last executing test programs: 3m52.470598382s ago: executing program 1 (id=1361): futex_waitv$auto(&(0x7f0000000000)={0x7fffffff, 0xb167, 0x7f}, 0xd5e, 0xa, &(0x7f0000000040)={0x40, 0x8}, 0x0) (async) r0 = prctl$auto_PR_SYS_DISPATCH_OFF(0x8, 0x0, 0x0, 0xc, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$auto_SNAPSHOT_POWER_OFF(r0, 0xc0045878, 0x0) (async) ioctl$auto(r0, 0x6, r0) prctl$auto_PR_SET_MM(0x23, 0x10c, r0, 0x8, 0x8) (async) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0xde83, 0x1, 0x0, 0xff, 0x6a7a0208) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x9, 0x40, &(0x7f00000000c0)='-^\\\')+\x00', &(0x7f0000000100)=0x1) (async) r2 = syz_clone3(&(0x7f0000000680)={0x42100, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0, {0xe}, &(0x7f00000004c0)=""/94, 0x5e, &(0x7f0000000540)=""/211, &(0x7f0000000640)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = syz_clone3(&(0x7f0000000740)={0x101004080, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, {0xd}, &(0x7f0000000200)=""/197, 0xc5, &(0x7f0000000300)=""/236, &(0x7f0000000700)=[r2, 0xffffffffffffffff], 0x2, {r0}}, 0x58) setsockopt$auto_SO_PASSPIDFD(r5, 0x6, 0x4c, &(0x7f00000007c0)='$\xf6.\\!\\:\x00', 0x9) (async) futex$auto(&(0x7f0000000800)=0x2, 0x8, 0xb1a7, &(0x7f0000000840)={0x2, 0x7}, &(0x7f0000000880)=0x4ed, 0x9) (async) r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000008c0), 0x212080, 0x0) (async) r9 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x80080, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)=@bpf_attr_1={r9, 0x400, @value=0x101, 0x1000}, 0x101) sendmmsg$auto(r8, &(0x7f0000000c40)={{&(0x7f0000000a00)="d148c2e0eb0bab8884cea58a9a3dd3c67ca929c990a48df0e811fec0ed6db50040940076ffefb5aee4dd9f106a7203414cdefe4abccf358da825bebdcbfa61bc7f8cc856dcd84019b3e1ed9312edff22c401ea69d20a0701d22cbdf58bde58ab42360a7a5fe03a6926e9e56da0c8eb1305ed92aebf418eca43cd60abf847d0d3a968ed14b26944ce2c1e9a57b16aab65b09346bb27aa", 0x7, &(0x7f0000000b80)={&(0x7f0000000ac0)="1ad77c3f1ae7dccd15253a7f895e2d4d374bca20b7779b258c9731aacdd9ed4261c71783c58d037e3938eb114dad3bbcac9004498bf3a86212bf612629e001b4675b2b03b1edf7a5b9a52ad6c0d2396372deb626fb0f56d0066c2523bb4bfe9839a6fd0c76a803bcfb2dd80b98bc43e2562cd843117d4cb96fca137b5fb555ba499992de235f438e9b8a15bfc8c99e8266a8d0e3a007d5e7023e4e9fec7d95373e29b7ec0f3856adc7e8a7b95fddb4991cbfe7bef0276ce8fc", 0x7}, 0xc0, &(0x7f0000000bc0)="44d0410e0edee8b2251056704718aad0a7eccd6f5bbf05a84905ed14e950eb1d0209ca04aa1635a8024367b0f511b662890d1b132dc7f205927e88a22604845207f21f7b9ed2e798e13d6de67a6872f213de14de78399db048b2592d8c3df305a4c6cb22a309238c8b21b5b0d9e0d9c10d7ae3548db1af80480462eb86beca", 0xffffffffffffffff, 0x7fff}, 0xffff}, 0x4, 0x8) (async) process_madvise$auto_MADV_DOFORK(r10, &(0x7f0000000d00)={&(0x7f0000000c80)="27f47dd45d477cd6146cace3e155d8f64c6a4883587a58a9005528b191a15b5b08afb3b1d7fef3c5d47c27a1abf002b9fb154d4381436928efa67e8db6baf52091a2482d3b7bc40b80ef38b5f944a32bb0bb783a2fed08a99fdb33", 0x7}, 0x6, 0xb, 0x0) syz_clone3(&(0x7f0000000f00)={0x100000000, &(0x7f0000000d40)=0xffffffffffffffff, &(0x7f0000000d80), &(0x7f0000000dc0), {0x24}, &(0x7f0000000e00)=""/27, 0x1b, &(0x7f0000000e40)=""/70, &(0x7f0000000ec0)=[r3, r6, r4, r6, r7], 0x5, {r0}}, 0x58) process_madvise$auto_MADV_POPULATE_WRITE(r11, &(0x7f0000001080)={&(0x7f0000000f80)="b01d84e3d2d34d483ac75da73d7933c65f1b1fecb34732910eef03b51cd35bf55f19c7f58b2b52481073270960eaf369137ecd79f1c52870edc8902f30f500dd169d8244b63ce58a28aacacc8623bbfa74f5123ad5dbee0dbf60aa341536df9b74ca426418eae61bcc6626a48727f5135dc4e39da8b83b70f2c8853b09641b0d0202a5b3cb21e147d6c6c38b3579c021386a6437467685fadcddb06c8f3a82d338883ab484ac34e2d24f3be8f49ece6608311926ec95a3e284fce7801d12f3038b6fafb88647c05cd6e9e8d63e588683e17aa54f6491c19ae951397965a75977fd250220f155b420", 0x52}, 0x0, 0x17, 0x5) (async) r12 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000010c0), 0x402042, 0x0) ioctl$auto(r12, 0x8, r11) (async) pselect6$auto(0x4, &(0x7f0000001100)={[0x40, 0x363, 0x101, 0xad0, 0x7, 0x650, 0x6, 0x3, 0x4f4, 0x4, 0x5, 0x1, 0x7, 0x1, 0x0, 0xb3]}, &(0x7f0000001180)={[0x1, 0x20, 0xac, 0x1, 0x1, 0xffffffffffff8000, 0xd, 0xfffffffffffffff7, 0x5, 0x0, 0x0, 0x81, 0xbc, 0x0, 0x101]}, &(0x7f0000001200)={[0x80, 0x5, 0x447, 0x9, 0x41f, 0x8, 0x7, 0x0, 0x400, 0x7, 0xfffffffffffffff6, 0x3ff, 0x9, 0xffffffffffffffea, 0x3, 0x16312434]}, &(0x7f0000001280)={0x534c, 0x4}, &(0x7f00000012c0)="4aaf2a26538461a3f9254d1c612248a9d9636548bf155b903169202c80bf3aa0855a7b8fd7d74c6a8724a04b561405db62e147a5dd8b8a610985f34800dc05a69e9c5e112db501b37ea1091b2c4baa3c4a2f2fc4dbdeadd1877791e0f69d5f67957fc563f9a55f44c09eb822ec1515f6a3925068bc37b65211a6bbccdd988b8f357af589c8c49d816c1adbcaff0c949273b59246835af0e16c") madvise$auto(0x1, 0x18f, 0x3ab7) (async) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000013c0), r10) sendmsg$auto_NL80211_CMD_ADD_LINK(r1, &(0x7f0000001b80)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001400)={0x708, r13, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xb1, 0xbd, "e390cb75e0beaf24e6adbfb44c77df54c6bb03d68142a4441930e37cb586c63db93c05de4691b1eae883bf0c4049c7758eafdf9ccb0c220e1723a0289f51860531388218abdaa7dc7874a86df686ddcd30eca0e86381855767f9c95a90b08b0ce38d58704869da265e3601442617bd7a67c9c8762a51b512fe2256047786b563861663aa0708650f6dd10c1c0a4395256bfb27a12bbf99fecd26df39b5644a74a714169b9a788e21b72c51c85b"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x611, 0x84, 0x0, 0x1, [@nested={0x24e, 0x9f, 0x0, 0x1, [@generic="9ba28a63e022c1aa7a873e1efac7514bcfb187405bcef70e97bb2cfd9a7a200dda6bdd6cc78fc35c5fe661d6ad0eb629fb1d1d922b1745eae5a68248d9d6e8840fb408cec4000e52b889cdc10715560b4cd9c4b8be25404e94220b2e9a7e398249a094ad4b52124c8720dbc2c551f08f", @typed={0x8, 0x36, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8a, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x1}, @generic="f93a6e204f948a3752fbcc49d6bc0db3acf5a90cd44bac5362666fc096decc12888b85e2e77c1f4fd6c4b1273bbe02a53b815373ec330d1d63300f1ff707b3a1042cb620a284c06ee015bb0be911062544519b2c0dc2c1477e1405b1ac68c6a9233e2efe607e1a3aa7f6668d061b67ed5c8581056b183f600a0fdd47ef6202f0fd93844a1f3d77f8db3205af43556066348c2c44c87ac12cd5baa2499db1af6316850827560974a8d32ee38bd3eadc93dcde0dd36ec7851c9ef309f30f5b268628879d636aad99efd2adb48ac5fa62e79970ac", @typed={0xb, 0xe4, 0x0, 0x0, @str='-^\\\')+\x00'}, @nested={0x4, 0x1}, @generic="616c3f08c9bde8366dde8ac94b6020545c9c298f0cd1c5035b89b5", @generic="f0421b553cdeb23a7f7706ecd9c10a0312c1ecfa3ea794f5580bb993ab2ee44e45be69dd94ad94fa0b1c47ee284ab65873401a51162930ec61db7b13ea0ddc50e4a79b0585b10e889c4d1bff90a1c7ef766a776dad2bc28b44c4056e95d17f1876313cd474f441fc83d41eb12dacca131c7f12f464eb90733d245b6b4ea402b3eb89a41cbc2c8217451db0ae3f7d7a57576cfc01ad1b4dfcf5cb8a874a1cdbe082f90fe4425e0fafb0bacdaff89e7f2d5e4dbcb59d89875aace67fe4ef3fd9a5969c8154"]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x257}, @typed={0x8, 0x102, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xfb, 0xa9, 0x0, 0x1, [@typed={0x4, 0x67}, @generic="9ed9c238fb99599e8d6d678966d215423d57dd682f3917f616c4043a35c39c9e947100863b62f5e28bbeb4b8a4ad438aec088ca4da403f2fabfa39014173929e194db8e8421b95b8a1d673a600a212d39f16ccda7883fd29166c17ba000d3797266bdd55675de588bac75a56dbbe1cd2abe26254e78916c2bb9447d7d7c4815b888c7a6e9c0a668d8ed0d2ddce07d8b4fdc5694b668b5d7cb04d9dd92810bd3c499e8cfbc843a62b1d4e1340be8dc9ea61c31685a49b944ba94236a3f5a09a0df08ec2372f3ba8879a15d86ab572958f85666ea2fee457099bb6a2a19486fb52a59ed029a75d32cd417dc2dab70f25797b1aed"]}, @generic="bf6e4eff89d8a749318c29a4714baa019a2040e3d1c8ccc54b8d4dfdf5fc4037fe1aba4d5f09356b1e0743b5c806b9648ce50f8895d6d00fef08b219797e564ecbc77e768de3b06976d1d804fb959cccd58946d30677ed28cfffb2ad335db00eddb526e1801918c079d8d6dd8b45e9235414acaf5819f02bd299c2a4ad1b4f664e75ee50e7da64c1d32d19ad5bc93013d2bd77c338a0fd6e729a57be81b102921482e0656a54f3b48e67313adcf5d4ea5e795f646cd5c2abdf6f0c143f75e2ff9143553d4162e89b8e70e099c11aa6400e2dc71732c5f6783f33c5ea1ac44ca356415b82fb90453ec5", @generic="5550530a48d1f09d895185d9efbaab09295642b184dbd28967c9f22874b96c1211dd00e48748f6a9ac6f588b397065ce3b0ecdff2130545e7a7bfc35b8061c449f5b26b794ca26f4732fed634b28b3c61ef3fe7317ecebc0583dc2d969ceae1ab4865fb8c95d88d1003721339e0ce7fe28d4a81fa94dad75affa16c7eb07fb4c06d1eb1d76661bf9f6c257709de2070ff5815bae288e49704cf7ad622b58d425998fa70d1a07199b9371c66c4e770859ed8b752b4dd3ffeb56d7b94b275add72533952d806bb8383783ef40a8068dfb537060c410118796d9c04fc2d8934d76afac72faa5ae81f1359140dcafde35769af84d63a88e6058b99", @generic="f3aed0cf51a8531c763410635bb08e0ba811497456d201a0a722fa015ac69b2366eb83efb0557391c5c59a6053512bb63efa5e07a75d87431a2a3e9643b960e74e70a0a077c3a8e2d88be6c7f40a0163a45a05009ba8f6dc59365facefc5d48b3375d010f9ec357c35f1a3fbe5d2b8ddc74e813e5ee36f1e27175d12aaa78153c0c8", @generic="d3d5433fe9307e3e7bc061553804f0484709e93831b47b022c2e7578e097d016aee6e8933817de461c079c6bde724ea4f0dd72d4997da77f44db3d3e277c03ef8a574ab593a6056344"]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xfffffff7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c74bd98585492d7e1f4839"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x708}, 0x1, 0x0, 0x0, 0x20008000}, 0x20044001) madvise$auto(0xf, 0x9, 0x3ff) (async) r14 = ioctl$auto_TUNSETDEBUG(r10, 0x400454c9, &(0x7f0000001bc0)=0x4) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001d80)={r14, &(0x7f0000001c00)="3fae49d3e9fe749ec446de7ffa673b9eb958087b0ac5d8fa2c963460931b5ec7f7671dc009820333bac42697ec6716d3f6739448aaf93bb17868727da44c6efe9db45e2527aaef8f799e2ca7b6c31521fdd47ff86f1b08f6706b19f927d403a8a7cf5d6b7edfa1777a492625a5d897a90197620956ff790bea9046250ee1bc22be96aa2592c5f4019d50ea663cec56d052ef9f1e14ca33f05b279b7172142d57488539e4cc77b42a255901707e3ea90ce57cf7", 0x0, &(0x7f0000001cc0)="fabdc08ad22c412222da12baac59e585538e832d766cbe789373", 0x35d, &(0x7f0000001d00), &(0x7f0000001d40)=0x6}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) semget$auto(0x8d, 0x3, 0x2) 3m51.9212531s ago: executing program 1 (id=1363): mmap$auto(0x0, 0x2000000004005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0xf19, 0x0) close_range$auto(0x2, 0x8000, 0x0) read$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000000200)=""/209, 0xd1) socket(0x2, 0x1, 0xfffffffe) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3a8c84, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x200, 0x21) unshare$auto(0x40000080) socket(0x23, 0x1, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r0) sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="1e00"/14], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) ioctl$auto(r3, 0x540a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x8000) 3m50.839852488s ago: executing program 1 (id=1368): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x80000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000022c0)=ANY=[@ANYBLOB="fc080000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x005\x00', @ANYRES32=0x0, @ANYBLOB="0400c4800800e900", @ANYRES32=0x0, @ANYBLOB="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"], 0x8fc}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffd, 0x8004, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x40009, 0x7fffffff, 0x9b72, 0xffffffffffffffff, 0x100000000028000) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/vht_capa\x00', 0x842, 0x0) read$auto_mon_fops_binary_mon_bin(r1, &(0x7f0000000a80)=""/4096, 0x1000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x5, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0) r2 = getpid() r3 = gettid() r4 = open(0x0, 0x80400, 0xb5d1af1605322dd2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) read$auto_lowpan_enable_fops_(r4, &(0x7f00000002c0)=""/120, 0x78) rt_tgsigqueueinfo$auto(r2, r3, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) 3m49.590608925s ago: executing program 1 (id=1372): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyx5\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r3) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x3, 0x800, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x44003, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3m48.184877918s ago: executing program 1 (id=1375): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket(0x2, 0x3, 0xa) r1 = getsockopt$auto(r0, 0x0, 0x29, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) ioctl$auto_FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x1000, 0x2000c, 0x4000000000df, 0x40000000000ebe, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xd8, 0x100ed3, 0xffffffffffffffff, 0x4) ioctl$auto_TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) statmount$auto(0x0, &(0x7f0000001380)={0x8, 0x1, 0x1ff, 0x7, 0x3, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x5, 0x80003, 0xffffffff, 0x5, 0xb4, 0x9, 0x7, 0x10007, 0xb, 0x200000004, 0xfffd, 0xe, 0x4, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0xffffffff, 0x0, [0x0, 0x0, 0x1fa, 0x9, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10, 0x0, 0x9, 0x8000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007, 0x0, 0x0, 0x200000, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xa, 0x101, 0xb85c, 0x7, 0x0, 0x0, 0xfffffffff, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0xfffffffffffffffd], "e8976d6ac81b53066d63982ae635fe2437c74c5d0b6806d45e6158417b"}, 0x200, 0xd) socket(0x9, 0x5, 0xf) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000890) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty29\x00', 0x44401, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8001) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000180)=""/250, 0xfa) socket$nl_generic(0x10, 0x3, 0x10) 3m47.177886932s ago: executing program 1 (id=1381): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9c") (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = mq_open$auto(&(0x7f0000000200)='\\\x00\xa9A\x00', 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000100)={{0x171a4c29, 0x0, 0xee01, 0x401, 0x9, 0xb, 0x2}, 0x8, 0x100, 0x1a56, 0x1, @inferred=0x0, @inferred, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='\x00\x00\x00'}) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="96a25d9adffd5cbd7a8b1ebb3fed07c25cb13470925d02a6e3bb92831c87e66742f5b6388b6820badee47612263a5ff887fc5cb010175fca327247b91041b580720b09c34f5b8ab021e686e7dd3eaffd84e7503ee1d8996b6ff1d3dcb0fee67b0250bb804de721a59778729add4ecbd8ded4f0a54739194ab189c1aa6f2726e0474c34f9a422c330872714c6a7530f629958a247ea0271c811988cc13e453acd9f54503e33a26db38d2bcb8f70e6ca055df09370152603673bb35c335a03de0d210da0045c82a397bac266f2cada62", @ANYRES8=r5, @ANYRES64=r6, @ANYRES32=r5], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '{]-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0xc0, 0x7, 0x0, 0x1, [@typed={0xbc, 0x15, 0x0, 0x0, @binary="302137a9e1d1f6f465e7b5ea737a141e7d0dffa0ae07279f954c91fed78bf096aec08879b327de084dd01d906c867b790b16d1f55733fd277fa4e762428b7bcf5c031942400d1df0218ab1e61fa8e20320b5f511028f08d9ef3ccbc7005b58d818724409ee013adfd6253eb309d933da1588412e91def926938dfef2b341582487ba2a326dd81877faf5f0e3cdd55cc03aacc012e5e83098c9afba210ccb1ed5223d1562e0033486f411b783a1e20ce3d768a4c9d162e0bd"}]}]}, 0xf4}}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) r7 = socket(0xa, 0x2, 0x0) (async) r8 = socket(0xa, 0x3, 0xff) connect$auto(r8, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r7, 0x6) 3m32.115579205s ago: executing program 32 (id=1381): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9c") (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = mq_open$auto(&(0x7f0000000200)='\\\x00\xa9A\x00', 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000100)={{0x171a4c29, 0x0, 0xee01, 0x401, 0x9, 0xb, 0x2}, 0x8, 0x100, 0x1a56, 0x1, @inferred=0x0, @inferred, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)='\x00\x00\x00'}) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="96a25d9adffd5cbd7a8b1ebb3fed07c25cb13470925d02a6e3bb92831c87e66742f5b6388b6820badee47612263a5ff887fc5cb010175fca327247b91041b580720b09c34f5b8ab021e686e7dd3eaffd84e7503ee1d8996b6ff1d3dcb0fee67b0250bb804de721a59778729add4ecbd8ded4f0a54739194ab189c1aa6f2726e0474c34f9a422c330872714c6a7530f629958a247ea0271c811988cc13e453acd9f54503e33a26db38d2bcb8f70e6ca055df09370152603673bb35c335a03de0d210da0045c82a397bac266f2cada62", @ANYRES8=r5, @ANYRES64=r6, @ANYRES32=r5], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '{]-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0xc0, 0x7, 0x0, 0x1, [@typed={0xbc, 0x15, 0x0, 0x0, @binary="302137a9e1d1f6f465e7b5ea737a141e7d0dffa0ae07279f954c91fed78bf096aec08879b327de084dd01d906c867b790b16d1f55733fd277fa4e762428b7bcf5c031942400d1df0218ab1e61fa8e20320b5f511028f08d9ef3ccbc7005b58d818724409ee013adfd6253eb309d933da1588412e91def926938dfef2b341582487ba2a326dd81877faf5f0e3cdd55cc03aacc012e5e83098c9afba210ccb1ed5223d1562e0033486f411b783a1e20ce3d768a4c9d162e0bd"}]}]}, 0xf4}}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) r7 = socket(0xa, 0x2, 0x0) (async) r8 = socket(0xa, 0x3, 0xff) connect$auto(r8, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r7, 0x6) 2m26.360853612s ago: executing program 4 (id=1680): mmap$auto(0xfffffffffffffffd, 0x400005, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffc, 0x200007, 0x8) mmap$auto(0x3, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf253f00000004005e8008000300", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 2m25.317928167s ago: executing program 4 (id=1685): mmap$auto(0x0, 0x4020006, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto_PR_SCHED_CORE_CREATE(0x6, 0x1, 0xffffffffffffffff, 0x6, 0x2bc0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1004000089827cad0b817f631b2c8baa3c2b503a11d2d3bce7efdb84900d10ebd0b5790958e18fe782015d312b9eee2a201436e22a42d49c", @ANYRES16=r1, @ANYBLOB="28002abd7000ffdbdf250800000005001f0051000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000008}, 0x4000000) socket(0x21, 0x2, 0x2) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd14\x00', 0x602441, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x2000b, 0xdf, 0x400000eb1, 0x401, 0x7fff) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) ppoll$auto(&(0x7f0000000100)={r4, 0xf, 0x8e}, 0x3, 0x0, 0x0, 0x8) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) futex$auto(&(0x7f0000000000)=0x4, 0x0, 0x9, 0x0, 0x0, 0xffffff80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r5, 0x8000) clone$auto(0xf, 0x4, 0x0, 0x0, 0x7fffffff) r6 = socket(0x29, 0x6, 0x800083) setsockopt$auto(r6, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x20019, 0x4000000000de, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd13\x00', 0x3cf683, 0x0) 2m23.754967566s ago: executing program 4 (id=1691): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfb, 0xffffffffffffffff) 2m23.032051437s ago: executing program 4 (id=1697): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/acpi/wakeup\x00', 0x101200, 0x0) pread64$auto(r0, 0x0, 0x3, 0x8d) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/acpi/wakeup\x00', 0x101200, 0x0) (async) pread64$auto(r0, 0x0, 0x3, 0x8d) (async) 2m22.597196317s ago: executing program 4 (id=1701): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400200, 0x0) mmap$auto(0x5, 0x8, 0x8, 0x40eb2, r1, 0x14000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001e00), 0x8000, 0x0) read$auto_vhost_vsock_fops_vsock(r4, 0x0, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x6}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x51e}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xd8}, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x20f, 0xfffffe05, 0x8000000000000000}]}) (async) setxattrat$auto(r0, &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000040)='#{\x00', &(0x7f0000000080)={0xa, 0x3, 0x8}, 0x6) (async) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) (async) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae71, 0x38) (async) tkill$auto(0x1, 0x7) 2m21.001105898s ago: executing program 4 (id=1707): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0xc, 0x20009, 0x8000000000005, 0x14, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x848000000015, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) (async) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) (async) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy5/ht40allow_map\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x200200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r3 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) (async) bpf$auto(0x801a, &(0x7f0000000380)=@query={@target_ifindex=r2, 0x37ec, 0x291d, 0x8001, 0x9c8b, @prog_cnt, 0x0, 0x9, 0xe, 0x2, 0x10}, 0x92) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(0x3, 0x0, 0x17) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) 