate_parse: 21 callbacks suppressed [ 1004.157110][T23422] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1004.960773][T23389] [U] a$-O"3<328HxqX* {_:yTp_NSy}E'F4;;ޗÛxKޔXGoFeelSa$_.G]T)}HT A|,p)L40MA#ݢ8%raSiuBlG7]Oc6ţ mmw_݌QEc$ӷ#@\8 w/ϝbn,2Ƞ|LAzU4G5c@8R[Gon?hh5&arw`!UC·}"~1 [ 1005.255114][T23433] usbip-vudc usbip-vudc.0: gadget not bound [ 1005.480692][T23435] sd 0:0:1:0: PR command failed: 1026 [ 1005.493998][T23435] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1005.564802][T23435] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1005.898001][T23449] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.936090][T23449] binder: 23447:23449 ioctl 4018620d 9 returned -16 [ 1006.338585][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1006.943632][T23479] Process accounting resumed [ 1007.341853][T23490] futex_wake_op: syz.1.3775 tries to shift op by -2048; fix this program [ 1007.380888][T23490] futex_wake_op: syz.1.3775 tries to shift op by -2048; fix this program [ 1007.427683][T23492] ubi1: attaching mtd0 [ 1007.466570][T23492] ubi1: scanning is finished [ 1007.484389][T23492] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 1007.700566][T23492] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1008.238534][T23508] misc userio: The device must be registered before sending interrupts [ 1009.202165][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1009.306827][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1009.928348][T23550] FAULT_INJECTION: forcing a failure. [ 1009.928348][T23550] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.007777][T23550] CPU: 0 UID: 0 PID: 23550 Comm: syz.0.3788 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1010.007823][T23550] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1010.007835][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1010.007848][T23550] Call Trace: [ 1010.007854][T23550] [ 1010.007862][T23550] dump_stack_lvl+0x100/0x190 [ 1010.007890][T23550] should_fail_ex.cold+0x5/0xa [ 1010.007923][T23550] should_failslab+0xc2/0x120 [ 1010.007952][T23550] kmem_cache_alloc_noprof+0x83/0x780 [ 1010.007988][T23550] ? alloc_empty_file+0x55/0x1c0 [ 1010.008021][T23550] ? alloc_empty_file+0x55/0x1c0 [ 1010.008048][T23550] alloc_empty_file+0x55/0x1c0 [ 1010.008078][T23550] path_openat+0xe8/0x3120 [ 1010.008100][T23550] ? getname_flags+0x93/0xf0 [ 1010.008119][T23550] ? do_sys_openat2+0xc5/0x220 [ 1010.008147][T23550] ? __x64_sys_openat+0x12d/0x210 [ 1010.008177][T23550] ? do_syscall_64+0xc9/0xf80 [ 1010.008200][T23550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.008226][T23550] ? __pfx_path_openat+0x10/0x10 [ 1010.008258][T23550] do_filp_open+0x1f7/0x420 [ 1010.008284][T23550] ? __pfx_do_filp_open+0x10/0x10 [ 1010.008324][T23550] ? _raw_spin_unlock+0x28/0x50 [ 1010.008343][T23550] ? alloc_fd+0x476/0x790 [ 1010.008373][T23550] do_sys_openat2+0x12e/0x220 [ 1010.008403][T23550] ? __pfx_do_sys_openat2+0x10/0x10 [ 1010.008434][T23550] ? find_held_lock+0x2b/0x80 [ 1010.008460][T23550] __x64_sys_openat+0x12d/0x210 [ 1010.008491][T23550] ? __pfx___x64_sys_openat+0x10/0x10 [ 1010.008521][T23550] ? xfd_validate_state+0x129/0x190 [ 1010.008561][T23550] do_syscall_64+0xc9/0xf80 [ 1010.008586][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.008606][T23550] RIP: 0033:0x7f1bcf39acb9 [ 1010.008622][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.008642][T23550] RSP: 002b:00007f1bcd5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1010.008662][T23550] RAX: ffffffffffffffda RBX: 00007f1bcf616180 RCX: 00007f1bcf39acb9 [ 1010.008676][T23550] RDX: 0000000000043102 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1010.008689][T23550] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1010.008702][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.008714][T23550] R13: 00007f1bcf616218 R14: 00007f1bcf616180 R15: 00007ffdd3561738 [ 1010.008740][T23550] [ 1010.254038][T23552] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1010.557965][T23556] random: crng reseeded on system resumption [ 1011.118410][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'. [ 1011.155414][T23563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'. [ 1012.903219][ T30] audit: type=1800 audit(4295007097.618:45): pid=23606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3800" name="dbroot" dev="configfs" ino=109835 res=0 errno=0 [ 1014.117378][T23637] zswap: compressor not available [ 1014.377267][T23650] FAULT_INJECTION: forcing a failure. [ 1014.377267][T23650] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.598380][T23650] CPU: 0 UID: 0 PID: 23650 Comm: syz.5.3812 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1014.598427][T23650] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1014.598440][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1014.598453][T23650] Call Trace: [ 1014.598461][T23650] [ 1014.598469][T23650] dump_stack_lvl+0x100/0x190 [ 1014.598507][T23650] should_fail_ex.cold+0x5/0xa [ 1014.598542][T23650] should_failslab+0xc2/0x120 [ 1014.598573][T23650] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1014.598608][T23650] ? shmem_alloc_inode+0x25/0x50 [ 1014.598643][T23650] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1014.598674][T23650] ? shmem_alloc_inode+0x25/0x50 [ 1014.598703][T23650] shmem_alloc_inode+0x25/0x50 [ 1014.598734][T23650] alloc_inode+0x68/0x250 [ 1014.598766][T23650] new_inode+0x22/0x1c0 [ 1014.598799][T23650] shmem_get_inode+0x197/0xf30 [ 1014.598824][T23650] shmem_mknod+0x1a2/0x3b0 [ 1014.598847][T23650] vfs_mknod+0x6d9/0xa90 [ 1014.598887][T23650] do_mknodat+0x5f2/0x7a0 [ 1014.598911][T23650] ? __pfx_do_mknodat+0x10/0x10 [ 1014.598932][T23650] ? strncpy_from_user+0x19d/0x2d0 [ 1014.598966][T23650] ? getname_flags.part.0+0x1c5/0x540 [ 1014.599001][T23650] __x64_sys_mknod+0x118/0x170 [ 1014.599029][T23650] do_syscall_64+0xc9/0xf80 [ 1014.599069][T23650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.599089][T23650] RIP: 0033:0x7f7c9cf9acb9 [ 1014.599104][T23650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.599124][T23650] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1014.599143][T23650] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 1014.599175][T23650] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1014.599188][T23650] RBP: 00007f7c9d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1014.599214][T23650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.599226][T23650] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 1014.599252][T23650] [ 1015.083508][T23673] binder: 23671:23673 ioctl c018620c 0 returned -1 [ 1015.159416][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3816'. [ 1016.505562][T23691] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1016.538300][T23689] FAULT_INJECTION: forcing a failure. [ 1016.538300][T23689] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.741815][T23689] CPU: 0 UID: 0 PID: 23689 Comm: syz.1.3818 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1016.741863][T23689] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1016.741875][T23689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1016.741889][T23689] Call Trace: [ 1016.741896][T23689] [ 1016.741904][T23689] dump_stack_lvl+0x100/0x190 [ 1016.741933][T23689] should_fail_ex.cold+0x5/0xa [ 1016.741968][T23689] should_failslab+0xc2/0x120 [ 1016.741998][T23689] __kmalloc_cache_noprof+0x80/0x810 [ 1016.742021][T23689] ? alloc_pipe_info+0x10e/0x590 [ 1016.742046][T23689] ? evm_inode_alloc_security+0x44/0xc0 [ 1016.742078][T23689] ? alloc_pipe_info+0x10e/0x590 [ 1016.742103][T23689] alloc_pipe_info+0x10e/0x590 [ 1016.742131][T23689] create_pipe_files+0x8c/0x970 [ 1016.742161][T23689] do_pipe2+0xbd/0x1e0 [ 1016.742186][T23689] ? __pfx_do_pipe2+0x10/0x10 [ 1016.742212][T23689] ? xfd_validate_state+0x129/0x190 [ 1016.742271][T23689] __x64_sys_pipe+0x33/0x50 [ 1016.742314][T23689] do_syscall_64+0xc9/0xf80 [ 1016.742363][T23689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.742387][T23689] RIP: 0033:0x7f7d6dd9acb9 [ 1016.742406][T23689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.742429][T23689] RSP: 002b:00007f7d6ec5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1016.742452][T23689] RAX: ffffffffffffffda RBX: 00007f7d6e016270 RCX: 00007f7d6dd9acb9 [ 1016.742468][T23689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.742482][T23689] RBP: 00007f7d6de08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1016.742496][T23689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.742511][T23689] R13: 00007f7d6e016308 R14: 00007f7d6e016270 R15: 00007fff66c808d8 [ 1016.742541][T23689] [ 1017.307561][T23704] FAULT_INJECTION: forcing a failure. [ 1017.307561][T23704] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.349309][T23704] CPU: 0 UID: 0 PID: 23704 Comm: syz.0.3822 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1017.349354][T23704] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1017.349367][T23704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1017.349397][T23704] Call Trace: [ 1017.349405][T23704] [ 1017.349413][T23704] dump_stack_lvl+0x100/0x190 [ 1017.349445][T23704] should_fail_ex.cold+0x5/0xa [ 1017.349481][T23704] should_failslab+0xc2/0x120 [ 1017.349513][T23704] kmem_cache_alloc_noprof+0x83/0x780 [ 1017.349543][T23704] ? __x64_sys_openat+0x12d/0x210 [ 1017.349577][T23704] ? do_syscall_64+0xc9/0xf80 [ 1017.349603][T23704] ? fuse_request_alloc+0x22/0x200 [ 1017.349641][T23704] ? fuse_request_alloc+0x22/0x200 [ 1017.349673][T23704] fuse_request_alloc+0x22/0x200 [ 1017.349705][T23704] fuse_get_req+0x74a/0xfe0 [ 1017.349745][T23704] ? __pfx_fuse_get_req+0x10/0x10 [ 1017.349792][T23704] fuse_simple_background+0x464/0x5e0 [ 1017.349826][T23704] ? kasan_save_track+0x14/0x30 [ 1017.349856][T23704] cuse_channel_open+0x561/0x7f0 [ 1017.349883][T23704] ? __pfx_cuse_channel_open+0x10/0x10 [ 1017.349910][T23704] misc_open+0x26d/0x450 [ 1017.349936][T23704] ? __pfx_misc_open+0x10/0x10 [ 1017.349961][T23704] chrdev_open+0x234/0x6a0 [ 1017.349988][T23704] ? __pfx_apparmor_file_open+0x10/0x10 [ 1017.350018][T23704] ? __pfx_chrdev_open+0x10/0x10 [ 1017.350047][T23704] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1017.350079][T23704] do_dentry_open+0x73e/0x1570 [ 1017.350105][T23704] ? __pfx_chrdev_open+0x10/0x10 [ 1017.350133][T23704] ? security_inode_permission+0xbf/0x250 [ 1017.350171][T23704] vfs_open+0x82/0x3f0 [ 1017.350206][T23704] path_openat+0x21dc/0x3120 [ 1017.350242][T23704] ? __pfx_path_openat+0x10/0x10 [ 1017.350282][T23704] do_filp_open+0x1f7/0x420 [ 1017.350311][T23704] ? __pfx_do_filp_open+0x10/0x10 [ 1017.350356][T23704] ? _raw_spin_unlock+0x28/0x50 [ 1017.350378][T23704] ? alloc_fd+0x476/0x790 [ 1017.350410][T23704] do_sys_openat2+0x12e/0x220 [ 1017.350444][T23704] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.350480][T23704] ? __fget_files+0x21f/0x3d0 [ 1017.350510][T23704] __x64_sys_openat+0x12d/0x210 [ 1017.350545][T23704] ? __pfx___x64_sys_openat+0x10/0x10 [ 1017.350578][T23704] ? xfd_validate_state+0x129/0x190 [ 1017.350623][T23704] do_syscall_64+0xc9/0xf80 [ 1017.350651][T23704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.350674][T23704] RIP: 0033:0x7f1bcf39acb9 [ 1017.350692][T23704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.350714][T23704] RSP: 002b:00007f1bcd5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1017.350736][T23704] RAX: ffffffffffffffda RBX: 00007f1bcf616090 RCX: 00007f1bcf39acb9 [ 1017.350751][T23704] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1017.350766][T23704] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1017.350791][T23704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.350804][T23704] R13: 00007f1bcf616128 R14: 00007f1bcf616090 R15: 00007ffdd3561738 [ 1017.350831][T23704] [ 1017.801499][T23714] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1017.972489][T23721] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1018.114445][T23723] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1018.132350][T23723] vhci_hcd vhci_hcd.2: invalid port number 16 [ 