last executing test programs: 2m17.342707341s ago: executing program 2 (id=1575): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) clone$auto(0x0, 0x5, 0x0, 0x0, 0x3ff) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) set_mempolicy$auto(0x6, 0x0, 0x21) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) mmap$auto(0x0, 0x9d, 0xdf, 0xeb1, 0x40000000000a5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x29, 0x5, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x500, 0xa}, 0x5, 0x400) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2800, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x82d) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1p\x00', 0x80000, 0x0) 2m16.58174678s ago: executing program 2 (id=1580): mmap$auto(0x3, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x800}, @BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008010) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) 2m15.806798994s ago: executing program 2 (id=1583): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x18, 0x0, 0x1ff) r1 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x800, 0x0) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e") fadvise64$auto(r3, 0x20000008002, 0x9, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="faf7df14", @ANYRES16=r5, @ANYBLOB="010025bd700002dcdf250300000004000800100001800c00108008000b00", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2cf812457a6b2809443f866e0a5977cbcd81046b234398880b1d6dc90841708543911de319521e06748ab973ed99e408d13866eb2011d42dcf4272147b1c413a905b0a", @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf25030000005f0001800400b98014004a00000000000000000000000000000000000400a880710d56f1ef29d00ef869c0475252cf4b795b353025e9cec6e3e0e463f68c7a120987b77e5aeb5a9309dba5a05a75670b8e293d5d65b880d1b7400a97d3792400"], 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) write$auto(r4, &(0x7f00000000c0)='\xce*+#\x00\x0e\xdf\x0fwF\xa3\x94\xf5\xc2\x14\x0f\xe0\xd2\xd6\x84f\xf3\f\xe8y\xce-K\xaf\x02UVp\'\xa8\xa1,\x80\x88\xbe\xe5\t\x15\v\xb4n\xe67\xa6\x8d\xf5)\x8e)B\x10\xc6\x95\xcf\xfcd\xdfx{8\xb6LgE\x94\x95\xf4\x18%h\xcd\xf0\x9e\x11\xfa0\x1c\xa1\x93\x9a\xa4', 0x2302f95f) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) (async) socket(0xa, 0x2, 0x3a) (async) setsockopt$auto(r0, 0x29, 0x18, 0x0, 0x1ff) (async) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x800, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e") (async) fadvise64$auto(r3, 0x20000008002, 0x9, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="faf7df14", @ANYRES16=r5, @ANYBLOB="010025bd700002dcdf250300000004000800100001800c00108008000b00", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2cf812457a6b2809443f866e0a5977cbcd81046b234398880b1d6dc90841708543911de319521e06748ab973ed99e408d13866eb2011d42dcf4272147b1c413a905b0a", @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf25030000005f0001800400b98014004a00000000000000000000000000000000000400a880710d56f1ef29d00ef869c0475252cf4b795b353025e9cec6e3e0e463f68c7a120987b77e5aeb5a9309dba5a05a75670b8e293d5d65b880d1b7400a97d3792400"], 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) write$auto(r4, &(0x7f00000000c0)='\xce*+#\x00\x0e\xdf\x0fwF\xa3\x94\xf5\xc2\x14\x0f\xe0\xd2\xd6\x84f\xf3\f\xe8y\xce-K\xaf\x02UVp\'\xa8\xa1,\x80\x88\xbe\xe5\t\x15\v\xb4n\xe67\xa6\x8d\xf5)\x8e)B\x10\xc6\x95\xcf\xfcd\xdfx{8\xb6LgE\x94\x95\xf4\x18%h\xcd\xf0\x9e\x11\xfa0\x1c\xa1\x93\x9a\xa4', 0x2302f95f) (async) 2m15.398195125s ago: executing program 2 (id=1585): waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x5, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x800000000000000c, 0x7}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0x5, 0x1002}}) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket(0xa, 0x2, 0x3a) read$auto(r0, 0x0, 0x20) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x1, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9", @raw}, 0x0, @integer=@value=[0x400000000006, 0x6, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x89, 0x8, 0x4, 0x7, 0x6, 0x7, 0x100000001, 0x3, 0x9, 0x8, 0x81, 0x9f, 0x8, 0xd, 0xb1, 0x0, 0x3, 0x8, 0x2, 0x10001, 0x1, 0x80100000, 0x8000, 0xffffffff8db4d983, 0x0, 0xee7c, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x804, 0x7, 0x3, 0x4f3, 0xc, 0x4, 0xe02, 0x0, 0xe4, 0x9, 0x6, 0x81, 0x401, 0x3, 0xa, 0x0, 0x400000000000006, 0x800, 0x0, 0x7, 0x101, 0x82, 0xc9d, 0x401, 0x9, 0x5, 0x640c, 0x3, 0x1000, 0xff, 0x201, 0x0, 0xec31, 0x9, 0x1ff, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x7, 0x7fffffffffffffff, 0x1, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x7, 0x7fffffffffffffff, 0x7, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x9, 0x8000000000000001, 0x5, 0x5, 0x1, 0x40, 0x1, 0x7, 0x2, 0x3, 0x8, 0x1f, 0x8001, 0xc13, 0x800000000000006, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x7fffffff, 0x6, 0x2, 0x1, 0xa, 0x5, 0x1, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x9, 0x3, 0xfffffffffffffff9, 0xffffffffffffff91, r2, 0x1) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip_mr_vif\x00', 0x40900, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_max_time_ms\x00', 0xb480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000001c0)=""/243, 0x11d) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) gettimeofday$auto(&(0x7f0000000040)={0x9, 0x2}, &(0x7f0000000100)={0x6, 0x80000001}) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 2m14.470773333s ago: executing program 2 (id=1587): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) write$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x0, 0x4000000000df, 0x3fe, r0, 0x8000) unshare$auto(0x40000080) signalfd4$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x5) r5 = mq_open$auto(&(0x7f0000000300)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xffff, 0x0) mq_timedreceive$auto(r5, 0x0, 0x4dcd, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) unshare$auto(0x40000080) 2m11.073344135s ago: executing program 2 (id=1599): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x100000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x0, 0x27, 0x4) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x490200, 0x0) write$auto(r1, 0x0, 0x3) connect$auto(r1, &(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0xc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x7000000, 0x0, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b7f, 0x2, 0x8000) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r3 = set_tid_address$auto(0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x5, 0x759, 0x5, 0x9, 0x1ffe2, 0x7, 0xeffffffffffffffa, 0x8, 0x9, 0x80002, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10106, 0x7, 0x1, 0x0, 0xe, 0xb54, 0x200, 0x0, 0x84, 0x0, 0x40000, 0x8, 0x0, 0x0, [0x0, 0x7, 0x0, 0xffffffff, 0x3, 0x0, 0x2000000000, 0x0, 0x6, 0x0, 0xfffffffffffff608, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2000005, 0x100003, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x1fffffffffffffe, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0xfffffffffffffffd, 0x5, 0x7fff]}, 0x7, 0xb) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x5522, 0xf15) ioctl$auto(r4, 0x5522, r4) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000380)="dcbb5fd7054bed139fb7f9fb1dca8fe1d88f65ee057c0e6faac40d106e4f0d52edf6e31c48e8d983ae3431fa707225c2c387e1a200b38759ba8e9187200e6d044ef46a534de751b1436f20ed7071b254509700aa726ea003a1b7b9ce2313756dc84bc4556ddac694c4553d72ed13a885176712c9cff968f74bd1d14ff734ad08e60cf7e7a7dd07d2b6ca9cb21ddaae68d2969afcf6c734f6ee1c63b1c93abf32264f9ec022b64c903276298739ee8ae7ac1fe14534ad54004f39ea1b99964702554c1494e1742baeae527cf3007d50fc92e924f73b6288e5d9fd071d2fba76b2fabd3faf5229f4c3168226346e3087026d3d2c8aed398d4988971e05ff0ab9f5f2328e7f51d5061584b44581a4c83e413718d3a82f87daf87d1d5a2c32fbaa58f095fbf34ccc603b632155c27289cb5598049a7c9160dfe8a01d5a1983408082941eb39db2a09c5a34dc876dfa58a589687aa0cf6be7b5b084a8f753758332896ec3adad7a79b751908ee2b3d25131f44185a0ed8d20e9b6b8a1ed11402b02e544b67caf3177eda039e64aaf295eca7953c165fa73afca96d7750663711101c6e14e44817c6ad4b1474132dd441ca5c9d7776c871ffacbd96910496cad7010b9b526135e84") r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd05, &(0x7f00000001c0)) r6 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) setrlimit$auto(0x100, &(0x7f0000000080)={0xfffffffffffffffe, 0x2}) socket(0x18, 0xa, 0x2) getdents64$auto(r6, 0x0, 0xfffffffd) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000040)=@bpf_attr_7={@link_id=0xffffffff, 0xf0, 0x9, r2}, 0x7) 1m55.530785718s ago: executing program 32 (id=1599): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x100000001, 0x4000000000df, 0x40eb1, r0, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x0, 0x27, 0x4) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x490200, 0x0) write$auto(r1, 0x0, 0x3) connect$auto(r1, &(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0xc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x7000000, 0x0, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b7f, 0x2, 0x8000) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r3 = set_tid_address$auto(0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x5, 0x759, 0x5, 0x9, 0x1ffe2, 0x7, 0xeffffffffffffffa, 0x8, 0x9, 0x80002, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10106, 0x7, 0x1, 0x0, 0xe, 0xb54, 0x200, 0x0, 0x84, 0x0, 0x40000, 0x8, 0x0, 0x0, [0x0, 0x7, 0x0, 0xffffffff, 0x3, 0x0, 0x2000000000, 0x0, 0x6, 0x0, 0xfffffffffffff608, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2000005, 0x100003, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x1fffffffffffffe, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0xfffffffffffffffd, 0x5, 0x7fff]}, 0x7, 0xb) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x5522, 0xf15) ioctl$auto(r4, 0x5522, r4) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000380)="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") r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd05, &(0x7f00000001c0)) r6 = syz_open_procfs$namespace(r3, &(0x7f0000000080)) setrlimit$auto(0x100, &(0x7f0000000080)={0xfffffffffffffffe, 0x2}) socket(0x18, 0xa, 0x2) getdents64$auto(r6, 0x0, 0xfffffffd) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000040)=@bpf_attr_7={@link_id=0xffffffff, 0xf0, 0x9, r2}, 0x7) 10.053660117s ago: executing program 4 (id=2005): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x7) (async) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec8\x00', 0x2200, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={"728a5b19", 0xcda8, 0x1, 0x4, 0x5, 0x0, "ee559b01a2be66e0b2f792598d4abb", "c0922a66", "0500", "6fc027f0", ["ec17fa01a291dbb63a9ee037", "4413e201f40400000006e4cd", "8cf15288af6312cfefae1e3f", "11c1c59ec35c0aa3e26f8fbe"]}) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x0) (async) r2 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x2, 0xeb4, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x6) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x10, 0x2, 0x0) (async) socket(0x2, 0x3, 0x2) (async) socket(0x2, 0x3, 0x104) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async) bind$auto(r2, 0x0, 0x6f) (async) connect$auto(r2, 0x0, 0x55) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000)="0320ee38c9716e91e3dcd75aa7b9ef0c1d25520fe679063255839a69eab002fd57f805b949b4832934162e682f37d512a29ad85ab485de2acb0ae49353c21dca1d94113523830b4bd59673a0fed7fedc7a7d25502ea653091dac8368c709dc95a6fb5fbc62b412a1663c9662ed3b8f147a3b73b939807af182512cc3f871a664a28aa0edddff35c2183f7036cb085c05e416e81a3607d097b302dbef3077a12b4f", 0xfffffffffffffffa}, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) 9.613428259s ago: executing program 4 (id=2008): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) fsconfig$auto_FSCONFIG_CMD_CREATE(r0, 0x6, &(0x7f0000000000)='/dev/vhost-net\x00', &(0x7f0000000080)="1064192368975789778fcaed5d20e049612236c97cfa810904c56aba60c1845a29ec19cd0d0077f61fe404b0e62b0093082796b5fffd99f768cdf419e344973833e0a6bc55eb251db9b483396558d2d608a5c225130cf9d0111a61d9ec3f2513439c60a83660762803027f0e94df36b98e30541c2b20131f456ba7d75987829e37327090383a277cbe56f5413d48d30b384325379e08686785aa4ffb2c836d3f4fdf64ad330ed7fdd38aefa7e92cbc", 0x7) ioctl$auto(r0, 0x7, r0) 9.240657964s ago: executing program 4 (id=2009): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) clone$auto(0x0, 0x5, 0x0, 0x0, 0x3ff) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1p\x00', 0x80000, 0x0) 5.731271808s ago: executing program 0 (id=2029): close_range$auto(0x2, 0x8, 0x0) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6f, 0x8000000000000000, 0x8, 0x3, 0x0, 0xee00, 0x0, 0x6, 0x722, 0x9, 0x0, 0x1, 0x3, 0x2c8ebe2a, 0x7c1, 0x1, 0x2e6}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="04130000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2503000000430003800800d000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1304}, 0x1, 0x0, 0x0, 0x880}, 0x4) mmap$auto(0x0, 0x40009, 0x129, 0x16, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/12, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) r2 = socket(0x23, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r4, 0x5457, 0xd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000811) socket(0x1d, 0x2, 0x3) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) 4.803918173s ago: executing program 1 (id=2030): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x80000541b, 0x38) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') unlink$auto(&(0x7f0000000040)='./bus\x00') r3 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) listen$auto(0x3, 0x81) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x20000, 0x0) ioctl$auto_BINDER_VERSION(r5, 0xc0046209, &(0x7f0000000040)) r6 = bpf$auto(0x0, &(0x7f00000003c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x8a4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xe, 0x0) r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r7, 0x40383d0c, 0x0) sendmsg$auto_NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252e000000f500d700b6e41a98c9bdc30352bfd5aba890af776518865df9c8191c57336edd5bd7edb98db8f98a2f0f6046baab48546db35377d839be9b04854e5bb62452aa0c529c72ceb6e37ee533632c77139ddc8904fe32e27b6ee2de742511fbfb208707d9dd83dbcc39277d043781d36ab5522670738c05bd5f4780807ceb3358c5e24b5bb9156c29fa9230fbeca4078991747fd73d09cecf1a5bbdaa29c15df2356398150e66883c675a16f4c1c366d47c7ac651532cede7f84de99b8b7b6dbb5897a75d3a7cb8dde8977e8cf45e1472cb34524c40cc9d90d554ce0635d0f478925c58c8ece6f48a0fc53f80e1cb30f2cc79de48612c9c0000000800db00", @ANYRES32=r3, @ANYBLOB="04000501"], 0x118}, 0x1, 0x0, 0x0, 0x80a3245644dd73c6}, 0x2000c054) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r6) sendmsg$auto_IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x6f8, r8, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x6e3, 0x2, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @u32=0xc}, @typed={0x4, 0x19}, @nested={0x4f2, 0x3e, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="fefb55fba2327cd9f6333b238e36269291d1aac4a5abd10c9909595090e5f07866010caf48966faba7537d926cdbfe21117993350423218e0dc9f1ecafa81da1f04439e62d8b8d365b9abb524adc8f2de37697fb8ba3860b77dcca02bdb47ef839046325007cdf0147a1983da6c09d175ce5df20b37da170f715597d0b2706182278bf9dba3ca3325beb0293c66956f4c9d21ff38b7c7e308d9a43b72bf95df2a30cb8009e0d54e1dde06ed0cbccd179323eff5f94dd051de4f74d3a", @typed={0xf6, 0x137, 0x0, 0x0, @binary="a9ad5e04dbf799c9dc974f6ebde4fea3a38cdace9755cde4b0b619c230bb03b0315861390604809fd0afb0ac401382a21ba397598ba79d9342a3c95771fc01029d45895a1920d970f03da87213aab50cf56710986821976af5163243018ad409a373a7560001b39d244a1f60b24d4e8d2dda65182528b9610c1c63244f89ab588891620b9267bfce05d2d0ef64cb179da8496bb62f74639d4f59b6aa8d8f07d0b164057c81ae3d24c8ca41dd51bf4e1137be1b3cd5e3a6f6d0af5fe0a5587188fb81138acc2b8589e57336bbd3956a1a53fa0a6406616d9a12921cb824dca47e297da76c798a8a02610ff11c331e1d834215"}, @generic="926850326b558b7fc62e0cd89ea169bc74a78ab7ea8dfbc025488cefd6204e82a458ea9efec9499e46cb31b8017c0961185aa8b25bd8a3f78cc93262d071e7b01bbc80f658c5ff93941b1fc504d2192625a92c61a457149ca27b31fbd46ca208a7758dcc073877fe63cec5d73a380b3944eb7112f70046e7ebe3ad112258625f7a442232fb981773d794e3ab95db9fab88f7414351e394c2426cd5a4ac5b9c74", @generic="25ea07fd94769e7ca6d9bdaa892fe12a616f333bd8dc4a6e5ecd11932d9c2fcb4e8d9955bebcde1298cf42bfa417e129f215a97c9317084a05777cd4a22bd5b86fa20120f751af95c5b7503efdc7f609b3b3af802a8aa159726f363e09fa9b135541349bfc8489b6c9fa4a443db8ee4d30531ed22df0bd446655aac96fd5971f4a54a5c99ef281338e839d8aa5766d2a0a918a45c7cfd465746f2c756654bb6661b3fae5f8d96aaaa1329c3db9294efa7f56eda204b178136d007a4104cbb5d0fc1dc34abe4900800cf36e367ea0", @nested={0x1b6, 0x133, 0x0, 0x1, [@generic="a4336c8370254a5c77d0b8541339892e45ba0a92e72f6ae68ab285f56229b55f1e8a783b909bca39b24317dda96a74deadaa66bff6ee55edfd340853e6666c06ea20c08342827e14b5feab43438b1137e8e44703955d0a5525f14f372c499c9ea32c", @generic="438093adcb54055de0e01d6c4e6b9b6c52b2c61e26e126ece724a906f91d723807d2fc9086a59e097d37ead575f6d940f25b49b8b6ae93c9f7ce33f3fdb779bc447e34d78a967e98f0222e7a095c6f44d766ebeeafaa13ed89a276507fc3d97dfc0c8d6133992b75be606f88b6819086bd189fbe808120705174d77554632b541efa6f4f", @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@loopback}, @typed={0xb7, 0x105, 0x0, 0x0, @binary="c633d7f6e250e35aa2337d809914b39da4381c7bb81601e93cc31a0f798672fcfa6cbebb00c99fad2a1748e6abfdf8c0e171a733db422cb5091beadc23cad3a7b9d2e57d7736267a1a22359e9ff82c8d1a18cefe3108bf539accf1c4d9d3444cd677979d0bd43e39eeaeee0bfa0fc1005c170f55f5afdafd7f2d1fda74e033114bc568eda15135da30240463f1361a5a519ffd0a9054ec9728e37a7756ab0d7ea1af1e357df9dbeefca831b4327375e15b972c"}]}]}, @generic="15a2f7330e2bf062467d3b33176eee6f53336fe14f514fb24053e63207ccc7eec586cb8cb23377e1d09f14f3fb8736e5c87128a0a062242beb443cde4c83a16e6080afb878bb8f7e9bdb27839822f738c088a4ccc17a06787cc00104247914dc6c364bda74fbc41c3aba9ec940bd66c43a1aee8e567ea09643bb80318f8f1dda20ac5a07d33c7964149045d2bba0c58caca14014ed17cef289c5a7cdae03481192da34aee30b52f3dfbec01d99fde63aeff037", @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@loopback}, @typed={0x82, 0x8d, 0x0, 0x0, @binary="270d09274e24d13dd0217a8065d4e26c6833bd51b10f6937b5ab566dba8918846f06d5ef572d41f0dad78b95e214fba522e5bcf69ed9366835169811097972f23e4171afec25fc5313ef8e2249284511cf4f3733f2416c59948b7bb3f40954ef89ae38c79b5b688f73023f007f19479e77c2c15e711ed4aa6c8b11751c2c"}, @generic="c3c7c2e029fc9aee8b17b34ffe177bcd8d1360332cc403be575c10834470fa1ec03708abd6de4321af23384e1567bd634082e4a31e6f81e010c97e945c7cfdeeeaecb4daf7369f8b06fe694e01b1ce3894ce6c4658f6170ae49c0558bed6f808bf8d667d5f849b7bf4f400b611cc2ec39d8b2eedff934046dafe666192109fe8af143d032972899b19ce1acd02b1c4d22298690f"]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x4801d}, 0x40) 4.703443533s ago: executing program 0 (id=2032): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 4.46107685s ago: executing program 1 (id=2033): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xa2001, 0x0) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x15, 0x80000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x0, 0x2) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) bpf$auto(0x4, &(0x7f0000000300)=@bpf_attr_1={0xffffffffffffffff, 0x9, @value, 0x8000000000000001}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket(0x11, 0x3, 0x80000001) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40, 0x400008, 0x1, 0x1c, r1, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x100000004, 0x2, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4023233ea8422f49f378d56f07cffb000000", @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf258c0000001300fc00db1ec6a12c77d659012cff2312337b0008006a008c00000006001a010300000005001e0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x20000004) 4.366921044s ago: executing program 0 (id=2034): openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x1ff, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3000, 0x0, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x952, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clock_getres$auto(0xa, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) madvise$auto(0x0, 0x2003f0, 0x15) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.937641236s ago: executing program 0 (id=2035): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0xfffffffd) unshare$auto(0x1) r2 = io_uring_setup$auto(0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0xa888, r3, 0x10}, 0x22) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x2, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socket(0x2c, 0x80000, 0xfffffffd) socketcall$auto_SYS_SHUTDOWN(0xd, 0x0) socketpair$auto(0xf8000000, 0x5, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) unshare$auto(0x40000080) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x0, 0x100, 0x0, 0x1c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) fspick$auto(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) socket(0x2, 0x3, 0xa) 3.162613745s ago: executing program 1 (id=2037): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(r3, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="05072abd7000ffdbdf2507"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) r6 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5, @ANYRES64=r1, @ANYBLOB="75c86157982fb172697c3cc3", @ANYRESDEC=r3, @ANYRESOCT=r0, @ANYRESDEC=r6, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x103}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r7, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x0, 0x10, 0xfffffffffffffffa, 0xffffffff) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f000000c380)={0x63, 0x0, 0xbde, 0x7fffffffefff, 0xfffffffffffffffe, 0x9702, 0x0, 0x50b301a, 0x4, 0x5f, 0x0, 0x8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r9, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESDEC=r9, @ANYRES32=r2, @ANYRES64=r3, @ANYRES64=r7], 0x20}, 0x1, 0x0, 0x0, 0x24048840}, 0x10804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) 2.661477371s ago: executing program 0 (id=2039): mmap$auto(0x0, 0xdc, 0x3, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) mmap$auto(0xfffffffffffffffc, 0x2, 0x889, 0x15, 0xffffffffffffffff, 0x5) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 2.435584091s ago: executing program 0 (id=2040): madvise$auto(0x100000000002, 0x2000040080000004, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x6, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async, rerun: 32) getcwd$auto(0x0, 0xffffffffffffffff) (async) renameat$auto(0x6, 0x0, 0x5, 0x0) (async) madvise$auto(0x0, 0x200006, 0x9) (async) syslog$auto(0x1404, 0x0, 0x837) (async) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x6}) (async) poll$auto(0x0, 0x7f, 0x9) socket(0x15, 0x5, 0x6) (async) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r2, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (rerun: 64) sendfile$auto(r3, r3, 0x0, 0x3) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x109100, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000240)={0x1, "77947a0f", 0x9, 0x2, 0x7ff, 0x1bb8, "d00f5322a8e93a161984686708c98cd7"}) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async) io_uring_setup$auto(0xb, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103040, 0x0) ppoll$auto(&(0x7f00000001c0)={r5, 0x2c, 0x1000}, 0xb, 0x0, 0x0, 0x8) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) 2.318019124s ago: executing program 3 (id=2041): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x7c, 0x75, 0x0, 0x1, [@nested={0x74, 0xc1, 0x0, 0x1, [@generic="d6a3cbdd5cb9c5a2b1ac840c592afa61d6bc847cb76beca39037c2450e32a5a3953f98d718f09049aa9974b9c4", @nested={0x4, 0xb4}, @nested={0x4, 0xce}, @generic="11f6763d2520408d22703c58786c56784f5470b88e1b0ae5cf4d025a62785b38c86e4b51d7f19a", @nested={0x4, 0x9b}, @nested={0x4, 0xb9}, @nested={0x4, 0x85}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, @typed={0x4, 0x117}]}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4050}, 0x4) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000200), r0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x9}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '*-\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xf1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000300), 0x200040, 0x0) (async) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000300), 0x200040, 0x0) shmctl$auto_SHM_INFO(0x80, 0xe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x9, 0x6}, 0x2, 0x9, 0x0, 0x2, @raw=0x3, @raw=0x5, 0x39a, 0x0, &(0x7f0000000340)="3c4484c1e86d5cf1b6ab668e5932c3a6", &(0x7f0000000380)="b8dce7708ead398f49098956d7fbfdacdbd831a185bd49795f11793422aeefcd266415e05c4f0a4be83f7a7033b9a4ab6d972e2c2c2da7db44621f8a545bffd7483c24f30a64009e4a22cccc124ad13a8598e89f00a55036f5eb769ce00d4e107ef6068ba2c8785cf4df7408d8f6e4d36073f05bac6d4f557f6d05355e1c339035c29579a5c9763b42934680d170b7d715eeb4770481e888ba06a9b29a4e739ea24cd433267c93671328a43ea782a4150d957f90ef4dfc093f50f0673d5fd3b2169b13dd2290c4145d4126d5f2ff7a1236df92bb58bbec2f8470d1706dd5c1d8aa5237"}) (async) shmctl$auto_SHM_INFO(0x80, 0xe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x9, 0x6}, 0x2, 0x9, 0x0, 0x2, @raw=0x3, @raw=0x5, 0x39a, 0x0, &(0x7f0000000340)="3c4484c1e86d5cf1b6ab668e5932c3a6", &(0x7f0000000380)="b8dce7708ead398f49098956d7fbfdacdbd831a185bd49795f11793422aeefcd266415e05c4f0a4be83f7a7033b9a4ab6d972e2c2c2da7db44621f8a545bffd7483c24f30a64009e4a22cccc124ad13a8598e89f00a55036f5eb769ce00d4e107ef6068ba2c8785cf4df7408d8f6e4d36073f05bac6d4f557f6d05355e1c339035c29579a5c9763b42934680d170b7d715eeb4770481e888ba06a9b29a4e739ea24cd433267c93671328a43ea782a4150d957f90ef4dfc093f50f0673d5fd3b2169b13dd2290c4145d4126d5f2ff7a1236df92bb58bbec2f8470d1706dd5c1d8aa5237"}) shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000000640)={{0x9e, 0x0, 0xffffffffffffffff, 0x6, 0x3, 0x36f6, 0x81}, 0x3, 0x6, 0x2, 0x7, @inferred=0xffffffffffffffff, @raw=0x6, 0x1, 0x0, &(0x7f0000000500)="afca0338f44bd529ebe9cfef1fa6b7a41babbc7852f267c7d8ebe7f27ef8806e45", &(0x7f0000000540)="0bde2a2f1d6f8c487963d533115d4dd151b4ff1eca17952b20f6ae7f130503dd0ebf31cc14d1742d093ef278a68098cb7695da6e08ad50eaa56aa7357d1e6623dca005328450b9c6f437719d7f9a294b791296ecfaff96e90045e68d98f991ffd7bce521b053a8050b7c6cc6b976133f56977fc5d71a6b708d72a7c69e9b4eb2765c307a6e31db3eecc266a310ff834c8e8c88f10b5ebc65869f80865b0ceddcb55db09b31866aca40fdf81815f5e0c10f6f2893b59760ba3c334d072c119222a7a007be95c91750dc3a8f8095ff2aa25c7f6241ac23fc73bdbcba5e27a08a1f4656c67284beed04fc973e04adfb6f21"}) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f00000006c0)={0x6, 0x0, 0xc, 0x8000000000000001}) keyctl$auto(0x5, r4, r5, r7, 0x3ff) (async) keyctl$auto(0x5, r4, r5, r7, 0x3ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000700), r8) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000700), r8) r9 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000740), 0x88000, 0x0) r10 = fcntl$auto_F_DUPFD_CLOEXEC(r3, 0x406, r8) bind$auto(r9, &(0x7f0000000780)=@l2={0x1f, 0x3ff, @none, 0x6}, 0x4) (async) bind$auto(r9, &(0x7f0000000780)=@l2={0x1f, 0x3ff, @none, 0x6}, 0x4) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000800), r10) sendmsg$auto_TIPC_NL_NET_SET(r10, &(0x7f0000002f00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002ec0)={&(0x7f0000000840)={0x2658, r11, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20c, 0x7, 0x0, 0x1, [@nested={0xfc, 0x99, 0x0, 0x1, [@nested={0x4, 0x3d}, @nested={0x4, 0x2f}, @generic="bf0405d09b0f31413aecff5bde30fcce7ec52276f56759fe26765912c5af59d8fbe81d4e9cce", @generic="44973ad8cf6ea2daffdd24466b7c8ddb0529589867db39be4c6985eff34f2fe39d86a1e8dcec37c56d8b7f96dfd9ec3303dd5ba567e40722a93257b8685c9d8dc7237beec100ee89e968c6177611395c8aa32cc3c2ed8ada8bcc8ff61260558faf4565b2bc9bcd9a05e03d627a2ba62bbeff1c26183b48d24885557c5a0999b48af6504c42a4f07241def1f2df78e1d4bc4c85554fbc8c66016f55bd6f891a98584924da8bb40b2a8a866223487dc8fa262a4133367291cbe02a8388e76a59b11951", @typed={0x8, 0x8f, 0x0, 0x0, @pid=r6}]}, @nested={0x10c, 0xec, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @pid=r6}, @generic="30ade12353c3a872eef1c9df5d0bf79f5d59a451770b1c76ceec9100cbe7723a22a41c7935d3f65ccebe770ce16e5691db079afa5fa5964a5f66f7aac5eda64b70f1f0e1573ca6e8b51e1953220098ebf8789c7aa7cf97520bbc5e46473656e759014a00a2647b7555525a6e58feee376085507334ea68ea61bddc6231621ef8eb5aeb74a3971935b026c7f96644bee5d3618a97aa832772ae7ce10111c4742a99198e907a5eba020d05eca38ae4e1c8d2b591a2eb73135c9e959b4c8eaaa92432ec2c4ccefdf4b513434ec55b558823dad55c557e8a42e799d9f5b544aeab8d30b5a5f9d5909a669dc7de83a496d84db2e73123", @nested={0x4, 0x148}, @typed={0x5, 0x26, 0x0, 0x0, @str='\x00'}]}]}, @TIPC_NLA_PUBL={0x2435, 0x3, 0x0, 0x1, [@nested={0x1113, 0x13e, 0x0, 0x1, [@typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="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", @typed={0x8, 0x21, 0x0, 0x0, @pid=r6}, @generic="572aed26fab7077f4cf14349068a0b99097dea7fbde6bf0c8f101a95b2a1fcbc9a92ffe025cf25c5a8cb15ec34d77656a9b817c40cea7a8aaa1980e9cbdc633ed676c1aa99c0818aa5b362d4c5f7f6d39c6bb86c9dab3beb59a873397e179fb98d55763456921bcdb0e22bbfbb60e9febb3b2edb45fc4c505c374c69e1ad6b4665ce9c90ede94922d9a3169156b81d1b4d0951936cd10122056f3ee98e6690fc2d0bc7c1762085c74be56e25fda09b4ea9c1790a49813efc08e87de995fcd13507cb3c54586394441b0f62a9e67f41d8f921e385a29f1cff52aff1a82477568ee5c089ab5a602b13cf5a28d990702d466d2195"]}, @generic="a5659389e7d196c8cc0b2d453aaa6ec38d971a7e8b7e13d2c988a197a7a44c83ea818095871400caa1f93613b75893909bda3e11e0b00ee630315f49cbbdfdb5a6bb104e98b5d8e8e7b1a16f475a9fe67df07e47e4472c88515b95196bc919767f9cb64a066b2efe4d9ae3969352aea3acaca141a2c03c32470f90dfaae7bfc52d2ba8249642fdae552300cae7c6247a1bee9801483fb9aa4e385674e25e1d8336dc2be086b2adcc289616a626181a3a9d21e3d96b9a60d57b275bce0a02ef2eec8e3b3dc2146952e2bf4ee4d1868d92e7ae74ff2c66309b9bb744c915fd", @generic="d2b10da63e6de1b31d3e22d939e8402b051c28a9fc4b2321315084e274d012154091ccee4a3705ea5581ffd79efeafafe5030c0c26a8d394a2104561495b2f06610d9f9e93ba0b7af9fdc658cf1229eefed88f96b3428f337e", @generic="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", @generic="e66edf74b3b9d31dbae326750c60c1c425bf0fefd4a883a6b0b867330b059aa7e36d234ead6763edbd5fa238a82772232f7fa0ffaeb4846401c2adcd23ee2de4007a42fdb0ffa2ba13eb010e8f6d09bd4443d1", @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x81}, @generic="67a4421a48a3d6580fd4bcac3849f0991c837321f4a6618d36cf9e5b8370e0a6ada1cd363185e6957dd734d09c0db2d4d7e62e4985fb3d38314b771a0af576b6fd261b60f5117135429dd1f6260f86bc29fab0af724460a9b7a4e271770bb1be6ca496cbd1b48a64f332be883469571e76fb2b64959d1917c4a8f0ace70c49b9196f02eb42a7399e245db9cfffd304f499a543415845dbf8f1a2f0cab38d813e5d8726d307d3c67a88656acf7fce7cdf2b7b4fe954732669", @nested={0x20, 0xfc, 0x0, 0x1, [@nested={0x4, 0x107}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x4d}]}, @generic="9865a6b15bf8920e49e1315520ca723c5b173a0b17147774ef022e49239960d5cede3cb1edd101d93a057bf36b046b19cfde294ea50e41e6eef8d97677286233bae62ceb43a4e0064a8bc8dd177c2ef770cec2d0ad5c95804d9996f93aa955c265174f6d508d3dd4311424ea38ac44facdfb5ff0888216893475af84876292ea67d756c642385e3fbb6c35bbfdc0643a519175eaf065f7a08654c2a65c6df99170b649", @nested={0xc, 0x13d, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @pid=r6}]}]}]}, 0x2658}, 0x1, 0x0, 0x0, 0x2000c094}, 0x8001) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r9, 0x12, &(0x7f0000002f40)="c05348cd26675853d36ea04145f572f6e20bd0a23f221a121bd36f5197d100c4c38b3edfea95f973fd6a851cf219b8f07dd1a0d71cc9fd6fcaee721b73282705edced12df9d311e9c38ecf9a1b27642062dd3d96dedfe4defe3f1d7f2435dd47e21d7ff4b06bd5e0aa8923f9a7e4e58eea6618e264aa76bceac2ac", 0x4) r12 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x81) close_range$auto(r10, r12, 0x3ff) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/thread-self/gid_map\x00', 0x4a6001, 0x0) (async) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/thread-self/gid_map\x00', 0x4a6001, 0x0) ioctl$auto_PPPIOCSMRU(r12, 0x40047452, &(0x7f0000003000)) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000003080), r12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000030c0)={'veth1_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000030c0)={'veth1_vlan\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f00000035c0)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003580)={&(0x7f0000003100)={0x46c, r13, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfff8}, @NL802154_ATTR_SEC_DEVKEY={0x144, 0x2f, 0x0, 0x1, [@generic="fa1e2b6d882b36b43d3cfe23c926f77a7fac45c87d7f79862fa6d1abf655cacf1bccc06a947f2d268ce15bcaf5e3ef648e63bf389de954aa5553d3e12c884018840bab251ecf6dc6b14510e6267d8ffd12feb46c14b5bdf0a69065b4c43924a78617a0e9f7f9c89c747fb36fee2e02881ec5cd3fb0f616b8aeba388c74b9c0", @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xc1, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="ae6d109914d4c14a901dbb6786edc1301f469cc301fca2d9ed532c088a88e703317bcfdd484f25aae474608066d4ba1f83143008484d112bbb4d36b9ddf7006159776a7d8ac0816b219af762b99ed015a082d1385667fb563c88324c567a3b88e2a0f9ce84da297ae85422cf04be5c0754fe47832c8791a614f0b2f30c232c3197a422312725a5adfdd78b550130d53c968d13b361a6957ee0b4c96b3629e5d78446cb093f"]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x885}, @NL802154_ATTR_SEC_DEVKEY={0x2db, 0x2f, 0x0, 0x1, [@typed={0xa, 0xf, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @typed={0xad, 0x115, 0x0, 0x0, @binary="f3ddf595ba1cfa864c4570d2f5f4abcba01f70395c8ab923c73f309ef8bac1aaaeec21f3a87a7b9591a84d2b2db56ea67376bb1ea20d6b051f1b378dcccb13b216a8ff5ef239a2834c20c4153e6601b428ef793f2f09fe2dac6d94dbb33a91ec66f0bc059a9bc5fc067612e3ba5365e6638682c420ee99de7537b4c82d826d5ec6601a47a2762d34f9adad45c85d03462c23414264b2d2fe3e132445dec69d566640ea147630da5c21"}, @nested={0x8f, 0x5f, 0x0, 0x1, [@generic="7eb6514b5af15083b2c2b3ae96a4bd5912d4bce6380fb1c7fd1a3044b657639ab2f73fbe490da063bef055fbcbf9058673002dbfc051aaf1afc7198ff599eee84b7f7d092838262fedd88dac78c494d1f02a4a706fe600ea0c620141e03ac9f313f6b6e3db1a285a9e326feec99f6ee1b8e5c103ac7efa", @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x9}}]}, @generic="72ce1b393bf991378749350d36e50d79407dbe19913aefd9b4d4a864dab169592974966b72aa35dad1c8c0a20176baecd424b7a20abcb19bdb1711a21b5a8bf8e6ad634cc3715375841e5892b928de691ae642c45694bb1b4b503edf9214807b4e66a2438ce0ad651da262c0739ff43c6c358c7ce14ac683fa72d5f3da7da748cbbf3ba553a7642997828cbc100808146f23056f2f8c3983ea2c580c30703d1ac390f087f91dfc202a2b20fd044b1653dbc7ec5ea6a2a9fb947dca5f31d3936e4f14c55cd4778104bc48b592", @generic="6420fc25abd079443984f6d21cf95d475e99025435eb74d68c3f67a6fb1c58d45fa61c24fe3d024c9667f9dc7a0f21dc2ce6d2e8d4a8975e0337137457ab3d0232aa6863d555357fde7cf81c2a02e2b0ad99b1b61aa34b5eb718e472a01e9b5c17464a683ee5ed3fc7831ef3ee58701c2e63904259af76c1d0b612a5dd6d2e0ca2a1e50c558565f4a095493496f9bbdc0659942671cd55c26888e02cf21a2400e66c0a6b3cdf52dcb4db2f861d13d98657c3eefaac6a7b283cbbaf3a037548"]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x46c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004015) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x10) write$auto_msft_opcode_fops_(r10, &(0x7f0000003700)="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", 0xff) prctl$auto_PR_SET_FPEMU(0xa, 0x80000000, 0x0, 0x65, 0x2) r15 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003840), r10) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000003a00)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000039c0)={&(0x7f00000038c0)={0xe8, r15, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0xe8}}, 0x30000000) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000003a00)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000039c0)={&(0x7f00000038c0)={0xe8, r15, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0xe8}}, 0x30000000) 2.000111004s ago: executing program 3 (id=2042): mmap$auto(0x0, 0x100000020009, 0xdf, 0x8eb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000002, 0x0, 0x3, 0x0, 0x27, 0x401}, 0x2}, 0x800, 0x80000000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x81000000) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 1.860252393s ago: executing program 1 (id=2043): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) 1.847654835s ago: executing program 3 (id=2044): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) socket(0x2c, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3, 0x0, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2c, 0xa, 0x8b) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 1.684739415s ago: executing program 4 (id=2045): write$auto(0x800000000000c8, 0x0, 0x1a) (async, rerun: 32) shutdown$auto(0x200000003, 0x2) (async, rerun: 32) set_mempolicy$auto(0x8003, 0x0, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = epoll_create$auto(0x3e) (async) socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r1, 0x1, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0x8000000000ac1, 0x2, 0x36242397, 0xfffff5b2, 0x3bb, 0x8000007, 0x40000000000fffd, 0x6, 0x81, 0x68198}, 0x6f3) socket(0xa, 0x5, 0x0) (async, rerun: 32) r3 = socket(0xa, 0x2, 0x88) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) capset$auto(0x0, 0x0) (async) open(0x0, 0x22240, 0x154) (async, rerun: 64) socket(0x26, 0x2, 0x88) (rerun: 64) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r3, 0x100, @old_prog_fd=r3}, 0x10) (async) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={0xffffffffffffffff, 0xbb8, @value, 0x100000003}, 0x8) (async) fcntl$auto(r2, 0x10, 0x2) (async, rerun: 64) bind$auto(0x3, 0x0, 0x68) (async, rerun: 64) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000200)=0xfff) (async) r4 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x2480, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200080, 0x180) (async) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xf2, 0x40, 0x8, r4, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x47, 0x156c, 0x7, 0x83}, {0x7ff, 0x13, 0x3b, 0x8, 0x5, 0x553, 0x3, 0x9}}) 1.36363544s ago: executing program 1 (id=2046): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) socket(0x18, 0xa, 0x1) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084) socket(0xa, 0x2, 0x0) (async) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x4, 0x0, 0x0) (async) r4 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2, 0x0) writev$auto(r4, &(0x7f0000000240)={0x0, 0x80}, 0x7f) (async) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x491, 0x400, 0x9}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = landlock_create_ruleset$auto(&(0x7f00000000c0)={0x0, 0x10, 0x6}, 0x5, 0x2) ioctl$auto_TUNGETVNETLE2(r6, 0x800454dd, &(0x7f0000000100)=0x1) (async) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) 894.819499ms ago: executing program 4 (id=2047): request_key$auto_KEY_SPEC_PROCESS_KEYRING(&(0x7f00000006c0)='[{%\xbc::(\x00', 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r1) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x8}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x2, 0xe8, 0x3, 0x13d, 0x9, 0x3, 0x1, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r4 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) wait4$auto(0x0, &(0x7f0000000040)=0x9, 0x6, &(0x7f00000000c0)={{0x351b2273, 0x9}, {0x0, 0x5}, 0x6529, 0x0, 0x1000, 0x7fff, 0x8000000000000001, 0x5, 0x8, 0x9, 0xc, 0x1, 0x3, 0x5, 0x40, 0x5}) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 892.95782ms ago: executing program 3 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2}) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[]) ioctl$auto_USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setreuid$auto(0x9, 0x1) r5 = geteuid() keyctl$auto(0x1f, r5, r5, 0x5, 0x8) 527.436954ms ago: executing program 3 (id=2049): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x91) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) fanotify_init$auto(0x5, 0x800) pipe2$auto(0x0, 0x80) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x9, 0x0, 0x7fffffff) r3 = getsockopt$auto(r2, 0x6, 0x9, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x14) r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x94) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$auto(0x0, &(0x7f00000000c0)=@prog_bind_map={r3, r1, 0x1000}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x4}, 0x103) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r7 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42840, 0x95) read$auto(r7, 0x0, 0x1) 279.315779ms ago: executing program 3 (id=2050): writev$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x1) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x0, 0x6, 0x100e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, 0x0) lsm_get_self_attr$auto(0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) r0 