2m20.499207425s ago: executing program 33 (id=1707): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0xc, 0x20009, 0x8000000000005, 0x14, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x848000000015, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) (async) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) (async) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy5/ht40allow_map\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x200200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r3 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) (async) bpf$auto(0x801a, &(0x7f0000000380)=@query={@target_ifindex=r2, 0x37ec, 0x291d, 0x8001, 0x9c8b, @prog_cnt, 0x0, 0x9, 0xe, 0x2, 0x10}, 0x92) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(0x3, 0x0, 0x17) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) 13.120012479s ago: executing program 0 (id=2205): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x1, 0x0, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3f, 0x1, 0x0, 0x79, 0x1) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x38, 0x1, 0x4, 0xfffffffffffffffa, 0x7) socket(0x2, 0x2, 0x88) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)='-_', 0x2) 12.23040654s ago: executing program 0 (id=2209): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) clock_settime$auto(0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0) msgctl$auto(0x7, 0xa3, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0x5, 0xa, 0x0, 0xfe01}, 0x0, 0x0, 0x6, 0xd, 0x3, 0x31f4, 0x51c, 0x3, 0x1, 0x3, @inferred=0xffffffffffffffff, @raw=0x8}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) 10.78975192s ago: executing program 0 (id=2212): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa) socket(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r1 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/ns/cgroup\x00', 0x0, 0x0) ioctl$auto_NS_GET_NSTYPE(r1, 0xb703, 0x0) sysfs$auto(0x2, 0xe, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_enable\x00', 0x20000, 0x0) r2 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, 0x0) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) socket(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x630b42, 0x0) socket(0x21, 0x1, 0x200001) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'caif0\x00'}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) bpf$auto(0xe05f, 0x0, 0xfffffc01) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) 8.777782366s ago: executing program 0 (id=2217): mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x8000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x8000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) (async) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000000)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a0ee63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a314e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x802, 0x0) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) setreuid$auto(0xffffffffffffffff, 0x8) ioctl$auto(r4, 0x4b62, 0x9) (async) ioctl$auto(r4, 0x4b62, 0x9) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyq2\x00', 0x103200, 0x0) (async) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyq2\x00', 0x103200, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000002c0), r5) ioctl$auto(r6, 0x540a, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mremap$auto(0x4000, 0x8, 0x3fd6, 0x0, 0x400000002) (async) mremap$auto(0x4000, 0x8, 0x3fd6, 0x0, 0x400000002) unshare$auto(0x20000080) 7.769434852s ago: executing program 0 (id=2220): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/031/001\x00', 0x507380, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40080, 0x0) mmap$auto(0x2b, 0x2000a, 0xdf, 0xeb5, 0xffffffffffffffff, 0xffffffffffffffff) sysfs$auto(0x2, 0x26, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(r0, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 6.960295376s ago: executing program 0 (id=2224): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) getrandom$auto(&(0x7f0000000000)='.%\'*-\\\x00', 0x2, 0xf6) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(r1, 0x0, 0x6f) connect$auto(r1, 0x0, 0x55) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) close$auto(r0) ioctl$auto(0x3, 0x8914, 0x38) 4.257098457s ago: executing program 5 (id=2231): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/aud\x11\x15v\x9aO\xe2\xbb\n\x06\"\xcaio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\x81\xcc\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4:\x84\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x979}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\xe8\xcb?(\xfaI\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000e3d8) (async) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) (async) pivot_root$auto(0x0, 0x0) (async) r3 = open(0x0, 0x7ffd, 0x12) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x8, 0xf5, r0, 0x7fee) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) unshare$auto(0x40000080) (async) r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_NVRAM_SETCKS(r4, 0x7041, 0x0) (async) r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) (async) lseek$auto(r1, 0x0, 0x2) readv$auto(r5, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) (async) r6 = socket(0x2, 0x2, 0x1) r7 = getsockopt$auto(r6, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r8 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) r9 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), r7) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001800)=ANY=[@ANYBLOB="80070000", @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="540000800400258008008f00e0000001040024800800c900", @ANYRES32=r6, @ANYBLOB="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"], 0x780}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0xe, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) 3.802365392s ago: executing program 2 (id=2234): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/uapsd_max_sp_len\x00', 0x2, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 3.681401945s ago: executing program 2 (id=2235): r0 = socket(0x11, 0x3, 0x0) setsockopt$auto(r0, 0x107, 0x11, 0x0, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x2001, 0x0) ioctl$auto_BLKDISCARD(r1, 0x1277, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_nanosleep$auto(0x2, 0x4, &(0x7f0000000040)={0x100000000, 0x8000c}, &(0x7f00000000c0)={0xfeffffffffffffff, 0x8}) 3.480480551s ago: executing program 3 (id=2236): r0 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x9, &(0x7f0000000000)={0x1, 0x71, 0x9, @inferred=0xffffffffffffffff}}) close_range$auto(r0, r1, 0x0) r2 = socket(0x5, 0x80000, 0xfffffffb) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0xa1a0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x81, r3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x2000015, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r7 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) bpf$auto(0x80, &(0x7f0000000100)=@enable_stats={0xe}, 0x94) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="dc02001f", @ANYRES16=r8, @ANYRES8=r5, @ANYBLOB="03e29a7c4d136bb71765c6e67ac1d03a7b454ef310e1e4e23426578ee98809a2d4821005ba40fd029ed97b7301caf567a7f080ed3d4d4c39f2ad4624fba8a031d0e115a722667649957392e9dbb8b425d065a520eddcee9a49330c6b7cf22cee39baad3c95ee03c2d395a115b68c68673473ce03ad0c3738d477263d8c2060d974add5a27a8d458d771dd136fcaa970318cc31c9c6115c6ddeedf52f18d5f077b257b2e573c5ea5778bdec4c1a", @ANYRES16=r8, @ANYRES32=r2, @ANYBLOB="d0463de5afd154e9d792df9c7fea9b6977eb58c799a85200a011dcaea1b8e7100feda83ff516e6ef3371a9927b594a220aa7c119bd37c7a699e64a95676609dbcb7446c5b00bb2162587e2b04751"], 0x2dc}, 0x1, 0x0, 0x0, 0x240088a0}, 0x44008004) connect$auto(0x3, 0x0, 0x10000054) getsockopt$auto(r7, 0x84, 0x1d, 0x0, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/153, 0x99) getpid() mmap$auto(0x4010, 0x8, 0x5, 0xeb1, 0x401, 0x7ffd) close_range$auto(0x2, 0xa, 0x0) fstat$auto(0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r9) 3.242308803s ago: executing program 5 (id=2237): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES64=0x0], 0x1ac}}, 0x8e01dfde0725d0b2) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x400000cb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) open(0x0, 0x7ffd, 0x12) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) r3 = io_uring_setup$auto(0x406, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq0/address\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) (async) move_pages$auto(0x0, 0x477, 0x0, 0x0, 0x0, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) (async) close_range$auto(r1, r3, 0x400) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.753571051s ago: executing program 2 (id=2238): mmap$auto(0x0, 0x40, 0x8, 0xeb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x60142, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)="3318cb") pipe2$auto(0x0, 0x80) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2d, 0xa, 0xff7ffffc) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bdi/8:0/wb_stats\x00', 0x2f6001, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2002, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.40161959s ago: executing program 3 (id=2239): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/ep_00/power/autosuspend_delay_ms\x00', 0x400, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0x40000080) 2.313503934s ago: executing program 2 (id=2240): openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) exit$auto(0x7) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = socket(0xa, 0x5, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) fchown$auto(r0, r1, r2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/mb_groups\x00', 0x40102, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x4000000, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r3, 0x8970, 0x24) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) (async) exit$auto(0x7) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) socket(0xa, 0x5, 0x0) (async) setfsuid$auto(0xee00) (async) setreuid$auto(r1, 0x0) (async) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) (async) fchown$auto(r0, r1, r2) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/mb_groups\x00', 0x40102, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mmap$auto(0x4000000, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) socket(0x29, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r3, 0x8970, 0x24) (async) 2.229219919s ago: executing program 5 (id=2241): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x7, 0x67, 0x600, 0x3, 0x0, 0x80f0c8, 0x0, "2fc1d5cbcb9f6b5e511f0dd8d6068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x4, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x4a) 2.07480825s ago: executing program 2 (id=2242): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x21e2c3, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x6) ioctl$auto_MEMWRITEOOB(r1, 0xc0104d03, &(0x7f0000000100)={0x8, 0x3d7f, &(0x7f0000000080)='/dev/snd/midiC2D0\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='dev/audio5\x00', 0x100000a3d9) socketpair$auto(0x5, 0x6, 0x8, 0x0) r2 = timerfd_create$auto(0xfffffffb, 0x2) mmap$auto(0x2, 0x7, 0x2, 0x17, r2, 0x6) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r5 = socket(0xa, 0x1, 0x100) mmap$auto(0x200000000, 0x400005, 0xdf, 0x9b7d, r4, 0x14) r6 = gettid() process_vm_writev$auto(r6, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x400, 0x0) eventfd2$auto(0x6af3, 0x800) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000200)={[0x1fd, 0x7, 0x10, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x583602, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, 0x0) ioctl$auto(0xffffffffffffffff, 0xc983, r5) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x4, r3, 0x2, 0x81, 0x4e1, 0x9}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xa, 0xb) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.971126765s ago: executing program 5 (id=2243): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x505582, 0x0) socket(0x29, 0x2, 0x0) (async) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1000202, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0xc0af, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x84, 0x3, 0x6, 0x8000000000000001, 0x7, 0x5, 0xd, 0x6, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) get_mempolicy$auto(0x0, &(0x7f00000000c0)=0x1, 0x4, 0x6, 0x2) newfstatat$auto(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x2, 0x3, 0x1, 0x3, 0xee00, 0xffffffffffffffff, 0x0, 0x5, 0xc8f1, 0x8, 0xfffffffffffffffe, 0xbd80000000000000, 0xa, 0xb4, 0x401, 0x80, 0x6}, 0x3be) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x401, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @inferred=r2, 0x3, 0x0, 0x0, 0x0}) r5 = setfsgid$auto(r4) fchown$auto(0xffffffffffffffff, 0xee00, r5) (async) fchown$auto(0xffffffffffffffff, 0xee00, r5) keyctl$auto(0x7, 0x0, r3, r5, 0x5) (async) keyctl$auto(0x7, 0x0, r3, r5, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x8000000000000001, 0x2, 0xe3, 0x10, 0x2, 0xffff) socket(0x2, 0x80802, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x7, 0xdf, 0x11, 0x401, 0x8000) (async) mmap$auto(0x0, 0x7, 0xdf, 0x11, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x4801, 0x0) 1.737293382s ago: executing program 3 (id=2244): getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x23, 0x2, 0x0) epoll_create$auto(0x9) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001840)=""/4087, 0xff7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffd) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) socket(0x1f, 0x2, 0x36f6) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)={0x2, 0x81, 0x5b, 0x4, &(0x7f0000000280), 0xd22ff64, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) write$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f0000000040)="7a032403bb4a3a7b2bacf905d2f41c287870a21b", 0x14) mmap$auto(0xfffffffffffffffc, 0x400008, 0x9, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x200007, 0x8) 1.482137146s ago: executing program 3 (id=2245): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x6) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x1c, 0x1e, 0x0, 0x1, [@nested={0x18, 0x122, 0x0, 0x1, [@nested={0x8, 0x46, 0x0, 0x1, [@nested={0x4, 0xf7}]}, @nested={0xa, 0x10, 0x0, 0x1, [@generic='\x00\x00\x00*O{']}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x36d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x179, [{0xfe, 0x400, 0x9}]}) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r6, 0x0, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r7 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x72d000, 0x0) symlink$auto(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001200)='./file0\x00') chmod$auto(&(0x7f0000000240)='./file0\x00', 0xd) read$auto_nvram_misc_fops_nvram(r7, &(0x7f0000000280)=""/210, 0xd2) 661.852476ms ago: executing program 2 (id=2246): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) r1 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/uid_map\x00', 0x51f800, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1, &(0x7f0000000180)={0x3, 0x6}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(r3, 0x0, 0xd96, 0x10364, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mincore$auto(0x1000, 0x8001, 0x0) 597.265965ms ago: executing program 5 (id=2247): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 406.563338ms ago: executing program 5 (id=2248): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x26, 0x1, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/021/001\x00', 0x80802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1a, 0x10, 0x8, 0x7f7, &(0x7f0000000040)}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xf, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x400, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x7ff, 0xffffffffffffff62, 0x7, 0xebd, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtdblock0\x00', 0x44807, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x181560, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) sendmsg$auto_NL80211_CMD_START_NAN(r4, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x24060800}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r5, 0x0, 0x1) 396.716353ms ago: executing program 3 (id=2249): mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/kvm/host_state_reload\x00', 0x22042, 0x0) mmap$auto(0x20000000000, 0x4, 0x3, 0x12, 0xffffffffffffffff, 0x168d) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) pkey_mprotect$auto(0x80000000, 0x3000000, 0x7, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(r0, r0, 0xf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) readv$auto(r1, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) 0s ago: executing program 3 (id=2250): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x80000000000003) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) syz_clone3(&(0x7f0000000180)={0x1108000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) r4 = io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x2, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x00', 0x4, 0xaf) mmap$auto(0x2, 0x6, 0xdc, 0x9b72, r4, 0xc49e) sysfs$auto(0x7, 0x7, 0x10001) close_range$auto(r2, r0, 0x81) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_enter$auto(r5, 0x9, 0x820e, 0x9, 0x0, 0x18) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) acct$auto(0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={0x0, 0x4c8}, 0x1, 0x0, 0x0, 0xc4}, 0x40) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) getpid() close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x8000000) kernel console output (not intermixed with test programs): fs (sda1): This should not happen!! Data will be lost [ 469.587443][ T6973] [ 469.711185][T13330] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 469.826210][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 469.870155][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 469.885092][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 470.271251][ T1111] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 470.373926][ T1111] EXT4-fs (sda1): This should not happen!! Data will be lost [ 470.373926][ T1111] [ 470.582889][T13348] random: crng reseeded on system resumption [ 471.014295][T13353] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 471.032498][T13318] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 471.114681][T13353] EXT4-fs (sda1): This should not happen!! Data will be lost [ 471.114681][T13353] [ 471.823613][ T6973] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 471.912302][ T6973] EXT4-fs (sda1): This should not happen!! Data will be lost [ 471.912302][ T6973] [ 472.650125][ T1123] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 472.726725][ T1123] EXT4-fs (sda1): This should not happen!! Data will be lost [ 472.726725][ T1123] [ 472.772195][T13382] FAULT_INJECTION: forcing a failure. [ 472.772195][T13382] name failslab, interval 1, probability 0, space 0, times 0 [ 472.816973][T13382] CPU: 0 UID: 0 PID: 13382 Comm: syz.4.1510 Tainted: G U syzkaller #0 PREEMPT(full) [ 472.816999][T13382] Tainted: [U]=USER [ 472.817003][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.817012][T13382] Call Trace: [ 472.817018][T13382] [ 472.817024][T13382] dump_stack_lvl+0x16c/0x1f0 [ 472.817046][T13382] should_fail_ex+0x512/0x640 [ 472.817063][T13382] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 472.817081][T13382] should_failslab+0xc2/0x120 [ 472.817100][T13382] kmem_cache_alloc_noprof+0x75/0x6e0 [ 472.817114][T13382] ? __kernfs_new_node+0xd2/0x8e0 [ 472.817137][T13382] ? __kernfs_new_node+0xd2/0x8e0 [ 472.817153][T13382] __kernfs_new_node+0xd2/0x8e0 [ 472.817173][T13382] ? __pfx___kernfs_new_node+0x10/0x10 [ 472.817195][T13382] ? find_held_lock+0x2b/0x80 [ 472.817211][T13382] ? kernfs_root+0xee/0x2a0 [ 472.817232][T13382] kernfs_new_node+0x13c/0x1e0 [ 472.817255][T13382] __kernfs_create_file+0x53/0x350 [ 472.817274][T13382] sysfs_add_file_mode_ns+0x207/0x3c0 [ 472.817295][T13382] internal_create_group+0x578/0xf30 [ 472.817319][T13382] ? __pfx_internal_create_group+0x10/0x10 [ 472.817340][T13382] ? kernfs_create_link+0x1bd/0x240 [ 472.817358][T13382] internal_create_groups+0x9d/0x150 [ 472.817378][T13382] device_add+0xf30/0x1aa0 [ 472.817399][T13382] ? __pfx_device_add+0x10/0x10 [ 472.817415][T13382] ? lockdep_init_map_type+0x5c/0x280 [ 472.817435][T13382] ? __init_waitqueue_head+0xca/0x150 [ 472.817461][T13382] netdev_register_kobject+0x1a9/0x3d0 [ 472.817484][T13382] register_netdevice+0x13dc/0x2270 [ 