last executing test programs: 16m49.832366029s ago: executing program 3 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x17) lseek$auto(r1, 0x1, 0xb4) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000001c0)={0x20, r2, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x9, 0x2, 0x0, 0x1, [@generic="646bc0214d"]}]}, 0x20}}, 0x20000000) 16m49.62127897s ago: executing program 3 (id=813): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stat\x00', 0x8c40, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000051c0)=""/103, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6cb, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) r2 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) prlimit64$auto(0x0, 0x2, &(0x7f0000000040)={0x401, 0xffffffffffffffff}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) read$auto(r2, 0x0, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1) 16m42.275477046s ago: executing program 3 (id=835): close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram5\x00', 0x680000, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, 0x38) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x381502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket(0x11, 0x80003, 0x300) (async) r1 = socket(0x11, 0x80003, 0x300) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8000450a, 0xffffffffffffffff) 16m41.970722085s ago: executing program 3 (id=838): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3cd802, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x1) r0 = socket(0xa, 0x801, 0x106) ioctl$auto(r0, 0x890b, 0x9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) r4 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000100)=0x40) syz_clone3(&(0x7f0000000340)={0x753836994d23466a, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200), {0x28}, &(0x7f0000000240)=""/96, 0x60, &(0x7f00000002c0)=""/27, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, {r4}}, 0x58) ioctl$auto_VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000003c0)={0x81, r5}) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x24, 0x9665, 0x7fffffff}]}) eventfd2$auto(0xff, 0x10000) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000106, 0x400, 0x9}]}) 16m40.468727244s ago: executing program 3 (id=843): r0 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, 0x0) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) readahead$auto(r0, 0x3, 0x504bea7a) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) r4 = eventfd$auto(0x80) read$auto(r4, 0x0, 0xcc9c) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), r4) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sockstat6\x00', 0x141100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000200)=""/92, 0x5c) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000225bd7000ffdbdf257f000000060051010b00000004001e010500d300ff0000000800400006000000080035010900000008006b0003000000"], 0x40}, 0x1, 0x0, 0x0, 0x8888}, 0x80) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r7, 0x0, 0x2b6) r8 = open(0x0, 0x62240, 0x154) readv$auto(r3, &(0x7f0000001280)={&(0x7f0000001200)="6641c6608b2fcfd702e60c3fe736945712d1f25935f31685bd11b25e62e6f7ce3e4163abbbc0738ea95f73cab0a3dc1336ca2a537aae9f76258ab4c0e1afbfebd25c9710202bd59db3671c71a850315f57f943d1e0fa6475cae55aba89a2300413274b36914ea97478e02d6f55a5232ecbcf834a79dac39419cdffe30cf078", 0xa62}, 0x6) execveat$auto(r8, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 16m39.45967089s ago: executing program 3 (id=849): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32) r0 = socket(0x2b, 0x1, 0x1) (rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) ioctl$auto(r0, 0x89a0, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_score_adj\x00', 0x490302, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x7) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) (async, rerun: 32) syslog$auto(0x3, 0x0, 0x5) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r4, 0x4008af24, r3) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) socket(0x10, 0xb, 0x16) (async, rerun: 64) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0xd7, 0x4, 0x80}, 0x6) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) ioctl$auto_XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000002c0)={0x0, 0x105, 0x0, &(0x7f0000000280)=0x2}) (rerun: 32) 16m24.236855266s ago: executing program 32 (id=849): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32) r0 = socket(0x2b, 0x1, 0x1) (rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) ioctl$auto(r0, 0x89a0, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_score_adj\x00', 0x490302, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x7) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) (async, rerun: 32) syslog$auto(0x3, 0x0, 0x5) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r4, 0x4008af24, r3) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) socket(0x10, 0xb, 0x16) (async, rerun: 64) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0xd7, 0x4, 0x80}, 0x6) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) ioctl$auto_XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000002c0)={0x0, 0x105, 0x0, &(0x7f0000000280)=0x2}) (rerun: 32) 14m31.448849906s ago: executing program 0 (id=1221): r0 = socket(0xa, 0x3, 0x5) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r1 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x7) prctl$auto(0x0, 0x2, r3, 0x2, 0x8000) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000001c0)) 14m31.349122491s ago: executing program 0 (id=1223): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000180)=@generic={0xa, "0000e100"}, 0x58) (async) connect$auto(0x3, &(0x7f0000000180)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x401, 0x0) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='G\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c0000000c00038008000380992da54c1800018014000200776c616e3000"/50], 0x38}}, 0x24048084) mmap$auto(0x0, 0x40002020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x40002020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0x22, 0x3, 0x1) (async) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) ustat$auto(0x401, 0x0) (async) ustat$auto(0x401, 0x0) close_range$auto(r0, 0x8000, 0xffffffff) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x5, 0x6, 0x4000007, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xa}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x5, 0x6, 0x4000007, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xa}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) mmap$auto(0x200, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x2000000000006) r4 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x250080, 0x0) read$auto_check_wx_fops_(r4, &(0x7f0000000080)=""/228, 0xe4) 14m30.870694069s ago: executing program 0 (id=1224): unshare$auto(0x40000080) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2c, r1, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) r3 = open(0x0, 0x161342, 0x100) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r5, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="060000007000fedbeb2578c563712cc5d9020000000400018008"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x254, 0x0, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@typed={0x75, 0xc6, 0x0, 0x0, @binary="d7f45a73d5f0c5bf289210f2dc26702910b1f8bf50f43414cf4e1ad04deb6c841d32064685031f9ecbd28c5b2a13470c171105acaf295817a67ede4f3b5e39f556f1cd4f820d89532f52e39ab586957e19fcb330b4a6441fcb92f15309631fff611d930cf0ce0f3108238454b542407cd4"}, @generic="b10be911db9f8a16d0c3741e3008cb0bb207e78366c44da071922700bc55bc0e97c0a26d76efe05af6f272d62cba75160ea732005e4a64c14fde8d3e728fdf46e4c3a5701db1a77286817a94d19965bf3f798e2e4521de5ff1f4949515692cad28fe0c8509673a093748e7e1b3c9990fdfa1639be86b077e20e84bbd32f4693a93e3ae7bef4bcaf0b23bfef641da5ea00ce6c00abb1b045f0969309953827d5fe02e352e82741c39ce05af6221293dec0d795593478589c2929b0752ec5018c5b437e0440135f5ccbb21f14d5767f5f8badb838cecd3abedc2d6cb3cc4", @generic="9116b139a0a94a5fc6f942da231469375f7d", @generic="31db802c929649accd2589b16c81e445a27ecc4ce4f36edcc1611fe493dd897a6a1960e0aeedc8156b93f91f5f96f708a7134e39b73c6cd62b378b2a08dc07e38a85b9c22f3f5f66eca9cae8d9910c33d563b6049043730653c7ee959f1359cfccf014d1eda3e99c89702a6ce9409b016895a9655ff9dfb1eec8fa6a095bdc45fac846d4dfebeb9ae4533ec0c5b54da7a1e7de81ae1996a4157cb1dc6b419869ef8a435adbe53eb6d06d408005697e43fac19ae7b43406fad1bdbb116dc04c6e655cff01d42d45912d7824e00f", @nested={0x4, 0x1c}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$auto_UI_SET_EVBIT(r3, 0x40045564, 0x0) prctl$auto(0x1000000003b, 0x7, 0x4, 0x5, 0x107) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) ioperm$auto(0x7, 0x86, 0x9) r6 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) dup2$auto(r6, r6) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x9d, 0xff, 0x9) lseek$auto(0x3, 0x2, 0x4) socket(0x18, 0xa, 0x1) getsockname$auto(0x5, 0x0, 0x0) 14m30.007788585s ago: executing program 0 (id=1228): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x8) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x7da6a981, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x11, 0xa, 0x300) bind$auto(r1, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) mincore$auto(0x1000, 0x8001, 0x0) 14m28.269421116s ago: executing program 0 (id=1234): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) statmount$auto(0x0, 0x0, 0x1fe, 0xc) mount$auto(&(0x7f0000000000)='bond_slave_0\x00', 0x0, &(0x7f0000000080)='-/}@\x00', 0xc2, &(0x7f0000000380)="d006787a7ba4498a2204b636acce3792d8698168d5a76889280650b335121c2185a83d496e3a722f7a57cbb53f09c22869663055b54b1b558a9a82511c") syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) getegid() (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xc8, 0x0, 0x4040f6) (async) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, 0x0) (async) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680), 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4000c, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x8000003, 0x80000000, 0x5f, 0x80000001, 0xb, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, r0, 0x9ddb) (async) socket(0x2, 0x80002, 0x73) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x147602, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r3 = fanotify_init$auto(0xba, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r3, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 14m26.177996595s ago: executing program 0 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x2, 0x0, 0x0, 0x0) r1 = pidfd_open$auto(0x0, 0xfffffffe) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1) (async) r2 = socket(0x2, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2514000000"], 0x14}, 0x1, 0x3000000000000, 0x0, 0x4000c00}, 0x4000000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x280200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x80}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x972274bd04b5bfd8}, 0x20004080) (async) setsockopt$auto(r2, 0x88, 0xa, 0x0, 0x80000e) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) unshare$auto(0x40000080) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x200ab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) r8 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) pwritev2$auto(r8, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x2000c00c) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0x401, 0x8000) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/type\x00', 0x103000, 0x0) read$auto(r9, 0x0, 0x3fffffffffff) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 14m11.007363111s ago: executing program 33 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x2, 0x0, 0x0, 0x0) r1 = pidfd_open$auto(0x0, 0xfffffffe) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r1) (async) r2 = socket(0x2, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2514000000"], 0x14}, 0x1, 0x3000000000000, 0x0, 0x4000c00}, 0x4000000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x280200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x80}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x972274bd04b5bfd8}, 0x20004080) (async) setsockopt$auto(r2, 0x88, 0xa, 0x0, 0x80000e) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) unshare$auto(0x40000080) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x200ab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r7}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) r8 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) pwritev2$auto(r8, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x2000c00c) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0x401, 0x8000) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index3/type\x00', 0x103000, 0x0) read$auto(r9, 0x0, 0x3fffffffffff) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 9m0.122801392s ago: executing program 5 (id=2261): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) r1 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r1, 0x8000) clone$auto(0xd, 0x2, 0x0, 0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async) ioctl$auto(0x3, 0xc0585605, 0x38) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x2, 0xa, 0x1) (async) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) (async) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r1, 0x8000) (async) clone$auto(0xd, 0x2, 0x0, 0x0, 0x2) (async) 8m59.463537634s ago: executing program 5 (id=2264): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) 8m57.672101454s ago: executing program 5 (id=2271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x1, 0x8, 0x9) r0 = semctl$auto_GETPID(0xaf3, 0x0, 0xb, 0x6) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000140)="0a1b9a5c305c0a", 0x7) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffff004, 0x2) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyp0\x00', 0x40, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) readahead$auto(r4, 0xeca9, 0x6) socket(0xa, 0x2, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) setsockopt$auto(r2, 0x7ff, 0x4, &(0x7f00000000c0)='ns/net\x00', 0x6) r5 = socket(0x18, 0x800, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4082, 0xff2) 8m55.4651674s ago: executing program 5 (id=2276): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x0) listmount$auto(&(0x7f0000000100)={0xba, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) mbind$auto(0x3, 0x5, 0x9a37, &(0x7f0000000080)=0xb000000, 0x80000001, 0x200) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000108, 0x400}]}) 8m54.129526829s ago: executing program 5 (id=2281): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200000, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) (async) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x80487436, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x7, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x37fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x2000000000000000, 0x0, 0x8, 0x0, 0x8000004, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x1ff, 0x7d) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "000200000000"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x0, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 