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyaf\x00', 0x40, 0x0) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) close_range$auto(0x2, r0, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') 138.587998ms ago: executing program 4 (id=2051): socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) setsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, &(0x7f0000000040)='\x00', 0x11) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0x930) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) socket(0x2a, 0x1, 0x88) connect$auto(r0, &(0x7f0000000080)=@rc={0x1f, @any, 0x3}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x204000, 0x8000, 0x468, 0x9, 0x2, 0x4, 0x2, 0x0, 0x200, 0x1ff, 0xb6, 0x4, 0x3, 0x3}, 0x7fff) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r4 = set_tid_address$auto(0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0x10040) getdents$auto(r5, 0x0, 0xa2b0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 0s ago: executing program 1 (id=2052): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/error_log\x00', 0x400b22, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x0, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x2, 0xc45d, 0x7d, 0x6, 0x2000003, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x4000000, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x40000, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000480)={@raw=0x7, 0x79, 0x0, 0x9, "4c90b365c55c80290ec911a518ebbc5effecfe3f80265b797ab96ec6d472439100"}) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x9054c2, 0x124) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x94) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004801) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) read$auto_proc_tid_children_operations_internal(r3, &(0x7f00000004c0)=""/121, 0x79) r6 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x18d183, 0x0) write$auto(r6, &(0x7f0000001080)='\xcb:\x00', 0x2) write$auto(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): 0e/0x3c0 [ 440.949426][T13359] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 440.949440][T13359] __x64_sys_ioctl+0x18e/0x210 [ 440.949461][T13359] do_syscall_64+0xcd/0xfa0 [ 440.949478][T13359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.949492][T13359] RIP: 0033:0x7fb48d98efc9 [ 440.949505][T13359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.949519][T13359] RSP: 002b:00007fb48e763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.949534][T13359] RAX: ffffffffffffffda RBX: 00007fb48dbe5fa0 RCX: 00007fb48d98efc9 [ 440.949544][T13359] RDX: 0000000000000073 RSI: 00000000400454d0 RDI: 00000000000000c8 [ 440.949553][T13359] RBP: 00007fb48da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 440.949562][T13359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.949570][T13359] R13: 00007fb48dbe6038 R14: 00007fb48dbe5fa0 R15: 00007ffdd45cf4b8 [ 440.949590][T13359] [ 441.546700][T13370] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 441.567253][T13363] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1486'. [ 441.758626][T13370] PCI: Can't parse resource_alignment parameter: B¿Fj˜ô’l [ 441.803647][T13378] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1488'. [ 442.114820][T13385] Invalid ELF header magic: != ELF [ 442.296529][T13395] FAULT_INJECTION: forcing a failure. [ 442.296529][T13395] name failslab, interval 1, probability 0, space 0, times 0 [ 442.447471][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.1.1490 Tainted: G U syzkaller #0 PREEMPT(full) [ 442.447504][T13395] Tainted: [U]=USER [ 442.447509][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.447517][T13395] Call Trace: [ 442.447522][T13395] [ 442.447528][T13395] dump_stack_lvl+0x16c/0x1f0 [ 442.447550][T13395] should_fail_ex+0x512/0x640 [ 442.447571][T13395] ? __kmalloc_cache_noprof+0x5f/0x780 [ 442.447596][T13395] should_failslab+0xc2/0x120 [ 442.447615][T13395] __kmalloc_cache_noprof+0x72/0x780 [ 442.447635][T13395] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 442.447652][T13395] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 442.447667][T13395] ? loopback_open+0x145/0x13f0 [ 442.447682][T13395] ? loopback_open+0x145/0x13f0 [ 442.447694][T13395] loopback_open+0x145/0x13f0 [ 442.447710][T13395] snd_pcm_open_substream+0xa60/0x17f0 [ 442.447733][T13395] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 442.447756][T13395] ? rcu_is_watching+0x12/0xc0 [ 442.447774][T13395] snd_pcm_open+0x29e/0x730 [ 442.447797][T13395] ? __pfx_snd_pcm_open+0x10/0x10 [ 442.447820][T13395] ? __pfx_default_wake_function+0x10/0x10 [ 442.447840][T13395] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 442.447861][T13395] snd_pcm_playback_open+0x86/0xe0 [ 442.447882][T13395] snd_open+0x22d/0x4c0 [ 442.447899][T13395] ? __pfx_snd_open+0x10/0x10 [ 442.447915][T13395] chrdev_open+0x234/0x6a0 [ 442.447931][T13395] ? __pfx_apparmor_file_open+0x10/0x10 [ 442.447951][T13395] ? __pfx_chrdev_open+0x10/0x10 [ 442.447971][T13395] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 442.447991][T13395] do_dentry_open+0x982/0x1530 [ 442.448008][T13395] ? __pfx_chrdev_open+0x10/0x10 [ 442.448028][T13395] vfs_open+0x82/0x3f0 [ 442.448049][T13395] path_openat+0x1de4/0x2cb0 [ 442.448071][T13395] ? __pfx_path_openat+0x10/0x10 [ 442.448086][T13395] ? __lock_acquire+0xb8a/0x1c90 [ 442.448107][T13395] do_filp_open+0x20b/0x470 [ 442.448122][T13395] ? __pfx_do_filp_open+0x10/0x10 [ 442.448150][T13395] ? alloc_fd+0x471/0x7d0 [ 442.448169][T13395] do_sys_openat2+0x11b/0x1d0 [ 442.448188][T13395] ? __pfx_do_sys_openat2+0x10/0x10 [ 442.448215][T13395] __x64_sys_openat+0x174/0x210 [ 442.448234][T13395] ? __pfx___x64_sys_openat+0x10/0x10 [ 442.448262][T13395] do_syscall_64+0xcd/0xfa0 [ 442.448279][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.448293][T13395] RIP: 0033:0x7f640638efc9 [ 442.448305][T13395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.448318][T13395] RSP: 002b:00007f640714e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.448332][T13395] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f640638efc9 [ 442.448341][T13395] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 442.448350][T13395] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 442.448358][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.448367][T13395] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 442.448386][T13395] [ 443.771371][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 443.986333][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 445.597927][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 445.645950][T13459] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1505'. [ 447.842403][T13487] zswap: compressor not available [ 448.996364][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'. [ 449.097633][T13519] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1515'. [ 449.934751][T13536] delete_channel: no stack [ 450.192435][T13542] FAULT_INJECTION: forcing a failure. [ 450.192435][T13542] name failslab, interval 1, probability 0, space 0, times 0 [ 450.382064][T13542] CPU: 0 UID: 0 PID: 13542 Comm: syz.1.1521 Tainted: G U syzkaller #0 PREEMPT(full) [ 450.382089][T13542] Tainted: [U]=USER [ 450.382094][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.382103][T13542] Call Trace: [ 450.382107][T13542] [ 450.382113][T13542] dump_stack_lvl+0x16c/0x1f0 [ 450.382133][T13542] should_fail_ex+0x512/0x640 [ 450.382155][T13542] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 450.382174][T13542] should_failslab+0xc2/0x120 [ 450.382192][T13542] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 450.382207][T13542] ? __d_alloc+0x32/0xae0 [ 450.382225][T13542] ? __d_alloc+0x32/0xae0 [ 450.382239][T13542] __d_alloc+0x32/0xae0 [ 450.382255][T13542] d_alloc_pseudo+0x1c/0xc0 [ 450.382274][T13542] alloc_file_pseudo+0xcf/0x230 [ 450.382294][T13542] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 450.382314][T13542] ? alloc_fd+0x471/0x7d0 [ 450.382330][T13542] sock_alloc_file+0x50/0x210 [ 450.382345][T13542] __sys_socket+0x1c0/0x260 [ 450.382363][T13542] ? __pfx___sys_socket+0x10/0x10 [ 450.382381][T13542] ? syscall_user_dispatch+0x78/0x140 [ 450.382406][T13542] __x64_sys_socket+0x72/0xb0 [ 450.382424][T13542] do_syscall_64+0xcd/0xfa0 [ 450.382441][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.382455][T13542] RIP: 0033:0x7f6406390ee7 [ 450.382466][T13542] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.382479][T13542] RSP: 002b:00007f640714cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 450.382493][T13542] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f6406390ee7 [ 450.382502][T13542] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 450.382510][T13542] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 450.382518][T13542] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 450.382527][T13542] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 450.382545][T13542] [ 452.262508][T13553] delete_channel: no stack [ 452.386824][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 452.452518][T13581] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1529'. [ 455.507508][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 455.625696][T13643] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1542'. [ 456.401713][T13626] kexec: Could not allocate control_code_buffer [ 456.561924][T13655] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1545'. [ 457.409804][T13682] ovs_ÿþ: entered promiscuous mode [ 457.459228][T13682] delete_channel: no stack [ 457.695978][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 457.751458][T13693] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1554'. [ 458.636434][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 458.767404][T13719] delete_channel: no stack [ 459.008453][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 460.040207][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 461.182948][T13785] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1580'. [ 462.071257][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 462.126936][ T5150] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 462.389866][T13818] FAULT_INJECTION: forcing a failure. [ 462.389866][T13818] name failslab, interval 1, probability 0, space 0, times 0 [ 462.539445][T13818] CPU: 0 UID: 0 PID: 13818 Comm: syz.2.1585 Tainted: G U syzkaller #0 PREEMPT(full) [ 462.539471][T13818] Tainted: [U]=USER [ 462.539476][T13818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 462.539484][T13818] Call Trace: [ 462.539490][T13818] [ 462.539495][T13818] dump_stack_lvl+0x16c/0x1f0 [ 462.539516][T13818] should_fail_ex+0x512/0x640 [ 462.539538][T13818] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 462.539555][T13818] should_failslab+0xc2/0x120 [ 462.539574][T13818] kmem_cache_alloc_noprof+0x75/0x6e0 [ 462.539588][T13818] ? proc_reg_open+0x23f/0x5f0 [ 462.539609][T13818] ? proc_reg_open+0x23f/0x5f0 [ 462.539625][T13818] proc_reg_open+0x23f/0x5f0 [ 462.539643][T13818] do_dentry_open+0x982/0x1530 [ 462.539659][T13818] ? __pfx_proc_reg_open+0x10/0x10 [ 462.539680][T13818] vfs_open+0x82/0x3f0 [ 462.539701][T13818] path_openat+0x1de4/0x2cb0 [ 462.539722][T13818] ? __pfx_path_openat+0x10/0x10 [ 462.539737][T13818] ? __lock_acquire+0xb8a/0x1c90 [ 462.539758][T13818] do_filp_open+0x20b/0x470 [ 462.539772][T13818] ? __pfx_do_filp_open+0x10/0x10 [ 462.539793][T13818] ? __pfx_kfree_link+0x10/0x10 [ 462.539817][T13818] ? alloc_fd+0x471/0x7d0 [ 462.539836][T13818] do_sys_openat2+0x11b/0x1d0 [ 462.539854][T13818] ? __pfx_do_sys_openat2+0x10/0x10 [ 462.539874][T13818] ? find_held_lock+0x2b/0x80 [ 462.539892][T13818] __x64_sys_openat+0x174/0x210 [ 462.539912][T13818] ? __pfx___x64_sys_openat+0x10/0x10 [ 462.539938][T13818] do_syscall_64+0xcd/0xfa0 [ 462.539955][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.539969][T13818] RIP: 0033:0x7fb48d98efc9 [ 462.539981][T13818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.539994][T13818] RSP: 002b:00007fb48e763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 462.540008][T13818] RAX: ffffffffffffffda RBX: 00007fb48dbe5fa0 RCX: 00007fb48d98efc9 [ 462.540017][T13818] RDX: 0000000000040900 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 462.540027][T13818] RBP: 00007fb48da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.540036][T13818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.540043][T13818] R13: 00007fb48dbe6038 R14: 00007fb48dbe5fa0 R15: 00007ffdd45cf4b8 [ 462.540062][T13818] [ 462.772112][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.598360][T13828] FAULT_INJECTION: forcing a failure. [ 463.598360][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 463.715505][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.2.1587 Tainted: G U syzkaller #0 PREEMPT(full) [ 463.715532][T13828] Tainted: [U]=USER [ 463.715537][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.715546][T13828] Call Trace: [ 463.715552][T13828] [ 463.715558][T13828] dump_stack_lvl+0x16c/0x1f0 [ 463.715578][T13828] should_fail_ex+0x512/0x640 [ 463.715600][T13828] ? fs_reclaim_acquire+0xae/0x150 [ 463.715620][T13828] should_failslab+0xc2/0x120 [ 463.715640][T13828] kmem_cache_alloc_noprof+0x75/0x6e0 [ 463.715653][T13828] ? __pfx_map_id_range_down+0x10/0x10 [ 463.715674][T13828] ? security_inode_alloc+0x3b/0x2b0 [ 463.715698][T13828] ? security_inode_alloc+0x3b/0x2b0 [ 463.715716][T13828] security_inode_alloc+0x3b/0x2b0 [ 463.715737][T13828] inode_init_always_gfp+0xce4/0x1030 [ 463.715754][T13828] alloc_inode+0x86/0x240 [ 463.715772][T13828] sock_alloc+0x40/0x280 [ 463.715788][T13828] __sock_create+0xc1/0x8d0 [ 463.715808][T13828] __sys_socket+0x14d/0x260 [ 463.715826][T13828] ? __pfx___sys_socket+0x10/0x10 [ 463.715844][T13828] ? syscall_user_dispatch+0x78/0x140 [ 463.715868][T13828] __x64_sys_socket+0x72/0xb0 [ 463.715886][T13828] do_syscall_64+0xcd/0xfa0 [ 463.715903][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.715917][T13828] RIP: 0033:0x7fb48d990ee7 [ 463.715928][T13828] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.715941][T13828] RSP: 002b:00007fb48e740fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 463.715956][T13828] RAX: ffffffffffffffda RBX: 00007fb48dbe6090 RCX: 00007fb48d990ee7 [ 463.715966][T13828] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 463.715975][T13828] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 463.715984][T13828] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 463.715993][T13828] R13: 00007fb48dbe6128 R14: 00007fb48dbe6090 R15: 00007ffdd45cf4b8 [ 463.716012][T13828] [ 463.716035][T13828] socket: no more sockets [ 465.230732][T13851] program syz.3.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.328549][T13854] delete_channel: no stack [ 466.597219][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 466.639249][T13867] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1598'. [ 467.195062][T13890] netlink: 'syz.3.1604': attribute type 4 has an invalid length. [ 467.274580][T13891] < [ 467.274617][T13890] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1604'. [ 467.471943][T13877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.535296][T13877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 467.632536][T13877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 467.797357][T13877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.852805][T13877] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 467.885935][T13899] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1606'. [ 467.929856][T13899] netlink: 214 bytes leftover after parsing attributes in process `syz.3.1606'. [ 467.975745][T13899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.983193][T13899] IPv6: NLM_F_CREATE should be set when creating new route [ 467.990462][T13899] IPv6: NLM_F_CREATE should be set when creating new route [ 467.997670][T13899] IPv6: NLM_F_CREATE should be set when creating new route [ 468.005952][T13877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.011875][T13877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 468.118770][T13884] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 468.210879][T13877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 468.294864][T13877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.333530][T13877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 468.389122][T13877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 468.548330][T13887] kexec: Could not allocate control_code_buffer [ 468.661588][T13905] FAULT_INJECTION: forcing a failure. [ 468.661588][T13905] name failslab, interval 1, probability 0, space 0, times 0 [ 468.882479][T13905] CPU: 0 UID: 0 PID: 13905 Comm: syz.1.1607 Tainted: G U syzkaller #0 PREEMPT(full) [ 468.882506][T13905] Tainted: [U]=USER [ 468.882510][T13905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.882519][T13905] Call Trace: [ 468.882524][T13905] [ 468.882530][T13905] dump_stack_lvl+0x16c/0x1f0 [ 468.882550][T13905] should_fail_ex+0x512/0x640 [ 468.882572][T13905] ? fs_reclaim_acquire+0xae/0x150 [ 468.882593][T13905] should_failslab+0xc2/0x120 [ 468.882611][T13905] kmem_cache_alloc_noprof+0x75/0x6e0 [ 468.882625][T13905] ? __pfx_map_id_range_down+0x10/0x10 [ 468.882646][T13905] ? security_inode_alloc+0x3b/0x2b0 [ 468.882670][T13905] ? security_inode_alloc+0x3b/0x2b0 [ 468.882689][T13905] security_inode_alloc+0x3b/0x2b0 [ 468.882710][T13905] inode_init_always_gfp+0xce4/0x1030 [ 468.882733][T13905] alloc_inode+0x86/0x240 [ 468.882752][T13905] sock_alloc+0x40/0x280 [ 468.882768][T13905] __sock_create+0xc1/0x8d0 [ 468.882789][T13905] __sys_socket+0x14d/0x260 [ 468.882806][T13905] ? __pfx___sys_socket+0x10/0x10 [ 468.882824][T13905] ? syscall_user_dispatch+0x78/0x140 [ 468.882850][T13905] __x64_sys_socket+0x72/0xb0 [ 468.882868][T13905] do_syscall_64+0xcd/0xfa0 [ 468.882884][T13905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.882898][T13905] RIP: 0033:0x7f6406390ee7 [ 468.882910][T13905] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.882923][T13905] RSP: 002b:00007f640714cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 468.882937][T13905] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f6406390ee7 [ 468.882946][T13905] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 468.882954][T13905] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 468.882962][T13905] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 468.882970][T13905] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 468.882989][T13905] [ 468.883011][T13905] socket: no more sockets [ 469.105515][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 469.367538][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 469.413254][T13924] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1611'. [ 469.815494][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 470.045623][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 470.365542][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 470.599292][ T5836] Bluetooth: hci3: unknown advertising packet type: 0xea [ 471.167367][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 471.885471][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 472.128301][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 472.446542][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 472.718883][T13973] FAULT_INJECTION: forcing a failure. [ 472.718883][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 472.785571][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.1.1622 Tainted: G U syzkaller #0 PREEMPT(full) [ 472.785597][T13973] Tainted: [U]=USER [ 472.785602][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.785611][T13973] Call Trace: [ 472.785616][T13973] [ 472.785622][T13973] dump_stack_lvl+0x16c/0x1f0 [ 472.785643][T13973] should_fail_ex+0x512/0x640 [ 472.785664][T13973] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 472.785682][T13973] should_failslab+0xc2/0x120 [ 472.785700][T13973] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 472.785715][T13973] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 472.785733][T13973] ? __d_alloc+0x32/0xae0 [ 472.785752][T13973] ? __d_alloc+0x32/0xae0 [ 472.785767][T13973] __d_alloc+0x32/0xae0 [ 472.785784][T13973] path_from_stashed+0x427/0x750 [ 472.785804][T13973] ns_get_path+0x60/0x80 [ 472.785818][T13973] proc_ns_get_link+0x121/0x230 [ 472.785835][T13973] ? __pfx_proc_ns_get_link+0x10/0x10 [ 472.785853][T13973] ? atime_needs_update+0x8b/0x710 [ 472.785873][T13973] ? __pfx_proc_ns_get_link+0x10/0x10 [ 472.785889][T13973] step_into+0x196c/0x21a0 [ 472.785906][T13973] ? __pfx_step_into+0x10/0x10 [ 472.785918][T13973] ? find_held_lock+0x2b/0x80 [ 472.785938][T13973] path_openat+0x6db/0x2cb0 [ 472.785959][T13973] ? __pfx_path_openat+0x10/0x10 [ 472.785974][T13973] ? __lock_acquire+0xb8a/0x1c90 [ 472.785994][T13973] do_filp_open+0x20b/0x470 [ 472.786009][T13973] ? __pfx_do_filp_open+0x10/0x10 [ 472.786037][T13973] ? alloc_fd+0x471/0x7d0 [ 472.786055][T13973] do_sys_openat2+0x11b/0x1d0 [ 472.786075][T13973] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.786105][T13973] __x64_sys_openat+0x174/0x210 [ 472.786125][T13973] ? __pfx___x64_sys_openat+0x10/0x10 [ 472.786153][T13973] do_syscall_64+0xcd/0xfa0 [ 472.786171][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.786185][T13973] RIP: 0033:0x7f640638d810 [ 472.786197][T13973] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 472.786211][T13973] RSP: 002b:00007f640716ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 472.786225][T13973] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f640638d810 [ 472.786235][T13973] RDX: 0000000000000002 RSI: 00007f640716efa0 RDI: 00000000ffffff9c [ 472.786243][T13973] RBP: 00007f640716efa0 R08: 0000000000000000 R09: 0000000000000000 [ 472.786251][T13973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 472.786259][T13973] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 472.786278][T13973] [ 473.459948][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 473.582900][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 473.629053][T13984] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1623'. [ 474.205752][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 474.531754][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 475.660983][T14010] delete_channel: no stack [ 476.057438][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 476.089764][T14021] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1635'. [ 478.242034][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 478.343626][T14062] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1645'. [ 478.579188][T14052] delete_channel: no stack [ 480.737862][T14095] FAULT_INJECTION: forcing a failure. [ 480.737862][T14095] name failslab, interval 1, probability 0, space 0, times 0 [ 480.988434][T14095] CPU: 0 UID: 0 PID: 14095 Comm: syz.1.1653 Tainted: G U syzkaller #0 PREEMPT(full) [ 480.988461][T14095] Tainted: [U]=USER [ 480.988466][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 480.988475][T14095] Call Trace: [ 480.988486][T14095] [ 480.988492][T14095] dump_stack_lvl+0x16c/0x1f0 [ 480.988513][T14095] should_fail_ex+0x512/0x640 [ 480.988534][T14095] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 480.988552][T14095] should_failslab+0xc2/0x120 [ 480.988569][T14095] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 480.988585][T14095] ? __d_alloc+0x32/0xae0 [ 480.988603][T14095] ? __d_alloc+0x32/0xae0 [ 480.988616][T14095] __d_alloc+0x32/0xae0 [ 480.988634][T14095] d_alloc_pseudo+0x1c/0xc0 [ 480.988652][T14095] alloc_file_pseudo+0xcf/0x230 [ 480.988672][T14095] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 480.988691][T14095] ? alloc_fd+0x471/0x7d0 [ 480.988707][T14095] sock_alloc_file+0x50/0x210 [ 480.988728][T14095] __sys_socket+0x1c0/0x260 [ 480.988747][T14095] ? __pfx___sys_socket+0x10/0x10 [ 480.988765][T14095] ? syscall_user_dispatch+0x78/0x140 [ 480.988791][T14095] __x64_sys_socket+0x72/0xb0 [ 480.988809][T14095] do_syscall_64+0xcd/0xfa0 [ 480.988825][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.988839][T14095] RIP: 0033:0x7f6406390ee7 [ 480.988851][T14095] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.988865][T14095] RSP: 002b:00007f640714cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 480.988880][T14095] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f6406390ee7 [ 480.988889][T14095] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 480.988897][T14095] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 480.988905][T14095] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 480.988913][T14095] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 480.988932][T14095] [ 482.145451][T14100] EXT4-fs error: 55 callbacks suppressed [ 482.145466][T14100] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 482.693017][T14102] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 482.772116][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 482.843350][T14104] FAULT_INJECTION: forcing a failure. [ 482.843350][T14104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 482.931127][T14104] CPU: 0 UID: 0 PID: 14104 Comm: syz.3.1656 Tainted: G U syzkaller #0 PREEMPT(full) [ 482.931152][T14104] Tainted: [U]=USER [ 482.931157][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 482.931165][T14104] Call Trace: [ 482.931170][T14104] [ 482.931175][T14104] dump_stack_lvl+0x16c/0x1f0 [ 482.931196][T14104] should_fail_ex+0x512/0x640 [ 482.931220][T14104] get_futex_key+0x1d0/0x1560 [ 482.931242][T14104] ? __pfx_get_futex_key+0x10/0x10 [ 482.931259][T14104] ? __mutex_trylock_common+0xe9/0x250 [ 482.931294][T14104] futex_wake+0xea/0x530 [ 482.931317][T14104] ? __pfx_futex_wake+0x10/0x10 [ 482.931337][T14104] ? __lock_acquire+0xb8a/0x1c90 [ 482.931363][T14104] do_futex+0x1e3/0x350 [ 482.931382][T14104] ? __pfx_do_futex+0x10/0x10 [ 482.931398][T14104] ? __might_fault+0xe3/0x190 [ 482.931417][T14104] mm_release+0x24e/0x300 [ 482.931433][T14104] do_exit+0x68e/0x2bf0 [ 482.931456][T14104] ? __pfx_do_exit+0x10/0x10 [ 482.931474][T14104] ? do_raw_spin_lock+0x12c/0x2b0 [ 482.931495][T14104] ? find_held_lock+0x2b/0x80 [ 482.931512][T14104] do_group_exit+0xd3/0x2a0 [ 482.931532][T14104] get_signal+0x2671/0x26d0 [ 482.931550][T14104] ? __might_fault+0x13b/0x190 [ 482.931566][T14104] ? __pfx_get_signal+0x10/0x10 [ 482.931581][T14104] ? do_futex+0x122/0x350 [ 482.931599][T14104] ? __pfx_do_futex+0x10/0x10 [ 482.931618][T14104] arch_do_signal_or_restart+0x8f/0x790 [ 482.931637][T14104] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 482.931659][T14104] ? xfd_validate_state+0x61/0x180 [ 482.931678][T14104] ? __pfx_ksys_write+0x10/0x10 [ 482.931696][T14104] exit_to_user_mode_loop+0x85/0x130 [ 482.931718][T14104] do_syscall_64+0x426/0xfa0 [ 482.931735][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.931749][T14104] RIP: 0033:0x7fa10138efc9 [ 482.931760][T14104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.931773][T14104] RSP: 002b:00007fa10224e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.931787][T14104] RAX: fffffffffffffe00 RBX: 00007fa1015e6098 RCX: 00007fa10138efc9 [ 482.931796][T14104] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa1015e6098 [ 482.931805][T14104] RBP: 00007fa1015e6090 R08: 0000000000000000 R09: 0000000000000000 [ 482.931813][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.931821][T14104] R13: 00007fa1015e6128 R14: 00007ffe97b2e040 R15: 00007ffe97b2e128 [ 482.931840][T14104] [ 483.765941][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.855743][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.866768][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.076294][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.146085][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.586485][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 484.603716][T14110] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1657'. [ 484.931413][T14115] delete_channel: no stack [ 485.306109][T14122] FAULT_INJECTION: forcing a failure. [ 485.306109][T14122] name failslab, interval 1, probability 0, space 0, times 0 [ 485.358057][T14122] CPU: 0 UID: 0 PID: 14122 Comm: syz.3.1661 Tainted: G U syzkaller #0 PREEMPT(full) [ 485.358084][T14122] Tainted: [U]=USER [ 485.358098][T14122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 485.358107][T14122] Call Trace: [ 485.358112][T14122] [ 485.358118][T14122] dump_stack_lvl+0x16c/0x1f0 [ 485.358139][T14122] should_fail_ex+0x512/0x640 [ 485.358161][T14122] ? __kmalloc_cache_noprof+0x5f/0x780 [ 485.358186][T14122] should_failslab+0xc2/0x120 [ 485.358205][T14122] __kmalloc_cache_noprof+0x72/0x780 [ 485.358227][T14122] ? cachefiles_daemon_open+0xa0/0x550 [ 485.358242][T14122] ? security_capable+0x7e/0x260 [ 485.358262][T14122] ? cachefiles_daemon_open+0xa0/0x550 [ 485.358275][T14122] cachefiles_daemon_open+0xa0/0x550 [ 485.358289][T14122] ? __pfx_cachefiles_daemon_open+0x10/0x10 [ 485.358303][T14122] misc_open+0x26d/0x450 [ 485.358324][T14122] ? __pfx_misc_open+0x10/0x10 [ 485.358343][T14122] chrdev_open+0x234/0x6a0 [ 485.358359][T14122] ? __pfx_apparmor_file_open+0x10/0x10 [ 485.358378][T14122] ? __pfx_chrdev_open+0x10/0x10 [ 485.358395][T14122] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 485.358414][T14122] do_dentry_open+0x982/0x1530 [ 485.358430][T14122] ? __pfx_chrdev_open+0x10/0x10 [ 485.358449][T14122] vfs_open+0x82/0x3f0 [ 485.358470][T14122] path_openat+0x1de4/0x2cb0 [ 485.358491][T14122] ? __pfx_path_openat+0x10/0x10 [ 485.358507][T14122] ? __lock_acquire+0xb8a/0x1c90 [ 485.358528][T14122] do_filp_open+0x20b/0x470 [ 485.358543][T14122] ? __pfx_do_filp_open+0x10/0x10 [ 485.358571][T14122] ? alloc_fd+0x471/0x7d0 [ 485.358591][T14122] do_sys_openat2+0x11b/0x1d0 [ 485.358610][T14122] ? __pfx_do_sys_openat2+0x10/0x10 [ 485.358637][T14122] __x64_sys_openat+0x174/0x210 [ 485.358656][T14122] ? __pfx___x64_sys_openat+0x10/0x10 [ 485.358683][T14122] do_syscall_64+0xcd/0xfa0 [ 485.358700][T14122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.358714][T14122] RIP: 0033:0x7fa10138efc9 [ 485.358725][T14122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.358738][T14122] RSP: 002b:00007fa10226f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 485.358753][T14122] RAX: ffffffffffffffda RBX: 00007fa1015e5fa0 RCX: 00007fa10138efc9 [ 485.358764][T14122] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 485.358773][T14122] RBP: 00007fa101411f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.358781][T14122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.358790][T14122] R13: 00007fa1015e6038 R14: 00007fa1015e5fa0 R15: 00007ffe97b2e128 [ 485.358810][T14122] [ 486.319215][ T5833] Bluetooth: hci4: command tx timeout [ 486.335698][T14129] zswap: compressor not available [ 486.432431][T14105] chnl_net:caif_netlink_parms(): no params data found [ 487.108143][T14105] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.139092][T14105] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.180132][T14105] bridge_slave_0: entered allmulticast mode [ 487.247811][T14105] bridge_slave_0: entered promiscuous mode [ 487.296432][T14105] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.327351][T14105] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.346952][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 487.365838][T14105] bridge_slave_1: entered allmulticast mode [ 487.387061][T14105] bridge_slave_1: entered promiscuous mode [ 487.580388][T14105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.624287][T14105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.979904][T14154] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 488.031161][T14105] team0: Port device team_slave_0 added [ 488.088558][T14105] team0: Port device team_slave_1 added [ 488.256115][T14105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.284432][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.354338][T14105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.365705][ T5833] Bluetooth: hci4: command tx timeout [ 488.394823][T14105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.409873][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.469148][T14105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.649380][T14105] hsr_slave_0: entered promiscuous mode [ 488.680372][T14105] hsr_slave_1: entered promiscuous mode [ 488.708470][T14105] debugfs: 'hsr0' already exists in 'hsr' [ 488.733772][T14105] Cannot create hsr debugfs directory [ 488.908004][T14162] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 488.965966][T14157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 489.948867][T14105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.001406][T14105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.061492][T14105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.178065][T14105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.296564][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 490.376543][T14189] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1674'. [ 490.445849][ T5833] Bluetooth: hci4: command tx timeout [ 490.647962][T14105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.771320][T14105] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.822161][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.829356][ T7630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.897556][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.904681][ T7630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.277690][ T5833] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 491.277713][ T5833] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 491.293327][ T5833] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 491.293352][ T5833] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 491.301561][ T5833] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 491.311918][ T5833] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 491.319123][ T5833] Bluetooth: hci3: Unknown advertising packet type: 0x72 [ 491.336917][ T5833] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 491.343947][ T5833] Bluetooth: hci3: Malformed LE Event: 0x0d [ 491.830586][T14105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.908213][T14221] ima: policy update failed [ 491.932742][ T30] audit: type=1802 audit(4295059130.057:22): pid=14221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1681" res=0 errno=0 [ 492.396297][T14215] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 492.525639][ T5833] Bluetooth: hci4: command tx timeout [ 492.653108][T14105] veth0_vlan: entered promiscuous mode [ 492.715216][T14105] veth1_vlan: entered promiscuous mode [ 492.832942][T14105] veth0_macvtap: entered promiscuous mode [ 492.882573][T14224] delete_channel: no stack [ 492.900419][T14105] veth1_macvtap: entered promiscuous mode [ 492.966480][T14105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.021264][T14105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.096427][T14245] FAULT_INJECTION: forcing a failure. [ 493.096427][T14245] name failslab, interval 1, probability 0, space 0, times 0 [ 493.171329][T14245] CPU: 0 UID: 0 PID: 14245 Comm: syz.1.1685 Tainted: G U syzkaller #0 PREEMPT(full) [ 493.171356][T14245] Tainted: [U]=USER [ 493.171360][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 493.171368][T14245] Call Trace: [ 493.171373][T14245] [ 493.171379][T14245] dump_stack_lvl+0x16c/0x1f0 [ 493.171399][T14245] should_fail_ex+0x512/0x640 [ 493.171421][T14245] ? fs_reclaim_acquire+0xae/0x150 [ 493.171442][T14245] should_failslab+0xc2/0x120 [ 493.171461][T14245] kmem_cache_alloc_noprof+0x75/0x6e0 [ 493.171475][T14245] ? __pfx_map_id_range_down+0x10/0x10 [ 493.171496][T14245] ? security_inode_alloc+0x3b/0x2b0 [ 493.171521][T14245] ? security_inode_alloc+0x3b/0x2b0 [ 493.171550][T14245] security_inode_alloc+0x3b/0x2b0 [ 493.171571][T14245] inode_init_always_gfp+0xce4/0x1030 [ 493.171590][T14245] alloc_inode+0x86/0x240 [ 493.171608][T14245] sock_alloc+0x40/0x280 [ 493.171624][T14245] __sock_create+0xc1/0x8d0 [ 493.171644][T14245] __sys_socket+0x14d/0x260 [ 493.171662][T14245] ? __pfx___sys_socket+0x10/0x10 [ 493.171681][T14245] ? xfd_validate_state+0x61/0x180 [ 493.171699][T14245] ? __pfx_ksys_write+0x10/0x10 [ 493.171717][T14245] __x64_sys_socket+0x72/0xb0 [ 493.171734][T14245] ? lockdep_hardirqs_on+0x7c/0x110 [ 493.171749][T14245] do_syscall_64+0xcd/0xfa0 [ 493.171765][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.171779][T14245] RIP: 0033:0x7f640638efc9 [ 493.171790][T14245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.171803][T14245] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 493.171817][T14245] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 493.171827][T14245] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 493.171835][T14245] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 493.171843][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.171851][T14245] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 493.171869][T14245] [ 493.171891][T14245] socket: no more sockets [ 493.765550][ T7629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.815501][ T7658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.824232][ T7658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.188836][T14253] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1687'. [ 494.276655][ T7658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.462389][ T7658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.483287][ T7658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.707090][T14268] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 494.780049][T14275] vhci_hcd: invalid port number 21 [ 495.007589][ T7629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.041950][ T7629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.091508][T14274] FAULT_INJECTION: forcing a failure. [ 495.091508][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 495.284550][T14274] CPU: 0 UID: 0 PID: 14274 Comm: syz.1.1692 Tainted: G U syzkaller #0 PREEMPT(full) [ 495.284577][T14274] Tainted: [U]=USER [ 495.284582][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.284591][T14274] Call Trace: [ 495.284596][T14274] [ 495.284602][T14274] dump_stack_lvl+0x16c/0x1f0 [ 495.284623][T14274] should_fail_ex+0x512/0x640 [ 495.284644][T14274] ? __kmalloc_cache_noprof+0x5f/0x780 [ 495.284669][T14274] should_failslab+0xc2/0x120 [ 495.284688][T14274] __kmalloc_cache_noprof+0x72/0x780 [ 495.284711][T14274] ? loopback_open+0xa4e/0x13f0 [ 495.284727][T14274] ? loopback_open+0xa4e/0x13f0 [ 495.284738][T14274] loopback_open+0xa4e/0x13f0 [ 495.284755][T14274] snd_pcm_open_substream+0xa60/0x17f0 [ 495.284779][T14274] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 495.284802][T14274] ? rcu_is_watching+0x12/0xc0 [ 495.284821][T14274] snd_pcm_open+0x29e/0x730 [ 495.284844][T14274] ? __pfx_snd_pcm_open+0x10/0x10 [ 495.284867][T14274] ? __pfx_default_wake_function+0x10/0x10 [ 495.284887][T14274] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 495.284908][T14274] snd_pcm_playback_open+0x86/0xe0 [ 495.284929][T14274] snd_open+0x22d/0x4c0 [ 495.284946][T14274] ? __pfx_snd_open+0x10/0x10 [ 495.284962][T14274] chrdev_open+0x234/0x6a0 [ 495.284978][T14274] ? __pfx_apparmor_file_open+0x10/0x10 [ 495.284998][T14274] ? __pfx_chrdev_open+0x10/0x10 [ 495.285015][T14274] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 495.285034][T14274] do_dentry_open+0x982/0x1530 [ 495.285050][T14274] ? __pfx_chrdev_open+0x10/0x10 [ 495.285079][T14274] vfs_open+0x82/0x3f0 [ 495.285102][T14274] path_openat+0x1de4/0x2cb0 [ 495.285126][T14274] ? __pfx_path_openat+0x10/0x10 [ 495.285142][T14274] ? __lock_acquire+0xb8a/0x1c90 [ 495.285163][T14274] do_filp_open+0x20b/0x470 [ 495.285179][T14274] ? __pfx_do_filp_open+0x10/0x10 [ 495.285208][T14274] ? alloc_fd+0x471/0x7d0 [ 495.285227][T14274] do_sys_openat2+0x11b/0x1d0 [ 495.285246][T14274] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.285272][T14274] __x64_sys_openat+0x174/0x210 [ 495.285292][T14274] ? __pfx___x64_sys_openat+0x10/0x10 [ 495.285319][T14274] do_syscall_64+0xcd/0xfa0 [ 495.285336][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.285350][T14274] RIP: 0033:0x7f640638efc9 [ 495.285363][T14274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.285379][T14274] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.285394][T14274] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 495.285403][T14274] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 495.285413][T14274] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.285421][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.285429][T14274] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 