472.817514][T13382] ? __pfx_register_netdevice+0x10/0x10 [ 472.817534][T13382] ? dev_addr_mod+0x316/0x540 [ 472.817550][T13382] __tun_chr_ioctl+0x1eb6/0x4880 [ 472.817571][T13382] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.817594][T13382] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 472.817615][T13382] ? hook_file_ioctl_common+0x145/0x410 [ 472.817642][T13382] ? __fget_files+0x20e/0x3c0 [ 472.817660][T13382] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 472.817679][T13382] __x64_sys_ioctl+0x18b/0x210 [ 472.817700][T13382] do_syscall_64+0xcd/0xfa0 [ 472.817718][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.817732][T13382] RIP: 0033:0x7efda1b8eec9 [ 472.817745][T13382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.817758][T13382] RSP: 002b:00007efda2af3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.817772][T13382] RAX: ffffffffffffffda RBX: 00007efda1de5fa0 RCX: 00007efda1b8eec9 [ 472.817781][T13382] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 472.817790][T13382] RBP: 00007efda1c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.817799][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.817807][T13382] R13: 00007efda1de6038 R14: 00007efda1de5fa0 R15: 00007fff24adb878 [ 472.817828][T13382] [ 473.556666][T13401] can: request_module (can-proto-0) failed. [ 474.030130][T13407] sd 0:0:1:0: PR command failed: 1026 [ 474.036511][T13407] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 474.051097][T13407] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 474.987651][T13424] zswap: compressor not available [ 475.482104][ T1111] EXT4-fs: 2 callbacks suppressed [ 475.482124][ T1111] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 475.595535][ T1111] EXT4-fs (sda1): This should not happen!! Data will be lost [ 475.595535][ T1111] [ 476.214524][T13456] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 476.338170][T13457] random: crng reseeded on system resumption [ 476.495122][T13462] input: 00 [ 476.495122][T13462] as /devices/virtual/input/input26 [ 476.542189][T13462] FAULT_INJECTION: forcing a failure. [ 476.542189][T13462] name failslab, interval 1, probability 0, space 0, times 0 [ 476.560950][T13462] CPU: 1 UID: 0 PID: 13462 Comm: syz.4.1525 Tainted: G U syzkaller #0 PREEMPT(full) [ 476.560992][T13462] Tainted: [U]=USER [ 476.561002][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.561018][T13462] Call Trace: [ 476.561027][T13462] [ 476.561037][T13462] dump_stack_lvl+0x16c/0x1f0 [ 476.561074][T13462] should_fail_ex+0x512/0x640 [ 476.561104][T13462] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 476.561136][T13462] should_failslab+0xc2/0x120 [ 476.561171][T13462] kmem_cache_alloc_noprof+0x75/0x6e0 [ 476.561195][T13462] ? __kernfs_new_node+0xd2/0x8e0 [ 476.561234][T13462] ? __kernfs_new_node+0xd2/0x8e0 [ 476.561264][T13462] __kernfs_new_node+0xd2/0x8e0 [ 476.561308][T13462] ? __pfx___kernfs_new_node+0x10/0x10 [ 476.561351][T13462] ? find_held_lock+0x2b/0x80 [ 476.561378][T13462] ? kernfs_root+0xee/0x2a0 [ 476.561417][T13462] kernfs_new_node+0x13c/0x1e0 [ 476.561459][T13462] __kernfs_create_file+0x53/0x350 [ 476.561491][T13462] sysfs_add_file_mode_ns+0x207/0x3c0 [ 476.561531][T13462] sysfs_merge_group+0x1aa/0x340 [ 476.561567][T13462] ? __pfx_sysfs_merge_group+0x10/0x10 [ 476.561605][T13462] ? __pfx_dev_add_physical_location+0x10/0x10 [ 476.561638][T13462] ? bus_to_subsys+0x131/0x160 [ 476.561677][T13462] dpm_sysfs_add+0x237/0x280 [ 476.561710][T13462] device_add+0x9a6/0x1aa0 [ 476.561745][T13462] ? __pfx_device_add+0x10/0x10 [ 476.561775][T13462] ? __pfx_exact_lock+0x10/0x10 [ 476.561809][T13462] ? kobject_get+0xbb/0x150 [ 476.561843][T13462] cdev_device_add+0xc2/0x1e0 [ 476.561876][T13462] evdev_connect+0x3a4/0x4c0 [ 476.561915][T13462] input_attach_handler.isra.0+0x173/0x250 [ 476.561955][T13462] input_register_device+0xab9/0x1180 [ 476.561997][T13462] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 476.562026][T13462] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 476.562061][T13462] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 476.562099][T13462] ? find_held_lock+0x2b/0x80 [ 476.562145][T13462] ? __pfx_uinput_ioctl+0x10/0x10 [ 476.562174][T13462] __x64_sys_ioctl+0x18b/0x210 [ 476.562213][T13462] do_syscall_64+0xcd/0xfa0 [ 476.562245][T13462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.562271][T13462] RIP: 0033:0x7efda1b8eec9 [ 476.562300][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.562326][T13462] RSP: 002b:00007efda2af3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.562352][T13462] RAX: ffffffffffffffda RBX: 00007efda1de5fa0 RCX: 00007efda1b8eec9 [ 476.562370][T13462] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 476.562386][T13462] RBP: 00007efda1c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 476.562403][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.562419][T13462] R13: 00007efda1de6038 R14: 00007efda1de5fa0 R15: 00007fff24adb878 [ 476.562457][T13462] [ 477.048269][T13462] input: failed to attach handler evdev to device input26, error: -12 [ 477.200428][ T1111] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 477.315999][ T1111] EXT4-fs (sda1): This should not happen!! Data will be lost [ 477.315999][ T1111] [ 478.100827][ T6973] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 478.193466][ T6973] EXT4-fs (sda1): This should not happen!! Data will be lost [ 478.193466][ T6973] [ 479.106003][T13494] random: crng reseeded on system resumption [ 479.207916][ T1123] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 479.246986][ T1123] EXT4-fs (sda1): This should not happen!! Data will be lost [ 479.246986][ T1123] [ 480.017427][ T6859] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 480.042824][ T6859] EXT4-fs (sda1): This should not happen!! Data will be lost [ 480.042824][ T6859] [ 480.278630][T13522] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1537'. [ 480.287974][T13523] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1537'. [ 481.003680][ T6859] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 481.251083][ T6859] EXT4-fs (sda1): This should not happen!! Data will be lost [ 481.251083][ T6859] [ 481.326901][T13540] sp0: Synchronizing with TNC [ 481.616538][T13544] size and base must be multiples of 4 kiB [ 481.666753][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.4.1541 Tainted: G U syzkaller #0 PREEMPT(full) [ 481.666792][T13544] Tainted: [U]=USER [ 481.666801][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.666814][T13544] Call Trace: [ 481.666823][T13544] [ 481.666832][T13544] dump_stack_lvl+0x16c/0x1f0 [ 481.666868][T13544] mtrr_add+0xdf/0x110 [ 481.666904][T13544] mtrr_ioctl+0x7ef/0xcf0 [ 481.666947][T13544] ? __pfx_mtrr_ioctl+0x10/0x10 [ 481.666989][T13544] ? find_held_lock+0x2b/0x80 [ 481.667024][T13544] ? __fget_files+0x20e/0x3c0 [ 481.667049][T13544] ? __pfx_mtrr_ioctl+0x10/0x10 [ 481.667083][T13544] proc_reg_unlocked_ioctl+0x226/0x320 [ 481.667119][T13544] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 481.667157][T13544] __x64_sys_ioctl+0x18b/0x210 [ 481.667196][T13544] do_syscall_64+0xcd/0xfa0 [ 481.667228][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.667255][T13544] RIP: 0033:0x7efda1b8eec9 [ 481.667277][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.667302][T13544] RSP: 002b:00007efda2ad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.667327][T13544] RAX: ffffffffffffffda RBX: 00007efda1de6090 RCX: 00007efda1b8eec9 [ 481.667345][T13544] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 481.667361][T13544] RBP: 00007efda1c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 481.667377][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.667393][T13544] R13: 00007efda1de6128 R14: 00007efda1de6090 R15: 00007fff24adb878 [ 481.667430][T13544] [ 481.838854][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.196203][ T1136] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 482.212209][ T1136] EXT4-fs (sda1): This should not happen!! Data will be lost [ 482.212209][ T1136] [ 483.023178][ T1111] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 483.095174][ T1111] EXT4-fs (sda1): This should not happen!! Data will be lost [ 483.095174][ T1111] [ 484.013466][T13576] random: crng reseeded on system resumption [ 484.600464][T13585] FAULT_INJECTION: forcing a failure. [ 484.600464][T13585] name failslab, interval 1, probability 0, space 0, times 0 [ 484.811491][T13585] CPU: 0 UID: 0 PID: 13585 Comm: syz.3.1552 Tainted: G U syzkaller #0 PREEMPT(full) [ 484.811542][T13585] Tainted: [U]=USER [ 484.811551][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.811567][T13585] Call Trace: [ 484.811577][T13585] [ 484.811587][T13585] dump_stack_lvl+0x16c/0x1f0 [ 484.811623][T13585] should_fail_ex+0x512/0x640 [ 484.811654][T13585] ? fs_reclaim_acquire+0xae/0x150 [ 484.811692][T13585] should_failslab+0xc2/0x120 [ 484.811726][T13585] __kmalloc_noprof+0xdd/0x880 [ 484.811767][T13585] ? tomoyo_encode2+0x100/0x3e0 [ 484.811800][T13585] ? tomoyo_encode2+0x100/0x3e0 [ 484.811824][T13585] tomoyo_encode2+0x100/0x3e0 [ 484.811856][T13585] tomoyo_encode+0x29/0x50 [ 484.811881][T13585] tomoyo_realpath_from_path+0x18f/0x6e0 [ 484.811921][T13585] tomoyo_mkdev_perm+0x22b/0x570 [ 484.811956][T13585] ? tomoyo_mkdev_perm+0x217/0x570 [ 484.811995][T13585] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 484.812034][T13585] ? do_raw_spin_lock+0x12c/0x2b0 [ 484.812082][T13585] ? do_raw_spin_unlock+0x172/0x230 [ 484.812141][T13585] ? __pfx_current_check_access_path+0x10/0x10 [ 484.812173][T13585] ? simple_lookup+0x105/0x1d0 [ 484.812212][T13585] tomoyo_path_mknod+0x12a/0x190 [ 484.812248][T13585] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 484.812283][T13585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.812326][T13585] security_path_mknod+0x161/0x310 [ 484.812364][T13585] do_mknodat+0x239/0x5d0 [ 484.812396][T13585] ? __pfx_do_mknodat+0x10/0x10 [ 484.812422][T13585] ? getname_flags.part.0+0x1c5/0x550 [ 484.812467][T13585] __x64_sys_mknod+0x87/0xb0 [ 484.812496][T13585] do_syscall_64+0xcd/0xfa0 [ 484.812536][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.812563][T13585] RIP: 0033:0x7f417258eec9 [ 484.812585][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.812609][T13585] RSP: 002b:00007f41733f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 484.812635][T13585] RAX: ffffffffffffffda RBX: 00007f41727e5fa0 RCX: 00007f417258eec9 [ 484.812653][T13585] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 484.812671][T13585] RBP: 00007f4172611f91 R08: 0000000000000000 R09: 0000000000000000 [ 484.812687][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.812703][T13585] R13: 00007f41727e6038 R14: 00007f41727e5fa0 R15: 00007fffd8f80298 [ 484.812741][T13585] [ 484.812777][T13585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 486.034404][T13525] Process accounting paused [ 487.223780][T13603] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1556'. [ 487.243307][T13603] gretap0: refused to change device tx_queue_len [ 488.194439][T13613] FAULT_INJECTION: forcing a failure. [ 488.194439][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 488.248896][T13613] CPU: 1 UID: 0 PID: 13613 Comm: syz.3.1559 Tainted: G U syzkaller #0 PREEMPT(full) [ 488.248941][T13613] Tainted: [U]=USER [ 488.248950][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.248968][T13613] Call Trace: [ 488.248977][T13613] [ 488.248988][T13613] dump_stack_lvl+0x16c/0x1f0 [ 488.249024][T13613] should_fail_ex+0x512/0x640 [ 488.249055][T13613] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 488.249092][T13613] should_failslab+0xc2/0x120 [ 488.249123][T13613] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 488.249154][T13613] ? kstrdup_const+0x63/0x80 [ 488.249188][T13613] ? kstrdup+0x53/0x100 [ 488.249210][T13613] kstrdup+0x53/0x100 [ 488.249239][T13613] kstrdup_const+0x63/0x80 [ 488.249265][T13613] alloc_vfsmnt+0xea/0x6b0 [ 488.249295][T13613] ? __pfx___might_resched+0x10/0x10 [ 488.249325][T13613] clone_mnt+0x4b/0x930 [ 488.249364][T13613] copy_tree+0xee/0xbd0 [ 488.249388][T13613] ? __pfx_down_write+0x10/0x10 [ 488.249435][T13613] copy_mnt_ns+0x1a9/0xac0 [ 488.249472][T13613] ? rcu_is_watching+0x12/0xc0 [ 488.249510][T13613] create_new_namespaces+0xd3/0xa90 [ 488.249540][T13613] ? bpf_lsm_capable+0x9/0x10 [ 488.249573][T13613] ? security_capable+0x7e/0x260 [ 488.249610][T13613] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 488.249652][T13613] ksys_unshare+0x45b/0xa40 [ 488.249683][T13613] ? __pfx_ksys_unshare+0x10/0x10 [ 488.249713][T13613] ? xfd_validate_state+0x61/0x180 [ 488.249755][T13613] __x64_sys_unshare+0x31/0x40 [ 488.249786][T13613] do_syscall_64+0xcd/0xfa0 [ 488.249817][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.249843][T13613] RIP: 0033:0x7f417258eec9 [ 488.249865][T13613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.249889][T13613] RSP: 002b:00007f41733f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 488.249914][T13613] RAX: ffffffffffffffda RBX: 00007f41727e5fa0 RCX: 00007f417258eec9 [ 488.249932][T13613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 488.249948][T13613] RBP: 00007f4172611f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.249964][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.249980][T13613] R13: 00007f41727e6038 R14: 00007f41727e5fa0 R15: 00007fffd8f80298 [ 488.250018][T13613] [ 488.481680][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.257145][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1578'. [ 493.288925][T13703] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.424658][T13703] bridge_slave_1 (unregistering): left allmulticast mode [ 493.503795][T13703] bridge_slave_1 (unregistering): left promiscuous mode [ 493.600182][T13703] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.920906][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 494.272002][T13722] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[13722] [ 494.854923][T13736] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.776729][T13753] synth uevent: /bus/usb/drivers/symbolserial: unknown uevent action string [ 495.925731][T13754] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1588'. [ 499.558778][T13815] FAULT_INJECTION: forcing a failure. [ 499.558778][T13815] name failslab, interval 1, probability 0, space 0, times 0 [ 499.731095][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.3.1602 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 499.731148][T13815] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 499.731161][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.731175][T13815] Call Trace: [ 499.731183][T13815] [ 499.731192][T13815] dump_stack_lvl+0x16c/0x1f0 [ 499.731225][T13815] should_fail_ex+0x512/0x640 [ 499.731253][T13815] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 499.731288][T13815] should_failslab+0xc2/0x120 [ 499.731319][T13815] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 499.731349][T13815] ? __devinet_sysctl_register+0xbc/0x360 [ 499.731381][T13815] ? nlmsg_notify+0x11e/0x220 [ 499.731416][T13815] ? kmemdup_noprof+0x29/0x60 [ 499.731440][T13815] kmemdup_noprof+0x29/0x60 [ 499.731466][T13815] __devinet_sysctl_register+0xbc/0x360 [ 499.731504][T13815] ? rcu_is_watching+0x12/0xc0 [ 499.731530][T13815] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 499.731563][T13815] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 499.731600][T13815] ? __asan_memcpy+0x3c/0x60 [ 499.731635][T13815] devinet_init_net+0x347/0x910 [ 499.731671][T13815] ? __pfx_devinet_init_net+0x10/0x10 [ 499.731706][T13815] ops_init+0x1e2/0x5f0 [ 499.731738][T13815] setup_net+0x100/0x390 [ 499.731768][T13815] ? __pfx_setup_net+0x10/0x10 [ 499.731799][T13815] ? debug_mutex_init+0x37/0x70 [ 499.731829][T13815] copy_net_ns+0x2f8/0x690 [ 499.731864][T13815] create_new_namespaces+0x3ea/0xa90 [ 499.731900][T13815] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 499.731932][T13815] ksys_unshare+0x45b/0xa40 [ 499.731963][T13815] ? __pfx_ksys_unshare+0x10/0x10 [ 499.731996][T13815] ? xfd_validate_state+0x61/0x180 [ 499.732039][T13815] __x64_sys_unshare+0x31/0x40 [ 499.732072][T13815] do_syscall_64+0xcd/0xfa0 [ 499.732102][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.732126][T13815] RIP: 0033:0x7f417258eec9 [ 499.732146][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.732168][T13815] RSP: 002b:00007f41733f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 499.732191][T13815] RAX: ffffffffffffffda RBX: 00007f41727e5fa0 RCX: 00007f417258eec9 [ 499.732208][T13815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 499.732222][T13815] RBP: 00007f4172611f91 R08: 0000000000000000 R09: 0000000000000000 [ 499.732237][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.732251][T13815] R13: 00007f41727e6038 R14: 00007f41727e5fa0 R15: 00007fffd8f80298 [ 499.732287][T13815] [ 500.612154][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.618640][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.777611][T13824] Process accounting resumed [ 500.925586][T13832] random: crng reseeded on system resumption [ 501.444432][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 501.758927][T13849] Console: switching to colour VGA+ 80x25 [ 503.824608][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 506.742556][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1627'. [ 506.931034][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 507.072687][T13944] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1629'. [ 507.307203][T13950] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1631'. [ 507.350573][T13952] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1631'. [ 507.510226][T13951] ptrace attach of "./syz-executor exec"[13113] was attempted by ""[13951] [ 512.569528][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 513.269083][T14060] random: crng reseeded on system resumption [ 514.411045][T14080] bond0: Unable to set down delay as MII monitoring is disabled [ 515.235621][T14099] netlink: 'syz.0.1660': attribute type 1 has an invalid length. [ 515.243674][T14099] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1660'. [ 516.033452][T14077] Process accounting resumed [ 516.065327][T14107] random: crng reseeded on system resumption [ 516.333330][T14121] FAULT_INJECTION: forcing a failure. [ 516.333330][T14121] name fail_futex, interval 1, probability 0, space 0, times 0 [ 516.403865][T14121] CPU: 1 UID: 0 PID: 14121 Comm: syz.3.1664 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 516.403922][T14121] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 516.403936][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.403952][T14121] Call Trace: [ 516.403961][T14121] [ 516.403971][T14121] dump_stack_lvl+0x16c/0x1f0 [ 516.404007][T14121] should_fail_ex+0x512/0x640 [ 516.404038][T14121] ? kasan_save_stack+0x33/0x60 [ 516.404072][T14121] get_futex_key+0x1d0/0x1560 [ 516.404109][T14121] ? __pfx_get_futex_key+0x10/0x10 [ 516.404155][T14121] futex_wake+0xea/0x530 [ 516.404208][T14121] ? __pfx_futex_wake+0x10/0x10 [ 516.404258][T14121] ? rcu_is_watching+0x12/0xc0 [ 516.404291][T14121] do_futex+0x1e3/0x350 [ 516.404326][T14121] ? __pfx_do_futex+0x10/0x10 [ 516.404356][T14121] ? putname+0x154/0x1a0 [ 516.404397][T14121] __x64_sys_futex+0x1e0/0x4c0 [ 516.404436][T14121] ? __pfx___x64_sys_futex+0x10/0x10 [ 516.404475][T14121] ? getname_flags.part.0+0x1c5/0x550 [ 516.404518][T14121] do_syscall_64+0xcd/0xfa0 [ 516.404550][T14121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.404576][T14121] RIP: 0033:0x7f417258eec9 [ 516.404597][T14121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.404621][T14121] RSP: 002b:00007f41733f50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 516.404646][T14121] RAX: ffffffffffffffda RBX: 00007f41727e5fa8 RCX: 00007f417258eec9 [ 516.404664][T14121] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f41727e5fac [ 516.404680][T14121] RBP: 00007f41727e5fa0 R08: 00007f41733f6000 R09: 0000000000000000 [ 516.404696][T14121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.404711][T14121] R13: 00007f41727e6038 R14: 00007fffd8f801b0 R15: 00007fffd8f80298 [ 516.404747][T14121] [ 516.828986][T14122] FAULT_INJECTION: forcing a failure. [ 516.828986][T14122] name failslab, interval 1, probability 0, space 0, times 0 [ 516.841833][T14122] CPU: 1 UID: 0 PID: 14122 Comm: syz.3.1664 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 516.841886][T14122] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 516.841901][T14122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.841917][T14122] Call Trace: [ 