8m53.638574078s ago: executing program 5 (id=2283): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r1 = socket(0x21d8b882e89c6cfe, 0x4, 0x8) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000003c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328366c88c643d7de7d513c46d805b35a6cae38c311835bed572cd39d6b1a5bbf0d8d56cb1076a94e85efd3508e8bd8def432f349860acb37d323f298ec9b4feb8b7ac48f397930a1fcf4f29bff8a8b28ac893866859ec288ac1b44d22ba0ec052a304f187342c3f6129dd96052217f549f3c71105daf5aded0122b89a4e454a0481a399a8262df0fd09080fcdbb56033bbe801", 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = prctl$auto(0x200003e, 0xfffffffffffffffe, 0x0, 0xfffffffffbfffffe, 0x0) (async) select$auto(0x8000, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x6, 0x8, 0x408fd2, 0x948b, 0x43, 0x100000001, 0x4000000000005, 0x6, 0x2, 0x8, 0x0, 0x1, 0xffffffff, 0x100, 0x18]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) (async) r4 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRES64=r3, @ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="7e9df083ead52f2ebeadf4f0c2636015d79799c24632", @ANYRESDEC=r1, @ANYRES64=r0, @ANYBLOB="3122046c1f2883c6"], 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) (async) socket(0x6, 0x2, 0xfffffffd) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0c/sub5/info\x00', 0x10b500, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) setresuid$auto(0x0, 0x7, 0x8080) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0201, 0x0) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) write$auto_tomoyo_operations_securityfs_if(r6, &(0x7f00000000c0)="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", 0x119) (async) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu8\x00', 0x200302, 0x0) mmap$auto(0x0, 0x40000000000004, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r7, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async) socket(0xa, 0x5, 0x84) 8m37.932870613s ago: executing program 34 (id=2283): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r1 = socket(0x21d8b882e89c6cfe, 0x4, 0x8) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000003c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328366c88c643d7de7d513c46d805b35a6cae38c311835bed572cd39d6b1a5bbf0d8d56cb1076a94e85efd3508e8bd8def432f349860acb37d323f298ec9b4feb8b7ac48f397930a1fcf4f29bff8a8b28ac893866859ec288ac1b44d22ba0ec052a304f187342c3f6129dd96052217f549f3c71105daf5aded0122b89a4e454a0481a399a8262df0fd09080fcdbb56033bbe801", 0x4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = prctl$auto(0x200003e, 0xfffffffffffffffe, 0x0, 0xfffffffffbfffffe, 0x0) (async) select$auto(0x8000, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x6, 0x8, 0x408fd2, 0x948b, 0x43, 0x100000001, 0x4000000000005, 0x6, 0x2, 0x8, 0x0, 0x1, 0xffffffff, 0x100, 0x18]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) (async) r4 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRES64=r3, @ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="7e9df083ead52f2ebeadf4f0c2636015d79799c24632", @ANYRESDEC=r1, @ANYRES64=r0, @ANYBLOB="3122046c1f2883c6"], 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) (async) socket(0x6, 0x2, 0xfffffffd) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0c/sub5/info\x00', 0x10b500, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) setresuid$auto(0x0, 0x7, 0x8080) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0201, 0x0) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) write$auto_tomoyo_operations_securityfs_if(r6, &(0x7f00000000c0)="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", 0x119) (async) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu8\x00', 0x200302, 0x0) mmap$auto(0x0, 0x40000000000004, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r7, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async) socket(0xa, 0x5, 0x84) 5.662585607s ago: executing program 6 (id=4011): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000180)={&(0x7f0000000140)="6845cf66e03cd0cb755f33db61d1604f3e161c3135a05672911b", 0xf1}, 0x0, 0x0, 0xfffffffffffffffc, 0x21) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) getpid() r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x22202, 0x0) pread64$auto(r0, 0x0, 0x3fffffd, 0x9) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x60) 5.481753516s ago: executing program 6 (id=4013): socket(0xf, 0x7, 0xed75) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) prctl$auto(0x103e, 0x1, 0x0, 0x1, 0x40000000000) socket(0x2, 0xa, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x87) r1 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0x18, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4f4, 0x7, 0xffffffffffffffff, r0}, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x0, 0x4, 0x4, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffe, 0x8000000000000001, 0x6, 0x15, r3, 0x8000) setsockopt$auto_SO_RCVTIMEO_OLD(r2, 0x7, 0x14, &(0x7f0000000300)='\xaf\x7f\x1az|\'?\xfe\xa7=+\xac\xea\x8d\v\xcfUA{;u\xd5\xc8S\xc0\x05;bB\xc7\xadc\x9fT\xdd\x1e\xc6\x9f\x93\xc9\xea\x00\x00>3\x1b-\x8c\xa7\x17\xe5\xbd5J\xc7l;\xa1\x90\xda\xb6\x10Kfs\x8c\xed\xfe\x00_\x81\xd1\xe4f\xa0Q\xae\xe8\xcf\xc0\xff`i\xeb\x9b\x1c\x9c+\x92?\xc9\xff7\xea\xdc\x99\x9e\x99\xa4\x97VW\xcc\x00\x00\xcf\x94\\\xc8\x1e\xed\xb2\x03\x8687\xd8r\x95\x82', 0xea) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000140)='/de\x00\x87\xffudio1\x00', 0xfffffffffffffffc) ppoll$auto(&(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) mmap$auto(0xfffffffffffffffc, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffd2b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x24008194) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x8, 0x0) 5.005419804s ago: executing program 2 (id=4017): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x200}, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, 0x0, 0x5) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x48) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x9, "f5dacb2589b5a16d"}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port6/power/autosuspend_delay_ms\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x403, 0xffffffffffff0005, 0x8001) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r7) sendmsg$auto_ILA_CMD_DEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01810000000000000000000002004846008f454f4fbe45e739a34f89cdd962226a949e3c00e528fe76226f9593b4f6b9d91f59bb86579931b66e860ed9d4bb21d7d110730e8f4eacf235f8092caa06dc7df78352fb931ebac42bc8908e3f0ea763b2692b4e5a0b7385fc09dbcbfba57297b171cd44dcacdcb0661c56f5f87d68d7d4b72cdcf3cc5aaa60fabfa58e29d6c5cf2b8fd02fb296b9c07c2e7c8d30e44e44f93bf92b039cca37dfd064e42250160b597303168a4de683f810ff5fd711b33e89eefa6939815705a2e57173a8bed0c39d723873d4cfd779efe1120cbd5b"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) madvise$auto(0x0, 0x53, 0x9) 4.659113873s ago: executing program 1 (id=4019): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, 0x0, 0x14) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6202, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/fail_next_enable\x00', 0x2441, 0x0) write$auto(0x3, 0x0, 0x5) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x4]}, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x110, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r1, 0x0, 0x100000a3d9) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mlockall$auto(0x7) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x7, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 4.504915241s ago: executing program 6 (id=4021): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000180)={&(0x7f0000000140)="6845cf66e03cd0cb755f33db61d1604f3e161c3135a05672911b", 0xf1}, 0x0, 0x0, 0xfffffffffffffffc, 0x21) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) getpid() r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x22202, 0x0) pread64$auto(r0, 0x0, 0x3fffffd, 0x9) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x60) 4.284018903s ago: executing program 6 (id=4022): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) read$auto_force_suspend_fops_hci_vhci(r3, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2c, 0x3, 0x0) bind$auto(r4, &(0x7f0000000080)=@generic={0x2c, "d673107fab139218c3a6e4e19205"}, 0x6b) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r5, r0, 0x0, 0x7) 3.157883497s ago: executing program 1 (id=4025): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose2/statistics/rx_bytes\x00', 0x81, 0x0) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) 2.964698318s ago: executing program 1 (id=4027): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/event-fork\x00', 0x141602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) getsockopt$auto(0x2, 0x114, 0x2711, 0xfffffffffffffffc, 0x0) 2.88846553s ago: executing program 2 (id=4028): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0x53, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r0 = pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) (async) socket(0x2, 0x3, 0x6) (async) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x2, 0x1, 0x0) (async) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/apparmor/prev\x00', 0x301000, 0x0) close_range$auto(r0, r2, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) clone$auto(0x7, 0x5, &(0x7f00000001c0), 0x0, 0x8) (async) write$auto(0x3, 0x0, 0x100085) 2.851491194s ago: executing program 4 (id=4029): umount2$auto(&(0x7f0000000500)='/proc/thread-self/ns/cgroup\x00', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/179, 0xb3) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.769855414s ago: executing program 1 (id=4030): mmap$auto(0x101, 0xa020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0x1df, 0x9b72, r0, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r2) mmap$auto(0x0, 0x200006, 0x2, 0x16, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub0/sw_params\x00', 0x240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000003c0)=""/212, 0xd4) setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0x2, 0x2}, 0x0, 0xf4240, 0x1) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f", 0xc83) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x490040, 0x0) prctl$auto(0x3d, 0x1, 0xffffffffffffffff, 0x9, 0x10004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa441, 0x0) 2.430859208s ago: executing program 2 (id=4031): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) setsockopt$auto_SO_SNDTIMEO_OLD(r0, 0x7, 0x15, &(0x7f0000000000)='/dev/dri/card0\x00', 0x101) ioctl$auto(r0, 0x921064b1, 0x8) 2.293191958s ago: executing program 4 (id=4032): mmap$auto(0x0, 0x30009, 0x4000000000df, 0xeb1, 0x401, 0x18000) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x2b, 0x1, 0x1) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a00"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r1 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) 2.223636384s ago: executing program 6 (id=4033): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000180)="5a6271c14cd62ea47cf29c733192500f430221220fd29973e815ad01cd43a46652a4d24b02d098086b53da225456a5084a437217647e53520cec9cc8349d33f95d3185dcf14bcd68fbf66b3b84562e88847a1453bbe038dddc798260c5c67a1c55c555d54a33a74b53e79b86f4cca1a2febc21175b0476481df5af489a8e2c8c16810db71ffed7106d2c477e2aa89cd73680ce8a69c926ad93") write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub2/info\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/87, 0x57) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x402202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto(0x3, 0x0, 0x1) bpf$auto(0x0, 0x0, 0x6f3) write$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000040)=""/195, 0xc3) sendmsg$auto_ILA_CMD_ADD(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, r6, 0x201, 0x70bd28, 0x25dfdbff, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) 2.062743411s ago: executing program 2 (id=4034): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102880, 0x1fd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, &(0x7f0000000080)='\xef', 0x8000) 1.999070548s ago: executing program 4 (id=4035): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/video4linux/radio20/power/runtime_status\x00', 0x103000, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) read$auto(0x3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0xfffffffc) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) io_pgetevents$auto(0x8, 0x6, 0x400000000003ff, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}) 1.798365953s ago: executing program 1 (id=4036): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x2, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/extended_iref\x00', 0x18b440, 0x0) read$auto(r0, 0x0, 0x10000007) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(r1, 0x0, 0x9) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) 1.518271744s ago: executing program 6 (id=4037): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x200}, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, 0x0, 0x5) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x48) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x9, "f5dacb2589b5a16d"}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port6/power/autosuspend_delay_ms\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x403, 0xffffffffffff0005, 0x8001) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r7) sendmsg$auto_ILA_CMD_DEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01810000000000000000000002004846008f454f4fbe45e739a34f89cdd962226a949e3c00e528fe76226f9593b4f6b9d91f59bb86579931b66e860ed9d4bb21d7d110730e8f4eacf235f8092caa06dc7df78352fb931ebac42bc8908e3f0ea763b2692b4e5a0b7385fc09dbcbfba57297b171cd44dcacdcb0661c56f5f87d68d7d4b72cdcf3cc5aaa60fabfa58e29d6c5cf2b8fd02fb296b9c07c2e7c8d30e44e44f93bf92b039cca37dfd064e42250160b597303168a4de683f810ff5fd711b33e89eefa6939815705a2e57173a8bed0c39d723873d4cfd779efe1120cbd5b"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) madvise$auto(0x0, 0x53, 0x9) 1.4923719s ago: executing program 2 (id=4038): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0x2, 0x6, 0x0}) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0xd77, 0x5, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0x0, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x3, 0x4, 0x5, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xd) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x4008) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x21f4, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x1e9, 0x84, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @fd=r2}, @nested={0xcd, 0xfc, 0x0, 0x1, [@generic="b49a70eb37ea980fd6532acfa9ba939281ca1ff8d7f3148a12b496c38d18c2f75940c4cfc93435af9a2d300f700b2dc5f66607026f4381a7731e0fc206b93aeaeaaee7c22f2f4f9ed304876af51f955b9c0ab2e99008d56023a28fa76aafaf39caa1617069c92d92667aed016a203db0d3cb", @nested={0x4, 0xd}, @generic="9d6b03bc76d119afeaef75666b98316b8709450e38ffdc45ecc118e2d9e71a2b959ac681206909cad82c1be4d77c2877e0322c3ac7939f9571208d147148355ff56a18636f653e", @generic, @nested={0x4, 0xfb}, @nested={0x4, 0x8c}, @nested={0x4, 0x7e}]}, @nested={0xb8, 0xe7, 0x0, 0x1, [@nested={0x4, 0x24}, @nested={0x4, 