last executing test programs: 27m21.674640309s ago: executing program 1 (id=725): readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x8}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x189000, 0x0) readv$auto(r0, &(0x7f00000018c0)={0x0, 0x1}, 0x9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x106) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r1, 0x0, 0x13, 0x0, 0x8009) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/24/smp_affinity\x00', 0x1ab302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x80000, 0x0) mincore$auto(0x0, 0x10000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) 27m19.456821025s ago: executing program 1 (id=728): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x880) mmap$auto(0x0, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000) ioprio_set$auto(0x6, 0x7fff, 0x2646) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x19, 0x7, 0x28000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x2042, 0x0) landlock_restrict_self$auto(r0, 0xc) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020008, 0xdf, 0x1000000000000018, 0x401, 0x8000) sysfs$auto(0x2, 0x21, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100) socket(0x28, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0c, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0xbb80, 0xd9f6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x0) socketpair$auto(0x3, 0x8, 0x7, 0x0) ioctl$auto(0x1, 0x8983, 0x4) 27m18.349324114s ago: executing program 1 (id=732): r0 = socket(0x11, 0x80003, 0x300) r1 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0xfffefffffffff72f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r3 = syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0xfffffffffffffd6d, 0x2, 0xeb0, r1, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) msgctl$auto_IPC_SET(0xf592, 0x1, &(0x7f00000009c0)={{0x9, 0x0, 0x0, 0x1ff, 0x8, 0x1, 0x1}, &(0x7f0000000940)=0x77, &(0x7f0000000980)=0x8, 0x3, 0x9, 0x200, 0x4e7, 0x8001, 0x7a, 0x2, 0x0, @raw=0x2, @raw=0x8}) r5 = socket(0x11, 0x80003, 0x200300) setsockopt$auto(r5, 0x107, 0x18, 0x0, 0x9) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0x2e54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SSIDS={0x1a9, 0x2d, 0x0, 0x1, [@nested={0xe0, 0x20, 0x0, 0x1, [@typed={0xc, 0x4a, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x48, 0x0, 0x0, @u64=0xfffffffffffffff9}, @nested={0xc4, 0x10f, 0x0, 0x1, [@nested={0xae, 0x4, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @pid=r3}, @generic="45ac5371e8b06ee5bde0bfea30940db9c78f034f03e9ebb8c6957b98eae7d252847d0764a4fcf252fdffd26e05c895e8a79fbfbf9129cd4ace8295705cda6a9b42307dcd556e19fbd71244fc4bf5b8424fe5b0158e70567ae22b221b9d3f89bfd77f1ec09269a837cfce728cd56ab20e28415de3a05d32fc7b96943c55bbc396a6b737ffb32b90cc4e8f631fe669bd813ff700a8a85a14b25174fec4ad04c0908c8a"]}, @typed={0x8, 0x1f, 0x0, 0x0, @u32}, @typed={0x8, 0x55, 0x0, 0x0, @pid=r3}]}]}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@local}, @generic="9c8119f02047909df2988a2d1d3b733947e88f8f952cbe4e6c45dc0e642702c4df0389e767578e4c4fef89d27d4fe994350cf280e57dd16d6b3c8ca065812bf28d0f801543b86bbad41b041ec1b398115a43b2f3bdfe0193cb5bb4795f3f2cac825a7801e70102a55998d3ad1da720fa1ba5dcc81c60bed8c2575942adb6629f609c49a345546927b0fd688a750192d96da6796131239eee324a92fe040d5c3a0aa95963d23ab082eba0484923264235c2b0c19b003f2c9979d6e957e4"]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1316, 0x23, 0x0, 0x1, [@generic="7a50dd6d1912bd7de2eeda683b3bbf5df1b86d230fcaaf1080a096763f02d8bd1b8e40762bb504d560c03be2bf5f466c19e5d59e7566c9ed24fc27d3515e3dc0a75c5a527c8e1833ce6237c6b85cf1937a6dd5741a76bae61c935ee80cbf7cef2fee137354571b24b4f3f5cacce31f9289737dcbcc0844ad88442462f62dbd8d966cb81348ed8a95d1c6ad10b98a2a672bd1c2777988423755b6b045023661a3a587536c896b641915456db38b6635471cc69ad0632a5c2fb25f2ad1fadbeb2a1d071f2d85687b5ed3c6a2137bfe2634273681d2bdb7e53dd42ccf5f59f259fe6a", @nested={0x12c, 0x3a, 0x0, 0x1, [@nested={0x4, 0xbc}, @typed={0xc, 0x148, 0x0, 0x0, @u64=0xfffffffffffffc6a}, @typed={0x8, 0x1f, 0x0, 0x0, @pid}, @generic="6dc14aab5777be2ca5baed682ffeb8c6000a4c5b369cefaad7a406399c3f01ab20e9294f3a5cc86a816237e3996e773df03241c80eb695764f1e5960aca25ca6a9c64f79c0bd6745396c3ecfd8faca9179dacbeefbe05158a8776ead2956b389670171615d78a2cc76114f12f4638ef795544f435c5cfca208526471d6d79eb1225233fe8128deec3df9941a20e6d4f25a8ab26f5904ddad65f03b44ad4042fa4e48f8b968b38a5d9259e50a455dc84c4ed0f57cc462d7cd29d7b7e755fba05dcebbf8c086093a7624b087aefe00fb6f7c082a1e74377932c1091e40f9de80510962a382e1fe2356", @typed={0x8, 0x9c, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x98, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x80}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x1020, 0x61, 0x0, 0x1, [@typed={0x8, 0x13e, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xda, 0x0, 0x0, @ipv4=@remote}]}, @generic="3fe3f941268a6f73a2ca2043b23e500cfeacf7272f0f252166ebe3882f60aff22aff692e23800bc59387b3f84436eef47e1880600ba4964a4211d3d450c3541029e8163973412ba83a8be1b646d57867425c2286559b6e54c86089797698b00384ae82215b8091cdc8e08e28d0650a1886c832c67e5a035bbe21830ff22b3a587482bd4f181b2d134d7167cb7995a738dfbd3a7487ae88adcaae44b63e5665e3c65a532440aeda780c7d6cc75aa820ee3760f9df94620c19912be0aaee914849b40fd648df2b3e89f382cee19bfefa8dd58b9b8b78bb30eb3c28c0c1462a5dda8e738afb18"]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_STA_FLAGS={0x192d, 0x11, 0x0, 0x1, [@generic="cd53f7674395c0b9a50b0efbe4ff64bc7e9fe6d4543288b7ab355265", @nested={0x4c, 0xa2, 0x0, 0x1, [@nested={0x4, 0xa4}, @typed={0x24, 0x2, 0x0, 0x0, @str='/sys/kernel/debug/suspend_stats\x00'}, @typed={0x8, 0x53, 0x0, 0x0, @pid}, @nested={0x4, 0x9f}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="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", @nested={0x54c, 0xa6, 0x0, 0x1, [@typed={0xc, 0x144, 0x0, 0x0, @u64}, @nested={0x539, 0x8d, 0x0, 0x1, [@generic="d093b03f61d17d8527baa852430c14bf1d630e7aa1618c3881766bf0c3fd290b05907e9aa56d3418f6c1cfd7d44d20ba5068466e15b9604765bca98d642f78e35bbdf54115b8abf04060167bbc37442d2b1be654fc4afd26497b4b7bb6d0776387045a5d3beb859f3f450798b21f5591d5c3d90fbf5d629374ff1feadfb4662943a579f35612e2b05cafd0de04f7a4d9b5743c0f5ec1c97e218a4a8a4ca18995f0f55a28de136d5ed85bb03e1e835221213979ea371e0640d75536ad52801ee101987c927dc3272e05", @typed={0x4, 0x148}, @nested={0x51, 0x18, 0x0, 0x1, [@nested={0x4, 0x107}, @nested={0x4, 0xd0}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0xfffffffffffffffc}, @typed={0x8, 0x84, 0x0, 0x0, @uid=r4}, @typed={0x14, 0xfa, 0x0, 0x0, @ipv6=@mcast1}, @generic="1f54ca1a1cc99ba1ef", @typed={0x4, 0x13d}, @typed={0x8, 0x22, 0x0, 0x0, @uid}]}, @nested={0x38, 0x64, 0x0, 0x1, [@typed={0x2f, 0x8e, 0x0, 0x0, @str='/sys/kernel/debug/tracing/available_events\x00'}, @nested={0x4, 0x4a}]}, @nested={0x14b, 0xc2, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @uid=r4}, @generic="757ae6e74a7f43c862fff67cc6fc9543a40cf330fe1d2d34a38aa35714341b7f974d94ebaf79db03c0ffc16ad50c356d43d32e93f848a4683f0864db99b39f2a2c2df235b8d44ca931c077615234aaa007b1b0a5accbc2f213d01267b5874476233713d3782faea448d7ba956e6f13f7e8da78f837274ccdaa93daa6b31e65a2a47c27c13ff3d2dfc8cfd8", @typed={0x8, 0x89, 0x0, 0x0, @fd}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x8000}, @nested={0x4, 0x2c}, @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x400}, @nested={0x4, 0x15}, @generic="e823de00f3f674f2a9cbdce77e060090c3b17307ec1fdcb9197bbdd9a5f92cb2e42da4a4e6167a889ac06b706c44ea6fba05d29781ea75b15cf8e8951298e626ad96592113ae7f598506baa4dd", @generic="4d582adfa0ea33832b03ae90ce0317602f41d18f35cf95c3ce10f9057f774c7a8b7aec4b9aeaeeb598c28fbc09d9aab43bcd9d95effa7264d6c8bea699413d54dc6f191e30df8b"]}, @nested={0xc2, 0xc0, 0x0, 0x1, [@generic="2255194d6a89d4a37d7344b75d3e34603da50feecae5b3ff0412fe6f288c0b0d26a31bae3f87e6dda75b8e43953ca1d39fd33fc3c770b29ee2d59c080ce345efcdc3e948d1986dad511ce7ee5c6f37a590daaa47e81f59b4a62ad208a86c1708aef2ecbc603e2ebb865e3e18e289d5c934fdecc9c4452e58fb2b829bf568d74fe35b024fc2c7b07a68ce8534deec798cdfded35775b6a58053c785538e546e957c53a0ebd87e7f71881b0b8c6fd8529ab05a372ff53a", @typed={0x8, 0x81, 0x0, 0x0, @pid=r3}]}, @typed={0xc9, 0x54, 0x0, 0x0, @binary="0abeb4ae9ae06a7c9557d36016cddab258fbd1387a9ec9790ae33e3ee7d52804564a1cdf30a0f6c82bae07eaa594f168fbc66745d05edf50d5f54379977b0a5c52c0eee91db696b2714faff67c9659acd0d4f083f99e72c2ade892d1779bb956d709328c6df736420fe737aba2e8abd50a226ab2a0beeca2eb298bec4ebf2fec45eec7b62b480be9c41398a5a59f17d6bae39412bdb603126973432b83ac1dbb39c7b065a7d012cd462f12ae46e60b24a4a3b183ac63b14d5728d782357f57be79e1bbd785"}, @nested={0x100, 0x89, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @ipv4=@multicast2}, @generic="1cfe82e3cbfc658d41b535f6cbba8b43e33e60ac97a751b0ac6a41015fa7766d63494c4c66ce801973fac86569183997a23f9e234b3c62642b6a6b473d7a700c7a0e80b7d323d034aec1fb792e23812e35ea0712b4ccf977bb7c0a0105c3333a8afb37da942def", @generic="bbc6120785489d5ad8d8d34f58422d5989a030d2274965c4eaf55d743a815482d30fcb78286ff53a11185f15aedcb6b89d0a129bced510ea64b656e141bb399314c1f23da231fd4c06eb8c86b0f9b2de7e59a5a429d42a0b211dcadca72e18b3ca11615378497d5dec067b70e50d09f68361e4c9e0", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @nested={0x4, 0x56}]}]}]}, @nested={0x1a3, 0xe2, 0x0, 0x1, [@generic="92bbb34b86759efa742abadad26d57a8aa9aa90bcc717385b893a1795ce1cc6ab1aeefb5d0c0746bc8c30270bcaf93eb0d875489c99d1719ba63c7087f96d718dd934f6fa75921dd2b97e376e62bbbd63c4ea0fc86ce11fbdf9554a6e42eaabb3fbf23d0b23a1936fb462958", @typed={0x8, 0x14c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0xaf}, @typed={0x8, 0x13c, 0x0, 0x0, @uid}, @generic="23c72f978c6bfcbed441d9bd39b6bc45da27323f91f06c4df4ad886b964aba5166e68ab98e907c827c6ffcd0e65f560f0b78536b1765e187276829c5b5c058a669808d2a6bc57b9a9b3841e399b29737f129a60d9370bc6169a40133596b2319bb7924b64cb83715499b9742f12b295dfac21812ed89eba0001e3d524fd9d696782ae5a237916e3dc90e6da6962a4acbbf055a3c2fad1aeed69ba0e16af588ccab4bf9fc38b2b0ea25d95562fab676ae2fe707a389df4f98b73c7da056882d0ae67590135bc9d156c23b6cf44fa584c4f14070c883", @generic="c1b7879ca05ff83608ad9db6fcaf9582f9d820068fdd27709b89036f77cab99e15c5a96effbc0099af3c97b54ad98b1e13934c3d205ce35ae8c2", @typed={0x8, 0xf8, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x112}, @nested={0x4, 0x7b}]}, @nested={0x10d3, 0x2, 0x0, 0x1, [@nested={0x4, 0xfe}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x2}, @generic="76a297fcd44fa651e79a8a32b6f87b2d8ef3267860ec1ef7aa642d145940ae0256c5ed44fd5f49e6561bc2ac52fcdb866e90b70ed1b8bdd5a7868a98776c0596a36667c7ad15815d6b819736881f80539b170dd35cc019fcbcd104606edc0dbb0c42343951f6090169116d2a32684a0b6564aa5d9c3b9ed3700ce4212a02507bf12360528dc6dadbdb8e8337df81b5262a5fbb748fb4c4a5b4f276c4967740a401f5a66ccb4d5d68e0aee61444fe54c658b6c6033b02720d0a7c1380fd5305bffa991932e6a106ac65a2615cf2be7bea3cc30199de1878f8c65dc6e5ae0e3d699a24a7963c693e8e14fc6f1be03ae97bd3a30335c44d02acb7ab15b103add98a545aa68db71974c30777909f04564e3b960e435c2b17cc6f865f5ca095cbd9d4913462167efe82082ed866d743d12172cc2b82b554437b19745e2aa5ea25317539080fd0438a7597dc5d633a3780ddd4066126be38b9a41240426aa2fab0040c4600ee8c91cc12c2b769b903a46d13d2e92768beb90df6dd6acea86b59dda2e79e62af2c0d9758d09d1b49e57cdf874268202fd90622fcd207231dd3b4f2934d8d9fddce6fb2ce4376ca6452b56aabc169ec9d9f24c1ed2b1270c00d4c494ee4816de0b1ab073adbafb3ae0bdf66a13130135daef5a8b156cc4472737aa7d3bc25da7e5121948879b846b55c425706fbf5dfecf339afcd33a9724d20603aa3f2bca8974b4da25e3b8662c3b26319445458a650baabf2ab17b87edd2b1414da30cf0c6ff39fc3c082829839f3273916b22463febbd49e81f206516c0881987352a835f22e366b75ce3073622d0a9744ff31f27e0f8f5e6ad6ced717c1f34d5954779e5dfb0ddf0b8badcb74219b76dd93ff6c794e79b0c4bc26e47d124353706998d66c651e03f34df92d7bfb6735641077557181e5cb6dff5727b3c15282762aa9d0e8dcef877f67539e5aa6f235452e649b723a8f89ae8a157a2bd22ec325b7049d26ee952dc2563c809af3759654b4492bcb7dec49daabe893d4d80e2fe292549065eb75cf848ce54f7c51f530cdfe1be14e0d06e5393d6b2e0a4bd383fc08f09b4bb7409718aee29086911eb401fca883acd34dbfb069b799e2c00569d93fee72d9375bb19f11b91adad0e990fe16f4d0a64e0b18bb86e0497de70164a3b0d6ccfa3a24122c96ee756c4d436a1446f5ab6ab77c38182d7a452566dae4219859d78035290321724e5f771b174289f063bafb8912d94e91ea096b0aec744b6fc86282f84dfcb8f2948cbbc1e465c63c941a8cc0a89a1c68ac23d2652099ab9e198725b50b5a624a5dba61ea4130577d8ccf8e2196939ac0aabe415556f7418b2f53280407a14b65f4ce7dd04042960fdf6c5cdffc8c0b2c25e5ebf3d0177df316f858d914441977c6317851b895714ab3836a6b0d72a18caf02233043887d5b9df9afbec0d429af07cf81c0b67f4565f48d3a6f782ec32b1ea39dd3da6d99826a893457db889a5f1c65a5c227a79a09524b20cee00c086b562c8e5477bd4c24f07222c7e2949174cc95a5c03f0860988fc2bf34eaf246d6083c96cc88e65dd1ef8df7b859da739e8f3df888801f387a3faa922b28d41adaf02b8b8b30f17359fcd2ad9b4dd25cd12a24fc9343022670d2c61d5696ceeebe4301953c5a57b76e728649c22c1e684cdc0f50dcfc6498dc909897b41375313121747b55389b84ce1beaca9b01a11e478b1fe0dccb348a41f8a8a2a2b5cb5d714a72e1c123b0ab2fe54bd27ae2efda0459a0e053293528f54888793da48144719f79f3cad42ec01a1b9c6059f38cdaf52a0aa9156589b7e2f710333e476e5f3e2933a2b084dc3649031a7cd09d3a84ffabb89613692f21e2ae360621a0b53383f3f13eb3f1093aee99b736969d6599edbad27d838545bc68053f8029ad1cd1fda2d6e179433b105033da7a00cb02a028678fcdb58189e306549b6144770a442b3872fefef1595f26ec18e1eedcc7e6d4f4cafc741b2f08672aa220b9b308583c1aa70cfef7e7b3fd3ccd014269c365dd34b04ed8a76f9dad19dd3dc5fb444be39201752bc01efdf2b310cdc0b835e87f9098909398c28be8891774dc7450330951f729cc5116a453a37aa1ef9e6dbdf1fe0533c527e9ec404a720c7b15fe5886282c0600ecd4d3427d6e3d859807cba12b016434fa2cab4de9a9bef6ec8d4c84b46c5f000ca715e73520153ae093d4530da703e2f21aeb16b560fa785da867a9e596ac662be72238da060f1b66ba2cfab46b43f7496254ee72042343083ff148f0de03c10b02a15a61b4fe40fed7cbd9cd249798f888a104de6e4af22e8e2dbfcb0462a8221a0c4d9088f23ccd126a6091de3425a58c62b1720de6c2fbe4323c00821f73326853f9d94c6a034d457d25d2c0674c06587f42c0fc01eb34af9a6e19cb7dd6bf05408d3b109597a06fe3db208b8af64bf9983c9c453bf695d20fd8ab1c24c1840b1b87bb36b2c1afd0215d2e4d8a6dcf77867619c1d137be8d2c01f393428e1ddf585fc7933438997d4b34967809036584b063da152351fbc938ed16a7569dcf7ffac737b444bf970bd4d8a394482a3497e80d90d8c2ca053d051fc5ee6827929d4ad16288dbdd6837adc14ac5e9d59c53dd6bc05443b39caa2bcc74a83617260a7d6f8ad25d16d0e2341c5399f3684ac3e5996a95f346af5d15f50c6fd41b742fd1a51f5a3ee72db38ed8776118ccd743fcba8497aa93f201955d52cf92252fdf7bfc68a9a3842794d2ed0e7d05a4b9eed159385a76181f1f421ffcb439aa8716a9b31c3afcccedd5d701fde680fe5fa20b94289c550da2e49a1b4e1e897c4faa2084547e3318bd7ba704a3a79040f08c72452adcef65ca080d3c043b4c82548275c2431a033afb246a61b1416ceafdba8c723c05582f7ce561de360ca4ca2162776374a8d6db86e348c986a63aee605b6883deab91b90fca1525cfcd609940d8ea8b8731c76138c32f0324f9b490117fdd94436e03f0dbc0bed5ed50c6d5a96f955adafedadbba684b57cdd9dc3143d157671849c84aa31d66e888b29900105faa1bb980cfd3d984b0239d1052c6366045870519d39b90945d736f24c843b3fa7bd7c193b2104e1ffb4ac995c7db8883cded008cedacc318dcc2cb113f11a75a48330e379b74efebf80f44934c3233281b8721662d2b5b1b94a206608ea3186cf09b1d1bd9221f0d452bfa82442f08b25c93913b402ffdf0b8a786c31bc3a844864c9295df3daa472ddffd6c8752dad4c435bf450638e99592832c2f172bf03e47c883d19cf99e5fc1816ac002f0c3ba9f13a9b09e6bae96bcf4e5ab68befa7ce324ba916c408a312843735a3b3011c64f044c586986ee65c422976788d16f69dea52778a69d6e27f5544ef6532c5a5ad37070fd4fd5a5f35562fe2476acb13e998e1b5d08605678f60a7dd1ddce97f86c3af37c4ad411dea376120637e4638031a70fe0f63bd33d55a73958f9649790653c2c04474fba7aeb70f200acede506f358c05ea2bd8ef834305bbf7a8ad48df4b3c8017e4ad105e0057f18afc16104ce3ae2604e5bdfeaf30c041e2c66e614267432c7afcb24b46b97fb8ca8730f83afc53c35c068c3cfdec6258b68d4b27a9dbfa708adff5ced67299337170e698387e16fbb12f30ec0968f69ad2d77cefbd37065d8de3fdd397b0fa0f43c529be43ef492ddc85ce7569a609b76eb584b6cc20d00aaf63648976e2c7ec0dc8fb28689931f509364aa58c676630452868cfbdb1baa80a72283cf062b60f2c1758fd1bd471846d9d6b9eebddc083813d70719c2783aac17182b6b9dc6d8de6b1da68284f46bbbdd829740e2c770c69649644115751613d0d2fc921243f8002ea3d42ceb3f3a06e002b806d1b849cf31f0bf3c6d0ca289a945daf5e1bce2f5bf8aea7fa8ad3397d557ce82287d15d1dee621a78cd354b5fcdeef3c5e6330cc61df6062ece808e5d7fdea1fff342cc26730f7dd71b05129e18480a092aad8649d102ffbadabf6427d9dea55fdabbce0694a37840ba9489de76e0fa2639deff85045e3bf97f18c3efbfe4c22647592e4234505f777d030d30cc64da0fd2023b63a939dd2b954a2e0e8a17e75776b990512b76477bc48d825897cf93cdbf3a57b2f42c4d4c45eed47794682445170eb63e3842f2ee567f8b6b2886d75e2a38771f70d53ea3d7c09a7eda24953af1120130e7ce4f686d14dd441cbe75c637a2ff89805b242e63cedbcb13efaf1e7613a4c2c89fda79c5b3d8adb85f50d68cfddc07be32f58cb896aaae9ffbdd1005e8ebfc3578357ba9c297e6ce63671f93b834db64267534f9cb44bf1cf1c45e498bb2a31f870c69e18ed4f359277d68ff135d9af4d37ea36310ff3e6707db5d0ee6953ef729d23ae75ad748c4ea3cb5b7dc36ca1ca4f05bfed0996f8c65802af67bb1b5f375a0a34cab83b0a1fb2b7b95f023a5732c9b4bcb406f03bcf952b6723ac8c8bec0e3b91605d50df448fe59f0ba2b0147c3beb582c04ea19973d90cc45a0d2f2fe3e97442937cb86567ffd54f16428b57e696e227845c0139ade07d57d1972c9437a15f83e2600de353ab7802ed1fda3c1036e8aa622e038ec24aed2c67e827e25018e5e90bc95df340e011c4853fbc1bb5bbbefb5a216609474b3ea7108f09783fcf1d1063681c2156a5b97d83cf9dd6ada074b255707000427183969021a961a837cc865af851eed622f89dc98eacd05255c05d91ecd51ed99498ed9c067ca6e8aa5f6d8bbb839c1665e72b2e329ded9f145d1e20d83cc5bd1cc49704fa152c372dbd914a30575e803b765df341dfbbf9946f23caf9039f43fb2ece6226a6b4e103a650ddde875bb6f28d53f884a9cbbe7bbe787a3daeeca9a8c905ceb0bfa4b004695a1c9ec59283aa12dbc3ef118d6bdd588d16733cad379e473e6d5886dba75e13f524b5187603adc28f93453066715336a9b1e0ea25cabb1231934e4b50738c0b762cbab5d3228ffa27842adc443f9c5ed4bd836dc62795f7108ab3680f1e94122e76c549fce0a565671e2fffdea6e3a6ddbad23230c68196db7ec4b76c26061d999fa99d2e8608a9269629a1f495d6ab8b62260c419df4990c329c573cbacc2b74363fa5347fb01186c993c4af9c7552e6082a4b7f79267bd0072a6816130abe1fb617a6902cdca07cdbe05e3b916c1778d5f95d5912ee750210965166b85385fdf8ce523b1cbcfa322c0d1b7a239466c7401c458f2703f163f9377bc39df963194fc2f299195f50954c88dd64a51c0349e37c2b3b12be909e9d89d2873e0f19f410c72527d8b334475212dbb366f3195454287211d8ca1ffd585c04014a2a694c7ecfd5331424bbdc5c94860f0f391ecbc4de5439ac3f545424b35ac02da3eee24175e8c5c5fce50d63061b4e95f0cb968a87fee7dd5e0d470e4ac4277ff667894db8b595dc4e8483eb58f0c7a30ea07fb7a3385f797335110ebe1c020d8bcfb754b0195d21afb91e4bfeb80cf869c775a5ac48fc7fbe573205c30bf47ea995b65e245b92252293ffaf94f115b697cd13902617e911b063309e755206735df2727137e8337c1b7c4e80cd76b3cc78b117eadded2bcfa59a864898a4041472f1e272d3a86bf50e3f2f9687150ae7fb0793f17c88bfa5ede6658f61b5049262bd4d8a4adaab66991c83d07d35dc1bad32e4fd24667922f781a66df8c7ccb71d53e732db843914562e18720227b27d08a2e37a2dac8eebdd3a7a8d1c49460378832b5a8a60d7d3cf0b18334630b69d8630f56", @generic="0640d3b4265f9e1c2acb9e5e05ba2fe02859fed908c4eb1458ab690296a37ee8050fe7017c226a96443ae84dd2a7d7", @generic="beaf24b9e6c507d3ab27630e318b043d1a3fdc6a10a983e4aef992991e525756205a1b2d81587409890552223cbfe12b456f1272bc4215ccd2d54ade1cad6f96a4069e7ed2ee954987d7976281517bedad7fa218ff7fcf75780026cdbe13c642a1d48407977690a1cce53119260ee365a0e9d2815a61abdab981cb58c465ab245edad5670a9eb8346d793fd89eb9b3d2a31d3fe3"]}]}, @NL80211_ATTR_PMK={0x36, 0xfe, "9ada38972fb511dd4a3f3786aab4d15ba274fedc5b5abd011f2b67cc6c5de4c7277036a80fe6216b266a775b58386645da89"}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x2e54}, 0x1, 0x0, 0x0, 0xc001}, 0x24000020) socketpair$auto(0xff000001, 0x9, 0xa, 0x0) clone$auto(0x21, 0x1000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r6 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r6, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) mmap$auto(0x4, 0x2020009, 0x3, 0x7f, 0xffffffffffffffff, 0x1ffffffffffffe) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 27m15.27367086s ago: executing program 1 (id=736): socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000002c0)="7d4d6bac0100120f61d46fa8bde75da51a623287db278095f41e2b4d632ace21614c750afbd0191b8c164503877b7cd66c378cf6425762ea79b301a6db57cb5ef3a0392c34dd645277ef7199cdac255e8daf7be8a03eca2e82abad870123f1187331598ca1cd9d375d24dfcac162dc073ba50c4e37c90144536919e57f0010f3c308ddc398c6acbf510e69d2bb0f40f36093da09288350830000274aadaa47cf39641f3242a828d217cd3166f273aebc3d42c6dca5a87eb66a1c8e5947daf4d841fd") statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000900)=""/4096, 0x1000) r3 = socket(0xa, 0x3, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x410140, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/auxv\x00', 0x22a82, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r4, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) listen$auto(r3, 0x0) getsockopt$auto(r3, 0x84, 0x1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20500, 0x0) io_uring_setup$auto(0x6, 0x0) 27m9.22010865s ago: executing program 1 (id=750): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = socket(0x2, 0x3, 0xc) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={"39b419c278f554fbee9652168cccfbcb7b8656e0199229f7c50ab02510d73b04", 0x1, 0xfff, 0x9ea3eb2e, 0x6, 0x2}) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) io_uring_setup$auto(0x40, &(0x7f0000000180)={0x4, 0x5, 0x1, 0x1, 0x7, 0x8, r0, [0x4, 0x19, 0xffffffff], {0x0, 0x4, 0x101, 0x9, 0x7f, 0x1, 0x625, 0x101, 0x1}, {0xf3, 0x8, 0xa, 0xe, 0x4, 0x8, 0x80, 0x1, 0x7}}) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r5, 0x4c82, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 27m4.446932295s ago: executing program 1 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0xc0046209, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r1, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) open(0x0, 0x60840, 0x2) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0xffffffff800454dd, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0xbf1, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 26m49.306337626s ago: executing program 32 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0xc0046209, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r1, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) open(0x0, 0x60840, 0x2) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0xffffffff800454dd, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0xbf1, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19m1.927252093s ago: executing program 4 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001b80)={0x14, r2, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x81) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) read$auto(0x4, 0x0, 0xfdef) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = gettid() r5 = epoll_create$auto(0x2) epoll_pwait2$auto(r5, 0x0, 0x8, 0x0, 0x0, 0x8) kill$auto(r4, 0x11) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00010000000000000000000800040010000000"], 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) close_range$auto(r1, r6, 0xe) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r7, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19m1.735450667s ago: executing program 4 (id=2599): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x48001, 0x0) unshare$auto(0x40000080) 19m1.260027201s ago: executing program 4 (id=2602): socket(0x25, 0x5, 0x0) read$auto(0x3, 0x0, 0xf34) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x7b4c86d31e56d295, 0x2, 0x56) pipe2$auto(0x0, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x1000000000007fff, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0, 0xc6}, 0x0, 0x0, 0x0, 0xb}, 0x6}, 0x3, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) read$auto(0xffffffffffffffff, &(0x7f00000001c0)='\x80\b\xea\x01\xdeAk*\t\xb8\x01\x00', 0x461e) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xfffffffeffffffff) 18m58.682934652s ago: executing program 4 (id=2610): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x80, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x88002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2) setresgid$auto(0x81, 0x800000a0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x5920, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x18, 0x80003, 0x1) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x301, 0x4070bd25, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xa4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000081}, 0xc044804) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0xa, 0x2, 0x0) capset$auto(0x0, &(0x7f00000000c0)={0x4, 0x80000001}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x800, 0xc) 18m55.008830746s ago: executing program 4 (id=2618): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) r2 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0x4fec) renameat$auto(0x6, 0x0, 0x5, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x7, 0x0, 0x3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r2, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 18m53.567676179s ago: executing program 4 (id=2624): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 18m53.039678178s ago: executing program 33 (id=2624): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 16m9.675599827s ago: executing program 0 (id=3377): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) (async, rerun: 32) r1 = setfsuid$auto(0xee01) (async, rerun: 32) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) (async, rerun: 32) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r5 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) (async) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) sendmsg$auto_NL80211_CMD_SET_CQM(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x180, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SAE_PASSWORD={0x63, 0x115, "5e5ee824cb773f40477f976646f7267fa73f1abf2d6f7a1d54749ce74560c4fdd8b05d1f77feaa272ed45d4d2b7c360414b14b3fb33fbf1eedcf83fe4cf9f1b916eca77b239cc6d035c8f6f64e69acf38ae19adc6272b200c22c1fbb67e969"}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x99, 0x3, "22dae8497e7d9e676b4067926fa1d0e1a7fca61228487a62821b7417e5c85b65979637208a1f378dbbd45091d1d4bae1a7f42fbf9e93f9efbe49174837bfeab72fafe95405136445ac2ada8a8631ed895ecf929cd66240bf21d06915ffc2cc13ded9c96bd9a6279df210e54afc9f9af776b6d6b5c78f66355277afee1dfeb7a3d054f31f9197c7ae281973bc38491fe005451357f2"}, @NL80211_FTM_RESP_ATTR_LCI={0x68, 0x2, "887b68f807d6cb577c60c7b0758223bdd3b7c46e419c663d3a28fa77f8ee131ac139255af962ea02b32fe1dfdef12bdb39343f480043a69819044baaec88970cb92ae7d1f0c50009e551981ef139e4ca0cb9e0cd6d40cee8293ff0d2757954b73cf2fcad"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 16m9.370945051s ago: executing program 0 (id=3378): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x104000000000010e, 0xb, 0x0, 0x400) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) (async) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendto$auto(r0, 0x0, 0x2000f, 0x20009, &(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1c) 16m9.119506118s ago: executing program 0 (id=3380): unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/dev\x9b/awdio1@\x9f\'\x96\xfc\a\xd7\x8e\xab\x81*\xaf\xda%t\t\xf9\xf5{F\xf9\xc4?