495.285448][T14274] [ 496.081296][T14284] delete_channel: no stack [ 496.558989][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 496.619786][T14297] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 499.484230][T14305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'. [ 500.462032][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 500.671377][T14319] delete_channel: no stack [ 500.776448][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 500.891058][T14337] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1709'. [ 500.972260][T14338] FAULT_INJECTION: forcing a failure. [ 500.972260][T14338] name failslab, interval 1, probability 0, space 0, times 0 [ 501.204352][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.4.1710 Tainted: G U syzkaller #0 PREEMPT(full) [ 501.204379][T14338] Tainted: [U]=USER [ 501.204384][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.204393][T14338] Call Trace: [ 501.204403][T14338] [ 501.204410][T14338] dump_stack_lvl+0x16c/0x1f0 [ 501.204431][T14338] should_fail_ex+0x512/0x640 [ 501.204454][T14338] ? __kmalloc_cache_noprof+0x5f/0x780 [ 501.204479][T14338] should_failslab+0xc2/0x120 [ 501.204499][T14338] __kmalloc_cache_noprof+0x72/0x780 [ 501.204519][T14338] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 501.204535][T14338] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 501.204551][T14338] ? loopback_open+0x145/0x13f0 [ 501.204566][T14338] ? loopback_open+0x145/0x13f0 [ 501.204577][T14338] loopback_open+0x145/0x13f0 [ 501.204594][T14338] snd_pcm_open_substream+0xa60/0x17f0 [ 501.204618][T14338] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 501.204641][T14338] ? rcu_is_watching+0x12/0xc0 [ 501.204659][T14338] snd_pcm_open+0x29e/0x730 [ 501.204682][T14338] ? __pfx_snd_pcm_open+0x10/0x10 [ 501.204705][T14338] ? __pfx_default_wake_function+0x10/0x10 [ 501.204725][T14338] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 501.204745][T14338] snd_pcm_playback_open+0x86/0xe0 [ 501.204766][T14338] snd_open+0x22d/0x4c0 [ 501.204784][T14338] ? __pfx_snd_open+0x10/0x10 [ 501.204799][T14338] chrdev_open+0x234/0x6a0 [ 501.204815][T14338] ? __pfx_apparmor_file_open+0x10/0x10 [ 501.204835][T14338] ? __pfx_chrdev_open+0x10/0x10 [ 501.204852][T14338] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 501.204871][T14338] do_dentry_open+0x982/0x1530 [ 501.204887][T14338] ? __pfx_chrdev_open+0x10/0x10 [ 501.204907][T14338] vfs_open+0x82/0x3f0 [ 501.204928][T14338] path_openat+0x1de4/0x2cb0 [ 501.204950][T14338] ? __pfx_path_openat+0x10/0x10 [ 501.204965][T14338] ? __lock_acquire+0xb8a/0x1c90 [ 501.204986][T14338] do_filp_open+0x20b/0x470 [ 501.205001][T14338] ? __pfx_do_filp_open+0x10/0x10 [ 501.205029][T14338] ? alloc_fd+0x471/0x7d0 [ 501.205048][T14338] do_sys_openat2+0x11b/0x1d0 [ 501.205067][T14338] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.205097][T14338] __x64_sys_openat+0x174/0x210 [ 501.205117][T14338] ? __pfx___x64_sys_openat+0x10/0x10 [ 501.205144][T14338] do_syscall_64+0xcd/0xfa0 [ 501.205162][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.205176][T14338] RIP: 0033:0x7fa4b598efc9 [ 501.205188][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.205201][T14338] RSP: 002b:00007fa4b6830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.205216][T14338] RAX: ffffffffffffffda RBX: 00007fa4b5be5fa0 RCX: 00007fa4b598efc9 [ 501.205225][T14338] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 501.205234][T14338] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.205243][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.205251][T14338] R13: 00007fa4b5be6038 R14: 00007fa4b5be5fa0 R15: 00007fff12158ca8 [ 501.205271][T14338] [ 501.853863][T14353] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 501.853863][T14353] MÅ' is too long [ 501.905523][T14353] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 501.905523][T14353] ††½WÏõ›ú «ú' is too long [ 502.057146][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.064087][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.045645][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 503.659344][T14395] zswap: compressor not available [ 504.204964][T14396] delete_channel: no stack [ 504.733835][T14420] FAULT_INJECTION: forcing a failure. [ 504.733835][T14420] name fail_futex, interval 1, probability 0, space 0, times 0 [ 504.803603][T14420] CPU: 0 UID: 0 PID: 14420 Comm: syz.1.1728 Tainted: G U syzkaller #0 PREEMPT(full) [ 504.803630][T14420] Tainted: [U]=USER [ 504.803635][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.803644][T14420] Call Trace: [ 504.803650][T14420] [ 504.803656][T14420] dump_stack_lvl+0x16c/0x1f0 [ 504.803677][T14420] should_fail_ex+0x512/0x640 [ 504.803703][T14420] get_futex_key+0x1d0/0x1560 [ 504.803724][T14420] ? __pfx_get_futex_key+0x10/0x10 [ 504.803740][T14420] ? futex_private_hash_put+0x176/0x300 [ 504.803763][T14420] futex_wake+0xea/0x530 [ 504.803787][T14420] ? futex_wait+0x120/0x380 [ 504.803800][T14420] ? __pfx_futex_wait+0x10/0x10 [ 504.803821][T14420] ? __pfx_futex_wake+0x10/0x10 [ 504.803844][T14420] ? __lock_acquire+0x622/0x1c90 [ 504.803867][T14420] do_futex+0x1e3/0x350 [ 504.803885][T14420] ? __pfx_do_futex+0x10/0x10 [ 504.803902][T14420] ? f_getown+0x19b/0x300 [ 504.803924][T14420] __x64_sys_futex+0x1e0/0x4c0 [ 504.803943][T14420] ? __might_fault+0xe3/0x190 [ 504.803956][T14420] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.803974][T14420] ? xfd_validate_state+0x61/0x180 [ 504.803999][T14420] do_syscall_64+0xcd/0xfa0 [ 504.804017][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.804030][T14420] RIP: 0033:0x7f640638efc9 [ 504.804042][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.804055][T14420] RSP: 002b:00007f640716f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.804069][T14420] RAX: ffffffffffffffda RBX: 00007f64065e5fa8 RCX: 00007f640638efc9 [ 504.804084][T14420] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64065e5fac [ 504.804093][T14420] RBP: 00007f64065e5fa0 R08: 00007f6407170000 R09: 0000000000000000 [ 504.804102][T14420] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 504.804111][T14420] R13: 00007f64065e6038 R14: 00007ffc04183770 R15: 00007ffc04183858 [ 504.804131][T14420] [ 505.055618][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 505.065070][T14426] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1726'. [ 506.106969][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 509.163755][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 509.208645][T14492] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1738'. [ 509.714252][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 510.278710][T14514] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 510.386504][T14504] FAULT_INJECTION: forcing a failure. [ 510.386504][T14504] name failslab, interval 1, probability 0, space 0, times 0 [ 510.565527][T14504] CPU: 0 UID: 0 PID: 14504 Comm: syz.1.1742 Tainted: G U syzkaller #0 PREEMPT(full) [ 510.565553][T14504] Tainted: [U]=USER [ 510.565558][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 510.565570][T14504] Call Trace: [ 510.565576][T14504] [ 510.565581][T14504] dump_stack_lvl+0x16c/0x1f0 [ 510.565603][T14504] should_fail_ex+0x512/0x640 [ 510.565624][T14504] ? __kmalloc_cache_noprof+0x5f/0x780 [ 510.565650][T14504] should_failslab+0xc2/0x120 [ 510.565669][T14504] __kmalloc_cache_noprof+0x72/0x780 [ 510.565689][T14504] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 510.565705][T14504] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 510.565721][T14504] ? loopback_open+0x145/0x13f0 [ 510.565736][T14504] ? loopback_open+0x145/0x13f0 [ 510.565747][T14504] loopback_open+0x145/0x13f0 [ 510.565764][T14504] snd_pcm_open_substream+0xa60/0x17f0 [ 510.565787][T14504] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 510.565809][T14504] ? rcu_is_watching+0x12/0xc0 [ 510.565827][T14504] snd_pcm_open+0x29e/0x730 [ 510.565850][T14504] ? __pfx_snd_pcm_open+0x10/0x10 [ 510.565874][T14504] ? __pfx_default_wake_function+0x10/0x10 [ 510.565894][T14504] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 510.565915][T14504] snd_pcm_playback_open+0x86/0xe0 [ 510.565936][T14504] snd_open+0x22d/0x4c0 [ 510.565954][T14504] ? __pfx_snd_open+0x10/0x10 [ 510.565969][T14504] chrdev_open+0x234/0x6a0 [ 510.565985][T14504] ? __pfx_apparmor_file_open+0x10/0x10 [ 510.566005][T14504] ? __pfx_chrdev_open+0x10/0x10 [ 510.566022][T14504] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 510.566041][T14504] do_dentry_open+0x982/0x1530 [ 510.566058][T14504] ? __pfx_chrdev_open+0x10/0x10 [ 510.566077][T14504] vfs_open+0x82/0x3f0 [ 510.566099][T14504] path_openat+0x1de4/0x2cb0 [ 510.566120][T14504] ? __pfx_path_openat+0x10/0x10 [ 510.566136][T14504] ? __lock_acquire+0xb8a/0x1c90 [ 510.566157][T14504] do_filp_open+0x20b/0x470 [ 510.566171][T14504] ? __pfx_do_filp_open+0x10/0x10 [ 510.566200][T14504] ? alloc_fd+0x471/0x7d0 [ 510.566219][T14504] do_sys_openat2+0x11b/0x1d0 [ 510.566238][T14504] ? __pfx_do_sys_openat2+0x10/0x10 [ 510.566265][T14504] __x64_sys_openat+0x174/0x210 [ 510.566284][T14504] ? __pfx___x64_sys_openat+0x10/0x10 [ 510.566312][T14504] do_syscall_64+0xcd/0xfa0 [ 510.566329][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.566343][T14504] RIP: 0033:0x7f640638efc9 [ 510.566355][T14504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.566368][T14504] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 510.566382][T14504] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 510.566391][T14504] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 510.566400][T14504] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.566409][T14504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.566417][T14504] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 510.566437][T14504] [ 511.296123][T14520] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 511.336509][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 511.406664][T14522] block2mtd: error: cannot open device [ 511.413374][T14528] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1747'. [ 511.707660][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1749'. [ 512.319051][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 512.378312][T14542] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1751'. [ 512.785556][T14547] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 512.854984][T14547] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 513.239182][T14530] kexec: Could not allocate control_code_buffer [ 513.801464][T14559] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 514.223465][T14553] delete_channel: no stack [ 515.003349][T14567] FAULT_INJECTION: forcing a failure. [ 515.003349][T14567] name failslab, interval 1, probability 0, space 0, times 0 [ 515.186655][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.1.1758 Tainted: G U syzkaller #0 PREEMPT(full) [ 515.186682][T14567] Tainted: [U]=USER [ 515.186686][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.186695][T14567] Call Trace: [ 515.186705][T14567] [ 515.186712][T14567] dump_stack_lvl+0x16c/0x1f0 [ 515.186733][T14567] should_fail_ex+0x512/0x640 [ 515.186755][T14567] ? __kmalloc_cache_noprof+0x5f/0x780 [ 515.186780][T14567] should_failslab+0xc2/0x120 [ 515.186803][T14567] __kmalloc_cache_noprof+0x72/0x780 [ 515.186823][T14567] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 515.186841][T14567] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 515.186857][T14567] ? loopback_open+0x145/0x13f0 [ 515.186873][T14567] ? loopback_open+0x145/0x13f0 [ 515.186884][T14567] loopback_open+0x145/0x13f0 [ 515.186901][T14567] snd_pcm_open_substream+0xa60/0x17f0 [ 515.186925][T14567] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 515.186948][T14567] ? rcu_is_watching+0x12/0xc0 [ 515.186973][T14567] snd_pcm_open+0x29e/0x730 [ 515.186997][T14567] ? __pfx_snd_pcm_open+0x10/0x10 [ 515.187021][T14567] ? __pfx_default_wake_function+0x10/0x10 [ 515.187042][T14567] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 515.187064][T14567] snd_pcm_playback_open+0x86/0xe0 [ 515.187085][T14567] snd_open+0x22d/0x4c0 [ 515.187102][T14567] ? __pfx_snd_open+0x10/0x10 [ 515.187117][T14567] chrdev_open+0x234/0x6a0 [ 515.187133][T14567] ? __pfx_apparmor_file_open+0x10/0x10 [ 515.187153][T14567] ? __pfx_chrdev_open+0x10/0x10 [ 515.187170][T14567] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 515.187189][T14567] do_dentry_open+0x982/0x1530 [ 515.187204][T14567] ? __pfx_chrdev_open+0x10/0x10 [ 515.187224][T14567] vfs_open+0x82/0x3f0 [ 515.187246][T14567] path_openat+0x1de4/0x2cb0 [ 515.187267][T14567] ? __pfx_path_openat+0x10/0x10 [ 515.187282][T14567] ? __lock_acquire+0xb8a/0x1c90 [ 515.187303][T14567] do_filp_open+0x20b/0x470 [ 515.187318][T14567] ? __pfx_do_filp_open+0x10/0x10 [ 515.187347][T14567] ? alloc_fd+0x471/0x7d0 [ 515.187366][T14567] do_sys_openat2+0x11b/0x1d0 [ 515.187385][T14567] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.187411][T14567] __x64_sys_openat+0x174/0x210 [ 515.187431][T14567] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.187458][T14567] do_syscall_64+0xcd/0xfa0 [ 515.187475][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.187489][T14567] RIP: 0033:0x7f640638efc9 [ 515.187501][T14567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.187515][T14567] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.187529][T14567] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 515.187538][T14567] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 515.187548][T14567] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.187556][T14567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.187565][T14567] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 515.187585][T14567] [ 515.948573][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 515.986107][T14579] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1760'. [ 516.331317][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1761'. [ 516.398871][T14588] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1761'. [ 520.038189][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 520.103132][T14634] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1771'. [ 520.426056][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 520.463569][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 520.517972][T14641] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1772'. [ 520.796771][T14644] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[14644] [ 521.757401][ T30] audit: type=1800 audit(4295132535.878:23): pid=14655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1778" name="dbroot" dev="configfs" ino=49702 res=0 errno=0 [ 522.120921][T14662] FAULT_INJECTION: forcing a failure. [ 522.120921][T14662] name failslab, interval 1, probability 0, space 0, times 0 [ 522.199491][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.4.1775 Tainted: G U syzkaller #0 PREEMPT(full) [ 522.199518][T14662] Tainted: [U]=USER [ 522.199523][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.199531][T14662] Call Trace: [ 522.199536][T14662] [ 522.199542][T14662] dump_stack_lvl+0x16c/0x1f0 [ 522.199563][T14662] should_fail_ex+0x512/0x640 [ 522.199584][T14662] ? __kmalloc_cache_noprof+0x5f/0x780 [ 522.199609][T14662] should_failslab+0xc2/0x120 [ 522.199627][T14662] __kmalloc_cache_noprof+0x72/0x780 [ 522.199649][T14662] ? percpu_ref_init+0xec/0x410 [ 522.199676][T14662] ? percpu_ref_init+0xec/0x410 [ 522.199692][T14662] ? __pfx_swap_users_ref_free+0x10/0x10 [ 522.199708][T14662] percpu_ref_init+0xec/0x410 [ 522.199727][T14662] __do_sys_swapon+0x165/0x3a90 [ 522.199744][T14662] ? find_held_lock+0x2b/0x80 [ 522.199759][T14662] ? handle_mm_fault+0x2ab/0xd10 [ 522.199781][T14662] ? __x64_sys_futex+0x1e0/0x4c0 [ 522.199798][T14662] ? __x64_sys_futex+0x1e9/0x4c0 [ 522.199816][T14662] ? exc_page_fault+0x64/0xc0 [ 522.199831][T14662] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 522.199853][T14662] ? __pfx___do_sys_swapon+0x10/0x10 [ 522.199867][T14662] ? syscall_user_dispatch+0x78/0x140 [ 522.199894][T14662] do_syscall_64+0xcd/0xfa0 [ 522.199910][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.199924][T14662] RIP: 0033:0x7fa4b598efc9 [ 522.199936][T14662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.199949][T14662] RSP: 002b:00007fa4b6830038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 522.199963][T14662] RAX: ffffffffffffffda RBX: 00007fa4b5be5fa0 RCX: 00007fa4b598efc9 [ 522.199972][T14662] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 522.199980][T14662] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 522.199988][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.199996][T14662] R13: 00007fa4b5be6038 R14: 00007fa4b5be5fa0 R15: 00007fff12158ca8 [ 522.200017][T14662] [ 523.136657][T14669] FAULT_INJECTION: forcing a failure. [ 523.136657][T14669] name failslab, interval 1, probability 0, space 0, times 0 [ 523.160646][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 523.206031][T14675] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1782'. [ 523.254314][T14669] CPU: 0 UID: 0 PID: 14669 Comm: syz.4.1781 Tainted: G U syzkaller #0 PREEMPT(full) [ 523.254340][T14669] Tainted: [U]=USER [ 523.254345][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.254353][T14669] Call Trace: [ 523.254358][T14669] [ 523.254364][T14669] dump_stack_lvl+0x16c/0x1f0 [ 523.254386][T14669] should_fail_ex+0x512/0x640 [ 523.254408][T14669] ? __kmalloc_cache_noprof+0x5f/0x780 [ 523.254433][T14669] should_failslab+0xc2/0x120 [ 523.254451][T14669] __kmalloc_cache_noprof+0x72/0x780 [ 523.254471][T14669] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 523.254488][T14669] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 523.254503][T14669] ? loopback_open+0x145/0x13f0 [ 523.254519][T14669] ? loopback_open+0x145/0x13f0 [ 523.254530][T14669] loopback_open+0x145/0x13f0 [ 523.254547][T14669] snd_pcm_open_substream+0xa60/0x17f0 [ 523.254571][T14669] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 523.254594][T14669] ? rcu_is_watching+0x12/0xc0 [ 523.254612][T14669] snd_pcm_open+0x29e/0x730 [ 523.254635][T14669] ? __pfx_snd_pcm_open+0x10/0x10 [ 523.254658][T14669] ? __pfx_default_wake_function+0x10/0x10 [ 523.254678][T14669] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 523.254699][T14669] snd_pcm_playback_open+0x86/0xe0 [ 523.254720][T14669] snd_open+0x22d/0x4c0 [ 523.254737][T14669] ? __pfx_snd_open+0x10/0x10 [ 523.254753][T14669] chrdev_open+0x234/0x6a0 [ 523.254770][T14669] ? __pfx_apparmor_file_open+0x10/0x10 [ 523.254790][T14669] ? __pfx_chrdev_open+0x10/0x10 [ 523.254807][T14669] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 523.254826][T14669] do_dentry_open+0x982/0x1530 [ 523.254842][T14669] ? __pfx_chrdev_open+0x10/0x10 [ 523.254863][T14669] vfs_open+0x82/0x3f0 [ 523.254885][T14669] path_openat+0x1de4/0x2cb0 [ 523.254906][T14669] ? __pfx_path_openat+0x10/0x10 [ 523.254922][T14669] ? __lock_acquire+0xb8a/0x1c90 [ 523.254950][T14669] do_filp_open+0x20b/0x470 [ 523.254976][T14669] ? __pfx_do_filp_open+0x10/0x10 [ 523.255009][T14669] ? alloc_fd+0x471/0x7d0 [ 523.255029][T14669] do_sys_openat2+0x11b/0x1d0 [ 523.255049][T14669] ? __pfx_do_sys_openat2+0x10/0x10 [ 523.255078][T14669] __x64_sys_openat+0x174/0x210 [ 523.255098][T14669] ? __pfx___x64_sys_openat+0x10/0x10 [ 523.255125][T14669] do_syscall_64+0xcd/0xfa0 [ 523.255143][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.255165][T14669] RIP: 0033:0x7fa4b598efc9 [ 523.255178][T14669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.255193][T14669] RSP: 002b:00007fa4b6830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 523.255208][T14669] RAX: ffffffffffffffda RBX: 00007fa4b5be5fa0 RCX: 00007fa4b598efc9 [ 523.255217][T14669] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 523.255226][T14669] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 523.255235][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.255243][T14669] R13: 00007fa4b5be6038 R14: 00007fa4b5be5fa0 R15: 00007fff12158ca8 [ 523.255264][T14669] [ 524.481549][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 524.547263][T14682] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1784'. [ 524.958100][T14693] futex_wake_op: syz.3.1787 tries to shift op by -2048; fix this program [ 525.008536][T14692] 