0x52}, @generic="8d424529407a34ade26a3c424207c7f60ab59b31525113e0d8a88d40791dca0baa71ad813940acd9853f62420cdc0e5c7251b287f7e3deb1d9f46fe51c1656a685c1854fe6aa6cc35f1231bfc773f6c9dbf64667", @generic="8ada72e33dfac369015a1e8044ccb98d69d73c74fa9016a2979bfc32556c1810b09f65f4d01e123049b11db59ef9f72cbd21d698d906ae968a292325b42e1677f4f041c24f8a4b883ed74f42422b470d68a671d44e90f59c"]}, @generic="1a9fbcdf67695d7349950658c98042f606451b502f2972005d37c5b97ad0690bf92d13741f54d2164f3269e3a1a72e8339faed95813f88733499abce549cda329dcc887f33", @typed={0x8, 0x136, 0x0, 0x0, @pid}, @typed={0x8, 0xc0, 0x0, 0x0, @u32=0x40}]}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x1f20, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x24c, 0x2, "4fdafa4fc987ff1fd9dd127187d3e75532810587cf14059e965897e48ecbf01771f96fe8f580bfee2ebbeb5359f5c0e9d3cd397cafef0c219d00fbfff21daac52ae8b5797c53bb9ae7ac8028560c099e9d6b75d7148b2ebf626cad0b09fcde31744ce5ed97cb30448cccb76e614ba13d12b42d898f3a1a8498ac71ffc4162aa048b80c70bead8856a7dbf48c41c867fbda3a5ebe452caff601d9e4a411b499c3cf9b99f2e0f5ba82bcc75add88667cd4f179acaef8bb45f54e066ffdaceaf9eb030bb0f95c6616d16dfe68ff5366c5e695e83c70a3be599cf07b88618281c9b9157a0781f536170aec65fb34e085aebabc6fde678fa4efe847608beb72b99965d0c39ec72e5744286c050aa318b4941c44a5150953cdc19c41494a1a968cca89eab83d30e9e9647f39959d7303e358335d9a3aea1ca263292a71fef21a50ff7684051f8b8f8fc8b5afdd7919cafec71b72ab21f62555d9fafc29b95c37b27f5a51246358b5c665222e4788c461b082a0b7c4328f5a5b2a43754c932a652b2697837ad80ae119148d67d5a63569c57149208c85c5fd2785c4caa16b0a2ed863642d30a776cef5cb15ead2f8f6d45b66b7796d95911e9d17911a95cd0973128fa0f9a6a7c326ecab87b89e91ba85ebc2482d4636f806c50c87a5bc8f5d9b425c93fd542e560f609dc0064eefd1f789da933957700dc6108746335e65596ba63f288a267bd795a3190f3c1977db1edc9d3a0dff47d8c11bedc668f4793e3cc482e9b81fd7b3d6db4df4f043d661cbec32df523fd1deea3db3a4a1a67de9c74c0ccb38bc8bb6784b5c02"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x893, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x41d, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x838, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x7dc, 0x2, "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"}]}, @NL80211_ATTR_MBSSID_CONFIG={0x30, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x10}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x3}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x3a}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_MLO_TTLM_ULINK={0x13, 0x149, "698f78e975b70b3dc493c9a3a51ccc"}, @NL80211_ATTR_CSA_IES={0x8a, 0xb9, 0x0, 0x1, [@generic="e0c42782c84830501436cdba7bc67c704a140d66ccb6f6c2e66948ace090cc70b1a0ebe37960c0742168a6f9f0c2975810b3785038297778cac27454fe812cc39e964b50f6b603f7a268e9b84b05c949718bf89508ede4a29e90d6dd3bad6df2a109ce3c708a1ad6376ebbeefe29e3cd7aa4c9e3674aea5f9ec09823fe9a9b6c95b5a70d3bf4"]}]}, 0x21f4}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 1.220615551s ago: executing program 1 (id=4039): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x200}, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) pread64$auto(r2, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000280)='/o1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xee\xc2\xdd\xa7\"_p(r\xea\xf6?F\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\a\x00U\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.Oz#\v\x00\x00\x008@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7s\f\xaeA\xd7lD\x97)}\xfaK\xdfa\x1d\xeb\xb5\x959\"\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, 0x0, 0x5) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x48) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port6/power/autosuspend_delay_ms\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x3ff, 0xffffffffffff0001, 0x8001) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r6) sendmsg$auto_ILA_CMD_DEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x1, 0x70bd26, 0x6}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) madvise$auto(0x0, 0x53, 0x9) 958.326863ms ago: executing program 4 (id=4040): mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x2, 0x88) setsockopt$auto(r0, 0x11, 0x65, 0x0, 0x8) 696.644598ms ago: executing program 4 (id=4041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') sendmsg$auto_NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004880) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050725bd61001cfebbc92109"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 322.812335ms ago: executing program 4 (id=4042): openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x81) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 0s ago: executing program 2 (id=4043): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) (async) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/ifalias\x00', 0x1afac3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) (async) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk_dest\x00', 0x121082, 0x0) (async, rerun: 64) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f00000000c0), 0x8, &(0x7f00000000c0)={&(0x7f0000000480)="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", 0x1}, 0xa55d, &(0x7f00000003c0)="3bbc7134e899064172aa0c2b5f11481633db364335465a092343ffea847f09f0ee8b0f1f7d619527c52f4ebb97", 0x9, 0x6}, 0x4}, 0x2, 0x8001, &(0x7f0000000440)={0x8, 0x2}) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async, rerun: 64) socket(0x23, 0x5, 0x7) (rerun: 64) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) (async, rerun: 64) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) (async, rerun: 64) read$auto(r3, 0x0, 0xffffffff) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/admmidi2\x00', 0x105002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) (async) socket(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): le+0x55/0x1e0 [ 584.318090][T14271] alloc_file_pseudo+0x13a/0x230 [ 584.318129][T14271] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 584.318165][T14271] ? alloc_fd+0x471/0x7d0 [ 584.318197][T14271] sock_alloc_file+0x50/0x210 [ 584.318234][T14271] __sys_socket+0x1c0/0x260 [ 584.318259][T14271] ? __pfx___sys_socket+0x10/0x10 [ 584.318284][T14271] ? xfd_validate_state+0x61/0x180 [ 584.318325][T14271] __x64_sys_socket+0x72/0xb0 [ 584.318351][T14271] ? lockdep_hardirqs_on+0x7c/0x110 [ 584.318384][T14271] do_syscall_64+0xcd/0x490 [ 584.318436][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.318463][T14271] RIP: 0033:0x7f2edb58eb69 [ 584.318483][T14271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.318509][T14271] RSP: 002b:00007f2edc378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 584.318533][T14271] RAX: ffffffffffffffda RBX: 00007f2edb7b5fa0 RCX: 00007f2edb58eb69 [ 584.318550][T14271] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 584.318566][T14271] RBP: 00007f2edb611df1 R08: 0000000000000000 R09: 0000000000000000 [ 584.318581][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.318597][T14271] R13: 0000000000000000 R14: 00007f2edb7b5fa0 R15: 00007ffe7e1543d8 [ 584.318631][T14271] [ 585.271286][T14286] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 586.286954][T14306] ICMPv6: process `syz.4.1551' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 589.767249][T14366] sd 0:0:1:0: PR command failed: 1026 [ 589.795532][T14366] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 589.908511][T14366] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 591.121229][T14374] Line length is too long: Should be less than 4094 [ 591.616429][T14401] sd 0:0:1:0: PR command failed: 1026 [ 591.643680][T14401] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 591.720331][T14401] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 592.007850][T14403] netlink: 'syz.2.1566': attribute type 16 has an invalid length. [ 592.029972][T14403] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1566'. [ 592.048887][T14403] veth1_macvtap: left promiscuous mode [ 592.505383][T14417] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1572'. [ 592.648659][T14420] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1572'. [ 592.757037][T14423] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1572'. [ 592.759085][T14426] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1572'. [ 593.204898][T14431] blktrace: Concurrent blktraces are not allowed on loop2 [ 593.365038][T14443] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 594.763816][T14468] sd 0:0:1:0: PR command failed: 1026 [ 594.785401][T14468] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 594.837839][T14468] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 594.972814][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 594.982283][T14470] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 595.054205][T14470] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 595.980303][T14496] FAULT_INJECTION: forcing a failure. [ 595.980303][T14496] name failslab, interval 1, probability 0, space 0, times 0 [ 596.016400][T14496] CPU: 1 UID: 0 PID: 14496 Comm: syz.2.1591 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 596.016452][T14496] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 596.016462][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.016478][T14496] Call Trace: [ 596.016487][T14496] [ 596.016496][T14496] dump_stack_lvl+0x16c/0x1f0 [ 596.016539][T14496] should_fail_ex+0x512/0x640 [ 596.016563][T14496] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 596.016597][T14496] should_failslab+0xc2/0x120 [ 596.016629][T14496] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 596.016671][T14496] ? __kernfs_new_node+0xd2/0x8e0 [ 596.016708][T14496] __kernfs_new_node+0xd2/0x8e0 [ 596.016744][T14496] ? __pfx___kernfs_new_node+0x10/0x10 [ 596.016784][T14496] ? find_held_lock+0x2b/0x80 [ 596.016809][T14496] ? kernfs_root+0xee/0x2a0 [ 596.016845][T14496] kernfs_new_node+0x13c/0x1e0 [ 596.016885][T14496] __kernfs_create_file+0x53/0x350 [ 596.016913][T14496] sysfs_add_file_mode_ns+0x207/0x3c0 [ 596.016951][T14496] internal_create_group+0x578/0xf30 [ 596.016991][T14496] ? __pfx_internal_create_group+0x10/0x10 [ 596.017027][T14496] ? kernfs_create_link+0x1bd/0x240 [ 596.017056][T14496] internal_create_groups+0x9d/0x150 [ 596.017091][T14496] device_add+0xf30/0x1a70 [ 596.017122][T14496] ? __pfx_device_add+0x10/0x10 [ 596.017150][T14496] ? lockdep_init_map_type+0x5c/0x280 [ 596.017185][T14496] ? __init_waitqueue_head+0xca/0x150 [ 596.017231][T14496] netdev_register_kobject+0x1a9/0x3d0 [ 596.017263][T14496] register_netdevice+0x13dc/0x2270 [ 596.017308][T14496] ? __pfx_register_netdevice+0x10/0x10 [ 596.017355][T14496] ? __pfx_loopback_net_init+0x10/0x10 [ 596.017387][T14496] register_netdev+0x34/0x50 [ 596.017421][T14496] loopback_net_init+0x7a/0x170 [ 596.017452][T14496] ? __pfx_loopback_net_init+0x10/0x10 [ 596.017480][T14496] ops_init+0x1e2/0x5f0 [ 596.017520][T14496] setup_net+0x10f/0x380 [ 596.017553][T14496] ? lockdep_init_map_type+0x5c/0x280 [ 596.017586][T14496] ? __pfx_setup_net+0x10/0x10 [ 596.017623][T14496] ? debug_mutex_init+0x37/0x70 [ 596.017671][T14496] copy_net_ns+0x2a6/0x5f0 [ 596.017696][T14496] create_new_namespaces+0x3ea/0xa90 [ 596.017730][T14496] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 596.017760][T14496] ksys_unshare+0x45b/0xa40 [ 596.017796][T14496] ? __pfx_ksys_unshare+0x10/0x10 [ 596.017829][T14496] ? xfd_validate_state+0x61/0x180 [ 596.017873][T14496] __x64_sys_unshare+0x31/0x40 [ 596.017903][T14496] do_syscall_64+0xcd/0x490 [ 596.017940][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.017963][T14496] RIP: 0033:0x7f9c9f78eb69 [ 596.017982][T14496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.018003][T14496] RSP: 002b:00007f9ca0583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 596.018026][T14496] RAX: ffffffffffffffda RBX: 00007f9c9f9b5fa0 RCX: 00007f9c9f78eb69 [ 596.018042][T14496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 596.018055][T14496] RBP: 00007f9c9f811df1 R08: 0000000000000000 R09: 0000000000000000 [ 596.018069][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.018082][T14496] R13: 0000000000000000 R14: 00007f9c9f9b5fa0 R15: 00007ffc3158fde8 [ 596.018112][T14496] [ 596.369641][T14501] random: crng reseeded on system resumption [ 598.373899][T14521] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 599.110897][T14540] serio: Serial port pty238 [ 600.398410][ T5848] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 600.978545][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 601.381380][T14597] serio: Serial port pty238 [ 601.389297][T14598] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 602.124177][ T30] audit: type=1800 audit(6138072036.578:24): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1616" name="features" dev="configfs" ino=46036 res=0 errno=0 [ 603.561054][T14645] serio: Serial port pty238 [ 604.368978][T14657] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 604.652858][T13717] Bluetooth: hci2: SCO packet too small [ 605.690938][T14694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 607.497942][T14715] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 607.561555][T14727] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 608.245416][T14740] random: crng reseeded on system resumption [ 608.372293][T14745] sd 0:0:1:0: PR command failed: 1026 [ 608.377776][T14745] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 609.113677][T14745] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 610.353174][ T8645] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.581159][T14737] Process accounting paused [ 611.126072][T14789] sd 0:0:1:0: PR command failed: 1026 [ 611.215241][T14789] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 611.222721][T14789] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 613.409982][T14838] sd 0:0:1:0: PR command failed: 1026 [ 613.440991][T14838] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 613.447758][T14838] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 614.972105][T14840] mkiss: ax0: crc mode is auto. [ 617.407988][ T30] audit: type=1800 audit(6138072051.868:25): pid=14916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1673" name="lu_gp_id" dev="configfs" ino=48206 res=0 errno=0 [ 618.547193][T14937] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 620.569611][T14971] netlink: set zone limit has 8 unknown bytes [ 620.923922][T13717] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 622.002691][T14999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'. [ 622.267205][T14970] kexec: Could not allocate control_code_buffer [ 622.426064][T15013] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 623.787459][T15030] serio: Serial port pty238 [ 623.892534][T15034] serio: Serial port pty238 [ 623.964555][T15037] FAULT_INJECTION: forcing a failure. [ 623.964555][T15037] name failslab, interval 1, probability 0, space 0, times 0 [ 623.993027][T15037] CPU: 1 UID: 0 PID: 15037 Comm: syz.1.1702 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 623.993077][T15037] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 623.993089][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.993110][T15037] Call Trace: [ 623.993119][T15037] [ 