\x89\x896\x9e\xe4\xb5\x87`\x9d\xcfR\xf9f?\x81G_?\xb5\xee\x10\xadlQY\xaf\x9f\xb1\x85{+<\x061\xcb\xd7\x7f\xc2\xee\xe9\x8d*\xb7D\xb9e', 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x2, 0x73) getsockname$auto(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/nr5/statistics/rx_length_errors\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r2, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r3, r3, 0x0, 0x4000000a1f) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000380)="fda91cf4d48dc35d4515655b25a0319f26b9f85e20004ade8bc9a7d6f7b95571e9601edc6a8a97a4860dd3e2d2f016e06738628a83f49634dcb4e88d354ad7525b298e6a52d282c14c96c86b2f9cf03ae3c3ed0997c91ce5041124f42ef1a74bf7a0be01339d5a3837d0c149b9648b49ced8f8fa2b7a4ecd1f0145fd5cfb1d8ad3e7d38468ad7aa28f3b3129db73010ff61f88d45823996bcc4aeb4512da4cb9867e1623e25375fa825f1921f22bee7966c22f8871c0a46b70dda67b7206881f8def43feebad7e43fca47294a5b7b00016dbabcb697cdf00f302f1258efd38163ec3d150ed54dfc0305717", 0x1) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16m7.929180091s ago: executing program 0 (id=3384): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) (async) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x40) (async) r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(r1, 0x0, 0x1000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtd0\x00', 0x400000, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r6, 0x9210642d, 0xc5) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9540}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="aad28067", @ANYRES16=r4, @ANYBLOB="00022bbd7000ffdbdf25940000000800090002000000060065000080000032000201c4758c1f9bbeefb192e8a56e3a2ed72d2b573f4815840b687a0d17071662e1f950d79771c94f79881455c560edaf00000500d600230000001b00ac00c28bee2498a8ab54380ac751bfb5ca00d5fc5ef7d48ba30005008a000b00000006001201ff0700000500d300e30000000800260000020000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x24000004) read$auto(r3, 0x0, 0x20) (async) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x45}, 0x1) (async) getsockopt$auto_SO_REUSEADDR(r2, 0x2, 0x2, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)=0x4) (async) r7 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) write$auto_qrtr_tun_ops_tun(r7, &(0x7f0000000200)="5c6a03a81d849d59e10e8e63c166b27e53c18c09ee04931a02931e0cc37b1583d969e163a960e393f79be00ed26b89561483f66df149d560bb232672e4319777397ea94fb3105b104ef6b92070bc72b548043b0f3280cf5b814b2b3b171a6bdeb163f130895a3d89fac0a1338020c687ab521304", 0x74) mkdir$auto(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x2) 16m7.69166028s ago: executing program 0 (id=3386): close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) (async, rerun: 64) fchdir$auto(0xffffffffffffffff) (async, rerun: 64) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") (async) mkdir$auto(0x0, 0x6) (async) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) (async, rerun: 32) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) tkill$auto(0x1, 0x7) (rerun: 64) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) (async) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) (async, rerun: 64) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) (rerun: 64) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/9, 0x9) (async) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) (async, rerun: 64) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r2, 0x8003) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) r4 = socket(0xa, 0x1, 0x84) (rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb4, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) 16m6.539583386s ago: executing program 0 (id=3390): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, 0x0, 0x1cb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x9, 0x400007, 0xdf, 0x40012, 0xffffffffffffffff, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r2, r3, 0x0, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffff000) kexec_load$auto(0x2000000000000009, 0x7, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0xfffffffd) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) modify_ldt$auto(0xf, &(0x7f0000000040)="30d5f2e400b6ff4ae6e3a46b4710f7e47d7d332ae0d02eba2e8f0128bbe22386", 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000004c0)="c9432739b5580773", 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') madvise$auto(0x5, 0xffffffffffff0005, 0x9) 16m5.75156325s ago: executing program 34 (id=3390): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, 0x0, 0x1cb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x9, 0x400007, 0xdf, 0x40012, 0xffffffffffffffff, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r2, r3, 0x0, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffff000) kexec_load$auto(0x2000000000000009, 0x7, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0xfffffffd) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) modify_ldt$auto(0xf, &(0x7f0000000040)="30d5f2e400b6ff4ae6e3a46b4710f7e47d7d332ae0d02eba2e8f0128bbe22386", 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000004c0)="c9432739b5580773", 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') madvise$auto(0x5, 0xffffffffffff0005, 0x9) 7m18.113547201s ago: executing program 6 (id=5195): r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r0, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) get_mempolicy$auto(&(0x7f0000000000)=0x872, &(0x7f0000000180)=0xff, 0x8, 0x26, 0x81) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7m17.829923137s ago: executing program 6 (id=5197): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x57) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x700, 0x0) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r1, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="320ab2d8", @ANYRES16=r0, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x20}}, 0x0) mmap$auto(0x0, 0xe983, 0x8, 0xeb0, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x6, 0xfffffffc) mmap$auto(0x1c, 0x20009, 0x8, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) r4 = io_uring_setup$auto(0x2000409, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0x13, r4, 0x8000) 7m17.173764399s ago: executing program 6 (id=5200): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_SELECT_ERR_QUEUE(r0, 0x6, 0x2d, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/034/001\x00', 0x80142, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r2, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000140)=0x81) socket(0x2, 0xa, 0x1) 7m16.839905836s ago: executing program 6 (id=5201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d800000005025bf0122cb3301189359247e05c45cfcb12cd3062c87a282512272f17d395f8d95c9fe4251c403b0a3e55e97b3df9041e3525ca55f3b325b3445a971e39a18fe465f9b105a8b48abb2f82b9dff355f213559889c0ce8afad154e23f2615674935177be625240aa0c9", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf2508000000c63d9865e4ee33c582314f86116d291a288cc43d9b762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b9fc2b35ea765dc16a7fb150d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696188b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef9697a4eacf5cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5ddffdf3e43deae0000"], 0xd8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r3 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(0xffffffffffffffff, &(0x7f0000000340)='1\x00fa\xd0\r\x00\x00\x00\x00\x00\x00\xc7k\x9b\x87\x8d3:\x99q\xf9\xb1j\xb45\x18\x05\x86\xe5\xfb.\x8e\x8bd\xcdu\x98H\xe1\xb9\x01g4HjH\x93\x8f\a\xc8*\x04A\xe8\x82\xb2\x7f\xaaOg:X\xdd-\xc3\x98\x86\b!s\'\xc8\xb5&\xe1\x1c?\x8b\x81\\\xc0Df\xb2\xf5C2\xb2m\x13()\x85%\x99\x9a\xf8\x1bh~\xb9#f\x02\xca\x04a\x01\xb7x\xec\xe8\x06\n\xc2\x00~^\xa4.\xddx\x1b+\xf4;C\\\xc0\v*\xb5\x8e\x13\x1e\xf9\xf4\x15O\x95g\xf8A\xfb\x9b\xd4\xad\xfan\x11I\xf8\x9c\x1f\x0f\xf4\x0e\xd8\xd3R\x8d\x15\xd6\xcd@\xa4^\xcb\x83\xc7\x16\xc0\xcb \xcasl\xe0\x99\x1d?g\x97\x13Ho*\xb9\xf5\xb4g\xf7\\O[\xd4[\xf6\xab\xc1\x82\xe7\xee*+\xbe{\xa3J\xaa\x8e\x0f\xeb\xec\x93\x92\xadP\x02\xff\x19\xd9\x95c\x99uB\x04\x8e\xc0o\x9a\xc8#!\xf6j\xc5n\x89\x14\x0e\xdb\x1f\x00\x00\x00\x00\x00\x00\x00', 0x83) write$auto(r2, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xcf\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db\x00'/388, 0x51) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000005, 0x15) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r4) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) shmctl$auto(0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) r5 = socket(0x2c0026e6d0947c90, 0x800, 0x8) connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r6 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r6, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 7m15.755946721s ago: executing program 6 (id=5205): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/stat\x00', 0x412801, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000040)=""/137, 0x89) 7m15.503208801s ago: executing program 6 (id=5208): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x10b241, 0x155) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/setgroups\x00', 0x28001, 0x0) mmap$auto(0x0, 0x40009, 0x20000000df, 0x9b72, 0x7, 0x28000) socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x1000, 0x4, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x42001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x1e, &(0x7f0000000200), 0x9) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) mmap$auto(0x4000000000000006, 0x4800000200004, 0x80000000005, 0x40eb1, r0, 0x100000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x22, 0x4, 0xb0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msgsnd$auto(0x101, 0xffffffffffffffff, 0x35d59627, 0x1) socket(0x1e, 0x1, 0x0) mmap$auto(0x8, 0x6, 0xdd, 0x14, r1, 0x10000) socket(0x2, 0x1, 0x106) 7m0.32325624s ago: executing program 35 (id=5208): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x10b241, 0x155) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/setgroups\x00', 0x28001, 0x0) mmap$auto(0x0, 0x40009, 0x20000000df, 0x9b72, 0x7, 0x28000) socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x1000, 0x4, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x42001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x1e, &(0x7f0000000200), 0x9) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) mmap$auto(0x4000000000000006, 0x4800000200004, 0x80000000005, 0x40eb1, r0, 0x100000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x22, 0x4, 0xb0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msgsnd$auto(0x101, 0xffffffffffffffff, 0x35d59627, 0x1) socket(0x1e, 0x1, 0x0) mmap$auto(0x8, 0x6, 0xdd, 0x14, r1, 0x10000) socket(0x2, 0x1, 0x106) 8.156232042s ago: executing program 2 (id=6449): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1000000000d, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) (async) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) (async) madvise$auto(0x0, 0x200007, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 7.019411775s ago: executing program 5 (id=6452): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x2a6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x3a, 0x400, 0x9}]}) epoll_create$auto(0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r2, 0x0) 6.447467074s ago: executing program 2 (id=6456): openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0x1a, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) r1 = socket(0x1d, 0x3, 0x1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) write$auto(r2, 0x0, 0x0) r3 = prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) setsockopt$auto(r1, 0x65, 0x5, 0x0, 0x800) r4 = socket(0xa, 0x2, 0x3a) sendmsg$auto_NL80211_CMD_GET_KEY(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}}, 0x20000010) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01012bbd70040300"/18, @ANYRES32=0x0, @ANYBLOB="0c0006000400000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x4000804) mmap$auto(0x0, 0x9, 0xfffffffffffffff9, 0x19, 0x408, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x7, 0x3, 0x0, 0x9) 6.358307276s ago: executing program 5 (id=6457): setsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x4000000, 0x7, &(0x7f00000000c0)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="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", @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4c806}, 0x4844) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x280883, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) pipe$auto(0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r1, 0x0, 0xe) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0xfffffffffffffff9, 0x7, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffff8) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(r1, 0x0, 0x1, 0x3fffffffffe) r2 = socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) unshare$auto(0x40000080) sendmmsg$auto(r2, 0x0, 0x200004, 0x5) mmap$auto(0x3ae, 0x7fffffff, 0xe4, 0x9b72, 0x2, 0x43) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000380), 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 5.488820402s ago: executing program 7 (id=6458): madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//SI', 0x3) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x4108000a3d9) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x400c810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend$auto(r1, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0xb, 0x1, &(0x7f00000000c0)={0x9, 0x43}) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) rseq$auto(&(0x7f0000000300)={0xc, 0x401, 0x4, 0x6, 0xfffdffff, 0x2}, 0xfffff801, 0x0, 0x6) mmap$auto(0x0, 0x20006, 0xffff, 0xeb1, 0xffffffffffffffff, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) 5.147049619s ago: executing program 2 (id=6459): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) r1 = open_by_handle_at$auto(r0, &(0x7f0000000080)={0x8, 0x100fe, "9700000000000000"}, 0x2) socket(0x11, 0x3, 0x2) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) write$auto(r1, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="2400ff07", @ANYRES16=r3, @ANYBLOB="151f2cbd7000fbdbdf2516000000100001800c00018008002500", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) setfsgid$auto(0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1d4a99140005c1a95f7b14bb6f8a00050000000000007a47307e36fbf8f596834fb200a6c29400000000000000000000800000", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000802) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3c) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) symlink$auto(0x0, 0x0) mmap$auto(0xffffffffffffff95, 0x36f, 0x400000000dc, 0x23b, 0x2, 0x8000) close_range$auto(r5, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) 4.746484073s ago: executing program 3 (id=6460): unshare$auto(0x40000080) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/filesystems\x00', 0x1a1442, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) unshare$auto(0xe) r1 = io_uring_setup$auto(0x1, 0x0) lseek$auto(r1, 0x4, 0x1000003) read$auto_regulator_summary_fops_(r1, &(0x7f0000000000)=""/23, 0x17) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x41555856, 0x6, 0x2008, 0x0, 0x0) ioctl$auto(0x3, 0x890c, 0x38) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) flistxattr$auto(r3, &(0x7f0000000040)='/proc/Nes\x00', 0x3) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="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", 0xd1a) 4.406020309s ago: executing program 7 (id=6461): writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x2, 0x800, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x100, 0x0) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x0, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x40200, 0x0) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r1, 0x80) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r1, 0x4, 0x4, 0x880a, 0x8, 0xd, 0x66b, 0x4, 0x2}, 0x6f4) 4.229236126s ago: executing program 5 (id=6462): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) mmap$auto(0x0, 0x20009, 0x80000e3, 0x4000000100000eb1, 0x40000000000a1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = open(0x0, 0x22240, 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x55) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xbff) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004805) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x5, r2}) write$auto(0x3, 0x0, 0x800) 4.088572136s ago: executing program 3 (id=6463): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0x31d6, &(0x7f00000002c0)={{0x6, 0xf}, {0x7, 0x9}, 0x7f, 0xc, 0x3, 0x0, 0x2, 0x10000, 0xe40, 0x0, 0x1, 0xfffffffffffffffa, 0x40, 0x6713, 0x0, 0x8}) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)=@bpf_attr_7={@start_id=0x1, 0x7, 0x7, r1}, 0x7) sched_setattr$auto(r3, &(0x7f0000000180)={0x8, 0x12a93404, 0x3, 0xfffffffa, 0x5, 0x8000, 0xfffffffffffffffb, 0xaad, 0x63f6, 0x1}, 0x4800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, r4, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xf8, 0xfffffffffffffffa, 0x9) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r5 = socket(0x1f, 0x2, 0x1) getsockopt$auto(r5, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x37}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r2}}, 0x58) msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0xee, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x6, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52}) 3.738713569s ago: executing program 7 (id=6464): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) (async) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4040aea0, &(0x7f0000000080)={0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r2) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6) migrate_pages$auto(r3, 0x4, 0x0, &(0x7f0000000180)=0x2) (async) migrate_pages$auto(r3, 0x4, 0x0, &(0x7f0000000180)=0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa73, 0xd, 0x801, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sysfs$auto(0x2, 0x23, 0x0) 3.678521074s ago: executing program 5 (id=6465): mmap$auto(0x9, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xff, 0xdf, 0x9b71, 0x2, 0x807ffd) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, r0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000) socket(0x80000000000000a, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x8) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') open_tree$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101) 3.673766932s ago: executing program 2 (id=6466): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x2183, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vbi22\x00', 0x35b300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0xc0205649, 0x38) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x0, 0x8000}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/veth0_macvtap/mcast_solicit\x00', 0x5014c0, 0x0) mmap$auto(0x0, 0x7ff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x5, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8400) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/i8042/serio1/power/wakeup_abort_count\x00', 0x60204, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x163340, 0x72) write$auto_ucma_fops_ucma(r3, &(0x7f0000000240), 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r5, r5, 0x0, 0x3fffff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r1, 0x7, &(0x7f0000000180)='\x00\b\x00', &(0x7f0000001240), 0xfffffff1) madvise$auto(0x0, 0x7ffffffffffffffd, 0xa) syz_clone3(&(0x7f00000006c0)={0x208209700, 0x0, 0x0, 0x0, {0x100002c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) 2.891904271s ago: executing program 2 (id=6467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x14, r1, 0x492a92567041df2f, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x4000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r3, 0x80044100, &(0x7f0000000040)=0x36c) write$auto(r2, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) sendfile$auto(r2, r2, &(0x7f0000000080)=0x7070, 0x0) 2.871468315s ago: executing program 5 (id=6468): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x27fbd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(0xffffffffffffffff, 0x0, &(0x7f0000000840)=':\'\\\x80\x97~x\x7f\f\x05s\x1b\x00\xcdex\xb7\xd7\xb8~O\xd8<+\"\xdd\x9bCH\x9btl\nn\xb2;\x86\xdc\xea\xbf:\x9e\x7fy#\xb3p\xdf~$W\xad\xc8\x96\x80g\xef\x0fc\xd1\x81\x05\xbf\x00\xaa\x89\xf5\xcd[XDh\xabbTQB.\xdc\x84\xca\xc0&[U\xbcY^+\x10mpz\xc1M\xd1h\xa6u-\x04\xd2\x8aDI\x82t\x8d:|9\x84\x18x\x8e\xd4;\xc7\xf3\x1dn\xa1\xa8\x8f\xec\xefK\xd6\xce\xdb-\x9c\xf5{f^4\x04G\xcb\x7fK\xe7\r\x81{\xe0\x86\x02\xeeg\\fu>\x96/\x87\xc3\xec\x9bp\xc7\x8fw\xd7\xf9\x91\x85w\x90T\xc5\x99?\x03\xba(\x92vt~\x12\xdffB\x06\xd1\xadV\xd1+a\xff\x12\xd5\x8c\xa2X\xedJi\xa8Z\xc0\xdf\x11!