last executing test programs: 13m48.217185785s ago: executing program 1 (id=1183): r0 = socket(0xa, 0x2, 0x3a) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x5, 0x0) (async) socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x29, 0x32, 0x0, 0x113) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) inotify_add_watch$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x4b, 0x0, 0x1) (async) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x6, 0x401bf, 0x7352, 0x42, 0x8000, 0x1ffde, 0x7, 0x10000000000002, 0x5, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x100000000, 0xfffffffffffffffc, 0x1000000000000000, 0x1, 0x2000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000000, 0x0, 0x5, 0xff]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r2, 0x5420, &(0x7f0000000040)) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 13m47.999931516s ago: executing program 1 (id=1185): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0xb, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x540b, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$auto__dev_ioctl_fops_dev_ioctl(r3, 0x609, &(0x7f0000000100)="702a0b09187def996ca83475df9ab04641b1f85344dc5f9e10bdd57c9eefd5086ce4821d9ab2501835a43135e7bddc046d750f34b128f7fe9ad4774d394e46697aa9878f34af1ebc7943b3cb1eeb49b1631093cf1c62a4326fe1254ae692799397339c0c21b9caacc01d5f31f48affd0b519c20c7a6f2029802d") r4 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r5 = bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r4, 0xd}, 0x92) open(0x0, 0x80181, 0x0) r6 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x84401, 0x0) bpf$auto(0x4, &(0x7f00000001c0)=@prog_bind_map={r6, r5, 0x4}, 0xc) 13m47.84265686s ago: executing program 1 (id=1186): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5523, r3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x9, 0xfffffffffffffff7, 0x8fd3, 0x4000000000009487, 0x40000000003, 0x5, 0x3, 0x8, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)='w\b\x00', 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x9, 0xd6, 0x3, 0xfffffffffffffffd, 0x948b, 0x6, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x100000001, 0x6d3e, 0x9, 0x0, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x44040) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram12\x00', 0x1, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) 13m46.005782239s ago: executing program 1 (id=1188): geteuid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x100) (async) socket(0x2, 0x801, 0x100) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) (async) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci7/hci7:200/power/runtime_suspended_time\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfffffdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x4, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x4, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) connect$auto(r1, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r4, 0x200, 0x52, 0x2) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf250a00000a08000a00050000003100010006000100"], 0x10e}}, 0x10004010) 13m45.315923945s ago: executing program 1 (id=1190): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) syz_clone(0x64002011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) ioctl$auto(r0, 0xc0585604, r1) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) io_uring_register$auto(0xffffffffffffffff, 0xffff5594, 0x0, 0x1) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRK2(r4, 0x5409, 0x0) 13m43.800680366s ago: executing program 1 (id=1194): mmap$auto(0x0, 0x3, 0xfffffffffffffffb, 0xeb1, 0x40000000000a5, 0x80000008000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop8/io-timeout-fail\x00', 0x22100, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x2261c3, 0xa6) close_range$auto(0x2, 0xffffffffffffffff, 0xc) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x400000008000) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) r4 = bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r3, 0x100, @old_prog_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r5, 0xbb8, @value=0x8, 0x100000002}, 0xcd) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r6, 0x4, 0x1ff, r6, @relative_id=0x1, 0xe600}, 0x6) socket(0x28, 0x1, 0x0) setsockopt$auto(r4, 0x9, 0x9, 0x0, 0xfffffffc) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x91) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 13m28.442447698s ago: executing program 32 (id=1194): mmap$auto(0x0, 0x3, 0xfffffffffffffffb, 0xeb1, 0x40000000000a5, 0x80000008000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop8/io-timeout-fail\x00', 0x22100, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x2261c3, 0xa6) close_range$auto(0x2, 0xffffffffffffffff, 0xc) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x400000008000) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) r4 = bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r3, 0x100, @old_prog_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r5, 0xbb8, @value=0x8, 0x100000002}, 0xcd) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r6, 0x4, 0x1ff, r6, @relative_id=0x1, 0xe600}, 0x6) socket(0x28, 0x1, 0x0) setsockopt$auto(r4, 0x9, 0x9, 0x0, 0xfffffffc) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x91) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) 6m44.366168759s ago: executing program 4 (id=3330): r0 = socket(0xa, 0x5, 0x0) ioctl$auto(r0, 0x8941, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x10008000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4040aea0, &(0x7f0000000080)={0x2, 0x0, [{0x174, 0x400, 0x9}]}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1c1200, 0x81) settimeofday$auto(&(0x7f0000000040)={0x1000, 0x52c7}, &(0x7f0000000080)={0x748, 0x4e}) open(&(0x7f00000002c0)='./file0\x00', 0x103001, 0x120) futimesat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xf, 0xfffffffffffffffe, 0x0, 0x0, 0x290000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r4, 0x0, 0x39b8) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) socket(0x2, 0x2, 0x1) 6m43.760950014s ago: executing program 4 (id=3334): r0 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x4) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, 0x0, 0x4000000) shmctl$auto_IPC_INFO(0x7, 0x3, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) kill$auto_SIGCONT(0x0, 0x12) getpgid$auto(0x0) 6m43.58450286s ago: executing program 4 (id=3335): r0 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x4) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, 0x0, 0x4000000) shmctl$auto_IPC_INFO(0x7, 0x3, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) kill$auto_SIGCONT(0x0, 0x12) (fail_nth: 1) getpgid$auto(0x0) 6m42.727931334s ago: executing program 4 (id=3336): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) mmap$auto(0x1eee, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000000c0), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc884) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x20008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x6, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, r0, 0x3) r2 = gettid() socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, r0, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x1f) mmap$auto(0x4, 0x2020009, 0x2, 0xf8, r1, 0x4) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x42, 0x20) r6 = open_tree$auto(r5, 0x0, 0x1001) syz_clone3(&(0x7f0000000300)={0x8020000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, {r6}}, 0x58) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x8515, 0x0, r2, 0xffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x1000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x200073) socket(0x2c, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ttyv7/dev\x00', 0x125083, 0x0) 6m42.319232232s ago: executing program 4 (id=3339): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) r3 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x45, 0x2, 0xffffffffffffffff, 0x6, 0xffffffffffff4b01) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffffffff}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7fffffff}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x80000000}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xf18}, @NFSD_A_SERVER_SCOPE={0xc, 0x4, '^($#.&\\\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x5422cf92d3693c9) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3c) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="000229bd0080fbdbdf"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 6m41.026416127s ago: executing program 4 (id=3346): io_uring_setup$auto(0x9fd1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x40000000004, 0x4000000000df, 0x40eb4, 0x401, 0x300000000000) socket(0x1f, 0xa, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10003, 0xffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x2b2e630fc4104552, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x212000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x6, 0x0) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) 6m25.742642552s ago: executing program 33 (id=3346): io_uring_setup$auto(0x9fd1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x40000000004, 0x4000000000df, 0x40eb4, 0x401, 0x300000000000) socket(0x1f, 0xa, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10003, 0xffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x2b2e630fc4104552, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x212000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x6, 0x0) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) 49.704804282s ago: executing program 3 (id=4992): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x200000c4) msgctl$auto_IPC_STAT(0x25, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4000001070a719d}, 0x400) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/loginuid\x00', 0x28000, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000100)=@bpf_attr_4={0x4, 0xffffffffffffffff, 0x9, r1}, 0x5) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000000c0)={0x1b6, 0x9, {0x4, 0x1, 0x5f, {0x9, 0x8c7}, {0x9, 0x6}, @periodic={0x1, 0xfeff, 0x8, 0xf, 0x6, {0x1, 0x7, 0x8000, 0xfc}, 0x3, 0x0}}, {0xfffa, 0x8, 0x1, {0xc000, 0x9}, {0x7, 0x2}, @rumble={0x81}}}) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) socket(0xa, 0x3, 0x3b) setsockopt$auto(r2, 0x1, 0x3e, 0x0, 0x9) 48.506292941s ago: executing program 3 (id=4997): socket$nl_generic(0x10, 0x3, 0x10) dup2$auto(0x5, 0x4) r0 = prctl$auto_SECCOMP_MODE_FILTER(0xc0, 0x2, 0xffffffffffffffff, 0x7, 0x8d) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$auto_I2C_SLAVE_FORCE(r1, 0x706, 0x0) r2 = open(0x0, 0x22040, 0x75) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r2, 0x0, r3, 0x0, 0x21c1, 0x0) write$auto_i2cdev_fops_i2c_dev(r2, &(0x7f0000000100)="08ade3d23399977a63d229d804d82996e23f4b38484e590214064c0b6bda80946175d69ea62dd75a054b9944d096811e01be00c0a2c6aefa61bb0239b0d6d7773c3f96f0b1752f8455b1dcd571e1dc877ca252cf1145e96997437dfbd2a63acc72cc03938eebffa6ce702f707115adbbe67176906afa99b296821fd0b62e00c5f2850d32e632545b6c7627301d694100f84f", 0x92) r4 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r0, r4, 0x0, 0x7fffffffffffffff) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) r5 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, 0x0, 0x40002, 0x0) write$auto_proc_fault_inject_operations_base(r5, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r6, 0xab09, 0xffffffffffffffff) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b842, 0x0) socket(0x15, 0x2, 0xc) alarm$auto(0x1) mmap$auto(0x0, 0x800000000002a, 0xdf, 0x9b72, r7, 0x28000) r8 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r8, &(0x7f0000000340)=""/253, 0xfd) timer_create$auto(0x3, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) 48.187819934s ago: executing program 3 (id=4999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000200)={{0xbd, 0xee00, 0xffffffffffffffff, 0x4, 0xb9, 0x9, 0x40}, 0xd0f, 0x5, 0x5, 0x2, @raw=0x1b, @raw, 0x0, 0x0, &(0x7f0000000080)="3569bfe58e9545c4e7dd95f0390262a41bd39224e614655d5f603aa404d40ff34da464db9982459dcc79447a1e29f6edd2f4a7cae45f5b1f8c915d12bfdcc1a009d687527294be3f78a29941b7272a315a5d1c2f14a5d68e24512acface03310e801f18f5f47c93a2284773589ab4e67b8242f2fcdfc4d3854f814fb56897314dd72f5def891de3ea468236cbae91b305b0cbd4158499c2b7da6efcf0acae1c5ce7c29a061e125112cecf4676d9cb9367b6f47843f39ccf2e04f058f5faac40369630b6d6edbf9a05673c25cf21bbe044f", &(0x7f0000000180)="ddabec1319031a879d4b580cd770ca35a466fcf31b3120ea4c422a8e0afd7cc6bcfba8e84fe9b5883fcbd054ca392daaf302de7447edf87a495335b9ee6781c8e0d35bf8112c9cd64ceb239a1e9c7d3ed236fc5f47e6c3986a2b94f5ae623ae8c1685f"}) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xa5, 0x2d, 0x0, 0x1, [@nested={0x36, 0x2d, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x50}, @typed={0x4, 0xf5}, @generic="017bc87833c2c5b245ed8696723882f982e3015b8741dc06929300efa769", @nested={0x4, 0x38}]}, @typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x7, 0x0, 0x0, @pid}, @generic="ae5614b5765d136f718d170837ea350a885259080ecedaf25225d0841a4454403046a607ac74299646b515e50df34b3afda7328753b0b69b232a3577ff1496195b", @typed={0xc, 0x146, 0x0, 0x0, @u64=0x7fff}]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x34f702, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0) readv$auto(r4, &(0x7f0000003dc0)={0x0, 0x1}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) 47.72367428s ago: executing program 3 (id=5002): r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) write$auto(r0, 0x0, 0x4) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) close_range$auto(r0, 0xffffffffffffffff, 0x3) ioctl$auto_PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)=0xf8ea) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x1) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ttyx8/power/runtime_status\x00', 0x3e52c0, 0x0) socket(0x11, 0x2, 0x101) socket(0x9, 0x800, 0xd) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram0\x00', 0x82000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x80600, 0x0) socket(0x11, 0x80003, 0x2ff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/ep_81/direction\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(r1, 0x8, 0x0) r4 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r4, 0x0) socket(0x11, 0x80003, 0x300) 46.45890323s ago: executing program 3 (id=5005): socket(0x2, 0x5, 0x0) socket(0x2, 0x801, 0x100) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1000001, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) mincore$auto(0x0, 0x1, 0xfffffffffffffffc) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x60000, 0x0) 45.916721388s ago: executing program 3 (id=5006): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) setsockopt$auto_SO_BUSY_POLL(r0, 0x5, 0x2e, &(0x7f0000000000)='/dev/sequencer\x00', 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x7, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2000, 0x400008, 0xde, 0xffffffffffffffbc, r1, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) madvise$auto(0x0, 0x20000a, 0x4) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) r3 = socket(0x28, 0x5, 0xfffffffd) bind$auto(r3, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) 30.757366757s ago: executing program 34 (id=5006): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) setsockopt$auto_SO_BUSY_POLL(r0, 0x5, 0x2e, &(0x7f0000000000)='/dev/sequencer\x00', 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x7, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2000, 0x400008, 0xde, 0xffffffffffffffbc, r1, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) madvise$auto(0x0, 0x20000a, 0x4) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) r3 = socket(0x28, 0x5, 0xfffffffd) bind$auto(r3, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) 21.919052717s ago: executing program 2 (id=5071): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) r1 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$auto(r0, 0x5523, r0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000080)={@raw=0xc1, "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"}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 20.994327411s ago: executing program 2 (id=5075): unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x5, 0x6, 0xffffffff, 0x2}, 0x30, 0x0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x12, 0x4, 0x440a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) io_setup$auto(0x80002, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="20002abd7000fedcdf25010000000d000280055140d023e39b5a933e949a3ae6e421486b139cfc549d2c023a5139cca0b945b14436de99229dba6dc3e33db0d907fa3c196becbd49464d23bd9773a6cbc93748a7cfe94461145276ca90ebb14873788d1eff95dbc4f3a36f1fc3ec2e053f4ba5e39ba1ffac07d987d8f7992c5eb555c2b9e85350c204947657e1"], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x8041) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) socket(0xc, 0x3, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0) setreuid$auto(0x8, 0x9d7) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r3, 0x1, &(0x7f00000000c0)) mmap$auto(0x0, 0x2, 0xdd, 0xeb4, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x22000, 0x0) 18.55589169s ago: executing program 6 (id=5081): recvfrom$auto(0xffffffffffffffff, &(0x7f0000000440)="2512683702c78aa366adde5483233ba62b5f1b0aa86d8137bc9e30cb56cbc69805ea2abbfb20dbed8e619f86d21290031ad3ff89dccea2abedcc87547259874517376718c76407cabb0832d792f80ef20d0111117f0b641631eecdaa6e7b0de194b5487fa6496ac851c9ba202961d0048e96c98298407192a22aab433167b74e190835b5c5f049a17f4e1b0e2c0bdb7c72dd3279a7eb42e48f26ecf8f7daee9d38c811405c0f011bfeca6449723bebfc04628d49189a73f80d8a642a2306139006bea83b064b4d02f8ed5fb5e31b98", 0x100, 0xc0a, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xd7, 0x9b72, 0xffffffffffffffff, 0x8001) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x3ffffd, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000000eb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x41, 0xfffffffffffffff5, 0x15, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8, 0x3}, 0xc00}, 0x1, 0x6) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4c041) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x45ca01, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x600b80, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xc) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20024010}, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) pidfd_open$auto(0x0, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r5 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x2002, 0x0) pread64$auto(r5, 0x0, 0x3c02, 0x100007) 18.206670615s ago: executing program 6 (id=5082): ioprio_set$auto(0x3, 0x0, 0x4b34) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0x4018aee1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb0, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x4000807c) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 17.776538329s ago: executing program 2 (id=5083): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0xfffffffffffffffd, 0x5, 0x3, 0x2000000000230006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002}, 0x1fe, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x2ba2) (fail_nth: 10) 17.283891141s ago: executing program 2 (id=5084): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) (fail_nth: 4) 16.591927224s ago: executing program 2 (id=5087): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x200000c4) msgctl$auto_IPC_STAT(0x25, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/loginuid\x00', 0x28000, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000100)=@bpf_attr_4={0x4, r1, 0x9, r2}, 0x5) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000000c0)={0x1b6, 0x9, {0x4, 0x1, 0x5f, {0x9, 0x8c7}, {0x9, 0x6}, @periodic={0x1, 0xfeff, 0x8, 0xf, 0x6, {0x1, 0x7, 0x8000, 0xfc}, 0x3, 0x0}}, {0xfffa, 0x8, 0x1, {0xc000, 0x9}, {0x7, 0x2}, @rumble={0x81}}}) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) socket(0xa, 0x3, 0x3b) setsockopt$auto(r3, 0x1, 0x3e, 0x0, 0x9) 15.592826077s ago: executing program 2 (id=5093): ioprio_set$auto(0x3, 0x0, 0x4b34) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4018aee1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb0, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x4000807c) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 13.950996326s ago: executing program 6 (id=5096): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x5, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4607993d4a772b27a3fa10548", 0x100, 0x8}, 0x8}, 0x3, 0xc80a) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0x1000000000a3da) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto_ARCH_GET_CPUID(0x1011, 0xa445) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) r3 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="4cb24518"], 