623.993130][T15037] dump_stack_lvl+0x16c/0x1f0 [ 623.993174][T15037] should_fail_ex+0x512/0x640 [ 623.993198][T15037] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 623.993232][T15037] should_failslab+0xc2/0x120 [ 623.993265][T15037] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 623.993296][T15037] ? security_file_alloc+0x34/0x2b0 [ 623.993329][T15037] security_file_alloc+0x34/0x2b0 [ 623.993359][T15037] init_file+0x93/0x4c0 [ 623.993393][T15037] alloc_empty_file+0x73/0x1e0 [ 623.993429][T15037] alloc_file_pseudo+0x13a/0x230 [ 623.993467][T15037] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 623.993503][T15037] ? security_inode_init_security_anon+0x79/0x240 [ 623.993549][T15037] __anon_inode_getfile+0xe8/0x280 [ 623.993583][T15037] new_userfaultfd+0x25e/0x3d0 [ 623.993620][T15037] __x64_sys_userfaultfd+0x4b/0xb0 [ 623.993660][T15037] do_syscall_64+0xcd/0x490 [ 623.993694][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.993716][T15037] RIP: 0033:0x7f2edb58eb69 [ 623.993736][T15037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.993761][T15037] RSP: 002b:00007f2edc378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 623.993787][T15037] RAX: ffffffffffffffda RBX: 00007f2edb7b5fa0 RCX: 00007f2edb58eb69 [ 623.993803][T15037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 623.993818][T15037] RBP: 00007f2edb611df1 R08: 0000000000000000 R09: 0000000000000000 [ 623.993834][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.993850][T15037] R13: 0000000000000000 R14: 00007f2edb7b5fa0 R15: 00007ffe7e1543d8 [ 623.993883][T15037] [ 624.490824][T15040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1704'. [ 624.507834][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.514901][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.800621][T15058] vhci_hcd: invalid port number 16 [ 624.821851][T15058] vhci_hcd: invalid port number 16 [ 626.862746][T15097] random: crng reseeded on system resumption [ 629.039038][ T30] audit: type=1806 audit(6138072063.458:26): xattr="." res=0 [ 630.177086][T15159] random: crng reseeded on system resumption [ 630.509250][ T30] audit: type=1800 audit(6138072064.968:27): pid=15162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1727" name="lu_gp_id" dev="configfs" ino=49604 res=0 errno=0 [ 632.742967][T15194] FAULT_INJECTION: forcing a failure. [ 632.742967][T15194] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.868573][T15194] CPU: 1 UID: 0 PID: 15194 Comm: syz.2.1732 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 632.868620][T15194] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 632.868630][T15194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.868643][T15194] Call Trace: [ 632.868649][T15194] [ 632.868658][T15194] dump_stack_lvl+0x16c/0x1f0 [ 632.868699][T15194] should_fail_ex+0x512/0x640 [ 632.868726][T15194] should_fail_alloc_page+0xe7/0x130 [ 632.868761][T15194] prepare_alloc_pages+0x3c2/0x610 [ 632.868798][T15194] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 632.868826][T15194] ? stack_trace_save+0x8e/0xc0 [ 632.868853][T15194] ? __pfx_stack_trace_save+0x10/0x10 [ 632.868887][T15194] ? stack_depot_save_flags+0x28/0xa40 [ 632.868918][T15194] ? kasan_save_stack+0x42/0x60 [ 632.868944][T15194] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 632.868971][T15194] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 632.868998][T15194] ? __get_vm_area_node+0x1ca/0x330 [ 632.869032][T15194] ? __bpf_map_area_alloc+0x12e/0x200 [ 632.869077][T15194] ? htab_map_alloc+0x44b/0x1570 [ 632.869119][T15194] ? map_create+0x58f/0x1db0 [ 632.869151][T15194] ? __sys_bpf+0x44d2/0x4de0 [ 632.869186][T15194] ? __x64_sys_bpf+0x78/0xc0 [ 632.869221][T15194] ? do_syscall_64+0xcd/0x490 [ 632.869256][T15194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.869295][T15194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 632.869334][T15194] ? policy_nodemask+0xea/0x4e0 [ 632.869368][T15194] alloc_pages_mpol+0x1fb/0x550 [ 632.869407][T15194] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 632.869450][T15194] alloc_pages_noprof+0x131/0x390 [ 632.869489][T15194] get_free_pages_noprof+0x10/0xb0 [ 632.869523][T15194] kasan_populate_vmalloc+0x89/0x1f0 [ 632.869558][T15194] alloc_vmap_area+0x959/0x29c0 [ 632.869604][T15194] ? __pfx_alloc_vmap_area+0x10/0x10 [ 632.869646][T15194] __get_vm_area_node+0x1ca/0x330 [ 632.869689][T15194] __vmalloc_node_range_noprof+0x271/0x14b0 [ 632.869730][T15194] ? htab_map_alloc+0x44b/0x1570 [ 632.869771][T15194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.869812][T15194] ? htab_map_alloc+0x44b/0x1570 [ 632.869852][T15194] ? mark_held_locks+0x49/0x80 [ 632.869887][T15194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.869928][T15194] ? pcpu_alloc_noprof+0x1f5/0x1470 [ 632.869967][T15194] ? htab_map_alloc+0x44b/0x1570 [ 632.870001][T15194] __bpf_map_area_alloc+0x12e/0x200 [ 632.870045][T15194] ? htab_map_alloc+0x44b/0x1570 [ 632.870088][T15194] htab_map_alloc+0x44b/0x1570 [ 632.870134][T15194] ? htab_map_alloc_check+0x2f2/0x430 [ 632.870177][T15194] map_create+0x58f/0x1db0 [ 632.870223][T15194] ? __pfx_map_create+0x10/0x10 [ 632.870253][T15194] ? __might_fault+0xe3/0x190 [ 632.870279][T15194] ? __might_fault+0xe3/0x190 [ 632.870303][T15194] ? __might_fault+0x13b/0x190 [ 632.870345][T15194] __sys_bpf+0x44d2/0x4de0 [ 632.870384][T15194] ? __pfx___sys_bpf+0x10/0x10 [ 632.870419][T15194] ? ksys_write+0x190/0x250 [ 632.870454][T15194] ? do_futex+0x122/0x350 [ 632.870486][T15194] ? __pfx_do_futex+0x10/0x10 [ 632.870531][T15194] ? fput+0x70/0xf0 [ 632.870564][T15194] ? xfd_validate_state+0x61/0x180 [ 632.870598][T15194] ? __pfx_ksys_write+0x10/0x10 [ 632.870632][T15194] __x64_sys_bpf+0x78/0xc0 [ 632.870668][T15194] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.870702][T15194] do_syscall_64+0xcd/0x490 [ 632.870740][T15194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.870766][T15194] RIP: 0033:0x7f9c9f78eb69 [ 632.870787][T15194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.870814][T15194] RSP: 002b:00007f9ca0562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.870839][T15194] RAX: ffffffffffffffda RBX: 00007f9c9f9b6080 RCX: 00007f9c9f78eb69 [ 632.870858][T15194] RDX: 0000000000000098 RSI: 0000200000000100 RDI: 0000000000000000 [ 632.870874][T15194] RBP: 00007f9c9f811df1 R08: 0000000000000000 R09: 0000000000000000 [ 632.870890][T15194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.870906][T15194] R13: 0000000000000000 R14: 00007f9c9f9b6080 R15: 00007ffc3158fde8 [ 632.870940][T15194] [ 632.981797][T13717] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 633.294356][T13717] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 633.309938][T13717] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 633.309993][T13717] Bluetooth: hci1: adv larger than maximum supported [ 633.319262][T13717] Bluetooth: hci1: Unknown advertising packet type: 0x7b [ 633.325994][T13717] Bluetooth: hci1: adv larger than maximum supported [ 633.337851][T13717] Bluetooth: hci1: Malformed LE Event: 0x0d [ 634.695685][T15226] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 634.705115][T15226] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 634.713757][T15226] memcg:ffff8880453ef401 [ 634.718175][T15226] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 634.725960][T15226] page_type: f5(slab) [ 634.730446][T15226] raw: 00fff00000000040 ffff88801d7a4500 ffffea0001ed2400 0000000000000002 [ 634.916491][T15226] raw: 0000000000000000 00000000000f000f 00000000f5000000 ffff8880453ef401 [ 634.930734][T15226] head: 00fff00000000040 ffff88801d7a4500 ffffea0001ed2400 0000000000000002 [ 634.940268][T15226] head: 0000000000000000 00000000000f000f 00000000f5000000 ffff8880453ef401 [ 634.949729][T15226] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 634.958665][T15226] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 634.967469][T15226] page dumped because: unmovable page [ 634.973242][T15226] page_owner tracks the page as allocated [ 634.979869][T15226] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12373, tgid 12373 (syz-executor), ts 495774484195, free_ts 495756268389 [ 635.002043][T15226] post_alloc_hook+0x1c0/0x230 [ 635.007116][T15226] get_page_from_freelist+0x132b/0x38e0 [ 635.012888][T15226] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 635.019085][T15226] alloc_pages_mpol+0x1fb/0x550 [ 635.024129][T15226] new_slab+0x247/0x330 [ 635.034340][T15226] ___slab_alloc+0xd1e/0x1780 [ 635.042082][T15226] __slab_alloc.constprop.0+0x56/0xb0 [ 635.048256][T15226] kmem_cache_alloc_noprof+0xef/0x3b0 [ 635.053750][T15226] sk_prot_alloc+0x60/0x2a0 [ 635.058738][T15226] sk_alloc+0x36/0xc20 [ 635.062830][T15226] unix_create1+0xa6/0x700 [ 635.067259][T15226] unix_create+0x110/0x270 [ 635.072270][T15226] __sock_create+0x335/0x8d0 [ 635.076979][T15226] __sys_socket+0x14d/0x260 [ 635.081608][T15226] __x64_sys_socket+0x72/0xb0 [ 635.086578][T15226] do_syscall_64+0xcd/0x490 [ 635.096732][T15226] page last free pid 12373 tgid 12373 stack trace: [ 635.105090][T15226] __free_frozen_pages+0x7d5/0x10f0 [ 635.110540][T15226] qlist_free_all+0x4d/0x120 [ 635.115365][T15226] kasan_quarantine_reduce+0x195/0x1e0 [ 635.141614][T15226] __kasan_slab_alloc+0x69/0x90 [ 635.172010][T15226] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 635.177979][T15226] kmalloc_reserve+0x18b/0x2c0 [ 635.210870][T15226] __alloc_skb+0x166/0x380 [ 635.236043][T15226] netlink_ack+0x15d/0xb80 [ 635.249059][T15226] netlink_rcv_skb+0x332/0x420 [ 635.264117][T15226] netlink_unicast+0x5aa/0x870 [ 635.274235][T15226] netlink_sendmsg+0x8d1/0xdd0 [ 635.290906][T15226] __sys_sendto+0x4a0/0x520 [ 635.299681][T15226] __x64_sys_sendto+0xe0/0x1c0 [ 635.311173][T15226] do_syscall_64+0xcd/0x490 [ 635.339084][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.164298][T15237] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 636.596947][T15243] sd 0:0:1:0: PR command failed: 1026 [ 636.602813][T15243] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 636.610283][T15243] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 636.997634][T15246] sd 0:0:1:0: PR command failed: 1026 [ 637.251692][T15246] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 637.258795][T15246] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 639.366078][T15282] FAULT_INJECTION: forcing a failure. [ 639.366078][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 639.428312][T15282] CPU: 0 UID: 0 PID: 15282 Comm: syz.1.1752 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 639.428359][T15282] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 639.428367][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.428380][T15282] Call Trace: [ 639.428386][T15282] [ 639.428391][T15282] dump_stack_lvl+0x16c/0x1f0 [ 639.428417][T15282] should_fail_ex+0x512/0x640 [ 639.428430][T15282] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 639.428448][T15282] should_failslab+0xc2/0x120 [ 639.428464][T15282] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 639.428485][T15282] ? mas_alloc_nodes+0x18b/0x8b0 [ 639.428505][T15282] mas_alloc_nodes+0x18b/0x8b0 [ 639.428526][T15282] mas_node_count_gfp+0x105/0x130 [ 639.428545][T15282] mas_preallocate+0x7e0/0xde0 [ 639.428561][T15282] ? __pfx_mas_preallocate+0x10/0x10 [ 639.428581][T15282] ? __pfx___might_resched+0x10/0x10 [ 639.428597][T15282] vma_link+0x135/0x6a0 [ 639.428611][T15282] ? anon_vma_clone+0x3fe/0x5c0 [ 639.428630][T15282] ? __pfx_vma_link+0x10/0x10 [ 639.428648][T15282] ? anon_vma_clone+0x405/0x5c0 [ 639.428665][T15282] copy_vma+0x6c2/0xaa0 [ 639.428682][T15282] ? __pfx_copy_vma+0x10/0x10 [ 639.428701][T15282] ? register_lock_class+0x41/0x4c0 [ 639.428726][T15282] ? rcu_is_watching+0x12/0xc0 [ 639.428738][T15282] ? finish_task_switch.isra.0+0x221/0xc10 [ 639.428753][T15282] copy_vma_and_data+0x1cf/0x790 [ 639.428769][T15282] ? __pfx_copy_vma_and_data+0x10/0x10 [ 639.428788][T15282] ? __vma_enter_locked+0x163/0x3f0 [ 639.428802][T15282] ? find_held_lock+0x2b/0x80 [ 639.428818][T15282] ? move_vma+0x536/0x1780 [ 639.428830][T15282] ? __vm_enough_memory+0x184/0x3f0 [ 639.428851][T15282] move_vma+0x548/0x1780 [ 639.428868][T15282] ? __pfx_move_vma+0x10/0x10 [ 639.428885][T15282] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 639.428903][T15282] ? cap_mmap_addr+0x4b/0x120 [ 639.428920][T15282] ? bpf_lsm_mmap_addr+0x9/0x10 [ 639.428937][T15282] ? security_mmap_addr+0x6c/0x1e0 [ 639.428950][T15282] ? __get_unmapped_area+0x267/0x440 [ 639.428978][T15282] ? vrm_set_new_addr+0x208/0x290 [ 639.428994][T15282] mremap_to+0x1b7/0x450 [ 639.429010][T15282] do_mremap+0x1004/0x1f80 [ 639.429032][T15282] ? __pfx_do_mremap+0x10/0x10 [ 639.429051][T15282] ? up_write+0x1b2/0x520 [ 639.429074][T15282] __do_sys_mremap+0x119/0x170 [ 639.429089][T15282] ? __pfx___do_sys_mremap+0x10/0x10 [ 639.429108][T15282] ? __x64_sys_futex+0x1e0/0x4c0 [ 639.429134][T15282] do_syscall_64+0xcd/0x490 [ 639.429154][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.429168][T15282] RIP: 0033:0x7f2edb58eb69 [ 639.429179][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.429193][T15282] RSP: 002b:00007f2edc378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 639.429207][T15282] RAX: ffffffffffffffda RBX: 00007f2edb7b5fa0 RCX: 00007f2edb58eb69 [ 639.429216][T15282] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 639.429224][T15282] RBP: 00007f2edb611df1 R08: 00007effffffb000 R09: 0000000000000000 [ 639.429232][T15282] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 639.429240][T15282] R13: 0000000000000000 R14: 00007f2edb7b5fa0 R15: 00007ffe7e1543d8 [ 639.429258][T15282] [ 640.171878][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 640.679172][T15305] Process accounting resumed [ 640.840807][T15309] serio: Serial port pty238 [ 641.305747][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 641.419473][T15317] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 641.639984][T15321] sd 0:0:1:0: PR command failed: 1026 [ 641.645524][T15321] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 642.126958][T15321] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 643.156752][T15350] serio: Serial port pty238 [ 644.555451][T15384] sd 0:0:1:0: PR command failed: 1026 [ 644.656199][T15384] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 644.663454][T15384] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 646.037289][T15393] Invalid ELF header magic: != ELF [ 646.056633][T15393] Invalid ELF header magic: != ELF [ 646.074537][T15393] Invalid ELF header magic: != ELF [ 646.092945][T15393] Invalid ELF header magic: != ELF [ 646.111659][T15393] Invalid ELF header magic: != ELF [ 646.130513][T15393] Invalid ELF header magic: != ELF [ 646.152998][T15393] Invalid ELF header magic: != ELF [ 646.175003][T15393] Invalid ELF header magic: != ELF [ 646.196728][T15393] Invalid ELF header magic: != ELF [ 646.218898][T15393] Invalid ELF header magic: != ELF [ 646.240635][T15393] Invalid ELF header magic: != ELF [ 646.261752][T15393] Invalid ELF header magic: != ELF [ 646.401486][T15393] Invalid ELF header magic: != ELF [ 646.415351][T15393] Invalid ELF header magic: != ELF [ 646.972231][T15421] random: crng