&\\\x96\x96\xe5\x14k\x93\xa8\xab\xdb\x89\xe0\x97\xba\xdff\xb7at\x82\xbeO\xf7Hz\xacol\xbd\xbe\xbf\xd0\xff\xbc\x02TNc\xc0QD\xff\t\x8d\xa8\x93?1\xbc\x1a\xfa\"\xa7\xcb\x05\xe02<\x8d0\f}\xe2\xf2\xf2c\xd3x\xb5\xe4\xea\xd68\xec\xf6)\x1bLe\xe2\x8d{\xae\xa05O\xa4H\x1a\xe4\x15\x16h\xedd\xe6\x98\x81h\xbb\xb4X\f\xa1\x9aV\xfeL\xe2\x1e\xde^\x13\x18\xdf\xf9l\x19\x9b<\xa0\xfa\xbe', &(0x7f00000001c0)="5f2d98d9b0ba04a4454a0c9f0d380ac326d619d6a029d6000bb729db9cf4cb642927f2c32e3f349c1fbf5edef18513dc13b9", 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0xffffffffffffffff, 0x6, 0x800000e) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xe, 0x804, &(0x7f0000000040)='/`ev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x482080, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xf) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0x0, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000280)={0xa0108300, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=""/248, &(0x7f0000000200)=[r4, r4, r4, r4, r4, r4, r4, r4], 0x8, {r2}}, 0x58) msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0xee, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x6, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52}) 2.379669561s ago: executing program 7 (id=6469): mmap$auto(0x0, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x48003) mmap$auto(0x6, 0x8, 0x2, 0xacdb, 0x5, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') timerfd_create$auto(0x7, 0x0) timerfd_gettime$auto(0x4, 0x0) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9) read$auto_check_wx_fops_(r0, &(0x7f0000000080)=""/212, 0xd4) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_TUNGETFEATURES(r1, 0x800454cf, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fff) 2.278039239s ago: executing program 3 (id=6470): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) sendfile$auto(r1, r1, 0x0, 0xc01) ioctl$auto_BLKDISCARDZEROES(r0, 0x127c, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) (async) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) (async) sendfile$auto(r1, r1, 0x0, 0xc01) (async) ioctl$auto_BLKDISCARDZEROES(r0, 0x127c, 0x0) (async) 2.214234402s ago: executing program 2 (id=6471): unshare$auto(0x40000080) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/filesystems\x00', 0x1a1442, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) unshare$auto(0xe) r1 = io_uring_setup$auto(0x1, 0x0) lseek$auto(r1, 0x4, 0x1000003) read$auto_regulator_summary_fops_(r1, &(0x7f0000000000)=""/23, 0x17) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x41555856, 0x6, 0x2008, 0x0, 0x0) ioctl$auto(0x3, 0x890c, 0x38) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) flistxattr$auto(r3, &(0x7f0000000040)='/proc/Nes\x00', 0x3) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="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", 0xd1a) 2.011558423s ago: executing program 3 (id=6472): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x8) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) open(0x0, 0x149443, 0x41) (async) mmap$auto(0x2008, 0x7, 0xffffffffffffffff, 0x10, 0xfffffffffffffffa, 0x8001) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) write$auto(0xffffffffffffffff, 0x0, 0x45c) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0xa02, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r2) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sda1\x00', 0x482000, 0x0) (async) r4 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) read$auto_page_owner_stack_operations_page_owner(r4, &(0x7f00000002c0)=""/133, 0x85) fadvise64$auto(r3, 0x7fffffffffffffff, 0x400000040000005, 0x7af) syslog$auto(0x0, &(0x7f0000000280)='/dev/tty12\x00', 0x4a5) (async) bpf$auto(0x0, &(0x7f0000000100)=@token_create={0x1410, r0}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x4000000000dd, 0x19, 0x401, 0x8000) pwrite64$auto(0x2, 0x0, 0x0, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0x140b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20010001d8) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r6, 0x0, 0x4) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) 1.364677528s ago: executing program 3 (id=6473): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) ioctl$auto(0x3, 0x80000541b, 0x38) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d01, 0x400, 0x8000}]}) r2 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x801, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) setsockopt$auto(r2, 0x29, 0x5, 0x0, 0x56b) mmap$auto(0x0, 0xe983, 0x3, 0xfffffffffffffff7, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 631.906794ms ago: executing program 7 (id=6474): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) getdents$auto(r0, 0x0, 0xde) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0xa, 0x84) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x0, 0x0, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) 300.484701ms ago: executing program 3 (id=6475): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/filesystems\x00', 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000280)=""/144, 0x90) sendfile$auto(r0, r1, 0x0, 0x2ee) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1002, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) madvise$auto(0x0, 0x2003f0, 0x15) fanotify_mark$auto(0x400000000000, 0x305, 0xf2b, 0xffffffffffffffff, 0x0) r5 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) poll$auto(&(0x7f0000000400)={r5, 0x4, 0x7}, 0x6, 0x7) mq_open$auto(0x0, 0x62, 0xfffc, 0x0) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4dcd, 0x0, 0x0) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r6, &(0x7f0000000200)="a597d9ce6359203d", 0x8) shmget$auto(0x8000, 0x100000000, 0x568c12f2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = set_tid_address$auto(0x0) capset$auto(&(0x7f0000000040)={0x19980330, r7}, 0x0) mlockall$auto(0x3) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) mmap$auto(0x6, 0x4, 0x9, 0x10, r4, 0x7ff) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 232.462409ms ago: executing program 5 (id=6476): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) (async) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0p/sub2/xrun_injection\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x82d) write$auto(r3, 0x0, 0xc) (async) close_range$auto(0x2, 0x8, 0x0) (async) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x1, 0x2a, 0x7fffeffffffff780, 0x80020009b73, r3, 0x8) madvise$auto(0x2, 0x5c61fa2c, 0xf) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r1) (async) close_range$auto(r2, r0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x800) (async) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x859, &(0x7f00000002c0)={0x5a, 0x1, 0x4, @raw=0xedbd}}) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) (async) write$auto(0x3, 0x0, 0xffd8) 0s ago: executing program 7 (id=6477): ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000240)={@inferred, "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"}) ioctl$auto_SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) mmap$auto(0x0, 0x2, 0x20000000001, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000040000df, 0xeb1, 0xffffffffffffffff, 0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/midi2\x00', 0x10b001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/ecryptfs/version\x00', 0x220800, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x287) mlockall$auto(0x7) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), 0xffffffffffffffff) open(&(0x7f0000000140)='./file0\x00', 0x4200, 0x4) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x5b) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setfsuid$auto(0xee00) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyr2\x00', 0x2000, 0x0) getrusage$auto(0x0, 0x0) prctl$auto(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0x81, 0x0, 0x0, &(0x7f0000000300)={[0x1ff, 0x5, 0xd, 0xfffffffffffff4d6, 0x948b, 0x3, 0x15f4da0e, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0x1]}, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) msync$auto(0x24f, 0x1800000000000fe, 0x6) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             syzkaller syzkaller login: [ 650.611732][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 650.695904][T14912] vivid-007: ================= START STATUS ================= [ 650.740478][T14912] vivid-007: Generate PTS: true [ 650.758964][T14912] vivid-007: Generate SCR: true [ 650.800215][T14912] tpg source WxH: 320x240 (Y'CbCr) [ 650.812158][T14912] tpg field: 1 [ 650.830231][T14912] tpg crop: (0,0)/320x240 [ 650.853086][T14912] tpg compose: (0,0)/320x240 [ 650.881225][T14912] tpg colorspace: 8 [ 650.895275][T14912] tpg transfer function: 0/0 [ 650.915427][T14912] tpg Y'CbCr encoding: 0/0 [ 650.937636][T14912] tpg quantization: 0/0 [ 650.961279][T14912] tpg RGB range: 0/2 [ 650.981154][T14912] vivid-007: ================== END STATUS ================== [ 651.178213][T14920] erspan0: entered allmulticast mode [ 651.212807][T14920] usbip-vudc usbip-vudc.0: gadget not bound [ 651.891155][T14936] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.1810: bg 1: bad block bitmap checksum [ 651.986883][T14944] random: crng reseeded on system resumption [ 652.068463][T14936] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 6 with max blocks 1 with error 74 [ 652.198422][T14936] EXT4-fs (sda1): This should not happen!! Data will be lost [ 652.198422][T14936] [ 652.735000][T14949] vivid-007: ================= START STATUS ================= [ 652.783782][T14949] vivid-007: Generate PTS: true [ 652.805922][T14949] vivid-007: Generate SCR: true [ 652.810808][T14949] tpg source WxH: 320x240 (Y'CbCr) [ 652.851715][T14949] tpg field: 1 [ 652.855145][T14949] tpg crop: (0,0)/320x240 [ 652.879928][T14949] tpg compose: (0,0)/320x240 [ 652.899159][T14949] tpg colorspace: 8 [ 652.921236][T14949] tpg transfer function: 0/0 [ 652.944822][T14949] tpg Y'CbCr encoding: 0/0 [ 653.015033][T14949] tpg quantization: 0/0 [ 653.019238][T14949] tpg RGB range: 0/2 [ 653.061325][T14949] vivid-007: ================== END STATUS ================== [ 653.290780][T14949] can: request_module (can-proto-3) failed. [ 653.497602][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 653.660468][T14968] vivid-007: ================= START STATUS ================= [ 653.681172][T14968] vivid-007: Generate PTS: true [ 653.699142][T14968] vivid-007: Generate SCR: true [ 653.724583][T14968] tpg source WxH: 320x240 (Y'CbCr) [ 653.744954][T14968] tpg field: 1 [ 653.748353][T14968] tpg crop: (0,0)/320x240 [ 653.770319][T14968] tpg compose: (0,0)/320x240 [ 653.814828][T14968] tpg colorspace: 8 [ 653.823661][T14968] tpg transfer function: 0/0 [ 653.836190][T14968] tpg Y'CbCr encoding: 0/0 [ 653.852074][T14968] tpg quantization: 0/0 [ 653.865142][T14968] tpg RGB range: 0/2 [ 653.881472][T14968] vivid-007: ================== END STATUS ================== [ 654.371237][T14978] zswap: compressor not available [ 655.124901][T14991] sp0: Synchronizing with TNC [ 656.308008][T15005] random: crng reseeded on system resumption [ 656.424929][T14999] blktrace: Concurrent blktraces are not allowed on loop12 [ 657.085104][T15030] random: crng reseeded on system resumption [ 657.244047][T15028] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 6 with max blocks 1 with error 117 [ 657.452265][T15028] EXT4-fs (sda1): This should not happen!! Data will be lost [ 657.452265][T15028] [ 657.782481][T15037] FAULT_INJECTION: forcing a failure. [ 657.782481][T15037] name fail_futex, interval 1, probability 0, space 0, times 0 [ 657.857215][T15037] CPU: 1 UID: 0 PID: 15037 Comm: syz.3.1829 Not tainted syzkaller #0 PREEMPT(full) [ 657.857246][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.857256][T15037] Call Trace: [ 657.857261][T15037] [ 657.857267][T15037] dump_stack_lvl+0x16c/0x1f0 [ 657.857290][T15037] should_fail_ex+0x512/0x640 [ 657.857314][T15037] get_futex_key+0x1d0/0x1560 [ 657.857338][T15037] ? __pfx_get_futex_key+0x10/0x10 [ 657.857356][T15037] ? netns_bpf_prog_detach+0x262/0x2f0 [ 657.857378][T15037] ? __sys_bpf+0x175/0x4980 [ 657.857396][T15037] futex_wake+0xea/0x530 [ 657.857409][T15037] ? __pfx___sys_bpf+0x10/0x10 [ 657.857424][T15037] ? __pfx_futex_wait+0x10/0x10 [ 657.857437][T15037] ? __pfx_futex_wake+0x10/0x10 [ 657.857460][T15037] do_futex+0x1e3/0x350 [ 657.857480][T15037] ? __pfx_do_futex+0x10/0x10 [ 657.857507][T15037] __x64_sys_futex+0x1e0/0x4c0 [ 657.857530][T15037] ? __pfx___x64_sys_futex+0x10/0x10 [ 657.857550][T15037] ? xfd_validate_state+0x61/0x180 [ 657.857563][T15037] ? __pfx_do_writev+0x10/0x10 [ 657.857583][T15037] do_syscall_64+0xcd/0x4b0 [ 657.857601][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.857616][T15037] RIP: 0033:0x7f4b95f8eec9 [ 657.857627][T15037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.857641][T15037] RSP: 002b:00007f4b96e820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 657.857654][T15037] RAX: ffffffffffffffda RBX: 00007f4b961e5fa8 RCX: 00007f4b95f8eec9 [ 657.857664][T15037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4b961e5fac [ 657.857673][T15037] RBP: 00007f4b961e5fa0 R08: 00007f4b96e83000 R09: 0000000000000000 [ 657.857681][T15037] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 657.857690][T15037] R13: 00007f4b961e6038 R14: 00007ffc7b76e200 R15: 00007ffc7b76e2e8 [ 657.857708][T15037] [ 657.857720][T15037] syz.3.1829(15037): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 658.384652][T15045] input: f¬ as /devices/virtual/input/input18 [ 660.236610][T15093] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 661.248830][T15115] random: crng reseeded on system resumption [ 663.084596][T15146] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1850'. [ 663.176850][T15149] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1850'. syzkaller syzkaller login: [ 663.243011][T15146] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1850'. [ 663.278817][T15149] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1850'. [ 663.401527][ T982] Process accounting resumed [ 663.883522][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 663.996183][T15163] vivid-007: ================= START STATUS ================= [ 664.042635][T15163] vivid-007: Generate PTS: true [ 664.052265][T15163] vivid-007: Generate SCR: true [ 664.076076][T15163] tpg source WxH: 320x240 (Y'CbCr) [ 664.106169][T15163] tpg field: 1 [ 664.124407][T15163] tpg crop: (0,0)/320x240 [ 664.143891][T15163] tpg compose: (0,0)/320x240 [ 664.171189][T15163] tpg colorspace: 8 [ 664.181173][T15163] tpg transfer function: 0/0 [ 664.200033][T15163] tpg Y'CbCr encoding: 0/0 [ 664.226010][T15163] tpg quantization: 0/0 [ 664.240778][T15163] tpg RGB range: 0/2 [ 664.261454][T15163] vivid-007: ================== END STATUS ================== [ 664.841196][T15187] FAULT_INJECTION: forcing a failure. [ 664.841196][T15187] name failslab, interval 1, probability 0, space 0, times 0 [ 664.913787][T15187] CPU: 1 UID: 0 PID: 15187 Comm: syz.3.1860 Not tainted syzkaller #0 PREEMPT(full) [ 664.913809][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.913819][T15187] Call Trace: [ 664.913824][T15187] [ 664.913831][T15187] dump_stack_lvl+0x16c/0x1f0 [ 664.913854][T15187] should_fail_ex+0x512/0x640 [ 664.913874][T15187] ? __kmalloc_noprof+0xca/0x880 [ 664.913890][T15187] should_failslab+0xc2/0x120 [ 664.913915][T15187] __kmalloc_noprof+0xdd/0x880 [ 664.913929][T15187] ? lsm_blob_alloc+0x68/0x90 [ 664.913951][T15187] ? lsm_blob_alloc+0x68/0x90 [ 664.913967][T15187] lsm_blob_alloc+0x68/0x90 [ 664.913984][T15187] security_sk_alloc+0x30/0x270 [ 664.914005][T15187] sk_prot_alloc+0x1c7/0x2a0 [ 664.914022][T15187] sk_alloc+0x36/0xc20 [ 664.914042][T15187] __netlink_create+0x5e/0x2c0 [ 664.914062][T15187] __netlink_kernel_create+0xed/0x750 [ 664.914085][T15187] ? __pfx___netlink_kernel_create+0x10/0x10 [ 664.914112][T15187] uevent_net_init+0xf8/0x350 [ 664.914132][T15187] ? __pfx_uevent_net_init+0x10/0x10 [ 664.914151][T15187] ? rcu_is_watching+0x12/0xc0 [ 664.914169][T15187] ? __pfx_uevent_net_rcv+0x10/0x10 [ 664.914190][T15187] ? ops_init+0x77/0x5f0 [ 664.914213][T15187] ? __pfx_uevent_net_init+0x10/0x10 [ 664.914232][T15187] ops_init+0x1e2/0x5f0 [ 664.914254][T15187] setup_net+0x100/0x390 [ 664.914275][T15187] ? __pfx_setup_net+0x10/0x10 [ 664.914297][T15187] ? debug_mutex_init+0x37/0x70 [ 664.914316][T15187] copy_net_ns+0x2f8/0x690 [ 664.914332][T15187] create_new_namespaces+0x3ea/0xa90 [ 664.914355][T15187] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 664.914375][T15187] ksys_unshare+0x45b/0xa40 [ 664.914396][T15187] ? __pfx_ksys_unshare+0x10/0x10 [ 664.914418][T15187] ? xfd_validate_state+0x61/0x180 [ 664.914436][T15187] __x64_sys_unshare+0x31/0x40 [ 664.914456][T15187] do_syscall_64+0xcd/0x4b0 [ 664.914474][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.914489][T15187] RIP: 0033:0x7f4b95f8eec9 [ 664.914508][T15187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.914522][T15187] RSP: 002b:00007f4b96e82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 664.914537][T15187] RAX: ffffffffffffffda RBX: 00007f4b961e5fa0 RCX: 00007f4b95f8eec9 [ 664.914547][T15187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 664.914556][T15187] RBP: 00007f4b96011f91 R08: 0000000000000000 R09: 0000000000000000 [ 664.914568][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.914577][T15187] R13: 00007f4b961e6038 R14: 00007f4b961e5fa0 R15: 00007ffc7b76e2e8 [ 664.914596][T15187] [ 664.914679][T15187] kobject_uevent: unable to create netlink socket! [ 665.195814][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 665.829566][T15202] hub 1-0:1.0: USB hub found [ 665.862004][T15202] hub 1-0:1.0: 1 port detected [ 666.509016][T15211] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 666.574456][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 666.694278][T15215] vivid-007: ================= START STATUS ================= [ 666.721967][T15215] vivid-007: Generate PTS: true [ 666.742750][T15215] vivid-007: Generate SCR: true [ 666.768177][T15215] tpg source WxH: 320x240 (Y'CbCr) [ 666.807085][T15215] tpg field: 1 [ 666.810478][T15215] tpg crop: (0,0)/320x240 [ 666.843287][T15215] tpg compose: (0,0)/320x240 [ 666.859663][T15215] tpg colorspace: 8 [ 666.883915][T15215] tpg transfer function: 0/0 [ 666.906470][T15215] tpg Y'CbCr encoding: 0/0 [ 666.923620][T15215] tpg quantization: 0/0 [ 666.942612][T15215] tpg RGB range: 0/2 [ 666.963069][T15215] vivid-007: ================== END STATUS ================== [ 669.234157][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1877'. [ 669.274123][T15273] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 669.402152][T15274] vivid-007: ================= START STATUS ================= [ 669.436254][T15279] FAULT_INJECTION: forcing a failure. [ 669.436254][T15279] name failslab, interval 1, probability 0, space 0, times 0 [ 669.467764][T15274] vivid-007: Generate PTS: true [ 669.496063][T15274] vivid-007: Generate SCR: true [ 669.500945][T15274] tpg source WxH: 320x240 (Y'CbCr) [ 669.575529][T15274] tpg field: 1 [ 669.586175][T15274] tpg crop: (0,0)/320x240 [ 669.605701][T15279] CPU: 1 UID: 0 PID: 15279 Comm: syz.3.1878 Not tainted syzkaller #0 PREEMPT(full) [ 669.605723][T15279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 669.605732][T15279] Call Trace: [ 669.605736][T15279] [ 669.605743][T15279] dump_stack_lvl+0x16c/0x1f0 [ 669.605765][T15279] should_fail_ex+0x512/0x640 [ 669.605785][T15279] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 669.605805][T15279] should_failslab+0xc2/0x120 [ 669.605824][T15279] __kvmalloc_node_noprof+0x141/0x9c0 [ 669.605843][T15279] ? traverse.part.0.constprop.0+0x397/0x650 [ 669.605861][T15279] ? traverse.part.0.constprop.0+0x397/0x650 [ 669.605874][T15279] traverse.part.0.constprop.0+0x397/0x650 [ 669.605893][T15279] seq_read_iter+0x93c/0x12d0 [ 669.605914][T15279] seq_read+0x3a3/0x570 [ 669.605927][T15279] ? __pfx_seq_read+0x10/0x10 [ 669.605943][T15279] ? get_pid_task+0xfc/0x250 [ 669.605978][T15279] ? __pfx_seq_read+0x10/0x10 [ 669.605990][T15279] proc_reg_read+0x23d/0x330 [ 669.606010][T15279] ? __pfx_proc_reg_read+0x10/0x10 [ 669.606030][T15279] vfs_read+0x1e4/0xcf0 [ 669.606050][T15279] ? __pfx_vfs_read+0x10/0x10 [ 669.606064][T15279] ? find_held_lock+0x2b/0x80 [ 669.606081][T15279] ? __fget_files+0x204/0x3c0 [ 669.606099][T15279] ? __fget_files+0x20e/0x3c0 [ 669.606112][T15279] ? __fget_files+0x190/0x3c0 [ 669.606131][T15279] __x64_sys_pread64+0x1eb/0x250 [ 669.606148][T15279] ? __pfx___x64_sys_pread64+0x10/0x10 [ 669.606170][T15279] do_syscall_64+0xcd/0x4b0 [ 669.606189][T15279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.606203][T15279] RIP: 0033:0x7f4b95f8eec9 [ 669.606215][T15279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.606228][T15279] RSP: 002b:00007f4b96e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 669.606241][T15279] RAX: ffffffffffffffda RBX: 00007f4b961e6180 RCX: 00007f4b95f8eec9 [ 669.606251][T15279] RDX: 0000000010000005 RSI: 0000000000000000 RDI: 0000000000000005 [ 669.606259][T15279] RBP: 00007f4b96e40090 R08: 0000000000000000 R09: 0000000000000000 [ 669.606267][T15279] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 669.606275][T15279] R13: 00007f4b961e6218 R14: 00007f4b961e6180 R15: 00007ffc7b76e2e8 [ 669.606294][T15279] [ 670.100143][T15274] tpg compose: (0,0)/320x240 [ 670.119803][T15274] tpg colorspace: 8 [ 670.130020][T15274] tpg transfer function: 0/0 [ 670.150267][T15274] tpg Y'CbCr encoding: 0/0 [ 670.160402][T15274] tpg quantization: 0/0 [ 670.175127][T15274] tpg RGB range: 0/2 [ 670.179054][T15274] vivid-007: ================== END STATUS ================== [ 671.821336][T15324] bridge0: port 3(gretap0) entered blocking state [ 671.979188][T15315] zswap: compressor not available [ 671.990760][T15324] bridge0: port 3(gretap0) entered disabled state [ 672.037125][T15310] Setting dangerous option i915.mitigations - tainting kernel [ 672.167991][T15324] gretap0: entered allmulticast mode [ 672.226228][T15324] gretap0: entered promiscuous mode [ 672.373721][T15324] bridge0: port 3(gretap0) entered blocking state [ 672.380298][T15324] bridge0: port 3(gretap0) entered forwarding state [ 672.635954][T15337] nfs: Unknown parameter 'ΝΦή©iμθʟσ‚b’y¨7Jό ΕΨ€ΊͺV{° [ 672.635954][T15337] —\§γίΒ9-*;#rΘΡRcF‡δGL₯Φ*ζ(κ•ά¦)5&yAlγj Lp‘ν%―Zψwς}ΝGSΞΉάk†' [ 674.402913][T15358] bond0: invalid ARP target specified [ 675.051386][T15375] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1896'. [ 675.096309][T15375] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1896'. [ 675.318242][T15385] __vm_enough_memory: pid: 15385, comm: syz.2.1899, bytes: 4398046511104 not enough memory for the allocation [ 676.924389][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 677.091508][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 677.249459][T15451] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1911'. [ 677.307141][T15451] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1911'. [ 677.332837][ T30] audit: type=1800 audit(4294967394.730:10): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1912" name="lu_gp_id" dev="configfs" ino=52750 res=0 errno=0 [ 677.385390][T15455] netlink: 134 bytes leftover after parsing attributes in process `syz.2.1911'. [ 677.648444][T15461] usbip-vudc usbip-vudc.0: gadget not bound [ 677.779480][T15463] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 677.832660][T15459] FAULT_INJECTION: forcing a failure. [ 677.832660][T15459] name failslab, interval 1, probability 0, space 0, times 0 [ 677.979516][T15459] CPU: 1 UID: 0 PID: 15459 Comm: syz.0.1913 Tainted: G U syzkaller #0 PREEMPT(full) [ 677.979543][T15459] Tainted: [U]=USER [ 677.979548][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 677.979557][T15459] Call Trace: [ 677.979563][T15459] [ 677.979569][T15459] dump_stack_lvl+0x16c/0x1f0 [ 677.979592][T15459] should_fail_ex+0x512/0x640 [ 677.979613][T15459] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 677.979631][T15459] should_failslab+0xc2/0x120 [ 677.979651][T15459] kmem_cache_alloc_noprof+0x75/0x6e0 [ 677.979666][T15459] ? alloc_empty_file+0x55/0x1e0 [ 677.979691][T15459] ? alloc_empty_file+0x55/0x1e0 [ 677.979710][T15459] alloc_empty_file+0x55/0x1e0 [ 677.979730][T15459] dentry_open+0x46/0xd0 [ 677.979751][T15459] vfs_open_tree+0x711/0x910 [ 677.979769][T15459] ? __pfx_vfs_open_tree+0x10/0x10 [ 677.979786][T15459] ? xfd_validate_state+0x61/0x180 [ 677.979798][T15459] ? __pfx_do_writev+0x10/0x10 [ 677.979815][T15459] __x64_sys_open_tree+0x84/0x130 [ 677.979833][T15459] do_syscall_64+0xcd/0x4b0 [ 677.979851][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.979866][T15459] RIP: 0033:0x7f6d33d8eec9 [ 677.979877][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.979891][T15459] RSP: 002b:00007f6d34c5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 677.979905][T15459] RAX: ffffffffffffffda RBX: 00007f6d33fe5fa0 RCX: 00007f6d33d8eec9 [ 677.979914][T15459] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 677.979923][T15459] RBP: 00007f6d33e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.979931][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.979939][T15459] R13: 00007f6d33fe6038 R14: 00007f6d33fe5fa0 R15: 00007ffd09663fe8 [ 677.979957][T15459] [ 678.165498][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.351414][T15476] random: crng reseeded on system resumption [ 679.591274][T15493] random: crng reseeded on system resumption [ 679.880033][T15507] usbip-vudc usbip-vudc.0: gadget not bound [ 679.983955][T15511] FAULT_INJECTION: forcing a failure. [ 679.983955][T15511] name failslab, interval 1, probability 0, space 0, times 0 [ 680.117954][T15511] CPU: 1 UID: 0 PID: 15511 Comm: syz.4.1926 Tainted: G U syzkaller #0 PREEMPT(full) [ 680.117982][T15511] Tainted: [U]=USER [ 680.117987][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 680.117995][T15511] Call Trace: [ 680.118001][T15511] [ 680.118007][T15511] dump_stack_lvl+0x16c/0x1f0 [ 680.118029][T15511] should_fail_ex+0x512/0x640 [ 680.118049][T15511] ? __kmalloc_noprof+0xca/0x880 [ 680.118066][T15511] should_failslab+0xc2/0x120 [ 680.118085][T15511] __kmalloc_noprof+0xdd/0x880 [ 680.118099][T15511] ? lsm_blob_alloc+0x68/0x90 [ 680.118119][T15511] ? lsm_blob_alloc+0x68/0x90 [ 680.118134][T15511] ? __raw_spin_lock_init+0x3a/0x110 [ 680.118148][T15511] lsm_blob_alloc+0x68/0x90 [ 680.118165][T15511] security_sb_alloc+0x28/0x230 [ 680.118185][T15511] alloc_super+0x1eb/0xb60 [ 680.118200][T15511] ? sget_fc+0xd3/0xc20 [ 680.118217][T15511] sget_fc+0x116/0xc20 [ 680.118233][T15511] ? __pfx_set_anon_super_fc+0x10/0x10 [ 680.118248][T15511] ? __pfx_mqueue_fill_super+0x10/0x10 [ 680.118272][T15511] get_tree_nodev+0x28/0x190 [ 680.118289][T15511] mqueue_get_tree+0xf1/0x130 [ 680.118307][T15511] vfs_get_tree+0x8e/0x340 [ 680.118320][T15511] fc_mount_longterm+0x1a/0x270 [ 680.118351][T15511] mq_init_ns+0x426/0x620 [ 680.118375][T15511] copy_ipcs+0x2d6/0x550 [ 680.118398][T15511] create_new_namespaces+0x20a/0xa90 [ 680.118417][T15511] ? security_capable+0x7e/0x260 [ 680.118439][T15511] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 680.118459][T15511] ksys_unshare+0x45b/0xa40 [ 680.118480][T15511] ? __pfx_ksys_unshare+0x10/0x10 [ 680.118500][T15511] ? xfd_validate_state+0x61/0x180 [ 680.118519][T15511] __x64_sys_unshare+0x31/0x40 [ 680.118539][T15511] do_syscall_64+0xcd/0x4b0 [ 680.118558][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.118572][T15511] RIP: 0033:0x7ff81578eec9 [ 680.118585][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.118599][T15511] RSP: 002b:00007ff8165ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 680.118613][T15511] RAX: ffffffffffffffda RBX: 00007ff8159e6090 RCX: 00007ff81578eec9 [ 680.118622][T15511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 680.118631][T15511] RBP: 00007ff815811f91 R08: 0000000000000000 R09: 0000000000000000 [ 680.118639][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.118647][T15511] R13: 00007ff8159e6128 R14: 00007ff8159e6090 R15: 00007ffc00386618 [ 680.118666][T15511] [ 680.370393][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.106367][T15509] kexec: Could not allocate control_code_buffer [ 682.250055][T15559] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 683.246144][T15570] vivid-007: ================= START STATUS ================= [ 683.268563][T15572] usbip-vudc usbip-vudc.0: gadget not bound [ 683.381280][T15570] vivid-007: Generate PTS: true [ 683.434143][T15570] vivid-007: Generate SCR: true [ 683.485120][T15570] tpg source WxH: 320x240 (Y'CbCr) [ 683.544613][T15570] tpg field: 1 [ 683.601503][T15570] tpg crop: (0,0)/320x240 [ 683.645590][T15570] tpg compose: (0,0)/320x240 [ 683.712174][T15570] tpg colorspace: 8 [ 683.749815][T15570] tpg transfer function: 0/0 [ 683.805876][T15570] tpg Y'CbCr encoding: 0/0 [ 683.850145][T15570] tpg quantization: 0/0 [ 683.898525][T15570] tpg RGB range: 0/2 [ 683.943762][T15570] vivid-007: ================== END STATUS ================== [ 684.935349][T15611] usbip-vudc usbip-vudc.0: gadget not bound [ 685.955734][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.966785][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.235668][T15634] zswap: compressor not available [ 686.273647][T15646] busy [ 686.541480][T15650] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1956'. [ 687.787171][T15677] random: crng reseeded on system resumption [ 689.548794][T15698] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 689.846455][T15701] hub 1-0:1.0: USB hub found [ 689.972656][T15701] hub 1-0:1.0: 1 port detected [ 690.851609][T15729] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1975'. [ 690.915432][ T30] audit: type=1804 audit(4294967408.320:11): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1975" name=2F6E6577726F6F742F3534332F22050820 dev="tmpfs" ino=2898 res=1 errno=0 [ 691.048562][ T30] audit: type=1800 audit(4294967408.350:12): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1975" name=22050820 dev="tmpfs" ino=2898 res=0 errno=0 [ 691.995777][T14890] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3249 with max blocks 210 with error 117 [ 692.162788][T14890] EXT4-fs (sda1): This should not happen!! Data will be lost [ 692.162788][T14890] [ 693.286632][T15759] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1985'. [ 693.604049][T15769] sp0: Synchronizing with TNC [ 694.134302][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 694.205457][T15779] vivid-007: ================= START STATUS ================= [ 694.249224][T15779] vivid-007: Generate PTS: true [ 694.261849][T15779] vivid-007: Generate SCR: true [ 694.301311][T15779] tpg source WxH: 320x240 (Y'CbCr) [ 694.306459][T15779] tpg field: 1 [ 694.331187][T15779] tpg crop: (0,0)/320x240 [ 694.346131][T15779] tpg compose: (0,0)/320x240 [ 694.367177][T15779] tpg colorspace: 8 [ 694.387396][T15779] tpg transfer function: 0/0 [ 694.407623][T15779] tpg Y'CbCr encoding: 0/0 [ 694.441184][T15779] tpg quantization: 0/0 [ 694.481494][T15779] tpg RGB range: 0/2 [ 694.501186][T15779] vivid-007: ================== END STATUS ================== [ 694.849395][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 695.175359][T15768] kexec: Could not allocate control_code_buffer [ 697.913614][T15853] random: crng reseeded on system resumption [ 698.637829][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 698.797823][T15879] vivid-007: ================= START STATUS ================= [ 698.825654][T15879] vivid-007: Generate PTS: true [ 698.869162][T15879] vivid-007: Generate SCR: true [ 698.899751][T15879] tpg source WxH: 320x240 (Y'CbCr) [ 698.925276][T15879] tpg field: 1 [ 698.928669][T15879] tpg crop: (0,0)/320x240 [ 698.966124][T15879] tpg compose: (0,0)/320x240 [ 698.994180][T15879] tpg colorspace: 8 [ 699.006640][T15879] tpg transfer function: 0/0 [ 699.031198][T15879] tpg Y'CbCr encoding: 0/0 [ 699.069005][T15879] tpg quantization: 0/0 [ 699.085881][T15879] tpg RGB range: 0/2 [ 699.102600][T15879] vivid-007: ================== END STATUS ================== [ 699.325058][T15884] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 699.596737][T15886] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2012'. [ 701.077716][T15917] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 701.885395][T15943] sp0: Synchronizing with TNC [ 702.259356][T15953] FAULT_INJECTION: forcing a failure. [ 702.259356][T15953] name failslab, interval 1, probability 0, space 0, times 0 [ 702.341167][T15953] CPU: 1 UID: 0 PID: 15953 Comm: syz.0.2028 Tainted: G U syzkaller #0 PREEMPT(full) [ 702.341193][T15953] Tainted: [U]=USER [ 702.341198][T15953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.341207][T15953] Call Trace: [ 702.341213][T15953] [ 702.341220][T15953] dump_stack_lvl+0x16c/0x1f0 [ 702.341243][T15953] should_fail_ex+0x512/0x640 [ 702.341265][T15953] ? fs_reclaim_acquire+0xae/0x150 [ 702.341287][T15953] should_failslab+0xc2/0x120 [ 702.341308][T15953] kmem_cache_alloc_noprof+0x75/0x6e0 [ 702.341323][T15953] ? ext4_init_io_end+0x24/0x170 [ 702.341343][T15953] ? ext4_init_io_end+0x24/0x170 [ 702.341356][T15953] ext4_init_io_end+0x24/0x170 [ 702.341371][T15953] ext4_do_writepages+0x9e7/0x3cf0 [ 702.341394][T15953] ? lock_acquire+0x179/0x350 [ 702.341426][T15953] ? __pfx_ext4_do_writepages+0x10/0x10 [ 702.341462][T15953] ? ext4_writepages+0x37a/0x7d0 [ 702.341482][T15953] ext4_writepages+0x37a/0x7d0 [ 702.341502][T15953] ? __pfx_ext4_writepages+0x10/0x10 [ 702.341530][T15953] ? do_writepages+0x4b7/0x600 [ 702.341552][T15953] ? __pfx_ext4_writepages+0x10/0x10 [ 702.341573][T15953] do_writepages+0x27a/0x600 [ 702.341595][T15953] ? __pfx_do_writepages+0x10/0x10 [ 702.341613][T15953] ? do_raw_spin_unlock+0x172/0x230 [ 702.341628][T15953] ? _raw_spin_unlock+0x28/0x50 [ 702.341644][T15953] filemap_fdatawrite_wbc+0x104/0x160 [ 702.341665][T15953] __filemap_fdatawrite_range+0xb9/0x100 [ 702.341682][T15953] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 702.341726][T15953] file_write_and_wait_range+0xca/0x140 [ 702.341744][T15953] ext4_sync_file+0x310/0xf10 [ 702.341763][T15953] ? __pfx___up_read+0x10/0x10 [ 702.341778][T15953] ? __pfx_ext4_sync_file+0x10/0x10 [ 702.341795][T15953] vfs_fsync_range+0x139/0x220 [ 702.341815][T15953] __do_sys_msync+0x3cb/0x5c0 [ 702.341835][T15953] do_syscall_64+0xcd/0x4b0 [ 702.341853][T15953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.341871][T15953] RIP: 0033:0x7f6d33d8eec9 [ 702.341884][T15953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.341898][T15953] RSP: 002b:00007f6d34c5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 702.341912][T15953] RAX: ffffffffffffffda RBX: 00007f6d33fe5fa0 RCX: 00007f6d33d8eec9 [ 702.341922][T15953] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 702.341930][T15953] RBP: 00007f6d33e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 702.341939][T15953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.341947][T15953] R13: 00007f6d33fe6038 R14: 00007f6d33fe5fa0 R15: 00007ffd09663fe8 [ 702.341966][T15953] [ 702.990182][T15959] __vm_enough_memory: pid: 15959, comm: syz.4.2029, bytes: 4398046511104 not enough memory for the allocation [ 703.068320][T15964] usbip-vudc usbip-vudc.0: gadget not bound [ 704.064921][T15983] sp0: Synchronizing with TNC [ 704.869345][T16009] vivid-007: ================= START STATUS ================= [ 704.948117][T16009] vivid-007: Enable Output Cropping: true [ 704.959585][T16007] ======================================================= [ 704.959585][T16007] WARNING: The mand mount option has been deprecated and [ 704.959585][T16007] and is ignored by this kernel. Remove the mand [ 704.959585][T16007] option from the mount to silence this warning. [ 704.959585][T16007] ======================================================= [ 705.016556][T16009] vivid-007: Enable Output Composing: true [ 705.037379][T16009] vivid-007: Enable Output Scaler: true [ 705.064914][T16009] vivid-007: Tx RGB Quantization Range: Automatic [ 705.122972][T16009] vivid-007: Transmit Mode: HDMI [ 705.179025][T16009] vivid-007: Hotplug Present: 0x00000000 [ 705.258081][T16009] vivid-007: RxSense Present: 0x00000000 [ 705.303103][T16009] vivid-007: EDID Present: 0x00000000 [ 705.391570][T16009] vivid-007: ================== END STATUS ================== [ 705.922064][T13845] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 705.922090][T13845] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 705.937905][T13845] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 705.937938][T13845] Bluetooth: hci1: adv larger than maximum supported [ 705.945037][T13845] Bluetooth: hci1: Malformed LE Event: 0x0d [ 706.015805][T16034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2046'. [ 706.344275][T16049] random: crng reseeded on system resumption [ 706.941513][T16065] sd 0:0:1:0: PR command failed: 1026 [ 706.970211][T16065] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 707.009811][T16065] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 707.320845][T16077] FAULT_INJECTION: forcing a failure. [ 707.320845][T16077] name failslab, interval 1, probability 0, space 0, times 0 [ 707.432099][T16077] CPU: 1 UID: 0 PID: 16077 Comm: syz.0.2055 Tainted: G U syzkaller #0 PREEMPT(full) [ 707.432124][T16077] Tainted: [U]=USER [ 707.432129][T16077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 707.432136][T16077] Call Trace: [ 707.432142][T16077] [ 707.432148][T16077] dump_stack_lvl+0x16c/0x1f0 [ 707.432170][T16077] should_fail_ex+0x512/0x640 [ 707.432189][T16077] ? fs_reclaim_acquire+0xae/0x150 [ 707.432211][T16077] should_failslab+0xc2/0x120 [ 707.432230][T16077] __kmalloc_noprof+0xdd/0x880 [ 707.432243][T16077] ? kfree+0x252/0x6d0 [ 707.432255][T16077] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 707.432274][T16077] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 707.432289][T16077] tomoyo_realpath_from_path+0xc2/0x6e0 [ 707.432310][T16077] tomoyo_get_exe+0x63/0xa0 [ 707.432330][T16077] tomoyo_write_control+0x689/0x1430 [ 707.432356][T16077] ? __pfx_tomoyo_write_control+0x10/0x10 [ 707.432379][T16077] ? __pfx_tomoyo_write+0x10/0x10 [ 707.432393][T16077] vfs_write+0x2a0/0x11d0 [ 707.432413][T16077] ? __pfx___mutex_lock+0x10/0x10 [ 707.432431][T16077] ? __pfx_vfs_write+0x10/0x10 [ 707.432452][T16077] ? __fget_files+0x20e/0x3c0 [ 707.432473][T16077] ksys_write+0x12a/0x250 [ 707.432489][T16077] ? __pfx_ksys_write+0x10/0x10 [ 707.432511][T16077] do_syscall_64+0xcd/0x4b0 [ 707.432529][T16077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.432544][T16077] RIP: 0033:0x7f6d33d8eec9 [ 707.432555][T16077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.432569][T16077] RSP: 002b:00007f6d34c5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 707.432582][T16077] RAX: ffffffffffffffda RBX: 00007f6d33fe5fa0 RCX: 00007f6d33d8eec9 [ 707.432591][T16077] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 707.432600][T16077] RBP: 00007f6d34c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 707.432607][T16077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.432616][T16077] R13: 00007f6d33fe6038 R14: 00007f6d33fe5fa0 R15: 00007ffd09663fe8 [ 707.432635][T16077] [ 707.432641][T16077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 708.541240][T16085] can: request_module (can-proto-5) failed. [ 708.603647][T16096] FAULT_INJECTION: forcing a failure. [ 708.603647][T16096] name failslab, interval 1, probability 0, space 0, times 0 [ 708.616854][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.3.2057 Tainted: G U syzkaller #0 PREEMPT(full) [ 708.616881][T16096] Tainted: [U]=USER [ 708.616886][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.616896][T16096] Call Trace: [ 708.616903][T16096] [ 708.616909][T16096] dump_stack_lvl+0x16c/0x1f0 [ 708.616933][T16096] should_fail_ex+0x512/0x640 [ 708.616959][T16096] should_failslab+0xc2/0x120 [ 708.616980][T16096] kmem_cache_alloc_noprof+0x75/0x6e0 [ 708.616996][T16096] ? __pfx_stack_trace_save+0x10/0x10 [ 708.617022][T16096] ? kernel_text_address+0x8d/0x100 [ 708.617038][T16096] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 708.617066][T16096] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 708.617088][T16096] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 708.617116][T16096] idr_get_free+0x528/0xa30 [ 708.617139][T16096] idr_alloc_u32+0x190/0x2f0 [ 708.617156][T16096] ? __pfx_idr_alloc_u32+0x10/0x10 [ 708.617179][T16096] idr_alloc+0xc0/0x130 [ 708.617194][T16096] ? __pfx_idr_alloc+0x10/0x10 [ 708.617208][T16096] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 708.617228][T16096] tipc_conn_alloc+0x337/0x590 [ 708.617246][T16096] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 708.617264][T16096] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 708.617283][T16096] ? net_generic+0xea/0x2a0 [ 708.617303][T16096] tipc_group_create+0x4ab/0x660 [ 708.617322][T16096] tipc_setsockopt+0x7f0/0xdb0 [ 708.617344][T16096] ? __pfx_tipc_setsockopt+0x10/0x10 [ 708.617373][T16096] ? __pfx_tipc_setsockopt+0x10/0x10 [ 708.617394][T16096] do_sock_setsockopt+0xf3/0x1d0 [ 708.617412][T16096] __sys_setsockopt+0x120/0x1a0 [ 708.617435][T16096] __x64_sys_setsockopt+0xbd/0x160 [ 708.617454][T16096] ? do_syscall_64+0x91/0x4b0 [ 708.617471][T16096] ? lockdep_hardirqs_on+0x7c/0x110 [ 708.617488][T16096] do_syscall_64+0xcd/0x4b0 [ 708.617506][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.617521][T16096] RIP: 0033:0x7f4b95f8eec9 [ 708.617534][T16096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.617550][T16096] RSP: 002b:00007f4b96e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 708.617565][T16096] RAX: ffffffffffffffda RBX: 00007f4b961e6180 RCX: 00007f4b95f8eec9 [ 708.617575][T16096] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 708.617584][T16096] RBP: 00007f4b96011f91 R08: 0000000000000014 R09: 0000000000000000 [ 708.617592][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.617601][T16096] R13: 00007f4b961e6218 R14: 00007f4b961e6180 R15: 00007ffc7b76e2e8 [ 708.617621][T16096] [ 709.311619][T16103] ptrace attach of "./syz-executor exec"[16104] was attempted by "./syz-executor exec"[16103] [ 710.421585][T16133] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 711.542982][T16159] vhci_hcd: invalid port number 21 [ 712.468859][T16180] random: crng reseeded on system resumption [ 712.925873][T16188] Invalid ELF header magic: != ELF [ 714.480732][T16237] program syz.2.2086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.308366][T16243] nbd: socks must be embedded in a SOCK_ITEM attr [ 715.682867][T16243] block nbd0: shutting down sockets [ 716.251735][T16263] nla_validate_range_unsigned: 5 callbacks suppressed [ 716.251752][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.319009][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.337624][T16261] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 716.354542][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.384768][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.432904][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.459565][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.495079][T16273] sd 0:0:1:0: PR command failed: 1026 [ 716.509222][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.519355][T16273] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 716.557677][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.568755][T16273] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 716.586844][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 716.625393][T16263] netlink: 'syz.2.2091': attribute type 11 has an invalid length. [ 718.156972][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 718.305398][T16322] vivid-007: ================= START STATUS ================= [ 718.364345][T16322] vivid-007: Generate PTS: true [ 718.388196][T16322] vivid-007: Generate SCR: true [ 718.404429][T16322] tpg source WxH: 320x240 (Y'CbCr) [ 718.417526][T16322] tpg field: 1 [ 718.422549][T16326] vhci_hcd: invalid port number 16 [ 718.432299][T16322] tpg crop: (0,0)/320x240 [ 718.448333][T16322] tpg compose: (0,0)/320x240 [ 718.463992][T16322] tpg colorspace: 8 [ 718.476279][T16322] tpg transfer function: 0/0 [ 718.494117][T16322] tpg Y'CbCr encoding: 0/0 [ 718.512141][T16322] tpg quantization: 0/0 [ 718.526621][T16322] tpg RGB range: 0/2 [ 718.543350][T16322] vivid-007: ================== END STATUS ================== [ 719.048293][T16347] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 719.202178][T16342] Process accounting resumed [ 720.841965][T16381] sp0: Synchronizing with TNC [ 723.234258][T14890] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 6 with max blocks 1 with error 117 [ 723.332960][T14890] EXT4-fs (sda1): This should not happen!! Data will be lost [ 723.332960][T14890] [ 723.461966][T14890] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1350 with max blocks 6 with error 117 [ 723.562324][T14890] EXT4-fs (sda1): This should not happen!! Data will be lost [ 723.562324][T14890] [ 724.535023][T16453] FAULT_INJECTION: forcing a failure. [ 724.535023][T16453] name failslab, interval 1, probability 0, space 0, times 0 [ 724.602063][T16453] CPU: 1 UID: 0 PID: 16453 Comm: syz.0.2137 Tainted: G U syzkaller #0 PREEMPT(full) [ 724.602091][T16453] Tainted: [U]=USER [ 724.602097][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 724.602112][T16453] Call Trace: [ 724.602118][T16453] [ 724.602124][T16453] dump_stack_lvl+0x16c/0x1f0 [ 724.602147][T16453] should_fail_ex+0x512/0x640 [ 724.602168][T16453] ? __kmalloc_noprof+0xca/0x880 [ 724.602185][T16453] should_failslab+0xc2/0x120 [ 724.602206][T16453] __kmalloc_noprof+0xdd/0x880 [ 724.602220][T16453] ? sk_prot_alloc+0x1a8/0x2a0 [ 724.602239][T16453] ? sk_prot_alloc+0x1a8/0x2a0 [ 724.602251][T16453] sk_prot_alloc+0x1a8/0x2a0 [ 724.602268][T16453] sk_alloc+0x36/0xc20 [ 724.602287][T16453] __netlink_create+0x5e/0x2c0 [ 724.602305][T16453] ? __wake_up+0x3f/0x60 [ 724.602325][T16453] netlink_create+0x39e/0x620 [ 724.602343][T16453] ? __pfx_genl_bind+0x10/0x10 [ 724.602356][T16453] ? __pfx_genl_unbind+0x10/0x10 [ 724.602368][T16453] ? __pfx_genl_release+0x10/0x10 [ 724.602384][T16453] __sock_create+0x335/0x8d0 [ 724.602404][T16453] __sys_socket+0x14d/0x260 [ 724.602424][T16453] ? __pfx___sys_socket+0x10/0x10 [ 724.602441][T16453] ? xfd_validate_state+0x61/0x180 [ 724.602454][T16453] ? __pfx_do_writev+0x10/0x10 [ 724.602473][T16453] __x64_sys_socket+0x72/0xb0 [ 724.602489][T16453] ? lockdep_hardirqs_on+0x7c/0x110 [ 724.602505][T16453] do_syscall_64+0xcd/0x4b0 [ 724.602523][T16453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.602538][T16453] RIP: 0033:0x7f6d33d8eec9 [ 724.602551][T16453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.602564][T16453] RSP: 002b:00007f6d34c5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 724.602579][T16453] RAX: ffffffffffffffda RBX: 00007f6d33fe5fa0 RCX: 00007f6d33d8eec9 [ 724.602589][T16453] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 724.602597][T16453] RBP: 00007f6d33e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 724.602606][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.602614][T16453] R13: 00007f6d33fe6038 R14: 00007f6d33fe5fa0 R15: 00007ffd09663fe8 [ 724.602632][T16453] [ 724.830981][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.676609][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'. [ 725.717842][T16475] vivid-007: ================= START STATUS ================= [ 725.746100][T16475] vivid-007: Generate PTS: true [ 725.761938][T16475] vivid-007: Generate SCR: true [ 725.798437][T16475] tpg source WxH: 320x240 (Y'CbCr) [ 725.832879][T16475] tpg field: 1 [ 725.850613][T16475] tpg crop: (0,0)/320x240 [ 725.872140][T16475] tpg compose: (0,0)/320x240 [ 725.905327][T16475] tpg colorspace: 8 [ 725.919456][T16475] tpg transfer function: 0/0 [ 725.940527][T16475] tpg Y'CbCr encoding: 0/0 [ 725.968619][T16475] tpg quantization: 0/0 [ 725.989703][T16475] tpg RGB range: 0/2 [ 726.023989][T16475] vivid-007: ================== END STATUS ================== [ 726.717201][T16489] FAULT_INJECTION: forcing a failure. [ 726.717201][T16489] name failslab, interval 1, probability 0, space 0, times 0 [ 726.840461][T16489] CPU: 1 UID: 0 PID: 16489 Comm: syz.3.2147 Tainted: G U syzkaller #0 PREEMPT(full) [ 726.840488][T16489] Tainted: [U]=USER [ 726.840493][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 726.840503][T16489] Call Trace: [ 726.840509][T16489] [ 726.840516][T16489] dump_stack_lvl+0x16c/0x1f0 [ 726.840540][T16489] should_fail_ex+0x512/0x640 [ 726.840560][T16489] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 726.840579][T16489] should_failslab+0xc2/0x120 [ 726.840600][T16489] kmem_cache_alloc_noprof+0x75/0x6e0 [ 726.840616][T16489] ? seq_open+0x55/0x170 [ 726.840639][T16489] ? __pfx_cmdline_proc_show+0x10/0x10 [ 726.840656][T16489] ? seq_open+0x55/0x170 [ 726.840674][T16489] seq_open+0x55/0x170 [ 726.840692][T16489] ? __pfx_cmdline_proc_show+0x10/0x10 [ 726.840708][T16489] single_open+0xfc/0x1f0 [ 726.840727][T16489] ? __pfx_proc_single_open+0x10/0x10 [ 726.840749][T16489] proc_reg_open+0x137/0x5f0 [ 726.840770][T16489] do_dentry_open+0x982/0x1530 [ 726.840789][T16489] ? __pfx_proc_reg_open+0x10/0x10 [ 726.840812][T16489] vfs_open+0x82/0x3f0 [ 726.840834][T16489] path_openat+0x1de4/0x2cb0 [ 726.840858][T16489] ? __pfx_path_openat+0x10/0x10 [ 726.840880][T16489] do_filp_open+0x20b/0x470 [ 726.840897][T16489] ? __pfx_do_filp_open+0x10/0x10 [ 726.840927][T16489] ? alloc_fd+0x471/0x7d0 [ 726.840948][T16489] do_sys_openat2+0x11b/0x1d0 [ 726.840969][T16489] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.840989][T16489] ? __fget_files+0x204/0x3c0 [ 726.841011][T16489] __x64_sys_openat+0x174/0x210 [ 726.841036][T16489] ? __pfx___x64_sys_openat+0x10/0x10 [ 726.841065][T16489] do_syscall_64+0xcd/0x4b0 [ 726.841085][T16489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.841108][T16489] RIP: 0033:0x7f4b95f8eec9 [ 726.841121][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.841137][T16489] RSP: 002b:00007f4b96e61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.841152][T16489] RAX: ffffffffffffffda RBX: 00007f4b961e6090 RCX: 00007f4b95f8eec9 [ 726.841162][T16489] RDX: 0000000000080b07 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 726.841172][T16489] RBP: 00007f4b96011f91 R08: 0000000000000000 R09: 0000000000000000 [ 726.841188][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.841197][T16489] R13: 00007f4b961e6128 R14: 00007f4b961e6090 R15: 00007ffc7b76e2e8 [ 726.841217][T16489] [ 727.081832][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.198177][T16515] nla_validate_range_unsigned: 5 callbacks suppressed [ 