1018.690431][T23734] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.33554432.1), cmd(16) [ 1019.820564][T12712] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1019.937299][T23764] FAULT_INJECTION: forcing a failure. [ 1019.937299][T23764] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.994411][T23764] CPU: 0 UID: 0 PID: 23764 Comm: syz.0.3836 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1019.994458][T23764] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1019.994469][T23764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1019.994482][T23764] Call Trace: [ 1019.994489][T23764] [ 1019.994497][T23764] dump_stack_lvl+0x100/0x190 [ 1019.994526][T23764] should_fail_ex.cold+0x5/0xa [ 1019.994561][T23764] should_failslab+0xc2/0x120 [ 1019.994591][T23764] kmem_cache_alloc_noprof+0x83/0x780 [ 1019.994619][T23764] ? __pfx_map_id_range_down+0x10/0x10 [ 1019.994640][T23764] ? security_inode_alloc+0x3b/0x2c0 [ 1019.994673][T23764] ? security_inode_alloc+0x3b/0x2c0 [ 1019.994701][T23764] security_inode_alloc+0x3b/0x2c0 [ 1019.994730][T23764] inode_init_always_gfp+0xced/0x1040 [ 1019.994758][T23764] alloc_inode+0x8e/0x250 [ 1019.994789][T23764] sock_alloc+0x44/0x280 [ 1019.994807][T23764] ? security_socket_create+0x7f/0x250 [ 1019.994835][T23764] sock_create_lite+0x82/0x120 [ 1019.994857][T23764] __netlink_kernel_create+0xbd/0x750 [ 1019.994892][T23764] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1019.994933][T23764] uevent_net_init+0xf8/0x330 [ 1019.994965][T23764] ? __pfx_uevent_net_init+0x10/0x10 [ 1019.994994][T23764] ? rcu_is_watching+0x12/0xc0 [ 1019.995014][T23764] ? ops_init+0x77/0x5f0 [ 1019.995053][T23764] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1019.995091][T23764] ? __pfx_uevent_net_init+0x10/0x10 [ 1019.995121][T23764] ops_init+0x1e2/0x5f0 [ 1019.995156][T23764] setup_net+0x118/0x3a0 [ 1019.995175][T23764] ? __pfx_setup_net+0x10/0x10 [ 1019.995209][T23764] ? lockdep_init_map_type+0x5c/0x250 [ 1019.995258][T23764] ? mutex_init_lockep+0x110/0x150 [ 1019.995311][T23764] copy_net_ns+0x46f/0x7c0 [ 1019.995339][T23764] create_new_namespaces+0x3ea/0xab0 [ 1019.995374][T23764] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1019.995405][T23764] ksys_unshare+0x455/0xab0 [ 1019.995441][T23764] ? __pfx_ksys_unshare+0x10/0x10 [ 1019.995482][T23764] ? xfd_validate_state+0x129/0x190 [ 1019.995529][T23764] __x64_sys_unshare+0x31/0x40 [ 1019.995564][T23764] do_syscall_64+0xc9/0xf80 [ 1019.995596][T23764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.995621][T23764] RIP: 0033:0x7f1bcf39acb9 [ 1019.995641][T23764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.995665][T23764] RSP: 002b:00007f1bcd5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1019.995689][T23764] RAX: ffffffffffffffda RBX: 00007f1bcf615fa0 RCX: 00007f1bcf39acb9 [ 1019.995706][T23764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1019.995721][T23764] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1019.995736][T23764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.995751][T23764] R13: 00007f1bcf616038 R14: 00007f1bcf615fa0 R15: 00007ffdd3561738 [ 1019.995783][T23764] [ 1019.995814][T23764] kobject_uevent: unable to create netlink socket! [ 1021.215600][T23769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1021.224823][T23769] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1021.299908][T23769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1021.339965][T23769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.370447][T23769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1022.587658][T12712] Bluetooth: hci0: command 0x0c1a tx timeout [ 1022.614926][T23836] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1023.303473][T12712] Bluetooth: hci1: command 0x0c1a tx timeout [ 1023.324128][T23851] FAULT_INJECTION: forcing a failure. [ 1023.324128][T23851] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.389119][T12712] Bluetooth: hci2: command 0x0c1a tx timeout [ 1023.397781][T16430] Bluetooth: hci3: command 0x0c1a tx timeout [ 1023.450637][T23851] CPU: 0 UID: 0 PID: 23851 Comm: syz.0.3850 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1023.450699][T23851] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1023.450714][T23851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1023.450741][T23851] Call Trace: [ 1023.450749][T23851] [ 1023.450758][T23851] dump_stack_lvl+0x100/0x190 [ 1023.450801][T23851] should_fail_ex.cold+0x5/0xa [ 1023.450838][T23851] should_failslab+0xc2/0x120 [ 1023.450885][T23851] kmem_cache_alloc_noprof+0x83/0x780 [ 1023.450913][T23851] ? alloc_vfsmnt+0x23/0x6b0 [ 1023.450947][T23851] ? alloc_vfsmnt+0x23/0x6b0 [ 1023.450976][T23851] alloc_vfsmnt+0x23/0x6b0 [ 1023.451004][T23851] ? __pfx___might_resched+0x10/0x10 [ 1023.451039][T23851] clone_mnt+0x4b/0x930 [ 1023.451060][T23851] copy_tree+0xfc/0xbf0 [ 1023.451083][T23851] ? __pfx_down_write+0x10/0x10 [ 1023.451117][T23851] copy_mnt_ns+0x2c7/0xc40 [ 1023.451143][T23851] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 1023.451171][T23851] ? create_new_namespaces+0x30/0xab0 [ 1023.451200][T23851] create_new_namespaces+0xd3/0xab0 [ 1023.451223][T23851] ? bpf_lsm_capable+0x9/0x10 [ 1023.451240][T23851] ? security_capable+0x80/0x260 [ 1023.451269][T23851] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1023.451295][T23851] ksys_unshare+0x455/0xab0 [ 1023.451327][T23851] ? __pfx_ksys_unshare+0x10/0x10 [ 1023.451357][T23851] ? xfd_validate_state+0x129/0x190 [ 1023.451419][T23851] __x64_sys_unshare+0x31/0x40 [ 1023.451450][T23851] do_syscall_64+0xc9/0xf80 [ 1023.451479][T23851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.451501][T23851] RIP: 0033:0x7f1bcf39acb9 [ 1023.451519][T23851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.451540][T23851] RSP: 002b:00007f1bcd5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1023.451562][T23851] RAX: ffffffffffffffda RBX: 00007f1bcf615fa0 RCX: 00007f1bcf39acb9 [ 1023.451577][T23851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1023.451590][T23851] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1023.451604][T23851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.451618][T23851] R13: 00007f1bcf616038 R14: 00007f1bcf615fa0 R15: 00007ffdd3561738 [ 1023.451646][T23851] [ 1024.657592][T12712] Bluetooth: hci0: command 0x0c1a tx timeout [ 1025.402969][T23893] random: crng reseeded on system resumption [ 1025.548540][T23896] ptrace attach of "./syz-executor exec"[14829] was attempted by ""[23896] [ 1025.647625][T23904] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1028.180921][T23983] FAULT_INJECTION: forcing a failure. [ 1028.180921][T23983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.269960][T23984] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3874'. [ 1028.399817][T23983] CPU: 0 UID: 0 PID: 23983 Comm: syz.5.3874 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1028.399862][T23983] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1028.399873][T23983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1028.399886][T23983] Call Trace: [ 1028.399893][T23983] [ 1028.399901][T23983] dump_stack_lvl+0x100/0x190 [ 1028.399928][T23983] should_fail_ex.cold+0x5/0xa [ 1028.399961][T23983] _copy_to_user+0x32/0xd0 [ 1028.399997][T23983] put_user_ifreq+0x72/0xc0 [ 1028.400017][T23983] sock_do_ioctl+0x233/0x280 [ 1028.400037][T23983] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1028.400056][T23983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.400082][T23983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1028.400120][T23983] sock_ioctl+0x599/0x6b0 [ 1028.400143][T23983] ? __pfx_sock_ioctl+0x10/0x10 [ 1028.400171][T23983] ? __fget_files+0x21f/0x3d0 [ 1028.400196][T23983] ? __pfx_sock_ioctl+0x10/0x10 [ 1028.400227][T23983] __x64_sys_ioctl+0x18e/0x210 [ 1028.400260][T23983] do_syscall_64+0xc9/0xf80 [ 1028.400285][T23983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.400306][T23983] RIP: 0033:0x7f7c9cf9acb9 [ 1028.400322][T23983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.400342][T23983] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.400361][T23983] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 1028.400375][T23983] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000008 [ 1028.400388][T23983] RBP: 00007f7c9d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1028.400401][T23983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.400414][T23983] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 1028.400440][T23983] [ 1029.729691][T24034] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1029.853030][T24019] zswap: compressor not available [ 1029.955964][T24042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 1030.137476][T24019] zswap: compressor not available [ 1031.247457][T24075] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 1032.195123][T24095] random: crng reseeded on system resumption [ 1032.734881][T24117] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1032.913109][T24129] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 1034.721747][T24173] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1035.391254][T24185] Invalid ELF header magic: != ELF [ 1037.607074][T24169] Process accounting paused [ 1038.743402][T24244] usb usb36: usbfs: process 24244 (syz.5.3924) did not claim interface 0 before use [ 1040.551140][T24291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3933'. [ 1040.708202][T24294] FAULT_INJECTION: forcing a failure. [ 1040.708202][T24294] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.769726][T24294] CPU: 0 UID: 0 PID: 24294 Comm: syz.1.3935 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1040.769772][T24294] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1040.769784][T24294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1040.769796][T24294] Call Trace: [ 1040.769803][T24294] [ 1040.769811][T24294] dump_stack_lvl+0x100/0x190 [ 1040.769840][T24294] should_fail_ex.cold+0x5/0xa [ 1040.769875][T24294] should_failslab+0xc2/0x120 [ 1040.769905][T24294] kmem_cache_alloc_noprof+0x83/0x780 [ 1040.769932][T24294] ? futex_wait+0x125/0x380 [ 1040.769951][T24294] ? prepare_creds+0x2c/0x950 [ 1040.769974][T24294] ? prepare_creds+0x2c/0x950 [ 1040.769991][T24294] prepare_creds+0x2c/0x950 [ 1040.770011][T24294] lookup_user_key+0x8e9/0x1300 [ 1040.770046][T24294] ? __pfx_lookup_user_key+0x10/0x10 [ 1040.770077][T24294] ? do_futex+0x192/0x350 [ 1040.770147][T24294] ? __pfx_do_futex+0x10/0x10 [ 1040.770178][T24294] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1040.770212][T24294] ? __x64_sys_futex+0x34f/0x4d0 [ 1040.770241][T24294] ? __x64_sys_futex+0x358/0x4d0 [ 1040.770272][T24294] ? fput+0x79/0x100 [ 1040.770303][T24294] keyctl_watch_key+0x52/0x500 [ 1040.770334][T24294] __do_sys_keyctl+0x29f/0x5a0 [ 1040.770363][T24294] do_syscall_64+0xc9/0xf80 [ 1040.770391][T24294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.770413][T24294] RIP: 0033:0x7f7d6dd9acb9 [ 1040.770429][T24294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.770450][T24294] RSP: 002b:00007f7d6ecc1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1040.770469][T24294] RAX: ffffffffffffffda RBX: 00007f7d6e015fa0 RCX: 00007f7d6dd9acb9 [ 1040.770483][T24294] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0200000000000020 [ 1040.770496][T24294] RBP: 00007f7d6de08bf7 R08: 0000000000000008 R09: 0000000000000000 [ 1040.770509][T24294] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1040.770522][T24294] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff66c808d8 [ 1040.770548][T24294] [ 1042.109926][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1045.914500][T24391] blktrace: Concurrent blktraces are not allowed on loop2 [ 1050.219135][T24475] can: request_module (can-proto-0) failed. [ 1050.892530][T24472] kexec: Could not allocate control_code_buffer [ 1053.324952][T24560] kexec: Could not allocate control_code_buffer [ 1054.249819][T24586] FAULT_INJECTION: forcing a failure. [ 1054.249819][T24586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.319617][T24586] CPU: 0 