0xf8}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13042dbd5200fbdbdf25150e000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) 10.492272081s ago: executing program 6 (id=5108): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x800, 0x0) io_uring_register$auto_IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000040)="a28f646c14fddf18aff8dd7e49c9a157c24809e71b3f3e38d9d0807025739500ffb8f3df5d9937e30282ae6b8cab0c27b500fcd72c48be677048fe62936033264ed077c5ce254819ab34", 0x0) r1 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@query={@target_ifindex, 0x2, 0x4, 0x5, 0x2, @prog_cnt=0x5, 0x0, 0x100, 0x401, 0x9, 0x451b}, 0xf) r2 = ioctl$auto_TUNSETLINK(r1, 0x400454cd, 0xffffffffffffffff) r3 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x400, 0x0) write$auto_tracing_cpumask_fops_trace(r3, &(0x7f00000001c0)="a1bd211a1a1b0f6164bf90141f7d4562b93e8586b51912a2a7f3421443a2a0278dbf4c169e8129a3d020ca47aa69a57c62776d3c7e02fc874000992309560d4a8094f5b8bc75f8d4a06f80d51731c7e958a865ab63a850fd19f46fa37bf7b8", 0x5f) inotify_add_watch$auto(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000300), r2) r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@siginfo_0_0={0x9, 0x5, 0xbd, @_timer={0x0, 0x4, @sival_ptr=&(0x7f0000000340)="4b6b89ef47a9da39edfabc49dcb17e132d358f438a2f8ed43a080965de77fada8f449e9d74bb9aa308761b48f2d23bc92c885f4f65f7b3c7499fe78efbf464639a2edacdb10ae6", 0x3ff}}}, 0xffff, &(0x7f0000000440)={{0xecbe, 0x7c62572b}, {0x1, 0x3}, 0xb2, 0xc359, 0x200, 0x40, 0x2, 0x4, 0x3, 0x6, 0x100, 0xb60f, 0x0, 0x0, 0x6, 0x3}) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000640)={{0x8e, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x3, 0xc000, 0x4}, 0x5, 0x80000001, 0x6, 0x7, @inferred=0xffffffffffffffff, @raw=0x7da3d0fd, 0x1, 0x0, &(0x7f0000000500)="954d25a159e2a5208d5ef5fab2ac7d8359c90175e9f67be350d7580bb2b5f12f53347f6793030484aea25e837a45f735fb4c8d152fb0a997e4edb983838e8e9c30ec3f5dc975c81dd659270385ba56e1d1a7cfb112878d7179c6b347103ac9f6ed7b1142f3be5ac0b506b7b1ebad21e94d17e75912e304f62d8ddb98715102c8725832660097b700649afd077cc4ad5827583fb56f5d4a0fa12474b60999bda79a4d4912a2add2db68547cc61e9985d493ba85e76fc74d268049c281da165264163f212fb73ba70e9eab29b62f8f15efa452fb1cb10d7f343437b09eb772e6fcd8c83b4e29d0cdda9ea0f1ed4d9cb6bf3c6781999a6a", &(0x7f0000000600)="c5a2a24babf0a7b6"}) capset$auto(&(0x7f00000006c0)={0xba, 0xffffffffffffffff}, &(0x7f0000000700)={0x7ff, 0x9, 0x7}) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r1, &(0x7f0000000e40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000740)={0x694, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0x64a, 0x18, 0x0, 0x1, [@nested={0x289, 0xb1, 0x0, 0x1, [@typed={0x8, 0xcc, 0x0, 0x0, @pid=r5}, @generic="892bae0ce478b6f9b6b2de6ce29ac2f9124b0652aba198d1d36584fb6390dbfa10b1f60fbcf8cac514509e51c78dc84a14882a95084c22c8f7574f15bf175c4a992669439e163b38c76b4f73d50ed7557c879fdf1ec0cbc1bc5576c6fa46f7af800a156ec241fdda2d7701f7c6052a5481c575c544d4df4034b18db7b323ca8c91e22f644071d13ee6230aeb9d8ea343d825101a9b036df8c57b24f2dc2ce693d39f40b0b5f6cd76372c9a39a28c", @nested={0x4, 0x37}, @nested={0x4, 0x26}, @typed={0x5f, 0xc5, 0x0, 0x0, @binary="62324f5b22faf0809039d125c061b7b753eb98bd9e3c1489425933e6794844f3d7101e61421d8e4b5e978b80c9c8b4ad5e936cedf3c2b40b53f8156e292b6cc442ccac229512e6668cc709161753dd3e79a9f8e188f09a4a14429e"}, @typed={0xb, 0x11b, 0x0, 0x0, @str='TIPCv2\x00'}, @generic="8b53bd349ee2405465964e2ef37a906057e669419ecdfdb8b43e1e57cea06c2ec96013c54a2438b05a56753748e12f5f56a9ee9ce7b0a050714bf6cfd2021304f2fd7e1af5959f4e64c6474b0f11b3c997a2", @nested={0x4, 0x71}, @generic="798b2490990ae3ac4732b276e13cb8dd64a700d4d0f43f255b4a7134a39f8104ee3ecc58dab26cbd4f7d26b6c51cd9088fd287cdf2d27433f269612521d2840531bffc612929d305d7eaec05f8fb08e1adb0d5b67219f814a0665be2a5bfce23f4705cf30099d7d913b6acf80bbbc181524d9f8e6489f5b1ad864a6b88b95beacff2d4a6fca97026bdc0444beccbd31f87d69d242ba004e873e805032a6629af4148133a489033ca0f2c6a6fbd4215b405cb3b84e49f93c846eb3d775149120ee112184d8346b4b16bf0fc", @generic="2f27dcab1918f6c5d1822dbcf933ac710a59675be5aca4a96b16869b94209990db4f0786a8b0fde1c2175b1e9661cf28101330c990a25a8db768"]}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x5}, @nested={0x19a, 0x8, 0x0, 0x1, [@nested={0x4, 0x151}, @typed={0xe2, 0x58, 0x0, 0x0, @binary="69e9e666997201ec0e64a4b21916734dc3af75c8de56cf17fc2c96ccca530fdee124e19cb44df0866c68e66f4ccd01958432b3326008ac71eb024db1f7535f7fdf410fcadc96e1229da0c898c934c08df49986b74c024230c9f79af0b7f7926a0b4e838b72726e5ac368b48e2acd1cec7d72aa1d875167757d651f7f29a7b8ea3985f7c31299382877a6549f1b3f00aca07db5d651adbe3ae2952d1a3e32f913db04176da185a3faa1e6601b966f5a90615842a48c349d185cf879b465d7f4cbd8ec1c2f0c3c248af052465866891111f22f7ff67d72685e9f1242f5873e"}, @typed={0x14, 0xa2, 0x0, 0x0, @ipv6=@private2}, @generic="3d1022a44f7cff9bc854a1aa4831ec1358f43d101c913380898cf82e78673e83350cd142f09afd7bee5302e76821e0d9ddfe7cc9f11b9a024643b522c17aab8e42b9bd01a5340636a2702d60862357bf9d2f1e09249bb9499f9c6364d4f511d3bb012a59e15f789fb87648636b599dfc71dba3fc8a65142f313b4829e074bb7c55f4", @nested={0x4, 0x142}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x7ff}, @nested={0x4, 0x1f}, @nested={0x4, 0xd1}]}, @generic="ce9aa6cfd4049b7384f68a0784ed9f6fe5a98fc389e1d046b10eeea021fb47c00929841a8d43a401635a043e600895bfeba553c3ade683027d84c6573130bb2541150de1e1e813d392fcb329e6393ba7fa177aff09d8a4423ee0584fa34efd51a82af3046f768b9fdf45a246b0521d9a88061ea76b33b5fb437bbf8cc3ee7e0696c2f6854279a8f63a194f0260b4ff24bad26cc5e0140626fd4efeddbd5724bffd36b504b19e3afc720d", @generic, @generic="723899c4edd175771d91d4407d0f45606098f06ac6c4eb82deaf47b0e47e2cce95485a2ac922f61a34f35f7df7a73954316a5c06368695548005b5c4e3e0f3d5c43d7b052136e5f39e22edb3b3870b56", @nested={0x115, 0x8e, 0x0, 0x1, [@nested={0x4, 0xfe}, @nested={0x4, 0x11f}, @generic="4bc80fec319aba803705b2b3ba337038af7e2436cc4450a2e010db8f0dc6d0a280d26d01dfe096de819b33f8b6d4b5c6287629785142a334ea3f58b51ad75303f2902f65e0cd701b2afc885cdf738742fa714c6af9889c910fc598c422ba7b399a48142ea900fe9372d0442ed039cd43f676239fe25f329f0a992d585b0a6d33a255aad503b955a3fdeac6315e016df1e9490df8eeae578ea58e0bacdb3f17b7b1bccfd0be1366121a0cc29480f6ae824071cd68438edc9d79b18df399a0ed4941d69ce486249b4e3a2a02ee2407c0788929fa36558fbaf0394e54614744c7cad61036074c90c75217c1a52afc", @typed={0x8, 0x12, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xb4, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x9}]}]}, @THERMAL_GENL_ATTR_TZ_GOV={0x10, 0xc, 0x0, 0x1, [@typed={0xc, 0x10a, 0x0, 0x0, @u64=0x55}]}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x7}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth1_vlan\x00'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x539}]}, 0x694}, 0x1, 0x0, 0x0, 0x9b639bafe175c6a}, 0x4000000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000ec0), r1) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xaa46}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x4010) r9 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000fc0), 0x58b000, 0x0) getsockopt$auto_SO_REUSEADDR(r9, 0x2, 0x2, &(0x7f0000001000)='\x16\x00', &(0x7f0000001040)=0x41ae) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000001080)={@raw=0x1, "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"}) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r2, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) sendmmsg$auto(r0, &(0x7f0000003240)={{&(0x7f0000002180)="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", 0x3, &(0x7f00000031c0)={&(0x7f0000003180)="ae695c6be938a9", 0x8}, 0x2, &(0x7f0000003200)="7c9984cbde7666ac38d3e326cc2b8adaaedabd09c6275648383ec8a8aa", 0x5, 0x4}, 0xfffff7bb}, 0x1, 0x1bdd) socket(0x2c, 0x2, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000003280)={'bridge0\x00'}) execve$auto(&(0x7f00000032c0)='.\x00', &(0x7f0000003340)=&(0x7f0000003300)='\\\x00', &(0x7f00000033c0)=&(0x7f0000003380)='(\'@[!!:,./^\x00') syz_genetlink_get_family_id$auto_cifs(&(0x7f0000003400), r2) r11 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000003480), r2) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x2c, r11, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x20000000) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000003a40)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003a00)={&(0x7f00000035c0)={0x40c, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x9}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0xe2, 0x14, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@nested={0x4, 0x3a}, @typed={0x8, 0x32, 0x0, 0x0, @u32=0x6}]}, @typed={0x8, 0x14d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @generic="e9ae3a8333b1e5a52d30e7555a0748b45887785854c87fea007da42a2a696306f35e09bcc9b98e3fec2db05b58179d3ceffdae7ce0772398246238aae9c5954e5890763157e2a08c6a862779fe7e4270f7b21207b403e04a17846141e2bf5fcf46e0f5ccc9901a354c0699ebdbb282720d7e9a36389dda7720536aaa2d16da7172b778b8acdb0f0d5ac66cd3836112060e2448f0134edbfb718c3473712ea2eb1be1805c3950fc77d4db714944b9dbbb5fa5442d704ff1b93c6e2bb27a4ca901b946c883f33c"]}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0xf, 0xd, 'veth1_vlan\x00'}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x9}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x7409}, @THERMAL_GENL_ATTR_TZ_TRIP={0xcf, 0x4, 0x0, 0x1, [@generic="d5b5df1a0b51cbec1a8e3ca89a9013340394c1020684eace2f3b2e7d53534afb66d09c48e5995104407f4db6a0cf6d95288be4c06aef17904992ab2fa1f03484a90b5e2a4449c8731ce18170f2dbfa92c52adb945220d56307c596e1df7423c23d3467f014758cbc0a4d32ae1e955f421f833056207acb0c7b30cc241190ae04143f50b4f5e3cd8ddc8ba15ecea16320583c569db056c856c575563064079a4176325b9f34dae3d7102fd602a9cbe7d4d94d0945a4a1eaa6fad07b028d40c2c9e87ff534a298daf4f1087f"]}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x1800000}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x11, 0xd, '-}:{@;#^!o-!}'}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x4}, @THERMAL_GENL_ATTR_TZ_TRIP={0x1f7, 0x4, 0x0, 0x1, [@generic="6b4586f89e51e4b9c3b278527720f68f8ca4adcbd4b70422c5408a46910960de97fd502026dd485754dfa5509a65dcb7a01faad5389476693b5a3dff1a36c13563594bd5536c737487c21c0a99dedd0ecf51ca51971c1854a5f091f9e2561b03fa3b756b44d0655f033b8d7206d88b5d692f2394f48921ec917aaf82b86a7a1e58eac0ebe6486a185ce14f4d08", @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x14a, 0x0, 0x0, @fd=r2}, @nested={0xd3, 0xe5, 0x0, 0x1, [@nested={0x4, 0x11a}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x151}, @typed={0xc, 0x87, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@empty}, @typed={0xa, 0xc9, 0x0, 0x0, @str='!!)#\\\x00'}, @generic="42388e5df49458ab407470ffaeb8896daf4ef83b0d44d463993f402da6b4b68229ae72d90f9f7fd989bd0730f3df354113004f74d911fb070387bcc6b0cc9ce561f99d81067f146f6c9ea05661952a3cb454ff7bf4b8fb7135cc99631856c7427a75f979b63f242a12201524bbe0e2aec3e6cb06a26d563a4613eea77a299dead089b09b7de955d1acca4addf40a9ff0baf18533899a357ec3448c"]}, @generic="8ff38d122532e9c0b4729f199effb6bcc08f45ab7645a3ebb09c5efdc1e7cce4df656a39486b5914b6f5de086a4c438d3868339ee727c4c67c8d22ccd925edf78bb26275f1ebed9d544ede01229db8091482bf29a72f3b64b4dcd0532256016858dbc762ffbaa5b2e865c0536bbde04c40913ac0434e01e6647ee47580f883ce459e"]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x40048c4}, 0x8041) mmap$auto(0x8000, 0xa, 0x5, 0xff, r3, 0x6) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/cpu/0/cpuid\x00', 0x200001, 0x0) 10.118178268s ago: executing program 6 (id=5110): socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x80503d0a, 0x0) 3.937716698s ago: executing program 5 (id=5130): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) r1 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0xfffffffffffffff9, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x5, 0x7, 0x7, 0x61, 0x40000103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0xff, 0xe97f, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x4, 0x8, 0x2, 0x19, r2, 0x3) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) unshare$auto(0x40000080) pwrite64$auto(r0, &(0x7f0000000000)=')\x00', 0x0, 0x9) 3.428486431s ago: executing program 0 (id=5131): socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x1, 0x0) r0 = socket(0x11, 0x80003, 0x300) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.348328152s ago: executing program 0 (id=5132): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/memory.pressure\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)='8', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) open_by_handle_at$auto(r2, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x1, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 3.014814425s ago: executing program 0 (id=5133): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) r1 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$auto(r0, 0x5523, r0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000080)={@raw=0xc1, "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"}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.556621486s ago: executing program 5 (id=5134): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x133) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x0, 0x0, 0xd) pipe2$auto(0x0, 0x80) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mmap$auto(0x0, 0x201d, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x102, 0x7) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0xc) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) statmount$auto(0x0, 0x0, 0x7, 0x6) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x4c4400, 0x0) read$auto_proc_fail_nth_operations_base(r3, &(0x7f0000000100)=""/9, 0x9) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) read$auto(r4, &(0x7f0000000400)=',!\x00', 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) 2.408884694s ago: executing program 5 (id=5135): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$auto(0x0, &(0x7f0000000040)=@iter_create={r0, 0xc}, 0x8) 1.240821327s ago: executing program 6 (id=5136): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x100000001, 0xeb3, 0x6, 0x6) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0) socket(0x2, 0x1, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f00000000c0)={0x101000, 0x5, 0x40, 0x0, 0xc00000000, 0xfffffbffffffffff, 0x100, 0x0, 0x685b, 0x5, 0xb}, 0xb03) ioctl$auto(0xffffffffffffffff, 0x80000541b, 0x38) get_mempolicy$auto(0x0, 0x0, 0x3, 0x6, 0x100000000001) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0xffffffffffffffff, 0x2, 0x5, 0x0, 0x10000009) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x880000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot/mode\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)="34ae", 0x2) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 1.233572312s ago: executing program 0 (id=5144): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0x19dc, 0x13, 0x2, 0x7fff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x0, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x61c, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x642f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x8) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x20, r1, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/stats\x00', 0x401, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.233192283s ago: executing program 5 (id=5137): r0 = socket(0x2b, 0x4000e, 0xe) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x101000, 0x0) ioctl$auto_BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r2 = setfsgid$auto(0xee00) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x2b, 0x1, 0x1) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x404400, 0x0) r3 = fcntl$getown(r0, 0x9) msgctl$auto_MSG_STAT_ANY(0x6, 0xd, &(0x7f00000000c0)={{0x5, 0xee01, r2, 0x8, 0x0, 0x6, 0x5}, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x9, 0x5, 0x6, 0xcb2b, 0x8001, 0x100, 0x2, 0x2, 0x7, @inferred=r3, @raw=0x8}) remap_file_pages$auto(0x2, 0x6, 0x2, 0x8000000000000000, 0x81) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001500)={&(0x7f0000000200)={0x12d4, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x1004, 0x128, "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"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7e}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe9, 0xba, "b0199e1defcc1fced1781de957dfd1de24836459644f874c96c6817b80e0704927aae618e64ff4111585027a3f587b7a65f6d7bcb50012f90d82c843ccd90399b6b947f6192c69d35f749807c2b4c9d4ed1e7fed5c9c4430b2828c72efd61506f0d86b7037558d515f482905dceda3a232fff7487412b8984d0fc2547837aeb071826f51bd43bdcc528bd43a605342c8bb9100083704cc770e7ae5370878f3798d6a50cf0cb917e1e90fabd29c0599d1e61ba81effb1e3068e4d9e23a82dd1178c3c2dbb1f5d50a6249efda4a994337d24b92e32b187b6bfb2f300bd3d3763fc8c5c9cc5e9"}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x5}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_VENDOR_DATA={0x6c, 0xc5, "d021a85dca5de2f7b330e9a038f792854daaeb6d066fb5492463c2bf63641ffad6746800e1a0de279eabd1e54c49abb2a429fb6b7febae4e7c5c854b3c19319406bb91012ce267fedd7eeab5123a0abf847ed909f576fa1c72f95ba907b35b85bef4f2ee1ca97c0b"}, @NL80211_ATTR_PMKR0_NAME={0xa4, 0x102, "02639196831094edb046d81313f532865ee7ff91967474f004791cb600b7f629f8c674105d9d16d2df840bfa49e73c916db630365380083720d2183fcd8cd8903454644e76925058449d9e9511033176de4234f5c323611400bb183b96797a5fa4b03796bf303bfe4c0eca778959cb7cb0232676cb31fe42b4efb3d1f9a477ca380d3df4625c75ae0ac53d4d262ed2fcb3ec308a2002cacd22817d3fba394246"}, @NL80211_ATTR_FILS_NONCES={0x72, 0xf3, "fbf8fc1ef26b95b8d9064a81f4352738e1f2af9dfd8816ec29627b51008bdd019a0f03b341ba133a0e35afaeb941a68aa97d3955f94d6bda02fc2724c1c12f19aa2be2e50df0700d9bfa5037fa01c949eea590983a61c67a78d82b786e15d4c4cd402ce164f1c23517e56783de11"}, @NL80211_ATTR_FILS_KEK={0x37, 0xf2, "bf620706480c60623fea12eedae7dc35d2b612b004abc00940e96037cc8b267a2427b2bb9b0605bef3ea1d55f655a0bf74db11"}]}, 0x12d4}, 0x1, 0x0, 0x0, 0x8048001}, 0x40040) 1.146454146s ago: executing program 0 (id=5138): recvfrom$auto(0xffffffffffffffff, &(0x7f0000000440)="2512683702c78aa366adde5483233ba62b5f1b0aa86d8137bc9e30cb56cbc69805ea2abbfb20dbed8e619f86d21290031ad3ff89dccea2abedcc87547259874517376718c76407cabb0832d792f80ef20d0111117f0b641631eecdaa6e7b0de194b5487fa6496ac851c9ba202961d0048e96c98298407192a22aab433167b74e190835b5c5f049a17f4e1b0e2c0bdb7c72dd3279a7eb42e48f26ecf8f7daee9d38c811405c0f011bfeca6449723bebfc04628d49189a73f80d8a642a2306139006bea83b064b4d02f8ed5fb5e31b98", 0x100, 0xc0a, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xd7, 0x9b72, 0xffffffffffffffff, 0x8001) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x3ffffd, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000000eb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x41, 0xfffffffffffffff5, 0x15, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8, 0x3}, 0xc00}, 0x1, 0x6) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4c041) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x45ca01, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x600b80, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xc) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024010}, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(0x0, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) pidfd_open$auto(0x0, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r5 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x2002, 0x0) pread64$auto(r5, 0x0, 0x3c02, 0x100007) 920.039123ms ago: executing program 0 (id=5139): statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8004, &(0x7f0000000300)={0x7, 0x0, 0xfffffffffffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x401, 0x100800000001, 0x5, 0x1fc, {0x80000002, 0xfb44}, {0x5, 0xc}, {0xb00, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x7ee4, 0x6, 0x80000000, 0x3, 0x0, 0x101, 0x5, 0x937, 0xd, 0x5, 0x6, 0x3, [0x7, 0x200000000005, 0x80000001, 0x5, 0xffffffff, 0x1c9fb31b, 0x74, 0xe, 0x3]}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycc\x00', 0xa0840, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xf, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x7aa, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x9]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/batadv_slave_0/arp_announce\x00', 0x141241, 0x0) pwrite64$auto(r3, &(0x7f00000005c0)='./cgroup/memory.pre\xf3sure\x00Qn\x05\xed\xa4\xb4\xfc\xb7$@d\xaf\xaa\xff\x15l\x9f\xb0\xdb\xb5\x9bge\xee\x1688h`\x90\x8a\n\'\xd8\xaa\xdb\xf5\x83\x7f\x8b\x8e\x8b*>p\x1c3\xc8~\x12\xd1\xaeN\xb8\xec\xa1\xbc\x0eEf\xbf\x12\x83\xc3#\x8eN$\xad\x11\xb2{\xd8\a\xc7\xbeZ\xcd\xa0\x80\x89\xee\x10\xef\xca\xbf9\xd6\x99Z\x99\xedk\x8d2\xbb\xd7\xc4z\x97\xc9+\xe7\xd0\f\x1c\x12\x92\xbeZ\xd1\xa56\xf1\xfe\x89\r\xe0\xfb\xed4\x1b\n\xeb\x81\xed\xd1\xa2X\x87ul\x10cA\xbe\x933\x82A\x90\x9eO\x12\xc4\xb4\xbe\x99z\xde\xc9\x8e\xd5m<\xfc3\x86&#\x1c\xad\xce \xd9r\bQ\xfbQ\x04,\\W\xe1\xc2\xeb\x06\x06l\xbc@\xe2\xfa\xc3\t\xe4:\xc2kj\xa2\xb9\xd4\x84Vm\xb0K\xa4\x06h\'\xdd0\x9aX_\xdb\xbf\xbf+#\xdf+\xb8', 0x1000, 0xffffffffffffffff) readahead$auto(r3, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) read$auto_dfs_cpu_ops_debugfs(0xffffffffffffffff, &(0x7f00000003c0)=""/213, 