727.198192][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.213191][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.221076][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.230044][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.238677][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.246530][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.254543][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.262513][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.270326][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 727.278274][T16515] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 728.108500][T16540] sctp: [Deprecated]: syz.4.2161 (pid 16540) Use of int in max_burst socket option deprecated. [ 728.108500][T16540] Use struct sctp_assoc_value instead [ 728.581343][T16546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. ,[ 732.546727][T13845] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 732.844276][T16617] random: crng reseeded on system resumption [ 733.362061][T16631] hub 8-0:1.0: USB hub found [ 733.513584][T16631] hub 8-0:1.0: 1 port detected [ 734.637741][T16661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'. [ 735.061987][T16661] bond0: (slave bond_slave_0): Releasing backup interface [ 735.543612][T16681] busy [ 736.800253][T16698] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 736.821120][T16698] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 736.823209][T16698] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 737.892495][T16713] nbd: must specify a size in bytes for the device [ 737.899173][T16713] nbd: must specify a size in bytes for the device [ 738.022462][T16713] nbd: must specify a size in bytes for the device [ 738.029754][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.042787][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.050861][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.058851][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.066719][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.144250][T11897] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.156593][T16713] nbd: must specify a size in bytes for the device [ 738.171797][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2192'. [ 738.205262][T16713] nbd: must specify a size in bytes for the device [ 738.271885][T16713] nbd: must specify a size in bytes for the device [ 738.293391][T16717] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.334589][T16713] nbd: must specify a size in bytes for the device [ 738.367175][T16713] nbd: must specify a size in bytes for the device [ 738.431386][T16713] nbd: must specify a size in bytes for the device [ 738.470077][T16713] nbd: must specify a size in bytes for the device [ 738.513005][T16713] nbd: must specify a size in bytes for the device [ 738.525172][T16717] bridge_slave_1 (unregistering): left allmulticast mode [ 738.590210][T16717] bridge_slave_1 (unregistering): left promiscuous mode [ 738.651471][T16717] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.042583][T11897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.222552][T16726] netlink: 'syz.4.2194': attribute type 8 has an invalid length. [ 739.283006][T11897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.642534][T11897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.855800][T11897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.879160][T16737] usbip-vudc usbip-vudc.0: gadget not bound [ 740.112467][ T5848] Bluetooth: hci2: command tx timeout [ 740.358425][T16712] chnl_net:caif_netlink_parms(): no params data found [ 740.587979][T11897] bridge_slave_1: left allmulticast mode [ 740.610621][T11897] bridge_slave_1: left promiscuous mode [ 740.635926][T11897] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.698280][T11897] bridge_slave_0: left allmulticast mode [ 740.731167][T11897] bridge_slave_0: left promiscuous mode [ 740.749536][T11897] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.221788][T16742] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 741.245430][T16742] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 741.302273][T16763] busy [ 741.334096][T16742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 741.371267][T16742] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 741.496229][T16742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 741.504597][T16742] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 741.567496][T16742] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 741.676061][T16742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 741.691586][T16742] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 741.745372][T16742] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 741.776314][T16742] CPU0 is offline. [ 742.594271][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 742.787286][T11897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.881509][T11897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.944253][T11897] bond0 (unregistering): Released all slaves [ 743.089327][T16797] futex_wake_op: syz.3.2203 tries to shift op by -2048; fix this program [ 743.137104][T16774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 743.180342][T16774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 743.213752][T16774] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 743.253641][T11897] HfR: left promiscuous mode [ 743.278809][T16774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 743.336630][T16774] CPU0 is offline. [ 743.356740][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.369261][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.425655][T16712] bridge_slave_0: entered allmulticast mode [ 743.457408][T16712] bridge_slave_0: entered promiscuous mode [ 743.502334][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.510017][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.570128][T16712] bridge_slave_1: entered allmulticast mode [ 743.599042][T16712] bridge_slave_1: entered promiscuous mode [ 744.333665][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.369728][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.817995][T16712] team0: Port device team_slave_0 added [ 744.857832][T16712] team0: Port device team_slave_1 added [ 745.124909][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.152054][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 745.159086][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.231391][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 745.238382][T13845] Bluetooth: hci1: command 0x0406 tx timeout [ 745.256707][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.311997][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 745.341769][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.367416][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.393500][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.501954][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.788561][T16712] hsr_slave_0: entered promiscuous mode [ 745.822190][T16712] hsr_slave_1: entered promiscuous mode [ 745.828275][T16712] debugfs: 'hsr0' already exists in 'hsr' [ 745.865707][T16712] Cannot create hsr debugfs directory [ 747.127272][T11897] hsr_slave_0: left promiscuous mode [ 747.301213][T11897] hsr_slave_1: left promiscuous mode [ 747.316789][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 747.322995][T13845] Bluetooth: hci1: command 0x0406 tx timeout [ 747.344407][T11897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.384362][T11897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.396173][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 747.402629][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.408981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.477260][T11897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.508653][T11897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.593600][T11897] veth1_macvtap: left promiscuous mode [ 747.621208][T11897] veth0_macvtap: left promiscuous mode [ 747.631913][T11897] veth1_vlan: left promiscuous mode [ 747.650454][T11897] veth0_vlan: left promiscuous mode [ 748.147682][T16878] can: request_module (can-proto-5) failed. [ 748.573534][T11897] team0 (unregistering): Port device team_slave_1 removed [ 748.689765][T11897] team0 (unregistering): Port device team_slave_0 removed [ 749.391365][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 749.471671][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 749.667019][T16867] Process accounting paused [ 749.808216][T16889] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 751.552622][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 751.629319][T16712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 751.692612][T16712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 751.764464][T16712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 751.801764][T16712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 752.108082][T16939] sp0: Synchronizing with TNC [ 752.478618][T16965] busy [ 752.580619][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.709882][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.756528][T16974] nla_validate_range_unsigned: 17 callbacks suppressed [ 752.756543][T16974] netlink: 'syz.4.2231': attribute type 11 has an invalid length. [ 752.792160][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.799267][T11886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.855113][T16974] netlink: 'syz.4.2231': attribute type 11 has an invalid length. [ 752.865943][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.873147][T11886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.904623][T16974] netlink: 'syz.4.2231': attribute type 11 has an invalid length. [ 752.923589][T16974] netlink: 'syz.4.2231': attribute type 11 has an invalid length. [ 753.033612][T16712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.156781][T16983] device-mapper: ioctl: name not supplied when creating device [ 753.631713][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 753.786789][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.016940][T16712] veth0_vlan: entered promiscuous mode [ 754.074161][T16712] veth1_vlan: entered promiscuous mode [ 754.191689][T16712] veth0_macvtap: entered promiscuous mode [ 754.237217][T16712] veth1_macvtap: entered promiscuous mode [ 754.290149][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.373017][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.406155][T11896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.826475][T11896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.893630][T11896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.030179][T17032] overlayfs: missing 'lowerdir' [ 755.278451][T11896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.604694][T11896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.662950][T11896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.986950][T14890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.049920][T14890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.111222][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 756.211295][T17047] vivid-007: ================= START STATUS ================= [ 756.241543][T17047] vivid-007: Generate PTS: true [ 756.246426][T17047] vivid-007: Generate SCR: true [ 756.266449][T17047] tpg source WxH: 320x240 (Y'CbCr) [ 756.283322][T17047] tpg field: 1 [ 756.286712][T17047] tpg crop: (0,0)/320x240 [ 756.291024][T17047] tpg compose: (0,0)/320x240 [ 756.311260][T17047] tpg colorspace: 8 [ 756.315170][T17047] tpg transfer function: 0/0 [ 756.330835][T17047] tpg Y'CbCr encoding: 0/0 [ 756.340951][T17047] tpg quantization: 0/0 [ 756.345404][T17047] tpg RGB range: 0/2 [ 756.359520][T17047] vivid-007: ================== END STATUS ================== [ 756.463391][T16712] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 756.847776][T17064] netlink: zone id is out of range [ 756.902659][T17064] netlink: del zone limit has 4 unknown bytes [ 756.927372][T17060] netlink: set zone limit has 8 unknown bytes [ 756.972083][T17064] openvswitch: HfR: Dropping previously announced user features [ 757.612856][T17078] phram: not enough arguments [ 757.618927][T17077] netlink: zone id is out of range [ 758.002124][T17089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 758.069319][T17093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2252'. [ 758.228419][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2252'. [ 758.346974][T17093] veth1_macvtap: left promiscuous mode [ 760.217340][ T5848] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 760.373999][T17153] busy [ 761.341254][T17182] sp0: Synchronizing with TNC [ 761.693807][T17190] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 762.598804][T17220] sp0: Synchronizing with TNC [ 763.146302][T17231] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2281'. [ 763.371976][T17238] zram: Can't change algorithm for initialized device [ 764.409472][T17253] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 765.624201][T17276] FAULT_INJECTION: forcing a failure. [ 765.624201][T17276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.680866][T17276] CPU: 1 UID: 0 PID: 17276 Comm: syz.3.2291 Tainted: G U syzkaller #0 PREEMPT(full) [ 765.680892][T17276] Tainted: [U]=USER [ 765.680897][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 765.680906][T17276] Call Trace: [ 765.680911][T17276] [ 765.680917][T17276] dump_stack_lvl+0x16c/0x1f0 [ 765.680944][T17276] should_fail_ex+0x512/0x640 [ 765.680968][T17276] _copy_to_user+0x32/0xd0 [ 765.680993][T17276] simple_read_from_buffer+0xcb/0x170 [ 765.681018][T17276] proc_fail_nth_read+0x197/0x240 [ 765.681039][T17276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.681057][T17276] ? rw_verify_area+0xcf/0x6c0 [ 765.681071][T17276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.681087][T17276] vfs_read+0x1e4/0xcf0 [ 765.681105][T17276] ? __pfx___mutex_lock+0x10/0x10 [ 765.681123][T17276] ? __pfx_vfs_read+0x10/0x10 [ 765.681144][T17276] ? __fget_files+0x20e/0x3c0 [ 765.681169][T17276] ksys_read+0x12a/0x250 [ 765.681185][T17276] ? __pfx_ksys_read+0x10/0x10 [ 765.681206][T17276] do_syscall_64+0xcd/0x4b0 [ 765.681225][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.681239][T17276] RIP: 0033:0x7f4b95f8d8dc [ 765.681251][T17276] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 765.681266][T17276] RSP: 002b:00007f4b96e61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.681279][T17276] RAX: ffffffffffffffda RBX: 00007f4b961e6090 RCX: 00007f4b95f8d8dc [ 765.681289][T17276] RDX: 000000000000000f RSI: 00007f4b96e610a0 RDI: 0000000000000004 [ 765.681298][T17276] RBP: 00007f4b96e61090 R08: 0000000000000000 R09: 0000000000000000 [ 765.681307][T17276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.681315][T17276] R13: 00007f4b961e6128 R14: 00007f4b961e6090 R15: 00007ffc7b76e2e8 [ 765.681334][T17276] [ 765.864827][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.063246][T17278] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 766.119400][T17285] random: crng reseeded on system resumption [ 766.927367][T17303] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 767.544381][T17314] FAULT_INJECTION: forcing a failure. [ 767.544381][T17314] name failslab, interval 1, probability 0, space 0, times 0 [ 767.684077][T17314] CPU: 1 UID: 0 PID: 17314 Comm: syz.0.2300 Tainted: G U syzkaller #0 PREEMPT(full) [ 767.684106][T17314] Tainted: [U]=USER [ 767.684111][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.684121][T17314] Call Trace: [ 767.684126][T17314] [ 767.684133][T17314] dump_stack_lvl+0x16c/0x1f0 [ 767.684157][T17314] should_fail_ex+0x512/0x640 [ 767.684178][T17314] ? __kmalloc_cache_noprof+0x5f/0x780 [ 767.684197][T17314] should_failslab+0xc2/0x120 [ 767.684219][T17314] __kmalloc_cache_noprof+0x72/0x780 [ 767.684234][T17314] ? nexthop_net_init+0x73/0x140 [ 767.684257][T17314] ? nexthop_net_init+0x73/0x140 [ 767.684275][T17314] ? __pfx_nexthop_net_init+0x10/0x10 [ 767.684293][T17314] nexthop_net_init+0x73/0x140 [ 767.684311][T17314] ? tcf_net_init+0x55/0x150 [ 767.684330][T17314] ops_init+0x1e2/0x5f0 [ 767.684354][T17314] setup_net+0x100/0x390 [ 767.684375][T17314] ? __pfx_setup_net+0x10/0x10 [ 767.684398][T17314] ? debug_mutex_init+0x37/0x70 [ 767.684417][T17314] copy_net_ns+0x2f8/0x690 [ 767.684434][T17314] create_new_namespaces+0x3ea/0xa90 [ 767.684457][T17314] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 767.684477][T17314] ksys_unshare+0x45b/0xa40 [ 767.684505][T17314] ? __pfx_ksys_unshare+0x10/0x10 [ 767.684527][T17314] ? xfd_validate_state+0x61/0x180 [ 767.684547][T17314] __x64_sys_unshare+0x31/0x40 [ 767.684568][T17314] do_syscall_64+0xcd/0x4b0 [ 767.684589][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.684603][T17314] RIP: 0033:0x7f6d33d8eec9 [ 767.684616][T17314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.684630][T17314] RSP: 002b:00007f6d34c39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.684645][T17314] RAX: ffffffffffffffda RBX: 00007f6d33fe6090 RCX: 00007f6d33d8eec9 [ 767.684656][T17314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 767.684665][T17314] RBP: 00007f6d33e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 767.684674][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.684682][T17314] R13: 00007f6d33fe6128 R14: 00007f6d33fe6090 R15: 00007ffd09663fe8 [ 767.684701][T17314] [ 767.909008][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.680129][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 769.298021][T17342] busy [ 769.445775][T17344] netlink: 'syz.4.2307': attribute type 11 has an invalid length. [ 769.471122][T17344] netlink: 'syz.4.2307': attribute type 11 has an invalid length. [ 769.496967][T17344] netlink: 'syz.4.2307': attribute type 11 has an invalid length. [ 769.543799][T17344] netlink: 'syz.4.2307': attribute type 11 has an invalid length. [ 769.580026][T17344] netlink: 'syz.4.2307': attribute type 11 has an invalid length. [ 769.736646][T17310] kexec: Could not allocate control_code_buffer [ 770.096616][T17361] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 770.517591][T17369] sp0: Synchronizing with TNC [ 770.812589][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 770.873505][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 770.905735][T17377] netlink: 'syz.0.2315': attribute type 4 has an invalid length. [ 771.036586][T17373] zswap: compressor not available [ 771.307568][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 771.383695][T17391] vivid-007: ================= START STATUS ================= [ 771.430711][T17391] vivid-007: Generate PTS: true [ 771.448689][T17391] vivid-007: Generate SCR: true [ 771.498723][T17391] tpg source WxH: 320x240 (Y'CbCr) [ 771.541774][T17391] tpg field: 1 [ 771.553554][T17391] tpg crop: (0,0)/320x240 [ 771.574705][T17391] tpg compose: (0,0)/320x240 [ 771.591267][T17391] tpg colorspace: 8 [ 771.613190][T17391] tpg transfer function: 0/0 [ 771.633264][T17391] tpg Y'CbCr encoding: 0/0 [ 771.658720][T17391] tpg quantization: 0/0 [ 771.677507][T17391] tpg RGB range: 0/2 [ 771.696922][T17391] vivid-007: ================== END STATUS ================== [ 772.736689][T17413] random: crng reseeded on system resumption [ 773.990748][T17439] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 774.265695][T17447] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 774.426204][T17428] zswap: compressor not available [ 774.621426][T17458] binder: 17457:17458 ioctl c00c6211 0 returned -14 [ 774.686185][T17460] sp0: Synchronizing with TNC [ 774.745277][T17461] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 775.032299][T17468] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 775.284377][T17473] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 775.332616][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2337'. [ 775.345009][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 775.463020][T17481] vivid-007: ================= START STATUS ================= [ 775.504444][T17481] vivid-007: Generate PTS: true [ 775.530197][T17481] vivid-007: Generate SCR: true [ 775.592699][T17481] tpg source WxH: 320x240 (Y'CbCr) [ 775.643091][T17481] tpg field: 1 [ 775.652252][T17481] tpg crop: (0,0)/320x240 [ 775.678128][T17481] tpg compose: (0,0)/320x240 [ 775.714064][T17481] tpg colorspace: 8 [ 775.743397][T17481] tpg transfer function: 0/0 [ 775.771849][T17481] tpg Y'CbCr encoding: 0/0 [ 775.776572][T17484] zram: Can't change algorithm for initialized device [ 775.793817][T17481] tpg quantization: 0/0 [ 775.831425][T17481] tpg RGB range: 0/2 [ 775.836537][T17481] vivid-007: ================== END STATUS ================== [ 776.196482][T17499] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 776.604489][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 777.039017][T17527] FAULT_INJECTION: forcing a failure. [ 777.039017][T17527] name failslab, interval 1, probability 0, space 0, times 0 [ 777.088317][T17527] CPU: 1 UID: 0 PID: 17527 Comm: syz.3.2347 Tainted: G U syzkaller #0 PREEMPT(full) [ 777.088342][T17527] Tainted: [U]=USER [ 777.088347][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 777.088356][T17527] Call Trace: [ 777.088361][T17527] [ 777.088367][T17527] dump_stack_lvl+0x16c/0x1f0 [ 777.088389][T17527] should_fail_ex+0x512/0x640 [ 777.088409][T17527] ? fs_reclaim_acquire+0xae/0x150 [ 777.088431][T17527] should_failslab+0xc2/0x120 [ 777.088450][T17527] __kmalloc_noprof+0xdd/0x880 [ 777.088465][T17527] ? tomoyo_encode2+0x100/0x3e0 [ 777.088490][T17527] ? tomoyo_encode2+0x100/0x3e0 [ 777.088504][T17527] tomoyo_encode2+0x100/0x3e0 [ 777.088522][T17527] tomoyo_encode+0x29/0x50 [ 777.088536][T17527] tomoyo_realpath_from_path+0x18f/0x6e0 [ 777.088557][T17527] tomoyo_path_number_perm+0x245/0x580 [ 777.088578][T17527] ? tomoyo_path_number_perm+0x237/0x580 [ 777.088600][T17527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.088623][T17527] ? find_held_lock+0x2b/0x80 [ 777.088660][T17527] ? find_held_lock+0x2b/0x80 [ 777.088675][T17527] ? hook_file_ioctl_common+0x145/0x410 [ 777.088694][T17527] ? __fget_files+0x20e/0x3c0 [ 777.088712][T17527] security_file_ioctl+0x9b/0x240 [ 777.088727][T17527] __x64_sys_ioctl+0xb7/0x210 [ 777.088750][T17527] do_syscall_64+0xcd/0x4b0 [ 777.088769][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.088784][T17527] RIP: 0033:0x7f4b95f8eec9 [ 777.088796][T17527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.088810][T17527] RSP: 002b:00007f4b96e61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.088824][T17527] RAX: ffffffffffffffda RBX: 00007f4b961e6090 RCX: 00007f4b95f8eec9 [ 777.088833][T17527] RDX: 0000000000000038 RSI: 000000080000541b RDI: 0000000000000003 [ 777.088842][T17527] RBP: 00007f4b96e61090 R08: 0000000000000000 R09: 0000000000000000 [ 777.088851][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.088859][T17527] R13: 00007f4b961e6128 R14: 00007f4b961e6090 R15: 00007ffc7b76e2e8 [ 777.088878][T17527] [ 777.089217][T17527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.736731][T17536] misc userio: No port type given on /dev/userio [ 777.814391][T17535] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 777.918772][T17525] sp0: Synchronizing with TNC [ 778.134444][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 778.217531][T17543] synth uevent: /module/orangefs: unknown uevent action string [ 778.273670][T17539] vivid-007: ================= START STATUS ================= [ 778.313758][T17539] vivid-007: Generate PTS: true [ 778.344537][T17539] vivid-007: Generate SCR: true [ 778.367004][T17539] tpg source WxH: 320x240 (Y'CbCr) [ 778.399639][T17539] tpg field: 1 [ 778.415164][T17539] tpg crop: (0,0)/320x240 [ 778.443702][T17539] tpg compose: (0,0)/320x240 [ 778.468004][T17539] tpg colorspace: 8 [ 778.480382][T17539] tpg transfer function: 0/0 [ 778.513644][T17539] tpg Y'CbCr encoding: 0/0 [ 778.532244][T17539] tpg quantization: 0/0 [ 778.541702][ T5848] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 778.541723][ T5848] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 778.556707][ T5848] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 778.556753][ T5848] Bluetooth: hci4: adv larger than maximum supported [ 778.564215][ T5848] Bluetooth: hci4: adv larger than maximum supported [ 778.570906][ T5848] Bluetooth: hci4: Unknown advertising packet type: 0x73 [ 778.578529][ T5848] Bluetooth: hci4: Unknown advertising packet type: 0x3e [ 778.585937][ T5848] Bluetooth: hci4: Malformed LE Event: 0x0d [ 778.612732][T17539] tpg RGB range: 0/2 [ 778.643420][T17539] vivid-007: ================== END STATUS ================== [ 779.361879][T17574] sp0: Synchronizing with TNC [ 