reseeded on system resumption [ 647.192517][T15405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.211186][T15405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.777785][T15447] sd 0:0:1:0: PR command failed: 1026 [ 648.838493][T15447] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 648.845354][T15447] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 650.334836][T15474] netlink: 'syz.5.1791': attribute type 1 has an invalid length. [ 650.990782][T15489] ubi0: attaching mtd0 [ 651.021369][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1794'. [ 651.030381][T15489] ubi0: scanning is finished [ 651.030459][T15489] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 651.121617][T15490] veth0_macvtap: left promiscuous mode [ 651.355024][T15489] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 651.514698][T15496] FAULT_INJECTION: forcing a failure. [ 651.514698][T15496] name failslab, interval 1, probability 0, space 0, times 0 [ 651.527983][T15496] CPU: 0 UID: 0 PID: 15496 Comm: syz.2.1796 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 651.528011][T15496] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 651.528017][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.528026][T15496] Call Trace: [ 651.528031][T15496] [ 651.528036][T15496] dump_stack_lvl+0x16c/0x1f0 [ 651.528060][T15496] should_fail_ex+0x512/0x640 [ 651.528073][T15496] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 651.528092][T15496] should_failslab+0xc2/0x120 [ 651.528109][T15496] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 651.528127][T15496] ? lockdep_init_map_type+0x5c/0x280 [ 651.528144][T15496] ? __d_alloc+0x32/0xae0 [ 651.528162][T15496] __d_alloc+0x32/0xae0 [ 651.528178][T15496] d_alloc_pseudo+0x1c/0xc0 [ 651.528210][T15496] alloc_file_pseudo+0xcf/0x230 [ 651.528242][T15496] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 651.528274][T15496] ? alloc_fd+0x471/0x7d0 [ 651.528295][T15496] sock_alloc_file+0x50/0x210 [ 651.528315][T15496] __sys_socket+0x1c0/0x260 [ 651.528329][T15496] ? __pfx___sys_socket+0x10/0x10 [ 651.528343][T15496] ? xfd_validate_state+0x61/0x180 [ 651.528361][T15496] ? __task_pid_nr_ns+0x17c/0x500 [ 651.528382][T15496] __x64_sys_socket+0x72/0xb0 [ 651.528395][T15496] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.528412][T15496] do_syscall_64+0xcd/0x490 [ 651.528432][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.528445][T15496] RIP: 0033:0x7f9c9f78eb69 [ 651.528457][T15496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.528469][T15496] RSP: 002b:00007f9ca0583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 651.528482][T15496] RAX: ffffffffffffffda RBX: 00007f9c9f9b5fa0 RCX: 00007f9c9f78eb69 [ 651.528491][T15496] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 651.528499][T15496] RBP: 00007f9c9f811df1 R08: 0000000000000000 R09: 0000000000000000 [ 651.528507][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.528516][T15496] R13: 0000000000000000 R14: 00007f9c9f9b5fa0 R15: 00007ffc3158fde8 [ 651.528533][T15496] [ 651.812258][T15496] zram0: detected capacity change from 0 to 8 [ 652.122985][T15506] random: crng reseeded on system resumption [ 652.130624][T15507] sd 0:0:1:0: PR command failed: 1026 [ 652.245933][T15507] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 652.254560][T15507] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 653.486067][T15531] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 653.660307][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 654.035165][T15528] could not allocate digest TFM handle [ 654.289780][T15555] serio: Serial port pty238 [ 655.042253][T15579] openvswitch: netlink: Flow key attr not present in new flow. [ 655.881080][T15601] serio: Serial port pty238 [ 655.884543][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 656.082072][T15612] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 657.175710][T15645] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1828'. [ 657.201316][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 657.396721][T15652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'. [ 657.789953][T15652] team0: Port device team_slave_1 removed [ 658.172062][T15634] kexec: Could not allocate control_code_buffer [ 658.340312][T15674] phram: parameter too long [ 658.521408][T15681] sd 0:0:1:0: PR command failed: 1026 [ 658.601789][T15681] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 658.656233][T15681] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 661.259498][T15751] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 662.389693][T13717] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 662.795510][T15779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 663.170941][T15788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 663.396319][T15800] netlink: 'syz.5.1861': attribute type 27 has an invalid length. [ 663.443888][T15800] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1861'. [ 664.813030][T15822] FAULT_INJECTION: forcing a failure. [ 664.813030][T15822] name fail_futex, interval 1, probability 0, space 0, times 0 [ 664.826670][T15822] CPU: 1 UID: 1 PID: 15822 Comm: syz.5.1865 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 664.826699][T15822] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 664.826705][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.826714][T15822] Call Trace: [ 664.826720][T15822] [ 664.826725][T15822] dump_stack_lvl+0x16c/0x1f0 [ 664.826750][T15822] should_fail_ex+0x512/0x640 [ 664.826766][T15822] get_futex_key+0x1d0/0x1540 [ 664.826784][T15822] ? __pfx_get_futex_key+0x10/0x10 [ 664.826805][T15822] futex_wait_setup+0x9d/0x550 [ 664.826829][T15822] __futex_wait+0x194/0x2f0 [ 664.826848][T15822] ? __pfx___futex_wait+0x10/0x10 [ 664.826869][T15822] ? __pfx_futex_wake_mark+0x10/0x10 [ 664.826895][T15822] ? futex_private_hash_put+0x176/0x300 [ 664.826912][T15822] ? futex_private_hash_put+0x18a/0x300 [ 664.826928][T15822] futex_wait+0xe8/0x380 [ 664.826945][T15822] ? __pfx_futex_wait+0x10/0x10 [ 664.826972][T15822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 664.826994][T15822] do_futex+0x229/0x350 [ 664.827010][T15822] ? __pfx_do_futex+0x10/0x10 [ 664.827030][T15822] __x64_sys_futex+0x1e0/0x4c0 [ 664.827048][T15822] ? fput+0x70/0xf0 [ 664.827065][T15822] ? __pfx___x64_sys_futex+0x10/0x10 [ 664.827080][T15822] ? xfd_validate_state+0x61/0x180 [ 664.827098][T15822] ? __pfx_ksys_write+0x10/0x10 [ 664.827126][T15822] do_syscall_64+0xcd/0x490 [ 664.827147][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.827161][T15822] RIP: 0033:0x7f352f58eb69 [ 664.827174][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.827186][T15822] RSP: 002b:00007f35304730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 664.827199][T15822] RAX: ffffffffffffffda RBX: 00007f352f7b6088 RCX: 00007f352f58eb69 [ 664.827208][T15822] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f352f7b6088 [ 664.827216][T15822] RBP: 00007f352f7b6080 R08: 0000000000000000 R09: 0000000000000000 [ 664.827225][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f352f7b608c [ 664.827233][T15822] R13: 0000000000000000 R14: 00007ffe5fec3710 R15: 00007ffe5fec37f8 [ 664.827251][T15822] [ 665.047707][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.506116][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 665.639343][T15834] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 665.666633][T15834] CIFS mount error: No usable UNC path provided in device string! [ 665.666633][T15834] [ 665.677876][T15834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 665.771724][T13717] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 665.956131][T15839] program syz.4.1870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.360228][T15860] serio: Serial port pty238 [ 668.233398][T15879] mkiss: ax0: crc mode is auto. [ 670.145419][T15913] serio: Serial port pty238 [ 670.673764][T15927] ICMPv6: process `syz.1.1889' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 672.232492][T15950] Process accounting paused [ 672.297096][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1893'. [ 674.561489][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 674.841946][T16001] zswap: compressor not available [ 675.400697][T16050] netlink: 'syz.5.1908': attribute type 10 has an invalid length. [ 675.492698][T16050] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1908'. [ 677.161321][T16094] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 677.296033][T16099] Invalid ELF header magic: != ELF [ 677.717882][T16095] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 677.724761][T16095] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 678.164070][T16112] sd 0:0:1:0: PR command failed: 1026 [ 678.185091][T16112] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 678.203038][T16112] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 678.601316][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.677940][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.728450][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.758844][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.800724][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.848702][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.857363][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.866163][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.880694][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 678.889045][T16121] futex_wake_op: syz.1.1926 tries to shift op by -9; fix this program [ 683.545133][T16182] FAULT_INJECTION: forcing a failure. [ 683.545133][T16182] name fail_futex, interval 1, probability 0, space 0, times 0 [ 683.564023][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.2.1934 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 683.564068][T16182] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 683.564078][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.564092][T16182] Call Trace: [ 683.564099][T16182] [ 683.564108][T16182] dump_stack_lvl+0x16c/0x1f0 [ 683.564147][T16182] should_fail_ex+0x512/0x640 [ 683.564175][T16182] get_futex_key+0x1d0/0x1540 [ 683.564205][T16182] ? find_held_lock+0x2b/0x80 [ 683.564228][T16182] ? __pfx_get_futex_key+0x10/0x10 [ 683.564257][T16182] ? __mutex_trylock_common+0xe9/0x250 [ 683.564296][T16182] futex_wake+0xea/0x530 [ 683.564332][T16182] ? __pfx_futex_wake+0x10/0x10 [ 683.564361][T16182] ? __lock_acquire+0xb8a/0x1c90 [ 683.564406][T16182] do_futex+0x1e3/0x350 [ 683.564435][T16182] ? __pfx_do_futex+0x10/0x10 [ 683.564462][T16182] ? __might_fault+0xe3/0x190 [ 683.564498][T16182] mm_release+0x24e/0x300 [ 683.564527][T16182] do_exit+0x68e/0x2bf0 [ 683.564564][T16182] ? __pfx_do_exit+0x10/0x10 [ 683.564593][T16182] ? do_raw_spin_lock+0x12c/0x2b0 [ 683.564623][T16182] ? find_held_lock+0x2b/0x80 [ 683.564649][T16182] do_group_exit+0xd3/0x2a0 [ 683.564682][T16182] get_signal+0x2673/0x26d0 [ 683.564721][T16182] ? __pfx_get_signal+0x10/0x10 [ 683.564747][T16182] ? do_futex+0x122/0x350 [ 683.564775][T16182] ? __pfx_do_futex+0x10/0x10 [ 683.564806][T16182] arch_do_signal_or_restart+0x8f/0x790 [ 683.564839][T16182] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 683.564888][T16182] exit_to_user_mode_loop+0x84/0x110 [ 683.564923][T16182] do_syscall_64+0x3f6/0x490 [ 683.564970][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.564994][T16182] RIP: 0033:0x7f9c9f78eb69 [ 683.565013][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.565036][T16182] RSP: 002b:00007f9ca05830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 683.565059][T16182] RAX: fffffffffffffe00 RBX: 00007f9c9f9b5fa8 RCX: 00007f9c9f78eb69 [ 683.565081][T16182] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c9f9b5fa8 [ 683.565095][T16182] RBP: 00007f9c9f9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 683.565110][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c9f9b5fac [ 683.565124][T16182] R13: 0000000000000000 R14: 00007ffc3158fd00 R15: 00007ffc3158fde8 [ 683.565156][T16182] [ 685.942450][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949139][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.787174][T16244] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1949'. [ 687.681858][T16253] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 687.909180][T16257] bcache: register_bcache() error : failed to open device [ 688.076952][T16258] sd 0:0:1:0: PR command failed: 1026 [ 688.127190][T16258] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 688.381775][T16258] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 691.374778][T16285] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1957'. [ 692.729325][T16315] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 693.296696][T16255] syz.5.1951: vmalloc error: size 8003584, failed to allocated page array size 15632, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 693.322789][T16255] CPU: 1 UID: 0 PID: 16255 Comm: syz.5.1951 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 693.322817][T16255] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 693.322823][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.322831][T16255] Call Trace: [ 693.322836][T16255] [ 693.322841][T16255] dump_stack_lvl+0x16c/0x1f0 [ 693.322866][T16255] warn_alloc+0x248/0x3a0 [ 693.322883][T16255] ? __pfx_warn_alloc+0x10/0x10 [ 693.322905][T16255] ? __do_sys_listmount+0x1c2/0xec0 [ 693.322926][T16255] ? __vmalloc_node_noprof+0xad/0xf0 [ 693.322950][T16255] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 693.322977][T16255] ? __do_sys_listmount+0x1c2/0xec0 [ 693.323003][T16255] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 693.323026][T16255] ? ___kmalloc_large_node+0xed/0x160 [ 693.323050][T16255] __kvmalloc_node_noprof+0x30a/0x620 [ 693.323065][T16255] ? __do_sys_listmount+0x1c2/0xec0 [ 693.323086][T16255] ? __do_sys_listmount+0x1c2/0xec0 [ 693.323110][T16255] ? __do_sys_listmount+0x1c2/0xec0 [ 693.323130][T16255] __do_sys_listmount+0x1c2/0xec0 [ 693.323154][T16255] ? __x64_sys_futex+0x1e0/0x4c0 [ 693.323170][T16255] ? __x64_sys_futex+0x1e9/0x4c0 [ 693.323187][T16255] ? __pfx___do_sys_listmount+0x10/0x10 [ 693.323207][T16255] ? fput+0x70/0xf0 [ 693.323232][T16255] do_syscall_64+0xcd/0x490 [ 693.323262][T16255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.323276][T16255] RIP: 0033:0x7f352f58eb69 [ 693.323289][T16255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.323303][T16255] RSP: 002b:00007f3530494038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 693.323318][T16255] RAX: ffffffffffffffda RBX: 00007f352f7b5fa0 RCX: 00007f352f58eb69 [ 693.323327][T16255] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 693.323336][T16255] RBP: 00007f352f611df1 R08: 0000000000000000 R09: 0000000000000000 [ 693.323345][T16255] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 693.323353][T16255] R13: 0000000000000000 R14: 00007f352f7b5fa0 R15: 00007ffe5fec37f8 [ 693.323379][T16255] [ 693.323384][T16255] Mem-Info: [ 693.778010][T16255] active_anon:13243 inactive_anon:89919 isolated_anon:101 [ 693.778010][T16255] active_file:17089 inactive_file:39103 isolated_file:20 [ 693.778010][T16255] unevictable:768 dirty:351 writeback:0 [ 693.778010][T16255] slab_reclaimable:12674 slab_unreclaimable:98001 [ 693.778010][T16255] mapped:49109 shmem:79419 pagetables:1880 [ 693.778010][T16255] sec_pagetables:0 bounce:0 [ 693.778010][T16255] kernel_misc_reclaimable:0 [ 693.778010][T16255] free:1199198 free_pcp:31988 free_cma:0 [ 694.118074][T16338] FAULT_INJECTION: forcing a failure. [ 694.118074][T16338] name fail_futex, interval 1, probability 0, space 0, times 0 [ 694.131463][T16338] CPU: 1 UID: 0 PID: 16338 Comm: syz.2.1965 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 694.131512][T16338] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 694.131523][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.131539][T16338] Call Trace: [ 694.131548][T16338] [ 694.131557][T16338] dump_stack_lvl+0x16c/0x1f0 [ 694.131599][T16338] should_fail_ex+0x512/0x640 [ 694.131629][T16338] get_futex_key+0x1d0/0x1540 [ 694.131663][T16338] ? __pfx_get_futex_key+0x10/0x10 [ 694.131693][T16338] ? _raw_write_unlock+0x28/0x50 [ 694.131728][T16338] ? keyring_instantiate+0x109/0x300 [ 694.131767][T16338] futex_wake+0xea/0x530 [ 694.131804][T16338] ? __pfx_futex_wake+0x10/0x10 [ 694.131837][T16338] ? key_alloc+0xbd4/0x1330 [ 694.131867][T16338] ? key_instantiate_and_link+0x398/0x4b0 [ 694.131896][T16338] ? key_alloc+0xac0/0x1330 [ 694.131928][T16338] do_futex+0x1e3/0x350 [ 694.131958][T16338] ? __pfx_do_futex+0x10/0x10 [ 694.131999][T16338] __x64_sys_futex+0x1e0/0x4c0 [ 694.132036][T16338] ? __pfx___x64_sys_futex+0x10/0x10 [ 694.132073][T16338] ? keyctl_set_reqkey_keyring+0x11c/0x1c0 [ 694.132118][T16338] do_syscall_64+0xcd/0x490 [ 694.132156][T16338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.132182][T16338] RIP: 0033:0x7f9c9f78eb69 [ 694.132203][T16338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.132227][T16338] RSP: 002b:00007f9ca05830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 694.132251][T16338] RAX: ffffffffffffffda RBX: 00007f9c9f9b5fa8 RCX: 00007f9c9f78eb69 [ 694.132268][T16338] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c9f9b5fac [ 694.132284][T16338] RBP: 00007f9c9f9b5fa0 R08: 00007f9ca0584000 R09: 0000000000000000 [ 694.132300][T16338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c9f9b5fac [ 694.132316][T16338] R13: 0000000000000000 R14: 00007ffc3158fd00 R15: 00007ffc3158fde8 [ 694.132350][T16338] [ 694.342545][T16255] Node 0 active_anon:52972kB inactive_anon:374428kB active_file:67324kB inactive_file:156452kB unevictable:1536kB isolated(anon):224kB isolated(file):0kB mapped:202580kB dirty:1328kB writeback:0kB shmem:322244kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:79872kB kernel_stack:12720kB pagetables:7620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 694.663710][T16255] Node 1 active_anon:0kB inactive_anon:0kB active_file:1024kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1084kB dirty:188kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 694.988027][T16255] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.318265][T16255] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 695.324079][T16255] Node 0 DMA32 free:910496kB boost:0kB min:34324kB low:42904kB high:51484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53020kB inactive_anon:384572kB active_file:65692kB inactive_file:156264kB unevictable:1536kB writepending:1484kB present:3129332kB managed:2540124kB mlocked:0kB bounce:0kB free_pcp:67280kB local_pcp:21288kB free_cma:0kB [ 695.548346][T16255] lowmem_reserve[]: 0 0 1 1 1 [ 695.553329][T16255] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1264kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.730918][T16255] lowmem_reserve[]: 0 0 0 0 0 [ 695.833955][T16255] Node 1 Normal free:3845500kB boost:0kB min:55556kB low:69444kB high:83332kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:1024kB inactive_file:192kB unevictable:1536kB writepending:188kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:62584kB local_pcp:32152kB free_cma:0kB [ 696.046861][T16255] lowmem_reserve[]: 0 0 0 0 0 [ 696.168841][T16358] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 696.322069][T16255] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 696.493392][T16255] Node 0 DMA32: 0*4kB 951*8kB (UM) 589*16kB (UME) 446*32kB (UE) 422*64kB (U) 424*128kB (U) 334*256kB (UM) 288*512kB (UM) 199*1024kB (UM) 5*2048kB (ME) 83*4096kB (M) = 899528kB [ 696.550170][T16366] FAULT_INJECTION: forcing a failure. [ 696.550170][T16366] name failslab, interval 1, probability 0, space 0, times 0 [ 696.562985][T16366] CPU: 1 UID: 0 PID: 16366 Comm: syz.4.1970 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 696.563045][T16366] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 696.563057][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.563073][T16366] Call Trace: [ 696.563082][T16366] [ 696.563092][T16366] dump_stack_lvl+0x16c/0x1f0 [ 696.563133][T16366] should_fail_ex+0x512/0x640 [ 696.563157][T16366] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 696.563191][T16366] should_failslab+0xc2/0x120 [ 696.563224][T16366] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 696.563254][T16366] ? key_alloc+0x3e0/0x1330 [ 696.563286][T16366] key_alloc+0x3e0/0x1330 [ 696.563322][T16366] ? __pfx_key_alloc+0x10/0x10 [ 696.563346][T16366] ? __kmalloc_noprof+0x242/0x510 [ 696.563383][T16366] keyring_alloc+0x44/0xc0 [ 696.563416][T16366] install_thread_keyring_to_cred+0xc1/0x140 [ 696.563458][T16366] keyctl_set_reqkey_keyring+0xcf/0x1c0 [ 696.563498][T16366] __do_sys_keyctl+0x6d/0x590 [ 696.563534][T16366] do_syscall_64+0xcd/0x490 [ 696.563570][T16366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.563593][T16366] RIP: 0033:0x7f72ceb8eb69 [ 696.563613][T16366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.563636][T16366] RSP: 002b:00007f72cc9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 696.563661][T16366] RAX: ffffffffffffffda RBX: 00007f72cedb6080 RCX: 00007f72ceb8eb69 [ 696.563678][T16366] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 696.563692][T16366] RBP: 00007f72cec11df1 R08: 0000000000000008 R09: 0000000000000000 [ 696.563707][T16366] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 696.563723][T16366] R13: 0000000000000000 R14: 00007f72cedb6080 R15: 00007fff7842fd78 [ 696.563758][T16366] [ 696.988239][T16255] Node 0 Normal: 2*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 697.088286][T16255] Node 1 Normal: 7*4kB (UME) 6*8kB (UE) 12*16kB (UE) 11*32kB (UE) 23*64kB (UME) 13*128kB (UME) 14*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 933*4096kB (UM) = 3845804kB [ 697.287191][T16255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.326467][T16376] serio: Serial port pty238 [ 697.429893][T16255] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 697.474426][T16255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.540592][T16255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.582992][T16255] 149726 total pagecache pages [ 697.602462][T16255] 13 pages in swap cache [ 697.623653][T16255] Free swap = 0kB [ 697.651157][T16255] Total swap = 124996kB [ 697.680516][T16255] 2097051 pages RAM [ 697.711962][T16255] 0 pages HighMem/MovableOnly [ 697.745711][T16255] 430042 pages reserved [ 697.781897][T16255] 0 pages cma reserved [ 698.654146][T16381] netlink: 'syz.1.1975': attribute type 5 has an invalid length. [ 699.574838][T16392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 699.596084][T16393] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1977'. [ 700.466503][T16394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 700.741341][T16411] sd 0:0:1:0: PR command failed: 1026 [ 700.746899][T16411] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 700.754090][T16411] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 702.272778][T16429] Process accounting resumed [ 704.545355][T13717] Bluetooth: hci2: unexpected event 0x3d length: 3 < 14 [ 710.727089][T16565] raw_sendmsg: syz.5.2005 forgot to set AF_INET. Fix it! [ 710.845031][T16569] ptp ptp0: new virtual clock ptp1 [ 710.860126][T16569] ptp ptp0: new virtual clock ptp2 [ 710.883659][T16569] ptp ptp0: new virtual clock ptp3 [ 710.898560][T16569] ptp ptp0: guarantee physical clock free running [ 711.525082][T16587] sd 0:0:1:0: PR command failed: 1026 [ 711.676653][T16587] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 711.768403][T16587] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 712.459165][T16600] FAULT_INJECTION: forcing a failure. [ 712.459165][T16600] name failslab, interval 1, probability 0, space 0, times 0 [ 712.487458][T16600] CPU: 0 UID: 0 PID: 16600 Comm: syz.5.2013 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 712.487505][T16600] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 712.487516][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.487529][T16600] Call Trace: [ 712.487536][T16600] [ 712.487545][T16600] dump_stack_lvl+0x16c/0x1f0 [ 712.487588][T16600] should_fail_ex+0x512/0x640 [ 712.487611][T16600] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 712.487641][T16600] should_failslab+0xc2/0x120 [ 712.487674][T16600] __kmalloc_cache_noprof+0x6a/0x3e0 [ 712.487699][T16600] ? kvm_dev_ioctl+0xa7a/0x1af0 [ 712.487729][T16600] kvm_dev_ioctl+0xa7a/0x1af0 [ 712.487760][T16600] ? find_held_lock+0x2b/0x80 [ 712.487783][T16600] ? hook_file_ioctl_common+0x145/0x410 [ 712.487821][T16600] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 712.487850][T16600] ? __fget_files+0x20e/0x3c0 [ 712.487881][T16600] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 712.487909][T16600] __x64_sys_ioctl+0x18b/0x210 [ 712.487948][T16600] do_syscall_64+0xcd/0x490 [ 712.487984][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.488011][T16600] RIP: 0033:0x7f352f58eb69 [ 712.488047][T16600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.488074][T16600] RSP: 002b:00007f3530473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.488100][T16600] RAX: ffffffffffffffda RBX: 00007f352f7b6080 RCX: 00007f352f58eb69 [ 712.488118][T16600] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 712.488133][T16600] RBP: 00007f352f611df1 R08: 0000000000000000 R09: 0000000000000000 [ 712.488148][T16600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.488165][T16600] R13: 0000000000000000 R14: 00007f352f7b6080 R15: 00007ffe5fec37f8 [ 712.488194][T16600] [ 712.893161][T16609] blktrace: Concurrent blktraces are not allowed on loop2 [ 716.043067][T16656] sd 0:0:1:0: PR command failed: 1026 [ 716.104911][T16656] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 716.303690][T16656] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 716.483960][T16663] sp0: Synchronizing with TNC [ 717.108722][T16681] random: crng reseeded on system resumption [ 717.449408][T16689] random: crng reseeded on system resumption [ 721.384417][T16754] vhci_hcd: invalid port number 16 [ 721.407970][T16754] vhci_hcd: invalid port number 16 [ 721.553049][T16754] FAULT_INJECTION: forcing a failure. [ 721.553049][T16754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.603667][T16754] CPU: 1 UID: 0 PID: 16754 Comm: syz.1.2043 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 721.603715][T16754] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 721.603725][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.603740][T16754] Call Trace: [ 721.603749][T16754] [ 721.603758][T16754] dump_stack_lvl+0x16c/0x1f0 [ 721.603800][T16754] should_fail_ex+0x512/0x640 [ 721.603829][T16754] _copy_from_user+0x2e/0xd0 [ 721.603859][T16754] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 721.603902][T16754] snd_rawmidi_write+0x26e/0xc10 [ 721.603938][T16754] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 721.603967][T16754] ? __pfx_default_wake_function+0x10/0x10 [ 721.603993][T16754] ? bpf_lsm_file_permission+0x9/0x10 [ 721.604026][T16754] ? security_file_permission+0x71/0x210 [ 721.604057][T16754] ? rw_verify_area+0xcf/0x6c0 [ 721.604084][T16754] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 721.604111][T16754] vfs_write+0x29d/0x1150 [ 721.604141][T16754] ? __pfx_vfs_write+0x10/0x10 [ 721.604165][T16754] ? find_held_lock+0x2b/0x80 [ 721.604190][T16754] ? __fget_files+0x204/0x3c0 [ 721.604220][T16754] ? __fget_files+0x20e/0x3c0 [ 721.604255][T16754] ksys_write+0x1f8/0x250 [ 721.604282][T16754] ? __pfx_ksys_write+0x10/0x10 [ 721.604318][T16754] do_syscall_64+0xcd/0x490 [ 721.604354][T16754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.604377][T16754] RIP: 0033:0x7f2edb58eb69 [ 721.604398][T16754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.604423][T16754] RSP: 002b:00007f2edc378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 721.604449][T16754] RAX: ffffffffffffffda RBX: 00007f2edb7b5fa0 RCX: 00007f2edb58eb69 [ 721.604466][T16754] RDX: 0000000001eb0800 RSI: 0000200000000100 RDI: 0000000000000010 [ 721.604480][T16754] RBP: 00007f2edb611df1 R08: 0000000000000000 R09: 0000000000000000 [ 721.604494][T16754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.604507][T16754] R13: 0000000000000000 R14: 00007f2edb7b5fa0 R15: 00007ffe7e1543d8 [ 721.604545][T16754] [ 721.823925][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.233155][T16773] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 722.701377][T16784] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 723.145988][T16794] snd_aloop snd_aloop.0: control 16781581:14:6:'x?F/zF˷fc:0 is already present [ 724.121502][T16822] sd 0:0:1:0: PR command failed: 1026 [ 724.197137][T16822] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 724.204271][T16822] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 725.039357][T16832] sd 0:0:1:0: PR command failed: 1026 [ 725.148661][T16832] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 725.155439][T16832] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 729.245452][T16911] sd 0:0:1:0: PR command failed: 1026 [ 729.318601][T16911] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 729.325590][T16911] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 732.640942][T16971] kernel read not supported for file /events/vmalloc/filter (pid: 16971 comm: syz.5.2087) [ 732.700854][ T30] audit: type=1800 audit(4295000135.424:28): pid=16971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2087" name="filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 733.211187][T16943] Process accounting paused [ 736.140165][ T30] audit: type=1107 audit(4295000138.864:29): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 736.140732][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 736.216185][T17022] bridge_slave_0: left allmulticast mode [ 736.237690][T17022] bridge_slave_0: left promiscuous mode [ 736.256518][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.921053][T17057] input input47: cannot allocate more than FF_MAX_EFFECTS effects [ 738.198887][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2105'. [ 738.616592][T17064] cgroup: fork rejected by pids controller in /syz1 [ 739.076524][T17219] FAULT_INJECTION: forcing a failure. [ 739.076524][T17219] name failslab, interval 1, probability 0, space 0, times 0 [ 739.108306][T17219] CPU: 0 UID: 0 PID: 17219 Comm: syz.2.2108 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 