UID: 8 PID: 24586 Comm: syz.5.3998 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1054.319671][T24586] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1054.319686][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1054.319701][T24586] Call Trace: [ 1054.319710][T24586] [ 1054.319720][T24586] dump_stack_lvl+0x100/0x190 [ 1054.319753][T24586] should_fail_ex.cold+0x5/0xa [ 1054.319794][T24586] _copy_from_user+0x2e/0xd0 [ 1054.319839][T24586] copy_msghdr_from_user+0x9f/0x4f0 [ 1054.319871][T24586] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1054.319908][T24586] ? __pfx___schedule+0x10/0x10 [ 1054.319940][T24586] ___sys_sendmsg+0x106/0x1e0 [ 1054.319971][T24586] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.320011][T24586] ? __pfx_try_to_wake_up+0x10/0x10 [ 1054.320059][T24586] ? futex_hash_put+0x43/0x50 [ 1054.320084][T24586] ? futex_wake+0x1ad/0x530 [ 1054.320121][T24586] __sys_sendmmsg+0x205/0x430 [ 1054.320156][T24586] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1054.320194][T24586] ? __pfx_do_futex+0x10/0x10 [ 1054.320235][T24586] ? xfd_validate_state+0x129/0x190 [ 1054.320274][T24586] __x64_sys_sendmmsg+0x9c/0x100 [ 1054.320308][T24586] ? lockdep_hardirqs_on+0x78/0x100 [ 1054.320332][T24586] do_syscall_64+0xc9/0xf80 [ 1054.320359][T24586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.320381][T24586] RIP: 0033:0x7f7c9cf9acb9 [ 1054.320397][T24586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.320418][T24586] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1054.320438][T24586] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 1054.320451][T24586] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1054.320464][T24586] RBP: 00007f7c9d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1054.320477][T24586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.320489][T24586] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 1054.320515][T24586] [ 1055.076123][T24600] netlink: 346 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1055.438386][T24605] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1056.346281][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.352704][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.585533][T24644] Invalid ELF header magic: != ELF [ 1056.607551][ T30] audit: type=1804 audit(4295009189.549:46): pid=24651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4014" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format" dev="tracefs" ino=19680823 res=1 errno=0 [ 1056.665091][T24652] Invalid ELF header magic: != ELF [ 1057.133365][T24660] ptrace attach of "./syz-executor exec"[17189] was attempted by "./syz-executor exec"[24660] [ 1059.006890][T24685] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4020'. [ 1059.055845][T24685] IPv6: NLM_F_CREATE should be specified when creating new route [ 1059.086558][T24685] IPv6: Can't replace route, no match found [ 1059.126489][T24685] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4020'. [ 1059.167483][T24685] IPv6: Can't replace route, no match found [ 1062.053864][T24746] FAULT_INJECTION: forcing a failure. [ 1062.053864][T24746] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.131351][T24746] CPU: 0 UID: 0 PID: 24746 Comm: syz.0.4033 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1062.131400][T24746] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1062.131414][T24746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1062.131428][T24746] Call Trace: [ 1062.131436][T24746] [ 1062.131444][T24746] dump_stack_lvl+0x100/0x190 [ 1062.131475][T24746] should_fail_ex.cold+0x5/0xa [ 1062.131512][T24746] should_failslab+0xc2/0x120 [ 1062.131545][T24746] __kmalloc_cache_noprof+0x80/0x810 [ 1062.131568][T24746] ? vhost_net_open+0x2d/0x8b0 [ 1062.131588][T24746] ? vhost_net_open+0x73/0x8b0 [ 1062.131613][T24746] ? __pfx_vhost_net_open+0x10/0x10 [ 1062.131633][T24746] ? vhost_net_open+0x73/0x8b0 [ 1062.131653][T24746] vhost_net_open+0x73/0x8b0 [ 1062.131674][T24746] ? __pfx_vhost_net_open+0x10/0x10 [ 1062.131696][T24746] misc_open+0x26d/0x450 [ 1062.131723][T24746] ? __pfx_misc_open+0x10/0x10 [ 1062.131748][T24746] chrdev_open+0x234/0x6a0 [ 1062.131774][T24746] ? __pfx_apparmor_file_open+0x10/0x10 [ 1062.131804][T24746] ? __pfx_chrdev_open+0x10/0x10 [ 1062.131833][T24746] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1062.131866][T24746] do_dentry_open+0x73e/0x1570 [ 1062.131903][T24746] ? __pfx_chrdev_open+0x10/0x10 [ 1062.131929][T24746] ? security_inode_permission+0xbf/0x250 [ 1062.131965][T24746] vfs_open+0x82/0x3f0 [ 1062.131998][T24746] path_openat+0x21dc/0x3120 [ 1062.132031][T24746] ? __pfx_path_openat+0x10/0x10 [ 1062.132072][T24746] do_filp_open+0x1f7/0x420 [ 1062.132100][T24746] ? __pfx_do_filp_open+0x10/0x10 [ 1062.132143][T24746] ? _raw_spin_unlock+0x28/0x50 [ 1062.132164][T24746] ? alloc_fd+0x476/0x790 [ 1062.132194][T24746] do_sys_openat2+0x12e/0x220 [ 1062.132226][T24746] ? __pfx_do_sys_openat2+0x10/0x10 [ 1062.132260][T24746] ? __fget_files+0x21f/0x3d0 [ 1062.132288][T24746] __x64_sys_openat+0x12d/0x210 [ 1062.132321][T24746] ? __pfx___x64_sys_openat+0x10/0x10 [ 1062.132353][T24746] ? xfd_validate_state+0x129/0x190 [ 1062.132395][T24746] do_syscall_64+0xc9/0xf80 [ 1062.132421][T24746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.132443][T24746] RIP: 0033:0x7f1bcf39acb9 [ 1062.132459][T24746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.132480][T24746] RSP: 002b:00007f1bcd5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1062.132500][T24746] RAX: ffffffffffffffda RBX: 00007f1bcf616090 RCX: 00007f1bcf39acb9 [ 1062.132513][T24746] RDX: 0000000000000040 RSI: 0000200000001040 RDI: ffffffffffffff9c [ 1062.132527][T24746] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1062.132540][T24746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.132552][T24746] R13: 00007f1bcf616128 R14: 00007f1bcf616090 R15: 00007ffdd3561738 [ 1062.132579][T24746] [ 1064.285704][T24773] FAULT_INJECTION: forcing a failure. [ 1064.285704][T24773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1064.627520][T24773] CPU: 0 UID: 0 PID: 24773 Comm: syz.3.4037 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1064.627567][T24773] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1064.627579][T24773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1064.627591][T24773] Call Trace: [ 1064.627598][T24773] [ 1064.627606][T24773] dump_stack_lvl+0x100/0x190 [ 1064.627635][T24773] should_fail_ex.cold+0x5/0xa [ 1064.627666][T24773] ? prepare_alloc_pages+0x16d/0x5f0 [ 1064.627701][T24773] should_fail_alloc_page+0xeb/0x140 [ 1064.627733][T24773] prepare_alloc_pages+0x1f0/0x5f0 [ 1064.627769][T24773] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1064.627799][T24773] ? rcu_is_watching+0x12/0xc0 [ 1064.627820][T24773] ? trace_mm_page_alloc+0x10e/0x160 [ 1064.627861][T24773] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1064.627889][T24773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1064.627916][T24773] ? kasan_save_stack+0x30/0x50 [ 1064.627942][T24773] ? kasan_save_track+0x14/0x30 [ 1064.627966][T24773] ? __kasan_kmalloc+0xaa/0xb0 [ 1064.627990][T24773] ? __kmalloc_noprof+0x347/0x9c0 [ 1064.628010][T24773] ? vhost_dev_set_owner+0x287/0xa30 [ 1064.628035][T24773] ? vhost_dev_ioctl+0x521/0xe20 [ 1064.628059][T24773] ? vhost_vsock_dev_ioctl+0x320/0xb30 [ 1064.628085][T24773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1064.628116][T24773] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1064.628141][T24773] ? policy_nodemask+0xed/0x4f0 [ 1064.628174][T24773] alloc_pages_mpol+0x1fb/0x550 [ 1064.628204][T24773] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1064.628241][T24773] ___kmalloc_large_node+0x104/0x150 [ 1064.628276][T24773] __kmalloc_large_node_noprof+0x1c/0x70 [ 1064.628309][T24773] ? vhost_dev_set_owner+0x191/0xa30 [ 1064.628336][T24773] __kmalloc_noprof+0x6b1/0x9c0 [ 1064.628363][T24773] ? vhost_dev_set_owner+0x191/0xa30 [ 1064.628388][T24773] vhost_dev_set_owner+0x191/0xa30 [ 1064.628422][T24773] vhost_dev_ioctl+0x521/0xe20 [ 1064.628447][T24773] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1064.628471][T24773] ? do_vfs_ioctl+0x226/0x13e0 [ 1064.628503][T24773] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 1064.628538][T24773] vhost_vsock_dev_ioctl+0x320/0xb30 [ 1064.628562][T24773] ? hook_file_ioctl_common+0x146/0x410 [ 1064.628595][T24773] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1064.628623][T24773] ? __fget_files+0x21f/0x3d0 [ 1064.628649][T24773] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1064.628676][T24773] __x64_sys_ioctl+0x18e/0x210 [ 1064.628710][T24773] do_syscall_64+0xc9/0xf80 [ 1064.628737][T24773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.628759][T24773] RIP: 0033:0x7f5d6339acb9 [ 1064.628776][T24773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.628815][T24773] RSP: 002b:00007f5d641a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.628838][T24773] RAX: ffffffffffffffda RBX: 00007f5d63616180 RCX: 00007f5d6339acb9 [ 1064.628863][T24773] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000006 [ 1064.628877][T24773] RBP: 00007f5d63408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1064.628891][T24773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.628904][T24773] R13: 00007f5d63616218 R14: 00007f5d63616180 R15: 00007ffe038fd4b8 [ 1064.628932][T24773] [ 1065.145856][T24777] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1067.027643][T24801] zswap: compressor not available [ 1068.441387][T24816] Process accounting resumed [ 1069.114203][T24840] FAULT_INJECTION: forcing a failure. [ 1069.114203][T24840] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.173649][T24840] CPU: 0 UID: 0 PID: 24840 Comm: syz.1.4051 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1069.173697][T24840] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1069.173710][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1069.173724][T24840] Call Trace: [ 1069.173730][T24840] [ 1069.173739][T24840] dump_stack_lvl+0x100/0x190 [ 1069.173768][T24840] should_fail_ex.cold+0x5/0xa [ 1069.173804][T24840] should_failslab+0xc2/0x120 [ 1069.173833][T24840] __kmalloc_cache_noprof+0x80/0x810 [ 1069.173856][T24840] ? rcu_is_watching+0x12/0xc0 [ 1069.173876][T24840] ? __request_module+0x2b7/0x650 [ 1069.173905][T24840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1069.173933][T24840] ? __request_module+0x2b7/0x650 [ 1069.173964][T24840] __request_module+0x2b7/0x650 [ 1069.173996][T24840] ? __pfx___request_module+0x10/0x10 [ 1069.174036][T24840] ? inode_init_always_gfp+0xd0e/0x1040 [ 1069.174070][T24840] __sock_create+0x5c4/0x860 [ 1069.174099][T24840] __sys_socket+0x14d/0x260 [ 1069.174122][T24840] ? fput+0x79/0x100 [ 1069.174150][T24840] ? __pfx___sys_socket+0x10/0x10 [ 1069.174174][T24840] ? xfd_validate_state+0x129/0x190 [ 1069.174214][T24840] __x64_sys_socket+0x72/0xb0 [ 1069.174238][T24840] ? lockdep_hardirqs_on+0x78/0x100 [ 1069.174263][T24840] do_syscall_64+0xc9/0xf80 [ 1069.174289][T24840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.174311][T24840] RIP: 0033:0x7f7d6dd9acb9 [ 1069.174327][T24840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.174366][T24840] RSP: 002b:00007f7d6ecc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1069.174388][T24840] RAX: ffffffffffffffda RBX: 00007f7d6e015fa0 RCX: 00007f7d6dd9acb9 [ 1069.174403][T24840] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 1069.174425][T24840] RBP: 00007f7d6de08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1069.174439][T24840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.174453][T24840] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff66c808d8 [ 1069.174480][T24840] [ 1069.989252][T24849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1070.063533][T24842] FAULT_INJECTION: forcing a failure. [ 1070.063533][T24842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1070.124405][T24842] CPU: 0 UID: 0 PID: 24842 Comm: syz.0.4052 