779.490372][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'. [ 779.590940][T17580] netlink: 'syz.0.2362': attribute type 4 has an invalid length. [ 780.636223][T17557] Process accounting resumed [ 781.971275][T17634] input: jJΗΈ-Άš9γ%vψ“ϋ¨lΠQ  J86Φ‘ as /devices/virtual/input/input22 [ 782.094383][T17638] Process accounting resumed [ 782.264756][T17642] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 783.041253][T17661] netlink: 'syz.4.2382': attribute type 4 has an invalid length. [ 783.521251][T17673] sp0: Synchronizing with TNC [ 784.023802][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2390'. [ 784.349052][T17694] netlink: 'syz.0.2392': attribute type 11 has an invalid length. [ 784.438421][T17694] netlink: 'syz.0.2392': attribute type 11 has an invalid length. [ 784.541130][T17694] netlink: 'syz.0.2392': attribute type 11 has an invalid length. [ 784.635608][T17694] netlink: 'syz.0.2392': attribute type 11 has an invalid length. [ 784.726512][T17694] netlink: 'syz.0.2392': attribute type 11 has an invalid length. [ 785.080814][T17706] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 785.297663][T17711] FAULT_INJECTION: forcing a failure. [ 785.297663][T17711] name failslab, interval 1, probability 0, space 0, times 0 [ 785.383692][T17711] CPU: 1 UID: 0 PID: 17711 Comm: syz.2.2398 Tainted: G U syzkaller #0 PREEMPT(full) [ 785.383719][T17711] Tainted: [U]=USER [ 785.383724][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 785.383734][T17711] Call Trace: [ 785.383740][T17711] [ 785.383746][T17711] dump_stack_lvl+0x16c/0x1f0 [ 785.383768][T17711] should_fail_ex+0x512/0x640 [ 785.383789][T17711] ? __kmalloc_cache_noprof+0x5f/0x780 [ 785.383806][T17711] should_failslab+0xc2/0x120 [ 785.383827][T17711] __kmalloc_cache_noprof+0x72/0x780 [ 785.383841][T17711] ? __pfx_srcu_delay_timer+0x10/0x10 [ 785.383856][T17711] ? init_srcu_struct_fields+0x97a/0xde0 [ 785.383874][T17711] ? init_srcu_struct_fields+0x97a/0xde0 [ 785.383888][T17711] init_srcu_struct_fields+0x97a/0xde0 [ 785.383905][T17711] ? lockdep_init_map_type+0x5c/0x280 [ 785.383932][T17711] kvm_dev_ioctl+0x7ac/0x1a80 [ 785.383953][T17711] ? hook_file_ioctl_common+0x145/0x410 [ 785.383969][T17711] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 785.383992][T17711] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 785.384009][T17711] __x64_sys_ioctl+0x18b/0x210 [ 785.384033][T17711] do_syscall_64+0xcd/0x4b0 [ 785.384051][T17711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.384066][T17711] RIP: 0033:0x7f283dd8eec9 [ 785.384078][T17711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.384092][T17711] RSP: 002b:00007f283ec93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.384107][T17711] RAX: ffffffffffffffda RBX: 00007f283dfe5fa0 RCX: 00007f283dd8eec9 [ 785.384117][T17711] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 785.384126][T17711] RBP: 00007f283de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 785.384134][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.384143][T17711] R13: 00007f283dfe6038 R14: 00007f283dfe5fa0 R15: 00007fff453ff658 [ 785.384163][T17711] [ 786.158379][T17730] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 786.197692][T17731] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 786.224447][T17722] zswap: compressor not available [ 787.764848][T17733] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 788.192835][T17755] busy [ 788.353732][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 788.415210][T17761] vivid-007: ================= START STATUS ================= [ 788.450291][T17761] vivid-007: Generate PTS: true [ 788.473139][T17761] vivid-007: Generate SCR: true [ 788.495650][T17761] tpg source WxH: 320x240 (Y'CbCr) [ 788.522777][T17761] tpg field: 1 [ 788.539417][T17761] tpg crop: (0,0)/320x240 [ 788.559639][T17761] tpg compose: (0,0)/320x240 [ 788.579876][T17761] tpg colorspace: 8 [ 788.609253][T17761] tpg transfer function: 0/0 [ 788.638994][T17761] tpg Y'CbCr encoding: 0/0 [ 788.651168][T17761] tpg quantization: 0/0 [ 788.669160][T17761] tpg RGB range: 0/2 [ 788.693883][T17761] vivid-007: ================== END STATUS ================== [ 790.406919][T17793] sp0: Synchronizing with TNC syzkaller syzkaller login: [ 791.176301][T17802] busy [ 791.230696][T17804] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 791.440361][T17815] FAULT_INJECTION: forcing a failure. [ 791.440361][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 791.509901][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.2.2421 Tainted: G U syzkaller #0 PREEMPT(full) [ 791.509927][T17815] Tainted: [U]=USER [ 791.509932][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 791.509941][T17815] Call Trace: [ 791.509946][T17815] [ 791.509953][T17815] dump_stack_lvl+0x16c/0x1f0 [ 791.509974][T17815] should_fail_ex+0x512/0x640 [ 791.509994][T17815] ? fs_reclaim_acquire+0xae/0x150 [ 791.510015][T17815] should_failslab+0xc2/0x120 [ 791.510035][T17815] __kmalloc_noprof+0xdd/0x880 [ 791.510048][T17815] ? kfree+0x252/0x6d0 [ 791.510060][T17815] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 791.510080][T17815] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 791.510095][T17815] tomoyo_realpath_from_path+0xc2/0x6e0 [ 791.510116][T17815] tomoyo_check_open_permission+0x2ab/0x3c0 [ 791.510139][T17815] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 791.510188][T17815] ? do_raw_spin_lock+0x12c/0x2b0 [ 791.510215][T17815] tomoyo_file_open+0x6b/0x90 [ 791.510234][T17815] security_file_open+0x84/0x1e0 [ 791.510250][T17815] do_dentry_open+0x596/0x1530 [ 791.510273][T17815] vfs_open+0x82/0x3f0 [ 791.510296][T17815] path_openat+0x1de4/0x2cb0 [ 791.510320][T17815] ? __pfx_path_openat+0x10/0x10 [ 791.510341][T17815] do_filp_open+0x20b/0x470 [ 791.510358][T17815] ? __pfx_do_filp_open+0x10/0x10 [ 791.510388][T17815] ? alloc_fd+0x471/0x7d0 [ 791.510409][T17815] do_sys_openat2+0x11b/0x1d0 [ 791.510430][T17815] ? __pfx_do_sys_openat2+0x10/0x10 [ 791.510453][T17815] ? __fget_files+0x20e/0x3c0 [ 791.510471][T17815] __x64_sys_openat+0x174/0x210 [ 791.510493][T17815] ? __pfx___x64_sys_openat+0x10/0x10 [ 791.510513][T17815] ? ksys_write+0x1ac/0x250 [ 791.510536][T17815] do_syscall_64+0xcd/0x4b0 [ 791.510555][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.510570][T17815] RIP: 0033:0x7f283dd8eec9 [ 791.510583][T17815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.510596][T17815] RSP: 002b:00007f283ec93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 791.510614][T17815] RAX: ffffffffffffffda RBX: 00007f283dfe5fa0 RCX: 00007f283dd8eec9 [ 791.510624][T17815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 791.510633][T17815] RBP: 00007f283ec93090 R08: 0000000000000000 R09: 0000000000000000 [ 791.510642][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.510650][T17815] R13: 00007f283dfe6038 R14: 00007f283dfe5fa0 R15: 00007fff453ff658 [ 791.510669][T17815] [ 792.015870][T17815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 792.600125][T17826] zram: Can't change algorithm for initialized device [ 792.846791][T17834] block nbd8: NBD_DISCONNECT [ 794.092717][T17862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2434'. [ 794.514272][T17872] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 794.553606][T17872] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 794.583374][T17872] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 794.618077][T17872] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 794.648408][T17872] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 794.838385][T17867] netlink: zone id is out of range [ 794.871806][T17875] sp0: Synchronizing with TNC [ 794.882149][T17867] netlink: zone id is out of range [ 794.933925][ T30] audit: type=1326 audit(4294967312.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.2.2440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f283dd8eec9 code=0x0 [ 795.001963][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 795.062569][T17867] HfR: entered promiscuous mode [ 795.111739][T17878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2440'. [ 795.563848][T17850] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 795.716405][T11892] HfR: left promiscuous mode [ 796.320860][T13845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.332388][T13845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.341353][T13845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.354302][T13845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.362454][T13845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.686011][T11892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.897158][T17916] netlink: 'syz.2.2448': attribute type 11 has an invalid length. [ 796.916999][T11892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.949588][T17916] netlink: 'syz.2.2448': attribute type 11 has an invalid length. [ 796.986813][T17916] netlink: 'syz.2.2448': attribute type 11 has an invalid length. [ 797.055182][T17916] netlink: 'syz.2.2448': attribute type 11 has an invalid length. [ 797.101178][T17916] netlink: 'syz.2.2448': attribute type 11 has an invalid length. [ 797.148970][T11892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.402347][T17922] FAULT_INJECTION: forcing a failure. [ 797.402347][T17922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.563863][T17922] CPU: 1 UID: 0 PID: 17922 Comm: syz.2.2449 Tainted: G U syzkaller #0 PREEMPT(full) [ 797.563888][T17922] Tainted: [U]=USER [ 797.563893][T17922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 797.563906][T17922] Call Trace: [ 797.563912][T17922] [ 797.563918][T17922] dump_stack_lvl+0x16c/0x1f0 [ 797.563940][T17922] should_fail_ex+0x512/0x640 [ 797.563963][T17922] _copy_from_user+0x2e/0xd0 [ 797.563984][T17922] __sys_bpf+0x248/0x4980 [ 797.564003][T17922] ? __pfx___sys_bpf+0x10/0x10 [ 797.564018][T17922] ? find_held_lock+0x2b/0x80 [ 797.564039][T17922] ? find_held_lock+0x2b/0x80 [ 797.564060][T17922] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 797.564088][T17922] ? fput+0x9b/0xd0 [ 797.564108][T17922] ? ksys_write+0x1ac/0x250 [ 797.564124][T17922] ? __pfx_ksys_write+0x10/0x10 [ 797.564143][T17922] __x64_sys_bpf+0x78/0xc0 [ 797.564159][T17922] ? lockdep_hardirqs_on+0x7c/0x110 [ 797.564175][T17922] do_syscall_64+0xcd/0x4b0 [ 797.564193][T17922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.564208][T17922] RIP: 0033:0x7f283dd8eec9 [ 797.564219][T17922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.564233][T17922] RSP: 002b:00007f283ec93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.564247][T17922] RAX: ffffffffffffffda RBX: 00007f283dfe5fa0 RCX: 00007f283dd8eec9 [ 797.564257][T17922] RDX: 000000000000000d RSI: 00002000000000c0 RDI: 0000000000000000 [ 797.564270][T17922] RBP: 00007f283ec93090 R08: 0000000000000000 R09: 0000000000000000 [ 797.564279][T17922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.564288][T17922] R13: 00007f283dfe6038 R14: 00007f283dfe5fa0 R15: 00007fff453ff658 [ 797.564306][T17922] [ 798.180264][T11892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.327758][T17903] chnl_net:caif_netlink_parms(): no params data found [ 798.446502][T13845] Bluetooth: hci1: command tx timeout [ 798.863231][T17954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2456'. [ 798.981235][T17903] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.020231][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.040522][T17903] bridge_slave_0: entered allmulticast mode [ 799.060751][T17903] bridge_slave_0: entered promiscuous mode [ 799.141183][T17903] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.148316][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.197863][T17903] bridge_slave_1: entered allmulticast mode [ 799.223787][T17903] bridge_slave_1: entered promiscuous mode [ 799.540021][T17903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.669424][T17966] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 799.727251][T17903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.097180][T17903] team0: Port device team_slave_0 added [ 800.171732][T11892] bridge_slave_0: left allmulticast mode [ 800.219060][T11892] bridge_slave_0: left promiscuous mode [ 800.247916][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.511340][T13845] Bluetooth: hci1: command tx timeout [ 800.591438][T17988] zram: Can't change algorithm for initialized device [ 802.196313][T11892] erspan0 (unregistering): left allmulticast mode [ 802.592965][T13845] Bluetooth: hci1: command tx timeout [ 803.415721][T11892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.436486][T11892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.455815][T11892] bond0 (unregistering): Released all slaves [ 803.487373][T17903] team0: Port device team_slave_1 added [ 803.636176][T11892] HfR: left promiscuous mode [ 803.738113][T13845] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 803.799031][T17903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.814976][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.873936][T17903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.973603][T17903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.997349][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.070723][T17903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.578604][T17903] hsr_slave_0: entered promiscuous mode [ 804.601842][T17903] hsr_slave_1: entered promiscuous mode [ 804.629930][T17903] debugfs: 'hsr0' already exists in 'hsr' [ 804.661142][T17903] Cannot create hsr debugfs directory [ 804.671228][ T5848] Bluetooth: hci1: command tx timeout [ 805.984085][T18065] zram: Can't change algorithm for initialized device [ 806.210243][T11892] hsr_slave_0: left promiscuous mode [ 806.298571][T11892] hsr_slave_1: left promiscuous mode [ 806.342713][T11892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.397537][T11892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.498118][T11892] veth1_macvtap: left promiscuous mode [ 806.535783][T11892] veth0_macvtap: left promiscuous mode [ 806.572928][T11892] veth1_vlan: left promiscuous mode [ 806.609695][T11892] veth0_vlan: left promiscuous mode [ 807.969189][T11892] team0 (unregistering): Port device team_slave_1 removed [ 808.053179][T11892] team0 (unregistering): Port device team_slave_0 removed [ 808.835107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.846635][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.246194][T18110] zram: Can't change algorithm for initialized device [ 809.617536][T18117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2485'. [ 809.671852][T17903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 809.944143][T18101] zswap: compressor not available [ 810.255457][T17903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 810.336555][T17903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 810.445031][T17903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 810.643349][T18151] zram: Can't change algorithm for initialized device [ 811.047313][T17903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.193829][T17903] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.283135][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.290247][T11899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.426451][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.433616][T11899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.615845][T18142] Process accounting paused [ 811.987765][T18169] zswap: compressor not available [ 812.154577][T18191] FAULT_INJECTION: forcing a failure. [ 812.154577][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 812.261477][T18191] CPU: 1 UID: 0 PID: 18191 Comm: syz.4.2493 Tainted: G U syzkaller #0 PREEMPT(full) [ 812.261505][T18191] Tainted: [U]=USER [ 812.261510][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.261519][T18191] Call Trace: [ 812.261525][T18191] [ 812.261532][T18191] dump_stack_lvl+0x16c/0x1f0 [ 812.261555][T18191] should_fail_ex+0x512/0x640 [ 812.261576][T18191] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 812.261599][T18191] should_failslab+0xc2/0x120 [ 812.261620][T18191] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 812.261639][T18191] ? kstrdup_const+0x63/0x80 [ 812.261659][T18191] ? kstrdup+0x53/0x100 [ 812.261674][T18191] kstrdup+0x53/0x100 [ 812.261698][T18191] kstrdup_const+0x63/0x80 [ 812.261715][T18191] kvasprintf_const+0x10f/0x1a0 [ 812.261740][T18191] kobject_set_name_vargs+0x5a/0x140 [ 812.261763][T18191] dev_set_name+0xc7/0x100 [ 812.261783][T18191] ? __pfx_dev_set_name+0x10/0x10 [ 812.261803][T18191] ? lockdep_init_map_type+0x5c/0x280 [ 812.261826][T18191] ? __init_waitqueue_head+0xca/0x150 [ 812.261846][T18191] netdev_register_kobject+0xc5/0x3d0 [ 812.261865][T18191] register_netdevice+0x13dc/0x2270 [ 812.261883][T18191] ? __pfx_register_netdevice+0x10/0x10 [ 812.261903][T18191] internal_dev_create+0x2d3/0x520 [ 812.261924][T18191] ovs_vport_add+0x147/0x4d0 [ 812.261943][T18191] new_vport+0x16/0x1d0 [ 812.261957][T18191] ovs_dp_cmd_new+0x6ba/0xe60 [ 812.261977][T18191] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 812.261997][T18191] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 812.262014][T18191] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 812.262034][T18191] genl_family_rcv_msg_doit+0x206/0x2f0 [ 812.262052][T18191] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 812.262074][T18191] ? bpf_lsm_capable+0x9/0x10 [ 812.262093][T18191] ? security_capable+0x7e/0x260 [ 812.262113][T18191] ? ns_capable+0xd7/0x110 [ 812.262132][T18191] genl_rcv_msg+0x55c/0x800 [ 812.262150][T18191] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.262166][T18191] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 812.262188][T18191] netlink_rcv_skb+0x158/0x420 [ 812.262210][T18191] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.262227][T18191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.262256][T18191] ? netlink_deliver_tap+0x1ae/0xd30 [ 812.262280][T18191] genl_rcv+0x28/0x40 [ 812.262293][T18191] netlink_unicast+0x5a7/0x870 [ 812.262317][T18191] ? __pfx_netlink_unicast+0x10/0x10 [ 812.262347][T18191] netlink_sendmsg+0x8c8/0xdd0 [ 812.262372][T18191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.262396][T18191] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 812.262420][T18191] ____sys_sendmsg+0xa95/0xc70 [ 812.262436][T18191] ? copy_msghdr_from_user+0x10a/0x160 [ 812.262457][T18191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.262477][T18191] ? __pfx_futex_wake_mark+0x10/0x10 [ 812.262495][T18191] ___sys_sendmsg+0x134/0x1d0 [ 812.262517][T18191] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.262563][T18191] __sys_sendmsg+0x16d/0x220 [ 812.262585][T18191] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.262605][T18191] ? __x64_sys_futex+0x1e0/0x4c0 [ 812.262637][T18191] do_syscall_64+0xcd/0x4b0 [ 812.262656][T18191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.262672][T18191] RIP: 0033:0x7ff81578eec9 [ 812.262685][T18191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.262706][T18191] RSP: 002b:00007ff81658c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.262721][T18191] RAX: ffffffffffffffda RBX: 00007ff8159e6180 RCX: 00007ff81578eec9 [ 812.262731][T18191] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 000000000000000a [ 812.262740][T18191] RBP: 00007ff815811f91 R08: 0000000000000000 R09: 0000000000000000 [ 812.262750][T18191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.262759][T18191] R13: 00007ff8159e6218 R14: 00007ff8159e6180 R15: 00007ffc00386618 [ 812.262780][T18191] [ 812.650908][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.345018][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 813.466856][T18209] zswap: compressor not available [ 813.919748][T17903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.989248][T18229] zram: Can't change algorithm for initialized device [ 814.154323][T17903] veth0_vlan: entered promiscuous mode [ 814.213037][T17903] veth1_vlan: entered promiscuous mode [ 814.372998][T17903] veth0_macvtap: entered promiscuous mode [ 814.434150][T17903] veth1_macvtap: entered promiscuous mode [ 814.538727][T17903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.632951][T17903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.709975][T11886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.749246][T11886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.890194][T11886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.966698][T11886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.281880][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.341144][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.480035][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.526407][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.662215][T18260] misc userio: No port type given on /dev/userio [ 815.704300][T18262] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 815.800752][T18250] zswap: compressor not available [ 815.816811][T18260] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 816.322442][T18250] openvswitch: HfR: Dropping previously announced user features [ 816.480090][T18267] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 817.119248][T18282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 817.260461][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2509'. [ 818.357716][T13845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 818.372549][T13845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 818.381993][T13845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 818.389869][T13845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 818.398573][T13845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 818.554457][T11892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.934226][T11892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.054466][T18330] FAULT_INJECTION: forcing a failure. [ 819.054466][T18330] name failslab, interval 1, probability 0, space 0, times 0 [ 819.084245][T11892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.122382][T18330] CPU: 1 UID: 0 PID: 18330 Comm: syz.3.2519 Tainted: G U syzkaller #0 PREEMPT(full) [ 819.122408][T18330] Tainted: [U]=USER [ 819.122413][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.122422][T18330] Call Trace: [ 819.122427][T18330] [ 819.122434][T18330] dump_stack_lvl+0x16c/0x1f0 [ 819.122456][T18330] should_fail_ex+0x512/0x640 [ 819.122476][T18330] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 819.122494][T18330] should_failslab+0xc2/0x120 [ 819.122514][T18330] kmem_cache_alloc_noprof+0x75/0x6e0 [ 819.122529][T18330] ? alloc_empty_file+0x55/0x1e0 [ 819.122553][T18330] ? alloc_empty_file+0x55/0x1e0 [ 819.122573][T18330] alloc_empty_file+0x55/0x1e0 [ 819.122594][T18330] dentry_open+0x46/0xd0 [ 819.122615][T18330] acct_on+0x1a5/0xa00 [ 819.122630][T18330] ? __pfx_acct_on+0x10/0x10 [ 819.122645][T18330] ? bpf_lsm_capable+0x9/0x10 [ 819.122669][T18330] __x64_sys_acct+0x81/0x1e0 [ 819.122682][T18330] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.122698][T18330] do_syscall_64+0xcd/0x4b0 [ 819.122717][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.122732][T18330] RIP: 0033:0x7fe6eef8eec9 [ 819.122744][T18330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.122758][T18330] RSP: 002b:00007fe6efef4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 819.122772][T18330] RAX: ffffffffffffffda RBX: 00007fe6ef1e5fa0 RCX: 00007fe6eef8eec9 [ 819.122782][T18330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 819.122791][T18330] RBP: 00007fe6efef4090 R08: 0000000000000000 R09: 0000000000000000 [ 819.122799][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.122807][T18330] R13: 00007fe6ef1e6038 R14: 00007fe6ef1e5fa0 R15: 00007ffe44905bf8 [ 819.122826][T18330] [ 819.719588][T11892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.920414][T18342] nvme_fcloop: unknown parameter or missing value '/dev/ptyb' [ 819.953924][ T30] audit: type=1800 audit(4294967337.690:14): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2518" name="dbroot" dev="configfs" ino=66733 res=0 errno=0 [ 820.234515][T11892] gretap0: left allmulticast mode [ 820.257278][T11892] gretap0: left promiscuous mode [ 820.283339][T11892] bridge0: port 3(gretap0) entered disabled state [ 820.315832][T11892] bridge_slave_1: left allmulticast mode [ 820.333238][T18353] netlink: 'syz.4.2522': attribute type 11 has an invalid length. [ 820.358271][T11892] bridge_slave_1: left promiscuous mode [ 820.371669][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.380178][T18353] netlink: 'syz.4.2522': attribute type 11 