739.108350][T17219] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 739.108359][T17219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.108373][T17219] Call Trace: [ 739.108382][T17219] [ 739.108390][T17219] dump_stack_lvl+0x16c/0x1f0 [ 739.108441][T17219] should_fail_ex+0x512/0x640 [ 739.108465][T17219] ? __kmalloc_noprof+0xbf/0x510 [ 739.108498][T17219] ? __register_sysctl_table+0xea2/0x1900 [ 739.108534][T17219] should_failslab+0xc2/0x120 [ 739.108568][T17219] __kmalloc_noprof+0xd2/0x510 [ 739.108595][T17219] ? __register_sysctl_table+0xe8e/0x1900 [ 739.108639][T17219] __register_sysctl_table+0xea2/0x1900 [ 739.108681][T17219] ? __pfx___register_sysctl_table+0x10/0x10 [ 739.108714][T17219] ? is_module_address+0x69/0xf0 [ 739.108748][T17219] ? register_net_sysctl_sz+0x228/0x3e0 [ 739.108788][T17219] ? __asan_memcpy+0x3c/0x60 [ 739.108817][T17219] sysctl_route_net_init+0x15e/0x2c0 [ 739.108845][T17219] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 739.108870][T17219] ops_init+0x1e2/0x5f0 [ 739.108908][T17219] setup_net+0x10f/0x380 [ 739.108939][T17219] ? lockdep_init_map_type+0x5c/0x280 [ 739.108970][T17219] ? __pfx_setup_net+0x10/0x10 [ 739.109002][T17219] ? debug_mutex_init+0x37/0x70 [ 739.109041][T17219] copy_net_ns+0x2a6/0x5f0 [ 739.109065][T17219] create_new_namespaces+0x3ea/0xa90 [ 739.109095][T17219] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 739.109125][T17219] ksys_unshare+0x45b/0xa40 [ 739.109153][T17219] ? __pfx_ksys_unshare+0x10/0x10 [ 739.109184][T17219] ? xfd_validate_state+0x61/0x180 [ 739.109221][T17219] __x64_sys_unshare+0x31/0x40 [ 739.109249][T17219] do_syscall_64+0xcd/0x490 [ 739.109285][T17219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.109308][T17219] RIP: 0033:0x7f9c9f78eb69 [ 739.109330][T17219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.109352][T17219] RSP: 002b:00007f9ca0541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 739.109374][T17219] RAX: ffffffffffffffda RBX: 00007f9c9f9b6160 RCX: 00007f9c9f78eb69 [ 739.109388][T17219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 739.109402][T17219] RBP: 00007f9c9f811df1 R08: 0000000000000000 R09: 0000000000000000 [ 739.109417][T17219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.109441][T17219] R13: 0000000000000000 R14: 00007f9c9f9b6160 R15: 00007ffc3158fde8 [ 739.109475][T17219] [ 739.110066][T17219] sysctl could not get directory: [ 739.112689][T17215] FAULT_INJECTION: forcing a failure. [ 739.112689][T17215] name failslab, interval 1, probability 0, space 0, times 0 [ 739.124837][T17219] / [ 739.133880][T17215] CPU: 1 UID: 0 PID: 17215 Comm: syz.4.2109 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 739.133930][T17215] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 739.133941][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.133957][T17215] Call Trace: [ 739.133966][T17215] [ 739.133976][T17215] dump_stack_lvl+0x16c/0x1f0 [ 739.134017][T17215] should_fail_ex+0x512/0x640 [ 739.134047][T17215] should_failslab+0xc2/0x120 [ 739.134081][T17215] __kmalloc_cache_noprof+0x6a/0x3e0 [ 739.134107][T17215] ? proc_self_get_link+0x1a9/0x230 [ 739.134142][T17215] proc_self_get_link+0x1a9/0x230 [ 739.134171][T17215] ? __pfx_proc_self_get_link+0x10/0x10 [ 739.134200][T17215] step_into+0x195b/0x2270 [ 739.134231][T17215] ? __pfx_step_into+0x10/0x10 [ 739.134259][T17215] ? lookup_fast+0x156/0x610 [ 739.134288][T17215] walk_component+0xfc/0x5b0 [ 739.134315][T17215] link_path_walk+0x627/0xe20 [ 739.134351][T17215] path_openat+0x1b0/0x2cb0 [ 739.134376][T17215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.134414][T17215] ? __pfx_path_openat+0x10/0x10 [ 739.134442][T17215] ? __lock_acquire+0xb8a/0x1c90 [ 739.134478][T17215] do_filp_open+0x20b/0x470 [ 739.134506][T17215] ? __pfx_do_filp_open+0x10/0x10 [ 739.134558][T17215] ? alloc_fd+0x471/0x7d0 [ 739.134593][T17215] do_sys_openat2+0x11b/0x1d0 [ 739.134628][T17215] ? __pfx_do_sys_openat2+0x10/0x10 [ 739.134687][T17215] __x64_sys_openat+0x174/0x210 [ 739.134725][T17215] ? __pfx___x64_sys_openat+0x10/0x10 [ 739.134776][T17215] do_syscall_64+0xcd/0x490 [ 739.134814][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.134839][T17215] RIP: 0033:0x7f72ceb8eb69 [ 739.134859][T17215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.134883][T17215] RSP: 002b:00007f72cc9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 739.134907][T17215] RAX: ffffffffffffffda RBX: 00007f72cedb5fa0 RCX: 00007f72ceb8eb69 [ 739.134923][T17215] RDX: 0000000000000000 RSI: 0000200000001480 RDI: ffffffffffffff9c [ 739.134938][T17215] RBP: 00007f72cec11df1 R08: 0000000000000000 R09: 0000000000000000 [ 739.134953][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.134969][T17215] R13: 0000000000000000 R14: 00007f72cedb5fa0 R15: 00007fff7842fd78 [ 739.135001][T17215] [ 739.639911][T17219] net/ipv4/route -12 [ 739.659759][T17073] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_tx_wq": -EINTR [ 741.070936][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2117'. [ 742.670525][T17312] FAULT_INJECTION: forcing a failure. [ 742.670525][T17312] name fail_futex, interval 1, probability 0, space 0, times 0 [ 742.800118][T17312] CPU: 0 UID: 0 PID: 17312 Comm: syz.1.2122 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 742.800162][T17312] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 742.800172][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.800186][T17312] Call Trace: [ 742.800193][T17312] [ 742.800203][T17312] dump_stack_lvl+0x16c/0x1f0 [ 742.800244][T17312] should_fail_ex+0x512/0x640 [ 742.800272][T17312] get_futex_key+0x1d0/0x1540 [ 742.800304][T17312] ? blk_get_meta_cap+0x482/0x700 [ 742.800335][T17312] ? __pfx_get_futex_key+0x10/0x10 [ 742.800375][T17312] futex_wake+0xea/0x530 [ 742.800411][T17312] ? __pfx_futex_wake+0x10/0x10 [ 742.800466][T17312] do_futex+0x1e3/0x350 [ 742.800494][T17312] ? __pfx_do_futex+0x10/0x10 [ 742.800524][T17312] ? find_held_lock+0x2b/0x80 [ 742.800552][T17312] __x64_sys_futex+0x1e0/0x4c0 [ 742.800584][T17312] ? __pfx_blkdev_ioctl+0x10/0x10 [ 742.800616][T17312] ? __pfx___x64_sys_futex+0x10/0x10 [ 742.800647][T17312] ? 0xffffffff81000000 [ 742.800667][T17312] ? fput+0x70/0xf0 [ 742.800704][T17312] do_syscall_64+0xcd/0x490 [ 742.800740][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.800765][T17312] RIP: 0033:0x7f2edb58eb69 [ 742.800784][T17312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.800808][T17312] RSP: 002b:00007f2edc3780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 742.800832][T17312] RAX: ffffffffffffffda RBX: 00007f2edb7b5fa8 RCX: 00007f2edb58eb69 [ 742.800848][T17312] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2edb7b5fac [ 742.800864][T17312] RBP: 00007f2edb7b5fa0 R08: 00007f2edc379000 R09: 0000000000000000 [ 742.800879][T17312] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f2edb7b5fac [ 742.800895][T17312] R13: 0000000000000000 R14: 00007ffe7e1542f0 R15: 00007ffe7e1543d8 [ 742.800927][T17312] [ 743.681482][T17336] random: crng reseeded on system resumption [ 745.248721][T17354] Invalid ELF header magic: != ELF [ 745.299885][T17364] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2135'. [ 747.080762][T17376] FAULT_INJECTION: forcing a failure. [ 747.080762][T17376] name failslab, interval 1, probability 0, space 0, times 0 [ 747.168230][T17376] CPU: 1 UID: 0 PID: 17376 Comm: syz.2.2137 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 747.168275][T17376] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 747.168284][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 747.168297][T17376] Call Trace: [ 747.168305][T17376] [ 747.168316][T17376] dump_stack_lvl+0x16c/0x1f0 [ 747.168358][T17376] should_fail_ex+0x512/0x640 [ 747.168380][T17376] ? __kmalloc_noprof+0xbf/0x510 [ 747.168408][T17376] ? xfrm_hash_alloc+0xd1/0x100 [ 747.168442][T17376] should_failslab+0xc2/0x120 [ 747.168474][T17376] __kmalloc_noprof+0xd2/0x510 [ 747.168500][T17376] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 747.168533][T17376] ? __pfx_xfrm_net_init+0x10/0x10 [ 747.168571][T17376] xfrm_hash_alloc+0xd1/0x100 [ 747.168606][T17376] xfrm_state_init+0x9c/0x630 [ 747.168647][T17376] ? __pfx_xfrm_net_init+0x10/0x10 [ 747.168684][T17376] xfrm_net_init+0x210/0xcc0 [ 747.168724][T17376] ? __pfx_xfrm_net_init+0x10/0x10 [ 747.168757][T17376] ops_init+0x1e2/0x5f0 [ 747.168794][T17376] setup_net+0x10f/0x380 [ 747.168822][T17376] ? lockdep_init_map_type+0x5c/0x280 [ 747.168856][T17376] ? __pfx_setup_net+0x10/0x10 [ 747.168904][T17376] ? debug_mutex_init+0x37/0x70 [ 747.168943][T17376] copy_net_ns+0x2a6/0x5f0 [ 747.168968][T17376] create_new_namespaces+0x3ea/0xa90 [ 747.168998][T17376] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 747.169026][T17376] ksys_unshare+0x45b/0xa40 [ 747.169056][T17376] ? __pfx_ksys_unshare+0x10/0x10 [ 747.169084][T17376] ? xfd_validate_state+0x61/0x180 [ 747.169123][T17376] __x64_sys_unshare+0x31/0x40 [ 747.169151][T17376] do_syscall_64+0xcd/0x490 [ 747.169187][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.169211][T17376] RIP: 0033:0x7f9c9f78eb69 [ 747.169230][T17376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.169253][T17376] RSP: 002b:00007f9ca0562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 747.169276][T17376] RAX: ffffffffffffffda RBX: 00007f9c9f9b6080 RCX: 00007f9c9f78eb69 [ 747.169292][T17376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 747.169305][T17376] RBP: 00007f9c9f811df1 R08: 0000000000000000 R09: 0000000000000000 [ 747.169318][T17376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.169333][T17376] R13: 0000000000000000 R14: 00007f9c9f9b6080 R15: 00007ffc3158fde8 [ 747.169362][T17376] [ 747.709000][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.715465][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.998576][T13717] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 748.019815][T17381] Setting dangerous option i915.mitigations - tainting kernel [ 749.662403][T17403] serio: Serial port pty233 [ 753.525838][T17458] netlink: 346 bytes leftover after parsing attributes in process `syz.4.2149'. [ 754.652185][T17480] ecryptfs_miscdev_write: Invalid packet size [0] [ 758.991676][ T30] audit: type=1800 audit(4295000161.684:30): pid=17527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2162" name="features" dev="configfs" ino=60915 res=0 errno=0 [ 760.964134][ T5848] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 760.964170][ T5848] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 760.988240][ T5848] Bluetooth: hci3: Dropping invalid advertising data [ 760.997525][ T5848] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 760.997563][ T5848] Bluetooth: hci3: Dropping invalid advertising data [ 761.011539][ T5848] Bluetooth: hci3: Dropping invalid advertising data [ 761.018432][ T5848] Bluetooth: hci3: Malformed LE Event: 0x02 [ 761.055457][T17563] FAULT_INJECTION: forcing a failure. [ 761.055457][T17563] name failslab, interval 1, probability 0, space 0, times 0 [ 761.123560][T17563] CPU: 0 UID: 0 PID: 17563 Comm: syz.5.2168 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 761.123612][T17563] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 761.123623][T17563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 761.123641][T17563] Call Trace: [ 761.123649][T17563] [ 761.123659][T17563] dump_stack_lvl+0x16c/0x1f0 [ 761.123699][T17563] should_fail_ex+0x512/0x640 [ 761.123723][T17563] ? fs_reclaim_acquire+0xae/0x150 [ 761.123765][T17563] should_failslab+0xc2/0x120 [ 761.123797][T17563] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 761.123828][T17563] ? security_inode_alloc+0x3b/0x2b0 [ 761.123872][T17563] security_inode_alloc+0x3b/0x2b0 [ 761.123911][T17563] inode_init_always_gfp+0xce4/0x1030 [ 761.123944][T17563] alloc_inode+0x86/0x240 [ 761.123976][T17563] new_inode+0x22/0x1c0 [ 761.124013][T17563] __debugfs_create_file+0x11c/0x6b0 [ 761.124053][T17563] debugfs_create_file_full+0x41/0x60 [ 761.124094][T17563] ref_tracker_dir_debugfs+0x19d/0x290 [ 761.124120][T17563] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 761.124176][T17563] ? lockdep_init_map_type+0x5c/0x280 [ 761.124214][T17563] preinit_net+0x47f/0x8f0 [ 761.124252][T17563] copy_net_ns+0x1da/0x5f0 [ 761.124279][T17563] create_new_namespaces+0x3ea/0xa90 [ 761.124325][T17563] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 761.124356][T17563] ksys_unshare+0x45b/0xa40 [ 761.124390][T17563] ? __pfx_ksys_unshare+0x10/0x10 [ 761.124440][T17563] ? xfd_validate_state+0x61/0x180 [ 761.124491][T17563] __x64_sys_unshare+0x31/0x40 [ 761.124531][T17563] do_syscall_64+0xcd/0x490 [ 761.124573][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.124599][T17563] RIP: 0033:0x7f352f58eb69 [ 761.124620][T17563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.124644][T17563] RSP: 002b:00007f3530431038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 761.124668][T17563] RAX: ffffffffffffffda RBX: 00007f352f7b6240 RCX: 00007f352f58eb69 [ 761.124686][T17563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 761.124702][T17563] RBP: 00007f352f611df1 R08: 0000000000000000 R09: 0000000000000000 [ 761.124718][T17563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.124733][T17563] R13: 0000000000000000 R14: 00007f352f7b6240 R15: 00007ffe5fec37f8 [ 761.124766][T17563] [ 761.124798][T17563] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888076414a68' [ 763.789141][T17562] Process accounting resumed [ 764.543482][T17618] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2180'. [ 764.564023][T17618] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2180'. [ 765.317695][ T30] audit: type=1800 audit(4295000168.004:31): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2182" name="lu_gp_id" dev="configfs" ino=61289 res=0 errno=0 [ 766.969432][T17663] random: crng reseeded on system resumption [ 767.196049][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.208008][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.943441][T17736] ptp ptp0: delete virtual clock ptp3 [ 770.966380][T17736] ptp ptp0: delete virtual clock ptp2 [ 770.989535][T17736] ptp ptp0: delete virtual clock ptp1 [ 771.010020][T17736] ptp ptp0: only physical clock in use now [ 774.509408][T17796] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2212'. [ 774.560414][T17797] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2212'. [ 774.634194][T17797] IPv6: NLM_F_CREATE should be specified when creating new route [ 774.635802][T17796] IPv6: NLM_F_CREATE should be specified when creating new route [ 774.650508][T17797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.658505][T17797] IPv6: NLM_F_CREATE should be set when creating new route [ 774.665836][T17797] IPv6: NLM_F_CREATE should be set when creating new route [ 774.676924][T17798] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2212'. [ 774.707892][T17805] FAULT_INJECTION: forcing a failure. [ 774.707892][T17805] name failslab, interval 1, probability 0, space 0, times 0 [ 774.721158][T17805] CPU: 1 UID: 0 PID: 17805 Comm: syz.5.2213 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 774.721190][T17805] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 