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1070.124458][T24842] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1070.124472][T24842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1070.124487][T24842] Call Trace: [ 1070.124507][T24842] [ 1070.124515][T24842] dump_stack_lvl+0x100/0x190 [ 1070.124547][T24842] should_fail_ex.cold+0x5/0xa [ 1070.124579][T24842] ? prepare_alloc_pages+0x16d/0x5f0 [ 1070.124616][T24842] should_fail_alloc_page+0xeb/0x140 [ 1070.124649][T24842] prepare_alloc_pages+0x1f0/0x5f0 [ 1070.124684][T24842] ? rcu_is_watching+0x12/0xc0 [ 1070.124709][T24842] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1070.124738][T24842] ? __lock_acquire+0x4a5/0x2630 [ 1070.124777][T24842] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1070.124807][T24842] ? find_held_lock+0x2b/0x80 [ 1070.124828][T24842] ? __might_fault+0xc5/0x140 [ 1070.124853][T24842] ? __might_fault+0xc5/0x140 [ 1070.124886][T24842] ? _copy_from_iter+0x270/0x1690 [ 1070.124920][T24842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1070.124946][T24842] ? policy_nodemask+0xed/0x4f0 [ 1070.124980][T24842] alloc_pages_mpol+0x1fb/0x550 [ 1070.125013][T24842] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1070.125053][T24842] alloc_pages_noprof+0x131/0x390 [ 1070.125086][T24842] anon_pipe_write+0xabf/0x1d40 [ 1070.125122][T24842] ? __pfx_anon_pipe_write+0x10/0x10 [ 1070.125147][T24842] ? common_file_perm+0x1ab/0x4f0 [ 1070.125181][T24842] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1070.125211][T24842] ? bpf_lsm_file_permission+0x9/0x10 [ 1070.125242][T24842] ? security_file_permission+0x76/0x210 [ 1070.125301][T24842] ? rw_verify_area+0xce/0x6d0 [ 1070.125327][T24842] vfs_write+0x6ac/0x1070 [ 1070.125366][T24842] ? __pfx_anon_pipe_write+0x10/0x10 [ 1070.125398][T24842] ? __pfx_vfs_write+0x10/0x10 [ 1070.125424][T24842] ? find_held_lock+0x2b/0x80 [ 1070.125469][T24842] ksys_write+0x1f8/0x250 [ 1070.125497][T24842] ? __pfx_ksys_write+0x10/0x10 [ 1070.125533][T24842] do_syscall_64+0xc9/0xf80 [ 1070.125566][T24842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.125591][T24842] RIP: 0033:0x7f1bcf39acb9 [ 1070.125610][T24842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.125634][T24842] RSP: 002b:00007f1bcd5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1070.125658][T24842] RAX: ffffffffffffffda RBX: 00007f1bcf615fa0 RCX: 00007f1bcf39acb9 [ 1070.125675][T24842] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1070.125690][T24842] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1070.125705][T24842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.125720][T24842] R13: 00007f1bcf616038 R14: 00007f1bcf615fa0 R15: 00007ffdd3561738 [ 1070.125752][T24842] [ 1070.885422][T24863] HfR: entered promiscuous mode [ 1070.905443][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1070.914617][T24863] HfR: left promiscuous mode [ 1072.759185][T24904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4065'. [ 1073.098882][T24913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4066'. [ 1073.191754][T24915] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1075.029009][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4074'. [ 1075.099701][T24947] netlink: 'syz.5.4074': attribute type 1 has an invalid length. [ 1075.171695][T24947] netlink: 13 bytes leftover after parsing attributes in process `syz.5.4074'. [ 1077.789859][T25007] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1078.811228][T25036] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1079.102079][T25049] FAULT_INJECTION: forcing a failure. [ 1079.102079][T25049] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.188216][T25049] CPU: 0 UID: 0 PID: 25049 Comm: syz.3.4094 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1079.188260][T25049] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1079.188272][T25049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1079.188285][T25049] Call Trace: [ 1079.188293][T25049] [ 1079.188301][T25049] dump_stack_lvl+0x100/0x190 [ 1079.188329][T25049] should_fail_ex.cold+0x5/0xa [ 1079.188362][T25049] should_failslab+0xc2/0x120 [ 1079.188390][T25049] __kvmalloc_node_noprof+0x101/0xac0 [ 1079.188418][T25049] ? seq_read_iter+0x819/0x1270 [ 1079.188442][T25049] ? seq_read_iter+0x819/0x1270 [ 1079.188461][T25049] seq_read_iter+0x819/0x1270 [ 1079.188498][T25049] kernfs_fop_read_iter+0x46c/0x610 [ 1079.188521][T25049] ? rw_verify_area+0xce/0x6d0 [ 1079.188541][T25049] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1079.188564][T25049] vfs_read+0x825/0xb30 [ 1079.188589][T25049] ? __pfx_vfs_read+0x10/0x10 [ 1079.188609][T25049] ? find_held_lock+0x2b/0x80 [ 1079.188645][T25049] ksys_read+0x12a/0x250 [ 1079.188667][T25049] ? __pfx_ksys_read+0x10/0x10 [ 1079.188696][T25049] do_syscall_64+0xc9/0xf80 [ 1079.188723][T25049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.188743][T25049] RIP: 0033:0x7f5d6339acb9 [ 1079.188759][T25049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.188779][T25049] RSP: 002b:00007f5d641e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1079.188799][T25049] RAX: ffffffffffffffda RBX: 00007f5d63615fa0 RCX: 00007f5d6339acb9 [ 1079.188812][T25049] RDX: 000000000000101c RSI: 0000200000001280 RDI: 0000000000000003 [ 1079.188825][T25049] RBP: 00007f5d641e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.188837][T25049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.188850][T25049] R13: 00007f5d63616038 R14: 00007f5d63615fa0 R15: 00007ffe038fd4b8 [ 1079.188876][T25049] [ 1079.918917][T25068] can: request_module (can-proto-0) failed. [ 1080.746724][T25089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4101'. [ 1081.528168][T25103] binder: 25100:25103 ioctl 400c620e 0 returned -14 [ 1081.610518][T25105] ptp ptp0: new virtual clock ptp1 [ 1081.693831][T25105] ptp ptp0: new virtual clock ptp2 [ 1081.725488][T25105] ptp ptp0: new virtual clock ptp3 [ 1081.779483][T25105] ptp ptp0: new virtual clock ptp4 [ 1081.864991][T25105] ptp ptp0: new virtual clock ptp5 [ 1081.978893][T25105] ptp ptp0: new virtual clock ptp6 [ 1082.072629][T25105] ptp ptp0: new virtual clock ptp7 [ 1082.107465][T25123] FAULT_INJECTION: forcing a failure. [ 1082.107465][T25123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.154950][T25105] ptp ptp0: new virtual clock ptp8 [ 1082.190736][T25123] CPU: 0 UID: 0 PID: 25123 Comm: syz.5.4107 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1082.190778][T25123] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1082.190790][T25123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1082.190802][T25123] Call Trace: [ 1082.190809][T25123] [ 1082.190816][T25123] dump_stack_lvl+0x100/0x190 [ 1082.190845][T25123] should_fail_ex.cold+0x5/0xa [ 1082.190878][T25123] _copy_to_iter+0x1f3/0x1720 [ 1082.190913][T25123] ? __pfx__copy_to_iter+0x10/0x10 [ 1082.190943][T25123] ? kernfs_seq_stop+0xcd/0x120 [ 1082.190968][T25123] ? kernfs_put_active+0x93/0xe0 [ 1082.191001][T25123] seq_read_iter+0xdab/0x1270 [ 1082.191033][T25123] kernfs_fop_read_iter+0x46c/0x610 [ 1082.191055][T25123] ? rw_verify_area+0xce/0x6d0 [ 1082.191078][T25123] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1082.191101][T25123] vfs_read+0x825/0xb30 [ 1082.191126][T25123] ? __pfx_vfs_read+0x10/0x10 [ 1082.191146][T25123] ? find_held_lock+0x2b/0x80 [ 1082.191181][T25123] ksys_read+0x12a/0x250 [ 1082.191210][T25123] ? __pfx_ksys_read+0x10/0x10 [ 1082.191239][T25123] do_syscall_64+0xc9/0xf80 [ 1082.191266][T25123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.191286][T25123] RIP: 0033:0x7f7c9cf9acb9 [ 1082.191302][T25123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.191322][T25123] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.191342][T25123] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 1082.191356][T25123] RDX: 000000000000101c RSI: 0000200000001280 RDI: 0000000000000003 [ 1082.191368][T25123] RBP: 00007f7c9de55090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.191380][T25123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.191393][T25123] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 1082.191419][T25123] [ 1082.771681][T25105] ptp ptp0: new virtual clock ptp9 [ 1082.875461][T25105] ptp ptp0: new virtual clock ptp10 [ 1082.950479][T25105] ptp ptp0: new virtual clock ptp11 [ 1082.999740][T25105] ptp ptp0: new virtual clock ptp12 [ 1083.073629][T25105] ptp ptp0: new virtual clock ptp13 [ 1083.095697][T25105] ptp ptp0: new virtual clock ptp14 [ 1083.137738][T25105] ptp ptp0: new virtual clock ptp15 [ 1083.181926][T25105] ptp ptp0: guarantee physical clock free running [ 1083.212719][T25108] ptp ptp0: delete virtual clock ptp15 [ 1083.938021][T25170] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1084.000330][T25170] FAULT_INJECTION: forcing a failure. [ 1084.000330][T25170] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.026043][T25170] CPU: 0 UID: 0 PID: 25170 Comm: syz.5.4111 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1084.026095][T25170] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1084.026109][T25170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1084.026124][T25170] Call Trace: [ 1084.026132][T25170] [ 1084.026141][T25170] dump_stack_lvl+0x100/0x190 [ 1084.026175][T25170] should_fail_ex.cold+0x5/0xa [ 1084.026216][T25170] should_failslab+0xc2/0x120 [ 1084.026252][T25170] __kmalloc_cache_noprof+0x80/0x810 [ 1084.026279][T25170] ? call_usermodehelper_setup+0xaf/0x360 [ 1084.026303][T25170] ? __kmalloc_node_track_caller_noprof+0x373/0x9d0 [ 1084.026337][T25170] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1084.026377][T25170] ? call_usermodehelper_setup+0xaf/0x360 [ 1084.026402][T25170] call_usermodehelper_setup+0xaf/0x360 [ 1084.026442][T25170] __request_module+0x3c7/0x650 [ 1084.026478][T25170] ? __pfx___request_module+0x10/0x10 [ 1084.026529][T25170] ? __wake_up+0x3f/0x60 [ 1084.026552][T25170] ? __wake_up+0x3f/0x60 [ 1084.026575][T25170] ? rcu_is_watching+0x12/0xc0 [ 1084.026596][T25170] ? lockdep_hardirqs_on+0x78/0x100 [ 1084.026626][T25170] netlink_create+0x450/0x610 [ 1084.026661][T25170] __sock_create+0x339/0x860 [ 1084.026690][T25170] __sys_socket+0x14d/0x260 [ 1084.026714][T25170] ? fput+0x79/0x100 [ 1084.026742][T25170] ? __pfx___sys_socket+0x10/0x10 [ 1084.026766][T25170] ? xfd_validate_state+0x129/0x190 [ 1084.026805][T25170] __x64_sys_socket+0x72/0xb0 [ 1084.026829][T25170] ? lockdep_hardirqs_on+0x78/0x100 [ 1084.026853][T25170] do_syscall_64+0xc9/0xf80 [ 1084.026880][T25170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.026902][T25170] RIP: 0033:0x7f7c9cf9acb9 [ 1084.026918][T25170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.026938][T25170] RSP: 002b:00007f7c9de34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1084.026959][T25170] RAX: ffffffffffffffda RBX: 00007f7c9d216090 RCX: 00007f7c9cf9acb9 [ 1084.026973][T25170] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 1084.026986][T25170] RBP: 00007f7c9d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1084.026999][T25170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.027012][T25170] R13: 00007f7c9d216128 R14: 00007f7c9d216090 R15: 00007fffa918a518 [ 1084.027043][T25170] [ 1084.490180][T25108] ptp ptp0: delete virtual clock ptp14 [ 1084.874543][T25108] ptp ptp0: delete virtual clock ptp13 [ 1084.916173][T25108] ptp ptp0: delete virtual clock ptp12 [ 1084.979010][T25108] ptp ptp0: delete virtual clock ptp11 [ 1085.056432][T25108] ptp ptp0: delete virtual clock ptp10 [ 1085.229906][T25108] ptp ptp0: delete virtual clock ptp9 [ 1085.291813][T25108] ptp ptp0: delete virtual clock ptp8 [ 1085.370268][T25108] ptp ptp0: delete virtual clock ptp7 [ 1085.440790][T25108] ptp ptp0: delete virtual clock ptp6 [ 1085.534867][T25108] ptp ptp0: delete virtual clock ptp5 [ 1085.556174][T25187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4115'. [ 1085.643644][T25108] ptp ptp0: delete virtual clock ptp4 [ 1085.745645][T25108] ptp ptp0: delete virtual clock ptp3 [ 1085.863696][T25108] ptp ptp0: delete virtual clock ptp2 [ 1085.959115][T25108] ptp ptp0: delete virtual clock ptp1 [ 1086.017527][T25108] ptp ptp0: only