0xd5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x98, 0x401, 0x8000) ioctl$auto(r4, 0xc1205531, r4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x10001) sysfs$auto(0x5, 0x100000074e, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r6, 0x80044dfd, &(0x7f00000014c0)) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 384.182416ms ago: executing program 35 (id=5093): ioprio_set$auto(0x3, 0x0, 0x4b34) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4018aee1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb0, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x4000807c) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 262.70712ms ago: executing program 5 (id=5141): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose7/queues/rx-0/rps_cpus\x00', 0x1c1002, 0x0) sendfile$auto(r0, r0, 0x0, 0xef3) (fail_nth: 11) 0s ago: executing program 5 (id=5142): pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r3 = epoll_create$auto(0x8800001) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r3, 0xc0844123, &(0x7f0000000140)={0xbf8, @reserved="f93e9d67c55645e153c1ab3233984a5e861f54eea7194b3831bcb2c93befe1d953f5e94a47cb3a3e01281de9c1b6d1ff34cc5032d0a471553d24b94102a08e39", @reserved="34ac12605cf16466267d44e69de57a6a5d2e1a4e05e84b2c8704766ac13d5d8dfbd8b8cf4035debb8bc8835b419adb5d85a9f13e9d242e6e18341a998342d639"}) epoll_ctl$auto(r3, 0x1, r2, 0x0) r4 = prctl$auto_PR_SET_MM_ENV_START(0xd, 0xa, 0x0, 0x8000000000000000, 0x7fff) ioctl$auto_VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x3, r4}) kernel console output (not intermixed with test programs): 32 bytes leftover after parsing attributes in process `syz.0.4259'. [ 1128.162267][T24078] vcan0: tx drop: invalid da for name 0x000000000000003f [ 1129.587390][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1130.437411][T24109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1132.636347][T24150] sp0: Synchronizing with TNC [ 1132.695147][T24149] [U] è [ 1132.720565][T24158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1135.328959][T24201] ieee80211 phy240: Selected rate control algorithm 'minstrel_ht' [ 1135.537926][T24213] FAULT_INJECTION: forcing a failure. [ 1135.537926][T24213] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.603570][T24213] CPU: 1 UID: 0 PID: 24213 Comm: syz.3.4306 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1135.603615][T24213] Tainted: [U]=USER [ 1135.603624][T24213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1135.603640][T24213] Call Trace: [ 1135.603648][T24213] [ 1135.603658][T24213] dump_stack_lvl+0x16c/0x1f0 [ 1135.603688][T24213] should_fail_ex+0x512/0x640 [ 1135.603717][T24213] ? kernfs_fop_write_iter+0x237/0x510 [ 1135.603751][T24213] should_failslab+0xc2/0x120 [ 1135.603780][T24213] __kmalloc_noprof+0xd2/0x510 [ 1135.603809][T24213] kernfs_fop_write_iter+0x237/0x510 [ 1135.603843][T24213] iter_file_splice_write+0x91f/0x1150 [ 1135.603889][T24213] ? copy_splice_read+0x89c/0xba0 [ 1135.603925][T24213] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1135.603967][T24213] ? __pfx_copy_splice_read+0x10/0x10 [ 1135.604005][T24213] ? look_up_lock_class+0x6b/0x150 [ 1135.604032][T24213] ? __pfx___might_resched+0x10/0x10 [ 1135.604069][T24213] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1135.604095][T24213] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1135.604135][T24213] direct_splice_actor+0x192/0x6c0 [ 1135.604173][T24213] splice_direct_to_actor+0x342/0xa30 [ 1135.604211][T24213] ? __pfx_direct_splice_actor+0x10/0x10 [ 1135.604252][T24213] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1135.604291][T24213] do_splice_direct+0x174/0x240 [ 1135.604329][T24213] ? __pfx_do_splice_direct+0x10/0x10 [ 1135.604366][T24213] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1135.604405][T24213] ? bpf_lsm_file_permission+0x9/0x10 [ 1135.604440][T24213] ? security_file_permission+0x71/0x210 [ 1135.604482][T24213] ? rw_verify_area+0xcf/0x680 [ 1135.604519][T24213] do_sendfile+0xb06/0xe50 [ 1135.604558][T24213] ? __pfx_do_sendfile+0x10/0x10 [ 1135.604593][T24213] ? __fget_files+0x20e/0x3c0 [ 1135.604619][T24213] __x64_sys_sendfile64+0x1d8/0x220 [ 1135.604647][T24213] ? ksys_write+0x1ac/0x250 [ 1135.604671][T24213] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1135.604704][T24213] do_syscall_64+0xcd/0x490 [ 1135.604732][T24213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.604760][T24213] RIP: 0033:0x7f1728f8e9a9 [ 1135.604798][T24213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.604826][T24213] RSP: 002b:00007f1729ed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1135.604854][T24213] RAX: ffffffffffffffda RBX: 00007f17291b5fa0 RCX: 00007f1728f8e9a9 [ 1135.604873][T24213] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1135.604889][T24213] RBP: 00007f1729ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.604906][T24213] R10: 0000000000000ef3 R11: 0000000000000246 R12: 0000000000000001 [ 1135.604923][T24213] R13: 0000000000000000 R14: 00007f17291b5fa0 R15: 00007ffe820f2be8 [ 1135.604949][T24213] [ 1136.595358][T12384] Bluetooth: hci2: unexpected event 0x3e length: 1020 > 260 [ 1136.595404][T12384] Bluetooth: hci2: unexpected subevent 0x01 length: 1019 > 18 [ 1137.101720][T24239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4311'. [ 1138.347387][T24264] [U] [ 1138.838149][T24286] FAULT_INJECTION: forcing a failure. [ 1138.838149][T24286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.942502][T24286] CPU: 0 UID: 0 PID: 24286 Comm: syz.3.4327 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1138.942551][T24286] Tainted: [U]=USER [ 1138.942561][T24286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1138.942577][T24286] Call Trace: [ 1138.942587][T24286] [ 1138.942597][T24286] dump_stack_lvl+0x16c/0x1f0 [ 1138.942628][T24286] should_fail_ex+0x512/0x640 [ 1138.942658][T24286] _copy_to_user+0x32/0xd0 [ 1138.942689][T24286] tomoyo_flush+0x161/0x520 [ 1138.942719][T24286] tomoyo_set_string+0xaf/0xe0 [ 1138.942748][T24286] tomoyo_read_exception+0x313/0xc30 [ 1138.942781][T24286] tomoyo_read_control+0x29c/0x540 [ 1138.942813][T24286] ? __pfx_tomoyo_read+0x10/0x10 [ 1138.942837][T24286] vfs_read+0x1e1/0xc60 [ 1138.942863][T24286] ? lock_release+0x201/0x2f0 [ 1138.942899][T24286] ? __pfx_vfs_read+0x10/0x10 [ 1138.942923][T24286] ? __fget_files+0x204/0x3c0 [ 1138.942948][T24286] ? rcu_is_watching+0x12/0xc0 [ 1138.942976][T24286] ? lock_release+0x201/0x2f0 [ 1138.943015][T24286] ? __fget_files+0x20e/0x3c0 [ 1138.943037][T24286] ? __fget_files+0x120/0x3c0 [ 1138.943065][T24286] __x64_sys_pread64+0x1eb/0x250 [ 1138.943101][T24286] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1138.943133][T24286] do_syscall_64+0xcd/0x490 [ 1138.943160][T24286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.943187][T24286] RIP: 0033:0x7f1728f8e9a9 [ 1138.943208][T24286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.943233][T24286] RSP: 002b:00007f1729ed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1138.943260][T24286] RAX: ffffffffffffffda RBX: 00007f17291b5fa0 RCX: 00007f1728f8e9a9 [ 1138.943277][T24286] RDX: 000000000000b69a RSI: 0000000000000000 RDI: 0000000000000003 [ 1138.943293][T24286] RBP: 00007f1729ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.943308][T24286] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1138.943323][T24286] R13: 0000000000000000 R14: 00007f17291b5fa0 R15: 00007ffe820f2be8 [ 1138.943345][T24286] [ 1141.407896][T24332] FAULT_INJECTION: forcing a failure. [ 1141.407896][T24332] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.425208][T24332] CPU: 1 UID: 0 PID: 24332 Comm: syz.3.4337 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1141.425256][T24332] Tainted: [U]=USER [ 1141.425264][T24332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1141.425277][T24332] Call Trace: [ 1141.425285][T24332] [ 1141.425293][T24332] dump_stack_lvl+0x16c/0x1f0 [ 1141.425321][T24332] should_fail_ex+0x512/0x640 [ 1141.425345][T24332] ? kernfs_fop_write_iter+0x237/0x510 [ 1141.425373][T24332] should_failslab+0xc2/0x120 [ 1141.425399][T24332] __kmalloc_noprof+0xd2/0x510 [ 1141.425424][T24332] kernfs_fop_write_iter+0x237/0x510 [ 1141.425453][T24332] iter_file_splice_write+0x91f/0x1150 [ 1141.425494][T24332] ? copy_splice_read+0x89c/0xba0 [ 1141.425524][T24332] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1141.425560][T24332] ? __pfx_copy_splice_read+0x10/0x10 [ 1141.425592][T24332] ? look_up_lock_class+0x6b/0x150 [ 1141.425615][T24332] ? __pfx___might_resched+0x10/0x10 [ 1141.425639][T24332] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1141.425661][T24332] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1141.425695][T24332] direct_splice_actor+0x192/0x6c0 [ 1141.425729][T24332] splice_direct_to_actor+0x342/0xa30 [ 1141.425762][T24332] ? __pfx_direct_splice_actor+0x10/0x10 [ 1141.425796][T24332] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1141.425832][T24332] do_splice_direct+0x174/0x240 [ 1141.425863][T24332] ? __pfx_do_splice_direct+0x10/0x10 [ 1141.425895][T24332] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1141.425926][T24332] ? bpf_lsm_file_permission+0x9/0x10 [ 1141.425955][T24332] ? security_file_permission+0x71/0x210 [ 1141.425996][T24332] ? rw_verify_area+0xcf/0x680 [ 1141.426029][T24332] do_sendfile+0xb06/0xe50 [ 1141.426064][T24332] ? __pfx_do_sendfile+0x10/0x10 [ 1141.426097][T24332] ? __fget_files+0x20e/0x3c0 [ 1141.426120][T24332] __x64_sys_sendfile64+0x1d8/0x220 [ 1141.426145][T24332] ? ksys_write+0x1ac/0x250 [ 1141.426165][T24332] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1141.426194][T24332] do_syscall_64+0xcd/0x490 [ 1141.426223][T24332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.426246][T24332] RIP: 0033:0x7f1728f8e9a9 [ 1141.426264][T24332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.426286][T24332] RSP: 002b:00007f1729ed8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1141.426308][T24332] RAX: ffffffffffffffda RBX: 00007f17291b5fa0 RCX: 00007f1728f8e9a9 [ 1141.426323][T24332] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1141.426336][T24332] RBP: 00007f1729ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.426350][T24332] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1141.426364][T24332] R13: 0000000000000000 R14: 00007f17291b5fa0 R15: 00007ffe820f2be8 [ 1141.426384][T24332] [ 1142.936664][T24362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4346'. [ 1143.500771][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 1143.527409][T24379] FAULT_INJECTION: forcing a failure. [ 1143.527409][T24379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1143.558204][T24379] CPU: 1 UID: 0 PID: 24379 Comm: syz.2.4351 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1143.558252][T24379] Tainted: [U]=USER [ 1143.558262][T24379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1143.558279][T24379] Call Trace: [ 1143.558289][T24379] [ 1143.558300][T24379] dump_stack_lvl+0x16c/0x1f0 [ 1143.558334][T24379] should_fail_ex+0x512/0x640 [ 1143.558365][T24379] should_fail_alloc_page+0xe7/0x130 [ 1143.558401][T24379] prepare_alloc_pages+0x3c2/0x610 [ 1143.558443][T24379] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1143.558473][T24379] ? lock_release+0x201/0x2f0 [ 1143.558512][T24379] ? rcu_is_watching+0x12/0xc0 [ 1143.558541][T24379] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1143.558586][T24379] ? finish_task_switch.isra.0+0x221/0xc10 [ 1143.558620][T24379] ? rcu_is_watching+0x12/0xc0 [ 1143.558647][T24379] ? trace_sched_exit_tp+0xde/0x130 [ 1143.558681][T24379] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1143.558710][T24379] ? __schedule+0x1181/0x5de0 [ 1143.558752][T24379] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1143.558801][T24379] ? __pfx___schedule+0x10/0x10 [ 1143.558846][T24379] ? wiphy_new_nm+0x701/0x2160 [ 1143.558878][T24379] __alloc_pages_noprof+0xb/0x1b0 [ 1143.558906][T24379] ___kmalloc_large_node+0x84/0x1e0 [ 1143.558944][T24379] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1143.559001][T24379] ? wiphy_new_nm+0x701/0x2160 [ 1143.559031][T24379] __kmalloc_large_node_noprof+0x1c/0x70 [ 1143.559072][T24379] __kmalloc_noprof.cold+0xc/0x61 [ 1143.559112][T24379] ? irq_work_queue+0xce/0x100 [ 1143.559151][T24379] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1143.559185][T24379] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1143.559220][T24379] wiphy_new_nm+0x701/0x2160 [ 1143.559251][T24379] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1143.559285][T24379] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1143.559320][T24379] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 1143.559352][T24379] ? mac80211_hwsim_new_radio+0x155/0x54d0 [ 1143.559379][T24379] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1143.559422][T24379] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 1143.559451][T24379] ? __pfx__printk+0x10/0x10 [ 1143.559492][T24379] ? __pfx____ratelimit+0x10/0x10 [ 1143.559536][T24379] ? rcu_is_watching+0x12/0xc0 [ 1143.559567][T24379] ? do_trace_netlink_extack+0x164/0x1e0 [ 1143.559611][T24379] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1143.559646][T24379] hwsim_new_radio_nl+0xb51/0x12c0 [ 1143.559678][T24379] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1143.559713][T24379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1143.559753][T24379] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1143.559798][T24379] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1143.559837][T24379] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1143.559874][T24379] ? trace_cap_capable+0x18d/0x200 [ 1143.559913][T24379] ? bpf_lsm_capable+0x9/0x10 [ 1143.559952][T24379] ? security_capable+0x7e/0x260 [ 1143.559990][T24379] ? ns_capable+0xd7/0x110 [ 1143.560021][T24379] genl_rcv_msg+0x55c/0x800 [ 1143.560059][T24379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1143.560095][T24379] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1143.560130][T24379] netlink_rcv_skb+0x155/0x420 [ 1143.560163][T24379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1143.560202][T24379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1143.560242][T24379] ? netlink_deliver_tap+0x1ae/0xd30 [ 1143.560274][T24379] genl_rcv+0x28/0x40 [ 1143.560306][T24379] netlink_unicast+0x58d/0x850 [ 1143.560339][T24379] ? __pfx_netlink_unicast+0x10/0x10 [ 1143.560375][T24379] netlink_sendmsg+0x8d1/0xdd0 [ 1143.560409][T24379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1143.560445][T24379] ____sys_sendmsg+0xa95/0xc70 [ 1143.560477][T24379] ? copy_msghdr_from_user+0x10a/0x160 [ 1143.560504][T24379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1143.560535][T24379] ? __pfx_kstrtouint+0x10/0x10 [ 1143.560574][T24379] ? kstrtouint_from_user+0x13c/0x1d0 [ 1143.560611][T24379] ___sys_sendmsg+0x134/0x1d0 [ 1143.560634][T24379] ? __pfx____sys_sendmsg+0x10/0x10 [ 1143.560667][T24379] ? rcu_is_watching+0x12/0xc0 [ 1143.560708][T24379] __sys_sendmsg+0x16d/0x220 [ 1143.560736][T24379] ? __pfx___sys_sendmsg+0x10/0x10 [ 1143.560766][T24379] do_syscall_64+0xcd/0x490 [ 1143.560795][T24379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.560824][T24379] RIP: 0033:0x7f618b78e9a9 [ 1143.560843][T24379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.560871][T24379] RSP: 002b:00007f618c6d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.560899][T24379] RAX: ffffffffffffffda RBX: 00007f618b9b5fa0 RCX: 00007f618b78e9a9 [ 1143.560919][T24379] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000003 [ 1143.560937][T24379] RBP: 00007f618c6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.560954][T24379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.560971][T24379] R13: 0000000000000000 R14: 00007f618b9b5fa0 R15: 00007ffdcf475a48 [ 1143.561006][T24379] [ 1146.614191][T24412] zswap: compressor not available [ 1147.525841][T24424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4360'. [ 1149.075175][T24459] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4374'. [ 1154.500622][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dba7800: rx timeout, send abort [ 1154.509107][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dba7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1156.734702][T24635] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input86 [ 1158.170096][T24658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4430'. [ 1158.181052][T24658] FAULT_INJECTION: forcing a failure. [ 1158.181052][T24658] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.279968][T24658] CPU: 1 UID: 0 PID: 24658 Comm: syz.3.4430 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1158.280015][T24658] Tainted: [U]=USER [ 1158.280024][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1158.280039][T24658] Call Trace: [ 1158.280048][T24658] [ 1158.280057][T24658] dump_stack_lvl+0x16c/0x1f0 [ 1158.280088][T24658] should_fail_ex+0x512/0x640 [ 1158.280117][T24658] should_failslab+0xc2/0x120 [ 1158.280150][T24658] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1158.280177][T24658] ? __alloc_skb+0x2b2/0x380 [ 1158.280203][T24658] __alloc_skb+0x2b2/0x380 [ 1158.280226][T24658] ? __pfx___alloc_skb+0x10/0x10 [ 1158.280251][T24658] ? __nla_parse+0x40/0x60 [ 1158.280286][T24658] ovs_dp_cmd_del+0x67/0x2a0 [ 1158.280314][T24658] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1158.280353][T24658] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1158.280388][T24658] ? trace_cap_capable+0x18d/0x200 [ 1158.280424][T24658] ? bpf_lsm_capable+0x9/0x10 [ 1158.280460][T24658] ? security_capable+0x7e/0x260 [ 1158.280491][T24658] ? ns_capable+0xd7/0x110 [ 1158.280522][T24658] genl_rcv_msg+0x55c/0x800 [ 1158.280557][T24658] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.280643][T24658] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 1158.280673][T24658] netlink_rcv_skb+0x155/0x420 [ 1158.280702][T24658] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.280736][T24658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1158.280771][T24658] ? netlink_deliver_tap+0x1ae/0xd30 [ 1158.280800][T24658] genl_rcv+0x28/0x40 [ 1158.280828][T24658] netlink_unicast+0x58d/0x850 [ 1158.280877][T24658] ? __pfx_netlink_unicast+0x10/0x10 [ 1158.280910][T24658] netlink_sendmsg+0x8d1/0xdd0 [ 1158.280942][T24658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.280976][T24658] ____sys_sendmsg+0xa95/0xc70 [ 1158.281009][T24658] ? copy_msghdr_from_user+0x10a/0x160 [ 1158.281035][T24658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.281065][T24658] ? __pfx_kstrtouint+0x10/0x10 [ 1158.281102][T24658] ? kstrtouint_from_user+0x13c/0x1d0 [ 1158.281139][T24658] ___sys_sendmsg+0x134/0x1d0 [ 1158.281165][T24658] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.281197][T24658] ? rcu_is_watching+0x12/0xc0 [ 1158.281234][T24658] __sys_sendmsg+0x16d/0x220 [ 1158.281259][T24658] ? __pfx___sys_sendmsg+0x10/0x10 [ 1158.281292][T24658] do_syscall_64+0xcd/0x490 [ 1158.281319][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.281346][T24658] RIP: 0033:0x7f1728f8e9a9 [ 1158.281367][T24658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.281392][T24658] RSP: 002b:00007f1729ed8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.281418][T24658] RAX: ffffffffffffffda RBX: 00007f17291b5fa0 RCX: 00007f1728f8e9a9 [ 1158.281436][T24658] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1158.281453][T24658] RBP: 00007f1729ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.281469][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.281484][T24658] R13: 0000000000000000 R14: 00007f17291b5fa0 R15: 00007ffe820f2be8 [ 1158.281509][T24658] [ 1161.027361][T24715] FAULT_INJECTION: forcing a failure. [ 1161.027361][T24715] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.071544][T24715] CPU: 1 UID: 0 PID: 24715 Comm: syz.5.4449 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1161.071595][T24715] Tainted: [U]=USER [ 1161.071606][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1161.071623][T24715] Call Trace: [ 1161.071634][T24715] [ 1161.071645][T24715] dump_stack_lvl+0x16c/0x1f0 [ 1161.071679][T24715] should_fail_ex+0x512/0x640 [ 1161.071711][T24715] should_failslab+0xc2/0x120 [ 1161.071745][T24715] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1161.071773][T24715] ? trace_cap_capable+0x18d/0x200 [ 1161.071805][T24715] ? create_new_namespaces+0x30/0xa90 [ 1161.071840][T24715] create_new_namespaces+0x30/0xa90 [ 1161.071869][T24715] ? bpf_lsm_capable+0x9/0x10 [ 1161.071906][T24715] ? security_capable+0x7e/0x260 [ 1161.071940][T24715] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1161.071974][T24715] ksys_unshare+0x45b/0xa40 [ 1161.072012][T24715] ? __pfx_ksys_unshare+0x10/0x10 [ 1161.072047][T24715] ? ksys_write+0x1ac/0x250 [ 1161.072079][T24715] __x64_sys_unshare+0x31/0x40 [ 