516.841925][T14122] [ 516.841930][T14122] dump_stack_lvl+0x16c/0x1f0 [ 516.841951][T14122] should_fail_ex+0x512/0x640 [ 516.841968][T14122] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 516.841988][T14122] should_failslab+0xc2/0x120 [ 516.842008][T14122] __kvmalloc_node_noprof+0x141/0x9c0 [ 516.842023][T14122] ? __fget_files+0x204/0x3c0 [ 516.842038][T14122] ? do_getxattr+0xad/0x360 [ 516.842054][T14122] ? do_getxattr+0xad/0x360 [ 516.842065][T14122] do_getxattr+0xad/0x360 [ 516.842079][T14122] path_getxattrat+0x25d/0x2d0 [ 516.842095][T14122] ? __pfx_path_getxattrat+0x10/0x10 [ 516.842130][T14122] ? xfd_validate_state+0x61/0x180 [ 516.842156][T14122] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 516.842177][T14122] do_syscall_64+0xcd/0xfa0 [ 516.842196][T14122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.842210][T14122] RIP: 0033:0x7f417258eec9 [ 516.842222][T14122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.842235][T14122] RSP: 002b:00007f41733d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 516.842249][T14122] RAX: ffffffffffffffda RBX: 00007f41727e6090 RCX: 00007f417258eec9 [ 516.842259][T14122] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 516.842267][T14122] RBP: 00007f4172611f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.842276][T14122] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 516.842284][T14122] R13: 00007f41727e6128 R14: 00007f41727e6090 R15: 00007fffd8f80298 [ 516.842303][T14122] [ 517.382583][T14125] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 518.421130][T14148] random: crng reseeded on system resumption [ 519.933183][T14151] kexec: Could not allocate control_code_buffer [ 521.926274][T14204] random: crng reseeded on system resumption [ 524.581449][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 524.701451][T14271] random: crng reseeded on system resumption [ 526.399176][T14307] svc: failed to register nfsdv3 RPC service (errno 111). [ 526.417708][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.471155][T14307] svc: failed to register nfsaclv3 RPC service (errno 111). [ 526.840008][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.044764][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.285772][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.342178][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 527.353368][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 527.366579][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 527.376189][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 527.385984][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 527.655186][T14316] netlink: 122 bytes leftover after parsing attributes in process `syz.3.1709'. [ 528.037847][ T1111] bridge_slave_1: left allmulticast mode [ 528.049275][ T1111] bridge_slave_1: left promiscuous mode [ 528.057996][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.070991][ T1111] bridge_slave_0: left allmulticast mode [ 528.100712][ T1111] bridge_slave_0: left promiscuous mode [ 528.107776][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.881771][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.902731][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.939597][ T1111] bond0 (unregistering): Released all slaves [ 529.430636][ T5831] Bluetooth: hci4: command tx timeout [ 529.657890][T14351] random: crng reseeded on system resumption [ 530.114238][T14313] chnl_net:caif_netlink_parms(): no params data found [ 530.315223][T14369] random: crng reseeded on system resumption [ 530.813957][ T1111] hsr_slave_0: left promiscuous mode [ 530.831963][ T1111] hsr_slave_1: left promiscuous mode [ 530.883459][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.937316][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.955571][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.981783][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.316408][ T1111] veth1_macvtap: left promiscuous mode [ 531.358095][ T1111] veth0_macvtap: left promiscuous mode [ 531.412317][ T1111] veth1_vlan: left promiscuous mode [ 531.449297][ T1111] veth0_vlan: left promiscuous mode [ 531.485003][ T5831] Bluetooth: hci4: command tx timeout [ 532.694815][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 532.762492][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 533.572188][ T5831] Bluetooth: hci4: command tx timeout [ 533.700812][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.742342][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.768641][T14313] bridge_slave_0: entered allmulticast mode [ 533.795663][T14313] bridge_slave_0: entered promiscuous mode [ 533.899462][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.917759][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.928613][T14313] bridge_slave_1: entered allmulticast mode [ 533.939354][T14313] bridge_slave_1: entered promiscuous mode [ 534.090207][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.194888][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.583955][T14313] team0: Port device team_slave_0 added [ 534.605900][T14313] team0: Port device team_slave_1 added [ 534.832062][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.874563][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.941280][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.975417][T14423] FAULT_INJECTION: forcing a failure. [ 534.975417][T14423] name failslab, interval 1, probability 0, space 0, times 0 [ 534.982777][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.012295][T14434] random: crng reseeded on system resumption [ 535.017328][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.076701][T14423] CPU: 1 UID: 0 PID: 14423 Comm: syz.3.1725 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 535.076756][T14423] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 535.076768][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.076781][T14423] Call Trace: [ 535.076789][T14423] [ 535.076797][T14423] dump_stack_lvl+0x16c/0x1f0 [ 535.076829][T14423] should_fail_ex+0x512/0x640 [ 535.076860][T14423] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 535.076888][T14423] should_failslab+0xc2/0x120 [ 535.076921][T14423] kmem_cache_alloc_noprof+0x75/0x6e0 [ 535.076945][T14423] ? vm_area_alloc+0x1f/0x160 [ 535.076986][T14423] ? vm_area_alloc+0x1f/0x160 [ 535.077018][T14423] vm_area_alloc+0x1f/0x160 [ 535.077055][T14423] __mmap_region+0xf85/0x27a0 [ 535.077089][T14423] ? find_held_lock+0x2b/0x80 [ 535.077116][T14423] ? __pfx___mmap_region+0x10/0x10 [ 535.077139][T14423] ? finish_task_switch.isra.0+0x21c/0xc10 [ 535.077166][T14423] ? rcu_is_watching+0x12/0xc0 [ 535.077192][T14423] ? finish_task_switch.isra.0+0x221/0xc10 [ 535.077217][T14423] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 535.077274][T14423] ? __pfx___schedule+0x10/0x10 [ 535.077342][T14423] ? trace_cap_capable+0x18d/0x200 [ 535.077387][T14423] mmap_region+0x1ab/0x3f0 [ 535.077412][T14423] ? __get_unmapped_area+0x267/0x440 [ 535.077446][T14423] do_mmap+0xa3e/0x1210 [ 535.077483][T14423] ? __pfx_do_mmap+0x10/0x10 [ 535.077513][T14423] ? __pfx_down_write_killable+0x10/0x10 [ 535.077551][T14423] vm_mmap_pgoff+0x29e/0x470 [ 535.077589][T14423] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 535.077629][T14423] ? __x64_sys_futex+0x1e0/0x4c0 [ 535.077660][T14423] ? __x64_sys_futex+0x1e9/0x4c0 [ 535.077695][T14423] ksys_mmap_pgoff+0x7d/0x5c0 [ 535.077725][T14423] ? __pfx_ksys_write+0x10/0x10 [ 535.077757][T14423] __x64_sys_mmap+0x125/0x190 [ 535.077797][T14423] do_syscall_64+0xcd/0xfa0 [ 535.077827][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.077853][T14423] RIP: 0033:0x7f417258eec9 [ 535.077874][T14423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.077898][T14423] RSP: 002b:00007f41733f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 535.077923][T14423] RAX: ffffffffffffffda RBX: 00007f41727e5fa0 RCX: 00007f417258eec9 [ 535.077941][T14423] RDX: 0000000000000003 RSI: 0000000002020007 RDI: 0000000000000000 [ 535.077956][T14423] RBP: 00007f4172611f91 R08: fffffffffffffffa R09: 0000000000008000 [ 535.077972][T14423] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 535.077987][T14423] R13: 00007f41727e6038 R14: 00007f41727e5fa0 R15: 00007fffd8f80298 [ 535.078025][T14423] [ 535.464806][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.623507][ T5831] Bluetooth: hci4: command tx timeout [ 535.813201][T14313] hsr_slave_0: entered promiscuous mode [ 535.862450][T14313] hsr_slave_1: entered promiscuous mode [ 535.868838][T14313] debugfs: 'hsr0' already exists in 'hsr' [ 535.902024][T14313] Cannot create hsr debugfs directory [ 536.164651][T14437] random: crng reseeded on system resumption [ 536.515566][T14313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 536.599908][T14313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 536.643499][T14313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 536.672425][T14313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 536.773661][T14459] openvswitch: netlink: IPv4 tunnel dst address is zero [ 537.054900][T14313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.136589][T14313] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.199490][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.206690][ T6973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.328142][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.335351][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.231666][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.690943][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1741'. [ 539.735597][T14313] veth0_vlan: entered promiscuous mode [ 539.940693][T14313] veth1_vlan: entered promiscuous mode [ 540.234874][T14313] veth0_macvtap: entered promiscuous mode [ 540.457581][T14313] veth1_macvtap: entered promiscuous mode [ 540.826833][T14557] random: crng reseeded on system resumption [ 541.246797][T14313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.630286][T14313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.802477][T10607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.870551][T10607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.940397][T10607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.073400][T10607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.325800][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.433405][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.628522][ T6859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.684596][ T6859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.393497][T14592] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 543.687764][T14598] random: crng reseeded on system resumption [ 545.395559][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1755'. [ 545.861562][T14633] ucma_write: process 1967 (syz.3.1757) changed security contexts after opening file descriptor, this is not allowed. [ 546.005033][T14632] Process accounting paused [ 549.503996][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 549.782714][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 550.218146][T14715] random: crng reseeded on system resumption [ 550.519030][T14719] FAULT_INJECTION: forcing a failure. [ 550.519030][T14719] name failslab, interval 1, probability 0, space 0, times 0 [ 550.557148][T14719] CPU: 1 UID: 0 PID: 14719 Comm: syz.2.1774 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 550.557206][T14719] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 550.557221][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.557235][T14719] Call Trace: [ 550.557243][T14719] [ 550.557253][T14719] dump_stack_lvl+0x16c/0x1f0 [ 550.557287][T14719] should_fail_ex+0x512/0x640 [ 550.557318][T14719] ? __kmalloc_noprof+0xca/0x880 [ 550.557360][T14719] should_failslab+0xc2/0x120 [ 550.557395][T14719] __kmalloc_noprof+0xdd/0x880 [ 550.557432][T14719] ? lsm_blob_alloc+0x68/0x90 [ 550.557469][T14719] ? lsm_blob_alloc+0x68/0x90 [ 550.557496][T14719] lsm_blob_alloc+0x68/0x90 [ 550.557525][T14719] security_sk_alloc+0x30/0x270 [ 550.557559][T14719] sk_prot_alloc+0x1c7/0x2a0 [ 550.557595][T14719] sk_alloc+0x36/0xc20 [ 550.557620][T14719] __netlink_create+0x5e/0x2c0 [ 550.557650][T14719] __netlink_kernel_create+0xed/0x750 [ 550.557683][T14719] ? __pfx___netlink_kernel_create+0x10/0x10 [ 550.557725][T14719] uevent_net_init+0xf8/0x350 [ 550.557770][T14719] ? __pfx_uevent_net_init+0x10/0x10 [ 550.557804][T14719] ? rcu_is_watching+0x12/0xc0 [ 550.557831][T14719] ? __pfx_uevent_net_rcv+0x10/0x10 [ 550.557867][T14719] ? ops_init+0x77/0x5f0 [ 550.557902][T14719] ? __pfx_uevent_net_init+0x10/0x10 [ 550.557933][T14719] ops_init+0x1e2/0x5f0 [ 550.557967][T14719] setup_net+0x100/0x390 [ 550.557997][T14719] ? __pfx_setup_net+0x10/0x10 [ 550.558028][T14719] ? debug_mutex_init+0x37/0x70 [ 550.558060][T14719] copy_net_ns+0x2f8/0x690 [ 550.558096][T14719] create_new_namespaces+0x3ea/0xa90 [ 550.558134][T14719] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 550.558165][T14719] ksys_unshare+0x45b/0xa40 [ 550.558199][T14719] ? __pfx_ksys_unshare+0x10/0x10 [ 550.558233][T14719] ? xfd_validate_state+0x61/0x180 [ 550.558278][T14719] __x64_sys_unshare+0x31/0x40 [ 550.558310][T14719] do_syscall_64+0xcd/0xfa0 [ 550.558341][T14719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.558366][T14719] RIP: 0033:0x7fe870d8eec9 [ 550.558388][T14719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.558412][T14719] RSP: 002b:00007fe871c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 550.558437][T14719] RAX: ffffffffffffffda RBX: 00007fe870fe5fa0 RCX: 00007fe870d8eec9 [ 550.558454][T14719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 550.558470][T14719] RBP: 00007fe870e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 550.558484][T14719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.558499][T14719] R13: 00007fe870fe6038 R14: 00007fe870fe5fa0 R15: 00007ffc585cc1d8 [ 550.558537][T14719] [ 550.558618][T14719] kobject_uevent: unable to create netlink socket! [ 550.901077][T14723] hub 1-0:1.0: USB hub found [ 550.909302][T14723] hub 1-0:1.0: 1 port detected [ 552.378445][T14748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.396909][T14748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 552.403852][T14748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 552.411740][T14748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 552.418762][T14748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 552.426466][T14748] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 552.489107][T14748] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 554.261040][T14813] FAULT_INJECTION: forcing a failure. [ 554.261040][T14813] name failslab, interval 1, probability 0, space 0, times 0 [ 554.309672][T14813] CPU: 1 UID: 0 PID: 14813 Comm: syz.0.1788 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 554.309730][T14813] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 554.309744][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.309759][T14813] Call Trace: [ 554.309768][T14813] [ 554.309776][T14813] dump_stack_lvl+0x16c/0x1f0 [ 554.309811][T14813] should_fail_ex+0x512/0x640 [ 554.309840][T14813] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 554.309869][T14813] should_failslab+0xc2/0x120 [ 554.309901][T14813] kmem_cache_alloc_noprof+0x75/0x6e0 [ 554.309925][T14813] ? alloc_empty_file+0x55/0x1e0 [ 554.309974][T14813] ? alloc_empty_file+0x55/0x1e0 [ 554.310006][T14813] alloc_empty_file+0x55/0x1e0 [ 554.310041][T14813] alloc_file_pseudo+0x13a/0x230 [ 554.310078][T14813] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 554.310112][T14813] ? security_inode_init_security_anon+0x79/0x240 [ 554.310147][T14813] __anon_inode_getfile+0xe8/0x280 [ 554.310163][T14813] ? _copy_to_user+0x48/0xd0 [ 554.310183][T14813] io_uring_setup+0x153f/0x20e0 [ 554.310201][T14813] ? __pfx_io_uring_setup+0x10/0x10 [ 554.310231][T14813] ? xfd_validate_state+0x61/0x180 [ 554.310255][T14813] __x64_sys_io_uring_setup+0xc2/0x170 [ 554.310271][T14813] do_syscall_64+0xcd/0xfa0 [ 554.310289][T14813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.310303][T14813] RIP: 0033:0x7f485718eec9 [ 554.310315][T14813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.310329][T14813] RSP: 002b:00007f4858056038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 554.310343][T14813] RAX: ffffffffffffffda RBX: 00007f48573e5fa0 RCX: 00007f485718eec9 [ 554.310352][T14813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 554.310360][T14813] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 554.310369][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.310380][T14813] R13: 00007f48573e6038 R14: 00007f48573e5fa0 R15: 00007ffe6eaa4108 [ 554.310413][T14813] [ 554.412018][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.539079][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 554.545141][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.551138][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 554.557552][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.554697][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 557.991965][T14904] random: crng reseeded on system resumption [ 558.229579][T14906] random: crng reseeded on system resumption [ 558.248021][T14903] zswap: compressor not available [ 558.624799][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 559.191766][T14943] random: crng reseeded on system resumption [ 559.698866][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880343d7c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 560.237649][T14969] block nbd7: not configured, cannot reconfigure [ 560.636125][T14980] FAULT_INJECTION: forcing a failure. [ 560.636125][T14980] name failslab, interval 1, probability 0, space 0, times 0 [ 560.895699][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.0.1815 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 560.895735][T14980] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 560.895743][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.895751][T14980] Call Trace: [ 560.895756][T14980] [ 560.895762][T14980] dump_stack_lvl+0x16c/0x1f0 [ 560.895784][T14980] should_fail_ex+0x512/0x640 [ 560.895805][T14980] should_failslab+0xc2/0x120 [ 560.895824][T14980] kmem_cache_alloc_node_noprof+0x78/0x770 [ 560.895840][T14980] ? __alloc_skb+0x2b2/0x380 [ 560.895859][T14980] ? __alloc_skb+0x2b2/0x380 [ 560.895871][T14980] __alloc_skb+0x2b2/0x380 [ 560.895886][T14980] ? __pfx___alloc_skb+0x10/0x10 [ 560.895900][T14980] ? kasan_quarantine_put+0x10/0x240 [ 560.895922][T14980] __pskb_copy_fclone+0xef/0xb50 [ 560.895947][T14980] tipc_sk_mcast_rcv+0x52d/0xfa0 [ 560.895976][T14980] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 560.896011][T14980] ? find_held_lock+0x2b/0x80 [ 560.896027][T14980] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 560.896050][T14980] tipc_mcast_xmit+0x711/0xfe0 [ 560.896070][T14980] ? __pfx__copy_from_iter+0x10/0x10 [ 560.896087][T14980] ? __pfx___alloc_skb+0x10/0x10 [ 560.896103][T14980] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 560.896122][T14980] ? __lock_acquire+0x62e/0x1ce0 [ 560.896161][T14980] ? tipc_send_group_bcast+0x803/0xa50 [ 560.896178][T14980] tipc_send_group_bcast+0x803/0xa50 [ 560.896203][T14980] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 560.896225][T14980] ? __pfx_woken_wake_function+0x10/0x10 [ 560.896263][T14980] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 560.896286][T14980] ? find_held_lock+0x2b/0x80 [ 560.896304][T14980] __tipc_sendmsg+0x4ab/0x19a0 [ 560.896324][T14980] ? lock_acquire+0x179/0x350 [ 560.896348][T14980] ? __pfx___tipc_sendmsg+0x10/0x10 [ 560.896368][T14980] ? __lock_acquire+0xb97/0x1ce0 [ 560.896404][T14980] ? __local_bh_enable_ip+0xa4/0x120 [ 560.896423][T14980] tipc_sendmsg+0x4f/0x70 [ 560.896444][T14980] sock_write_iter+0x563/0x610 [ 560.896465][T14980] ? __pfx_sock_write_iter+0x10/0x10 [ 560.896492][T14980] ? __futex_wait+0x24b/0x2f0 [ 560.896514][T14980] ? copy_iovec_from_user+0x131/0x170 [ 560.896533][T14980] do_iter_readv_writev+0x65f/0x9e0 [ 560.896550][T14980] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 560.896567][T14980] ? bpf_lsm_file_permission+0x9/0x10 [ 560.896583][T14980] ? security_file_permission+0x71/0x210 [ 560.896598][T14980] ? rw_verify_area+0xcf/0x6c0 [ 560.896612][T14980] vfs_writev+0x35f/0xde0 [ 560.896628][T14980] ? __lock_acquire+0x62e/0x1ce0 [ 560.896648][T14980] ? __pfx_vfs_writev+0x10/0x10 [ 560.896679][T14980] ? __fget_files+0x20e/0x3c0 [ 560.896698][T14980] ? do_writev+0x28c/0x340 [ 560.896710][T14980] do_writev+0x28c/0x340 [ 560.896723][T14980] ? __pfx_do_writev+0x10/0x10 [ 560.896743][T14980] do_syscall_64+0xcd/0xfa0 [ 560.896761][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.896776][T14980] RIP: 0033:0x7f485718eec9 [ 560.896788][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.896801][T14980] RSP: 002b:00007f4858056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 560.896815][T14980] RAX: ffffffffffffffda RBX: 00007f48573e5fa0 RCX: 00007f485718eec9 [ 560.896825][T14980] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 560.896834][T14980] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.896843][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.896851][T14980] R13: 00007f48573e6038 R14: 00007f48573e5fa0 R15: 00007ffe6eaa4108 [ 560.896872][T14980] [ 561.306917][T14980] tipc: Failed to clone mcast rcv buffer [ 561.732785][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.739269][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.680906][T15003] netlink: 'syz.0.1822': attribute type 2 has an invalid length. [ 562.811749][T15008] random: crng reseeded on system resumption [ 563.886099][T15034] FAULT_INJECTION: forcing a failure. [ 563.886099][T15034] name fail_futex, interval 1, probability 0, space 0, times 0 [ 563.998564][T15034] CPU: 0 UID: 0 PID: 15034 Comm: syz.5.1831 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 563.998599][T15034] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 563.998607][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.998615][T15034] Call Trace: [ 563.998620][T15034] [ 563.998626][T15034] dump_stack_lvl+0x16c/0x1f0 [ 563.998648][T15034] should_fail_ex+0x512/0x640 [ 563.998669][T15034] get_futex_key+0x1d0/0x1560 [ 563.998692][T15034] ? __pfx_get_futex_key+0x10/0x10 [ 563.998717][T15034] futex_wake+0xea/0x530 [ 563.998740][T15034] ? __pfx_futex_wake+0x10/0x10 [ 563.998764][T15034] ? __pfx___might_resched+0x10/0x10 [ 563.998780][T15034] ? lockdep_init_map_type+0x5c/0x280 [ 563.998802][T15034] do_futex+0x1e3/0x350 [ 563.998827][T15034] ? __pfx_do_futex+0x10/0x10 [ 563.998847][T15034] ? file_init_path+0x4fe/0x760 [ 563.998870][T15034] __x64_sys_futex+0x1e0/0x4c0 [ 563.998892][T15034] ? __pfx___x64_sys_futex+0x10/0x10 [ 563.998918][T15034] do_syscall_64+0xcd/0xfa0 [ 563.998936][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.998950][T15034] RIP: 0033:0x7f3210b8eec9 [ 563.998962][T15034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.998977][T15034] RSP: 002b:00007f32119ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.998991][T15034] RAX: ffffffffffffffda RBX: 00007f3210de5fa8 RCX: 00007f3210b8eec9 [ 563.999001][T15034] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3210de5fac [ 563.999009][T15034] RBP: 00007f3210de5fa0 R08: 00007f32119bb000 R09: 0000000000000000 [ 563.999018][T15034] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 563.999027][T15034] R13: 00007f3210de6038 R14: 00007fffe5195150 R15: 00007fffe5195238 [ 563.999047][T15034] [ 564.200515][T15032] FAULT_INJECTION: forcing a failure. [ 564.200515][T15032] name failslab, interval 1, probability 0, space 0, times 0 [ 564.383945][T15032] CPU: 0 UID: 0 PID: 15032 Comm: syz.3.1829 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 564.384000][T15032] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 564.384014][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.384025][T15032] Call Trace: [ 564.384033][T15032] [ 564.384043][T15032] dump_stack_lvl+0x16c/0x1f0 [ 564.384077][T15032] should_fail_ex+0x512/0x640 [ 564.384106][T15032] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 564.384140][T15032] should_failslab+0xc2/0x120 [ 564.384170][T15032] kmem_cache_alloc_noprof+0x75/0x6e0 [ 564.384196][T15032] ? skb_clone+0x190/0x3f0 [ 564.384233][T15032] ? skb_clone+0x190/0x3f0 [ 564.384256][T15032] skb_clone+0x190/0x3f0 [ 564.384286][T15032] netlink_deliver_tap+0xabd/0xd30 [ 564.384320][T15032] netlink_unicast+0x64c/0x870 [ 564.384354][T15032] ? __pfx_netlink_unicast+0x10/0x10 [ 564.384395][T15032] netlink_sendmsg+0x8c8/0xdd0 [ 564.384428][T15032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.384464][T15032] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 564.384503][T15032] ____sys_sendmsg+0xa95/0xc70 [ 564.384534][T15032] ? copy_msghdr_from_user+0x10a/0x160 [ 564.384559][T15032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.384597][T15032] ? __pfx_futex_wake_mark+0x10/0x10 [ 564.384634][T15032] ___sys_sendmsg+0x134/0x1d0 [ 564.384663][T15032] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.384730][T15032] __sys_sendmsg+0x16d/0x220 [ 564.384756][T15032] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.384793][T15032] ? __x64_sys_futex+0x1e0/0x4c0 [ 564.384849][T15032] do_syscall_64+0xcd/0xfa0 [ 564.384880][T15032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.384905][T15032] RIP: 0033:0x7f417258eec9 [ 564.384924][T15032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.384948][T15032] RSP: 002b:00007f41733d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.384971][T15032] RAX: ffffffffffffffda RBX: 00007f41727e6090 RCX: 00007f417258eec9 [ 564.384987][T15032] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 564.385001][T15032] RBP: 00007f4172611f91 R08: 0000000000000000 R09: 0000000000000000 [ 564.385015][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.385029][T15032] R13: 00007f41727e6128 R14: 00007f41727e6090 R15: 00007fffd8f80298 [ 564.385065][T15032] [ 564.740184][T15026] bridge0: port 2(hsr0) entered blocking state [ 564.753760][T15026] bridge0: port 2(hsr0) entered disabled state [ 564.794202][T15026] hsr0: entered allmulticast mode [ 564.817899][T15026] hsr_slave_0: entered allmulticast mode [ 564.894291][T15026] hsr_slave_1: entered allmulticast mode [ 564.930106][T15026] hsr0: entered promiscuous mode [ 564.971945][T15026] bridge0: port 2(hsr0) entered blocking state [ 564.978231][T15026] bridge0: port 2(hsr0) entered forwarding state [ 565.032395][T15032] openvswitch: HfR: Dropping previously announced user features [ 565.704276][T15052] usb usb36: usbfs: process 15052 (syz.2.1837) did not claim interface 0 before use [ 568.065816][T15116] : Can't lookup blockdev [ 568.437535][T15127] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 568.437535][T15127] program syz.0.1849 not setting count and/or reply_len properly [ 568.757487][T15127] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1849'. [ 568.796650][T15135] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1849'. [ 569.290587][T15146] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 569.371728][T15127] netlink: 290 bytes leftover after parsing attributes in process `syz.0.1849'. [ 569.510744][T15135] netlink: 290 bytes leftover after parsing attributes in process `syz.0.1849'. [ 569.648068][T15150] FAULT_INJECTION: forcing a failure. [ 569.648068][T15150] name failslab, interval 1, probability 0, space 0, times 0 [ 569.666454][T15150] CPU: 0 UID: 0 PID: 15150 Comm: syz.0.1854 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 569.666510][T15150] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 569.666524][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.666539][T15150] Call Trace: [ 569.666548][T15150] [ 569.666558][T15150] dump_stack_lvl+0x16c/0x1f0 [ 569.666594][T15150] should_fail_ex+0x512/0x640 [ 569.666625][T15150] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 569.666662][T15150] should_failslab+0xc2/0x120 [ 569.666695][T15150] kmem_cache_alloc_noprof+0x75/0x6e0 [ 569.666722][T15150] ? __kernfs_new_node+0xd2/0x8e0 [ 569.666760][T15150] ? __kernfs_new_node+0xd2/0x8e0 [ 569.666789][T15150] __kernfs_new_node+0xd2/0x8e0 [ 569.666825][T15150] ? __pfx___kernfs_new_node+0x10/0x10 [ 569.666865][T15150] ? find_held_lock+0x2b/0x80 [ 569.666893][T15150] ? kernfs_root+0xee/0x2a0 [ 569.666931][T15150] kernfs_new_node+0x13c/0x1e0 [ 569.666973][T15150] __kernfs_create_file+0x53/0x350 [ 569.667004][T15150] sysfs_add_file_mode_ns+0x207/0x3c0 [ 569.667044][T15150] internal_create_group+0x578/0xf30 [ 569.667087][T15150] ? __pfx_internal_create_group+0x10/0x10 [ 569.667126][T15150] ? kernfs_create_link+0x1bd/0x240 [ 569.667158][T15150] internal_create_groups+0x9d/0x150 [ 569.667195][T15150] device_add+0x6d1/0x1aa0 [ 569.667231][T15150] ? __pfx_device_add+0x10/0x10 [ 569.667262][T15150] ? lockdep_init_map_type+0x5c/0x280 [ 569.667298][T15150] ? __init_waitqueue_head+0xca/0x150 [ 569.667345][T15150] netdev_register_kobject+0x1a9/0x3d0 [ 569.667383][T15150] register_netdevice+0x13dc/0x2270 [ 569.667420][T15150] ? __pfx_register_netdevice+0x10/0x10 [ 569.667451][T15150] ? dev_addr_mod+0x316/0x540 [ 569.667479][T15150] __tun_chr_ioctl+0x1eb6/0x4880 [ 569.667511][T15150] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 569.667553][T15150] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 569.667590][T15150] ? hook_file_ioctl_common+0x145/0x410 [ 569.667646][T15150] ? __fget_files+0x20e/0x3c0 [ 569.667677][T15150] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 569.667713][T15150] __x64_sys_ioctl+0x18b/0x210 [ 569.667751][T15150] do_syscall_64+0xcd/0xfa0 [ 569.667783][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.667808][T15150] RIP: 0033:0x7f485718eec9 [ 569.667825][T15150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.667850][T15150] RSP: 002b:00007f4858056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.667874][T15150] RAX: ffffffffffffffda RBX: 00007f48573e5fa0 RCX: 00007f485718eec9 [ 569.667891][T15150] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 569.667907][T15150] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.667923][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.667938][T15150] R13: 00007f48573e6038 R14: 00007f48573e5fa0 R15: 00007ffe6eaa4108 [ 569.667974][T15150] [ 570.490906][T15152] FAULT_INJECTION: forcing a failure. [ 570.490906][T15152] name failslab, interval 1, probability 0, space 0, times 0 [ 570.546590][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.5.1857 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 570.546652][T15152] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 570.546666][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 570.546682][T15152] Call Trace: [ 570.546691][T15152] [ 570.546701][T15152] dump_stack_lvl+0x16c/0x1f0 [ 570.546738][T15152] should_fail_ex+0x512/0x640 [ 570.546771][T15152] ? __kmalloc_cache_noprof+0x5f/0x780 [ 570.546817][T15152] should_failslab+0xc2/0x120 [ 570.546854][T15152] __kmalloc_cache_noprof+0x72/0x780 [ 570.546895][T15152] ? _raw_read_unlock_irqrestore+0x3b/0x80 [ 570.546926][T15152] ? snd_pcm_attach_substream+0x441/0xd60 [ 570.546964][T15152] ? snd_pcm_attach_substream+0x441/0xd60 [ 570.546994][T15152] snd_pcm_attach_substream+0x441/0xd60 [ 570.547030][T15152] snd_pcm_open_substream+0x8d/0x17f0 [ 570.547064][T15152] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 570.547098][T15152] ? rcu_is_watching+0x12/0xc0 [ 570.547132][T15152] snd_pcm_open+0x29e/0x730 [ 570.547168][T15152] ? __pfx_snd_pcm_open+0x10/0x10 [ 570.547202][T15152] ? __pfx_default_wake_function+0x10/0x10 [ 570.547242][T15152] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 570.547273][T15152] snd_pcm_capture_open+0x89/0xe0 [ 570.547304][T15152] snd_open+0x22a/0x4c0 [ 570.547342][T15152] ? __pfx_snd_open+0x10/0x10 [ 570.547377][T15152] chrdev_open+0x234/0x6a0 [ 570.547416][T15152] ? __pfx_apparmor_file_open+0x10/0x10 [ 570.547454][T15152] ? __pfx_chrdev_open+0x10/0x10 [ 570.547488][T15152] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 570.547526][T15152] do_dentry_open+0x982/0x1530 [ 570.547557][T15152] ? __pfx_chrdev_open+0x10/0x10 [ 570.547598][T15152] vfs_open+0x82/0x3f0 [ 570.547640][T15152] path_openat+0x1de4/0x2cb0 [ 570.547682][T15152] ? __pfx_path_openat+0x10/0x10 [ 570.547721][T15152] do_filp_open+0x20b/0x470 [ 570.547752][T15152] ? __pfx_do_filp_open+0x10/0x10 [ 570.547810][T15152] ? alloc_fd+0x471/0x7d0 [ 570.547846][T15152] do_sys_openat2+0x11b/0x1d0 [ 570.547882][T15152] ? __pfx_do_sys_openat2+0x10/0x10 [ 570.547934][T15152] __x64_sys_openat+0x174/0x210 [ 570.547971][T15152] ? __pfx___x64_sys_openat+0x10/0x10 [ 570.548025][T15152] do_syscall_64+0xcd/0xfa0 [ 570.548060][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.548087][T15152] RIP: 0033:0x7f3210b8eec9 [ 570.548109][T15152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.548137][T15152] RSP: 002b:00007f32119ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.548165][T15152] RAX: ffffffffffffffda RBX: 00007f3210de5fa0 RCX: 00007f3210b8eec9 [ 570.548184][T15152] RDX: 0000000000000080 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 570.548203][T15152] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 570.548219][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.548235][T15152] R13: 00007f3210de6038 R14: 00007f3210de5fa0 R15: 00007fffe5195238 [ 570.548273][T15152] [ 571.351154][T15166] random: crng reseeded on system resumption [ 571.769878][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032e78000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 572.184968][T15177] block nbd0: not configured, cannot reconfigure [ 572.456322][T15179] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input27 [ 572.590603][T15187] usb usb24: usbfs: process 15187 (syz.0.1863) did not claim interface 0 before use [ 572.774233][T15186] FAULT_INJECTION: forcing a failure. [ 572.774233][T15186] name failslab, interval 1, probability 0, space 0, times 0 [ 572.792792][T15186] CPU: 1 UID: 0 PID: 15186 Comm: syz.2.1865 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 572.792825][T15186] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 572.792834][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 572.792843][T15186] Call Trace: [ 572.792849][T15186] [ 572.792854][T15186] dump_stack_lvl+0x16c/0x1f0 [ 572.792875][T15186] should_fail_ex+0x512/0x640 [ 572.792892][T15186] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 572.792909][T15186] should_failslab+0xc2/0x120 [ 572.792929][T15186] kmem_cache_alloc_noprof+0x75/0x6e0 [ 572.792943][T15186] ? __kernfs_new_node+0xd2/0x8e0 [ 572.792964][T15186] ? __kernfs_new_node+0xd2/0x8e0 [ 572.792980][T15186] __kernfs_new_node+0xd2/0x8e0 [ 572.793000][T15186] ? __pfx___kernfs_new_node+0x10/0x10 [ 572.793022][T15186] ? find_held_lock+0x2b/0x80 [ 572.793038][T15186] ? kernfs_root+0xee/0x2a0 [ 572.793059][T15186] kernfs_new_node+0x13c/0x1e0 [ 572.793082][T15186] __kernfs_create_file+0x53/0x350 [ 572.793099][T15186] sysfs_add_file_mode_ns+0x207/0x3c0 [ 572.793121][T15186] internal_create_group+0x578/0xf30 [ 572.793144][T15186] ? __pfx_internal_create_group+0x10/0x10 [ 572.793173][T15186] ? kernfs_create_link+0x1bd/0x240 [ 572.793191][T15186] internal_create_groups+0x9d/0x150 [ 572.793211][T15186] device_add+0x6d1/0x1aa0 [ 572.793232][T15186] ? __pfx_device_add+0x10/0x10 [ 572.793249][T15186] ? lockdep_init_map_type+0x5c/0x280 [ 572.793269][T15186] ? __init_waitqueue_head+0xca/0x150 [ 572.793295][T15186] netdev_register_kobject+0x1a9/0x3d0 [ 572.793317][T15186] register_netdevice+0x13dc/0x2270 [ 572.793339][T15186] ? __pfx_register_netdevice+0x10/0x10 [ 572.793358][T15186] ? dev_addr_mod+0x316/0x540 [ 572.793374][T15186] __tun_chr_ioctl+0x1eb6/0x4880 [ 572.793393][T15186] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 572.793417][T15186] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 572.793438][T15186] ? hook_file_ioctl_common+0x145/0x410 [ 572.793465][T15186] ? __fget_files+0x20e/0x3c0 [ 572.793482][T15186] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 572.793501][T15186] __x64_sys_ioctl+0x18b/0x210 [ 572.793522][T15186] do_syscall_64+0xcd/0xfa0 [ 572.793540][T15186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.793554][T15186] RIP: 0033:0x7fe870d8eec9 [ 572.793566][T15186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.793579][T15186] RSP: 002b:00007fe871c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.793593][T15186] RAX: ffffffffffffffda RBX: 00007fe870fe5fa0 RCX: 00007fe870d8eec9 [ 572.793603][T15186] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 572.793612][T15186] RBP: 00007fe870e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 572.793623][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.793631][T15186] R13: 00007fe870fe6038 R14: 00007fe870fe5fa0 R15: 00007ffc585cc1d8 [ 572.793651][T15186] [ 573.145494][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 573.418049][T15198] FAULT_INJECTION: forcing a failure. [ 573.418049][T15198] name failslab, interval 1, probability 0, space 0, times 0 [ 573.515995][T15198] CPU: 0 UID: 0 PID: 15198 Comm: syz.0.1867 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 573.516055][T15198] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 573.516070][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 573.516085][T15198] Call Trace: [ 573.516095][T15198] [ 573.516105][T15198] dump_stack_lvl+0x16c/0x1f0 [ 573.516147][T15198] should_fail_ex+0x512/0x640 [ 573.516177][T15198] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 573.516212][T15198] should_failslab+0xc2/0x120 [ 573.516248][T15198] __kvmalloc_node_noprof+0x141/0x9c0 [ 573.516282][T15198] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 573.516324][T15198] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 573.516358][T15198] ? v4l2_ctrl_handler_init_class+0x113/0x350 [ 573.516391][T15198] v4l2_ctrl_handler_init_class+0x201/0x350 [ 573.516428][T15198] vicodec_open+0x18b/0xf70 [ 573.516457][T15198] ? kobject_get_unless_zero+0x156/0x1e0 [ 573.516495][T15198] v4l2_open+0x1cf/0x5e0 [ 573.516527][T15198] ? __pfx_v4l2_open+0x10/0x10 [ 573.516559][T15198] chrdev_open+0x234/0x6a0 [ 573.516585][T15198] ? __pfx_apparmor_file_open+0x10/0x10 [ 573.516620][T15198] ? __pfx_chrdev_open+0x10/0x10 [ 573.516649][T15198] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 573.516682][T15198] do_dentry_open+0x982/0x1530 [ 573.516710][T15198] ? __pfx_chrdev_open+0x10/0x10 [ 573.516745][T15198] vfs_open+0x82/0x3f0 [ 573.516781][T15198] path_openat+0x1de4/0x2cb0 [ 573.516822][T15198] ? __pfx_path_openat+0x10/0x10 [ 573.516858][T15198] do_filp_open+0x20b/0x470 [ 573.516884][T15198] ? __pfx_do_filp_open+0x10/0x10 [ 573.516936][T15198] ? alloc_fd+0x471/0x7d0 [ 573.516968][T15198] do_sys_openat2+0x11b/0x1d0 [ 573.517001][T15198] ? __pfx_do_sys_openat2+0x10/0x10 [ 573.517049][T15198] __x64_sys_openat+0x174/0x210 [ 573.517084][T15198] ? __pfx___x64_sys_openat+0x10/0x10 [ 573.517145][T15198] do_syscall_64+0xcd/0xfa0 [ 573.517179][T15198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.517204][T15198] RIP: 0033:0x7f485718eec9 [ 573.517225][T15198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.517248][T15198] RSP: 002b:00007f4858056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.517272][T15198] RAX: ffffffffffffffda RBX: 00007f48573e5fa0 RCX: 00007f485718eec9 [ 573.517289][T15198] RDX: 0000000000080000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 573.517307][T15198] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 573.517330][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.517345][T15198] R13: 00007f48573e6038 R14: 00007f48573e5fa0 R15: 00007ffe6eaa4108 [ 573.517382][T15198] [ 573.894004][T15205] FAULT_INJECTION: forcing a failure. [ 573.894004][T15205] name failslab, interval 1, probability 0, space 0, times 0 [ 573.907431][T15205] CPU: 0 UID: 0 PID: 15205 Comm: syz.2.1870 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 573.907488][T15205] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 573.907503][T15205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 573.907517][T15205] Call Trace: [ 573.907525][T15205] [ 573.907535][T15205] dump_stack_lvl+0x16c/0x1f0 [ 573.907569][T15205] should_fail_ex+0x512/0x640 [ 573.907600][T15205] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 573.907630][T15205] should_failslab+0xc2/0x120 [ 573.907663][T15205] kmem_cache_alloc_noprof+0x75/0x6e0 [ 573.907690][T15205] ? __kernfs_iattrs+0x124/0x3e0 [ 573.907726][T15205] ? __kernfs_iattrs+0x124/0x3e0 [ 573.907752][T15205] ? __pfx___might_resched+0x10/0x10 [ 573.907777][T15205] __kernfs_iattrs+0x124/0x3e0 [ 573.907808][T15205] ? __pfx___kernfs_iattrs+0x10/0x10 [ 573.907839][T15205] ? down_write+0x14d/0x200 [ 573.907870][T15205] ? inode_newsize_ok+0x13b/0x200 [ 573.907910][T15205] __kernfs_setattr+0x4d/0x3c0 [ 573.907943][T15205] kernfs_iop_setattr+0xda/0x120 [ 573.907975][T15205] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 573.908004][T15205] notify_change+0x6cf/0x12a0 [ 573.908050][T15205] do_truncate+0x1d7/0x230 [ 573.908079][T15205] ? __pfx_do_truncate+0x10/0x10 [ 573.908118][T15205] ? mnt_get_write_access+0x1e9/0x2f0 [ 573.908164][T15205] vfs_truncate+0x5d6/0x6e0 [ 573.908197][T15205] ? __pfx_vfs_truncate+0x10/0x10 [ 573.908229][T15205] ? putname+0x154/0x1a0 [ 573.908257][T15205] ? putname+0x154/0x1a0 [ 573.908292][T15205] __x64_sys_truncate+0x172/0x1e0 [ 573.908323][T15205] ? __pfx___x64_sys_truncate+0x10/0x10 [ 573.908365][T15205] do_syscall_64+0xcd/0xfa0 [ 573.908397][T15205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.908422][T15205] RIP: 0033:0x7fe870d8eec9 [ 573.908443][T15205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.908466][T15205] RSP: 002b:00007fe871c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 573.908491][T15205] RAX: ffffffffffffffda RBX: 00007fe870fe6090 RCX: 00007fe870d8eec9 [ 573.908509][T15205] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 573.908524][T15205] RBP: 00007fe870e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 573.908540][T15205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.908556][T15205] R13: 00007fe870fe6128 R14: 00007fe870fe6090 R15: 00007ffc585cc1d8 [ 573.908593][T15205] [ 575.211108][T15232] random: crng reseeded on system resumption [ 575.771271][T15238] mkiss: ax0: crc mode is auto. [ 576.108619][T15238] mkiss: ax0: crc mode is auto. [ 576.270240][T15226] Process accounting resumed [ 576.444570][T15260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'. [ 577.930661][T15298] random: crng reseeded on system resumption [ 579.129891][T15316] input: f¬ as /devices/virtual/input/input28 [ 579.453649][T15314] hub 1-0:1.0: USB hub found [ 579.458665][T15314] hub 1-0:1.0: 1 port detected [ 580.513556][T15337] FAULT_INJECTION: forcing a failure. [ 580.513556][T15337] name failslab, interval 1, probability 0, space 0, times 0 [ 580.543271][T15337] CPU: 0 UID: 0 PID: 15337 Comm: syz.2.1896 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 580.543328][T15337] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 580.543340][T15337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 580.543354][T15337] Call Trace: [ 580.543363][T15337] [ 580.543371][T15337] dump_stack_lvl+0x16c/0x1f0 [ 580.543404][T15337] should_fail_ex+0x512/0x640 [ 580.543435][T15337] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 580.543464][T15337] should_failslab+0xc2/0x120 [ 580.543496][T15337] kmem_cache_alloc_noprof+0x75/0x6e0 [ 580.543521][T15337] ? __kernfs_new_node+0xd2/0x8e0 [ 580.543558][T15337] ? __kernfs_new_node+0xd2/0x8e0 [ 580.543587][T15337] __kernfs_new_node+0xd2/0x8e0 [ 580.543621][T15337] ? __pfx___kernfs_new_node+0x10/0x10 [ 580.543659][T15337] ? find_held_lock+0x2b/0x80 [ 580.543687][T15337] ? kernfs_root+0xee/0x2a0 [ 580.543723][T15337] kernfs_new_node+0x13c/0x1e0 [ 580.543766][T15337] __kernfs_create_file+0x53/0x350 [ 580.543797][T15337] sysfs_add_file_mode_ns+0x207/0x3c0 [ 580.543836][T15337] internal_create_group+0x578/0xf30 [ 580.543887][T15337] ? __pfx_internal_create_group+0x10/0x10 [ 580.543928][T15337] ? kernfs_create_link+0x1bd/0x240 [ 580.543960][T15337] internal_create_groups+0x9d/0x150 [ 580.543998][T15337] device_add+0xf30/0x1aa0 [ 580.544033][T15337] ? __pfx_device_add+0x10/0x10 [ 580.544064][T15337] ? lockdep_init_map_type+0x5c/0x280 [ 580.544098][T15337] ? __init_waitqueue_head+0xca/0x150 [ 580.544142][T15337] netdev_register_kobject+0x1a9/0x3d0 [ 580.544195][T15337] register_netdevice+0x13dc/0x2270 [ 580.544235][T15337] ? __pfx_register_netdevice+0x10/0x10 [ 580.544269][T15337] ? dev_addr_mod+0x316/0x540 [ 580.544298][T15337] __tun_chr_ioctl+0x1eb6/0x4880 [ 580.544331][T15337] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 580.544372][T15337] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 580.544410][T15337] ? hook_file_ioctl_common+0x145/0x410 [ 580.544457][T15337] ? __fget_files+0x20e/0x3c0 [ 580.544487][T15337] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 580.544522][T15337] __x64_sys_ioctl+0x18b/0x210 [ 580.544559][T15337] do_syscall_64+0xcd/0xfa0 [ 580.544603][T15337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.544629][T15337] RIP: 0033:0x7fe870d8eec9 [ 580.544650][T15337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.544675][T15337] RSP: 002b:00007fe871c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.544699][T15337] RAX: ffffffffffffffda RBX: 00007fe870fe5fa0 RCX: 00007fe870d8eec9 [ 580.544716][T15337] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 580.544732][T15337] RBP: 00007fe870e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.544747][T15337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.544762][T15337] R13: 00007fe870fe6038 R14: 00007fe870fe5fa0 R15: 00007ffc585cc1d8 [ 580.544798][T15337] [ 581.400323][ T30] audit: type=1804 audit(4294967345.526:29): pid=15343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1897" name="/newroot/454/file0" dev="tmpfs" ino=2432 res=1 errno=0 [ 581.749462][T15351] random: crng reseeded on system resumption [ 582.342419][T15359] random: crng reseeded on system resumption [ 582.587143][T15369] db_root: not a directory: /dev/audio1 [ 582.614235][ T30] audit: type=1800 audit(4294967346.722:30): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1902" name="dbroot" dev="configfs" ino=58218 res=0 errno=0 [ 583.251797][T15377] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1903'. [ 583.428273][T15376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1903'. [ 583.577604][T15387] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1904'. [ 583.708630][T15383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.797782][T15391] FAULT_INJECTION: forcing a failure. [ 583.797782][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 583.811467][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.0.1906 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 583.811520][T15391] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 583.811529][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 583.811537][T15391] Call Trace: [ 583.811543][T15391] [ 583.811549][T15391] dump_stack_lvl+0x16c/0x1f0 [ 583.811569][T15391] should_fail_ex+0x512/0x640 [ 583.811587][T15391] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 583.811604][T15391] should_failslab+0xc2/0x120 [ 583.811628][T15391] kmem_cache_alloc_noprof+0x75/0x6e0 [ 583.811643][T15391] ? __kernfs_new_node+0xd2/0x8e0 [ 583.811666][T15391] ? __kernfs_new_node+0xd2/0x8e0 [ 583.811683][T15391] __kernfs_new_node+0xd2/0x8e0 [ 583.811703][T15391] ? __pfx___kernfs_new_node+0x10/0x10 [ 583.811726][T15391] ? find_held_lock+0x2b/0x80 [ 583.811742][T15391] ? kernfs_root+0xee/0x2a0 [ 583.811763][T15391] kernfs_new_node+0x13c/0x1e0 [ 583.811786][T15391] __kernfs_create_file+0x53/0x350 [ 583.811803][T15391] sysfs_add_file_mode_ns+0x207/0x3c0 [ 583.811824][T15391] internal_create_group+0x578/0xf30 [ 583.811847][T15391] ? __pfx_internal_create_group+0x10/0x10 [ 583.811868][T15391] ? kernfs_create_link+0x1bd/0x240 [ 583.811885][T15391] internal_create_groups+0x9d/0x150 [ 583.811905][T15391] device_add+0xf30/0x1aa0 [ 583.811925][T15391] ? __pfx_device_add+0x10/0x10 [ 583.811942][T15391] ? lockdep_init_map_type+0x5c/0x280 [ 583.811962][T15391] ? __init_waitqueue_head+0xca/0x150 [ 583.811988][T15391] netdev_register_kobject+0x1a9/0x3d0 [ 583.812010][T15391] register_netdevice+0x13dc/0x2270 [ 583.812033][T15391] ? __pfx_register_netdevice+0x10/0x10 [ 583.812052][T15391] ? dev_addr_mod+0x316/0x540 [ 583.812067][T15391] __tun_chr_ioctl+0x1eb6/0x4880 [ 583.812086][T15391] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 583.812109][T15391] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 583.812130][T15391] ? hook_file_ioctl_common+0x145/0x410 [ 583.812156][T15391] ? __fget_files+0x20e/0x3c0 [ 583.812174][T15391] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 583.812193][T15391] __x64_sys_ioctl+0x18b/0x210 [ 583.812214][T15391] do_syscall_64+0xcd/0xfa0 [ 583.812232][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.812246][T15391] RIP: 0033:0x7f485718eec9 [ 583.812259][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.812272][T15391] RSP: 002b:00007f4858056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.812287][T15391] RAX: ffffffffffffffda RBX: 00007f48573e5fa0 RCX: 00007f485718eec9 [ 583.812296][T15391] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 583.812305][T15391] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.812313][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.812321][T15391] R13: 00007f48573e6038 R14: 00007f48573e5fa0 R15: 00007ffe6eaa4108 [ 583.812342][T15391] [ 584.625068][T15397] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1909'. [ 584.738068][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 584.927871][T15404] random: crng reseeded on system resumption [ 585.338780][T15411] random: crng reseeded on system resumption [ 586.778476][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 586.792742][T15430] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.814455][ T6971] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 11 with max blocks 40 with error 74 [ 586.853243][ T6971] EXT4-fs (sda1): This should not happen!! Data will be lost [ 586.853243][ T6971] [ 586.930570][T15430] bridge_slave_1 (unregistering): left allmulticast mode [ 586.946674][T15430] bridge_slave_1 (unregistering): left promiscuous mode [ 586.953924][T15430] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.901954][ T5840] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 591.114137][T15501] sp0: Synchronizing with TNC è[ 592.944613][T15564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'. [ 593.055830][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1943'. [ 593.067430][T15564] nbd: must specify a size in bytes for the device [ 594.261700][T15592] FAULT_INJECTION: forcing a failure. [ 594.261700][T15592] name failslab, interval 1, probability 0, space 0, times 0 [ 594.397784][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.0.1948 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 594.397841][T15592] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 594.397855][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.397869][T15592] Call Trace: [ 594.397878][T15592] [ 594.397888][T15592] dump_stack_lvl+0x16c/0x1f0 [ 594.397926][T15592] should_fail_ex+0x512/0x640 [ 594.397957][T15592] ? __kmalloc_cache_noprof+0x5f/0x780 [ 594.397997][T15592] should_failslab+0xc2/0x120 [ 594.398028][T15592] __kmalloc_cache_noprof+0x72/0x780 [ 594.398069][T15592] ? resv_map_alloc+0x46/0x400 [ 594.398108][T15592] ? resv_map_alloc+0x46/0x400 [ 594.398137][T15592] resv_map_alloc+0x46/0x400 [ 594.398172][T15592] hugetlbfs_get_inode+0x33f/0x730 [ 594.398198][T15592] ? security_capable+0x7e/0x260 [ 594.398236][T15592] hugetlb_file_setup+0x38d/0x620 [ 594.398268][T15592] newseg+0xa74/0xe60 [ 594.398300][T15592] ? __pfx_newseg+0x10/0x10 [ 594.398322][T15592] ? find_held_lock+0x2b/0x80 [ 594.398350][T15592] ? ipcget+0xa98/0xfa0 [ 594.398381][T15592] ipcget+0xaf3/0xfa0 [ 594.398419][T15592] ? __pfx___might_resched+0x10/0x10 [ 594.398446][T15592] ? __pfx_ipcget+0x10/0x10 [ 594.398473][T15592] ? __x64_sys_futex+0x1e0/0x4c0 [ 594.398505][T15592] ? __x64_sys_futex+0x1e9/0x4c0 [ 594.398545][T15592] __x64_sys_shmget+0x13b/0x1b0 [ 594.398573][T15592] ? __pfx___x64_sys_shmget+0x10/0x10 [ 594.398605][T15592] ? rcu_is_watching+0x12/0xc0 [ 594.398636][T15592] do_syscall_64+0xcd/0xfa0 [ 594.398677][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.398704][T15592] RIP: 0033:0x7f485718eec9 [ 594.398725][T15592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.398751][T15592] RSP: 002b:00007f4858035038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 594.398776][T15592] RAX: ffffffffffffffda RBX: 00007f48573e6090 RCX: 00007f485718eec9 [ 594.398793][T15592] RDX: 000000000000ffff RSI: 0000000000000006 RDI: 0000000000000004 [ 594.398808][T15592] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 594.398821][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.398835][T15592] R13: 00007f48573e6128 R14: 00007f48573e6090 R15: 00007ffe6eaa4108 [ 594.398870][T15592] [ 595.060603][T15598] random: crng reseeded on system resumption [ 595.071526][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1949'. [ 595.527429][T15609] random: crng reseeded on system resumption [ 597.032390][T15645] qrtr: Invalid version 0 [ 597.427952][T15655] FAULT_INJECTION: forcing a failure. [ 597.427952][T15655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.584503][T15655] CPU: 0 UID: 0 PID: 15655 Comm: syz.0.1963 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 597.584536][T15655] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 597.584543][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.584552][T15655] Call Trace: [ 597.584557][T15655] [ 597.584563][T15655] dump_stack_lvl+0x16c/0x1f0 [ 597.584585][T15655] should_fail_ex+0x512/0x640 [ 597.584605][T15655] should_fail_alloc_page+0xe7/0x130 [ 597.584627][T15655] prepare_alloc_pages+0x3c2/0x610 [ 597.584647][T15655] ? rcu_is_watching+0x12/0xc0 [ 597.584664][T15655] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 597.584680][T15655] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 597.584697][T15655] ? is_bpf_text_address+0x94/0x1a0 [ 597.584717][T15655] ? kernel_text_address+0x8d/0x100 [ 597.584739][T15655] ? __kernel_text_address+0xd/0x40 [ 597.584751][T15655] ? unwind_get_return_address+0x59/0xa0 [ 597.584765][T15655] ? arch_stack_walk+0xa6/0x100 [ 597.584781][T15655] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.584803][T15655] ? stack_depot_save_flags+0x29/0x9c0 [ 597.584820][T15655] ? __pfx_stack_trace_save+0x10/0x10 [ 597.584838][T15655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.584862][T15655] ? policy_nodemask+0xea/0x4e0 [ 597.584883][T15655] alloc_pages_mpol+0x1fb/0x550 [ 597.584902][T15655] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 597.584926][T15655] alloc_pages_noprof+0x131/0x390 [ 597.584945][T15655] kimage_alloc_pages+0x74/0x350 [ 597.584961][T15655] kimage_alloc_control_pages+0x153/0xa00 [ 597.584981][T15655] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 597.585002][T15655] do_kexec_load+0x478/0x8a0 [ 597.585018][T15655] ? __pfx_do_kexec_load+0x10/0x10 [ 597.585035][T15655] ? _copy_from_user+0x59/0xd0 [ 597.585055][T15655] __x64_sys_kexec_load+0x1bf/0x230 [ 597.585073][T15655] do_syscall_64+0xcd/0xfa0 [ 597.585090][T15655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.585105][T15655] RIP: 0033:0x7f485718eec9 [ 597.585117][T15655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.585131][T15655] RSP: 002b:00007f4858035038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 597.585146][T15655] RAX: ffffffffffffffda RBX: 00007f48573e6090 RCX: 00007f485718eec9 [ 597.585156][T15655] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 597.585165][T15655] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.585173][T15655] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 597.585182][T15655] R13: 00007f48573e6128 R14: 00007f48573e6090 R15: 00007ffe6eaa4108 [ 597.585202][T15655] [ 597.585224][T15655] kexec: Could not allocate control_code_buffer [ 597.744531][T15657] syz.2.1964(15657): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 598.332536][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b4ee000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 598.774996][T15690] capability: warning: `syz.2.1970' uses deprecated v2 capabilities in a way that may be insecure [ 599.406143][T15722] Falling back ldisc for ttyS2. [ 599.454614][T15724] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[15724] [ 600.600520][ T30] audit: type=1804 audit(4294967364.836:31): pid=15744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1985" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=253 res=1 errno=0 [ 603.105116][ T30] audit: type=1800 audit(4294967367.349:32): pid=15812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1997" name="dbroot" dev="configfs" ino=62506 res=0 errno=0 [ 605.222399][T15858] random: crng reseeded on system resumption [ 605.523398][T15859] FAULT_INJECTION: forcing a failure. [ 605.523398][T15859] name failslab, interval 1, probability 0, space 0, times 0 [ 605.563889][T15859] CPU: 1 UID: 0 PID: 15859 Comm: syz.5.2006 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 605.563925][T15859] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 605.563933][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 605.563942][T15859] Call Trace: [ 605.563947][T15859] [ 605.563953][T15859] dump_stack_lvl+0x16c/0x1f0 [ 605.563975][T15859] should_fail_ex+0x512/0x640 [ 605.563993][T15859] ? __kmalloc_cache_noprof+0x5f/0x780 [ 605.564017][T15859] ? __pfx_serial8250_interrupt+0x10/0x10 [ 605.564035][T15859] should_failslab+0xc2/0x120 [ 605.564054][T15859] ? __pfx_serial8250_interrupt+0x10/0x10 [ 605.564069][T15859] __kmalloc_cache_noprof+0x72/0x780 [ 605.564100][T15859] ? request_threaded_irq+0x1ae/0x3e0 [ 605.564120][T15859] ? do_raw_spin_lock+0x12c/0x2b0 [ 605.564144][T15859] ? __pfx_serial8250_interrupt+0x10/0x10 [ 605.564160][T15859] ? request_threaded_irq+0x1ae/0x3e0 [ 605.564177][T15859] request_threaded_irq+0x1ae/0x3e0 [ 605.564199][T15859] univ8250_setup_irq+0x5cd/0x760 [ 605.564215][T15859] ? io_serial_in+0x60/0xb0 [ 605.564235][T15859] serial8250_do_startup+0x723/0x3440 [ 605.564254][T15859] ? mark_held_locks+0x49/0x80 [ 605.564274][T15859] serial8250_startup+0x62/0x80 [ 605.564289][T15859] uart_startup+0x507/0x1300 [ 605.564316][T15859] uart_ioctl+0xfe5/0x3080 [ 605.564333][T15859] ? __pfx_uart_ioctl+0x10/0x10 [ 605.564345][T15859] ? tomoyo_path_number_perm+0x18d/0x580 [ 605.564368][T15859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 605.564392][T15859] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.564417][T15859] ? __pfx_uart_ioctl+0x10/0x10 [ 605.564430][T15859] tty_ioctl+0x65e/0x1680 [ 605.564452][T15859] ? __pfx_tty_ioctl+0x10/0x10 [ 605.564477][T15859] ? find_held_lock+0x2b/0x80 [ 605.564491][T15859] ? hook_file_ioctl_common+0x145/0x410 [ 605.564518][T15859] ? __fget_files+0x20e/0x3c0 [ 605.564535][T15859] ? __pfx_tty_ioctl+0x10/0x10 [ 605.564556][T15859] __x64_sys_ioctl+0x18b/0x210 [ 605.564577][T15859] do_syscall_64+0xcd/0xfa0 [ 605.564595][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.564609][T15859] RIP: 0033:0x7f3210b8eec9 [ 605.564622][T15859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.564636][T15859] RSP: 002b:00007f3211999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.564649][T15859] RAX: ffffffffffffffda RBX: 00007f3210de6090 RCX: 00007f3210b8eec9 [ 605.564659][T15859] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000008 [ 605.564667][T15859] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.564675][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.564684][T15859] R13: 00007f3210de6128 R14: 00007f3210de6090 R15: 00007fffe5195238 [ 605.564705][T15859] [ 606.507367][T15889] i2c i2c-0: new_device: Missing parameters [ 606.691320][T15862] Process accounting paused [ 606.850796][T15899] random: crng reseeded on system resumption [ 607.323164][T15905] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 607.332063][T15905] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 608.464321][T15922] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 608.604791][T15923] nbd: socks must be embedded in a SOCK_ITEM attr [ 608.849818][T15945] random: crng reseeded on system resumption [ 610.377019][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2029'. [ 610.659164][T15990] random: crng reseeded on system resumption [ 611.938367][T16023] random: crng reseeded on system resumption [ 612.953911][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2038'. [ 612.987510][T16043] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 617.668615][T16156] ======================================================= [ 617.668615][T16156] WARNING: The mand mount option has been deprecated and [ 617.668615][T16156] and is ignored by this kernel. Remove the mand [ 617.668615][T16156] option from the mount to silence this warning. [ 617.668615][T16156] ======================================================= [ 618.080345][T16166] random: crng reseeded on system resumption [ 620.283459][T16217] 0x000200000001-0xa29656a63616329 : "" [ 620.304832][T16217] mtd: partition "" is out of reach -- disabled [ 620.390845][T16219] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[16219] [ 620.423840][T16217] ftl_cs: FTL header not found. [ 621.496688][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 622.436124][T16265] sysfs_service_op_show: Client not running :-5: [ 622.855083][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.865968][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.312956][T16283] FAULT_INJECTION: forcing a failure. [ 