physical clock in use now [ 1087.931514][T25236] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1091.071751][T25267] FAULT_INJECTION: forcing a failure. [ 1091.071751][T25267] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.231370][T25267] CPU: 0 UID: 0 PID: 25267 Comm: syz.5.4131 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1091.231421][T25267] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1091.231435][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1091.231449][T25267] Call Trace: [ 1091.231457][T25267] [ 1091.231465][T25267] dump_stack_lvl+0x100/0x190 [ 1091.231497][T25267] should_fail_ex.cold+0x5/0xa [ 1091.231534][T25267] should_failslab+0xc2/0x120 [ 1091.231565][T25267] ? sk_prot_alloc+0x10b/0x2a0 [ 1091.231593][T25267] __kmalloc_noprof+0xf6/0x9c0 [ 1091.231614][T25267] ? security_inode_alloc+0x3b/0x2c0 [ 1091.231652][T25267] ? sk_prot_alloc+0x10b/0x2a0 [ 1091.231674][T25267] sk_prot_alloc+0x10b/0x2a0 [ 1091.231699][T25267] sk_alloc+0x36/0xe80 [ 1091.231731][T25267] caif_create+0x10b/0x430 [ 1091.231760][T25267] __sock_create+0x339/0x860 [ 1091.231790][T25267] __sys_socket+0x14d/0x260 [ 1091.231817][T25267] ? __pfx___sys_socket+0x10/0x10 [ 1091.231842][T25267] ? xfd_validate_state+0x129/0x190 [ 1091.231885][T25267] __x64_sys_socket+0x72/0xb0 [ 1091.231910][T25267] ? lockdep_hardirqs_on+0x78/0x100 [ 1091.231937][T25267] do_syscall_64+0xc9/0xf80 [ 1091.231965][T25267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.231989][T25267] RIP: 0033:0x7f7c9cf9acb9 [ 1091.232006][T25267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.232028][T25267] RSP: 002b:00007f7c9de55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1091.232050][T25267] RAX: ffffffffffffffda RBX: 00007f7c9d215fa0 RCX: 00007f7c9cf9acb9 [ 1091.232066][T25267] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000025 [ 1091.232079][T25267] RBP: 00007f7c9d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1091.232092][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.232106][T25267] R13: 00007f7c9d216038 R14: 00007f7c9d215fa0 R15: 00007fffa918a518 [ 1091.232152][T25267] [ 1091.975459][T25274] kafs: addr_prefs: Invalid Command [ 1092.092254][T25278] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1095.406711][T16430] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1095.413219][T12712] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1095.422654][T23088] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1095.487098][T12758] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1095.497234][T25315] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 1095.503816][T25313] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1095.511686][T25316] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1095.518092][T25314] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 1095.524593][T25317] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1095.534101][T25318] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1095.540573][T25319] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1095.547161][T25320] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1095.553700][T25321] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 1095.566310][T25322] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 1095.572807][T25323] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 1095.579246][T25327] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 1095.587379][T25328] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 1095.593896][T25330] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 1095.600558][T25329] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 1095.647894][T25334] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 1095.654385][T25333] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 1095.662296][T25332] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 1095.668857][T25335] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 1095.725471][T25342] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 1095.732246][T25340] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 1095.739013][T25336] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 1095.745590][T25331] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 1095.752186][T25338] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 1095.758902][T25337] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 1095.765394][T25344] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 1095.771956][T25343] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 1095.812706][T25347] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 1095.819168][T25345] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 1098.260066][T25409] zswap: compressor not available [ 1098.726693][T25408] Process accounting paused [ 1098.839175][T25421] Invalid ELF header magic: != ELF [ 1101.871836][T25470] FAULT_INJECTION: forcing a failure. [ 1101.871836][T25470] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.007897][T25470] CPU: 0 UID: 0 PID: 25470 Comm: syz.3.4165 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1102.007945][T25470] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1102.007958][T25470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1102.007972][T25470] Call Trace: [ 1102.007979][T25470] [ 1102.007988][T25470] dump_stack_lvl+0x100/0x190 [ 1102.008017][T25470] should_fail_ex.cold+0x5/0xa [ 1102.008052][T25470] should_failslab+0xc2/0x120 [ 1102.008082][T25470] kmem_cache_alloc_noprof+0x83/0x780 [ 1102.008111][T25470] ? do_fcntl_add_lease+0x9d/0x550 [ 1102.008137][T25470] ? do_fcntl_add_lease+0x9d/0x550 [ 1102.008157][T25470] do_fcntl_add_lease+0x9d/0x550 [ 1102.008179][T25470] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 1102.008200][T25470] ? __pfx_futex_wait+0x10/0x10 [ 1102.008229][T25470] fcntl_setlease+0xfc/0x180 [ 1102.008251][T25470] ? __pfx_fcntl_setlease+0x10/0x10 [ 1102.008280][T25470] do_fcntl+0x1149/0x1670 [ 1102.008311][T25470] ? __pfx_do_fcntl+0x10/0x10 [ 1102.008340][T25470] ? __fget_files+0x215/0x3d0 [ 1102.008371][T25470] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1102.008400][T25470] __x64_sys_fcntl+0x163/0x200 [ 1102.008434][T25470] do_syscall_64+0xc9/0xf80 [ 1102.008467][T25470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.008489][T25470] RIP: 0033:0x7f5d6339acb9 [ 1102.008505][T25470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.008526][T25470] RSP: 002b:00007f5d641c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1102.008547][T25470] RAX: ffffffffffffffda RBX: 00007f5d63616090 RCX: 00007f5d6339acb9 [ 1102.008572][T25470] RDX: 9ec0000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 1102.008584][T25470] RBP: 00007f5d63408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1102.008596][T25470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.008608][T25470] R13: 00007f5d63616128 R14: 00007f5d63616090 R15: 00007ffe038fd4b8 [ 1102.008634][T25470] [ 1104.516677][T25498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1106.111852][T25530] zswap: compressor not available [ 1107.161412][T25567] netlink: 'syz.0.4182': attribute type 2 has an invalid length. [ 1107.336177][T25569] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 1107.374371][T25569] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1107.396961][T25569] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1108.172045][T25586] netlink: 'syz.3.4190': attribute type 4 has an invalid length. [ 1108.196130][T25586] netlink: 314 bytes leftover after parsing attributes in process `syz.3.4190'. [ 1108.222076][T25586] IPv6: NLM_F_CREATE should be specified when creating new route [ 1108.229876][T25586] IPv6: Can't replace route, no match found [ 1109.168837][T25618] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 1111.235614][T25633] FAULT_INJECTION: forcing a failure. [ 1111.235614][T25633] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.275423][T25633] CPU: 0 UID: 0 PID: 25633 Comm: syz.1.4199 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1111.275481][T25633] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1111.275500][T25633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1111.275516][T25633] Call Trace: [ 1111.275525][T25633] [ 1111.275535][T25633] dump_stack_lvl+0x100/0x190 [ 1111.275568][T25633] should_fail_ex.cold+0x5/0xa [ 1111.275609][T25633] should_failslab+0xc2/0x120 [ 1111.275644][T25633] __kmalloc_cache_noprof+0x80/0x810 [ 1111.275671][T25633] ? usb_control_msg+0xbc/0x4a0 [ 1111.275697][T25633] ? disable_store+0x21a/0x450 [ 1111.275734][T25633] ? usb_control_msg+0xbc/0x4a0 [ 1111.275761][T25633] usb_control_msg+0xbc/0x4a0 [ 1111.275790][T25633] ? __pfx_usb_control_msg+0x10/0x10 [ 1111.275818][T25633] ? kernfs_find_and_get_ns+0x5f/0x70 [ 1111.275862][T25633] usb_hub_set_port_power+0x125/0x180 [ 1111.275901][T25633] disable_store+0x2eb/0x450 [ 1111.275937][T25633] ? __pfx_disable_store+0x10/0x10 [ 1111.275970][T25633] ? find_held_lock+0x2b/0x80 [ 1111.275994][T25633] ? sysfs_file_kobj+0xe4/0x290 [ 1111.276021][T25633] ? sysfs_file_kobj+0xe4/0x290 [ 1111.276052][T25633] ? __pfx_disable_store+0x10/0x10 [ 1111.276083][T25633] dev_attr_store+0x58/0x80 [ 1111.276117][T25633] ? __pfx_dev_attr_store+0x10/0x10 [ 1111.276151][T25633] sysfs_kf_write+0xf2/0x150 [ 1111.276182][T25633] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1111.276206][T25633] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1111.276238][T25633] vfs_write+0x6ac/0x1070 [ 1111.276267][T25633] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1111.276296][T25633] ? __pfx_vfs_write+0x10/0x10 [ 1111.276322][T25633] ? find_held_lock+0x2b/0x80 [ 1111.276365][T25633] ksys_write+0x12a/0x250 [ 1111.276393][T25633] ? __pfx_ksys_write+0x10/0x10 [ 1111.276441][T25633] do_syscall_64+0xc9/0xf80 [ 1111.276473][T25633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.276517][T25633] RIP: 0033:0x7f7d6dd9acb9 [ 1111.276534][T25633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.276555][T25633] RSP: 002b:00007f7d6ecc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1111.276576][T25633] RAX: ffffffffffffffda RBX: 00007f7d6e015fa0 RCX: 00007f7d6dd9acb9 [ 1111.276590][T25633] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1111.276603][T25633] RBP: 00007f7d6de08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1111.276616][T25633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.276628][T25633] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff66c808d8 [ 1111.276655][T25633] [ 1112.034620][T25636] netlink: 'syz.0.4200': attribute type 4 has an invalid length. [ 1112.062232][T25636] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4200'. [ 1112.092566][T25636] IPv6: Can't replace route, no match found [ 1113.567621][T25666] sd 0:0:1:0: PR command failed: 1026 [ 1113.573340][T25666] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1113.580467][T25666] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1114.339237][T25686] FAULT_INJECTION: forcing a failure. [ 1114.339237][T25686] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.419022][T25685] usb usb15: usbfs: process 25685 (syz.0.4212) did not claim interface 0 before use [ 1114.441446][T25686] CPU: 0 UID: 0 PID: 25686 Comm: syz.0.4212 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1114.441495][T25686] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1114.441507][T25686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1114.441520][T25686] Call Trace: [ 1114.441527][T25686] [ 1114.441535][T25686] dump_stack_lvl+0x100/0x190 [ 1114.441565][T25686] should_fail_ex.cold+0x5/0xa [ 1114.441601][T25686] should_failslab+0xc2/0x120 [ 1114.441630][T25686] ? tomoyo_encode2+0xfb/0x3c0 [ 1114.441650][T25686] __kmalloc_noprof+0xf6/0x9c0 [ 1114.441679][T25686] ? tomoyo_encode2+0xfb/0x3c0 [ 1114.441699][T25686] tomoyo_encode2+0xfb/0x3c0 [ 1114.441723][T25686] tomoyo_encode+0x29/0x50 [ 1114.441743][T25686] tomoyo_realpath_from_path+0x18c/0x690 [ 1114.441771][T25686] tomoyo_check_open_permission+0x2af/0x3c0 [ 1114.441804][T25686] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1114.441862][T25686] ? do_raw_spin_lock+0x128/0x260 [ 1114.441896][T25686] ? path_get+0x61/0x80 [ 1114.441927][T25686] tomoyo_file_open+0x6b/0x90 [ 1114.441953][T25686] security_file_open+0xb5/0x1e0 [ 1114.441974][T25686] do_dentry_open+0x58c/0x1570 [ 1114.442002][T25686] ? security_inode_permission+0xbf/0x250 [ 1114.442038][T25686] vfs_open+0x82/0x3f0 [ 1114.442072][T25686] path_openat+0x21dc/0x3120 [ 1114.442106][T25686] ? __pfx_path_openat+0x10/0x10 [ 1114.442141][T25686] do_filp_open+0x1f7/0x420 [ 1114.442168][T25686] ? __pfx_do_filp_open+0x10/0x10 [ 1114.442218][T25686] ? _raw_spin_unlock+0x28/0x50 [ 1114.442239][T25686] ? alloc_fd+0x476/0x790 [ 1114.442271][T25686] do_sys_openat2+0x12e/0x220 [ 1114.442303][T25686] ? __pfx_do_sys_openat2+0x10/0x10 [ 1114.442345][T25686] __x64_sys_openat+0x12d/0x210 [ 1114.442379][T25686] ? __pfx___x64_sys_openat+0x10/0x10 [ 1114.442411][T25686] ? xfd_validate_state+0x129/0x190 [ 1114.442464][T25686] do_syscall_64+0xc9/0xf80 [ 1114.442489][T25686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.442510][T25686] RIP: 0033:0x7f1bcf39acb9 [ 1114.442525][T25686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.442544][T25686] RSP: 002b:00007f1bcd5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1114.442563][T25686] RAX: ffffffffffffffda RBX: 00007f1bcf616090 RCX: 00007f1bcf39acb9 [ 1114.442577][T25686] RDX: 00000000000a8042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1114.442589][T25686] RBP: 00007f1bcf408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1114.442602][T25686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.442614][T25686] R13: 00007f1bcf616128 R14: 00007f1bcf616090 R15: 00007ffdd3561738 [ 1114.442640][T25686] [ 1114.723954][T25686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1115.493244][T25710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1116.119928][T25722] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1116.135961][T25721] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1116.955194][T25728] netlink: 206 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1117.123977][T25731] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 1117.461605][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.468002][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.518604][T25761] input: jJǸ-9%vJ86 as /devices/virtual/input/input41 [ 1118.891070][T25766] random: crng reseeded on system resumption [ 1119.261617][ T30] audit: type=1800 audit(4295011298.521:47): pid=25778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4234" name="lu_gp_id" dev="configfs" ino=124526 res=0 errno=0 [ 1119.419516][T25784] sd 0:0:1:0: PR command failed: 1026 [ 1119.429864][T25784] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1119.452077][T25784] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1120.070015][T25763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 1120.242688][T25763] veth1_macvtap: entered allmulticast mode [ 1120.936559][T25810] GUP no longer grows the stack in syz.0.4238 (25810): 400000-401000 (3f0000) [ 1121.000690][T25810] CPU: 0 UID: 0 PID: 25810 Comm: syz.0.4238 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1121.000735][T25810] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1121.000747][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1121.000759][T25810] Call Trace: [ 1121.000766][T25810] [ 1121.000774][T25810] dump_stack_lvl+0x100/0x190 [ 1121.000803][T25810] gup_vma_lookup.cold+0x83/0x96 [ 1121.000831][T25810] __get_user_pages+0x241/0x34d0 [ 1121.000890][T25810] ? __pfx___get_user_pages+0x10/0x10 [ 1121.000930][T25810] get_dump_page+0x27e/0x3d0 [ 1121.000963][T25810] ? __pfx_get_dump_page+0x10/0x10 [ 1121.000997][T25810] ? dump_user_range+0x73b/0xb50 [ 1121.001026][T25810] dump_user_range+0x18d/0xb50 [ 1121.001054][T25810] ? __pfx_dump_user_range+0x10/0x10 [ 1121.001085][T25810] ? __pfx_writenote+0x10/0x10 [ 1121.001116][T25810] elf_core_dump+0x2d16/0x3c60 [ 1121.001155][T25810] ? __pfx_elf_core_dump+0x10/0x10 [ 1121.001179][T25810] ? __pick_eevdf+0x14c/0x430 [ 1121.001205][T25810] ? check_preempt_wakeup_fair+0x9ce/0xc20 [ 1121.001231][T25810] ? find_held_lock+0x2b/0x80 [ 1121.001252][T25810] ? 0xffffffffff600000 [ 1121.001270][T25810] ? rcu_is_watching+0x12/0xc0 [ 1121.001290][T25810] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1121.001314][T25810] ? lockdep_hardirqs_on+0x78/0x100 [ 1121.001375][T25810] ? vfs_coredump+0x276c/0x5530 [ 1121.001396][T25810] vfs_coredump+0x276c/0x5530 [ 1121.001429][T25810] ? __pfx_vfs_coredump+0x10/0x10 [ 1121.001451][T25810] ? __lock_acquire+0x4a5/0x2630 [ 1121.001484][T25810] ? __lock_acquire+0x4a5/0x2630 [ 1121.001515][T25810] ? lock_acquire+0x17c/0x330 [ 1121.001547][T25810] ? lock_acquire+0x17c/0x330 [ 1121.001580][T25810] ? bpf_ksym_find+0x124/0x1c0 [ 1121.001612][T25810] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1121.001645][T25810] ? arch_stack_walk+0xa6/0xf0 [ 1121.001679][T25810] ? stack_trace_save+0x8e/0xc0 [ 1121.001702][T25810] ? __pfx_stack_trace_save+0x10/0x10 [ 1121.001727][T25810] ? stack_depot_save_flags+0x27/0x9c0 [ 1121.001761][T25810] ? __lock_acquire+0x4a5/0x2630 [ 1121.001833][T25810] ? proc_coredump_connector+0x2d3/0x4f0 [ 1121.001868][T25810] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1121.001909][T25810] ? rcu_is_watching+0x12/0xc0 [ 1121.001933][T25810] get_signal+0x1f2a/0x21e0 [ 1121.001968][T25810] ? __pfx_get_signal+0x10/0x10 [ 1121.002000][T25810] arch_do_signal_or_restart+0x91/0x770 [ 1121.002032][T25810] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1121.002078][T25810] ? do_user_addr_fault+0x8d6/0x12f0 [ 1121.002106][T25810] irqentry_exit+0x1f8/0x670 [ 1121.002131][T25810] asm_exc_page_fault+0x26/0x30 [ 1121.002150][T25810] RIP: 0033:0x7f1bcf39acc1 [ 1121.002166][T25810] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1121.002185][T25810] RSP: 002b:0000000000000002 EFLAGS: 00010217 [ 1121.002201][T25810] RAX: 0000000000000000 RBX: 00007f1bcf616540 RCX: 00007f1bcf39acb9 [ 1121.002214][T25810] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1121.002227][T25810] RBP: 00007f1bcf408bf7 R08: 0000000000000002 R09: 0000000000000000 [ 1121.002239][T25810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.002251][T25810] R13: 00007f1bcf6165d8 R14: 00007f1bcf616540 R15: 00007ffdd3561738 [ 1121.002276][T25810] [ 1128.847217][T25914] nvme_fabrics: missing parameter 'transport=%s' [ 1128.896058][T25914] nvme_fabrics: missing parameter 'nqn=%s' [ 1128.991532][T25926] snd_aloop snd_aloop.0: snd_timer_open (10,0,0) failed with -19 [ 1129.129985][T25898] Process accounting resumed [ 1131.143441][T25957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1131.149574][T25957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1131.217591][T25957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1131.250383][T25993] zram: Cannot change disksize for initialized device [ 1131.262117][T25957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1131.279168][T25973] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1132.309021][T26055] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1132.369097][T26062] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1132.426413][T25347] Bluetooth: hci0: command 0x0c1a tx timeout [ 1132.490021][T26062] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1132.509124][T26055] netlink: 62 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1133.228288][T25345] Bluetooth: hci1: command 0x0c1a tx timeout [ 1133.234460][T25347] Bluetooth: hci3: command 0x0c1a tx timeout [ 1133.302333][T25347] Bluetooth: hci2: command 0x0c1a tx timeout [ 1133.369458][T26081] FAULT_INJECTION: forcing a failure. [ 1133.369458][T26081] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.395177][ T30] audit: type=1800 audit(4295011312.727:48): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4273" name="lu_gp_id" dev="configfs" ino=125549 res=0 errno=0 [ 1133.491419][T26081] CPU: 0 UID: 0 PID: 26081 Comm: syz.3.4276 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1133.491471][T26081] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1133.491485][T26081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1133.491499][T26081] Call Trace: [ 1133.491508][T26081] [ 1133.491517][T26081] dump_stack_lvl+0x100/0x190 [ 1133.491550][T26081] should_fail_ex.cold+0x5/0xa [ 1133.491608][T26081] should_failslab+0xc2/0x120 [ 1133.491643][T26081] __kmalloc_cache_noprof+0x80/0x810 [ 1133.491669][T26081] ? rfkill_fop_open+0x1b6/0x750 [ 1133.491701][T26081] ? rfkill_fop_open+0x1b6/0x750 [ 1133.491725][T26081] rfkill_fop_open+0x1b6/0x750 [ 1133.491755][T26081] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1133.491783][T26081] misc_open+0x26d/0x450 [ 1133.491813][T26081] ? __pfx_misc_open+0x10/0x10 [ 1133.491841][T26081] chrdev_open+0x234/0x6a0 [ 1133.491871][T26081] ? __pfx_apparmor_file_open+0x10/0x10 [ 1133.491904][T26081] ? __pfx_chrdev_open+0x10/0x10 [ 1133.491936][T26081] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1133.491972][T26081] do_dentry_open+0x73e/0x1570 [ 1133.492002][T26081] ? __pfx_chrdev_open+0x10/0x10 [ 1133.492033][T26081] ? security_inode_permission+0xbf/0x250 [ 1133.492075][T26081] vfs_open+0x82/0x3f0 [ 1133.492115][T26081] path_openat+0x21dc/0x3120 [ 1133.492154][T26081] ? __pfx_path_openat+0x10/0x10 [ 1133.492194][T26081] do_filp_open+0x1f7/0x420 [ 1133.492226][T26081] ? __pfx_do_filp_open+0x10/0x10 [ 1133.492276][T26081] ? _raw_spin_unlock+0x28/0x50 [ 1133.492300][T26081] ? alloc_fd+0x476/0x790 [ 1133.492337][T26081] do_sys_openat2+0x12e/0x220 [ 1133.492375][T26081] ? __pfx_do_sys_openat2+0x10/0x10 [ 1133.492420][T26081] ? __fget_files+0x21f/0x3d0 [ 1133.492453][T26081] __x64_sys_openat+0x12d/0x210 [ 1133.492493][T26081] ? __pfx___x64_sys_openat+0x10/0x10 [ 1133.492530][T26081] ? xfd_validate_state+0x129/0x190 [ 1133.492594][T26081] do_syscall_64+0xc9/0xf80 [ 1133.492637][T26081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.492660][T26081] RIP: 0033:0x7f5d6339acb9 [ 1133.492678][T26081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.492699][T26081] RSP: 002b:00007f5d641e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1133.492721][T26081] RAX: ffffffffffffffda RBX: 00007f5d63615fa0 RCX: 00007f5d6339acb9 [ 1133.492736][T26081] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1133.492751][T26081] RBP: 00007f5d63408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1133.492765][T26081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.492778][T26081] R13: 00007f5d63616038 R14: 00007f5d63615fa0 R15: 00007ffe038fd4b8 [ 1133.492806][T26081] [ 1134.505547][T26094] : Can't lookup blockdev [ 1134.951966][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4283'. [ 1136.231278][T26128] futex_wake_op: syz.3.4288 tries to shift op by -2048; fix this program [ 1137.203449][T25347] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1137.203478][T25347] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1137.218669][T25347] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1137.218693][T25347] Bluetooth: hci0: adv larger than maximum supported [ 1137.225955][T25347] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1137.233009][T25347] Bluetooth: hci0: adv larger than maximum supported [ 1137.242092][T25347] Bluetooth: hci0: adv larger than maximum supported [ 1137.248921][T25347] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1137.283121][T26149] FAULT_INJECTION: forcing a failure. [ 1137.283121][T26149] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1137.335942][T26149] CPU: 0 UID: 0 PID: 26149 Comm: syz.1.4292 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1137.335995][T26149] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1137.336009][T26149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1137.336025][T26149] Call Trace: [ 1137.336034][T26149] [ 1137.336043][T26149] dump_stack_lvl+0x100/0x190 [ 1137.336078][T26149] should_fail_ex.cold+0x5/0xa [ 1137.336130][T26149] get_futex_key+0x1d2/0x1620 [ 1137.336166][T26149] ? __pfx_get_futex_key+0x10/0x10 [ 