0x000000000001-0x000000020000 : "" [ 525.102475][T14692] ftl_cs: FTL header corrupt! [ 525.574092][T14684] delete_channel: no stack [ 526.458708][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 526.508910][T14725] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1793'. [ 526.714467][T14715] FAULT_INJECTION: forcing a failure. [ 526.714467][T14715] name failslab, interval 1, probability 0, space 0, times 0 [ 526.899942][T14715] CPU: 0 UID: 0 PID: 14715 Comm: syz.1.1792 Tainted: G U syzkaller #0 PREEMPT(full) [ 526.899969][T14715] Tainted: [U]=USER [ 526.899973][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 526.899982][T14715] Call Trace: [ 526.899987][T14715] [ 526.899993][T14715] dump_stack_lvl+0x16c/0x1f0 [ 526.900014][T14715] should_fail_ex+0x512/0x640 [ 526.900035][T14715] ? __kmalloc_cache_noprof+0x5f/0x780 [ 526.900061][T14715] should_failslab+0xc2/0x120 [ 526.900081][T14715] __kmalloc_cache_noprof+0x72/0x780 [ 526.900101][T14715] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 526.900117][T14715] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 526.900133][T14715] ? loopback_open+0x145/0x13f0 [ 526.900148][T14715] ? loopback_open+0x145/0x13f0 [ 526.900159][T14715] loopback_open+0x145/0x13f0 [ 526.900176][T14715] snd_pcm_open_substream+0xa60/0x17f0 [ 526.900199][T14715] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 526.900222][T14715] ? rcu_is_watching+0x12/0xc0 [ 526.900239][T14715] snd_pcm_open+0x29e/0x730 [ 526.900263][T14715] ? __pfx_snd_pcm_open+0x10/0x10 [ 526.900286][T14715] ? __pfx_default_wake_function+0x10/0x10 [ 526.900311][T14715] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 526.900333][T14715] snd_pcm_playback_open+0x86/0xe0 [ 526.900359][T14715] snd_open+0x22d/0x4c0 [ 526.900377][T14715] ? __pfx_snd_open+0x10/0x10 [ 526.900392][T14715] chrdev_open+0x234/0x6a0 [ 526.900411][T14715] ? __pfx_apparmor_file_open+0x10/0x10 [ 526.900431][T14715] ? __pfx_chrdev_open+0x10/0x10 [ 526.900451][T14715] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 526.900472][T14715] do_dentry_open+0x982/0x1530 [ 526.900488][T14715] ? __pfx_chrdev_open+0x10/0x10 [ 526.900508][T14715] vfs_open+0x82/0x3f0 [ 526.900531][T14715] path_openat+0x1de4/0x2cb0 [ 526.900554][T14715] ? __pfx_path_openat+0x10/0x10 [ 526.900570][T14715] ? __lock_acquire+0xb8a/0x1c90 [ 526.900591][T14715] do_filp_open+0x20b/0x470 [ 526.900606][T14715] ? __pfx_do_filp_open+0x10/0x10 [ 526.900634][T14715] ? alloc_fd+0x471/0x7d0 [ 526.900653][T14715] do_sys_openat2+0x11b/0x1d0 [ 526.900673][T14715] ? __pfx_do_sys_openat2+0x10/0x10 [ 526.900705][T14715] __x64_sys_openat+0x174/0x210 [ 526.900725][T14715] ? __pfx___x64_sys_openat+0x10/0x10 [ 526.900753][T14715] do_syscall_64+0xcd/0xfa0 [ 526.900770][T14715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.900785][T14715] RIP: 0033:0x7f640638efc9 [ 526.900797][T14715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.900811][T14715] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 526.900825][T14715] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 526.900844][T14715] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 526.900853][T14715] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 526.900862][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.900870][T14715] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 526.900890][T14715] [ 527.211990][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 527.221468][T14735] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1796'. [ 528.356993][T14761] ovs_: entered promiscuous mode [ 528.379713][T14762] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 528.581099][T14738] delete_channel: no stack [ 529.051383][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 529.119948][T14779] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1805'. [ 529.502675][T14787] nfs4: Unknown parameter '‹~C~72pø±ÉÈæìÁ·HÇ™ð!rv—e°óDÿÓJÇEŸáˆqbrñ7˜< xå%ox´µ}Мeï‰/²Eˆ¸¼p²;I§ûVס™+”(Bž˜†^VÔ¼zß~©¹Îσ)>#瀰𑚒Á9¶øTÛÑláëEF¼èüB`ï' [ 529.845856][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 529.896678][T14791] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1808'. [ 529.940379][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 530.532252][T14807] binder: 14795:14807 ioctl c00c6211 0 returned -14 [ 530.840282][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 531.164321][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 531.225796][T14821] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1815'. [ 531.343246][T14809] delete_channel: no stack [ 531.618737][T14828] ptp ptp0: guarantee physical clock free running [ 532.066805][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 532.129456][T14838] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1819'. [ 532.566488][T14844] FAULT_INJECTION: forcing a failure. [ 532.566488][T14844] name fail_futex, interval 1, probability 0, space 0, times 0 [ 532.679786][T14844] CPU: 0 UID: 0 PID: 14844 Comm: syz.3.1821 Tainted: G U syzkaller #0 PREEMPT(full) [ 532.679812][T14844] Tainted: [U]=USER [ 532.679816][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.679824][T14844] Call Trace: [ 532.679829][T14844] [ 532.679834][T14844] dump_stack_lvl+0x16c/0x1f0 [ 532.679855][T14844] should_fail_ex+0x512/0x640 [ 532.679878][T14844] get_futex_key+0x1d0/0x1560 [ 532.679898][T14844] ? __pfx_get_futex_key+0x10/0x10 [ 532.679916][T14844] ? find_held_lock+0x2b/0x80 [ 532.679935][T14844] futex_wake+0xea/0x530 [ 532.679959][T14844] ? __pfx_futex_wake+0x10/0x10 [ 532.679983][T14844] ? find_held_lock+0x2b/0x80 [ 532.679996][T14844] ? __might_fault+0xe3/0x190 [ 532.680012][T14844] do_futex+0x1e3/0x350 [ 532.680030][T14844] ? __pfx_do_futex+0x10/0x10 [ 532.680048][T14844] ? snd_pcm_oss_ioctl+0x2c2/0x37c0 [ 532.680070][T14844] __x64_sys_futex+0x1e0/0x4c0 [ 532.680090][T14844] ? __fget_files+0x20e/0x3c0 [ 532.680103][T14844] ? __pfx___x64_sys_futex+0x10/0x10 [ 532.680124][T14844] ? fput+0x9b/0xd0 [ 532.680145][T14844] do_syscall_64+0xcd/0xfa0 [ 532.680171][T14844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.680186][T14844] RIP: 0033:0x7fa10138efc9 [ 532.680198][T14844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.680213][T14844] RSP: 002b:00007fa10226f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.680227][T14844] RAX: ffffffffffffffda RBX: 00007fa1015e5fa8 RCX: 00007fa10138efc9 [ 532.680236][T14844] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1015e5fac [ 532.680245][T14844] RBP: 00007fa1015e5fa0 R08: 00007fa102270000 R09: 0000000000000000 [ 532.680253][T14844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.680262][T14844] R13: 00007fa1015e6038 R14: 00007ffe97b2e040 R15: 00007ffe97b2e128 [ 532.680282][T14844] [ 533.256197][T14856] hub 8-0:1.0: USB hub found [ 533.288672][T14856] hub 8-0:1.0: 1 port detected [ 533.641042][T14846] can: request_module (can-proto-3) failed. [ 534.194761][T14875] __nla_validate_parse: 2 callbacks suppressed [ 534.194777][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 534.269701][T14875] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1830'. [ 534.786603][T14893] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1833'. [ 534.816533][T14894] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 537.333537][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1838'. [ 537.834348][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 537.871424][T14921] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1841'. [ 538.234867][T14910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.289164][T14910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.346721][T14910] bond0 (unregistering): Released all slaves [ 538.775255][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 538.824657][T14933] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1843'. [ 538.983775][T14936] netlink: 'syz.0.1845': attribute type 1 has an invalid length. [ 539.148643][T14938] FAULT_INJECTION: forcing a failure. [ 539.148643][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 539.364979][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.4.1844 Tainted: G U syzkaller #0 PREEMPT(full) [ 539.365005][T14938] Tainted: [U]=USER [ 539.365010][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.365019][T14938] Call Trace: [ 539.365024][T14938] [ 539.365030][T14938] dump_stack_lvl+0x16c/0x1f0 [ 539.365050][T14938] should_fail_ex+0x512/0x640 [ 539.365073][T14938] ? __kmalloc_cache_noprof+0x5f/0x780 [ 539.365098][T14938] should_failslab+0xc2/0x120 [ 539.365116][T14938] __kmalloc_cache_noprof+0x72/0x780 [ 539.365137][T14938] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 539.365154][T14938] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 539.365170][T14938] ? loopback_open+0x145/0x13f0 [ 539.365186][T14938] ? loopback_open+0x145/0x13f0 [ 539.365197][T14938] loopback_open+0x145/0x13f0 [ 539.365213][T14938] snd_pcm_open_substream+0xa60/0x17f0 [ 539.365236][T14938] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 539.365259][T14938] ? rcu_is_watching+0x12/0xc0 [ 539.365277][T14938] snd_pcm_open+0x29e/0x730 [ 539.365300][T14938] ? __pfx_snd_pcm_open+0x10/0x10 [ 539.365333][T14938] ? __pfx_default_wake_function+0x10/0x10 [ 539.365355][T14938] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 539.365380][T14938] snd_pcm_playback_open+0x86/0xe0 [ 539.365402][T14938] snd_open+0x22d/0x4c0 [ 539.365419][T14938] ? __pfx_snd_open+0x10/0x10 [ 539.365435][T14938] chrdev_open+0x234/0x6a0 [ 539.365451][T14938] ? __pfx_apparmor_file_open+0x10/0x10 [ 539.365478][T14938] ? __pfx_chrdev_open+0x10/0x10 [ 539.365497][T14938] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 539.365516][T14938] do_dentry_open+0x982/0x1530 [ 539.365534][T14938] ? __pfx_chrdev_open+0x10/0x10 [ 539.365555][T14938] vfs_open+0x82/0x3f0 [ 539.365578][T14938] path_openat+0x1de4/0x2cb0 [ 539.365599][T14938] ? __pfx_path_openat+0x10/0x10 [ 539.365615][T14938] ? __lock_acquire+0xb8a/0x1c90 [ 539.365636][T14938] do_filp_open+0x20b/0x470 [ 539.365651][T14938] ? __pfx_do_filp_open+0x10/0x10 [ 539.365680][T14938] ? alloc_fd+0x471/0x7d0 [ 539.365700][T14938] do_sys_openat2+0x11b/0x1d0 [ 539.365719][T14938] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.365745][T14938] __x64_sys_openat+0x174/0x210 [ 539.365765][T14938] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.365793][T14938] do_syscall_64+0xcd/0xfa0 [ 539.365810][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.365825][T14938] RIP: 0033:0x7fa4b598efc9 [ 539.365838][T14938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.365851][T14938] RSP: 002b:00007fa4b680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.365866][T14938] RAX: ffffffffffffffda RBX: 00007fa4b5be6090 RCX: 00007fa4b598efc9 [ 539.365875][T14938] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 539.365885][T14938] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.365893][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.365902][T14938] R13: 00007fa4b5be6128 R14: 00007fa4b5be6090 R15: 00007fff12158ca8 [ 539.365922][T14938] [ 540.296671][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1849'. [ 540.609092][T14953] veth0_macvtap: left promiscuous mode [ 540.667274][T14953] macvtap0: entered promiscuous mode [ 540.686398][T14953] macvtap0: entered allmulticast mode [ 541.224746][T14969] block nbd9: NBD_DISCONNECT [ 541.935658][T14970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.319230][T14949] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 542.508264][T14972] Unable to find swap-space signature [ 542.786491][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 542.816107][T14983] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1856'. [ 542.927858][T14970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.154282][T14970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.322274][T14985] delete_channel: no stack [ 543.374025][T14993] Invalid ELF header magic: != ELF [ 543.526801][T14970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.737165][T15011] FAULT_INJECTION: forcing a failure. [ 544.737165][T15011] name failslab, interval 1, probability 0, space 0, times 0 [ 544.919463][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.1.1864 Tainted: G U syzkaller #0 PREEMPT(full) [ 544.919490][T15011] Tainted: [U]=USER [ 544.919495][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.919504][T15011] Call Trace: [ 544.919509][T15011] [ 544.919516][T15011] dump_stack_lvl+0x16c/0x1f0 [ 544.919537][T15011] should_fail_ex+0x512/0x640 [ 544.919559][T15011] ? __kmalloc_cache_noprof+0x5f/0x780 [ 544.919585][T15011] should_failslab+0xc2/0x120 [ 544.919605][T15011] __kmalloc_cache_noprof+0x72/0x780 [ 544.919626][T15011] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 544.919642][T15011] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 544.919669][T15011] ? loopback_open+0x145/0x13f0 [ 544.919686][T15011] ? loopback_open+0x145/0x13f0 [ 544.919698][T15011] loopback_open+0x145/0x13f0 [ 544.919716][T15011] snd_pcm_open_substream+0xa60/0x17f0 [ 544.919739][T15011] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 544.919762][T15011] ? rcu_is_watching+0x12/0xc0 [ 544.919780][T15011] snd_pcm_open+0x29e/0x730 [ 544.919803][T15011] ? __pfx_snd_pcm_open+0x10/0x10 [ 544.919826][T15011] ? __pfx_default_wake_function+0x10/0x10 [ 544.919847][T15011] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 544.919867][T15011] snd_pcm_playback_open+0x86/0xe0 [ 544.919889][T15011] snd_open+0x22d/0x4c0 [ 544.919914][T15011] ? __pfx_snd_open+0x10/0x10 [ 544.919930][T15011] chrdev_open+0x234/0x6a0 [ 544.919948][T15011] ? __pfx_apparmor_file_open+0x10/0x10 [ 544.919969][T15011] ? __pfx_chrdev_open+0x10/0x10 [ 544.919987][T15011] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 544.920005][T15011] do_dentry_open+0x982/0x1530 [ 544.920022][T15011] ? __pfx_chrdev_open+0x10/0x10 [ 544.920041][T15011] vfs_open+0x82/0x3f0 [ 544.920063][T15011] path_openat+0x1de4/0x2cb0 [ 544.920085][T15011] ? __pfx_path_openat+0x10/0x10 [ 544.920101][T15011] ? __lock_acquire+0xb8a/0x1c90 [ 544.920121][T15011] do_filp_open+0x20b/0x470 [ 544.920137][T15011] ? __pfx_do_filp_open+0x10/0x10 [ 544.920178][T15011] ? alloc_fd+0x471/0x7d0 [ 544.920198][T15011] do_sys_openat2+0x11b/0x1d0 [ 544.920217][T15011] ? __pfx_do_sys_openat2+0x10/0x10 [ 544.920244][T15011] __x64_sys_openat+0x174/0x210 [ 544.920263][T15011] ? __pfx___x64_sys_openat+0x10/0x10 [ 544.920290][T15011] do_syscall_64+0xcd/0xfa0 [ 544.920308][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.920323][T15011] RIP: 0033:0x7f640638efc9 [ 544.920335][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.920349][T15011] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 544.920363][T15011] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 544.920373][T15011] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 544.920382][T15011] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 544.920391][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.920400][T15011] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 544.920420][T15011] [ 545.916682][T15018] sp0: Synchronizing with TNC [ 547.064460][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 547.108499][T15054] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1866'. [ 547.509428][T15061] binder: 15060:15061 ioctl c00c6211 0 returned -14 [ 548.142453][T15065] FAULT_INJECTION: forcing a failure. [ 548.142453][T15065] name failslab, interval 1, probability 0, space 0, times 0 [ 548.261354][T15065] CPU: 0 UID: 0 PID: 15065 Comm: syz.4.1876 Tainted: G U syzkaller #0 PREEMPT(full) [ 548.261381][T15065] Tainted: [U]=USER [ 548.261386][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.261395][T15065] Call Trace: [ 548.261400][T15065] [ 548.261407][T15065] dump_stack_lvl+0x16c/0x1f0 [ 548.261428][T15065] should_fail_ex+0x512/0x640 [ 548.261449][T15065] ? __kmalloc_cache_noprof+0x5f/0x780 [ 548.261474][T15065] should_failslab+0xc2/0x120 [ 548.261492][T15065] __kmalloc_cache_noprof+0x72/0x780 [ 548.261513][T15065] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 548.261530][T15065] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 548.261546][T15065] ? loopback_open+0x145/0x13f0 [ 548.261562][T15065] ? loopback_open+0x145/0x13f0 [ 548.261573][T15065] loopback_open+0x145/0x13f0 [ 548.261590][T15065] snd_pcm_open_substream+0xa60/0x17f0 [ 548.261612][T15065] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 548.261635][T15065] ? rcu_is_watching+0x12/0xc0 [ 548.261661][T15065] snd_pcm_open+0x29e/0x730 [ 548.261685][T15065] ? __pfx_snd_pcm_open+0x10/0x10 [ 548.261710][T15065] ? __pfx_default_wake_function+0x10/0x10 [ 548.261731][T15065] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 548.261752][T15065] snd_pcm_playback_open+0x86/0xe0 [ 548.261773][T15065] snd_open+0x22d/0x4c0 [ 548.261791][T15065] ? __pfx_snd_open+0x10/0x10 [ 548.261806][T15065] chrdev_open+0x234/0x6a0 [ 548.261822][T15065] ? __pfx_apparmor_file_open+0x10/0x10 [ 548.261842][T15065] ? __pfx_chrdev_open+0x10/0x10 [ 548.261859][T15065] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 548.261878][T15065] do_dentry_open+0x982/0x1530 [ 548.261894][T15065] ? __pfx_chrdev_open+0x10/0x10 [ 548.261914][T15065] vfs_open+0x82/0x3f0 [ 548.261935][T15065] path_openat+0x1de4/0x2cb0 [ 548.261957][T15065] ? __pfx_path_openat+0x10/0x10 [ 548.261972][T15065] ? __lock_acquire+0xb8a/0x1c90 [ 548.261993][T15065] do_filp_open+0x20b/0x470 [ 548.262009][T15065] ? __pfx_do_filp_open+0x10/0x10 [ 548.262038][T15065] ? alloc_fd+0x471/0x7d0 [ 548.262056][T15065] do_sys_openat2+0x11b/0x1d0 [ 548.262075][T15065] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.262102][T15065] __x64_sys_openat+0x174/0x210 [ 548.262122][T15065] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.262149][T15065] do_syscall_64+0xcd/0xfa0 [ 548.262166][T15065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.262180][T15065] RIP: 0033:0x7fa4b598efc9 [ 548.262193][T15065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.262206][T15065] RSP: 002b:00007fa4b6830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.262220][T15065] RAX: ffffffffffffffda RBX: 00007fa4b5be5fa0 RCX: 00007fa4b598efc9 [ 548.262229][T15065] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 548.262239][T15065] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 548.262247][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.262256][T15065] R13: 00007fa4b5be6038 R14: 00007fa4b5be5fa0 R15: 00007fff12158ca8 [ 548.262276][T15065] [ 548.893422][T15081] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 549.245508][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 549.664710][T15090] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 549.818949][T15092] syz.4.1881 (15092): attempted to duplicate a private mapping with mremap. This is not supported. [ 550.680170][T15104] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 550.704157][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 550.799883][T15102] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1884'. [ 552.430179][T15122] FAULT_INJECTION: forcing a failure. [ 552.430179][T15122] name failslab, interval 1, probability 0, space 0, times 0 [ 552.757872][T15122] CPU: 0 UID: 0 PID: 15122 Comm: syz.1.1888 Tainted: G U syzkaller #0 PREEMPT(full) [ 552.757899][T15122] Tainted: [U]=USER [ 552.757903][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.757913][T15122] Call Trace: [ 552.757919][T15122] [ 552.757924][T15122] dump_stack_lvl+0x16c/0x1f0 [ 552.757945][T15122] should_fail_ex+0x512/0x640 [ 552.757966][T15122] ? __kmalloc_cache_noprof+0x5f/0x780 [ 552.757991][T15122] should_failslab+0xc2/0x120 [ 552.758009][T15122] __kmalloc_cache_noprof+0x72/0x780 [ 552.758031][T15122] ? loopback_open+0xa4e/0x13f0 [ 552.758047][T15122] ? loopback_open+0xa4e/0x13f0 [ 552.758058][T15122] loopback_open+0xa4e/0x13f0 [ 552.758075][T15122] snd_pcm_open_substream+0xa60/0x17f0 [ 552.758099][T15122] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 552.758122][T15122] ? rcu_is_watching+0x12/0xc0 [ 552.758140][T15122] snd_pcm_open+0x29e/0x730 [ 552.758174][T15122] ? __pfx_snd_pcm_open+0x10/0x10 [ 552.758198][T15122] ? __pfx_default_wake_function+0x10/0x10 [ 552.758219][T15122] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 552.758240][T15122] snd_pcm_playback_open+0x86/0xe0 [ 552.758262][T15122] snd_open+0x22d/0x4c0 [ 552.758280][T15122] ? __pfx_snd_open+0x10/0x10 [ 552.758295][T15122] chrdev_open+0x234/0x6a0 [ 552.758311][T15122] ? __pfx_apparmor_file_open+0x10/0x10 [ 552.758331][T15122] ? __pfx_chrdev_open+0x10/0x10 [ 552.758349][T15122] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 552.758368][T15122] do_dentry_open+0x982/0x1530 [ 552.758384][T15122] ? __pfx_chrdev_open+0x10/0x10 [ 552.758403][T15122] vfs_open+0x82/0x3f0 [ 552.758425][T15122] path_openat+0x1de4/0x2cb0 [ 552.758446][T15122] ? __pfx_path_openat+0x10/0x10 [ 552.758462][T15122] ? __lock_acquire+0xb8a/0x1c90 [ 552.758482][T15122] do_filp_open+0x20b/0x470 [ 552.758497][T15122] ? __pfx_do_filp_open+0x10/0x10 [ 552.758526][T15122] ? alloc_fd+0x471/0x7d0 [ 552.758545][T15122] do_sys_openat2+0x11b/0x1d0 [ 552.758564][T15122] ? __pfx_do_sys_openat2+0x10/0x10 [ 552.758591][T15122] __x64_sys_openat+0x174/0x210 [ 552.758611][T15122] ? __pfx___x64_sys_openat+0x10/0x10 [ 552.758638][T15122] do_syscall_64+0xcd/0xfa0 [ 552.758656][T15122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.758670][T15122] RIP: 0033:0x7f640638efc9 [ 552.758682][T15122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.758695][T15122] RSP: 002b:00007f640714e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 552.758710][T15122] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f640638efc9 [ 552.758719][T15122] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 552.758729][T15122] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.758737][T15122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.758746][T15122] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 552.758766][T15122] [ 553.666800][T15137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1893'. [ 553.806725][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 554.804162][T15160] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 555.187689][T15137] syz.4.1893: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 555.449934][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.4.1893 Tainted: G U syzkaller #0 PREEMPT(full) [ 555.449960][T15137] Tainted: [U]=USER [ 555.449964][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 555.449973][T15137] Call Trace: [ 555.449977][T15137] [ 555.449983][T15137] dump_stack_lvl+0x16c/0x1f0 [ 555.450005][T15137] warn_alloc+0x248/0x3a0 [ 555.450021][T15137] ? __pfx_warn_alloc+0x10/0x10 [ 555.450042][T15137] ? packet_set_ring+0xb4c/0x17e0 [ 555.450063][T15137] ? __vmalloc_node_noprof+0xad/0xf0 [ 555.450087][T15137] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 555.450114][T15137] ? packet_set_ring+0xb4c/0x17e0 [ 555.450139][T15137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 555.450159][T15137] ? alloc_pages_mpol+0x25a/0x550 [ 555.450179][T15137] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 555.450198][T15137] ? rcu_is_watching+0x12/0xc0 [ 555.450216][T15137] ? packet_set_ring+0xb4c/0x17e0 [ 555.450236][T15137] __vmalloc_node_noprof+0xad/0xf0 [ 555.450256][T15137] ? packet_set_ring+0xb4c/0x17e0 [ 555.450278][T15137] packet_set_ring+0xb4c/0x17e0 [ 555.450306][T15137] packet_setsockopt+0x121b/0x33c0 [ 555.450320][T15137] ? __pfx___might_resched+0x10/0x10 [ 555.450336][T15137] ? __lock_acquire+0x622/0x1c90 [ 555.450356][T15137] ? __pfx_packet_setsockopt+0x10/0x10 [ 555.450369][T15137] ? aa_sk_perm+0x2f4/0xb10 [ 555.450383][T15137] ? file_init_path+0x4fe/0x760 [ 555.450403][T15137] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.450419][T15137] ? find_held_lock+0x2b/0x80 [ 555.450435][T15137] ? aa_sock_opt_perm+0xfd/0x1c0 [ 555.450455][T15137] ? __pfx_packet_setsockopt+0x10/0x10 [ 555.450470][T15137] do_sock_setsockopt+0xf3/0x1d0 [ 555.450490][T15137] __sys_setsockopt+0x120/0x1a0 [ 555.450516][T15137] __x64_sys_setsockopt+0xbd/0x160 [ 555.450537][T15137] ? do_syscall_64+0x91/0xfa0 [ 555.450552][T15137] ? lockdep_hardirqs_on+0x7c/0x110 [ 555.450569][T15137] do_syscall_64+0xcd/0xfa0 [ 555.450585][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.450600][T15137] RIP: 0033:0x7fa4b598efc9 [ 555.450613][T15137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.450627][T15137] RSP: 002b:00007fa4b680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.450642][T15137] RAX: ffffffffffffffda RBX: 00007fa4b5be6090 RCX: 00007fa4b598efc9 [ 555.450651][T15137] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000009 [ 555.450660][T15137] RBP: 00007fa4b5a11f91 R08: 000000000000ce24 R09: 0000000000000000 [ 555.450669][T15137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.450678][T15137] R13: 00007fa4b5be6128 R14: 00007fa4b5be6090 R15: 00007fff12158ca8 [ 555.450697][T15137] [ 555.450702][T15137] Mem-Info: [ 555.880652][T15178] Invalid ELF header magic: != ELF [ 556.426174][T15182] FAULT_INJECTION: forcing a failure. [ 556.426174][T15182] name failslab, interval 1, probability 0, space 0, times 0 [ 556.594016][T15182] CPU: 0 UID: 0 PID: 15182 Comm: syz.1.1904 Tainted: G U syzkaller #0 PREEMPT(full) [ 556.594042][T15182] Tainted: [U]=USER [ 556.594046][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.594056][T15182] Call Trace: [ 556.594061][T15182] [ 556.594067][T15182] dump_stack_lvl+0x16c/0x1f0 [ 556.594088][T15182] should_fail_ex+0x512/0x640 [ 556.594110][T15182] ? __kmalloc_cache_noprof+0x5f/0x780 [ 556.594136][T15182] should_failslab+0xc2/0x120 [ 556.594155][T15182] __kmalloc_cache_noprof+0x72/0x780 [ 556.594175][T15182] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 556.594192][T15182] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 556.594207][T15182] ? loopback_open+0x145/0x13f0 [ 556.594223][T15182] ? loopback_open+0x145/0x13f0 [ 556.594234][T15182] loopback_open+0x145/0x13f0 [ 556.594251][T15182] snd_pcm_open_substream+0xa60/0x17f0 [ 556.594275][T15182] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 556.594298][T15182] ? rcu_is_watching+0x12/0xc0 [ 556.594316][T15182] snd_pcm_open+0x29e/0x730 [ 556.594339][T15182] ? __pfx_snd_pcm_open+0x10/0x10 [ 556.594362][T15182] ? __pfx_default_wake_function+0x10/0x10 [ 556.594382][T15182] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 556.594404][T15182] snd_pcm_playback_open+0x86/0xe0 [ 556.594425][T15182] snd_open+0x22d/0x4c0 [ 556.594441][T15182] ? __pfx_snd_open+0x10/0x10 [ 556.594456][T15182] chrdev_open+0x234/0x6a0 [ 556.594473][T15182] ? __pfx_apparmor_file_open+0x10/0x10 [ 556.594493][T15182] ? __pfx_chrdev_open+0x10/0x10 [ 556.594510][T15182] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 556.594529][T15182] do_dentry_open+0x982/0x1530 [ 556.594545][T15182] ? __pfx_chrdev_open+0x10/0x10 [ 556.594565][T15182] vfs_open+0x82/0x3f0 [ 556.594586][T15182] path_openat+0x1de4/0x2cb0 [ 556.594608][T15182] ? __pfx_path_openat+0x10/0x10 [ 556.594624][T15182] ? __lock_acquire+0xb8a/0x1c90 [ 556.594644][T15182] do_filp_open+0x20b/0x470 [ 556.594659][T15182] ? __pfx_do_filp_open+0x10/0x10 [ 556.594687][T15182] ? alloc_fd+0x471/0x7d0 [ 556.594706][T15182] do_sys_openat2+0x11b/0x1d0 [ 556.594725][T15182] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.594762][T15182] __x64_sys_openat+0x174/0x210 [ 556.594783][T15182] ? __pfx___x64_sys_openat+0x10/0x10 [ 556.594812][T15182] do_syscall_64+0xcd/0xfa0 [ 556.594829][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.594844][T15182] RIP: 0033:0x7f640638efc9 [ 556.594856][T15182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.594869][T15182] RSP: 002b:00007f640716f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.594883][T15182] RAX: ffffffffffffffda RBX: 00007f64065e5fa0 RCX: 00007f640638efc9 [ 556.594892][T15182] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 556.594901][T15182] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.594910][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.594918][T15182] R13: 00007f64065e6038 R14: 00007f64065e5fa0 R15: 00007ffc04183858 [ 556.594939][T15182] [ 557.346668][T15137] active_anon:44120 inactive_anon:584 isolated_anon:0 [ 557.346668][T15137] active_file:19747 inactive_file:48407 isolated_file:0 [ 557.346668][T15137] unevictable:1951 dirty:210 writeback:13 [ 557.346668][T15137] slab_reclaimable:11956 slab_unreclaimable:100068 [ 557.346668][T15137] mapped:37764 shmem:28248 pagetables:1736 [ 557.346668][T15137] sec_pagetables:0 bounce:0 [ 557.346668][T15137] kernel_misc_reclaimable:0 [ 557.346668][T15137] free:1236103 free_pcp:20968 free_cma:0 [ 557.509754][T15137] Node 0 active_anon:175940kB inactive_anon:2336kB active_file:78988kB inactive_file:193420kB unevictable:6264kB isolated(anon):0kB isolated(file):0kB mapped:162572kB dirty:828kB writeback:0kB shmem:114836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:40960kB kernel_stack:12784kB pagetables:6100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 557.617091][T15137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 557.676279][T15137] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.709060][T15137] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 557.715556][T15137] Node 0 DMA32 free:1046840kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180568kB inactive_anon:2336kB active_file:78988kB inactive_file:193420kB unevictable:6264kB writepending:880kB zspages:864kB present:3129332kB managed:2545096kB mlocked:4728kB bounce:0kB free_pcp:55896kB local_pcp:55896kB free_cma:0kB [ 557.751987][T15137] lowmem_reserve[]: 0 0 1 1 1 [ 557.761682][T15137] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.802889][T15137] lowmem_reserve[]: 0 0 0 0 0 [ 557.813005][T15137] Node 1 Normal free:3888356kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1540kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:4kB bounce:0kB free_pcp:18104kB local_pcp:18104kB free_cma:0kB [ 557.888515][T15137] lowmem_reserve[]: 0 0 0 0 0 [ 557.893416][T15137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 557.920474][T15137] Node 0 DMA32: 2802*4kB (ME) 1410*8kB (UME) 562*16kB (ME) 446*32kB (UME) 888*64kB (ME) 603*128kB (UME) 417*256kB (UM) 237*512kB (M) 96*1024kB (UM) 6*2048kB (UM) 129*4096kB (UM) = 1046840kB [ 557.960218][T15137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 557.985495][T15137] Node 1 Normal: 223*4kB (UE) 55*8kB (UE) 1*16kB (E) 221*32kB (UE) 74*64kB (UE) 23*128kB (UE) 6*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 6*2048kB (UME) 941*4096kB (M) = 3888356kB [ 558.024352][T15137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.044755][T15137] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.064599][T15137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.085668][T15137] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.105915][T15137] 90926 total pagecache pages [ 558.216058][T15137] 14 pages in swap cache [ 558.232022][T15137] Free swap = 124148kB [ 558.249747][T15137] Total swap = 124996kB [ 558.268886][T15137] 2097051 pages RAM [ 558.295604][T15137] 0 pages HighMem/MovableOnly [ 558.318803][T15137] 428687 pages reserved [ 558.354026][T15137] 0 pages cma reserved [ 558.631962][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 559.093988][T15213] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1910'. [ 559.127876][ T5833] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 559.220415][T15224] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(460963730.2110184206.1570951386), cmd(3) [ 559.387155][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 559.437286][T15227] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1913'. [ 559.596528][ T7629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.846974][ T7629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.054635][ T7629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.300175][ T7629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.347983][T15249] FAULT_INJECTION: forcing a failure. [ 560.347983][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 560.421660][T15249] CPU: 0 UID: 0 PID: 15249 Comm: syz.3.1918 Tainted: G U syzkaller #0 PREEMPT(full) [ 560.421687][T15249] Tainted: [U]=USER [ 560.421692][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.421701][T15249] Call Trace: [ 560.421707][T15249] [ 560.421712][T15249] dump_stack_lvl+0x16c/0x1f0 [ 560.421733][T15249] should_fail_ex+0x512/0x640 [ 560.421755][T15249] ? __kmalloc_cache_noprof+0x5f/0x780 [ 560.421780][T15249] should_failslab+0xc2/0x120 [ 560.421799][T15249] __kmalloc_cache_noprof+0x72/0x780 [ 560.421819][T15249] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 560.421835][T15249] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 560.421850][T15249] ? loopback_open+0x145/0x13f0 [ 560.421865][T15249] ? loopback_open+0x145/0x13f0 [ 560.421876][T15249] loopback_open+0x145/0x13f0 [ 560.421893][T15249] snd_pcm_open_substream+0xa60/0x17f0 [ 560.421917][T15249] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 560.421940][T15249] ? rcu_is_watching+0x12/0xc0 [ 560.421957][T15249] snd_pcm_open+0x29e/0x730 [ 560.421980][T15249] ? __pfx_snd_pcm_open+0x10/0x10 [ 560.422004][T15249] ? __pfx_default_wake_function+0x10/0x10 [ 560.422024][T15249] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 560.422045][T15249] snd_pcm_playback_open+0x86/0xe0 [ 560.422066][T15249] snd_open+0x22d/0x4c0 [ 560.422083][T15249] ? __pfx_snd_open+0x10/0x10 [ 560.422098][T15249] chrdev_open+0x234/0x6a0 [ 560.422114][T15249] ? __pfx_apparmor_file_open+0x10/0x10 [ 560.422135][T15249] ? __pfx_chrdev_open+0x10/0x10 [ 560.422152][T15249] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 560.422170][T15249] do_dentry_open+0x982/0x1530 [ 560.422187][T15249] ? __pfx_chrdev_open+0x10/0x10 [ 560.422206][T15249] vfs_open+0x82/0x3f0 [ 560.422227][T15249] path_openat+0x1de4/0x2cb0 [ 560.422249][T15249] ? __pfx_path_openat+0x10/0x10 [ 560.422265][T15249] ? __lock_acquire+0xb8a/0x1c90 [ 560.422285][T15249] do_filp_open+0x20b/0x470 [ 560.422300][T15249] ? __pfx_do_filp_open+0x10/0x10 [ 560.422329][T15249] ? alloc_fd+0x471/0x7d0 [ 560.422347][T15249] do_sys_openat2+0x11b/0x1d0 [ 560.422366][T15249] ? __pfx_do_sys_openat2+0x10/0x10 [ 560.422409][T15249] __x64_sys_openat+0x174/0x210 [ 560.422431][T15249] ? __pfx___x64_sys_openat+0x10/0x10 [ 560.422460][T15249] do_syscall_64+0xcd/0xfa0 [ 560.422478][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.422492][T15249] RIP: 0033:0x7fa10138efc9 [ 560.422505][T15249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.422518][T15249] RSP: 002b:00007fa10226f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 560.422532][T15249] RAX: ffffffffffffffda RBX: 00007fa1015e5fa0 RCX: 00007fa10138efc9 [ 560.422542][T15249] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 560.422551][T15249] RBP: 00007fa101411f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.422559][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.422568][T15249] R13: 00007fa1015e6038 R14: 00007fa1015e5fa0 R15: 00007ffe97b2e128 [ 560.422588][T15249] [ 562.282479][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 562.521655][ T7629] bridge_slave_1: left allmulticast mode [ 562.582669][ T7629] bridge_slave_1: left promiscuous mode [ 562.613958][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.754912][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 562.793884][ T7629] bridge_slave_0: left allmulticast mode [ 562.815744][T15276] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1923'. [ 562.840551][ T7629] bridge_slave_0: left promiscuous mode [ 562.889459][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.012120][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.018597][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.243393][T15284] capability: warning: `syz.3.1924' uses deprecated v2 capabilities in a way that may be insecure [ 563.689303][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 564.050853][ T7629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.092493][ T7629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.128239][ T7629] bond0 (unregistering): Released all slaves [ 564.341129][ T7629] .^: left promiscuous mode [ 564.852144][T15303] FAULT_INJECTION: forcing a failure. [ 564.852144][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 565.013941][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.4.1928 Tainted: G U syzkaller #0 PREEMPT(full) [ 565.013969][T15303] Tainted: [U]=USER [ 565.013974][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 565.013983][T15303] Call Trace: [ 565.013990][T15303] [ 565.013996][T15303] dump_stack_lvl+0x16c/0x1f0 [ 565.014018][T15303] should_fail_ex+0x512/0x640 [ 565.014040][T15303] ? __kmalloc_cache_noprof+0x5f/0x780 [ 565.014065][T15303] should_failslab+0xc2/0x120 [ 565.014083][T15303] __kmalloc_cache_noprof+0x72/0x780 [ 565.014105][T15303] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 565.014122][T15303] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 565.014137][T15303] ? loopback_open+0x145/0x13f0 [ 565.014153][T15303] ? loopback_open+0x145/0x13f0 [ 565.014165][T15303] loopback_open+0x145/0x13f0 [ 565.014183][T15303] snd_pcm_open_substream+0xa60/0x17f0 [ 565.014207][T15303] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 565.014230][T15303] ? rcu_is_watching+0x12/0xc0 [ 565.014248][T15303] snd_pcm_open+0x29e/0x730 [ 565.014271][T15303] ? __pfx_snd_pcm_open+0x10/0x10 [ 565.014294][T15303] ? __pfx_default_wake_function+0x10/0x10 [ 565.014314][T15303] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 565.014336][T15303] snd_pcm_playback_open+0x86/0xe0 [ 565.014357][T15303] snd_open+0x22d/0x4c0 [ 565.014374][T15303] ? __pfx_snd_open+0x10/0x10 [ 565.014390][T15303] chrdev_open+0x234/0x6a0 [ 565.014406][T15303] ? __pfx_apparmor_file_open+0x10/0x10 [ 565.014426][T15303] ? __pfx_chrdev_open+0x10/0x10 [ 565.014444][T15303] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 565.014463][T15303] do_dentry_open+0x982/0x1530 [ 565.014478][T15303] ? __pfx_chrdev_open+0x10/0x10 [ 565.014498][T15303] vfs_open+0x82/0x3f0 [ 565.014520][T15303] path_openat+0x1de4/0x2cb0 [ 565.014542][T15303] ? __pfx_path_openat+0x10/0x10 [ 565.014558][T15303] ? __lock_acquire+0xb8a/0x1c90 [ 565.014579][T15303] do_filp_open+0x20b/0x470 [ 565.014594][T15303] ? __pfx_do_filp_open+0x10/0x10 [ 565.014622][T15303] ? alloc_fd+0x471/0x7d0 [ 565.014641][T15303] do_sys_openat2+0x11b/0x1d0 [ 565.014660][T15303] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.014687][T15303] __x64_sys_openat+0x174/0x210 [ 565.014707][T15303] ? __pfx___x64_sys_openat+0x10/0x10 [ 565.014735][T15303] do_syscall_64+0xcd/0xfa0 [ 565.014752][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.014767][T15303] RIP: 0033:0x7fa4b598efc9 [ 565.014779][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.014792][T15303] RSP: 002b:00007fa4b6830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.014806][T15303] RAX: ffffffffffffffda RBX: 00007fa4b5be5fa0 RCX: 00007fa4b598efc9 [ 565.014816][T15303] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 565.014825][T15303] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 565.014834][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.014843][T15303] R13: 00007fa4b5be6038 R14: 00007fa4b5be5fa0 R15: 00007fff12158ca8 [ 565.014863][T15303] [ 565.988991][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1933'. [ 566.036000][T15330] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1933'. [ 566.076020][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 567.480137][ T7629] hsr_slave_0: left promiscuous mode [ 567.491061][T15364] FAULT_INJECTION: forcing a failure. [ 567.491061][T15364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 567.504317][T15364] CPU: 0 UID: 0 PID: 15364 Comm: syz.3.1941 Tainted: G U syzkaller #0 PREEMPT(full) [ 567.504341][T15364] Tainted: [U]=USER [ 567.504345][T15364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.504354][T15364] Call Trace: [ 567.504360][T15364] [ 567.504365][T15364] dump_stack_lvl+0x16c/0x1f0 [ 567.504385][T15364] should_fail_ex+0x512/0x640 [ 567.504410][T15364] should_fail_futex+0x4c/0x60 [ 567.504428][T15364] futex_lock_pi_atomic+0x101/0xd50 [ 567.504453][T15364] futex_lock_pi+0x23f/0x7c0 [ 567.504476][T15364] ? __pfx_futex_lock_pi+0x10/0x10 [ 567.504495][T15364] ? __futex_wait+0x24b/0x2f0 [ 567.504530][T15364] ? futex_private_hash_put+0x18a/0x300 [ 567.504549][T15364] ? __pfx_futex_wake_mark+0x10/0x10 [ 567.504576][T15364] ? ksys_write+0x190/0x250 [ 567.504594][T15364] do_futex+0x11a/0x350 [ 567.504613][T15364] ? __pfx_do_futex+0x10/0x10 [ 567.504635][T15364] __x64_sys_futex+0x1e0/0x4c0 [ 567.504688][T15364] ? fput+0x9b/0xd0 [ 567.504707][T15364] ? __pfx___x64_sys_futex+0x10/0x10 [ 567.504725][T15364] ? xfd_validate_state+0x61/0x180 [ 567.504746][T15364] ? __pfx_ksys_write+0x10/0x10 [ 567.504770][T15364] do_syscall_64+0xcd/0xfa0 [ 567.504786][T15364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.504800][T15364] RIP: 0033:0x7fa10138efc9 [ 567.504813][T15364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.504826][T15364] RSP: 002b:00007fa10226f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 567.504840][T15364] RAX: ffffffffffffffda RBX: 00007fa1015e5fa0 RCX: 00007fa10138efc9 [ 567.504849][T15364] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 567.504857][T15364] RBP: 00007fa101411f91 R08: 0000000000000000 R09: 000000008000fff5 [ 567.504865][T15364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.504874][T15364] R13: 00007fa1015e6038 R14: 00007fa1015e5fa0 R15: 00007ffe97b2e128 [ 567.504893][T15364] [ 569.677218][ T7629] hsr_slave_1: left promiscuous mode [ 569.696587][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.713385][ T7629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.837872][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.889616][ T7629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.903058][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 570.089323][ T7629] veth1_macvtap: left promiscuous mode [ 570.145675][ T7629] veth0_macvtap: left promiscuous mode [ 570.166135][ T7629] veth1_vlan: left promiscuous mode [ 570.215615][ T7629] veth0_vlan: left promiscuous mode “[ 572.408168][ T7629] team0 (unregistering): Port device team_slave_1 removed [ 572.596430][ T7629] team0 (unregistering): Port device team_slave_0 removed [ 574.159312][T15430] random: crng reseeded on system resumption [ 575.204179][T15451] FAULT_INJECTION: forcing a failure. [ 575.204179][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 575.299474][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 575.434376][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.1.1955 Tainted: G U syzkaller #0 PREEMPT(full) [ 575.434402][T15451] Tainted: [U]=USER [ 575.434407][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.434415][T15451] Call Trace: [ 575.434421][T15451] [ 575.434427][T15451] dump_stack_lvl+0x16c/0x1f0 [ 575.434448][T15451] should_fail_ex+0x512/0x640 [ 575.434470][T15451] ? __kmalloc_cache_noprof+0x5f/0x780 [ 575.434495][T15451] should_failslab+0xc2/0x120 [ 575.434513][T15451] __kmalloc_cache_noprof+0x72/0x780 [ 575.434534][T15451] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 575.434550][T15451] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 575.434565][T15451] ? loopback_open+0x145/0x13f0 [ 575.434581][T15451] ? loopback_open+0x145/0x13f0 [ 575.434592][T15451] loopback_open+0x145/0x13f0 [ 575.434608][T15451] snd_pcm_open_substream+0xa60/0x17f0 [ 575.434632][T15451] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 575.434655][T15451] ? rcu_is_watching+0x12/0xc0 [ 575.434672][T15451] snd_pcm_open+0x29e/0x730 [ 575.434695][T15451] ? __pfx_snd_pcm_open+0x10/0x10 [ 575.434719][T15451] ? __pfx_default_wake_function+0x10/0x10 [ 575.434739][T15451] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 575.434759][T15451] snd_pcm_playback_open+0x86/0xe0 [ 575.434784][T15451] snd_open+0x22d/0x4c0 [ 575.434802][T15451] ? __pfx_snd_open+0x10/0x10 [ 575.434818][T15451] chrdev_open+0x234/0x6a0 [ 575.434840][T15451] ? __pfx_apparmor_file_open+0x10/0x10 [ 575.434861][T15451] ? __pfx_chrdev_open+0x10/0x10 [ 575.434879][T15451] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 575.434899][T15451] do_dentry_open+0x982/0x1530 [ 575.434915][T15451] ? __pfx_chrdev_open+0x10/0x10 [ 575.434935][T15451] vfs_open+0x82/0x3f0 [ 575.434956][T15451] path_openat+0x1de4/0x2cb0 [ 575.434978][T15451] ? __pfx_path_openat+0x10/0x10 [ 575.434994][T15451] ? __lock_acquire+0xb8a/0x1c90 [ 575.435014][T15451] do_filp_open+0x20b/0x470 [ 575.435029][T15451] ? __pfx_do_filp_open+0x10/0x10 [ 575.435058][T15451] ? alloc_fd+0x471/0x7d0 [ 575.435077][T15451] do_sys_openat2+0x11b/0x1d0 [ 575.435096][T15451] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.435122][T15451] __x64_sys_openat+0x174/0x210 [ 575.435142][T15451] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.435169][T15451] do_syscall_64+0xcd/0xfa0 [ 575.435187][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.435201][T15451] RIP: 0033:0x7f640638efc9 [ 575.435214][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.435227][T15451] RSP: 002b:00007f640714e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.435240][T15451] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f640638efc9 [ 575.435250][T15451] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 575.435259][T15451] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.435267][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.435275][T15451] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 575.435295][T15451] [ 576.288692][ T5833] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 576.394652][T15465] zswap: compressor not available [ 577.466756][T15473] kexec: Could not allocate control_code_buffer [ 577.869812][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 581.158439][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 582.230750][T15593] FAULT_INJECTION: forcing a failure. [ 582.230750][T15593] name failslab, interval 1, probability 0, space 0, times 0 [ 582.519576][T15593] CPU: 0 UID: 0 PID: 15593 Comm: syz.1.1982 Tainted: G U syzkaller #0 PREEMPT(full) [ 582.519602][T15593] Tainted: [U]=USER [ 582.519607][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.519616][T15593] Call Trace: [ 582.519621][T15593] [ 582.519627][T15593] dump_stack_lvl+0x16c/0x1f0 [ 582.519648][T15593] should_fail_ex+0x512/0x640 [ 582.519669][T15593] ? __kmalloc_cache_noprof+0x5f/0x780 [ 582.519693][T15593] should_failslab+0xc2/0x120 [ 582.519713][T15593] __kmalloc_cache_noprof+0x72/0x780 [ 582.519734][T15593] ? loopback_open+0xa4e/0x13f0 [ 582.519750][T15593] ? loopback_open+0xa4e/0x13f0 [ 582.519761][T15593] loopback_open+0xa4e/0x13f0 [ 582.519778][T15593] snd_pcm_open_substream+0xa60/0x17f0 [ 582.519801][T15593] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 582.519825][T15593] ? rcu_is_watching+0x12/0xc0 [ 582.519843][T15593] snd_pcm_open+0x29e/0x730 [ 582.519866][T15593] ? __pfx_snd_pcm_open+0x10/0x10 [ 582.519889][T15593] ? __pfx_default_wake_function+0x10/0x10 [ 582.519909][T15593] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 582.519930][T15593] snd_pcm_playback_open+0x86/0xe0 [ 582.519952][T15593] snd_open+0x22d/0x4c0 [ 582.519969][T15593] ? __pfx_snd_open+0x10/0x10 [ 582.519984][T15593] chrdev_open+0x234/0x6a0 [ 582.520000][T15593] ? __pfx_apparmor_file_open+0x10/0x10 [ 582.520020][T15593] ? __pfx_chrdev_open+0x10/0x10 [ 582.520037][T15593] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 582.520062][T15593] do_dentry_open+0x982/0x1530 [ 582.520079][T15593] ? __pfx_chrdev_open+0x10/0x10 [ 582.520099][T15593] vfs_open+0x82/0x3f0 [ 582.520122][T15593] path_openat+0x1de4/0x2cb0 [ 582.520144][T15593] ? __pfx_path_openat+0x10/0x10 [ 582.520160][T15593] ? __lock_acquire+0xb8a/0x1c90 [ 582.520181][T15593] do_filp_open+0x20b/0x470 [ 582.520196][T15593] ? __pfx_do_filp_open+0x10/0x10 [ 582.520225][T15593] ? alloc_fd+0x471/0x7d0 [ 582.520244][T15593] do_sys_openat2+0x11b/0x1d0 [ 582.520263][T15593] ? __pfx_do_sys_openat2+0x10/0x10 [ 582.520290][T15593] __x64_sys_openat+0x174/0x210 [ 582.520310][T15593] ? __pfx___x64_sys_openat+0x10/0x10 [ 582.520337][T15593] do_syscall_64+0xcd/0xfa0 [ 582.520354][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.520369][T15593] RIP: 0033:0x7f640638efc9 [ 582.520382][T15593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.520395][T15593] RSP: 002b:00007f640714e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.520409][T15593] RAX: ffffffffffffffda RBX: 00007f64065e6090 RCX: 00007f640638efc9 [ 582.520418][T15593] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 582.520428][T15593] RBP: 00007f6406411f91 R08: 0000000000000000 R09: 0000000000000000 [ 582.520437][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.520445][T15593] R13: 00007f64065e6128 R14: 00007f64065e6090 R15: 00007ffc04183858 [ 582.520465][T15593] [ 582.817993][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.205685][T15608] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1986'. [ 583.948383][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 584.441102][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1991'. [ 585.930848][T15636] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.5), cmd(18) [ 585.974570][T15646] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 586.847286][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 588.815789][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 589.169013][T15746] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.517483][T15721] FAULT_INJECTION: forcing a failure. [ 589.517483][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 589.664388][T15766] i2c i2c-0: delete_device: Can't find device in list [ 589.925008][T15721] CPU: 0 UID: 0 PID: 15721 Comm: syz.4.2009 Tainted: G U syzkaller #0 PREEMPT(full) [ 589.925035][T15721] Tainted: [U]=USER [ 589.925040][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.925049][T15721] Call Trace: [ 589.925054][T15721] [ 589.925059][T15721] dump_stack_lvl+0x16c/0x1f0 [ 589.925081][T15721] should_fail_ex+0x512/0x640 [ 589.925102][T15721] ? __kmalloc_cache_noprof+0x5f/0x780 [ 589.925128][T15721] should_failslab+0xc2/0x120 [ 589.925148][T15721] __kmalloc_cache_noprof+0x72/0x780 [ 589.925169][T15721] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 589.925185][T15721] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 589.925201][T15721] ? loopback_open+0x145/0x13f0 [ 589.925216][T15721] ? loopback_open+0x145/0x13f0 [ 589.925227][T15721] loopback_open+0x145/0x13f0 [ 589.925243][T15721] snd_pcm_open_substream+0xa60/0x17f0 [ 589.925266][T15721] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 589.925288][T15721] ? rcu_is_watching+0x12/0xc0 [ 589.925306][T15721] snd_pcm_open+0x29e/0x730 [ 589.925329][T15721] ? __pfx_snd_pcm_open+0x10/0x10 [ 589.925362][T15721] ? __pfx_default_wake_function+0x10/0x10 [ 589.925386][T15721] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 589.925409][T15721] snd_pcm_playback_open+0x86/0xe0 [ 589.925431][T15721] snd_open+0x22d/0x4c0 [ 589.925448][T15721] ? __pfx_snd_open+0x10/0x10 [ 589.925465][T15721] chrdev_open+0x234/0x6a0 [ 589.925482][T15721] ? __pfx_apparmor_file_open+0x10/0x10 [ 589.925502][T15721] ? __pfx_chrdev_open+0x10/0x10 [ 589.925519][T15721] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 589.925538][T15721] do_dentry_open+0x982/0x1530 [ 589.925554][T15721] ? __pfx_chrdev_open+0x10/0x10 [ 589.925573][T15721] vfs_open+0x82/0x3f0 [ 589.925594][T15721] path_openat+0x1de4/0x2cb0 [ 589.925616][T15721] ? __pfx_path_openat+0x10/0x10 [ 589.925631][T15721] ? __lock_acquire+0xb8a/0x1c90 [ 589.925652][T15721] do_filp_open+0x20b/0x470 [ 589.925667][T15721] ? __pfx_do_filp_open+0x10/0x10 [ 589.925696][T15721] ? alloc_fd+0x471/0x7d0 [ 589.925714][T15721] do_sys_openat2+0x11b/0x1d0 [ 589.925734][T15721] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.925760][T15721] __x64_sys_openat+0x174/0x210 [ 589.925780][T15721] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.925807][T15721] do_syscall_64+0xcd/0xfa0 [ 589.925825][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.925839][T15721] RIP: 0033:0x7fa4b598efc9 [ 589.925851][T15721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.925865][T15721] RSP: 002b:00007fa4b6830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.925878][T15721] RAX: ffffffffffffffda RBX: 00007fa4b5be5fa0 RCX: 00007fa4b598efc9 [ 589.925888][T15721] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 589.925897][T15721] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.925906][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.925914][T15721] R13: 00007fa4b5be6038 R14: 00007fa4b5be5fa0 R15: 00007fff12158ca8 [ 589.925934][T15721] [ 591.429970][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 592.112619][T15830] can: request_module (can-proto-3) failed. [ 593.361813][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2034'. [ 593.443655][T15869] veth0_macvtap: entered promiscuous mode [ 593.462039][T15869] veth0_macvtap: entered allmulticast mode [ 593.490266][T15869] macvtap0: left allmulticast mode [ 593.517104][T15869] veth0_macvtap: left allmulticast mode [ 594.138733][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'. [ 594.585276][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 596.413234][T15930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 596.865751][T15940] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.2048' sets config #5 [ 597.026500][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2047'. [ 597.742918][T15958] ================================================================== [ 597.742930][T15958] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 597.742955][T15958] Write of size 8 at addr ffffc900039793e0 by task syz.4.2051/15958 [ 597.742968][T15958] [ 597.742978][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.4.2051 Tainted: G U syzkaller #0 PREEMPT(full) [ 597.742998][T15958] Tainted: [U]=USER [ 597.743003][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.743012][T15958] Call Trace: [ 597.743018][T15958] [ 597.743023][T15958] dump_stack_lvl+0x116/0x1f0 [ 597.743041][T15958] print_report+0xcd/0x630 [ 597.743059][T15958] ? __virt_addr_valid+0x81/0x610 [ 597.743079][T15958] ? sys_imageblit+0x1a6f/0x1e60 [ 597.743094][T15958] kasan_report+0xe0/0x110 [ 597.743111][T15958] ? sys_imageblit+0x1a6f/0x1e60 [ 597.743128][T15958] sys_imageblit+0x1a6f/0x1e60 [ 597.743146][T15958] ? __pfx_sys_imageblit+0x10/0x10 [ 597.743161][T15958] ? __pfx__prb_read_valid+0x10/0x10 [ 597.743180][T15958] ? find_held_lock+0x2b/0x80 [ 597.743194][T15958] ? up+0xcb/0x140 [ 597.743209][T15958] ? do_raw_spin_unlock+0x172/0x230 [ 597.743231][T15958] ? prb_read_valid+0x78/0xa0 [ 597.743250][T15958] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 597.743267][T15958] soft_cursor+0x524/0xa10 [ 597.743288][T15958] ? fb_get_color_depth+0x120/0x250 [ 597.743308][T15958] bit_cursor+0xe8c/0x17e0 [ 597.743330][T15958] ? __pfx_bit_cursor+0x10/0x10 [ 597.743353][T15958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.743375][T15958] ? get_color+0x1da/0x450 [ 597.743392][T15958] ? __pfx_bit_cursor+0x10/0x10 [ 597.743411][T15958] fbcon_cursor+0x40c/0x5a0 [ 597.743429][T15958] ? do_blank_screen+0x591/0x5a0 [ 597.743442][T15958] set_cursor+0x1db/0x250 [ 597.743475][T15958] con_write+0x89/0xb0 [ 597.743492][T15958] n_tty_write+0x41e/0x11e0 [ 597.743520][T15958] ? __pfx_n_tty_write+0x10/0x10 [ 597.743538][T15958] ? trace_kmalloc+0x2b/0xd0 [ 597.743556][T15958] ? __pfx_woken_wake_function+0x10/0x10 [ 597.743578][T15958] ? kfree+0x252/0x6d0 [ 597.743590][T15958] ? __pfx_n_tty_write+0x10/0x10 [ 597.743608][T15958] file_tty_write.constprop.0+0x503/0x9b0 [ 597.743625][T15958] redirected_tty_write+0xd4/0x150 [ 597.743640][T15958] vfs_write+0x7d3/0x11d0 [ 597.743655][T15958] ? __pfx_redirected_tty_write+0x10/0x10 [ 597.743671][T15958] ? __pfx_vfs_write+0x10/0x10 [ 597.743683][T15958] ? find_held_lock+0x2b/0x80 [ 597.743701][T15958] ksys_write+0x12a/0x250 [ 597.743715][T15958] ? __pfx_ksys_write+0x10/0x10 [ 597.743731][T15958] do_syscall_64+0xcd/0xfa0 [ 597.743747][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.743761][T15958] RIP: 0033:0x7fa4b598efc9 [ 597.743773][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.743792][T15958] RSP: 002b:00007fa4b680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.743807][T15958] RAX: ffffffffffffffda RBX: 00007fa4b5be6090 RCX: 00007fa4b598efc9 [ 597.743817][T15958] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000004 [ 597.743826][T15958] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.743835][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.743843][T15958] R13: 00007fa4b5be6128 R14: 00007fa4b5be6090 R15: 00007fff12158ca8 [ 597.743858][T15958] [ 597.743863][T15958] [ 597.743867][T15958] The buggy address belongs to a vmalloc virtual mapping [ 597.743879][T15958] Memory state around the buggy address: [ 597.743887][T15958] ffffc90003979280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 597.743897][T15958] ffffc90003979300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 597.743906][T15958] >ffffc90003979380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 597.743914][T15958] ^ [ 597.743922][T15958] ffffc90003979400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 597.743932][T15958] ffffc90003979480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 597.743940][T15958] ================================================================== [ 597.759243][T15958] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 597.759262][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.4.2051 Tainted: G U syzkaller #0 PREEMPT(full) [ 597.759285][T15958] Tainted: [U]=USER [ 597.759290][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.759299][T15958] Call Trace: [ 597.759304][T15958] [ 597.759311][T15958] dump_stack_lvl+0x3d/0x1f0 [ 597.759331][T15958] vpanic+0x640/0x6f0 [ 597.759351][T15958] panic+0xca/0xd0 [ 597.759370][T15958] ? __pfx_panic+0x10/0x10 [ 597.759390][T15958] ? sys_imageblit+0x1a6f/0x1e60 [ 597.759406][T15958] ? preempt_schedule_common+0x44/0xc0 [ 597.759421][T15958] ? preempt_schedule_thunk+0x16/0x30 [ 597.759444][T15958] check_panic_on_warn+0xab/0xb0 [ 597.759463][T15958] end_report+0x107/0x170 [ 597.759481][T15958] kasan_report+0xee/0x110 [ 597.759499][T15958] ? sys_imageblit+0x1a6f/0x1e60 [ 597.759523][T15958] sys_imageblit+0x1a6f/0x1e60 [ 597.759542][T15958] ? __pfx_sys_imageblit+0x10/0x10 [ 597.759559][T15958] ? __pfx__prb_read_valid+0x10/0x10 [ 597.759579][T15958] ? find_held_lock+0x2b/0x80 [ 597.759594][T15958] ? up+0xcb/0x140 [ 597.759609][T15958] ? do_raw_spin_unlock+0x172/0x230 [ 597.759632][T15958] ? prb_read_valid+0x78/0xa0 [ 597.759651][T15958] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 597.759668][T15958] soft_cursor+0x524/0xa10 [ 597.759689][T15958] ? fb_get_color_depth+0x120/0x250 [ 597.759710][T15958] bit_cursor+0xe8c/0x17e0 [ 597.759732][T15958] ? __pfx_bit_cursor+0x10/0x10 [ 597.759754][T15958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.759777][T15958] ? get_color+0x1da/0x450 [ 597.759794][T15958] ? __pfx_bit_cursor+0x10/0x10 [ 597.759813][T15958] fbcon_cursor+0x40c/0x5a0 [ 597.759832][T15958] ? do_blank_screen+0x591/0x5a0 [ 597.759845][T15958] set_cursor+0x1db/0x250 [ 597.759858][T15958] con_write+0x89/0xb0 [ 597.759873][T15958] n_tty_write+0x41e/0x11e0 [ 597.759894][T15958] ? __pfx_n_tty_write+0x10/0x10 [ 597.759912][T15958] ? trace_kmalloc+0x2b/0xd0 [ 597.759929][T15958] ? __pfx_woken_wake_function+0x10/0x10 [ 597.759951][T15958] ? kfree+0x252/0x6d0 [ 597.759963][T15958] ? __pfx_n_tty_write+0x10/0x10 [ 597.759981][T15958] file_tty_write.constprop.0+0x503/0x9b0 [ 597.759999][T15958] redirected_tty_write+0xd4/0x150 [ 597.760014][T15958] vfs_write+0x7d3/0x11d0 [ 597.760029][T15958] ? __pfx_redirected_tty_write+0x10/0x10 [ 597.760045][T15958] ? __pfx_vfs_write+0x10/0x10 [ 597.760059][T15958] ? find_held_lock+0x2b/0x80 [ 597.760077][T15958] ksys_write+0x12a/0x250 [ 597.760091][T15958] ? __pfx_ksys_write+0x10/0x10 [ 597.760108][T15958] do_syscall_64+0xcd/0xfa0 [ 597.760123][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.760138][T15958] RIP: 0033:0x7fa4b598efc9 [ 597.760151][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.760166][T15958] RSP: 002b:00007fa4b680f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.760180][T15958] RAX: ffffffffffffffda RBX: 00007fa4b5be6090 RCX: 00007fa4b598efc9 [ 597.760190][T15958] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000004 [ 597.760199][T15958] RBP: 00007fa4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.760208][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.760217][T15958] R13: 00007fa4b5be6128 R14: 00007fa4b5be6090 R15: 00007fff12158ca8 [ 597.760231][T15958] [ 597.760301][T15958] Kernel Offset: disabled