has an invalid length. [ 820.415546][T11892] bridge_slave_0: left allmulticast mode [ 820.432439][T13845] Bluetooth: hci0: command tx timeout [ 820.452981][T11892] bridge_slave_0: left promiscuous mode [ 820.484443][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.612233][T18381] futex_wake_op: syz.3.2526 tries to shift op by -2048; fix this program [ 821.651322][T18381] futex_wake_op: syz.3.2526 tries to shift op by -2048; fix this program [ 821.791949][T11892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.809598][T11892] bond0 (unregistering): Released all slaves [ 821.837844][T18314] chnl_net:caif_netlink_parms(): no params data found [ 821.992445][T11892] HfR: left promiscuous mode [ 822.126890][T18392] ubi0: attaching mtd0 [ 822.162229][T18392] ubi0: scanning is finished [ 822.200538][T18392] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 822.511159][T13845] Bluetooth: hci0: command tx timeout [ 822.805987][T18314] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.837574][T18392] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 822.884786][T18314] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.934350][T18314] bridge_slave_0: entered allmulticast mode [ 822.982194][T18314] bridge_slave_0: entered promiscuous mode [ 823.090026][T18314] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.143364][T18314] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.150573][T18314] bridge_slave_1: entered allmulticast mode [ 823.248202][T18314] bridge_slave_1: entered promiscuous mode [ 823.278732][T18420] zram: Can't change algorithm for initialized device [ 823.473653][T11892] hsr_slave_0: left promiscuous mode [ 823.521678][T11892] hsr_slave_1: left promiscuous mode [ 823.563527][T11892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.604946][T11892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.648058][T11892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.689701][T11892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.756444][T11892] veth1_macvtap: left promiscuous mode [ 823.780835][T11892] veth0_macvtap: left promiscuous mode [ 823.802411][T11892] veth1_vlan: left promiscuous mode [ 823.807723][T11892] veth0_vlan: left promiscuous mode [ 824.416099][T18434] zram: Can't change algorithm for initialized device [ 824.591215][T13845] Bluetooth: hci0: command tx timeout [ 825.254136][T13845] Bluetooth: hci4: unexpected event 0x36 length: 123 > 7 [ 825.651990][T11892] team0 (unregistering): Port device team_slave_1 removed [ 825.834878][T11892] team0 (unregistering): Port device team_slave_0 removed [ 826.672517][T13845] Bluetooth: hci0: command tx timeout [ 827.377914][T18314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.519692][T18314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.705491][T18475] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 827.763313][T18314] team0: Port device team_slave_0 added [ 827.800539][T18476] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2540'. [ 827.812269][T18314] team0: Port device team_slave_1 added [ 827.983004][T18314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.989987][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.152138][T18314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.249497][T18314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.296151][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.450824][T18314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.703652][T18494] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 828.728027][T18314] hsr_slave_0: entered promiscuous mode [ 828.739492][T18314] hsr_slave_1: entered promiscuous mode [ 830.012949][T18515] zram: Can't change algorithm for initialized device [ 830.337052][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 830.464182][T18523] vivid-007: ================= START STATUS ================= [ 830.513843][T18523] vivid-007: Generate PTS: true [ 830.547976][T18523] vivid-007: Generate SCR: true [ 830.588169][T18523] tpg source WxH: 320x240 (Y'CbCr) [ 830.616413][T18523] tpg field: 1 [ 830.635722][T18523] tpg crop: (0,0)/320x240 [ 830.671440][T18523] tpg compose: (0,0)/320x240 [ 830.691532][T18523] tpg colorspace: 8 [ 830.730677][T18523] tpg transfer function: 0/0 [ 830.750808][T18523] tpg Y'CbCr encoding: 0/0 [ 830.783703][T18523] tpg quantization: 0/0 [ 830.822893][T18523] tpg RGB range: 0/2 [ 830.839746][T18523] vivid-007: ================== END STATUS ================== [ 831.068529][T18314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 831.128444][T18314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 831.182853][T18314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 831.226748][T18314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 831.249509][T18542] random: crng reseeded on system resumption [ 831.530122][T18557] zram: Can't change algorithm for initialized device [ 831.643082][T18314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.700497][T18314] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.787587][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.794765][T11892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.932271][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.939412][T11886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.040850][T18314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 832.147054][T18314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 832.532106][T18571] zswap: compressor not available [ 832.572391][T18553] zswap: compressor not available [ 832.906338][T18314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.104575][T18314] veth0_vlan: entered promiscuous mode [ 833.177731][T18314] veth1_vlan: entered promiscuous mode [ 833.246960][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 833.292467][T18604] random: crng reseeded on system resumption [ 833.323933][T18314] veth0_macvtap: entered promiscuous mode [ 833.363398][T18600] vivid-007: ================= START STATUS ================= [ 833.373581][T18314] veth1_macvtap: entered promiscuous mode [ 833.413238][T18600] vivid-007: Generate PTS: true [ 833.430994][T18600] vivid-007: Generate SCR: true [ 833.436207][T18600] tpg source WxH: 320x240 (Y'CbCr) [ 833.455987][T18314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.475299][T18600] tpg field: 1 [ 833.490543][T18600] tpg crop: (0,0)/320x240 [ 833.519732][T18600] tpg compose: (0,0)/320x240 [ 833.530519][T18314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.560941][T18600] tpg colorspace: 8 [ 833.574771][T18600] tpg transfer function: 0/0 [ 833.589644][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.614508][T18600] tpg Y'CbCr encoding: 0/0 [ 833.630991][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.661739][T18600] tpg quantization: 0/0 [ 833.678813][T18600] tpg RGB range: 0/2 [ 833.686025][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.705582][T18600] vivid-007: ================== END STATUS ================== [ 833.928902][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.268571][T11884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.348423][T11884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.402460][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.468234][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.755772][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2510'. [ 835.157198][T18638] zram: Can't change algorithm for initialized device [ 835.421386][T18651] random: crng reseeded on system resumption [ 836.093868][T18647] zswap: compressor not available [ 836.484315][T18684] busy [ 837.067996][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 837.131819][T18708] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 837.181840][T18708] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 837.220700][T18708] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 837.257533][T18708] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 837.282614][T18715] vivid-007: ================= START STATUS ================= [ 837.300760][T18708] netlink: 'syz.2.2573': attribute type 11 has an invalid length. [ 837.317361][T18715] vivid-007: Generate PTS: true [ 837.378176][T18715] vivid-007: Generate SCR: true [ 837.395967][T18715] tpg source WxH: 320x240 (Y'CbCr) [ 837.442716][T18715] tpg field: 1 [ 837.470414][T18715] tpg crop: (0,0)/320x240 [ 837.510025][T18715] tpg compose: (0,0)/320x240 [ 837.534929][T18715] tpg colorspace: 8 [ 837.548429][T18720] FAULT_INJECTION: forcing a failure. [ 837.548429][T18720] name failslab, interval 1, probability 0, space 0, times 0 [ 837.573610][T18715] tpg transfer function: 0/0 [ 837.581985][T18723] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 837.595718][T18715] tpg Y'CbCr encoding: 0/0 [ 837.613387][T18715] tpg quantization: 0/0 [ 837.636748][T18715] tpg RGB range: 0/2 [ 837.653885][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.0.2574 Tainted: G U syzkaller #0 PREEMPT(full) [ 837.653916][T18720] Tainted: [U]=USER [ 837.653922][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.653931][T18720] Call Trace: [ 837.653937][T18720] [ 837.653944][T18720] dump_stack_lvl+0x16c/0x1f0 [ 837.653967][T18720] should_fail_ex+0x512/0x640 [ 837.653988][T18720] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 837.654010][T18720] should_failslab+0xc2/0x120 [ 837.654036][T18720] __kvmalloc_node_noprof+0x141/0x9c0 [ 837.654054][T18720] ? rcu_is_watching+0x12/0xc0 [ 837.654073][T18720] ? kfree+0x252/0x6d0 [ 837.654085][T18720] ? snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 837.654107][T18720] ? snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 837.654122][T18720] snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 837.654142][T18720] snd_pcm_plug_alloc+0x146/0x330 [ 837.654160][T18720] snd_pcm_oss_change_params_locked+0x19b8/0x3a30 [ 837.654186][T18720] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 837.654218][T18720] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 837.654236][T18720] snd_pcm_oss_ioctl+0x2212/0x37c0 [ 837.654253][T18720] ? hook_file_ioctl_common+0x145/0x410 [ 837.654268][T18720] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 837.654285][T18720] ? __fget_files+0x20e/0x3c0 [ 837.654304][T18720] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 837.654320][T18720] __x64_sys_ioctl+0x18b/0x210 [ 837.654343][T18720] do_syscall_64+0xcd/0x4b0 [ 837.654361][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.654376][T18720] RIP: 0033:0x7fb7a718eec9 [ 837.654389][T18720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.654403][T18720] RSP: 002b:00007fb7a8107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.654417][T18720] RAX: ffffffffffffffda RBX: 00007fb7a73e5fa0 RCX: 00007fb7a718eec9 [ 837.654428][T18720] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 837.654437][T18720] RBP: 00007fb7a7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 837.654446][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.654454][T18720] R13: 00007fb7a73e6038 R14: 00007fb7a73e5fa0 R15: 00007ffde57d7448 [ 837.654473][T18720] [ 837.660951][T18715] vivid-007: ================== END STATUS ================== [ 838.981017][T18751] netlink: 'syz.2.2579': attribute type 11 has an invalid length. [ 839.039027][T18751] netlink: 'syz.2.2579': attribute type 11 has an invalid length. [ 839.087020][T18751] netlink: 'syz.2.2579': attribute type 11 has an invalid length. [ 839.139862][T18751] netlink: 'syz.2.2579': attribute type 11 has an invalid length. [ 839.263620][T18759] random: crng reseeded on system resumption [ 839.539310][ T30] audit: type=1800 audit(4294967357.270:15): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2584" name="lu_gp_id" dev="configfs" ino=69069 res=0 errno=0 [ 840.463851][T18782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2587'. [ 840.648565][T18782] bridge_slave_1: left allmulticast mode [ 840.674528][T18782] bridge_slave_1: left promiscuous mode [ 840.712812][T18782] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.799138][T18782] bridge_slave_0: left allmulticast mode [ 840.829369][T18782] bridge_slave_0: left promiscuous mode [ 840.851404][T18782] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.965963][T18790] nvme_fabrics: missing parameter 'transport=%s' [ 841.104886][T18790] nvme_fabrics: missing parameter 'nqn=%s' [ 841.111931][T18799] binder: 18797:18799 ioctl c018620c 0 returned -1 [ 841.293543][T18799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'. [ 841.522904][T18804] netlink: 'syz.0.2592': attribute type 11 has an invalid length. [ 841.794710][T18796] Process accounting resumed [ 844.890337][T18877] busy [ 845.572544][T18898] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 845.816946][T18906] sd 0:0:1:0: PR command failed: 1026 [ 846.051512][T18906] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 846.199790][T18888] zswap: compressor not available [ 846.386784][T18906] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 848.593190][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 849.033097][T18938] busy [ 849.264764][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 849.416194][T18954] FAULT_INJECTION: forcing a failure. [ 849.416194][T18954] name failslab, interval 1, probability 0, space 0, times 0 [ 849.487390][T18954] CPU: 1 UID: 0 PID: 18954 Comm: syz.3.2621 Tainted: G U syzkaller #0 PREEMPT(full) [ 849.487417][T18954] Tainted: [U]=USER [ 849.487422][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 849.487433][T18954] Call Trace: [ 849.487438][T18954] [ 849.487446][T18954] dump_stack_lvl+0x16c/0x1f0 [ 849.487470][T18954] should_fail_ex+0x512/0x640 [ 849.487491][T18954] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 849.487511][T18954] should_failslab+0xc2/0x120 [ 849.487532][T18954] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 849.487550][T18954] ? sock_alloc_inode+0x25/0x1c0 [ 849.487569][T18954] ? __pfx_sock_alloc_inode+0x10/0x10 [ 849.487582][T18954] ? sock_alloc_inode+0x25/0x1c0 [ 849.487595][T18954] sock_alloc_inode+0x25/0x1c0 [ 849.487609][T18954] alloc_inode+0x61/0x240 [ 849.487630][T18954] sock_alloc+0x40/0x280 [ 849.487644][T18954] __sock_create+0xc1/0x8d0 [ 849.487660][T18954] ? proc_create_reg+0xe3/0x180 [ 849.487675][T18954] inet_ctl_sock_create+0x94/0x230 [ 849.487693][T18954] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 849.487710][T18954] ? lockdep_init_map_type+0x5c/0x280 [ 849.487740][T18954] ? lockdep_init_map_type+0x5c/0x280 [ 849.487764][T18954] ? __pfx_igmp_net_init+0x10/0x10 [ 849.487783][T18954] igmp_net_init+0xd0/0x1a0 [ 849.487802][T18954] ops_init+0x1e2/0x5f0 [ 849.487825][T18954] setup_net+0x100/0x390 [ 849.487846][T18954] ? __pfx_setup_net+0x10/0x10 [ 849.487869][T18954] ? debug_mutex_init+0x37/0x70 [ 849.487888][T18954] copy_net_ns+0x2f8/0x690 [ 849.487904][T18954] create_new_namespaces+0x3ea/0xa90 [ 849.487927][T18954] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 849.487948][T18954] ksys_unshare+0x45b/0xa40 [ 849.487969][T18954] ? __pfx_ksys_unshare+0x10/0x10 [ 849.487991][T18954] ? xfd_validate_state+0x61/0x180 [ 849.488010][T18954] __x64_sys_unshare+0x31/0x40 [ 849.488030][T18954] do_syscall_64+0xcd/0x4b0 [ 849.488050][T18954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.488064][T18954] RIP: 0033:0x7fe6eef8eec9 [ 849.488077][T18954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.488092][T18954] RSP: 002b:00007fe6efef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 849.488107][T18954] RAX: ffffffffffffffda RBX: 00007fe6ef1e5fa0 RCX: 00007fe6eef8eec9 [ 849.488116][T18954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 849.488125][T18954] RBP: 00007fe6ef011f91 R08: 0000000000000000 R09: 0000000000000000 [ 849.488134][T18954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.488143][T18954] R13: 00007fe6ef1e6038 R14: 00007fe6ef1e5fa0 R15: 00007ffe44905bf8 [ 849.488163][T18954] [ 849.488171][T18954] socket: no more sockets [ 850.107908][T18957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2622'. [ 850.352502][T18954] Failed to initialize the IGMP autojoin socket (err -23) [ 850.494457][T11885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.714278][T11885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.066886][T11885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.477599][T11885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.634145][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 851.643537][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 851.654074][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 851.662872][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 851.670823][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 851.841713][T11886] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 5 with max blocks 1 with error 117 [ 851.941591][T11886] EXT4-fs (sda1): This should not happen!! Data will be lost [ 851.941591][T11886] [ 852.064306][T11885] bridge_slave_0: left allmulticast mode [ 852.069962][T11885] bridge_slave_0: left promiscuous mode [ 852.115305][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.743851][T18975] zswap: compressor not available [ 853.057559][T11885] erspan0 (unregistering): left allmulticast mode [ 853.214775][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 853.292069][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 853.420807][T18985] zswap: compressor not available [ 853.711530][ T5848] Bluetooth: hci3: command tx timeout [ 853.929193][T11885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.966398][T11885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.982563][T11885] bond0 (unregistering): Released all slaves [ 854.532169][T19027] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2633'. [ 854.602386][T19027] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2633'. [ 854.643318][T19027] netlink: 294 bytes leftover after parsing attributes in process `syz.3.2633'. [ 854.709747][T19027] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2633'. [ 854.910983][T11885] hsr_slave_0: left promiscuous mode [ 854.943724][T19038] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2635'. [ 854.977493][T11885] hsr_slave_1: left promiscuous mode [ 855.000622][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.035286][T11885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.086977][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.116051][T11885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.187406][T11885] veth1_macvtap: left promiscuous mode [ 855.217897][T11885] veth0_macvtap: left promiscuous mode [ 855.246600][ T5848] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 855.247061][T11885] veth1_vlan: left promiscuous mode [ 855.308569][T11885] veth0_vlan: left promiscuous mode [ 855.792204][ T5848] Bluetooth: hci3: command tx timeout [ 856.137555][T11885] team0 (unregistering): Port device team_slave_1 removed [ 856.224859][T11885] team0 (unregistering): Port device team_slave_0 removed [ 856.274920][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 856.635332][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2639'. [ 857.013330][T18973] chnl_net:caif_netlink_parms(): no params data found [ 857.219208][T19062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2641'. [ 857.523951][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.550598][T19083] busy [ 857.559341][T18973] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.625695][T18973] bridge_slave_0: entered allmulticast mode [ 857.670955][T18973] bridge_slave_0: entered promiscuous mode [ 857.745261][T18973] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.794242][T18973] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.841320][T18973] bridge_slave_1: entered allmulticast mode [ 857.879280][ T5848] Bluetooth: hci3: command tx timeout [ 857.891654][T18973] bridge_slave_1: entered promiscuous mode [ 858.104691][T18973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.167658][T18973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.350549][T18973] team0: Port device team_slave_0 added [ 858.385927][T18973] team0: Port device team_slave_1 added [ 858.589999][T19116] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 858.762909][T18973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.792301][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.883641][T18973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.962531][T18973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.004014][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.120854][T18973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.475141][T18973] hsr_slave_0: entered promiscuous mode [ 859.510974][T18973] hsr_slave_1: entered promiscuous mode [ 859.570893][T18973] debugfs: 'hsr0' already exists in 'hsr' [ 859.603556][T18973] Cannot create hsr debugfs directory [ 859.952402][ T5848] Bluetooth: hci3: command tx timeout [ 860.036305][T19147] FAULT_INJECTION: forcing a failure. [ 860.036305][T19147] name failslab, interval 1, probability 0, space 0, times 0 [ 860.099441][T19147] CPU: 1 UID: 0 PID: 19147 Comm: syz.3.2653 Tainted: G U syzkaller #0 PREEMPT(full) [ 860.099467][T19147] Tainted: [U]=USER [ 860.099472][T19147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 860.099483][T19147] Call Trace: [ 860.099489][T19147] [ 860.099495][T19147] dump_stack_lvl+0x16c/0x1f0 [ 860.099527][T19147] should_fail_ex+0x512/0x640 [ 860.099547][T19147] ? fs_reclaim_acquire+0xae/0x150 [ 860.099569][T19147] should_failslab+0xc2/0x120 [ 860.099590][T19147] __kmalloc_noprof+0xdd/0x880 [ 860.099604][T19147] ? tomoyo_encode2+0x100/0x3e0 [ 860.099623][T19147] ? tomoyo_encode2+0x100/0x3e0 [ 860.099637][T19147] tomoyo_encode2+0x100/0x3e0 [ 860.099654][T19147] tomoyo_encode+0x29/0x50 [ 860.099668][T19147] tomoyo_realpath_from_path+0x18f/0x6e0 [ 860.099689][T19147] tomoyo_path_number_perm+0x245/0x580 [ 860.099710][T19147] ? tomoyo_path_number_perm+0x237/0x580 [ 860.099733][T19147] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 860.099755][T19147] ? find_held_lock+0x2b/0x80 [ 860.099790][T19147] ? find_held_lock+0x2b/0x80 [ 860.099806][T19147] ? hook_file_ioctl_common+0x145/0x410 [ 860.099824][T19147] ? __fget_files+0x20e/0x3c0 [ 860.099843][T19147] security_file_ioctl+0x9b/0x240 [ 860.099858][T19147] __x64_sys_ioctl+0xb7/0x210 [ 860.099881][T19147] do_syscall_64+0xcd/0x4b0 [ 860.099901][T19147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.099922][T19147] RIP: 0033:0x7fe6eef8eec9 [ 860.099937][T19147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.099952][T19147] RSP: 002b:00007fe6efef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.099966][T19147] RAX: ffffffffffffffda RBX: 00007fe6ef1e5fa0 RCX: 00007fe6eef8eec9 [ 860.099975][T19147] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000006 [ 860.099984][T19147] RBP: 00007fe6efef4090 R08: 0000000000000000 R09: 0000000000000000 [ 860.099993][T19147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.100001][T19147] R13: 00007fe6ef1e6038 R14: 00007fe6ef1e5fa0 R15: 00007ffe44905bf8 [ 860.100020][T19147] [ 860.100035][T19147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 860.462790][T19152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2652'. [ 860.899096][T18973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 860.977343][T18973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 861.024717][T18973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 861.044573][T19162] zram: Can't change algorithm for initialized device [ 861.076779][T18973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 861.414563][ T30] audit: type=1800 audit(4294968326.429:16): pid=19184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2658" name="lu_gp_id" dev="configfs" ino=71009 res=0 errno=0 [ 861.696996][T18973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.796831][T18973] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.909609][T11885] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.916748][T11885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.980844][T11885] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.988046][T11885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.166154][T19204] rtc_cmos 00:00: Alarms can be up to one day in the future [ 862.765617][T18973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.965062][T16723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 863.005050][T16723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 863.012587][T16723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 863.099857][T16723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 863.141480][T16723] rtc