1137.336196][T26149] ? debug_check_no_obj_freed+0x31f/0x630 [ 1137.336241][T26149] futex_wake+0xea/0x530 [ 1137.336281][T26149] ? __free_frozen_pages+0x8ab/0x1130 [ 1137.336305][T26149] ? __pfx_futex_wake+0x10/0x10 [ 1137.336349][T26149] ? _raw_spin_unlock+0x28/0x50 [ 1137.336377][T26149] ? __free_frozen_pages+0x8b5/0x1130 [ 1137.336410][T26149] do_futex+0x32b/0x350 [ 1137.336445][T26149] ? __pfx_do_futex+0x10/0x10 [ 1137.336480][T26149] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1137.336526][T26149] ? __do_sys_close_range+0x230/0x740 [ 1137.336561][T26149] __x64_sys_futex+0x34f/0x4d0 [ 1137.336600][T26149] ? __pfx___x64_sys_futex+0x10/0x10 [ 1137.336646][T26149] do_syscall_64+0xc9/0xf80 [ 1137.336678][T26149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.336703][T26149] RIP: 0033:0x7f7d6dd9acb9 [ 1137.336722][T26149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.336749][T26149] RSP: 002b:00007f7d6eca00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1137.336773][T26149] RAX: ffffffffffffffda RBX: 00007f7d6e016098 RCX: 00007f7d6dd9acb9 [ 1137.336790][T26149] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d6e01609c [ 1137.336806][T26149] RBP: 00007f7d6e016090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.336821][T26149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.336836][T26149] R13: 00007f7d6e016128 R14: 00007fff66c807f0 R15: 00007fff66c808d8 [ 1137.336867][T26149] [ 1138.222444][T26149] usb usb15: usbfs: process 26149 (syz.1.4292) did not claim interface 0 before use [ 1138.537177][T26161] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1142.206291][T26196] kexec: Could not allocate control_code_buffer [ 1145.128342][T26235] FAULT_INJECTION: forcing a failure. [ 1145.128342][T26235] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.248750][T26235] CPU: 0 UID: 0 PID: 26235 Comm: syz.0.4309 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1145.248797][T26235] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1145.248810][T26235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1145.248823][T26235] Call Trace: [ 1145.248831][T26235] [ 1145.248839][T26235] dump_stack_lvl+0x100/0x190 [ 1145.248868][T26235] should_fail_ex.cold+0x5/0xa [ 1145.248899][T26235] ? sk_filter_trim_cap+0x571/0xde0 [ 1145.248925][T26235] should_failslab+0xc2/0x120 [ 1145.248955][T26235] kmem_cache_alloc_noprof+0x83/0x780 [ 1145.248984][T26235] ? skb_clone+0x190/0x400 [ 1145.249019][T26235] ? skb_clone+0x190/0x400 [ 1145.249048][T26235] skb_clone+0x190/0x400 [ 1145.249081][T26235] netlink_deliver_tap+0xaed/0xcc0 [ 1145.249118][T26235] netlink_unicast+0x70c/0x870 [ 1145.249156][T26235] ? __pfx_netlink_unicast+0x10/0x10 [ 1145.249190][T26235] ? genl_rcv_msg+0x4be/0x800 [ 1145.249218][T26235] netlink_ack+0x655/0xb80 [ 1145.249258][T26235] netlink_rcv_skb+0x333/0x420 [ 1145.249292][T26235] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.249321][T26235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1145.249365][T26235] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1145.249401][T26235] genl_rcv+0x28/0x40 [ 1145.249437][T26235] netlink_unicast+0x5aa/0x870 [ 1145.249477][T26235] ? __pfx_netlink_unicast+0x10/0x10 [ 1145.249512][T26235] ? __pfx___might_resched+0x10/0x10 [ 1145.249558][T26235] ? __pfx_futex_wake_mark+0x10/0x10 [ 1145.249598][T26235] netlink_sendmsg+0x8b0/0xda0 [ 1145.249635][T26235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.249672][T26235] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1145.249703][T26235] __sys_sendto+0x4aa/0x520 [ 1145.249733][T26235] ? __pfx___sys_sendto+0x10/0x10 [ 1145.249769][T26235] ? fdget+0x18b/0x210 [ 1145.249801][T26235] ? xfd_validate_state+0x129/0x190 [ 1145.249843][T26235] __x64_sys_sendto+0xe0/0x1c0 [ 1145.249871][T26235] ? do_syscall_64+0x94/0xf80 [ 1145.249896][T26235] ? lockdep_hardirqs_on+0x78/0x100 [ 1145.249920][T26235] do_syscall_64+0xc9/0xf80 [ 1145.249947][T26235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.249968][T26235] RIP: 0033:0x7f1bcf35b58e [ 1145.249986][T26235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1145.250025][T26235] RSP: 002b:00007f1bcd5b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1145.250046][T26235] RAX: ffffffffffffffda RBX: 00007f1bcd5b46c0 RCX: 00007f1bcf35b58e [ 1145.250061][T26235] RDX: 0000000000000024 RSI: 00007f1bcd5b3000 RDI: 0000000000000004 [ 1145.250075][T26235] RBP: 0000000000000000 R08: 00007f1bcd5b2f04 R09: 000000000000000c [ 1145.250089][T26235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1145.250102][T26235] R13: 00007f1bcd5b2f58 R14: 00007f1bcd5b3000 R15: 0000000000000000 [ 1145.250131][T26235] [ 1146.702389][T26245] zswap: compressor not available [ 1147.104075][T26267] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4317'. [ 1147.528898][T26270] zswap: compressor not available [ 1148.027733][T26278] zswap: compressor not available [ 1150.017117][T25345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1150.028356][T25345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1150.043109][T25345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1150.052118][T25345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1150.062707][T25345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1150.700002][T26333] zram: Cannot change disksize for initialized device [ 1151.222133][T26325] chnl_net:caif_netlink_parms(): no params data found [ 1152.098784][T25345] Bluetooth: hci4: command tx timeout [ 1152.226906][T26325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.262623][T26325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.299003][T26325] bridge_slave_0: entered allmulticast mode [ 1152.348330][T26325] bridge_slave_0: entered promiscuous mode [ 1152.458580][T26325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.488612][T26325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.532270][T26325] bridge_slave_1: entered allmulticast mode [ 1152.572379][T26325] bridge_slave_1: entered promiscuous mode [ 1152.706121][T26325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.751741][T26325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.924760][T15684] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.027695][T15684] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.061648][T26325] team0: Port device team_slave_0 added [ 1153.082737][T26325] team0: Port device team_slave_1 added [ 1153.140238][T26358] ksmbd: Unknown IPC event: 14, ignore. [ 1153.147278][T15684] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.273250][T26325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.287101][T26325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.364060][T26325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.410604][T15684] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.470792][T26325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.501587][T26325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.592599][T26325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.859943][T26325] hsr_slave_0: entered promiscuous mode [ 1153.892906][T26325] hsr_slave_1: entered promiscuous mode [ 1153.918080][T26325] debugfs: 'hsr0' already exists in 'hsr' [ 1153.933350][T26325] Cannot create hsr debugfs directory [ 1154.088043][T26369] FAULT_INJECTION: forcing a failure. [ 1154.088043][T26369] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.159965][T26369] CPU: 0 UID: 0 PID: 26369 Comm: syz.1.4338 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1154.160011][T26369] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1154.160024][T26369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1154.160037][T26369] Call Trace: [ 1154.160044][T26369] [ 1154.160052][T26369] dump_stack_lvl+0x100/0x190 [ 1154.160082][T26369] should_fail_ex.cold+0x5/0xa [ 1154.160117][T26369] should_failslab+0xc2/0x120 [ 1154.160146][T26369] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1154.160177][T26369] ? __d_alloc+0x34/0xa80 [ 1154.160207][T26369] ? __d_alloc+0x34/0xa80 [ 1154.160231][T26369] __d_alloc+0x34/0xa80 [ 1154.160260][T26369] d_alloc_pseudo+0x1c/0xc0 [ 1154.160292][T26369] alloc_file_pseudo+0xcf/0x230 [ 1154.160325][T26369] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1154.160356][T26369] ? alloc_fd+0x476/0x790 [ 1154.160384][T26369] sock_alloc_file+0x50/0x210 [ 1154.160418][T26369] __sys_socket+0x1c0/0x260 [ 1154.160444][T26369] ? __pfx___sys_socket+0x10/0x10 [ 1154.160468][T26369] ? xfd_validate_state+0x129/0x190 [ 1154.160508][T26369] __x64_sys_socket+0x72/0xb0 [ 1154.160543][T26369] ? lockdep_hardirqs_on+0x78/0x100 [ 1154.160569][T26369] do_syscall_64+0xc9/0xf80 [ 1154.160597][T26369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.160619][T26369] RIP: 0033:0x7f7d6dd9acb9 [ 1154.160635][T26369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.160656][T26369] RSP: 002b:00007f7d6eca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1154.160676][T26369] RAX: ffffffffffffffda RBX: 00007f7d6e016090 RCX: 00007f7d6dd9acb9 [ 1154.160690][T26369] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 1154.160703][T26369] RBP: 00007f7d6de08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1154.160716][T26369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.160728][T26369] R13: 00007f7d6e016128 R14: 00007f7d6e016090 R15: 00007fff66c808d8 [ 1154.160755][T26369] [ 1154.586896][T25345] Bluetooth: hci4: command tx timeout [ 1154.799131][T26325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1154.853224][T26325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1154.892900][T26325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1154.953237][T26325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1155.087000][T15684] gretap0: left allmulticast mode [ 1155.103254][T15684] gretap0: left promiscuous mode [ 1155.128357][T15684] bridge0: port 3(gretap0) entered disabled state [ 1155.157471][T15684] bridge_slave_1: left allmulticast mode [ 1155.189439][T15684] bridge_slave_1: left promiscuous mode [ 1155.222313][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.264371][T15684] bridge_slave_0: left allmulticast mode [ 1155.299232][T15684] bridge_slave_0: left promiscuous mode [ 1155.328309][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.651727][T26389] zswap: compressor not available [ 1156.193953][T15684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.227748][T15684] bond_slave_0: left promiscuous mode [ 1156.233371][T15684] bond_slave_0: left allmulticast mode [ 1156.260045][T15684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.279347][T15684] bond_slave_1: left promiscuous mode [ 1156.289185][T15684] bond_slave_1: left allmulticast mode [ 1156.304997][T15684] bond0 (unregistering): Released all slaves [ 1156.632674][T25347] Bluetooth: hci4: command tx timeout [ 1157.626287][T15684] hsr_slave_0: left promiscuous mode [ 1157.635995][T15684] hsr_slave_1: left promiscuous mode [ 1157.653323][T15684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.685668][T15684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.708416][T15684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.736243][T15684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.831241][T15684] veth1_macvtap: left promiscuous mode [ 1157.836776][T15684] veth0_macvtap: left promiscuous mode [ 1157.875456][T15684] veth1_vlan: left promiscuous mode [ 1157.882904][T15684] veth0_vlan: left promiscuous mode [ 1158.706628][T25347] Bluetooth: hci4: command tx timeout [ 1158.913315][T15684] team0 (unregistering): Port device team_slave_1 removed [ 1159.023310][T15684] team0 (unregistering): Port device team_slave_0 removed [ 1159.827839][T26325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.979415][ T30] audit: type=1800 audit(4295011339.442:49): pid=26426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4341" name="lu_gp_id" dev="configfs" ino=128358 res=0 errno=0 [ 1160.080632][T26325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.273483][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.280729][T12717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.290701][T26404] Process