1161.072117][T24715] do_syscall_64+0xcd/0x490 [ 1161.072146][T24715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.072176][T24715] RIP: 0033:0x7f1f9678e9a9 [ 1161.072198][T24715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.072227][T24715] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1161.072255][T24715] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1161.072274][T24715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1161.072291][T24715] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.072308][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.072325][T24715] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1161.072359][T24715] [ 1161.848277][T24723] zswap: compressor not available [ 1163.197003][T24723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4450'. [ 1163.900642][T24764] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input87 [ 1167.484509][T24850] FAULT_INJECTION: forcing a failure. [ 1167.484509][T24850] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.497794][T24850] CPU: 1 UID: 0 PID: 24850 Comm: syz.5.4492 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1167.497825][T24850] Tainted: [U]=USER [ 1167.497832][T24850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.497842][T24850] Call Trace: [ 1167.497848][T24850] [ 1167.497855][T24850] dump_stack_lvl+0x16c/0x1f0 [ 1167.497878][T24850] should_fail_ex+0x512/0x640 [ 1167.497897][T24850] ? tracepoint_add_func+0x2a6/0xea0 [ 1167.497924][T24850] should_failslab+0xc2/0x120 [ 1167.497945][T24850] __kmalloc_noprof+0xd2/0x510 [ 1167.497965][T24850] ? __pfx_trace_event_raw_event_nfs4_test_stateid_event+0x10/0x10 [ 1167.497996][T24850] tracepoint_add_func+0x2a6/0xea0 [ 1167.498022][T24850] ? __pfx_trace_event_raw_event_nfs4_test_stateid_event+0x10/0x10 [ 1167.498053][T24850] ? __pfx_trace_event_raw_event_nfs4_test_stateid_event+0x10/0x10 [ 1167.498082][T24850] tracepoint_probe_register+0xbf/0x100 [ 1167.498109][T24850] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1167.498136][T24850] ? __pfx_trace_event_raw_event_nfs4_test_stateid_event+0x10/0x10 [ 1167.498164][T24850] ? __pfx_probe_sched_switch+0x10/0x10 [ 1167.498190][T24850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1167.498216][T24850] trace_event_reg+0x209/0x340 [ 1167.498237][T24850] __ftrace_event_enable_disable+0x2a1/0x8b0 [ 1167.498267][T24850] __ftrace_set_clr_event_nolock+0x390/0xb70 [ 1167.498298][T24850] ftrace_set_clr_event+0x16e/0x330 [ 1167.498316][T24850] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1167.498336][T24850] ftrace_event_write+0x243/0x290 [ 1167.498354][T24850] ? __pfx_ftrace_event_write+0x10/0x10 [ 1167.498377][T24850] ? lock_acquire+0x2cd/0x350 [ 1167.498401][T24850] ? __pfx___might_resched+0x10/0x10 [ 1167.498422][T24850] ? __pfx_ftrace_event_write+0x10/0x10 [ 1167.498438][T24850] vfs_write+0x2a0/0x1150 [ 1167.498456][T24850] ? __pfx___mutex_lock+0x10/0x10 [ 1167.498474][T24850] ? __pfx_vfs_write+0x10/0x10 [ 1167.498489][T24850] ? __fget_files+0x204/0x3c0 [ 1167.498505][T24850] ? rcu_is_watching+0x12/0xc0 [ 1167.498525][T24850] ? __fget_files+0x20e/0x3c0 [ 1167.498542][T24850] ksys_write+0x12a/0x250 [ 1167.498558][T24850] ? __pfx_ksys_write+0x10/0x10 [ 1167.498577][T24850] do_syscall_64+0xcd/0x490 [ 1167.498596][T24850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.498624][T24850] RIP: 0033:0x7f1f9678e9a9 [ 1167.498638][T24850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.498657][T24850] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.498680][T24850] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1167.498693][T24850] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000009 [ 1167.498703][T24850] RBP: 00007f1f96810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1167.498714][T24850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.498725][T24850] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1167.498742][T24850] [ 1167.498852][T24850] event trace: Could not enable event nfs4_test_open_stateid [ 1175.442160][T24992] FAULT_INJECTION: forcing a failure. [ 1175.442160][T24992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1175.500457][T24992] CPU: 1 UID: 0 PID: 24992 Comm: syz.2.4531 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1175.500510][T24992] Tainted: [U]=USER [ 1175.500521][T24992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1175.500541][T24992] Call Trace: [ 1175.500551][T24992] [ 1175.500563][T24992] dump_stack_lvl+0x16c/0x1f0 [ 1175.500597][T24992] should_fail_ex+0x512/0x640 [ 1175.500630][T24992] should_fail_alloc_page+0xe7/0x130 [ 1175.500668][T24992] prepare_alloc_pages+0x3c2/0x610 [ 1175.500709][T24992] ? rcu_is_watching+0x12/0xc0 [ 1175.500741][T24992] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1175.500773][T24992] ? lock_release+0x201/0x2f0 [ 1175.500813][T24992] ? rcu_is_watching+0x12/0xc0 [ 1175.500851][T24992] ? trace_sched_exit_tp+0xde/0x130 [ 1175.500887][T24992] ? __schedule+0x1181/0x5de0 [ 1175.500934][T24992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1175.500966][T24992] ? do_raw_spin_lock+0x12c/0x2b0 [ 1175.501013][T24992] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1175.501064][T24992] ? do_raw_spin_unlock+0x172/0x230 [ 1175.501092][T24992] ? _raw_spin_unlock+0x28/0x50 [ 1175.501135][T24992] ? __dquot_alloc_space+0x520/0xe20 [ 1175.501164][T24992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1175.501207][T24992] ? policy_nodemask+0xea/0x4e0 [ 1175.501241][T24992] alloc_pages_mpol+0x1fb/0x550 [ 1175.501283][T24992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1175.501317][T24992] ? __folio_batch_add_and_move+0x602/0xc90 [ 1175.501351][T24992] ? rcu_is_watching+0x12/0xc0 [ 1175.501381][T24992] ? lock_release+0x201/0x2f0 [ 1175.501421][T24992] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1175.501460][T24992] shmem_alloc_folio+0x135/0x160 [ 1175.501502][T24992] shmem_alloc_and_add_folio+0x499/0xc20 [ 1175.501542][T24992] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1175.501582][T24992] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1175.501614][T24992] shmem_get_folio_gfp+0x67f/0x1600 [ 1175.501648][T24992] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1175.501675][T24992] ? __pfx_timestamp_truncate+0x10/0x10 [ 1175.501705][T24992] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1175.501753][T24992] shmem_fault+0x1fe/0xa30 [ 1175.501781][T24992] ? current_time+0x11d/0x1a0 [ 1175.501810][T24992] ? __pfx_shmem_fault+0x10/0x10 [ 1175.501838][T24992] ? rcu_is_watching+0x12/0xc0 [ 1175.501868][T24992] ? lock_acquire+0x2cd/0x350 [ 1175.501909][T24992] ? __pfx___up_read+0x10/0x10 [ 1175.501946][T24992] ? fault_dirty_shared_page+0x573/0x6c0 [ 1175.501971][T24992] ? inode_to_bdi+0x9e/0x160 [ 1175.501992][T24992] __do_fault+0x10d/0x490 [ 1175.502010][T24992] ? __pfx_filemap_map_pages+0x10/0x10 [ 1175.502029][T24992] __handle_mm_fault+0x374c/0x5490 [ 1175.502057][T24992] ? __pfx___handle_mm_fault+0x10/0x10 [ 1175.502084][T24992] ? __pte_offset_map_lock+0x174/0x310 [ 1175.502112][T24992] ? follow_page_pte+0x3af/0x14c0 [ 1175.502137][T24992] handle_mm_fault+0x589/0xd10 [ 1175.502165][T24992] __get_user_pages+0x589/0x3b80 [ 1175.502191][T24992] ? __pfx___get_user_pages+0x10/0x10 [ 1175.502215][T24992] ? __pfx_down_read_killable+0x10/0x10 [ 1175.502235][T24992] ? __pfx_futex_wake_mark+0x10/0x10 [ 1175.502358][T24992] faultin_page_range+0x249/0x980 [ 1175.502386][T24992] madvise_do_behavior+0x268/0x3f0 [ 1175.502410][T24992] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1175.502438][T24992] do_madvise+0x161/0x230 [ 1175.502461][T24992] ? __pfx_do_madvise+0x10/0x10 [ 1175.502488][T24992] ? xfd_validate_state+0x61/0x180 [ 1175.502514][T24992] ? __pfx_do_writev+0x10/0x10 [ 1175.502542][T24992] __x64_sys_madvise+0xa9/0x110 [ 1175.502564][T24992] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1175.502590][T24992] do_syscall_64+0xcd/0x490 [ 1175.502609][T24992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.502630][T24992] RIP: 0033:0x7f618b78e9a9 [ 1175.502645][T24992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.502663][T24992] RSP: 002b:00007f618c6d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1175.502681][T24992] RAX: ffffffffffffffda RBX: 00007f618b9b5fa0 RCX: 00007f618b78e9a9 [ 1175.502693][T24992] RDX: 0000000000000017 RSI: 0000000000100000 RDI: 0000000000000000 [ 1175.502704][T24992] RBP: 00007f618b810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1175.502715][T24992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.502725][T24992] R13: 0000000000000000 R14: 00007f618b9b5fa0 R15: 00007ffdcf475a48 [ 1175.502741][T24992] [ 1179.908645][T25061] Process accounting resumed [ 1182.491322][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.498030][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.664568][T25146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1184.685612][T25173] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1184.693673][T25176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1186.906819][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1187.007578][T25238] ieee80211 phy241: Selected rate control algorithm 'minstrel_ht' [ 1187.589901][T25251] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4607'. [ 1189.142531][T25279] HSR: entered promiscuous mode [ 1189.605546][T25292] Process accounting resumed [ 1192.062628][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1192.072289][T25336] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1192.504292][T25339] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4636'. [ 1194.947474][T25357] base_sock_release(ffff888052fcce00) sk=ffff888092de3000 [ 1198.597806][T19509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1198.605593][T19509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1198.621412][T19509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1198.629731][T19509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1198.637954][T19509] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1199.219782][T25429] chnl_net:caif_netlink_parms(): no params data found [ 1199.411797][T25429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.419709][T25429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.429695][T25429] bridge_slave_0: entered allmulticast mode [ 1199.441299][T25429] bridge_slave_0: entered promiscuous mode [ 1199.503246][T25429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.549246][T25429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.556608][T25429] bridge_slave_1: entered allmulticast mode [ 1199.590315][T25429] bridge_slave_1: entered promiscuous mode [ 1199.756637][T25429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.813773][T25429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.974673][T25429] team0: Port device team_slave_0 added [ 1200.122878][T25429] team0: Port device team_slave_1 added [ 1200.177219][T25429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.211433][T25429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.238355][T25429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.454428][T25470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4674'. [ 1200.472604][T25429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.495766][T25429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.539270][T25429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.737240][T19509] Bluetooth: hci5: command tx timeout [ 1200.897166][T25429] hsr_slave_0: entered promiscuous mode [ 1200.924218][T25429] hsr_slave_1: entered promiscuous mode [ 1201.043955][T25479] FAULT_INJECTION: forcing a failure. [ 1201.043955][T25479] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.111285][T25479] CPU: 0 UID: 0 PID: 25479 Comm: syz.5.4676 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1201.111317][T25479] Tainted: [U]=USER [ 1201.111323][T25479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.111333][T25479] Call Trace: [ 1201.111339][T25479] [ 1201.111346][T25479] dump_stack_lvl+0x16c/0x1f0 [ 1201.111367][T25479] should_fail_ex+0x512/0x640 [ 1201.111386][T25479] should_failslab+0xc2/0x120 [ 1201.111406][T25479] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1201.111425][T25479] ? __alloc_skb+0x2b2/0x380 [ 1201.111442][T25479] __alloc_skb+0x2b2/0x380 [ 1201.111457][T25479] ? __pfx___alloc_skb+0x10/0x10 [ 1201.111474][T25479] ? __build_skb_around+0x278/0x3b0 [ 1201.111499][T25479] netlink_alloc_large_skb+0x69/0x130 [ 1201.111520][T25479] netlink_sendmsg+0x6a1/0xdd0 [ 1201.111542][T25479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.111566][T25479] ____sys_sendmsg+0xa95/0xc70 [ 1201.111588][T25479] ? copy_msghdr_from_user+0x10a/0x160 [ 1201.111605][T25479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.111628][T25479] ? kfree+0x24f/0x4d0 [ 1201.111651][T25479] ? __pfx__kstrtoull+0x10/0x10 [ 1201.111677][T25479] ___sys_sendmsg+0x134/0x1d0 [ 1201.111695][T25479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.111715][T25479] ? rcu_is_watching+0x12/0xc0 [ 1201.111738][T25479] ? __pfx___might_resched+0x10/0x10 [ 1201.111759][T25479] __sys_sendmmsg+0x200/0x420 [ 1201.111778][T25479] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1201.111795][T25479] ? lock_release+0x201/0x2f0 [ 1201.111821][T25479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1201.111843][T25479] ? fput+0x70/0xf0 [ 1201.111863][T25479] ? ksys_write+0x1ac/0x250 [ 1201.111879][T25479] ? __pfx_ksys_write+0x10/0x10 [ 1201.111896][T25479] __x64_sys_sendmmsg+0x9c/0x100 [ 1201.111913][T25479] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1201.111948][T25479] do_syscall_64+0xcd/0x490 [ 1201.111966][T25479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.111984][T25479] RIP: 0033:0x7f1f9678e9a9 [ 1201.111998][T25479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.112014][T25479] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1201.112031][T25479] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1201.112043][T25479] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1201.112053][T25479] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.112064][T25479] R10: 0000000000002ba2 R11: 0000000000000246 R12: 0000000000000001 [ 1201.112074][T25479] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1201.112090][T25479] [ 1201.998981][T25429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.132838][T25429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.513330][T25429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.809273][T19509] Bluetooth: hci5: command tx timeout [ 1203.103312][T25429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1203.182922][T25429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1203.271735][T25429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1203.331147][T25429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1203.652100][T25429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.722894][T25429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.758260][T25429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1203.769773][T25429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1203.799796][T21714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.806977][T21714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.843434][T21714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.850681][T21714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.645235][T25429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.802856][T25429] veth0_vlan: entered promiscuous mode [ 1204.850509][T25429] veth1_vlan: entered promiscuous mode [ 1204.889326][T19509] Bluetooth: hci5: command tx timeout [ 1205.022397][T25429] veth0_macvtap: entered promiscuous mode [ 1205.085100][T25429] veth1_macvtap: entered promiscuous mode [ 1205.160599][T25429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.186135][T25429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.209581][T25531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4688'. [ 1205.246633][T25429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.290828][T25429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.319329][T25429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.349267][T25429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.454295][T25429] ieee80211 phy242: Selected rate control algorithm 'minstrel_ht' [ 1205.719247][T21733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.759713][T25429] ieee80211 phy243: Selected rate control algorithm 'minstrel_ht' [ 1205.801664][T21733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.051723][T25541] program syz.3.4692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1206.080423][T21714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.098515][T21714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.376572][T25556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4696'. [ 1206.940079][T25576] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.4702' sets config #0 [ 1206.969597][T12384] Bluetooth: hci5: command tx timeout [ 1209.308048][T25624] vcan0: tx drop: invalid da for name 0x00000000000000fd [ 1210.212748][T25631] Process accounting paused [ 1213.824737][T25690] FAULT_INJECTION: forcing a failure. [ 1213.824737][T25690] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.839242][T25690] CPU: 0 UID: 0 PID: 25690 Comm: syz.5.4741 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1213.839288][T25690] Tainted: [U]=USER [ 1213.839297][T25690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1213.839311][T25690] Call Trace: [ 1213.839316][T25690] [ 1213.839323][T25690] dump_stack_lvl+0x16c/0x1f0 [ 1213.839346][T25690] should_fail_ex+0x512/0x640 [ 1213.839366][T25690] should_failslab+0xc2/0x120 [ 1213.839387][T25690] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1213.839405][T25690] ? getname_flags.part.0+0x4c/0x550 [ 1213.839429][T25690] getname_flags.part.0+0x4c/0x550 [ 1213.839453][T25690] getname_flags+0x93/0xf0 [ 1213.839479][T25690] do_sys_openat2+0xb8/0x1d0 [ 1213.839502][T25690] ? __pfx_do_sys_openat2+0x10/0x10 [ 1213.839525][T25690] ? __fget_files+0x20e/0x3c0 [ 1213.839542][T25690] __x64_sys_openat+0x174/0x210 [ 1213.839566][T25690] ? __pfx___x64_sys_openat+0x10/0x10 [ 1213.839589][T25690] ? ksys_write+0x1ac/0x250 [ 1213.839608][T25690] do_syscall_64+0xcd/0x490 [ 1213.839625][T25690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.839643][T25690] RIP: 0033:0x7f1f9678e9a9 [ 1213.839657][T25690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.839674][T25690] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1213.839691][T25690] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1213.839702][T25690] RDX: 0000000000181881 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1213.839713][T25690] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.839724][T25690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.839734][T25690] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1213.839749][T25690] [ 1214.345400][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4733'. [ 1214.423919][T25693] hsr_slave_0: left promiscuous mode [ 1214.432050][T25693] hsr_slave_1: left promiscuous mode [ 1216.712495][T25741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4746'. [ 1218.123076][T19509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1218.139529][T19509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1218.179457][T19509] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1218.220548][T19509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1218.228217][T19509] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1218.386919][T25747] chnl_net:caif_netlink_parms(): no params data found [ 1218.640156][T25755] FAULT_INJECTION: forcing a failure. [ 1218.640156][T25755] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.692249][T25755] CPU: 0 UID: 0 PID: 25755 Comm: syz.0.4750 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1218.692285][T25755] Tainted: [U]=USER [ 1218.692290][T25755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1218.692300][T25755] Call Trace: [ 1218.692307][T25755] [ 1218.692313][T25755] dump_stack_lvl+0x16c/0x1f0 [ 1218.692334][T25755] should_fail_ex+0x512/0x640 [ 1218.692353][T25755] should_failslab+0xc2/0x120 [ 1218.692374][T25755] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1218.692393][T25755] ? security_file_alloc+0x34/0x2b0 [ 1218.692420][T25755] security_file_alloc+0x34/0x2b0 [ 1218.692447][T25755] init_file+0x93/0x4c0 [ 1218.692470][T25755] alloc_empty_file+0x73/0x1e0 [ 1218.692492][T25755] alloc_file_pseudo+0x13a/0x230 [ 1218.692515][T25755] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1218.692537][T25755] ? _raw_spin_unlock+0x28/0x50 [ 1218.692562][T25755] ? alloc_fd+0x471/0x7d0 [ 1218.692589][T25755] __anon_inode_getfile+0xe8/0x280 [ 1218.692618][T25755] anon_inode_getfd+0x52/0xb0 [ 1218.692645][T25755] map_create+0xb68/0x1db0 [ 1218.692673][T25755] ? __pfx_map_create+0x10/0x10 [ 1218.692707][T25755] ? __might_fault+0x13b/0x190 [ 1218.692723][T25755] ? rcu_is_watching+0x12/0xc0 [ 1218.692741][T25755] ? __might_fault+0xe3/0x190 [ 1218.692757][T25755] ? lock_release+0x201/0x2f0 [ 1218.692783][T25755] __sys_bpf+0x4d8d/0x4ea0 [ 1218.692798][T25755] ? lock_release+0x201/0x2f0 [ 1218.692821][T25755] ? __pfx___sys_bpf+0x10/0x10 [ 1218.692836][T25755] ? ksys_write+0x190/0x250 [ 1218.692851][T25755] ? rcu_is_watching+0x12/0xc0 [ 1218.692868][T25755] ? lock_release+0x201/0x2f0 [ 1218.692892][T25755] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1218.692915][T25755] ? fput+0x70/0xf0 [ 1218.692934][T25755] ? ksys_write+0x1ac/0x250 [ 1218.692953][T25755] ? __pfx_ksys_write+0x10/0x10 [ 1218.692971][T25755] __x64_sys_bpf+0x78/0xc0 [ 1218.692987][T25755] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1218.693014][T25755] do_syscall_64+0xcd/0x490 [ 1218.693032][T25755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.693051][T25755] RIP: 0033:0x7fca65b8e9a9 [ 1218.693065][T25755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.693082][T25755] RSP: 002b:00007fca66929038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1218.693099][T25755] RAX: ffffffffffffffda RBX: 00007fca65db5fa0 RCX: 00007fca65b8e9a9 [ 1218.693111][T25755] RDX: 0000000000000092 RSI: 0000200000000040 RDI: 0000000000000000 [ 1218.693122][T25755] RBP: 00007fca66929090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.693132][T25755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.693142][T25755] R13: 0000000000000000 R14: 00007fca65db5fa0 R15: 00007ffc617afaa8 [ 1218.693158][T25755] [ 1219.538887][T25747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.547455][T25747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.579540][T25747] bridge_slave_0: entered allmulticast mode [ 1219.622181][T25747] bridge_slave_0: entered promiscuous mode [ 1219.692149][T25747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.739237][T25747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.769018][T25747] bridge_slave_1: entered allmulticast mode [ 1219.820593][T25747] bridge_slave_1: entered promiscuous mode [ 1220.035398][T25747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.084005][T25747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.177684][T25747] team0: Port device team_slave_0 added [ 1220.201615][T25747] team0: Port device team_slave_1 added [ 1220.249809][T19509] Bluetooth: hci2: command tx timeout [ 1220.285641][T25747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.295025][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.343769][T25747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.365118][T25747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.380444][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.439226][T25747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.615826][T25747] hsr_slave_0: entered promiscuous mode [ 1220.648914][T25747] hsr_slave_1: entered promiscuous mode [ 1220.910104][T25747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.251198][T25747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.639653][T25747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.740697][T25747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.905610][T25747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1221.945386][T25747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1221.998518][T25747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1222.008509][T25747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1222.330801][T19509] Bluetooth: hci2: command tx timeout [ 1222.412831][T25747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.459875][T25747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.486523][T21707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.493744][T21707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.535271][T21707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.542498][T21707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.253381][T25747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.391708][T25747] veth0_vlan: entered promiscuous mode [ 1223.402857][T25747] veth1_vlan: entered promiscuous mode [ 1223.445880][T25747] veth0_macvtap: entered promiscuous mode [ 1223.498030][T25747] veth1_macvtap: entered promiscuous mode [ 1223.673972][T25747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.704892][T25747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.716203][T25747] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.733786][T25747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.747360][T25747] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.759292][T25747] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.787688][T25821] FAULT_INJECTION: forcing a failure. [ 1223.787688][T25821] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.833675][T25821] CPU: 1 UID: 0 PID: 25821 Comm: syz.0.4766 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1223.833708][T25821] Tainted: [U]=USER [ 1223.833714][T25821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1223.833726][T25821] Call Trace: [ 1223.833732][T25821] [ 1223.833740][T25821] dump_stack_lvl+0x16c/0x1f0 [ 1223.833761][T25821] should_fail_ex+0x512/0x640 [ 1223.833781][T25821] should_failslab+0xc2/0x120 [ 1223.833803][T25821] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1223.833831][T25821] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 1223.833856][T25821] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1223.833881][T25821] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 1223.833898][T25821] hugetlb_reserve_pages+0x149/0xe10 [ 1223.833924][T25821] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 1223.833950][T25821] ? atime_needs_update+0x8b/0x710 [ 1223.833975][T25821] hugetlbfs_file_mmap+0x4a1/0x730 [ 1223.833998][T25821] __mmap_region+0x128b/0x25e0 [ 1223.834017][T25821] ? rcu_is_watching+0x12/0xc0 [ 1223.834036][T25821] ? __pfx___mmap_region+0x10/0x10 [ 1223.834052][T25821] ? is_bpf_text_address+0x8a/0x1a0 [ 1223.834076][T25821] ? rcu_is_watching+0x12/0xc0 [ 1223.834096][T25821] ? is_bpf_text_address+0x94/0x1a0 [ 1223.834120][T25821] ? kernel_text_address+0x8d/0x100 [ 1223.834135][T25821] ? __kernel_text_address+0xd/0x40 [ 1223.834151][T25821] ? unwind_get_return_address+0x59/0xa0 [ 1223.834178][T25821] ? arch_stack_walk+0xa6/0x100 [ 1223.834199][T25821] ? __pfx_stack_trace_save+0x10/0x10 [ 1223.834219][T25821] ? stack_depot_save_flags+0x28/0xa40 [ 1223.834246][T25821] ? trace_cap_capable+0x18d/0x200 [ 1223.834267][T25821] ? cap_capable+0xb3/0x250 [ 1223.834287][T25821] mmap_region+0x32b/0x3f0 [ 1223.834307][T25821] do_mmap+0xa3e/0x1210 [ 1223.834331][T25821] ? __pfx_do_mmap+0x10/0x10 [ 1223.834353][T25821] ? __pfx_down_write_killable+0x10/0x10 [ 1223.834376][T25821] vm_mmap_pgoff+0x281/0x450 [ 1223.834399][T25821] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1223.834419][T25821] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1223.834442][T25821] ? hugetlbfs_get_inode+0x31f/0x730 [ 1223.834466][T25821] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1223.834490][T25821] __x64_sys_mmap+0x125/0x190 [ 1223.834515][T25821] do_syscall_64+0xcd/0x490 [ 1223.834534][T25821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.834551][T25821] RIP: 0033:0x7fca65b8e9a9 [ 1223.834565][T25821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.834584][T25821] RSP: 002b:00007fca66929038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1223.834602][T25821] RAX: ffffffffffffffda RBX: 00007fca65db5fa0 RCX: 00007fca65b8e9a9 [ 1223.834614][T25821] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 1223.834627][T25821] RBP: 00007fca65c10d69 R08: 0000000000000602 R09: 0000300000000000 [ 1223.834640][T25821] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1223.834653][T25821] R13: 0000000000000000 R14: 00007fca65db5fa0 R15: 00007ffc617afaa8 [ 1223.834676][T25821] [ 1223.834687][T25821] HugeTLB: unable to allocate vma specific lock [ 1224.198490][T25747] ieee80211 phy244: Selected rate control algorithm 'minstrel_ht' [ 1224.361905][T21690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.364266][T25747] ieee80211 phy245: Selected rate control algorithm 'minstrel_ht' [ 1224.379542][T21690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.410407][T19509] Bluetooth: hci2: command tx timeout [ 1224.646822][T21733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.689523][T21733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.851397][T25835] FAULT_INJECTION: forcing a failure. [ 1224.851397][T25835] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.895668][T25835] CPU: 0 UID: 0 PID: 25835 Comm: syz.2.4771 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1224.895715][T25835] Tainted: [U]=USER [ 1224.895724][T25835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1224.895739][T25835] Call Trace: [ 1224.895748][T25835] [ 1224.895758][T25835] dump_stack_lvl+0x16c/0x1f0 [ 1224.895793][T25835] should_fail_ex+0x512/0x640 [ 1224.895820][T25835] ? copy_splice_read+0x1a8/0xba0 [ 1224.895855][T25835] should_failslab+0xc2/0x120 [ 1224.895884][T25835] __kmalloc_noprof+0xd2/0x510 [ 1224.895914][T25835] copy_splice_read+0x1a8/0xba0 [ 1224.895946][T25835] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1224.895989][T25835] ? __pfx_copy_splice_read+0x10/0x10 [ 1224.896028][T25835] ? look_up_lock_class+0x6b/0x150 [ 1224.896056][T25835] ? splice_direct_to_actor+0x342/0xa30 [ 1224.896092][T25835] ? rcu_is_watching+0x12/0xc0 [ 1224.896122][T25835] ? lock_release+0x201/0x2f0 [ 1224.896162][T25835] ? __pfx_copy_splice_read+0x10/0x10 [ 1224.896194][T25835] do_splice_read+0x282/0x370 [ 1224.896220][T25835] splice_direct_to_actor+0x2a1/0xa30 [ 1224.896255][T25835] ? __pfx_direct_splice_actor+0x10/0x10 [ 1224.896282][T25835] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1224.896310][T25835] do_splice_direct+0x174/0x240 [ 1224.896336][T25835] ? __pfx_do_splice_direct+0x10/0x10 [ 1224.896361][T25835] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1224.896387][T25835] ? bpf_lsm_file_permission+0x9/0x10 [ 1224.896409][T25835] ? security_file_permission+0x71/0x210 [ 1224.896436][T25835] ? rw_verify_area+0xcf/0x680 [ 1224.896461][T25835] do_sendfile+0xb06/0xe50 [ 1224.896489][T25835] ? __pfx_do_sendfile+0x10/0x10 [ 1224.896515][T25835] ? __fget_files+0x20e/0x3c0 [ 1224.896533][T25835] __x64_sys_sendfile64+0x1d8/0x220 [ 1224.896553][T25835] ? ksys_write+0x1ac/0x250 [ 1224.896569][T25835] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1224.896600][T25835] do_syscall_64+0xcd/0x490 [ 1224.896618][T25835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.896637][T25835] RIP: 0033:0x7f618b78e9a9 [ 1224.896651][T25835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.896669][T25835] RSP: 002b:00007f618c6d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1224.896686][T25835] RAX: ffffffffffffffda RBX: 00007f618b9b5fa0 RCX: 00007f618b78e9a9 [ 1224.896697][T25835] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1224.896708][T25835] RBP: 00007f618c6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.896718][T25835] R10: 0000000000000ef3 R11: 0000000000000246 R12: 0000000000000001 [ 1224.896729][T25835] R13: 0000000000000000 R14: 00007f618b9b5fa0 R15: 00007ffdcf475a48 [ 1224.896744][T25835] [ 1226.499285][T19509] Bluetooth: hci2: command tx timeout [ 1226.805365][T12384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1226.829804][T12384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1226.837230][T12384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1226.857477][T12384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1226.896046][T12384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1227.333224][T25864] FAULT_INJECTION: forcing a failure. [ 1227.333224][T25864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.366836][T25864] CPU: 0 UID: 0 PID: 25864 Comm: syz.3.4778 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1227.366885][T25864] Tainted: [U]=USER [ 1227.366895][T25864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1227.366912][T25864] Call Trace: [ 1227.366922][T25864] [ 1227.366933][T25864] dump_stack_lvl+0x16c/0x1f0 [ 1227.366964][T25864] should_fail_ex+0x512/0x640 [ 1227.366993][T25864] _copy_to_user+0x32/0xd0 [ 1227.367024][T25864] simple_read_from_buffer+0xcb/0x170 [ 1227.367066][T25864] proc_fail_nth_read+0x197/0x270 [ 1227.367104][T25864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1227.367138][T25864] ? security_file_permission+0x71/0x210 [ 1227.367176][T25864] ? rw_verify_area+0xcf/0x680 [ 1227.367207][T25864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1227.367236][T25864] vfs_read+0x1e1/0xc60 [ 1227.367261][T25864] ? __pfx___mutex_lock+0x10/0x10 [ 1227.367286][T25864] ? __pfx_vfs_read+0x10/0x10 [ 1227.367310][T25864] ? __fget_files+0x204/0x3c0 [ 1227.367331][T25864] ? rcu_is_watching+0x12/0xc0 [ 1227.367365][T25864] ? __fget_files+0x20e/0x3c0 [ 1227.367394][T25864] ksys_read+0x12a/0x250 [ 1227.367419][T25864] ? __pfx_ksys_read+0x10/0x10 [ 1227.367450][T25864] do_syscall_64+0xcd/0x490 [ 1227.367479][T25864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.367508][T25864] RIP: 0033:0x7f53cdf8d3bc [ 1227.367531][T25864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1227.367559][T25864] RSP: 002b:00007f53cee7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1227.367587][T25864] RAX: ffffffffffffffda RBX: 00007f53ce1b5fa0 RCX: 00007f53cdf8d3bc [ 1227.367605][T25864] RDX: 000000000000000f RSI: 00007f53cee7b0a0 RDI: 0000000000000003 [ 1227.367633][T25864] RBP: 00007f53cee7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.367651][T25864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.367668][T25864] R13: 0000000000000001 R14: 00007f53ce1b5fa0 R15: 00007ffff3733c68 [ 1227.367696][T25864] [ 1227.877294][T25854] chnl_net:caif_netlink_parms(): no params data found [ 1228.103361][T25854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.147515][T25854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.231915][T25854] bridge_slave_0: entered allmulticast mode [ 1228.286672][T25854] bridge_slave_0: entered promiscuous mode [ 1228.331038][T25854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.340286][T25854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.351932][T25854] bridge_slave_1: entered allmulticast mode [ 1228.378432][T25854] bridge_slave_1: entered promiscuous mode [ 1228.512565][T25854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.551993][T25854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.657849][T25854] team0: Port device team_slave_0 added [ 1228.691873][T25854] team0: Port device team_slave_1 added [ 1228.893296][T25854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.929833][T25854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.979412][T12384] Bluetooth: hci0: command tx timeout [ 1229.009516][T25854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.022735][T25854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.030155][T25854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.056908][T25854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.354945][T25854] hsr_slave_0: entered promiscuous mode [ 1229.432579][T25854] hsr_slave_1: entered promiscuous mode [ 1229.438807][T25854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1229.488879][T25854] Cannot create hsr debugfs directory [ 1229.807421][T25854] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.991751][T25854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.104769][T25854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.212520][T25854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.309192][T25854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.577285][T25854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1230.620471][T25854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1230.654939][T25854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1230.683349][T25854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1230.940724][T25854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.001169][T25854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.049539][T12384] Bluetooth: hci0: command tx timeout [ 1231.058573][T21707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.065720][T21707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.174092][T21712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.181232][T21712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.292004][ T30] audit: type=1800 audit(4294967820.868:36): pid=25906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4786" name="dbroot" dev="configfs" ino=107879 res=0 errno=0 [ 1231.297692][T25854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1231.321778][T25906] db_root: not a directory: /dev/audio1 [ 1231.417562][T25906] db_root: cannot open: Ô [ 1231.503797][T25906] db_root: cannot open: Ô [ 1231.564308][T25906] db_root: cannot open: Ô [ 1231.629767][T25906] db_root: cannot open: Ô [ 1231.640597][T25906] db_root: cannot open: Ô [ 1231.653913][T25906] db_root: cannot open: Ô [ 1231.668231][T25906] db_root: cannot open: Ô [ 1231.681629][T25906] db_root: cannot open: Ô [ 1231.737407][T25906] db_root: cannot open: Ô [ 1231.741849][T25854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.844189][T25906] db_root: cannot open: Ô [ 1231.928527][T25906] db_root: cannot open: Ô [ 1231.935164][T25854] veth0_vlan: entered promiscuous mode [ 1231.962915][T25854] veth1_vlan: entered promiscuous mode [ 1232.067868][T25906] db_root: cannot open: Ô [ 1232.075162][T25854] veth0_macvtap: entered promiscuous mode [ 1232.131415][T25854] veth1_macvtap: entered promiscuous mode [ 1232.217043][T25854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.271217][T25854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.292807][T25854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.339488][T25854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.354674][T25854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.373962][T25854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.735651][T25854] ieee80211 phy246: Selected rate control algorithm 'minstrel_ht' [ 1232.970415][T21731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.978363][T21731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.990391][T25854] ieee80211 phy247: Selected rate control algorithm 'minstrel_ht' [ 1233.129752][T12384] Bluetooth: hci0: command tx timeout [ 1233.342512][T21730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.389273][T21730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.209665][T12384] Bluetooth: hci0: command tx timeout [ 1236.348485][T25937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4790'. [ 1236.611593][T25939] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1237.795968][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4800'. [ 1237.851739][T25969] ieee80211 phy248: Selected rate control algorithm 'minstrel_ht' [ 1238.640371][T25982] FAULT_INJECTION: forcing a failure. [ 1238.640371][T25982] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.699282][T25982] CPU: 1 UID: 0 PID: 25982 Comm: syz.5.4804 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1238.699335][T25982] Tainted: [U]=USER [ 1238.699345][T25982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1238.699364][T25982] Call Trace: [ 1238.699374][T25982] [ 1238.699386][T25982] dump_stack_lvl+0x16c/0x1f0 [ 1238.699419][T25982] should_fail_ex+0x512/0x640 [ 1238.699450][T25982] ? security_inode_init_security+0x13f/0x390 [ 1238.699483][T25982] should_failslab+0xc2/0x120 [ 1238.699563][T25982] __kmalloc_noprof+0xd2/0x510 [ 1238.699597][T25982] security_inode_init_security+0x13f/0x390 [ 1238.699631][T25982] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1238.699670][T25982] ? __pfx_security_inode_init_security+0x10/0x10 [ 1238.699704][T25982] ? shmem_get_inode+0x73a/0xfb0 [ 1238.699746][T25982] shmem_symlink+0x135/0x9f0 [ 1238.699776][T25982] ? __pfx_shmem_symlink+0x10/0x10 [ 1238.699804][T25982] ? bpf_lsm_inode_permission+0x9/0x10 [ 1238.699839][T25982] ? security_inode_permission+0xbf/0x260 [ 1238.699882][T25982] ? inode_permission+0x156/0x630 [ 1238.699921][T25982] vfs_symlink+0x403/0x680 [ 1238.699963][T25982] do_symlinkat+0x261/0x310 [ 1238.699994][T25982] ? __pfx_do_symlinkat+0x10/0x10 [ 1238.700025][T25982] ? getname_flags.part.0+0x1c5/0x550 [ 1238.700063][T25982] __x64_sys_symlink+0x75/0x90 [ 1238.700087][T25982] do_syscall_64+0xcd/0x490 [ 1238.700110][T25982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.700139][T25982] RIP: 0033:0x7f1f9678e9a9 [ 1238.700163][T25982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.700191][T25982] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1238.700220][T25982] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1238.700240][T25982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1238.700260][T25982] RBP: 