rtc0: __rtc_set_alarm: err=-22 [ 863.646356][T18973] veth0_vlan: entered promiscuous mode [ 863.697347][T18973] veth1_vlan: entered promiscuous mode [ 863.915887][T18973] veth0_macvtap: entered promiscuous mode [ 863.951793][T18973] veth1_macvtap: entered promiscuous mode [ 864.024323][T18973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.057055][T18973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.097828][T11884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.127549][T11884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.173025][T11884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.196512][T11884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.336684][T11903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.375789][T11903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.549381][T11885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.599184][T19252] tipc: Started in network mode [ 864.608015][T11885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.626238][T19252] tipc: Node identity ee00, cluster identity 4711 [ 864.672563][T19252] tipc: Node number set to 60928 [ 864.824246][T19263] zram: Can't change algorithm for initialized device [ 865.016205][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2625'. [ 865.114328][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 865.120210][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 865.120240][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 865.127710][T19274] vivid-007: ================= START STATUS ================= [ 865.127725][T19274] vivid-007: Generate PTS: true [ 865.127756][T19274] vivid-007: Generate SCR: true [ 865.127772][T19274] tpg source WxH: 320x240 (Y'CbCr) [ 865.127782][T19274] tpg field: 1 [ 865.127788][T19274] tpg crop: (0,0)/320x240 [ 865.127798][T19274] tpg compose: (0,0)/320x240 [ 865.127809][T19274] tpg colorspace: 8 [ 865.127815][T19274] tpg transfer function: 0/0 [ 865.127822][T19274] tpg Y'CbCr encoding: 0/0 [ 865.127830][T19274] tpg quantization: 0/0 [ 865.127837][T19274] tpg RGB range: 0/2 [ 865.127844][T19274] vivid-007: ================== END STATUS ================== [ 866.137968][T19284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 866.138130][T19284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 866.138209][T19284] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 866.167393][T19284] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 866.184128][T19284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 866.186211][T19284] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 866.198975][T19284] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 866.200528][T19284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 866.200619][T19284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 866.203467][T19284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 866.207691][T19284] CPU0 is offline. [ 866.945656][T19309] futex_wake_op: syz.0.2676 tries to shift op by -2048; fix this program [ 866.945839][T19309] futex_wake_op: syz.0.2676 tries to shift op by -2048; fix this program [ 866.945948][T19310] futex_wake_op: syz.0.2676 tries to shift op by -2048; fix this program [ 867.508615][T19323] nla_validate_range_unsigned: 3 callbacks suppressed [ 867.508633][T19323] netlink: 'syz.5.2678': attribute type 11 has an invalid length. [ 867.508648][T19323] netlink: 'syz.5.2678': attribute type 11 has an invalid length. [ 867.508659][T19323] netlink: 'syz.5.2678': attribute type 11 has an invalid length. [ 867.508669][T19323] netlink: 'syz.5.2678': attribute type 11 has an invalid length. [ 867.878299][T13845] Bluetooth: hci2: command 0x040f tx timeout [ 868.195545][T13845] Bluetooth: hci0: command 0x0c1a tx timeout [ 868.195600][T13845] Bluetooth: hci1: command 0x0c1a tx timeout [ 868.279939][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 868.567264][T19350] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 868.748272][T19353] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 869.393358][T19339] tty tty1: ldisc open failed (-12), clearing slot 0 [ 869.752710][T19373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2690'. [ 869.786270][T19373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.818894][T19373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.879715][T19373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.905148][T19373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.046608][T19385] FAULT_INJECTION: forcing a failure. [ 870.046608][T19385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 870.219187][T19385] CPU: 1 UID: 0 PID: 19385 Comm: syz.5.2691 Tainted: G U syzkaller #0 PREEMPT(full) [ 870.219213][T19385] Tainted: [U]=USER [ 870.219218][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 870.219227][T19385] Call Trace: [ 870.219233][T19385] [ 870.219240][T19385] dump_stack_lvl+0x16c/0x1f0 [ 870.219264][T19385] should_fail_ex+0x512/0x640 [ 870.219288][T19385] should_fail_alloc_page+0xe7/0x130 [ 870.219311][T19385] prepare_alloc_pages+0x3c2/0x610 [ 870.219335][T19385] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 870.219357][T19385] ? find_held_lock+0x2b/0x80 [ 870.219376][T19385] ? is_bpf_text_address+0x8a/0x1a0 [ 870.219397][T19385] ? bpf_ksym_find+0x124/0x1c0 [ 870.219414][T19385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 870.219430][T19385] ? is_bpf_text_address+0x94/0x1a0 [ 870.219451][T19385] ? kernel_text_address+0x8d/0x100 [ 870.219468][T19385] ? __kernel_text_address+0xd/0x40 [ 870.219483][T19385] ? unwind_get_return_address+0x59/0xa0 [ 870.219508][T19385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 870.219526][T19385] ? policy_nodemask+0xea/0x4e0 [ 870.219547][T19385] alloc_pages_mpol+0x1fb/0x550 [ 870.219568][T19385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 870.219588][T19385] ? kasan_save_stack+0x33/0x60 [ 870.219604][T19385] ? kasan_save_track+0x14/0x30 [ 870.219620][T19385] ? __kasan_kmalloc+0xaa/0xb0 [ 870.219635][T19385] ? __get_vm_area_node+0x101/0x330 [ 870.219658][T19385] alloc_pages_noprof+0x131/0x390 [ 870.219679][T19385] get_free_pages_noprof+0x10/0xb0 [ 870.219697][T19385] kasan_populate_vmalloc+0x9f/0x2d0 [ 870.219713][T19385] ? alloc_vmap_area+0x8b5/0x29e0 [ 870.219736][T19385] alloc_vmap_area+0x960/0x29e0 [ 870.219763][T19385] ? __pfx_alloc_vmap_area+0x10/0x10 [ 870.219788][T19385] __get_vm_area_node+0x1ca/0x330 [ 870.219820][T19385] __vmalloc_node_range_noprof+0x271/0x1480 [ 870.219842][T19385] ? n_tty_open+0x1a/0x170 [ 870.219856][T19385] ? look_up_lock_class+0x59/0x150 [ 870.219880][T19385] ? n_tty_open+0x1a/0x170 [ 870.219898][T19385] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 870.219919][T19385] ? console_unlock+0x184/0x210 [ 870.219936][T19385] ? __pfx_console_unlock+0x10/0x10 [ 870.219954][T19385] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 870.219971][T19385] ? n_tty_open+0x1a/0x170 [ 870.219983][T19385] __vmalloc_node_noprof+0xad/0xf0 [ 870.220004][T19385] ? n_tty_open+0x1a/0x170 [ 870.220017][T19385] ? __pfx_n_tty_open+0x10/0x10 [ 870.220031][T19385] n_tty_open+0x1a/0x170 [ 870.220044][T19385] ? __pfx_n_tty_open+0x10/0x10 [ 870.220057][T19385] tty_ldisc_open+0x9c/0x120 [ 870.220075][T19385] tty_ldisc_setup+0x40/0x100 [ 870.220095][T19385] tty_init_dev.part.0+0x1ec/0x500 [ 870.220118][T19385] tty_open+0xa4f/0xf90 [ 870.220142][T19385] ? __pfx_tty_open+0x10/0x10 [ 870.220163][T19385] ? chrdev_open+0x10b/0x6a0 [ 870.220184][T19385] ? __pfx_tty_open+0x10/0x10 [ 870.220204][T19385] chrdev_open+0x234/0x6a0 [ 870.220221][T19385] ? __pfx_apparmor_file_open+0x10/0x10 [ 870.220242][T19385] ? __pfx_chrdev_open+0x10/0x10 [ 870.220261][T19385] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 870.220282][T19385] do_dentry_open+0x982/0x1530 [ 870.220300][T19385] ? __pfx_chrdev_open+0x10/0x10 [ 870.220322][T19385] vfs_open+0x82/0x3f0 [ 870.220345][T19385] path_openat+0x1de4/0x2cb0 [ 870.220370][T19385] ? __pfx_path_openat+0x10/0x10 [ 870.220392][T19385] do_filp_open+0x20b/0x470 [ 870.220409][T19385] ? __pfx_do_filp_open+0x10/0x10 [ 870.220440][T19385] ? alloc_fd+0x471/0x7d0 [ 870.220461][T19385] do_sys_openat2+0x11b/0x1d0 [ 870.220482][T19385] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.220511][T19385] __x64_sys_openat+0x174/0x210 [ 870.220533][T19385] ? __pfx___x64_sys_openat+0x10/0x10 [ 870.220563][T19385] do_syscall_64+0xcd/0x4b0 [ 870.220582][T19385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.220597][T19385] RIP: 0033:0x7f3efcb8eec9 [ 870.220609][T19385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.220623][T19385] RSP: 002b:00007f3efdab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 870.220637][T19385] RAX: ffffffffffffffda RBX: 00007f3efcde6090 RCX: 00007f3efcb8eec9 [ 870.220647][T19385] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 870.220657][T19385] RBP: 00007f3efcc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 870.220666][T19385] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 870.220676][T19385] R13: 00007f3efcde6128 R14: 00007f3efcde6090 R15: 00007ffe3912cb08 [ 870.220696][T19385] [ 870.220928][T19385] syz.5.2691: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 870.705240][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 870.725267][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 870.733000][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 870.743394][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.753214][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.021256][T19406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.354179][T19385] ,cpuset=/,mems_allowed=0-1 [ 872.389009][T19385] CPU: 1 UID: 0 PID: 19385 Comm: syz.5.2691 Tainted: G U syzkaller #0 PREEMPT(full) [ 872.389034][T19385] Tainted: [U]=USER [ 872.389040][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 872.389048][T19385] Call Trace: [ 872.389054][T19385] [ 872.389060][T19385] dump_stack_lvl+0x16c/0x1f0 [ 872.389082][T19385] warn_alloc+0x248/0x3a0 [ 872.389099][T19385] ? __pfx_warn_alloc+0x10/0x10 [ 872.389116][T19385] ? __get_vm_area_node+0x2cd/0x330 [ 872.389140][T19385] ? __get_vm_area_node+0x2cd/0x330 [ 872.389158][T19385] ? __get_vm_area_node+0x1dc/0x330 [ 872.389176][T19385] ? __get_vm_area_node+0x208/0x330 [ 872.389200][T19385] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 872.389221][T19385] ? look_up_lock_class+0x59/0x150 [ 872.389243][T19385] ? n_tty_open+0x1a/0x170 [ 872.389262][T19385] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 872.389282][T19385] ? console_unlock+0x184/0x210 [ 872.389298][T19385] ? __pfx_console_unlock+0x10/0x10 [ 872.389316][T19385] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 872.389333][T19385] ? n_tty_open+0x1a/0x170 [ 872.389352][T19385] __vmalloc_node_noprof+0xad/0xf0 [ 872.389373][T19385] ? n_tty_open+0x1a/0x170 [ 872.389386][T19385] ? __pfx_n_tty_open+0x10/0x10 [ 872.389399][T19385] n_tty_open+0x1a/0x170 [ 872.389412][T19385] ? __pfx_n_tty_open+0x10/0x10 [ 872.389424][T19385] tty_ldisc_open+0x9c/0x120 [ 872.389442][T19385] tty_ldisc_setup+0x40/0x100 [ 872.389461][T19385] tty_init_dev.part.0+0x1ec/0x500 [ 872.389484][T19385] tty_open+0xa4f/0xf90 [ 872.389509][T19385] ? __pfx_tty_open+0x10/0x10 [ 872.389529][T19385] ? chrdev_open+0x10b/0x6a0 [ 872.389550][T19385] ? __pfx_tty_open+0x10/0x10 [ 872.389569][T19385] chrdev_open+0x234/0x6a0 [ 872.389586][T19385] ? __pfx_apparmor_file_open+0x10/0x10 [ 872.389607][T19385] ? __pfx_chrdev_open+0x10/0x10 [ 872.389625][T19385] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 872.389650][T19385] do_dentry_open+0x982/0x1530 [ 872.389668][T19385] ? __pfx_chrdev_open+0x10/0x10 [ 872.389690][T19385] vfs_open+0x82/0x3f0 [ 872.389712][T19385] path_openat+0x1de4/0x2cb0 [ 872.389736][T19385] ? __pfx_path_openat+0x10/0x10 [ 872.389758][T19385] do_filp_open+0x20b/0x470 [ 872.389775][T19385] ? __pfx_do_filp_open+0x10/0x10 [ 872.389806][T19385] ? alloc_fd+0x471/0x7d0 [ 872.389828][T19385] do_sys_openat2+0x11b/0x1d0 [ 872.389849][T19385] ? __pfx_do_sys_openat2+0x10/0x10 [ 872.389878][T19385] __x64_sys_openat+0x174/0x210 [ 872.389899][T19385] ? __pfx___x64_sys_openat+0x10/0x10 [ 872.389929][T19385] do_syscall_64+0xcd/0x4b0 [ 872.389948][T19385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.389963][T19385] RIP: 0033:0x7f3efcb8eec9 [ 872.389974][T19385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.389988][T19385] RSP: 002b:00007f3efdab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 872.390002][T19385] RAX: ffffffffffffffda RBX: 00007f3efcde6090 RCX: 00007f3efcb8eec9 [ 872.390012][T19385] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 872.390021][T19385] RBP: 00007f3efcc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 872.390029][T19385] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 872.390038][T19385] R13: 00007f3efcde6128 R14: 00007f3efcde6090 R15: 00007ffe3912cb08 [ 872.390058][T19385] [ 872.395227][T19385] Mem-Info: [ 872.862092][T13845] Bluetooth: hci3: command 0x0c1a tx timeout [ 872.868853][T13845] Bluetooth: hci0: command 0x0c1a tx timeout [ 872.874852][T13845] Bluetooth: hci1: command 0x0c1a tx timeout [ 873.163740][T19435] zswap: compressor not available [ 873.360785][T19447] zram: Can't change algorithm for initialized device [ 873.820290][T19385] active_anon:4488 inactive_anon:33449 isolated_anon:0 [ 873.820290][T19385] active_file:26098 inactive_file:38382 isolated_file:0 [ 873.820290][T19385] unevictable:768 dirty:13 writeback:0 [ 873.820290][T19385] slab_reclaimable:11985 slab_unreclaimable:94644 [ 873.820290][T19385] mapped:44759 shmem:25433 pagetables:1501 [ 873.820290][T19385] sec_pagetables:0 bounce:0 [ 873.820290][T19385] kernel_misc_reclaimable:0 [ 873.820290][T19385] free:1283743 free_pcp:10790 free_cma:0 [ 874.079743][T19385] Node 0 active_anon:17928kB inactive_anon:138536kB active_file:104388kB inactive_file:153396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179620kB dirty:272kB writeback:0kB shmem:100680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:16384kB kernel_stack:12624kB pagetables:5812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 874.279667][T19385] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 874.490027][T19385] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.671176][T19385] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 874.718284][T19385] Node 0 DMA32 free:1206880kB boost:0kB min:34396kB low:42992kB high:51588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17928kB inactive_anon:141424kB active_file:104388kB inactive_file:153444kB unevictable:1536kB writepending:168kB zspages:28kB present:3129332kB managed:2547976kB mlocked:0kB bounce:0kB free_pcp:39232kB local_pcp:39232kB free_cma:0kB [ 874.936656][T19385] lowmem_reserve[]: 0 0 0 0 0 [ 874.963408][T19385] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.148421][T19385] lowmem_reserve[]: 0 0 0 0 0 [ 875.193158][T19385] Node 1 Normal free:3909456kB boost:0kB min:55500kB low:69372kB high:83244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:748kB free_cma:0kB [ 875.404618][T19385] lowmem_reserve[]: 0 0 0 0 0 [ 875.439107][T19385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 875.517899][T19385] Node 0 DMA32: 106*4kB (UME) 41*8kB (UE) 73*16kB (UE) 1656*32kB (ME) 1638*64kB (UME) 1243*128kB (UME) 838*256kB (UM) 409*512kB (UM) 169*1024kB (UM) 3*2048kB (UE) 66*4096kB (UM) = 1192320kB [ 875.650680][T19385] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 875.731832][T19385] Node 1 Normal: 132*4kB (UME) 38*8kB (UE) 37*16kB (UE) 230*32kB (UE) 102*64kB (UE) 27*128kB (UE) 14*256kB (UME) 10*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (UM) = 3909456kB [ 875.825786][T19385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.894253][T19385] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 875.957918][T19385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.041102][T19385] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 876.099320][T19385] 97179 total pagecache pages [ 876.141673][T19385] 17 pages in swap cache [ 876.167889][T19385] Free swap = 124900kB [ 876.176528][T19493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2706'. [ 876.191817][T19385] Total swap = 124996kB [ 876.219198][T19385] 2097051 pages RAM [ 876.252075][T19385] 0 pages HighMem/MovableOnly [ 876.273435][T19385] 428415 pages reserved [ 876.279699][T19493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2706'. [ 876.309400][T19385] 0 pages cma reserved [ 876.317746][T19385] tty tty26: ldisc open failed (-12), clearing slot 25 [ 876.349785][T19493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2706'. [ 876.585878][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 878.575695][T19563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2716'. [ 878.949367][T19556] zswap: compressor not available [ 880.392339][T19597] zram: Can't change algorithm for initialized device [ 881.507934][T19613] zram: Can't change algorithm for initialized device [ 881.731834][T19608] zswap: compressor not available [ 882.211246][T19630] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2729'. [ 882.385365][T19634] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2728'. [ 883.033253][T19645] ubi0: attaching mtd0 [ 883.065878][T19645] ubi0: scanning is finished [ 883.133762][T19645] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 883.757880][T19645] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 883.994728][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2735'. [ 884.220067][T19663] vivid-007: ================= START STATUS ================= [ 884.270779][T19663] vivid-007: Generate PTS: true [ 884.304640][T19663] vivid-007: Generate SCR: true [ 884.353846][T19663] tpg source WxH: 320x240 (Y'CbCr) [ 884.368998][T19663] tpg field: 1 [ 884.389441][T19663] tpg crop: (0,0)/320x240 [ 884.430163][T19663] tpg compose: (0,0)/320x240 [ 884.477815][T19663] tpg colorspace: 8 [ 884.495147][T19663] tpg transfer function: 0/0 [ 884.525818][T19663] tpg Y'CbCr encoding: 0/0 [ 884.553598][T19663] tpg quantization: 0/0 [ 884.572747][T19663] tpg RGB range: 0/2 [ 884.603838][T19663] vivid-007: ================== END STATUS ================== [ 886.772647][T19684] zswap: compressor not available [ 887.087903][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'. [ 887.223270][T19705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2742'. [ 887.734240][T19692] kexec: Could not allocate control_code_buffer [ 887.865205][T19717] busy [ 888.021317][T19723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 888.319224][T19725] zswap: compressor 000 not available [ 888.525846][T19736] zram: Can't change algorithm for initialized device [ 889.047796][T19739] zswap: compressor not available [ 889.150551][T19749] zram: Can't change algorithm for initialized device [ 889.556806][T19753] sock: sock_timestamping_bind_phc: sock not bind to device [ 889.593108][T19753] FAULT_INJECTION: forcing a failure. [ 889.593108][T19753] name failslab, interval 1, probability 0, space 0, times 0 [ 889.658638][T19753] CPU: 1 UID: 0 PID: 19753 Comm: syz.5.2752 Tainted: G U syzkaller #0 PREEMPT(full) [ 889.658669][T19753] Tainted: [U]=USER [ 889.658675][T19753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 889.658685][T19753] Call Trace: [ 889.658690][T19753] [ 889.658697][T19753] dump_stack_lvl+0x16c/0x1f0 [ 889.658721][T19753] should_fail_ex+0x512/0x640 [ 889.658742][T19753] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 889.658761][T19753] should_failslab+0xc2/0x120 [ 889.658782][T19753] kmem_cache_alloc_noprof+0x75/0x6e0 [ 889.658799][T19753] ? alloc_empty_file+0x55/0x1e0 [ 889.658823][T19753] ? alloc_empty_file+0x55/0x1e0 [ 889.658842][T19753] alloc_empty_file+0x55/0x1e0 [ 889.658863][T19753] alloc_file_pseudo+0x13a/0x230 [ 889.658885][T19753] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 889.658906][T19753] ? alloc_fd+0x471/0x7d0 [ 889.658924][T19753] sock_alloc_file+0x50/0x210 [ 889.658947][T19753] __sys_socket+0x1c0/0x260 [ 889.658964][T19753] ? __pfx___sys_socket+0x10/0x10 [ 889.658982][T19753] ? xfd_validate_state+0x61/0x180 [ 889.658995][T19753] ? __pfx_ksys_write+0x10/0x10 [ 889.659015][T19753] __x64_sys_socket+0x72/0xb0 [ 889.659031][T19753] ? lockdep_hardirqs_on+0x7c/0x110 [ 889.659047][T19753] do_syscall_64+0xcd/0x4b0 [ 889.659065][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.659080][T19753] RIP: 0033:0x7f3efcb8eec9 [ 889.659093][T19753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.659106][T19753] RSP: 002b:00007f3efdad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 889.659120][T19753] RAX: ffffffffffffffda RBX: 00007f3efcde5fa0 RCX: 00007f3efcb8eec9 [ 889.659130][T19753] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 889.659138][T19753] RBP: 00007f3efcc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.659147][T19753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.659156][T19753] R13: 00007f3efcde6038 R14: 00007f3efcde5fa0 R15: 00007ffe3912cb08 [ 889.659174][T19753] [ 890.902419][T19775] ubi0: attaching mtd0 [ 890.920350][T19775] ubi0: scanning is finished [ 890.939690][T19775] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 891.119073][T19775] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 891.477325][T19782] netlink: 'syz.5.2758': attribute type 1 has an invalid length. [ 891.501581][T19788] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2760'. [ 893.294747][T19826] random: crng reseeded on system resumption [ 893.730271][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 894.369944][T19849] netlink: 'syz.0.2770': attribute type 4 has an invalid length. [ 894.377712][T19849] netlink: 314 bytes leftover after parsing attributes in process `syz.0.2770'. [ 895.299959][T11885] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 5 with max blocks 4 with error 117 [ 895.404539][T19875] binder: 19874:19875 ioctl 40047459 2000000000c0 returned -22 [ 895.418898][T11885] EXT4-fs (sda1): This should not happen!! Data will be lost [ 895.418898][T11885] [ 895.669580][T19881] netlink: 'syz.0.2776': attribute type 11 has an invalid length. [ 895.737541][T19881] netlink: 'syz.0.2776': attribute type 11 has an invalid length. [ 895.757356][T19870] zswap: compressor not available [ 895.773487][T19881] netlink: 'syz.0.2776': attribute type 11 has an invalid length. [ 895.817476][T19881] netlink: 'syz.0.2776': attribute type 11 has an invalid length. [ 896.004744][T19891] netlink: 4884 bytes leftover after parsing attributes in process `syz.2.2778'. [ 896.047554][T19891] netlink: 5113 bytes leftover after parsing attributes in process `syz.2.2778'. [ 896.284931][T19899] zram: Can't change algorithm for initialized device [ 896.597421][T19907] can: request_module (can-proto-5) failed. [ 896.949437][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 897.006704][T19916] vivid-007: ================= START STATUS ================= [ 897.036731][T19916] vivid-007: Generate PTS: true [ 897.052191][T19916] vivid-007: Generate SCR: true [ 897.075749][T19916] tpg source WxH: 320x240 (Y'CbCr) [ 897.102368][T19916] tpg field: 1 [ 897.121513][T19916] tpg crop: (0,0)/320x240 [ 897.137046][T19916] tpg compose: (0,0)/320x240 [ 897.180951][T19916] tpg colorspace: 8 [ 897.189106][T19916] tpg transfer function: 0/0 [ 897.217792][T19916] tpg Y'CbCr encoding: 0/0 [ 897.241692][T19916] tpg quantization: 0/0 [ 897.263373][T19916] tpg RGB range: 0/2 [ 897.284140][T19916] vivid-007: ================== END STATUS ================== [ 897.616507][T19930] zram: Can't change algorithm for initialized device [ 898.621420][T19948] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2795'. [ 898.643700][T19944] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 898.668308][T19948] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2795'. [ 898.725401][T19948] netlink: 290 bytes leftover after parsing attributes in process `syz.2.2795'. [ 898.781583][T19948] veth0_macvtap: left promiscuous mode [ 898.811388][T19949] netlink: 290 bytes leftover after parsing attributes in process `syz.2.2795'. [ 898.835985][T19952] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2796'. [ 898.904306][T19956] netlink: 86 bytes leftover after parsing attributes in process `syz.0.2796'. [ 899.124444][T19966] netlink: 'syz.0.2797': attribute type 11 has an invalid length. [ 899.165511][T19966] netlink: 'syz.0.2797': attribute type 11 has an invalid length. [ 899.198207][T19938] zswap: compressor not available [ 899.209174][T19966] netlink: 'syz.0.2797': attribute type 11 has an invalid length. [ 899.235095][T19966] netlink: 'syz.0.2797': attribute type 11 has an invalid length.