accounting paused [ 1160.348465][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.355709][T12717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.407497][T26325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.771880][T26325] veth0_vlan: entered promiscuous mode [ 1162.818129][T26325] veth1_vlan: entered promiscuous mode [ 1162.922171][T26325] veth0_macvtap: entered promiscuous mode [ 1163.009870][T26325] veth1_macvtap: entered promiscuous mode [ 1163.050501][T26325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.087809][T26325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.134833][T23968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.134880][T23968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.134915][T23968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.134948][T23968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.580045][T23968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.580095][T23968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.843109][T23968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.843129][T23968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.402371][T26533] zswap: compressor not available [ 1166.428002][T25347] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1167.317827][T26566] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0014 i0006 l2042 [ 1169.001474][ T30] audit: type=1800 audit(4295011348.494:50): pid=26593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4366" name="dbroot" dev="configfs" ino=129630 res=0 errno=0 [ 1169.831276][T26609] ubi0: attaching mtd0 [ 1169.852357][T26609] ubi0: scanning is finished [ 1169.857027][T26609] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1169.881956][T26613] netlink: 74 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1170.142343][T26609] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1170.955354][T26640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1172.330834][T25345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.341203][T25345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.349908][T25345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1172.357995][T25345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1172.365562][T25345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.909210][T26680] ptrace attach of "./syz-executor exec"[26325] was attempted by "./syz-executor exec"[26680] [ 1172.984357][T26684] nvme_fabrics: unknown parameter or missing value '9HNQ' in ctrl creation request [ 1173.066326][T26684] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2853084342.235837946.55100985), cmd(3) [ 1173.078961][T21615] ------------[ cut here ]------------ [ 1173.084445][T21615] ODEBUG: free active (active state 0) object: ffff88805c385460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1173.097218][T21615] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz.3.3337/21615 [ 1173.107521][T21615] Modules linked in: [ 1173.111421][T21615] CPU: 0 UID: 0 PID: 21615 Comm: syz.3.3337 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1173.122754][T21615] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1173.133599][T21615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1173.143724][T21615] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1173.149585][T21615] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 e1 d4 0b 41 56 48 8b 14 dd 60 44 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c a3 ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1173.170237][T21615] RSP: 0018:ffffc9000bab7708 EFLAGS: 00010246 [ 1173.176981][T21615] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1173.185050][T21615] RDX: ffffffff8bfa43a0 RSI: ffffffff8bfa3fc0 RDI: ffffffff90c1dff0 [ 1173.193039][T21615] RBP: 0000000000000001 R08: ffff88805c385460 R09: ffffffff8b92b8a0 [ 1173.201239][T21615] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa3fc0 [ 1173.209248][T21615] R13: ffffffff8b92b8e0 R14: ffffffff8a804c30 R15: ffffc9000bab7808 [ 1173.217264][T21615] FS: 0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 1173.226249][T21615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1173.232862][T21615] CR2: 0000001b2f017ff8 CR3: 00000000365f2000 CR4: 00000000003526f0 [ 1173.240884][T21615] Call Trace: [ 1173.244168][T21615] [ 1173.247147][T21615] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1173.252919][T21615] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1173.259002][T21615] debug_check_no_obj_freed+0x4da/0x630 [ 1173.264603][T21615] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1173.271125][T21615] ? __page_table_check_zero+0x333/0x410 [ 1173.277262][T21615] ? __page_table_check_zero+0x333/0x410 [ 1173.282920][T21615] ? __page_table_check_zero+0x338/0x410 [ 1173.288596][T21615] __free_frozen_pages+0x358/0x1130 [ 1173.293813][T21615] hci_release_dev+0x4ef/0x630 [ 1173.298622][T21615] ? __pfx_hci_release_dev+0x10/0x10 [ 1173.304029][T21615] ? rcu_is_watching+0x12/0xc0 [ 1173.308861][T21615] ? kfree+0x2a9/0x690 [ 1173.312967][T21615] bt_host_release+0x6a/0xb0 [ 1173.317600][T21615] ? __pfx_bt_host_release+0x10/0x10 [ 1173.322891][T21615] device_release+0xa4/0x240 [ 1173.327519][T21615] kobject_put+0x1f7/0x640 [ 1173.331958][T21615] put_device+0x1f/0x30 [ 1173.336132][T21615] vhci_release+0x185/0x230 [ 1173.340661][T21615] ? __pfx_vhci_release+0x10/0x10 [ 1173.345762][T21615] __fput+0x3ff/0xb40 [ 1173.349773][T21615] task_work_run+0x150/0x240 [ 1173.354738][T21615] ? __pfx_task_work_run+0x10/0x10 [ 1173.359869][T21615] do_exit+0x829/0x2a30 [ 1173.364334][T21615] ? __pfx_do_exit+0x10/0x10 [ 1173.369393][T21615] ? do_raw_spin_lock+0x128/0x260 [ 1173.374676][T21615] ? find_held_lock+0x2b/0x80 [ 1173.379379][T21615] ? get_signal+0x7e0/0x21e0 [ 1173.384046][T21615] do_group_exit+0xd5/0x2a0 [ 1173.388573][T21615] get_signal+0x1ec7/0x21e0 [ 1173.393094][T21615] ? __pfx_css_rstat_updated+0x10/0x10 [ 1173.398626][T21615] ? __pfx_get_signal+0x10/0x10 [ 1173.403497][T21615] ? do_futex+0x192/0x350 [ 1173.408028][T21615] arch_do_signal_or_restart+0x91/0x770 [ 1173.413774][T21615] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1173.419956][T21615] ? __pfx___x64_sys_futex+0x10/0x10 [ 1173.425308][T21615] exit_to_user_mode_loop+0x86/0x4b0 [ 1173.430652][T21615] ? rcu_is_watching+0x12/0xc0 [ 1173.435622][T21615] do_syscall_64+0x4ea/0xf80 [ 1173.440325][T21615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.446273][T21615] RIP: 0033:0x7f5d6339acb9 [ 1173.450699][T21615] Code: Unable to access opcode bytes at 0x7f5d6339ac8f. [ 1173.458026][T21615] RSP: 002b:00007f5d641e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1173.466738][T21615] RAX: fffffffffffffe00 RBX: 00007f5d63615fa8 RCX: 00007f5d6339acb9 [ 1173.475205][T21615] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d63615fa8 [ 1173.483504][T21615] RBP: 00007f5d63615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.491478][T21615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.499475][T21615] R13: 00007f5d63616038 R14: 00007ffe038fd3d0 R15: 00007ffe038fd4b8 [ 1173.507579][T21615] [ 1173.510598][T21615] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1173.517883][T21615] CPU: 0 UID: 0 PID: 21615 Comm: syz.3.3337 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1173.528845][T21615] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1173.539078][T21615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1173.549131][T21615] Call Trace: [ 1173.552408][T21615] [ 1173.555353][T21615] dump_stack_lvl+0x100/0x190 [ 1173.560064][T21615] vpanic+0x20d/0x630 [ 1173.564047][T21615] panic+0xd1/0xd1 [ 1173.567780][T21615] ? __pfx_panic+0x10/0x10 [ 1173.572204][T21615] ? check_panic_on_warn+0x1f/0x90 [ 1173.577331][T21615] check_panic_on_warn.cold+0x19/0x34 [ 1173.582699][T21615] ? debug_print_object+0x18e/0x2a0 [ 1173.587986][T21615] __warn.cold+0x191/0x2f8 [ 1173.592406][T21615] __report_bug+0x296/0x3d0 [ 1173.596920][T21615] ? debug_print_object+0x18e/0x2a0 [ 1173.602130][T21615] ? __pfx___report_bug+0x10/0x10 [ 1173.607164][T21615] ? unwind_next_frame+0x3c8/0x1ea0 [ 1173.612368][T21615] report_bug_entry+0xe1/0x290 [ 1173.617131][T21615] ? debug_print_object+0x19b/0x2a0 [ 1173.622331][T21615] handle_bug+0x1c9/0x2a0 [ 1173.626667][T21615] exc_invalid_op+0x17/0x50 [ 1173.631181][T21615] asm_exc_invalid_op+0x1a/0x20 [ 1173.636036][T21615] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1173.641891][T21615] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 e1 d4 0b 41 56 48 8b 14 dd 60 44 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c a3 ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1173.661498][T21615] RSP: 0018:ffffc9000bab7708 EFLAGS: 00010246 [ 1173.667658][T21615] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1173.675657][T21615] RDX: ffffffff8bfa43a0 RSI: ffffffff8bfa3fc0 RDI: ffffffff90c1dff0 [ 1173.683651][T21615] RBP: 0000000000000001 R08: ffff88805c385460 R09: ffffffff8b92b8a0 [ 1173.691620][T21615] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa3fc0 [ 1173.699683][T21615] R13: ffffffff8b92b8e0 R14: ffffffff8a804c30 R15: ffffc9000bab7808 [ 1173.707659][T21615] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1173.713157][T21615] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1173.718631][T21615] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1173.724454][T21615] debug_check_no_obj_freed+0x4da/0x630 [ 1173.730026][T21615] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1173.736102][T21615] ? __page_table_check_zero+0x333/0x410 [ 1173.741750][T21615] ? __page_table_check_zero+0x333/0x410 [ 1173.747394][T21615] ? __page_table_check_zero+0x338/0x410 [ 1173.753044][T21615] __free_frozen_pages+0x358/0x1130 [ 1173.758259][T21615] hci_release_dev+0x4ef/0x630 [ 1173.763032][T21615] ? __pfx_hci_release_dev+0x10/0x10 [ 1173.768342][T21615] ? rcu_is_watching+0x12/0xc0 [ 1173.773116][T21615] ? kfree+0x2a9/0x690 [ 1173.777204][T21615] bt_host_release+0x6a/0xb0 [ 1173.781813][T21615] ? __pfx_bt_host_release+0x10/0x10 [ 1173.787108][T21615] device_release+0xa4/0x240 [ 1173.791733][T21615] kobject_put+0x1f7/0x640 [ 1173.796185][T21615] put_device+0x1f/0x30 [ 1173.800351][T21615] vhci_release+0x185/0x230 [ 1173.804924][T21615] ? __pfx_vhci_release+0x10/0x10 [ 1173.809980][T21615] __fput+0x3ff/0xb40 [ 1173.813988][T21615] task_work_run+0x150/0x240 [ 1173.818594][T21615] ? __pfx_task_work_run+0x10/0x10 [ 1173.823741][T21615] do_exit+0x829/0x2a30 [ 1173.827920][T21615] ? __pfx_do_exit+0x10/0x10 [ 1173.832530][T21615] ? do_raw_spin_lock+0x128/0x260 [ 1173.837739][T21615] ? find_held_lock+0x2b/0x80 [ 1173.842422][T21615] ? get_signal+0x7e0/0x21e0 [ 1173.847020][T21615] do_group_exit+0xd5/0x2a0 [ 1173.851539][T21615] get_signal+0x1ec7/0x21e0 [ 1173.856061][T21615] ? __pfx_css_rstat_updated+0x10/0x10 [ 1173.861533][T21615] ? __pfx_get_signal+0x10/0x10 [ 1173.866396][T21615] ? do_futex+0x192/0x350 [ 1173.870745][T21615] arch_do_signal_or_restart+0x91/0x770 [ 1173.876308][T21615] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1173.882486][T21615] ? __pfx___x64_sys_futex+0x10/0x10 [ 1173.887793][T21615] exit_to_user_mode_loop+0x86/0x4b0 [ 1173.893098][T21615] ? rcu_is_watching+0x12/0xc0 [ 1173.897861][T21615] do_syscall_64+0x4ea/0xf80 [ 1173.902458][T21615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.908358][T21615] RIP: 0033:0x7f5d6339acb9 [ 1173.912783][T21615] Code: Unable to access opcode bytes at 0x7f5d6339ac8f. [ 1173.919792][T21615] RSP: 002b:00007f5d641e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1173.928299][T21615] RAX: fffffffffffffe00 RBX: 00007f5d63615fa8 RCX: 00007f5d6339acb9 [ 1173.936281][T21615] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d63615fa8 [ 1173.944265][T21615] RBP: 00007f5d63615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.952241][T21615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.960215][T21615] R13: 00007f5d63616038 R14: 00007ffe038fd3d0 R15: 00007ffe038fd4b8 [ 1173.968202][T21615] [ 1173.971275][T21615] Kernel Offset: disabled [ 1173.975602][T21615] Rebooting in 86400 seconds..