00007f1f96810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1238.700278][T25982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.700296][T25982] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1238.700324][T25982] [ 1239.253621][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1239.315729][T25985] ieee80211 phy249: Selected rate control algorithm 'minstrel_ht' [ 1240.301411][T26001] Process accounting resumed [ 1240.393085][T26006] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4814'. [ 1242.470037][T26051] FAULT_INJECTION: forcing a failure. [ 1242.470037][T26051] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.569613][T26051] CPU: 1 UID: 0 PID: 26051 Comm: syz.3.4821 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1242.569660][T26051] Tainted: [U]=USER [ 1242.569670][T26051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1242.569687][T26051] Call Trace: [ 1242.569697][T26051] [ 1242.569708][T26051] dump_stack_lvl+0x16c/0x1f0 [ 1242.569740][T26051] should_fail_ex+0x512/0x640 [ 1242.569772][T26051] should_failslab+0xc2/0x120 [ 1242.569806][T26051] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1242.569849][T26051] ? lock_release+0x201/0x2f0 [ 1242.569886][T26051] ? landlock_init_hierarchy_log+0xa7/0x810 [ 1242.569933][T26051] landlock_init_hierarchy_log+0xa7/0x810 [ 1242.569978][T26051] landlock_merge_ruleset+0x6e1/0x870 [ 1242.570014][T26051] ? prepare_creds+0x583/0x7d0 [ 1242.570056][T26051] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 1242.570091][T26051] do_syscall_64+0xcd/0x490 [ 1242.570120][T26051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.570149][T26051] RIP: 0033:0x7f53cdf8e9a9 [ 1242.570170][T26051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1242.570198][T26051] RSP: 002b:00007f53cee7b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1242.570226][T26051] RAX: ffffffffffffffda RBX: 00007f53ce1b5fa0 RCX: 00007f53cdf8e9a9 [ 1242.570245][T26051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1242.570262][T26051] RBP: 00007f53cee7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.570281][T26051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.570298][T26051] R13: 0000000000000000 R14: 00007f53ce1b5fa0 R15: 00007ffff3733c68 [ 1242.570325][T26051] [ 1243.114098][T26057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4822'. [ 1243.951540][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.957902][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.600463][T26088] FAULT_INJECTION: forcing a failure. [ 1245.600463][T26088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.704207][T26088] CPU: 1 UID: 0 PID: 26088 Comm: syz.5.4828 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1245.704253][T26088] Tainted: [U]=USER [ 1245.704259][T26088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1245.704270][T26088] Call Trace: [ 1245.704276][T26088] [ 1245.704283][T26088] dump_stack_lvl+0x16c/0x1f0 [ 1245.704311][T26088] should_fail_ex+0x512/0x640 [ 1245.704331][T26088] _copy_from_iter+0x29f/0x16f0 [ 1245.704351][T26088] ? __alloc_skb+0x200/0x380 [ 1245.704368][T26088] ? __pfx__copy_from_iter+0x10/0x10 [ 1245.704387][T26088] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1245.704411][T26088] netlink_sendmsg+0x829/0xdd0 [ 1245.704432][T26088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1245.704456][T26088] ____sys_sendmsg+0xa95/0xc70 [ 1245.704478][T26088] ? copy_msghdr_from_user+0x10a/0x160 [ 1245.704496][T26088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1245.704517][T26088] ? __pfx_kstrtouint+0x10/0x10 [ 1245.704543][T26088] ? kstrtouint_from_user+0x13c/0x1d0 [ 1245.704571][T26088] ___sys_sendmsg+0x134/0x1d0 [ 1245.704589][T26088] ? __pfx____sys_sendmsg+0x10/0x10 [ 1245.704610][T26088] ? rcu_is_watching+0x12/0xc0 [ 1245.704635][T26088] __sys_sendmsg+0x16d/0x220 [ 1245.704652][T26088] ? __pfx___sys_sendmsg+0x10/0x10 [ 1245.704675][T26088] do_syscall_64+0xcd/0x490 [ 1245.704693][T26088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.704710][T26088] RIP: 0033:0x7f1f9678e9a9 [ 1245.704723][T26088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.704741][T26088] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.704758][T26088] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1245.704770][T26088] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1245.704781][T26088] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.704791][T26088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.704802][T26088] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1245.704817][T26088] [ 1246.927661][T26108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4835'. [ 1248.354111][T26149] FAULT_INJECTION: forcing a failure. [ 1248.354111][T26149] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.379091][T26149] CPU: 0 UID: 0 PID: 26149 Comm: syz.3.4845 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1248.379141][T26149] Tainted: [U]=USER [ 1248.379151][T26149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1248.379166][T26149] Call Trace: [ 1248.379175][T26149] [ 1248.379185][T26149] dump_stack_lvl+0x16c/0x1f0 [ 1248.379216][T26149] should_fail_ex+0x512/0x640 [ 1248.379245][T26149] should_failslab+0xc2/0x120 [ 1248.379277][T26149] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1248.379305][T26149] ? __pfx_tcp_current_mss+0x10/0x10 [ 1248.379344][T26149] ? __alloc_skb+0x2b2/0x380 [ 1248.379372][T26149] __alloc_skb+0x2b2/0x380 [ 1248.379396][T26149] ? __pfx___alloc_skb+0x10/0x10 [ 1248.379419][T26149] ? bpf_ksym_find+0x60/0x1c0 [ 1248.379447][T26149] ? aa_label_sk_perm+0x19b/0x5a0 [ 1248.379479][T26149] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1248.379513][T26149] tcp_stream_alloc_skb+0x34/0x570 [ 1248.379553][T26149] tcp_sendmsg_locked+0x12d7/0x4220 [ 1248.379596][T26149] ? _parse_integer_limit+0x17f/0x1d0 [ 1248.379638][T26149] ? rcu_is_watching+0x12/0xc0 [ 1248.379668][T26149] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1248.379707][T26149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1248.379750][T26149] ? do_raw_spin_lock+0x12c/0x2b0 [ 1248.379792][T26149] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1248.379835][T26149] ? rcu_is_watching+0x12/0xc0 [ 1248.379861][T26149] ? tcp_sendmsg+0x20/0x50 [ 1248.379897][T26149] ? rcu_is_watching+0x12/0xc0 [ 1248.379923][T26149] ? tcp_sendmsg+0x20/0x50 [ 1248.379958][T26149] tcp_sendmsg+0x2e/0x50 [ 1248.379991][T26149] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1248.380025][T26149] inet_sendmsg+0xb9/0x140 [ 1248.380064][T26149] sock_write_iter+0x4aa/0x5b0 [ 1248.380098][T26149] ? __pfx_sock_write_iter+0x10/0x10 [ 1248.380128][T26149] ? lock_release+0x201/0x2f0 [ 1248.380166][T26149] ? bpf_lsm_file_permission+0x9/0x10 [ 1248.380197][T26149] ? security_file_permission+0x71/0x210 [ 1248.380235][T26149] ? rw_verify_area+0xcf/0x680 [ 1248.380272][T26149] vfs_write+0x6c4/0x1150 [ 1248.380296][T26149] ? __pfx_sock_write_iter+0x10/0x10 [ 1248.380337][T26149] ? __pfx_vfs_write+0x10/0x10 [ 1248.380362][T26149] ? lock_release+0x201/0x2f0 [ 1248.380402][T26149] ksys_write+0x1f8/0x250 [ 1248.380426][T26149] ? __pfx_ksys_write+0x10/0x10 [ 1248.380454][T26149] do_syscall_64+0xcd/0x490 [ 1248.380479][T26149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.380506][T26149] RIP: 0033:0x7f53cdf8e9a9 [ 1248.380526][T26149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.380554][T26149] RSP: 002b:00007f53cee7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1248.380581][T26149] RAX: ffffffffffffffda RBX: 00007f53ce1b5fa0 RCX: 00007f53cdf8e9a9 [ 1248.380600][T26149] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1248.380617][T26149] RBP: 00007f53cee7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.380634][T26149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.380650][T26149] R13: 0000000000000000 R14: 00007f53ce1b5fa0 R15: 00007ffff3733c68 [ 1248.380676][T26149] [ 1249.283263][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1249.293993][T26164] hsr_slave_0: left promiscuous mode [ 1249.304489][T26164] hsr_slave_1: left promiscuous mode [ 1250.523593][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4854'. [ 1250.686840][T26189] ieee80211 phy250: Selected rate control algorithm 'minstrel_ht' [ 1252.511771][T26219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4862'. [ 1253.099886][T26237] FAULT_INJECTION: forcing a failure. [ 1253.099886][T26237] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.154211][T26237] CPU: 0 UID: 0 PID: 26237 Comm: syz.5.4866 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1253.154269][T26237] Tainted: [U]=USER [ 1253.154280][T26237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1253.154298][T26237] Call Trace: [ 1253.154308][T26237] [ 1253.154318][T26237] dump_stack_lvl+0x16c/0x1f0 [ 1253.154353][T26237] should_fail_ex+0x512/0x640 [ 1253.154385][T26237] should_failslab+0xc2/0x120 [ 1253.154419][T26237] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1253.154445][T26237] ? __alloc_skb+0x2b2/0x380 [ 1253.154468][T26237] __alloc_skb+0x2b2/0x380 [ 1253.154488][T26237] ? __pfx___alloc_skb+0x10/0x10 [ 1253.154507][T26237] ? __schedule+0x1181/0x5de0 [ 1253.154538][T26237] ? debug_object_activate+0x2ec/0x4c0 [ 1253.154574][T26237] alloc_skb_with_frags+0xe0/0x860 [ 1253.154600][T26237] ? rcu_is_watching+0x12/0xc0 [ 1253.154623][T26237] ? __might_fault+0xe3/0x190 [ 1253.154647][T26237] sock_alloc_send_pskb+0x7fb/0x990 [ 1253.154681][T26237] ? _copy_from_iter+0x15d/0x16f0 [ 1253.154705][T26237] ? rcu_is_watching+0x12/0xc0 [ 1253.154729][T26237] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1253.154763][T26237] ? preempt_schedule_common+0x44/0xc0 [ 1253.154797][T26237] ? j1939_sk_sendmsg+0x5f6/0x13d0 [ 1253.154822][T26237] ? rcu_is_watching+0x12/0xc0 [ 1253.154845][T26237] ? rcu_is_watching+0x12/0xc0 [ 1253.154869][T26237] j1939_sk_sendmsg+0x6bc/0x13d0 [ 1253.154899][T26237] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1253.154936][T26237] __sys_sendto+0x4a3/0x520 [ 1253.154969][T26237] ? __pfx___sys_sendto+0x10/0x10 [ 1253.155012][T26237] ? ksys_write+0x1ac/0x250 [ 1253.155033][T26237] ? __pfx_ksys_write+0x10/0x10 [ 1253.155056][T26237] __x64_sys_sendto+0xe0/0x1c0 [ 1253.155088][T26237] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1253.155122][T26237] do_syscall_64+0xcd/0x490 [ 1253.155146][T26237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.155169][T26237] RIP: 0033:0x7f1f9678e9a9 [ 1253.155186][T26237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.155209][T26237] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1253.155243][T26237] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1253.155259][T26237] RDX: 0000000006fffff9 RSI: 0000000000000000 RDI: 0000000000000003 [ 1253.155272][T26237] RBP: 00007f1f97522090 R08: 0000200000000440 R09: 0000000000000036 [ 1253.155287][T26237] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 1253.155301][T26237] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1253.155322][T26237] [ 1253.445407][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1253.455900][T26239] ieee80211 phy251: Selected rate control algorithm 'minstrel_ht' [ 1254.348985][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880263f3c00: rx timeout, send abort [ 1254.357666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880263f3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1255.882018][T26260] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4873'. [ 1257.388239][T26266] FAULT_INJECTION: forcing a failure. [ 1257.388239][T26266] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.484998][T26266] CPU: 1 UID: 0 PID: 26266 Comm: syz.5.4884 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1257.485062][T26266] Tainted: [U]=USER [ 1257.485072][T26266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1257.485089][T26266] Call Trace: [ 1257.485098][T26266] [ 1257.485109][T26266] dump_stack_lvl+0x16c/0x1f0 [ 1257.485141][T26266] should_fail_ex+0x512/0x640 [ 1257.485172][T26266] should_failslab+0xc2/0x120 [ 1257.485203][T26266] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1257.485233][T26266] ? copy_net_ns+0xe8/0x5f0 [ 1257.485268][T26266] copy_net_ns+0xe8/0x5f0 [ 1257.485301][T26266] ? copy_cgroup_ns+0x71/0x700 [ 1257.485333][T26266] create_new_namespaces+0x3ea/0xa90 [ 1257.485369][T26266] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1257.485403][T26266] ksys_unshare+0x45b/0xa40 [ 1257.485449][T26266] ? __pfx_ksys_unshare+0x10/0x10 [ 1257.485487][T26266] ? ksys_write+0x1ac/0x250 [ 1257.485519][T26266] __x64_sys_unshare+0x31/0x40 [ 1257.485556][T26266] do_syscall_64+0xcd/0x490 [ 1257.485586][T26266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.485615][T26266] RIP: 0033:0x7f1f9678e9a9 [ 1257.485636][T26266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.485665][T26266] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1257.485694][T26266] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1257.485713][T26266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1257.485730][T26266] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.485747][T26266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.485764][T26266] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1257.485790][T26266] [ 1258.620222][T26276] random: crng reseeded on system resumption [ 1258.622642][T26276] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1258.622666][T26276] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1258.622687][T26276] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1258.622701][T26276] PM: hibernation: Basic memory bitmaps created [ 1258.889934][T26269] PM: hibernation: Basic memory bitmaps freed [ 1262.302727][T26325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4891'. [ 1264.936307][T26373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4907'. [ 1266.559182][T26404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4918'. [ 1266.671869][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806900ac00: rx timeout, send abort [ 1266.680399][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806900ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1269.951771][T26455] random: crng reseeded on system resumption [ 1269.975843][T26455] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1270.027314][T26455] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1270.036257][T26455] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1270.049203][T26455] PM: hibernation: Basic memory bitmaps created [ 1270.117380][T26458] [U] [ 1270.120207][T26458] [U] [ 1270.122905][T26458] [U] [ 1270.125689][T26458] [U] [ 1270.135444][T26458] [U] [ 1270.138173][T26458] [U] [ 1270.140924][T26458] [U] [ 1270.143674][T26458] [U] [ 1270.149354][T26458] [U] [ 1270.152072][T26458] [U] [ 1270.154767][T26458] [U] [ 1270.157468][T26458] [U] [ 1270.223861][T26458] [U] [ 1270.226599][T26458] [U] [ 1270.229321][T26458] [U] [ 1270.232073][T26458] [U] [ 1270.258558][T26444] PM: hibernation: Basic memory bitmaps freed [ 1270.301846][T26458] [U] [ 1270.304720][T26458] [U] [ 1270.307415][T26458] [U] [ 1270.310118][T26458] [U] [ 1270.443707][T26458] [U] [ 1270.446454][T26458] [U] [ 1270.449191][T26458] [U] [ 1270.451885][T26458] [U] [ 1270.542733][T26458] [U] [ 1270.545521][T26458] [U] [ 1270.548276][T26458] [U] [ 1270.551025][T26458] [U] [ 1270.602992][T26458] [U] [ 1270.605777][T26458] [U] [ 1270.608523][T26458] [U] [ 1270.611264][T26458] [U] [ 1270.705046][T26458] [U] [ 1270.708251][T26458] [U] [ 1270.711010][T26458] [U] [ 1270.713750][T26458] [U] [ 1270.733946][T26458] [U] [ 1270.736696][T26458] [U] [ 1270.739393][T26458] [U] [ 1270.742104][T26458] [U] [ 1270.769220][T26458] [U] [ 1270.771958][T26458] [U] [ 1270.774653][T26458] [U] [ 1270.777519][T26458] [U] [ 1270.852304][T26458] [U] [ 1270.889534][T26468] Process accounting paused [ 1271.486445][T26478] vcan0: tx drop: invalid da for name 0x0000000000003f00 [ 1271.951283][T26487] ima: policy update failed [ 1271.998505][ T30] audit: type=1802 audit(4294967861.568:37): pid=26487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4943" res=0 errno=0 [ 1272.673636][T26500] random: crng reseeded on system resumption [ 1272.726595][T26500] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1272.739195][T26500] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1272.841186][T26500] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1272.853758][T26500] PM: hibernation: Basic memory bitmaps created [ 1272.937562][T26496] PM: hibernation: Basic memory bitmaps freed [ 1284.463888][T26627] FAULT_INJECTION: forcing a failure. [ 1284.463888][T26627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1284.533109][T26627] CPU: 1 UID: 0 PID: 26627 Comm: syz.2.4984 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1284.533142][T26627] Tainted: [U]=USER [ 1284.533148][T26627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1284.533158][T26627] Call Trace: [ 1284.533164][T26627] [ 1284.533170][T26627] dump_stack_lvl+0x16c/0x1f0 [ 1284.533194][T26627] should_fail_ex+0x512/0x640 [ 1284.533212][T26627] should_fail_alloc_page+0xe7/0x130 [ 1284.533244][T26627] prepare_alloc_pages+0x3c2/0x610 [ 1284.533269][T26627] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1284.533288][T26627] ? copy_splice_read+0x1a8/0xba0 [ 1284.533312][T26627] ? stack_trace_save+0x8e/0xc0 [ 1284.533332][T26627] ? __pfx_stack_trace_save+0x10/0x10 [ 1284.533352][T26627] ? stack_depot_save_flags+0x28/0xa40 [ 1284.533371][T26627] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1284.533389][T26627] ? kasan_save_stack+0x33/0x60 [ 1284.533406][T26627] ? __kasan_kmalloc+0xaa/0xb0 [ 1284.533421][T26627] ? copy_splice_read+0x1a8/0xba0 [ 1284.533445][T26627] ? do_splice_read+0x282/0x370 [ 1284.533469][T26627] ? splice_direct_to_actor+0x2a1/0xa30 [ 1284.533494][T26627] ? do_splice_direct+0x174/0x240 [ 1284.533518][T26627] ? do_sendfile+0xb06/0xe50 [ 1284.533544][T26627] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1284.533563][T26627] ? do_syscall_64+0xcd/0x490 [ 1284.533586][T26627] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1284.533607][T26627] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1284.533627][T26627] ? trace_kmalloc+0x2b/0xd0 [ 1284.533647][T26627] ? __kmalloc_noprof+0x242/0x510 [ 1284.533666][T26627] copy_splice_read+0x1e1/0xba0 [ 1284.533693][T26627] ? __pfx_copy_splice_read+0x10/0x10 [ 1284.533718][T26627] ? look_up_lock_class+0x6b/0x150 [ 1284.533736][T26627] ? splice_direct_to_actor+0x342/0xa30 [ 1284.533761][T26627] ? rcu_is_watching+0x12/0xc0 [ 1284.533780][T26627] ? lock_release+0x201/0x2f0 [ 1284.533803][T26627] ? __pfx_copy_splice_read+0x10/0x10 [ 1284.533828][T26627] do_splice_read+0x282/0x370 [ 1284.533853][T26627] splice_direct_to_actor+0x2a1/0xa30 [ 1284.533879][T26627] ? __pfx_direct_splice_actor+0x10/0x10 [ 1284.533907][T26627] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1284.533936][T26627] do_splice_direct+0x174/0x240 [ 1284.533961][T26627] ? __pfx_do_splice_direct+0x10/0x10 [ 1284.533986][T26627] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1284.534012][T26627] ? bpf_lsm_file_permission+0x9/0x10 [ 1284.534035][T26627] ? security_file_permission+0x71/0x210 [ 1284.534068][T26627] ? rw_verify_area+0xcf/0x680 [ 1284.534094][T26627] do_sendfile+0xb06/0xe50 [ 1284.534123][T26627] ? __pfx_do_sendfile+0x10/0x10 [ 1284.534155][T26627] ? __fget_files+0x20e/0x3c0 [ 1284.534172][T26627] __x64_sys_sendfile64+0x1d8/0x220 [ 1284.534192][T26627] ? ksys_write+0x1ac/0x250 [ 1284.534208][T26627] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1284.534231][T26627] do_syscall_64+0xcd/0x490 [ 1284.534248][T26627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.534267][T26627] RIP: 0033:0x7f7d3f98e9a9 [ 1284.534281][T26627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.534298][T26627] RSP: 002b:00007f7d40738038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1284.534316][T26627] RAX: ffffffffffffffda RBX: 00007f7d3fbb5fa0 RCX: 00007f7d3f98e9a9 [ 1284.534327][T26627] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1284.534338][T26627] RBP: 00007f7d40738090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.534348][T26627] R10: 0000000000000ef3 R11: 0000000000000246 R12: 0000000000000002 [ 1284.534358][T26627] R13: 0000000000000000 R14: 00007f7d3fbb5fa0 R15: 00007ffd6d6f6918 [ 1284.534374][T26627] [ 1287.121545][T12384] Bluetooth: hci5: unexpected subevent 0x03 length: 253 > 9 [ 1287.791965][T26667] FAULT_INJECTION: forcing a failure. [ 1287.791965][T26667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.829392][T26667] CPU: 1 UID: 0 PID: 26667 Comm: syz.0.4993 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1287.829441][T26667] Tainted: [U]=USER [ 1287.829451][T26667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1287.829469][T26667] Call Trace: [ 1287.829478][T26667] [ 1287.829488][T26667] dump_stack_lvl+0x16c/0x1f0 [ 1287.829519][T26667] should_fail_ex+0x512/0x640 [ 1287.829549][T26667] _copy_from_user+0x2e/0xd0 [ 1287.829579][T26667] copy_msghdr_from_user+0x98/0x160 [ 1287.829608][T26667] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1287.829636][T26667] ? __pfx_kstrtouint+0x10/0x10 [ 1287.829677][T26667] ? kstrtouint_from_user+0x13c/0x1d0 [ 1287.829718][T26667] ___sys_sendmsg+0xfe/0x1d0 [ 1287.829745][T26667] ? __pfx____sys_sendmsg+0x10/0x10 [ 1287.829780][T26667] ? rcu_is_watching+0x12/0xc0 [ 1287.829821][T26667] __sys_sendmsg+0x16d/0x220 [ 1287.829849][T26667] ? __pfx___sys_sendmsg+0x10/0x10 [ 1287.829887][T26667] do_syscall_64+0xcd/0x490 [ 1287.829916][T26667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.829944][T26667] RIP: 0033:0x7fca65b8e9a9 [ 1287.829964][T26667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.829992][T26667] RSP: 002b:00007fca66929038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.830021][T26667] RAX: ffffffffffffffda RBX: 00007fca65db5fa0 RCX: 00007fca65b8e9a9 [ 1287.830041][T26667] RDX: 000000000400c810 RSI: 0000200000001440 RDI: 0000000000000003 [ 1287.830059][T26667] RBP: 00007fca66929090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.830085][T26667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.830101][T26667] R13: 0000000000000000 R14: 00007fca65db5fa0 R15: 00007ffc617afaa8 [ 1287.830127][T26667] [ 1289.114036][T26688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1289.589514][T26695] FAULT_INJECTION: forcing a failure. [ 1289.589514][T26695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1289.699885][T26695] CPU: 0 UID: 5 PID: 26695 Comm: syz.3.5002 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1289.699935][T26695] Tainted: [U]=USER [ 1289.699947][T26695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1289.699965][T26695] Call Trace: [ 1289.699975][T26695] [ 1289.699986][T26695] dump_stack_lvl+0x16c/0x1f0 [ 1289.700020][T26695] should_fail_ex+0x512/0x640 [ 1289.700049][T26695] ? rcu_is_watching+0x12/0xc0 [ 1289.700071][T26695] get_futex_key+0x1d0/0x1540 [ 1289.700092][T26695] ? __pfx_get_futex_key+0x10/0x10 [ 1289.700112][T26695] ? kfree+0x24f/0x4d0 [ 1289.700138][T26695] ? do_writev+0x132/0x340 [ 1289.700163][T26695] ? rcu_is_watching+0x12/0xc0 [ 1289.700181][T26695] ? lock_release+0x201/0x2f0 [ 1289.700206][T26695] futex_wake+0xe7/0x4e0 [ 1289.700231][T26695] ? __pfx_futex_wake+0x10/0x10 [ 1289.700256][T26695] ? __pfx_vfs_writev+0x10/0x10 [ 1289.700282][T26695] ? do_writev+0x218/0x340 [ 1289.700307][T26695] ? rcu_is_watching+0x12/0xc0 [ 1289.700325][T26695] ? lock_release+0x201/0x2f0 [ 1289.700350][T26695] do_futex+0x1e3/0x350 [ 1289.700370][T26695] ? __pfx_do_futex+0x10/0x10 [ 1289.700390][T26695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1289.700412][T26695] __x64_sys_futex+0x1e0/0x4c0 [ 1289.700434][T26695] ? fput+0x70/0xf0 [ 1289.700453][T26695] ? __pfx___x64_sys_futex+0x10/0x10 [ 1289.700475][T26695] ? __pfx_do_writev+0x10/0x10 [ 1289.700504][T26695] do_syscall_64+0xcd/0x490 [ 1289.700522][T26695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.700540][T26695] RIP: 0033:0x7f53cdf8e9a9 [ 1289.700555][T26695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.700573][T26695] RSP: 002b:00007f53cee7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1289.700591][T26695] RAX: ffffffffffffffda RBX: 00007f53ce1b5fa8 RCX: 00007f53cdf8e9a9 [ 1289.700603][T26695] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f53ce1b5fac [ 1289.700615][T26695] RBP: 00007f53ce1b5fa0 R08: 00007f53cee7c000 R09: 0000000000000000 [ 1289.700626][T26695] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f53ce1b5fac [ 1289.700637][T26695] R13: 0000000000000000 R14: 00007ffff3733b80 R15: 00007ffff3733c68 [ 1289.700652][T26695] [ 1291.025296][T26706] caif:caif_disconnect_client(): nothing to disconnect [ 1291.067457][T26706] caif:caif_disconnect_client(): nothing to disconnect [ 1292.301146][T26732] futex_wake_op: syz.0.5010 tries to shift op by -9; fix this program [ 1292.591864][ T30] audit: type=1326 audit(4294967882.168:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26737 comm="syz.2.5011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d3f98e9a9 code=0x0 [ 1294.737538][T26764] FAULT_INJECTION: forcing a failure. [ 1294.737538][T26764] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1294.819209][T26764] CPU: 1 UID: 0 PID: 26764 Comm: syz.5.5018 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1294.819267][T26764] Tainted: [U]=USER [ 1294.819278][T26764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1294.819298][T26764] Call Trace: [ 1294.819310][T26764] [ 1294.819323][T26764] dump_stack_lvl+0x16c/0x1f0 [ 1294.819356][T26764] should_fail_ex+0x512/0x640 [ 1294.819388][T26764] get_futex_key+0x1d0/0x1540 [ 1294.819426][T26764] ? __pfx_get_futex_key+0x10/0x10 [ 1294.819462][T26764] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1294.819512][T26764] ? kmem_cache_free+0x2d1/0x4d0 [ 1294.819544][T26764] futex_wake+0xe7/0x4e0 [ 1294.819587][T26764] ? fcntl_setlk+0x642/0xe20 [ 1294.819627][T26764] ? __pfx_futex_wake+0x10/0x10 [ 1294.819670][T26764] ? __pfx_fcntl_setlk+0x10/0x10 [ 1294.819722][T26764] ? __might_fault+0xe3/0x190 [ 1294.819752][T26764] ? __might_fault+0x13b/0x190 [ 1294.819781][T26764] ? rcu_is_watching+0x12/0xc0 [ 1294.819817][T26764] do_futex+0x1e3/0x350 [ 1294.819855][T26764] ? __pfx_do_futex+0x10/0x10 [ 1294.819893][T26764] ? do_fcntl+0x1eb/0x15a0 [ 1294.819931][T26764] __x64_sys_futex+0x1e0/0x4c0 [ 1294.819969][T26764] ? __pfx___x64_sys_futex+0x10/0x10 [ 1294.820007][T26764] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1294.820042][T26764] ? fput+0x70/0xf0 [ 1294.820080][T26764] do_syscall_64+0xcd/0x490 [ 1294.820112][T26764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.820145][T26764] RIP: 0033:0x7f1f9678e9a9 [ 1294.820169][T26764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.820199][T26764] RSP: 002b:00007f1f975220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1294.820230][T26764] RAX: ffffffffffffffda RBX: 00007f1f969b5fa8 RCX: 00007f1f9678e9a9 [ 1294.820251][T26764] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f969b5fac [ 1294.820270][T26764] RBP: 00007f1f969b5fa0 R08: 00007f1f97523000 R09: 0000000000000000 [ 1294.820290][T26764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f969b5fac [ 1294.820309][T26764] R13: 0000000000000000 R14: 00007ffd545c7260 R15: 00007ffd545c7348 [ 1294.820338][T26764] [ 1295.199847][ T12] bridge_slave_1: left allmulticast mode [ 1295.249020][ T12] bridge_slave_1: left promiscuous mode [ 1295.294272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.353357][ T12] bridge_slave_0: left allmulticast mode [ 1295.361435][ T12] bridge_slave_0: left promiscuous mode [ 1295.395221][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.900720][T26780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5024'. [ 1295.941103][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.070448][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.168727][ T12] bond0 (unregistering): Released all slaves [ 1296.332465][T26780] Invalid ELF header magic: != ELF [ 1296.513651][ T12] tipc: Left network mode [ 1297.262744][ T30] audit: type=1800 audit(4294967886.838:39): pid=26794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5027" name="bus" dev="tmpfs" ino=494 res=0 errno=0 [ 1298.895258][T26807] caif:caif_disconnect_client(): nothing to disconnect [ 1298.912091][T26807] caif:caif_disconnect_client(): nothing to disconnect [ 1298.959214][T26807] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1301.305074][T26820] Process accounting resumed [ 1301.399685][T26834] FAULT_INJECTION: forcing a failure. [ 1301.399685][T26834] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.459210][T26834] CPU: 1 UID: 0 PID: 26834 Comm: syz.5.5039 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1301.459259][T26834] Tainted: [U]=USER [ 1301.459269][T26834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1301.459285][T26834] Call Trace: [ 1301.459296][T26834] [ 1301.459308][T26834] dump_stack_lvl+0x16c/0x1f0 [ 1301.459342][T26834] should_fail_ex+0x512/0x640 [ 1301.459372][T26834] ? landlock_init_hierarchy_log+0x17f/0x810 [ 1301.459415][T26834] should_failslab+0xc2/0x120 [ 1301.459449][T26834] __kmalloc_noprof+0xd2/0x510 [ 1301.459481][T26834] landlock_init_hierarchy_log+0x17f/0x810 [ 1301.459527][T26834] landlock_merge_ruleset+0x6e1/0x870 [ 1301.459571][T26834] ? prepare_creds+0x583/0x7d0 [ 1301.459614][T26834] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 1301.459649][T26834] do_syscall_64+0xcd/0x490 [ 1301.459679][T26834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.459709][T26834] RIP: 0033:0x7f1f9678e9a9 [ 1301.459731][T26834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.459760][T26834] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1301.459788][T26834] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1301.459806][T26834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1301.459824][T26834] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.459842][T26834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.459859][T26834] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1301.459887][T26834] [ 1302.149405][T26832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1304.311263][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.340566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.386046][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.405505][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.435578][ T12] veth1_macvtap: left promiscuous mode [ 1304.441700][ T12] veth0_macvtap: left promiscuous mode [ 1304.467199][ T12] veth1_vlan: left promiscuous mode [ 1304.482694][T26854] FAULT_INJECTION: forcing a failure. [ 1304.482694][T26854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.498208][ T12] veth0_vlan: left promiscuous mode [ 1304.557237][T26854] CPU: 1 UID: 0 PID: 26854 Comm: syz.2.5044 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1304.557286][T26854] Tainted: [U]=USER [ 1304.557296][T26854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1304.557315][T26854] Call Trace: [ 1304.557324][T26854] [ 1304.557335][T26854] dump_stack_lvl+0x16c/0x1f0 [ 1304.557369][T26854] should_fail_ex+0x512/0x640 [ 1304.557400][T26854] _copy_from_iter+0x29f/0x16f0 [ 1304.557432][T26854] ? __alloc_skb+0x200/0x380 [ 1304.557459][T26854] ? __pfx__copy_from_iter+0x10/0x10 [ 1304.557490][T26854] ? __build_skb_around+0x278/0x3b0 [ 1304.557532][T26854] netlink_sendmsg+0x829/0xdd0 [ 1304.557568][T26854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.557617][T26854] ____sys_sendmsg+0xa95/0xc70 [ 1304.557655][T26854] ? copy_msghdr_from_user+0x10a/0x160 [ 1304.557684][T26854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.557724][T26854] ? kfree+0x24f/0x4d0 [ 1304.557764][T26854] ? __pfx__kstrtoull+0x10/0x10 [ 1304.557805][T26854] ___sys_sendmsg+0x134/0x1d0 [ 1304.557834][T26854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.557867][T26854] ? rcu_is_watching+0x12/0xc0 [ 1304.557905][T26854] ? __pfx___might_resched+0x10/0x10 [ 1304.557936][T26854] __sys_sendmmsg+0x200/0x420 [ 1304.557963][T26854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1304.557990][T26854] ? lock_release+0x201/0x2f0 [ 1304.558032][T26854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1304.558069][T26854] ? fput+0x70/0xf0 [ 1304.558101][T26854] ? ksys_write+0x1ac/0x250 [ 1304.558127][T26854] ? __pfx_ksys_write+0x10/0x10 [ 1304.558156][T26854] __x64_sys_sendmmsg+0x9c/0x100 [ 1304.558183][T26854] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1304.558226][T26854] do_syscall_64+0xcd/0x490 [ 1304.558255][T26854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.558283][T26854] RIP: 0033:0x7f7d3f98e9a9 [ 1304.558306][T26854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.558334][T26854] RSP: 002b:00007f7d40738038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1304.558362][T26854] RAX: ffffffffffffffda RBX: 00007f7d3fbb5fa0 RCX: 00007f7d3f98e9a9 [ 1304.558382][T26854] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1304.558400][T26854] RBP: 00007f7d40738090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.558418][T26854] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 1304.558435][T26854] R13: 0000000000000000 R14: 00007f7d3fbb5fa0 R15: 00007ffd6d6f6918 [ 1304.558461][T26854] [ 1304.829502][T26852] caif:caif_disconnect_client(): nothing to disconnect [ 1304.859627][T26855] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1304.918965][T26852] caif:caif_disconnect_client(): nothing to disconnect [ 1305.029360][T26859] FAULT_INJECTION: forcing a failure. [ 1305.029360][T26859] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.042230][T26859] CPU: 1 UID: 0 PID: 26859 Comm: syz.5.5045 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1305.042264][T26859] Tainted: [U]=USER [ 1305.042270][T26859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1305.042280][T26859] Call Trace: [ 1305.042286][T26859] [ 1305.042293][T26859] dump_stack_lvl+0x16c/0x1f0 [ 1305.042314][T26859] should_fail_ex+0x512/0x640 [ 1305.042333][T26859] should_failslab+0xc2/0x120 [ 1305.042353][T26859] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1305.042371][T26859] ? skb_clone+0x190/0x3f0 [ 1305.042389][T26859] ? netlink_deliver_tap+0x103/0xd30 [ 1305.042408][T26859] skb_clone+0x190/0x3f0 [ 1305.042426][T26859] netlink_deliver_tap+0xabd/0xd30 [ 1305.042446][T26859] netlink_unicast+0x62f/0x850 [ 1305.042467][T26859] ? __pfx_netlink_unicast+0x10/0x10 [ 1305.042507][T26859] netlink_sendmsg+0x8d1/0xdd0 [ 1305.042529][T26859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.042553][T26859] ____sys_sendmsg+0xa95/0xc70 [ 1305.042575][T26859] ? copy_msghdr_from_user+0x10a/0x160 [ 1305.042608][T26859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1305.042630][T26859] ? __pfx_kstrtouint+0x10/0x10 [ 1305.042656][T26859] ? kstrtouint_from_user+0x13c/0x1d0 [ 1305.042682][T26859] ___sys_sendmsg+0x134/0x1d0 [ 1305.042699][T26859] ? __pfx____sys_sendmsg+0x10/0x10 [ 1305.042720][T26859] ? rcu_is_watching+0x12/0xc0 [ 1305.042744][T26859] __sys_sendmsg+0x16d/0x220 [ 1305.042761][T26859] ? __pfx___sys_sendmsg+0x10/0x10 [ 1305.042784][T26859] do_syscall_64+0xcd/0x490 [ 1305.042801][T26859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.042819][T26859] RIP: 0033:0x7f1f9678e9a9 [ 1305.042833][T26859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.042851][T26859] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.042868][T26859] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1305.042879][T26859] RDX: 0000000000048000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1305.042890][T26859] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.042900][T26859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.042910][T26859] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1305.042926][T26859] [ 1305.399697][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.406182][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.804479][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1306.444200][ T12] bridge_slave_1: left allmulticast mode [ 1306.462838][T26872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1306.499193][ T12] bridge_slave_1: left promiscuous mode [ 1306.519507][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.550940][ T12] bridge_slave_0: left allmulticast mode [ 1306.572557][ T12] bridge_slave_0: left promiscuous mode [ 1306.594977][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.034517][T19509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1307.045776][T19509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1307.055161][T19509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1307.063525][T19509] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1307.071224][T19509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1307.494839][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.541603][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.697649][ T12] bond0 (unregistering): Released all slaves [ 1308.085365][ T12] HSR: left promiscuous mode [ 1308.192912][ T12] tipc: Left network mode [ 1308.455460][T26876] chnl_net:caif_netlink_parms(): no params data found [ 1308.618991][ T30] audit: type=1326 audit(4294967898.188:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.0.5054" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca65b8e9a9 code=0x0 [ 1308.763586][T26876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.779591][T26876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.786889][T26876] bridge_slave_0: entered allmulticast mode [ 1308.807943][T26876] bridge_slave_0: entered promiscuous mode [ 1308.840092][T26876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.870863][T26876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.906643][T26876] bridge_slave_1: entered allmulticast mode [ 1308.925110][T26876] bridge_slave_1: entered promiscuous mode [ 1309.103039][T26876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.130691][T12384] Bluetooth: hci1: command tx timeout [ 1309.181721][T26876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.331050][T26876] team0: Port device team_slave_0 added [ 1309.393430][T26876] team0: Port device team_slave_1 added [ 1309.553598][T26876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.569290][T26876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.642157][T26876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.704974][T26876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.740379][T26876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.839182][T26876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.617105][T26876] hsr_slave_0: entered promiscuous mode [ 1310.672328][T26876] hsr_slave_1: entered promiscuous mode [ 1310.739839][T26876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1310.747473][T26876] Cannot create hsr debugfs directory [ 1311.211709][T12384] Bluetooth: hci1: command tx timeout [ 1311.602833][T26876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1311.760223][T26876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1311.850931][T26876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1312.034351][T26876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1312.215042][T26876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.227835][T26876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.259811][T26876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1312.301523][T26876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1312.390054][T21716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.397227][T21716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.451504][T21716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.458648][T21716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.216516][T26942] sctp: [Deprecated]: syz.5.5064 (pid 26942) Use of int in maxseg socket option. [ 1313.216516][T26942] Use struct sctp_assoc_value instead [ 1313.237821][T26876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.301128][T12384] Bluetooth: hci1: command tx timeout [ 1314.022656][T12384] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1314.331192][T26876] veth0_vlan: entered promiscuous mode [ 1314.372181][T26876] veth1_vlan: entered promiscuous mode [ 1314.924762][T26876] veth0_macvtap: entered promiscuous mode [ 1314.972163][T26876] veth1_macvtap: entered promiscuous mode [ 1315.064823][T26876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.143250][T26876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.202674][T26876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.225055][T26876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.274769][T26876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.289793][T26876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.379778][T19509] Bluetooth: hci1: command tx timeout [ 1315.481899][T26876] ieee80211 phy252: Selected rate control algorithm 'minstrel_ht' [ 1315.577897][T21733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.579138][T26876] ieee80211 phy253: Selected rate control algorithm 'minstrel_ht' [ 1315.617778][T21733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.681088][T12764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.732991][T12764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.209577][T26992] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1316.313195][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca1ec00: rx timeout, send abort [ 1316.321573][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ca1ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1316.814063][T26995] program syz.2.5075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1317.501672][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.591098][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.670251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.677759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.752430][ T12] veth1_macvtap: left promiscuous mode [ 1317.776005][ T12] veth0_macvtap: left promiscuous mode [ 1317.961694][T19509] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1318.073033][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1318.110405][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1319.006061][T21733] bridge_slave_0: left allmulticast mode [ 1319.035751][T21733] bridge_slave_0: left promiscuous mode [ 1319.060396][T21733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.419983][T27039] FAULT_INJECTION: forcing a failure. [ 1319.419983][T27039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.489279][T27039] CPU: 1 UID: 0 PID: 27039 Comm: syz.2.5083 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1319.489342][T27039] Tainted: [U]=USER [ 1319.489351][T27039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1319.489369][T27039] Call Trace: [ 1319.489379][T27039] [ 1319.489389][T27039] dump_stack_lvl+0x16c/0x1f0 [ 1319.489421][T27039] should_fail_ex+0x512/0x640 [ 1319.489452][T27039] _copy_from_iter+0x29f/0x16f0 [ 1319.489485][T27039] ? __alloc_skb+0x200/0x380 [ 1319.489511][T27039] ? __pfx__copy_from_iter+0x10/0x10 [ 1319.489543][T27039] ? __build_skb_around+0x278/0x3b0 [ 1319.489583][T27039] netlink_sendmsg+0x829/0xdd0 [ 1319.489620][T27039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.489665][T27039] ____sys_sendmsg+0xa95/0xc70 [ 1319.489689][T27039] ? copy_msghdr_from_user+0x10a/0x160 [ 1319.489707][T27039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1319.489741][T27039] ? kfree+0x24f/0x4d0 [ 1319.489766][T27039] ? __pfx__kstrtoull+0x10/0x10 [ 1319.489792][T27039] ___sys_sendmsg+0x134/0x1d0 [ 1319.489810][T27039] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.489831][T27039] ? rcu_is_watching+0x12/0xc0 [ 1319.489853][T27039] ? __pfx___might_resched+0x10/0x10 [ 1319.489874][T27039] __sys_sendmmsg+0x200/0x420 [ 1319.489893][T27039] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1319.489909][T27039] ? lock_release+0x201/0x2f0 [ 1319.489935][T27039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1319.489958][T27039] ? fput+0x70/0xf0 [ 1319.489977][T27039] ? ksys_write+0x1ac/0x250 [ 1319.489993][T27039] ? __pfx_ksys_write+0x10/0x10 [ 1319.490011][T27039] __x64_sys_sendmmsg+0x9c/0x100 [ 1319.490028][T27039] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1319.490055][T27039] do_syscall_64+0xcd/0x490 [ 1319.490073][T27039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.490090][T27039] RIP: 0033:0x7f7d3f98e9a9 [ 1319.490104][T27039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.490122][T27039] RSP: 002b:00007f7d40738038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1319.490139][T27039] RAX: ffffffffffffffda RBX: 00007f7d3fbb5fa0 RCX: 00007f7d3f98e9a9 [ 1319.490150][T27039] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1319.490161][T27039] RBP: 00007f7d40738090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.490171][T27039] R10: 0000000000002ba2 R11: 0000000000000246 R12: 0000000000000002 [ 1319.490182][T27039] R13: 0000000000000000 R14: 00007f7d3fbb5fa0 R15: 00007ffd6d6f6918 [ 1319.490197][T27039] [ 1320.025708][T21733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.035972][T21733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.045903][T21733] bond0 (unregistering): Released all slaves [ 1320.156246][T27042] FAULT_INJECTION: forcing a failure. [ 1320.156246][T27042] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.174302][T27042] CPU: 0 UID: 0 PID: 27042 Comm: syz.2.5084 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1320.174349][T27042] Tainted: [U]=USER [ 1320.174359][T27042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1320.174375][T27042] Call Trace: [ 1320.174385][T27042] [ 1320.174396][T27042] dump_stack_lvl+0x16c/0x1f0 [ 1320.174427][T27042] should_fail_ex+0x512/0x640 [ 1320.174459][T27042] should_failslab+0xc2/0x120 [ 1320.174493][T27042] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1320.174539][T27042] ? copy_net_ns+0x135/0x5f0 [ 1320.174576][T27042] copy_net_ns+0x135/0x5f0 [ 1320.174609][T27042] ? copy_cgroup_ns+0x71/0x700 [ 1320.174644][T27042] create_new_namespaces+0x3ea/0xa90 [ 1320.174681][T27042] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1320.174718][T27042] ksys_unshare+0x45b/0xa40 [ 1320.174758][T27042] ? __pfx_ksys_unshare+0x10/0x10 [ 1320.174797][T27042] ? ksys_write+0x1ac/0x250 [ 1320.174830][T27042] __x64_sys_unshare+0x31/0x40 [ 1320.174870][T27042] do_syscall_64+0xcd/0x490 [ 1320.174901][T27042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.174932][T27042] RIP: 0033:0x7f7d3f98e9a9 [ 1320.174954][T27042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.174982][T27042] RSP: 002b:00007f7d40738038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1320.175011][T27042] RAX: ffffffffffffffda RBX: 00007f7d3fbb5fa0 RCX: 00007f7d3f98e9a9 [ 1320.175031][T27042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1320.175049][T27042] RBP: 00007f7d40738090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.175066][T27042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.175083][T27042] R13: 0000000000000000 R14: 00007f7d3fbb5fa0 R15: 00007ffd6d6f6918 [ 1320.175110][T27042] [ 1321.310918][T27057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5089'. [ 1322.403615][ T30] audit: type=1804 audit(4294967911.978:41): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5094" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=8 res=1 errno=0 [ 1322.809377][T19509] Bluetooth: hci5: command 0x0406 tx timeout [ 1323.496296][T27080] ima: policy update failed [ 1323.498477][T27076] can: request_module (can-proto-0) failed. [ 1323.503207][ T30] audit: type=1802 audit(4294967913.078:42): pid=27080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5097" res=0 errno=0 [ 1324.191879][T27088] sctp: [Deprecated]: syz.0.5098 (pid 27088) Use of int in maxseg socket option. [ 1324.191879][T27088] Use struct sctp_assoc_value instead [ 1325.182269][T27084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5096'. [ 1325.634397][T27110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5104'. [ 1325.648611][T27110] netlink: 354 bytes leftover after parsing attributes in process `syz.0.5104'. [ 1327.256061][T21733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.291338][T21733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.378642][T21733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.458366][T21733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.571808][T21733] veth1_macvtap: left promiscuous mode [ 1327.628932][T21733] veth0_macvtap: left promiscuous mode [ 1327.642460][T21733] veth1_vlan: left promiscuous mode [ 1327.689302][T21733] veth0_vlan: left promiscuous mode [ 1328.236334][T21733] team0 (unregistering): Port device team_slave_1 removed [ 1328.283871][T21733] team0 (unregistering): Port device team_slave_0 removed [ 1329.308943][T27150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5116'. [ 1330.080588][T27162] FAULT_INJECTION: forcing a failure. [ 1330.080588][T27162] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.153046][T27162] CPU: 1 UID: 0 PID: 27162 Comm: syz.5.5120 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1330.153082][T27162] Tainted: [U]=USER [ 1330.153088][T27162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1330.153099][T27162] Call Trace: [ 1330.153104][T27162] [ 1330.153111][T27162] dump_stack_lvl+0x16c/0x1f0 [ 1330.153132][T27162] should_fail_ex+0x512/0x640 [ 1330.153151][T27162] should_failslab+0xc2/0x120 [ 1330.153174][T27162] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1330.153193][T27162] ? alloc_empty_file+0x55/0x1e0 [ 1330.153216][T27162] alloc_empty_file+0x55/0x1e0 [ 1330.153237][T27162] path_openat+0xda/0x2cb0 [ 1330.153253][T27162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.153274][T27162] ? __pfx_path_openat+0x10/0x10 [ 1330.153292][T27162] do_filp_open+0x20b/0x470 [ 1330.153308][T27162] ? __pfx_do_filp_open+0x10/0x10 [ 1330.153336][T27162] ? alloc_fd+0x471/0x7d0 [ 1330.153365][T27162] do_sys_openat2+0x11b/0x1d0 [ 1330.153387][T27162] ? __pfx_do_sys_openat2+0x10/0x10 [ 1330.153418][T27162] ? __fget_files+0x20e/0x3c0 [ 1330.153435][T27162] __x64_sys_openat+0x174/0x210 [ 1330.153458][T27162] ? __pfx___x64_sys_openat+0x10/0x10 [ 1330.153481][T27162] ? ksys_write+0x1ac/0x250 [ 1330.153498][T27162] ? fput+0x70/0xf0 [ 1330.153518][T27162] do_syscall_64+0xcd/0x490 [ 1330.153536][T27162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.153553][T27162] RIP: 0033:0x7f1f9678e9a9 [ 1330.153566][T27162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1330.153584][T27162] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1330.153601][T27162] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1330.153612][T27162] RDX: 0000000000181881 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1330.153624][T27162] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.153634][T27162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.153645][T27162] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1330.153660][T27162] [ 1331.671981][T27170] Process accounting paused [ 1331.750865][T27179] FAULT_INJECTION: forcing a failure. [ 1331.750865][T27179] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.763792][T27179] CPU: 1 UID: 0 PID: 27179 Comm: syz.5.5125 Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1331.763837][T27179] Tainted: [U]=USER [ 1331.763847][T27179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1331.763864][T27179] Call Trace: [ 1331.763874][T27179] [ 1331.763885][T27179] dump_stack_lvl+0x16c/0x1f0 [ 1331.763917][T27179] should_fail_ex+0x512/0x640 [ 1331.763948][T27179] ? tomoyo_encode2+0x100/0x3e0 [ 1331.763972][T27179] should_failslab+0xc2/0x120 [ 1331.764006][T27179] __kmalloc_noprof+0xd2/0x510 [ 1331.764033][T27179] ? d_absolute_path+0x136/0x1a0 [ 1331.764069][T27179] tomoyo_encode2+0x100/0x3e0 [ 1331.764096][T27179] tomoyo_encode+0x29/0x50 [ 1331.764119][T27179] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1331.764149][T27179] tomoyo_path_number_perm+0x245/0x580 [ 1331.764188][T27179] ? tomoyo_path_number_perm+0x237/0x580 [ 1331.764228][T27179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1331.764274][T27179] ? preempt_count_add+0x76/0x150 [ 1331.764327][T27179] ? fd_install+0x244/0x750 [ 1331.764369][T27179] ? hook_file_ioctl_common+0x145/0x410 [ 1331.764422][T27179] security_file_ioctl+0x9b/0x240 [ 1331.764463][T27179] __x64_sys_ioctl+0xb7/0x210 [ 1331.764502][T27179] do_syscall_64+0xcd/0x490 [ 1331.764531][T27179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.764559][T27179] RIP: 0033:0x7f1f9678e9a9 [ 1331.764580][T27179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1331.764606][T27179] RSP: 002b:00007f1f97522038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.764632][T27179] RAX: ffffffffffffffda RBX: 00007f1f969b5fa0 RCX: 00007f1f9678e9a9 [ 1331.764651][T27179] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000004 [ 1331.764668][T27179] RBP: 00007f1f97522090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.764685][T27179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.764701][T27179] R13: 0000000000000000 R14: 00007f1f969b5fa0 R15: 00007ffd545c7348 [ 1331.764727][T27179] [ 1331.764750][T27179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1333.307432][T27195] netlink: 206 bytes leftover after parsing attributes in process `syz.5.5130'. [ 1333.850689][T27204] lo: entered allmulticast mode [ 1334.141410][T27204] lo: left allmulticast mode [ 1337.482716][T25854] ------------[ cut here ]------------ [ 1337.488223][T25854] ODEBUG: free active (active state 0) object: ffff888092839318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1337.503890][T25854] WARNING: CPU: 0 PID: 25854 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1337.514682][T25854] Modules linked in: [ 1337.518595][T25854] CPU: 0 UID: 0 PID: 25854 Comm: syz-executor Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1337.533161][T25854] Tainted: [U]=USER [ 1337.537285][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1337.547418][T25854] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1337.553358][T25854] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 6d 15 8c 4c 89 e6 48 c7 c7 40 62 15 8c e8 3f ea 9d fc 90 <0f> 0b 90 90 58 83 05 f6 c4 cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1337.573173][T25854] RSP: 0018:ffffc9000da47768 EFLAGS: 00010286 [ 1337.579392][T25854] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 1337.587464][T25854] RDX: ffff8880799cbc00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 1337.595468][T25854] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1337.603578][T25854] R10: 0000000000000001 R11: 000000000000efd8 R12: ffffffff8c1568e0 [ 1337.612156][T25854] R13: ffffffff8baff040 R14: ffffffff8a8de030 R15: ffffc9000da47868 [ 1337.620657][T25854] FS: 0000000000000000(0000) GS:ffff88812472e000(0000) knlGS:0000000000000000 [ 1337.629752][T25854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.636613][T25854] CR2: 0000200000d79000 CR3: 000000009b358000 CR4: 00000000003526f0 [ 1337.644806][T25854] Call Trace: [ 1337.648278][T25854] [ 1337.651236][T25854] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1337.656820][T25854] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1337.662902][T25854] debug_check_no_obj_freed+0x4b7/0x600 [ 1337.668550][T25854] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1337.674739][T25854] ? rcu_is_watching+0x12/0xc0 [ 1337.679535][T25854] ? kmem_cache_free+0x2d1/0x4d0 [ 1337.684486][T25854] ? kfree_skbmem+0x1a4/0x1f0 [ 1337.689273][T25854] kfree+0x28f/0x4d0 [ 1337.693181][T25854] ? hci_release_dev+0x4d8/0x600 [ 1337.698217][T25854] hci_release_dev+0x4d8/0x600 [ 1337.703049][T25854] ? __pfx_hci_release_dev+0x10/0x10 [ 1337.708399][T25854] ? rcu_is_watching+0x12/0xc0 [ 1337.714328][T25854] ? kfree+0x24f/0x4d0 [ 1337.718452][T25854] bt_host_release+0x6a/0xb0 [ 1337.723934][T25854] ? __pfx_bt_host_release+0x10/0x10 [ 1337.729296][T25854] device_release+0xa4/0x240 [ 1337.733984][T25854] kobject_put+0x1e7/0x5a0 [ 1337.738405][T25854] ? __pfx_vhci_release+0x10/0x10 [ 1337.743657][T25854] put_device+0x1f/0x30 [ 1337.747866][T25854] vhci_release+0x81/0xf0 [ 1337.752272][T25854] __fput+0x402/0xb70 [ 1337.756309][T25854] task_work_run+0x150/0x240 [ 1337.760987][T25854] ? __pfx_task_work_run+0x10/0x10 [ 1337.766125][T25854] do_exit+0x86c/0x2bd0 [ 1337.770334][T25854] ? __pfx_do_exit+0x10/0x10 [ 1337.774937][T25854] ? do_raw_spin_lock+0x12c/0x2b0 [ 1337.780005][T25854] ? get_signal+0x8f5/0x26d0 [ 1337.784610][T25854] ? rcu_is_watching+0x12/0xc0 [ 1337.789428][T25854] do_group_exit+0xd3/0x2a0 [ 1337.793978][T25854] get_signal+0x2673/0x26d0 [ 1337.798495][T25854] ? __pfx_get_signal+0x10/0x10 [ 1337.803419][T25854] arch_do_signal_or_restart+0x8f/0x790 [ 1337.809138][T25854] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1337.815900][T25854] ? ksys_read+0x1ac/0x250 [ 1337.821313][T25854] ? __pfx_ksys_read+0x10/0x10 [ 1337.826137][T25854] exit_to_user_mode_loop+0x84/0x110 [ 1337.831728][T25854] do_syscall_64+0x3f6/0x490 [ 1337.836333][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.842251][T25854] RIP: 0033:0x7f7d3f98d3bc [ 1337.846670][T25854] Code: Unable to access opcode bytes at 0x7f7d3f98d392. [ 1337.853837][T25854] RSP: 002b:00007ffd6d6f6c70 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1337.862297][T25854] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f7d3f98d3bc [ 1337.870394][T25854] RDX: 0000000000000030 RSI: 00007ffd6d6f6d30 RDI: 00000000000000f9 [ 1337.878372][T25854] RBP: 00007ffd6d6f6cdc R08: 0000000000000000 R09: 0079746972756365 [ 1337.886393][T25854] R10: 00007f7d3fb837e0 R11: 0000000000000246 R12: 0000000000000058 [ 1337.894577][T25854] R13: 000055557189f590 R14: 0000000000142de7 R15: 00007ffd6d6f6d30 [ 1337.902591][T25854] [ 1337.905613][T25854] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1337.912897][T25854] CPU: 0 UID: 0 PID: 25854 Comm: syz-executor Tainted: G U 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1337.926707][T25854] Tainted: [U]=USER [ 1337.930516][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1337.940577][T25854] Call Trace: [ 1337.943857][T25854] [ 1337.946786][T25854] dump_stack_lvl+0x3d/0x1f0 [ 1337.951471][T25854] panic+0x71c/0x800 [ 1337.955380][T25854] ? __pfx_panic+0x10/0x10 [ 1337.959807][T25854] ? show_trace_log_lvl+0x29b/0x3e0 [ 1337.965022][T25854] ? check_panic_on_warn+0x1f/0xb0 [ 1337.970161][T25854] ? debug_print_object+0x1a2/0x2b0 [ 1337.975460][T25854] check_panic_on_warn+0xab/0xb0 [ 1337.980415][T25854] __warn+0xf6/0x3c0 [ 1337.984320][T25854] ? debug_print_object+0x1a2/0x2b0 [ 1337.989530][T25854] report_bug+0x3c3/0x580 [ 1337.993897][T25854] ? debug_print_object+0x1a2/0x2b0 [ 1337.999119][T25854] handle_bug+0x184/0x210 [ 1338.003457][T25854] exc_invalid_op+0x17/0x50 [ 1338.007980][T25854] asm_exc_invalid_op+0x1a/0x20 [ 1338.012924][T25854] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1338.018740][T25854] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 6d 15 8c 4c 89 e6 48 c7 c7 40 62 15 8c e8 3f ea 9d fc 90 <0f> 0b 90 90 58 83 05 f6 c4 cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1338.038356][T25854] RSP: 0018:ffffc9000da47768 EFLAGS: 00010286 [ 1338.044432][T25854] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 1338.052407][T25854] RDX: ffff8880799cbc00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 1338.060387][T25854] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1338.068444][T25854] R10: 0000000000000001 R11: 000000000000efd8 R12: ffffffff8c1568e0 [ 1338.076419][T25854] R13: ffffffff8baff040 R14: ffffffff8a8de030 R15: ffffc9000da47868 [ 1338.084394][T25854] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1338.089873][T25854] ? __warn_printk+0x198/0x350 [ 1338.094730][T25854] ? __warn_printk+0x1a5/0x350 [ 1338.099527][T25854] ? debug_print_object+0x1a1/0x2b0 [ 1338.104809][T25854] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1338.110314][T25854] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1338.116312][T25854] debug_check_no_obj_freed+0x4b7/0x600 [ 1338.121971][T25854] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1338.128066][T25854] ? rcu_is_watching+0x12/0xc0 [ 1338.132853][T25854] ? kmem_cache_free+0x2d1/0x4d0 [ 1338.137792][T25854] ? kfree_skbmem+0x1a4/0x1f0 [ 1338.142478][T25854] kfree+0x28f/0x4d0 [ 1338.146556][T25854] ? hci_release_dev+0x4d8/0x600 [ 1338.151595][T25854] hci_release_dev+0x4d8/0x600 [ 1338.156382][T25854] ? __pfx_hci_release_dev+0x10/0x10 [ 1338.161683][T25854] ? rcu_is_watching+0x12/0xc0 [ 1338.166462][T25854] ? kfree+0x24f/0x4d0 [ 1338.170565][T25854] bt_host_release+0x6a/0xb0 [ 1338.175166][T25854] ? __pfx_bt_host_release+0x10/0x10 [ 1338.180462][T25854] device_release+0xa4/0x240 [ 1338.185200][T25854] kobject_put+0x1e7/0x5a0 [ 1338.189683][T25854] ? __pfx_vhci_release+0x10/0x10 [ 1338.194824][T25854] put_device+0x1f/0x30 [ 1338.199105][T25854] vhci_release+0x81/0xf0 [ 1338.203556][T25854] __fput+0x402/0xb70 [ 1338.207660][T25854] task_work_run+0x150/0x240 [ 1338.212276][T25854] ? __pfx_task_work_run+0x10/0x10 [ 1338.217406][T25854] do_exit+0x86c/0x2bd0 [ 1338.221601][T25854] ? __pfx_do_exit+0x10/0x10 [ 1338.226235][T25854] ? do_raw_spin_lock+0x12c/0x2b0 [ 1338.231312][T25854] ? get_signal+0x8f5/0x26d0 [ 1338.235906][T25854] ? rcu_is_watching+0x12/0xc0 [ 1338.240676][T25854] do_group_exit+0xd3/0x2a0 [ 1338.245192][T25854] get_signal+0x2673/0x26d0 [ 1338.249721][T25854] ? __pfx_get_signal+0x10/0x10 [ 1338.254587][T25854] arch_do_signal_or_restart+0x8f/0x790 [ 1338.260146][T25854] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1338.266309][T25854] ? ksys_read+0x1ac/0x250 [ 1338.270738][T25854] ? __pfx_ksys_read+0x10/0x10 [ 1338.275519][T25854] exit_to_user_mode_loop+0x84/0x110 [ 1338.280828][T25854] do_syscall_64+0x3f6/0x490 [ 1338.285469][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.291466][T25854] RIP: 0033:0x7f7d3f98d3bc [ 1338.295901][T25854] Code: Unable to access opcode bytes at 0x7f7d3f98d392. [ 1338.303013][T25854] RSP: 002b:00007ffd6d6f6c70 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1338.311460][T25854] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f7d3f98d3bc [ 1338.319468][T25854] RDX: 0000000000000030 RSI: 00007ffd6d6f6d30 RDI: 00000000000000f9 [ 1338.327457][T25854] RBP: 00007ffd6d6f6cdc R08: 0000000000000000 R09: 0079746972756365 [ 1338.335454][T25854] R10: 00007f7d3fb837e0 R11: 0000000000000246 R12: 0000000000000058 [ 1338.343452][T25854] R13: 000055557189f590 R14: 0000000000142de7 R15: 00007ffd6d6f6d30 [ 1338.351577][T25854] [ 1338.354906][T25854] Kernel Offset: disabled [ 1338.359242][T25854] Rebooting in 86400 seconds..