623.312956][T16283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 623.364070][T16283] CPU: 1 UID: 0 PID: 16283 Comm: syz.5.2082 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 623.364128][T16283] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 623.364142][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 623.364155][T16283] Call Trace: [ 623.364162][T16283] [ 623.364172][T16283] dump_stack_lvl+0x16c/0x1f0 [ 623.364208][T16283] should_fail_ex+0x512/0x640 [ 623.364244][T16283] should_fail_alloc_page+0xe7/0x130 [ 623.364277][T16283] prepare_alloc_pages+0x3c2/0x610 [ 623.364309][T16283] ? arch_stack_walk+0xa6/0x100 [ 623.364338][T16283] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 623.364376][T16283] ? stack_trace_save+0x8e/0xc0 [ 623.364405][T16283] ? __pfx_stack_trace_save+0x10/0x10 [ 623.364435][T16283] ? stack_depot_save_flags+0x29/0x9c0 [ 623.364470][T16283] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 623.364499][T16283] ? kasan_save_stack+0x42/0x60 [ 623.364525][T16283] ? kasan_save_stack+0x33/0x60 [ 623.364549][T16283] ? kasan_save_track+0x14/0x30 [ 623.364584][T16283] ? __kasan_slab_alloc+0x89/0x90 [ 623.364612][T16283] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 623.364636][T16283] ? security_inode_alloc+0x3b/0x2b0 [ 623.364668][T16283] ? inode_init_always_gfp+0xce4/0x1030 [ 623.364697][T16283] ? do_syscall_64+0xcd/0xfa0 [ 623.364724][T16283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.364759][T16283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 623.364800][T16283] ? policy_nodemask+0xea/0x4e0 [ 623.364836][T16283] alloc_pages_mpol+0x1fb/0x550 [ 623.364870][T16283] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 623.364913][T16283] ___kmalloc_large_node+0xed/0x160 [ 623.364951][T16283] __kmalloc_large_node_noprof+0x1c/0x70 [ 623.364989][T16283] __kmalloc_noprof.cold+0xc/0x62 [ 623.365026][T16283] ? sk_prot_alloc+0x1a8/0x2a0 [ 623.365067][T16283] ? sk_prot_alloc+0x1a8/0x2a0 [ 623.365099][T16283] sk_prot_alloc+0x1a8/0x2a0 [ 623.365135][T16283] sk_alloc+0x36/0xc20 [ 623.365164][T16283] can_create+0x1e5/0x630 [ 623.365198][T16283] __sock_create+0x338/0x8d0 [ 623.365242][T16283] __sys_socket+0x14d/0x260 [ 623.365280][T16283] ? __pfx___sys_socket+0x10/0x10 [ 623.365316][T16283] ? xfd_validate_state+0x61/0x180 [ 623.365349][T16283] ? __pfx_ksys_write+0x10/0x10 [ 623.365384][T16283] __x64_sys_socket+0x72/0xb0 [ 623.365420][T16283] ? lockdep_hardirqs_on+0x7c/0x110 [ 623.365448][T16283] do_syscall_64+0xcd/0xfa0 [ 623.365480][T16283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.365505][T16283] RIP: 0033:0x7f3210b8eec9 [ 623.365527][T16283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.365559][T16283] RSP: 002b:00007f3211978038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 623.365585][T16283] RAX: ffffffffffffffda RBX: 00007f3210de6180 RCX: 00007f3210b8eec9 [ 623.365603][T16283] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 623.365619][T16283] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 623.365636][T16283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.365651][T16283] R13: 00007f3210de6218 R14: 00007f3210de6180 R15: 00007fffe5195238 [ 623.365688][T16283] [ 624.341290][T16301] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 626.279270][T16340] FAULT_INJECTION: forcing a failure. [ 626.279270][T16340] name failslab, interval 1, probability 0, space 0, times 0 [ 626.338256][T16340] CPU: 0 UID: 0 PID: 16340 Comm: syz.3.2092 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 626.338316][T16340] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 626.338331][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 626.338347][T16340] Call Trace: [ 626.338355][T16340] [ 626.338365][T16340] dump_stack_lvl+0x16c/0x1f0 [ 626.338400][T16340] should_fail_ex+0x512/0x640 [ 626.338440][T16340] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 626.338472][T16340] should_failslab+0xc2/0x120 [ 626.338508][T16340] kmem_cache_alloc_noprof+0x75/0x6e0 [ 626.338534][T16340] ? __anon_vma_prepare+0xae/0x5e0 [ 626.338578][T16340] ? __anon_vma_prepare+0xae/0x5e0 [ 626.338614][T16340] __anon_vma_prepare+0xae/0x5e0 [ 626.338649][T16340] ? do_raw_spin_lock+0x12c/0x2b0 [ 626.338691][T16340] __vmf_anon_prepare+0x11c/0x240 [ 626.338726][T16340] do_huge_pmd_anonymous_page+0x161/0x1f50 [ 626.338756][T16340] ? __pmd_alloc+0x64f/0x8b0 [ 626.338792][T16340] __handle_mm_fault+0x1cff/0x2aa0 [ 626.338841][T16340] ? __pfx___handle_mm_fault+0x10/0x10 [ 626.338911][T16340] handle_mm_fault+0x589/0xd10 [ 626.338955][T16340] __get_user_pages+0x54e/0x3530 [ 626.339004][T16340] ? __pfx___get_user_pages+0x10/0x10 [ 626.339052][T16340] populate_vma_page_range+0x267/0x3f0 [ 626.339090][T16340] ? __pfx_populate_vma_page_range+0x10/0x10 [ 626.339125][T16340] ? __pfx_find_vma_intersection+0x10/0x10 [ 626.339160][T16340] ? do_mmap+0x69c/0x1210 [ 626.339195][T16340] __mm_populate+0x1d8/0x380 [ 626.339232][T16340] ? __pfx___mm_populate+0x10/0x10 [ 626.339270][T16340] ? up_write+0x1b2/0x520 [ 626.339310][T16340] vm_mmap_pgoff+0x37f/0x470 [ 626.339345][T16340] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 626.339383][T16340] ? __x64_sys_futex+0x1e0/0x4c0 [ 626.339416][T16340] ? __x64_sys_futex+0x1e9/0x4c0 [ 626.339463][T16340] ksys_mmap_pgoff+0x7d/0x5c0 [ 626.339494][T16340] ? xfd_validate_state+0x61/0x180 [ 626.339530][T16340] ? __pfx_ksys_write+0x10/0x10 [ 626.339563][T16340] __x64_sys_mmap+0x125/0x190 [ 626.339603][T16340] do_syscall_64+0xcd/0xfa0 [ 626.339635][T16340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.339659][T16340] RIP: 0033:0x7f417258eec9 [ 626.339680][T16340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.339707][T16340] RSP: 002b:00007f41733f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 626.339729][T16340] RAX: ffffffffffffffda RBX: 00007f41727e5fa0 RCX: 00007f417258eec9 [ 626.339746][T16340] RDX: 00000000000045bd RSI: 000000000040000c RDI: 0000000000000000 [ 626.339762][T16340] RBP: 00007f4172611f91 R08: 0000000000000002 R09: 0000000000008000 [ 626.339777][T16340] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 626.339792][T16340] R13: 00007f41727e6038 R14: 00007f41727e5fa0 R15: 00007fffd8f80298 [ 626.339830][T16340] [ 627.324385][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 629.267603][T16374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2097'. [ 630.098007][T16411] FAULT_INJECTION: forcing a failure. [ 630.098007][T16411] name failslab, interval 1, probability 0, space 0, times 0 [ 630.154125][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.2.2106 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 630.154162][T16411] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 630.154170][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 630.154179][T16411] Call Trace: [ 630.154184][T16411] [ 630.154191][T16411] dump_stack_lvl+0x16c/0x1f0 [ 630.154213][T16411] should_fail_ex+0x512/0x640 [ 630.154232][T16411] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 630.154249][T16411] should_failslab+0xc2/0x120 [ 630.154268][T16411] kmem_cache_alloc_noprof+0x75/0x6e0 [ 630.154282][T16411] ? __kernfs_new_node+0xd2/0x8e0 [ 630.154309][T16411] ? __kernfs_new_node+0xd2/0x8e0 [ 630.154326][T16411] __kernfs_new_node+0xd2/0x8e0 [ 630.154346][T16411] ? __pfx___kernfs_new_node+0x10/0x10 [ 630.154374][T16411] ? find_held_lock+0x2b/0x80 [ 630.154390][T16411] ? kernfs_root+0xee/0x2a0 [ 630.154411][T16411] kernfs_new_node+0x13c/0x1e0 [ 630.154434][T16411] __kernfs_create_file+0x53/0x350 [ 630.154451][T16411] sysfs_add_file_mode_ns+0x207/0x3c0 [ 630.154473][T16411] internal_create_group+0x578/0xf30 [ 630.154496][T16411] ? __pfx_internal_create_group+0x10/0x10 [ 630.154518][T16411] ? kernfs_create_link+0x1bd/0x240 [ 630.154535][T16411] internal_create_groups+0x9d/0x150 [ 630.154555][T16411] device_add+0xf30/0x1aa0 [ 630.154575][T16411] ? __pfx_device_add+0x10/0x10 [ 630.154592][T16411] ? lockdep_init_map_type+0x5c/0x280 [ 630.154612][T16411] ? __init_waitqueue_head+0xca/0x150 [ 630.154638][T16411] netdev_register_kobject+0x1a9/0x3d0 [ 630.154661][T16411] register_netdevice+0x13dc/0x2270 [ 630.154683][T16411] ? __pfx_register_netdevice+0x10/0x10 [ 630.154702][T16411] ? dev_addr_mod+0x316/0x540 [ 630.154718][T16411] __tun_chr_ioctl+0x1eb6/0x4880 [ 630.154737][T16411] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 630.154761][T16411] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 630.154781][T16411] ? hook_file_ioctl_common+0x145/0x410 [ 630.154809][T16411] ? __fget_files+0x20e/0x3c0 [ 630.154825][T16411] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 630.154845][T16411] __x64_sys_ioctl+0x18b/0x210 [ 630.154866][T16411] do_syscall_64+0xcd/0xfa0 [ 630.154884][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.154898][T16411] RIP: 0033:0x7fe870d8eec9 [ 630.154910][T16411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.154925][T16411] RSP: 002b:00007fe871c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.154939][T16411] RAX: ffffffffffffffda RBX: 00007fe870fe5fa0 RCX: 00007fe870d8eec9 [ 630.154948][T16411] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 630.154957][T16411] RBP: 00007fe870e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 630.154965][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.154973][T16411] R13: 00007fe870fe6038 R14: 00007fe870fe5fa0 R15: 00007ffc585cc1d8 [ 630.154994][T16411] [ 630.451582][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.111830][T16424] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2110'. [ 632.887574][T16458] FAULT_INJECTION: forcing a failure. [ 632.887574][T16458] name failslab, interval 1, probability 0, space 0, times 0 [ 632.987680][T16458] CPU: 1 UID: 0 PID: 16458 Comm: syz.2.2119 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 632.987714][T16458] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 632.987722][T16458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.987731][T16458] Call Trace: [ 632.987736][T16458] [ 632.987742][T16458] dump_stack_lvl+0x16c/0x1f0 [ 632.987764][T16458] should_fail_ex+0x512/0x640 [ 632.987782][T16458] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 632.987799][T16458] should_failslab+0xc2/0x120 [ 632.987818][T16458] kmem_cache_alloc_noprof+0x75/0x6e0 [ 632.987832][T16458] ? __kernfs_new_node+0xd2/0x8e0 [ 632.987853][T16458] ? __kernfs_new_node+0xd2/0x8e0 [ 632.987875][T16458] __kernfs_new_node+0xd2/0x8e0 [ 632.987896][T16458] ? __pfx___kernfs_new_node+0x10/0x10 [ 632.987918][T16458] ? find_held_lock+0x2b/0x80 [ 632.987934][T16458] ? kernfs_root+0xee/0x2a0 [ 632.987955][T16458] kernfs_new_node+0x13c/0x1e0 [ 632.987974][T16458] ? net_ns_get_ownership+0xf8/0x1b0 [ 632.987994][T16458] kernfs_create_dir_ns+0x4c/0x1a0 [ 632.988015][T16458] internal_create_group+0x34d/0xf30 [ 632.988040][T16458] ? __pfx_internal_create_group+0x10/0x10 [ 632.988062][T16458] ? kernfs_create_link+0x1bd/0x240 [ 632.988080][T16458] internal_create_groups+0x9d/0x150 [ 632.988100][T16458] device_add+0xf30/0x1aa0 [ 632.988123][T16458] ? __pfx_device_add+0x10/0x10 [ 632.988140][T16458] ? lockdep_init_map_type+0x5c/0x280 [ 632.988160][T16458] ? __init_waitqueue_head+0xca/0x150 [ 632.988186][T16458] netdev_register_kobject+0x1a9/0x3d0 [ 632.988209][T16458] register_netdevice+0x13dc/0x2270 [ 632.988231][T16458] ? __pfx_register_netdevice+0x10/0x10 [ 632.988250][T16458] ? dev_addr_mod+0x316/0x540 [ 632.988265][T16458] __tun_chr_ioctl+0x1eb6/0x4880 [ 632.988285][T16458] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 632.988308][T16458] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 632.988329][T16458] ? hook_file_ioctl_common+0x145/0x410 [ 632.988356][T16458] ? __fget_files+0x20e/0x3c0 [ 632.988372][T16458] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 632.988392][T16458] __x64_sys_ioctl+0x18b/0x210 [ 632.988413][T16458] do_syscall_64+0xcd/0xfa0 [ 632.988431][T16458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.988445][T16458] RIP: 0033:0x7fe870d8eec9 [ 632.988458][T16458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.988471][T16458] RSP: 002b:00007fe871c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.988485][T16458] RAX: ffffffffffffffda RBX: 00007fe870fe5fa0 RCX: 00007fe870d8eec9 [ 632.988495][T16458] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 632.988503][T16458] RBP: 00007fe870e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 632.988512][T16458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.988526][T16458] R13: 00007fe870fe6038 R14: 00007fe870fe5fa0 R15: 00007ffc585cc1d8 [ 632.988547][T16458] [ 634.267849][T16470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2122'. [ 634.321493][T16477] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 634.432618][T16470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.444010][T16470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.558500][T16480] random: crng reseeded on system resumption [ 636.359497][T16514] FAULT_INJECTION: forcing a failure. [ 636.359497][T16514] name failslab, interval 1, probability 0, space 0, times 0 [ 636.373422][T16514] CPU: 0 UID: 0 PID: 16514 Comm: syz.5.2130 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 636.373477][T16514] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 636.373491][T16514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 636.373505][T16514] Call Trace: [ 636.373513][T16514] [ 636.373523][T16514] dump_stack_lvl+0x16c/0x1f0 [ 636.373558][T16514] should_fail_ex+0x512/0x640 [ 636.373588][T16514] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 636.373620][T16514] should_failslab+0xc2/0x120 [ 636.373652][T16514] kmem_cache_alloc_noprof+0x75/0x6e0 [ 636.373678][T16514] ? __kernfs_new_node+0xd2/0x8e0 [ 636.373715][T16514] ? __kernfs_new_node+0xd2/0x8e0 [ 636.373745][T16514] __kernfs_new_node+0xd2/0x8e0 [ 636.373782][T16514] ? __pfx___kernfs_new_node+0x10/0x10 [ 636.373823][T16514] ? find_held_lock+0x2b/0x80 [ 636.373850][T16514] ? kernfs_root+0xee/0x2a0 [ 636.373895][T16514] kernfs_new_node+0x13c/0x1e0 [ 636.373938][T16514] __kernfs_create_file+0x53/0x350 [ 636.373969][T16514] sysfs_add_file_mode_ns+0x207/0x3c0 [ 636.374008][T16514] internal_create_group+0x578/0xf30 [ 636.374048][T16514] ? __pfx_internal_create_group+0x10/0x10 [ 636.374085][T16514] ? kernfs_create_link+0x1bd/0x240 [ 636.374117][T16514] internal_create_groups+0x9d/0x150 [ 636.374154][T16514] device_add+0xf30/0x1aa0 [ 636.374188][T16514] ? __pfx_device_add+0x10/0x10 [ 636.374223][T16514] ? lockdep_init_map_type+0x5c/0x280 [ 636.374260][T16514] ? __init_waitqueue_head+0xca/0x150 [ 636.374308][T16514] netdev_register_kobject+0x1a9/0x3d0 [ 636.374349][T16514] register_netdevice+0x13dc/0x2270 [ 636.374390][T16514] ? __pfx_register_netdevice+0x10/0x10 [ 636.374425][T16514] ? dev_addr_mod+0x316/0x540 [ 636.374455][T16514] __tun_chr_ioctl+0x1eb6/0x4880 [ 636.374488][T16514] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 636.374530][T16514] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 636.374569][T16514] ? hook_file_ioctl_common+0x145/0x410 [ 636.374616][T16514] ? __fget_files+0x20e/0x3c0 [ 636.374646][T16514] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 636.374682][T16514] __x64_sys_ioctl+0x18b/0x210 [ 636.374720][T16514] do_syscall_64+0xcd/0xfa0 [ 636.374752][T16514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.374779][T16514] RIP: 0033:0x7f3210b8eec9 [ 636.374800][T16514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.374824][T16514] RSP: 002b:00007f32119ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.374848][T16514] RAX: ffffffffffffffda RBX: 00007f3210de5fa0 RCX: 00007f3210b8eec9 [ 636.374864][T16514] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 636.374878][T16514] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 636.374900][T16514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.374915][T16514] R13: 00007f3210de6038 R14: 00007f3210de5fa0 R15: 00007fffe5195238 [ 636.374952][T16514] [ 639.195632][T16521] Process accounting resumed [ 639.647239][T16564] ubi0: attaching mtd0 [ 639.669463][T16564] ubi0: scanning is finished [ 639.678795][T16563] FAULT_INJECTION: forcing a failure. [ 639.678795][T16563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 639.707350][T16564] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 639.793066][T16563] CPU: 0 UID: 0 PID: 16563 Comm: syz.0.2140 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 639.793100][T16563] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 639.793107][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.793117][T16563] Call Trace: [ 639.793122][T16563] [ 639.793128][T16563] dump_stack_lvl+0x16c/0x1f0 [ 639.793150][T16563] should_fail_ex+0x512/0x640 [ 639.793171][T16563] should_fail_alloc_page+0xe7/0x130 [ 639.793193][T16563] prepare_alloc_pages+0x3c2/0x610 [ 639.793215][T16563] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 639.793233][T16563] ? kasan_save_stack+0x42/0x60 [ 639.793248][T16563] ? kasan_save_stack+0x33/0x60 [ 639.793262][T16563] ? kasan_save_track+0x14/0x30 [ 639.793277][T16563] ? __kasan_save_free_info+0x3b/0x60 [ 639.793297][T16563] ? __kasan_slab_free+0x5f/0x80 [ 639.793312][T16563] ? kfree+0x2b8/0x6d0 [ 639.793330][T16563] ? tomoyo_path_number_perm+0x470/0x580 [ 639.793350][T16563] ? security_file_ioctl+0x9b/0x240 [ 639.793371][T16563] ? __x64_sys_ioctl+0xb7/0x210 [ 639.793391][T16563] ? do_syscall_64+0xcd/0xfa0 [ 639.793405][T16563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.793422][T16563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 639.793445][T16563] ? look_up_lock_class+0x59/0x150 [ 639.793463][T16563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 639.793488][T16563] ? policy_nodemask+0xea/0x4e0 [ 639.793508][T16563] alloc_pages_mpol+0x1fb/0x550 [ 639.793527][T16563] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 639.793546][T16563] ? do_raw_spin_lock+0x12c/0x2b0 [ 639.793567][T16563] ? find_held_lock+0x2b/0x80 [ 639.793583][T16563] ___kmalloc_large_node+0xed/0x160 [ 639.793604][T16563] __kmalloc_large_noprof+0x1c/0x70 [ 639.793628][T16563] ? get_task_mm+0xc7/0xf0 [ 639.793643][T16563] vhost_dev_set_owner+0x3af/0xa50 [ 639.793664][T16563] ? __mutex_lock+0x1c5/0x1060 [ 639.793686][T16563] vhost_dev_ioctl+0x2eb/0xe20 [ 639.793703][T16563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 639.793728][T16563] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 639.793753][T16563] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 639.793770][T16563] ? hook_file_ioctl_common+0x145/0x410 [ 639.793792][T16563] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 639.793814][T16563] ? __fget_files+0x20e/0x3c0 [ 639.793832][T16563] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 639.793850][T16563] __x64_sys_ioctl+0x18b/0x210 [ 639.793871][T16563] do_syscall_64+0xcd/0xfa0 [ 639.793889][T16563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.793903][T16563] RIP: 0033:0x7f485718eec9 [ 639.793915][T16563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.793929][T16563] RSP: 002b:00007f4858014038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.793948][T16563] RAX: ffffffffffffffda RBX: 00007f48573e6180 RCX: 00007f485718eec9 [ 639.793958][T16563] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 639.793967][T16563] RBP: 00007f4857211f91 R08: 0000000000000000 R09: 0000000000000000 [ 639.793976][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.793985][T16563] R13: 00007f48573e6218 R14: 00007f48573e6180 R15: 00007ffe6eaa4108 [ 639.794015][T16563] [ 640.588564][T16573] random: crng reseeded on system resumption [ 640.747340][T16564] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 641.027271][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 641.048918][T16579] FAULT_INJECTION: forcing a failure. [ 641.048918][T16579] name failslab, interval 1, probability 0, space 0, times 0 [ 641.119410][T16579] CPU: 1 UID: 0 PID: 16579 Comm: syz.5.2143 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 641.119444][T16579] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 641.119452][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 641.119461][T16579] Call Trace: [ 641.119467][T16579] [ 641.119473][T16579] dump_stack_lvl+0x16c/0x1f0 [ 641.119494][T16579] should_fail_ex+0x512/0x640 [ 641.119512][T16579] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 641.119530][T16579] should_failslab+0xc2/0x120 [ 641.119551][T16579] kmem_cache_alloc_noprof+0x75/0x6e0 [ 641.119565][T16579] ? __kernfs_new_node+0xd2/0x8e0 [ 641.119586][T16579] ? __kernfs_new_node+0xd2/0x8e0 [ 641.119602][T16579] __kernfs_new_node+0xd2/0x8e0 [ 641.119622][T16579] ? __pfx___kernfs_new_node+0x10/0x10 [ 641.119644][T16579] ? find_held_lock+0x2b/0x80 [ 641.119659][T16579] ? kernfs_root+0xee/0x2a0 [ 641.119680][T16579] kernfs_new_node+0x13c/0x1e0 [ 641.119699][T16579] ? net_ns_get_ownership+0xf8/0x1b0 [ 641.119718][T16579] kernfs_create_dir_ns+0x4c/0x1a0 [ 641.119741][T16579] internal_create_group+0x34d/0xf30 [ 641.119765][T16579] ? __pfx_internal_create_group+0x10/0x10 [ 641.119787][T16579] ? kernfs_create_link+0x1bd/0x240 [ 641.119804][T16579] internal_create_groups+0x9d/0x150 [ 641.119824][T16579] device_add+0xf30/0x1aa0 [ 641.119844][T16579] ? __pfx_device_add+0x10/0x10 [ 641.119861][T16579] ? lockdep_init_map_type+0x5c/0x280 [ 641.119881][T16579] ? __init_waitqueue_head+0xca/0x150 [ 641.119907][T16579] netdev_register_kobject+0x1a9/0x3d0 [ 641.119929][T16579] register_netdevice+0x13dc/0x2270 [ 641.119951][T16579] ? __pfx_register_netdevice+0x10/0x10 [ 641.119970][T16579] ? dev_addr_mod+0x316/0x540 [ 641.119986][T16579] __tun_chr_ioctl+0x1eb6/0x4880 [ 641.120004][T16579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 641.120028][T16579] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 641.120049][T16579] ? hook_file_ioctl_common+0x145/0x410 [ 641.120075][T16579] ? __fget_files+0x20e/0x3c0 [ 641.120095][T16579] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 641.120127][T16579] __x64_sys_ioctl+0x18b/0x210 [ 641.120162][T16579] do_syscall_64+0xcd/0xfa0 [ 641.120194][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.120220][T16579] RIP: 0033:0x7f3210b8eec9 [ 641.120241][T16579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.120265][T16579] RSP: 002b:00007f32119ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.120309][T16579] RAX: ffffffffffffffda RBX: 00007f3210de5fa0 RCX: 00007f3210b8eec9 [ 641.120327][T16579] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 641.120344][T16579] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.120360][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.120376][T16579] R13: 00007f3210de6038 R14: 00007f3210de5fa0 R15: 00007fffe5195238 [ 641.120418][T16579] [ 641.851831][T16592] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2146'. [ 643.306257][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 643.376476][T16604] HfR: entered promiscuous mode [ 643.759768][T16632] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.2154'. [ 643.774481][T16632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2154'. [ 644.614814][T16652] Invalid ELF header magic: != ELF [ 644.719936][T16652] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2160'. [ 647.901714][T16726] FAULT_INJECTION: forcing a failure. [ 647.901714][T16726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.977669][T16726] CPU: 1 UID: 0 PID: 16726 Comm: syz.3.2176 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 647.977720][T16726] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 647.977733][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.977747][T16726] Call Trace: [ 647.977755][T16726] [ 647.977764][T16726] dump_stack_lvl+0x16c/0x1f0 [ 647.977796][T16726] should_fail_ex+0x512/0x640 [ 647.977828][T16726] _copy_to_user+0x32/0xd0 [ 647.977856][T16726] do_pages_stat+0x5d2/0x7b0 [ 647.977900][T16726] ? __pfx_do_pages_stat+0x10/0x10 [ 647.977967][T16726] ? do_raw_spin_unlock+0x172/0x230 [ 647.978006][T16726] kernel_move_pages+0xfc8/0x12f0 [ 647.978040][T16726] ? do_futex+0x122/0x350 [ 647.978082][T16726] ? __pfx_do_futex+0x10/0x10 [ 647.978113][T16726] ? __pfx_kernel_move_pages+0x10/0x10 [ 647.978151][T16726] ? __x64_sys_futex+0x1e0/0x4c0 [ 647.978180][T16726] ? __x64_sys_futex+0x1e9/0x4c0 [ 647.978218][T16726] ? xfd_validate_state+0x61/0x180 [ 647.978247][T16726] ? __pfx_do_writev+0x10/0x10 [ 647.978275][T16726] __x64_sys_move_pages+0xe0/0x1c0 [ 647.978309][T16726] ? do_syscall_64+0x91/0xfa0 [ 647.978334][T16726] ? lockdep_hardirqs_on+0x7c/0x110 [ 647.978359][T16726] do_syscall_64+0xcd/0xfa0 [ 647.978384][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.978405][T16726] RIP: 0033:0x7f417258eec9 [ 647.978422][T16726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.978440][T16726] RSP: 002b:00007f41733d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 647.978458][T16726] RAX: ffffffffffffffda RBX: 00007f41727e6090 RCX: 00007f417258eec9 [ 647.978471][T16726] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 647.978482][T16726] RBP: 00007f4172611f91 R08: 0000000000000000 R09: 8000000000000000 [ 647.978493][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.978504][T16726] R13: 00007f41727e6128 R14: 00007f41727e6090 R15: 00007fffd8f80298 [ 647.978528][T16726] [ 647.979418][T16732] random: crng reseeded on system resumption [ 648.377579][T16738] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2177'. [ 649.356008][T16748] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2180'. [ 649.846463][T16769] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 650.835191][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2189'. [ 650.852191][T16794] hsr_slave_0: left promiscuous mode [ 650.887534][T16794] hsr_slave_1: left promiscuous mode [ 651.778688][T16810] random: crng reseeded on system resumption [ 653.282279][T16840] netlink: 'syz.5.2202': attribute type 11 has an invalid length. [ 653.333998][T16840] netlink: 'syz.5.2202': attribute type 11 has an invalid length. [ 653.405449][T16840] netlink: 'syz.5.2202': attribute type 11 has an invalid length. [ 653.415730][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2202'. [ 653.448602][T16840] netlink: 'syz.5.2202': attribute type 11 has an invalid length. [ 655.072170][T16880] random: crng reseeded on system resumption [ 660.314508][T16951] : Can't lookup blockdev [ 661.193356][T16966] random: crng reseeded on system resumption [ 661.891442][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 661.911639][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 661.931814][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 661.955103][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 661.977427][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.119163][T16998] random: crng reseeded on system resumption [ 663.429629][T16976] chnl_net:caif_netlink_parms(): no params data found [ 664.017588][ T5828] Bluetooth: hci1: command tx timeout [ 664.034650][T16976] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.100604][T16976] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.148223][T16976] bridge_slave_0: entered allmulticast mode [ 664.193318][T16976] bridge_slave_0: entered promiscuous mode [ 664.244789][T16976] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.259828][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.267470][T16976] bridge_slave_1: entered allmulticast mode [ 664.276011][T16976] bridge_slave_1: entered promiscuous mode [ 664.386001][T16976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.556585][T16976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.694748][T17034] ima: policy update failed [ 664.711202][ T30] audit: type=1802 audit(4294967300.266:33): pid=17034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2238" res=0 errno=0 [ 664.852037][T16976] team0: Port device team_slave_0 added [ 664.916483][T16976] team0: Port device team_slave_1 added [ 665.013495][T16976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.020896][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.068804][T16976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.113291][T16976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.123786][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.195607][T16976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.534205][T16976] hsr_slave_0: entered promiscuous mode [ 665.534866][T17057] usb usb36: usbfs: process 17057 (syz.3.2244) did not claim interface 0 before use [ 665.549608][T16976] hsr_slave_1: entered promiscuous mode [ 665.576384][T16976] debugfs: 'hsr0' already exists in 'hsr' [ 665.651878][T16976] Cannot create hsr debugfs directory [ 665.738287][T17061] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 666.069728][ T5828] Bluetooth: hci1: command tx timeout [ 666.538199][T16976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.707992][T16976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.234486][T17080] ================================================================== [ 667.234504][T17080] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 667.234542][T17080] Read of size 256 at addr ffff888058493e60 by task syz.5.2248/17080 [ 667.234564][T17080] [ 667.234580][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.5.2248 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 667.234631][T17080] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 667.234644][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.234658][T17080] Call Trace: [ 667.234666][T17080] [ 667.234675][T17080] dump_stack_lvl+0x116/0x1f0 [ 667.234706][T17080] print_report+0xcd/0x630 [ 667.234738][T17080] ? __virt_addr_valid+0x81/0x610 [ 667.234767][T17080] ? __phys_addr+0xe8/0x180 [ 667.234798][T17080] ? fbcon_prepare_logo+0xa03/0xc70 [ 667.234823][T17080] kasan_report+0xe0/0x110 [ 667.234855][T17080] ? fbcon_prepare_logo+0xa03/0xc70 [ 667.234887][T17080] kasan_check_range+0x100/0x1b0 [ 667.234920][T17080] __asan_memcpy+0x23/0x60 [ 667.234943][T17080] fbcon_prepare_logo+0xa03/0xc70 [ 667.234976][T17080] fbcon_init+0xd77/0x1900 [ 667.235009][T17080] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 667.235041][T17080] visual_init+0x31d/0x620 [ 667.235071][T17080] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 667.235111][T17080] store_bind+0x61d/0x760 [ 667.235144][T17080] ? sysfs_file_kobj+0xe4/0x290 [ 667.235171][T17080] ? __pfx_store_bind+0x10/0x10 [ 667.235202][T17080] dev_attr_store+0x58/0x80 [ 667.235229][T17080] ? __pfx_dev_attr_store+0x10/0x10 [ 667.235256][T17080] sysfs_kf_write+0xf2/0x150 [ 667.235283][T17080] kernfs_fop_write_iter+0x3af/0x570 [ 667.235319][T17080] ? __pfx_sysfs_kf_write+0x10/0x10 [ 667.235348][T17080] iter_file_splice_write+0xa21/0x12e0 [ 667.235384][T17080] ? __pfx_iter_file_splice_write+0x10/0x10 [ 667.235413][T17080] ? __pfx_copy_splice_read+0x10/0x10 [ 667.235467][T17080] ? __pfx_iter_file_splice_write+0x10/0x10 [ 667.235495][T17080] direct_splice_actor+0x18f/0x6c0 [ 667.235522][T17080] splice_direct_to_actor+0x342/0xa30 [ 667.235563][T17080] ? __pfx_direct_splice_actor+0x10/0x10 [ 667.235591][T17080] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 667.235636][T17080] do_splice_direct+0x174/0x240 [ 667.235660][T17080] ? __pfx_do_splice_direct+0x10/0x10 [ 667.235683][T17080] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 667.235723][T17080] ? rw_verify_area+0xcf/0x6c0 [ 667.235747][T17080] do_sendfile+0xb06/0xe50 [ 667.235774][T17080] ? __pfx_do_sendfile+0x10/0x10 [ 667.235797][T17080] ? __sys_sendmsg+0x18c/0x220 [ 667.235826][T17080] ? __x64_sys_futex+0x1e0/0x4c0 [ 667.235858][T17080] ? __x64_sys_futex+0x1e9/0x4c0 [ 667.235891][T17080] __x64_sys_sendfile64+0x1d8/0x220 [ 667.235923][T17080] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 667.235959][T17080] do_syscall_64+0xcd/0xfa0 [ 667.235988][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.236013][T17080] RIP: 0033:0x7f3210b8eec9 [ 667.236032][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.236058][T17080] RSP: 002b:00007f3211999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 667.236081][T17080] RAX: ffffffffffffffda RBX: 00007f3210de6090 RCX: 00007f3210b8eec9 [ 667.236099][T17080] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000009 [ 667.236114][T17080] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 667.236130][T17080] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 667.236147][T17080] R13: 00007f3210de6128 R14: 00007f3210de6090 R15: 00007fffe5195238 [ 667.236174][T17080] [ 667.236183][T17080] [ 667.236189][T17080] Allocated by task 16770: [ 667.236201][T17080] kasan_save_stack+0x33/0x60 [ 667.236228][T17080] kasan_save_track+0x14/0x30 [ 667.236253][T17080] __kasan_kmalloc+0xaa/0xb0 [ 667.236277][T17080] skbedit_init_net+0x135/0x500 [ 667.236308][T17080] ops_init+0x1e2/0x5f0 [ 667.236335][T17080] setup_net+0x100/0x390 [ 667.236361][T17080] copy_net_ns+0x2f8/0x690 [ 667.236390][T17080] create_new_namespaces+0x3ea/0xa90 [ 667.236415][T17080] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 667.236441][T17080] ksys_unshare+0x45b/0xa40 [ 667.236476][T17080] __x64_sys_unshare+0x31/0x40 [ 667.236506][T17080] do_syscall_64+0xcd/0xfa0 [ 667.236531][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.236555][T17080] [ 667.236561][T17080] Freed by task 10607: [ 667.236573][T17080] kasan_save_stack+0x33/0x60 [ 667.236599][T17080] kasan_save_track+0x14/0x30 [ 667.236625][T17080] __kasan_save_free_info+0x3b/0x60 [ 667.236660][T17080] __kasan_slab_free+0x5f/0x80 [ 667.236686][T17080] kfree+0x2b8/0x6d0 [ 667.236718][T17080] skbedit_exit_net+0x13e/0x3b0 [ 667.236747][T17080] ops_undo_list+0x360/0xab0 [ 667.236772][T17080] cleanup_net+0x41b/0x8b0 [ 667.236800][T17080] process_one_work+0x9cf/0x1b70 [ 667.236833][T17080] worker_thread+0x6c8/0xf10 [ 667.236866][T17080] kthread+0x3c2/0x780 [ 667.236896][T17080] ret_from_fork+0x675/0x7d0 [ 667.236928][T17080] ret_from_fork_asm+0x1a/0x30 [ 667.236952][T17080] [ 667.236958][T17080] The buggy address belongs to the object at ffff888058493e00 [ 667.236958][T17080] which belongs to the cache kmalloc-256 of size 256 [ 667.236977][T17080] The buggy address is located 96 bytes inside of [ 667.236977][T17080] freed 256-byte region [ffff888058493e00, ffff888058493f00) [ 667.237001][T17080] [ 667.237007][T17080] The buggy address belongs to the physical page: [ 667.237027][T17080] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58492 [ 667.237049][T17080] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 667.237071][T17080] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 667.237094][T17080] page_type: f5(slab) [ 667.237116][T17080] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0001249d00 dead000000000002 [ 667.237140][T17080] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 667.237163][T17080] head: 00fff00000000040 ffff88813ffa6b40 ffffea0001249d00 dead000000000002 [ 667.237187][T17080] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 667.237210][T17080] head: 00fff00000000001 ffffea0001612481 00000000ffffffff 00000000ffffffff [ 667.237233][T17080] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 667.237247][T17080] page dumped because: kasan: bad access detected [ 667.237263][T17080] page_owner tracks the page as allocated [ 667.237271][T17080] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15544, tgid 15537 (syz.0.1938), ts 591734700339, free_ts 591564061898 [ 667.237315][T17080] post_alloc_hook+0x1c0/0x230 [ 667.237349][T17080] get_page_from_freelist+0x10a3/0x3a30 [ 667.237371][T17080] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 667.237395][T17080] alloc_pages_mpol+0x1fb/0x550 [ 667.237423][T17080] new_slab+0x24a/0x360 [ 667.237455][T17080] ___slab_alloc+0xdc4/0x1ae0 [ 667.237496][T17080] __slab_alloc.constprop.0+0x63/0x110 [ 667.237532][T17080] __kmalloc_noprof+0x501/0x880 [ 667.237567][T17080] iter_file_splice_write+0x1cc/0x12e0 [ 667.237592][T17080] direct_splice_actor+0x18f/0x6c0 [ 667.237614][T17080] splice_direct_to_actor+0x342/0xa30 [ 667.237651][T17080] do_splice_direct+0x174/0x240 [ 667.237671][T17080] do_sendfile+0xb06/0xe50 [ 667.237691][T17080] __x64_sys_sendfile64+0x1d8/0x220 [ 667.237720][T17080] do_syscall_64+0xcd/0xfa0 [ 667.237744][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.237768][T17080] page last free pid 15540 tgid 15540 stack trace: [ 667.237781][T17080] __free_frozen_pages+0x7df/0x1160 [ 667.237813][T17080] qlist_free_all+0x4d/0x120 [ 667.237836][T17080] kasan_quarantine_reduce+0x195/0x1e0 [ 667.237862][T17080] __kasan_slab_alloc+0x69/0x90 [ 667.237889][T17080] kmem_cache_alloc_noprof+0x250/0x6e0 [ 667.237911][T17080] vm_area_dup+0x27/0x8d0 [ 667.237944][T17080] __split_vma+0x18e/0x1070 [ 667.237977][T17080] vma_modify+0xee1/0x2030 [ 667.238010][T17080] vma_modify_flags+0x212/0x2d0 [ 667.238031][T17080] mprotect_fixup+0x1df/0xb40 [ 667.238064][T17080] do_mprotect_pkey+0x9bc/0xd40 [ 667.238097][T17080] __x64_sys_mprotect+0x78/0xc0 [ 667.238130][T17080] do_syscall_64+0xcd/0xfa0 [ 667.238155][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.238179][T17080] [ 667.238185][T17080] Memory state around the buggy address: [ 667.238197][T17080] ffff888058493d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 667.238215][T17080] ffff888058493d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 667.238233][T17080] >ffff888058493e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 667.238247][T17080] ^ [ 667.238262][T17080] ffff888058493e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 667.238279][T17080] ffff888058493f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 667.238294][T17080] ================================================================== [ 667.244882][T17080] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 667.244906][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.5.2248 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 667.244961][T17080] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 667.244977][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.244992][T17080] Call Trace: [ 667.245002][T17080] [ 667.245012][T17080] dump_stack_lvl+0x3d/0x1f0 [ 667.245044][T17080] vpanic+0x640/0x6f0 [ 667.245079][T17080] panic+0xca/0xd0 [ 667.245112][T17080] ? __pfx_panic+0x10/0x10 [ 667.245146][T17080] ? fbcon_prepare_logo+0xa03/0xc70 [ 667.245174][T17080] ? preempt_schedule_common+0x44/0xc0 [ 667.245203][T17080] ? preempt_schedule_thunk+0x16/0x30 [ 667.245236][T17080] check_panic_on_warn+0xab/0xb0 [ 667.245271][T17080] end_report+0x107/0x170 [ 667.245299][T17080] kasan_report+0xee/0x110 [ 667.245328][T17080] ? fbcon_prepare_logo+0xa03/0xc70 [ 667.245359][T17080] kasan_check_range+0x100/0x1b0 [ 667.245393][T17080] __asan_memcpy+0x23/0x60 [ 667.245418][T17080] fbcon_prepare_logo+0xa03/0xc70 [ 667.245464][T17080] fbcon_init+0xd77/0x1900 [ 667.245495][T17080] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 667.245528][T17080] visual_init+0x31d/0x620 [ 667.245560][T17080] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 667.245600][T17080] store_bind+0x61d/0x760 [ 667.245635][T17080] ? sysfs_file_kobj+0xe4/0x290 [ 667.245663][T17080] ? __pfx_store_bind+0x10/0x10 [ 667.245695][T17080] dev_attr_store+0x58/0x80 [ 667.245722][T17080] ? __pfx_dev_attr_store+0x10/0x10 [ 667.245749][T17080] sysfs_kf_write+0xf2/0x150 [ 667.245775][T17080] kernfs_fop_write_iter+0x3af/0x570 [ 667.245811][T17080] ? __pfx_sysfs_kf_write+0x10/0x10 [ 667.245837][T17080] iter_file_splice_write+0xa21/0x12e0 [ 667.245874][T17080] ? __pfx_iter_file_splice_write+0x10/0x10 [ 667.245904][T17080] ? __pfx_copy_splice_read+0x10/0x10 [ 667.245951][T17080] ? __pfx_iter_file_splice_write+0x10/0x10 [ 667.245980][T17080] direct_splice_actor+0x18f/0x6c0 [ 667.246008][T17080] splice_direct_to_actor+0x342/0xa30 [ 667.246049][T17080] ? __pfx_direct_splice_actor+0x10/0x10 [ 667.246078][T17080] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 667.246123][T17080] do_splice_direct+0x174/0x240 [ 667.246148][T17080] ? __pfx_do_splice_direct+0x10/0x10 [ 667.246173][T17080] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 667.246214][T17080] ? rw_verify_area+0xcf/0x6c0 [ 667.246240][T17080] do_sendfile+0xb06/0xe50 [ 667.246268][T17080] ? __pfx_do_sendfile+0x10/0x10 [ 667.246293][T17080] ? __sys_sendmsg+0x18c/0x220 [ 667.246324][T17080] ? __x64_sys_futex+0x1e0/0x4c0 [ 667.246357][T17080] ? __x64_sys_futex+0x1e9/0x4c0 [ 667.246393][T17080] __x64_sys_sendfile64+0x1d8/0x220 [ 667.246426][T17080] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 667.246471][T17080] do_syscall_64+0xcd/0xfa0 [ 667.246502][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.246528][T17080] RIP: 0033:0x7f3210b8eec9 [ 667.246548][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.246573][T17080] RSP: 002b:00007f3211999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 667.246598][T17080] RAX: ffffffffffffffda RBX: 00007f3210de6090 RCX: 00007f3210b8eec9 [ 667.246617][T17080] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000009 [ 667.246633][T17080] RBP: 00007f3210c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 667.246650][T17080] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 667.246665][T17080] R13: 00007f3210de6128 R14: 00007f3210de6090 R15: 00007fffe5195238 [ 667.246693][T17080] [ 667.246936][T17080] Kernel Offset: disabled