774.721196][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.721205][T17805] Call Trace: [ 774.721210][T17805] [ 774.721216][T17805] dump_stack_lvl+0x16c/0x1f0 [ 774.721241][T17805] should_fail_ex+0x512/0x640 [ 774.721256][T17805] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 774.721278][T17805] should_failslab+0xc2/0x120 [ 774.721295][T17805] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 774.721311][T17805] ? lockdep_hardirqs_on+0x7c/0x110 [ 774.721329][T17805] ? fib_notifier_ops_register+0x32/0x270 [ 774.721351][T17805] kmemdup_noprof+0x29/0x60 [ 774.721367][T17805] fib_notifier_ops_register+0x32/0x270 [ 774.721388][T17805] fib4_notifier_init+0x4f/0xd0 [ 774.721408][T17805] fib_net_init+0xbf/0x3f0 [ 774.721426][T17805] ? __pfx___register_sysctl_table+0x10/0x10 [ 774.721455][T17805] ? __pfx_fib_net_init+0x10/0x10 [ 774.721475][T17805] ? lockdep_init_map_type+0x5c/0x280 [ 774.721494][T17805] ? do_init_timer+0xc9/0x110 [ 774.721510][T17805] ? devinet_init_net+0x5c2/0x910 [ 774.721524][T17805] ? __pfx_fib_net_init+0x10/0x10 [ 774.721542][T17805] ops_init+0x1e2/0x5f0 [ 774.721563][T17805] setup_net+0x10f/0x380 [ 774.721580][T17805] ? lockdep_init_map_type+0x5c/0x280 [ 774.721597][T17805] ? __pfx_setup_net+0x10/0x10 [ 774.721616][T17805] ? debug_mutex_init+0x37/0x70 [ 774.721639][T17805] copy_net_ns+0x2a6/0x5f0 [ 774.721653][T17805] create_new_namespaces+0x3ea/0xa90 [ 774.721672][T17805] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 774.721688][T17805] ksys_unshare+0x45b/0xa40 [ 774.721706][T17805] ? __pfx_ksys_unshare+0x10/0x10 [ 774.721724][T17805] ? xfd_validate_state+0x61/0x180 [ 774.721747][T17805] __x64_sys_unshare+0x31/0x40 [ 774.721764][T17805] do_syscall_64+0xcd/0x490 [ 774.721783][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.721797][T17805] RIP: 0033:0x7f352f58eb69 [ 774.721809][T17805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.721822][T17805] RSP: 002b:00007f3530494038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 774.721835][T17805] RAX: ffffffffffffffda RBX: 00007f352f7b5fa0 RCX: 00007f352f58eb69 [ 774.721844][T17805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 774.721852][T17805] RBP: 00007f352f611df1 R08: 0000000000000000 R09: 0000000000000000 [ 774.721861][T17805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.721869][T17805] R13: 0000000000000000 R14: 00007f352f7b5fa0 R15: 00007ffe5fec37f8 [ 774.721887][T17805] [ 775.268580][T17796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 775.337989][T17799] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2212'. [ 775.497267][ T5848] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 776.256179][T13717] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 776.268326][T13717] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 781.204907][T17922] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078007700 pfn:0x78000 [ 781.241943][T17922] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 781.277159][T17922] memcg:ffff8880453ef401 [ 781.292432][T17922] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 781.311567][T17922] page_type: f5(slab) [ 781.316072][T17922] raw: 00fff00000000040 ffff88801d7a4500 ffffea0000931e00 0000000000000002 [ 781.356861][T17922] raw: ffff888078007700 00000000000f0005 00000000f5000000 ffff8880453ef401 [ 781.376024][T17922] head: 00fff00000000040 ffff88801d7a4500 ffffea0000931e00 0000000000000002 [ 781.521586][T17922] head: ffff888078007700 00000000000f0005 00000000f5000000 ffff8880453ef401 [ 781.553511][T17922] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 781.563035][T17922] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 781.573043][T17922] page dumped because: unmovable page [ 781.581452][T17922] page_owner tracks the page as allocated [ 781.591945][T17922] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12373, tgid 12373 (syz-executor), ts 495774484195, free_ts 495756268389 [ 781.616923][T17922] post_alloc_hook+0x1c0/0x230 [ 781.635828][T17922] get_page_from_freelist+0x132b/0x38e0 [ 781.647260][T17922] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 781.655084][T17922] alloc_pages_mpol+0x1fb/0x550 [ 781.687972][T17922] new_slab+0x247/0x330 [ 781.698627][T17922] ___slab_alloc+0xd1e/0x1780 [ 781.707508][T17922] __slab_alloc.constprop.0+0x56/0xb0 [ 781.714095][T17922] kmem_cache_alloc_noprof+0xef/0x3b0 [ 781.723190][T17922] sk_prot_alloc+0x60/0x2a0 [ 781.730633][T17922] sk_alloc+0x36/0xc20 [ 781.736930][T17922] unix_create1+0xa6/0x700 [ 781.743569][T17922] unix_create+0x110/0x270 [ 781.803097][T17922] __sock_create+0x335/0x8d0 [ 781.807847][T17922] __sys_socket+0x14d/0x260 [ 782.064636][T17922] __x64_sys_socket+0x72/0xb0 [ 782.077420][T17922] do_syscall_64+0xcd/0x490 [ 782.082437][T17922] page last free pid 12373 tgid 12373 stack trace: [ 782.128338][T17922] __free_frozen_pages+0x7d5/0x10f0 [ 782.211765][T17922] qlist_free_all+0x4d/0x120 [ 782.216467][T17922] kasan_quarantine_reduce+0x195/0x1e0 [ 782.222111][T17922] __kasan_slab_alloc+0x69/0x90 [ 782.227014][T17922] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 782.251558][T17922] kmalloc_reserve+0x18b/0x2c0 [ 782.256481][T17922] __alloc_skb+0x166/0x380 [ 782.287064][T17922] netlink_ack+0x15d/0xb80 [ 782.293412][T17922] netlink_rcv_skb+0x332/0x420 [ 782.317835][T17922] netlink_unicast+0x5aa/0x870 [ 782.327962][T17922] netlink_sendmsg+0x8d1/0xdd0 [ 782.343586][T17922] __sys_sendto+0x4a0/0x520 [ 782.360630][T17922] __x64_sys_sendto+0xe0/0x1c0 [ 782.365683][T17922] do_syscall_64+0xcd/0x490 [ 782.379553][T17922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.122853][T17969] FAULT_INJECTION: forcing a failure. [ 783.122853][T17969] name failslab, interval 1, probability 0, space 0, times 0 [ 783.163075][T17969] CPU: 1 UID: 0 PID: 17969 Comm: syz.2.2245 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 783.163122][T17969] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 783.163128][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.163136][T17969] Call Trace: [ 783.163141][T17969] [ 783.163147][T17969] dump_stack_lvl+0x16c/0x1f0 [ 783.163170][T17969] should_fail_ex+0x512/0x640 [ 783.163183][T17969] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 783.163198][T17969] should_failslab+0xc2/0x120 [ 783.163215][T17969] __kmalloc_cache_noprof+0x6a/0x3e0 [ 783.163228][T17969] ? alloc_pipe_info+0x10e/0x590 [ 783.163246][T17969] alloc_pipe_info+0x10e/0x590 [ 783.163263][T17969] splice_direct_to_actor+0x77d/0xa30 [ 783.163278][T17969] ? __pfx_direct_splice_actor+0x10/0x10 [ 783.163292][T17969] ? __pfx_aa_file_perm+0x10/0x10 [ 783.163308][T17969] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 783.163319][T17969] ? get_pid_task+0xfc/0x250 [ 783.163342][T17969] do_splice_direct+0x174/0x240 [ 783.163355][T17969] ? __pfx_do_splice_direct+0x10/0x10 [ 783.163367][T17969] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 783.163391][T17969] ? rw_verify_area+0xcf/0x6c0 [ 783.163405][T17969] do_sendfile+0xb06/0xe50 [ 783.163421][T17969] ? __pfx_do_sendfile+0x10/0x10 [ 783.163434][T17969] ? __fget_files+0x20e/0x3c0 [ 783.163452][T17969] __x64_sys_sendfile64+0x1d8/0x220 [ 783.163469][T17969] ? ksys_write+0x1ac/0x250 [ 783.163482][T17969] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 783.163504][T17969] do_syscall_64+0xcd/0x490 [ 783.163523][T17969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.163537][T17969] RIP: 0033:0x7f9c9f78eb69 [ 783.163548][T17969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.163562][T17969] RSP: 002b:00007f9ca0541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 783.163575][T17969] RAX: ffffffffffffffda RBX: 00007f9c9f9b6160 RCX: 00007f9c9f78eb69 [ 783.163584][T17969] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 783.163592][T17969] RBP: 00007f9ca0541090 R08: 0000000000000000 R09: 0000000000000000 [ 783.163600][T17969] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000001 [ 783.163608][T17969] R13: 0000000000000000 R14: 00007f9c9f9b6160 R15: 00007ffc3158fde8 [ 783.163628][T17969] [ 784.532851][T17988] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input49 [ 785.749739][T18015] kafs: addr_prefs: Invalid Command [ 785.776078][T18014] kafs: addr_prefs: Invalid Command [ 787.075086][T18038] FAULT_INJECTION: forcing a failure. [ 787.075086][T18038] name failslab, interval 1, probability 0, space 0, times 0 [ 787.169651][T18038] CPU: 0 UID: 0 PID: 18038 Comm: syz.5.2256 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 787.169699][T18038] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 787.169710][T18038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.169724][T18038] Call Trace: [ 787.169732][T18038] [ 787.169742][T18038] dump_stack_lvl+0x16c/0x1f0 [ 787.169778][T18038] should_fail_ex+0x512/0x640 [ 787.169798][T18038] ? __kmalloc_noprof+0xbf/0x510 [ 787.169825][T18038] ? alloc_pipe_info+0x1ec/0x590 [ 787.169848][T18038] should_failslab+0xc2/0x120 [ 787.169877][T18038] __kmalloc_noprof+0xd2/0x510 [ 787.169911][T18038] alloc_pipe_info+0x1ec/0x590 [ 787.169944][T18038] splice_direct_to_actor+0x77d/0xa30 [ 787.169971][T18038] ? __pfx_direct_splice_actor+0x10/0x10 [ 787.169999][T18038] ? __pfx_aa_file_perm+0x10/0x10 [ 787.170028][T18038] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 787.170051][T18038] ? get_pid_task+0xfc/0x250 [ 787.170093][T18038] do_splice_direct+0x174/0x240 [ 787.170114][T18038] ? __pfx_do_splice_direct+0x10/0x10 [ 787.170136][T18038] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 787.170176][T18038] ? rw_verify_area+0xcf/0x6c0 [ 787.170199][T18038] do_sendfile+0xb06/0xe50 [ 787.170227][T18038] ? __pfx_do_sendfile+0x10/0x10 [ 787.170250][T18038] ? __fget_files+0x20e/0x3c0 [ 787.170279][T18038] __x64_sys_sendfile64+0x1d8/0x220 [ 787.170308][T18038] ? ksys_write+0x1ac/0x250 [ 787.170329][T18038] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 787.170364][T18038] do_syscall_64+0xcd/0x490 [ 787.170398][T18038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.170419][T18038] RIP: 0033:0x7f352f58eb69 [ 787.170437][T18038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.170458][T18038] RSP: 002b:00007f3530452038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 787.170478][T18038] RAX: ffffffffffffffda RBX: 00007f352f7b6160 RCX: 00007f352f58eb69 [ 787.170494][T18038] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 787.170507][T18038] RBP: 00007f3530452090 R08: 0000000000000000 R09: 0000000000000000 [ 787.170521][T18038] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000001 [ 787.170535][T18038] R13: 0000000000000000 R14: 00007f352f7b6160 R15: 00007ffe5fec37f8 [ 787.170566][T18038] [ 795.009289][T18160] Process accounting paused [ 795.401082][T18166] FAULT_INJECTION: forcing a failure. [ 795.401082][T18166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.473792][T18166] CPU: 0 UID: 0 PID: 18166 Comm: syz.4.2280 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 795.473845][T18166] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 795.473857][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.473871][T18166] Call Trace: [ 795.473878][T18166] [ 795.473888][T18166] dump_stack_lvl+0x16c/0x1f0 [ 795.473931][T18166] should_fail_ex+0x512/0x640 [ 795.473961][T18166] should_fail_alloc_page+0xe7/0x130 [ 795.473997][T18166] prepare_alloc_pages+0x3c2/0x610 [ 795.474034][T18166] ? stack_depot_save_flags+0x28/0xa40 [ 795.474064][T18166] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 795.474096][T18166] ? kasan_save_stack+0x42/0x60 [ 795.474129][T18166] ? kasan_save_stack+0x33/0x60 [ 795.474155][T18166] ? kasan_save_track+0x14/0x30 [ 795.474182][T18166] ? __kasan_slab_alloc+0x89/0x90 [ 795.474210][T18166] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 795.474237][T18166] ? ptlock_alloc+0x1f/0x70 [ 795.474257][T18166] ? pte_alloc_one+0x82/0x3a0 [ 795.474281][T18166] ? __pte_alloc+0x6d/0x3c0 [ 795.474311][T18166] ? copy_page_range+0x3b83/0x5c80 [ 795.474346][T18166] ? dup_mmap+0xe88/0x21d0 [ 795.474380][T18166] ? copy_process+0x4081/0x7690 [ 795.474410][T18166] ? kernel_clone+0xfc/0x930 [ 795.474439][T18166] ? __do_sys_clone+0xce/0x120 [ 795.474469][T18166] ? do_syscall_64+0xcd/0x490 [ 795.474503][T18166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.474535][T18166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 795.474580][T18166] ? __lock_acquire+0x622/0x1c90 [ 795.474617][T18166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 795.474655][T18166] ? policy_nodemask+0xea/0x4e0 [ 795.474690][T18166] alloc_pages_mpol+0x1fb/0x550 [ 795.474725][T18166] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 795.474754][T18166] ? page_table_check_set+0x627/0x750 [ 795.474794][T18166] alloc_pages_noprof+0x131/0x390 [ 795.474835][T18166] pte_alloc_one+0x1c/0x3a0 [ 795.474864][T18166] __pte_alloc+0x6d/0x3c0 [ 795.474896][T18166] ? __pfx___pte_alloc+0x10/0x10 [ 795.474929][T18166] ? __pfx___might_resched+0x10/0x10 [ 795.474952][T18166] ? copy_page_range+0x1fa8/0x5c80 [ 795.474992][T18166] copy_page_range+0x3b83/0x5c80 [ 795.475070][T18166] ? ata_qc_issue+0x9d9/0xfa0 [ 795.475109][T18166] ? __pfx_copy_page_range+0x10/0x10 [ 795.475170][T18166] ? __pfx___might_resched+0x10/0x10 [ 795.475195][T18166] ? __pfx_mas_store+0x10/0x10 [ 795.475217][T18166] ? __vma_enter_locked+0x163/0x3f0 [ 795.475247][T18166] ? dup_mmap+0xe38/0x21d0 [ 795.475283][T18166] ? down_write+0x14d/0x200 [ 795.475326][T18166] ? up_write+0x1b2/0x520 [ 795.475364][T18166] dup_mmap+0xe88/0x21d0 [ 795.475429][T18166] ? __pfx_dup_mmap+0x10/0x10 [ 795.475492][T18166] copy_process+0x4081/0x7690 [ 795.475523][T18166] ? preempt_schedule_thunk+0x16/0x30 [ 795.475573][T18166] ? __pfx_copy_process+0x10/0x10 [ 795.475604][T18166] ? futex_private_hash_put+0x176/0x300 [ 795.475639][T18166] ? futex_private_hash_put+0x18a/0x300 [ 795.475675][T18166] kernel_clone+0xfc/0x930 [ 795.475707][T18166] ? __pfx_futex_wake+0x10/0x10 [ 795.475741][T18166] ? __pfx_kernel_clone+0x10/0x10 [ 795.475770][T18166] ? __pfx_vfs_writev+0x10/0x10 [ 795.475817][T18166] __do_sys_clone+0xce/0x120 [ 795.475848][T18166] ? __pfx___do_sys_clone+0x10/0x10 [ 795.475897][T18166] ? xfd_validate_state+0x61/0x180 [ 795.475931][T18166] ? __pfx_do_writev+0x10/0x10 [ 795.475968][T18166] do_syscall_64+0xcd/0x490 [ 795.476007][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.476042][T18166] RIP: 0033:0x7f72ceb8eb69 [ 795.476063][T18166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.476089][T18166] RSP: 002b:00007f72cc9b3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 795.476115][T18166] RAX: ffffffffffffffda RBX: 00007f72cedb6160 RCX: 00007f72ceb8eb69 [ 795.476140][T18166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040085600 [ 795.476157][T18166] RBP: 00007f72cec11df1 R08: 0000000000000000 R09: 0000000000000000 [ 795.476173][T18166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.476189][T18166] R13: 0000000000000000 R14: 00007f72cedb6160 R15: 00007fff7842fd78 [ 795.476225][T18166] [ 797.895143][T18219] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 798.032594][T18219] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 798.088656][T18219] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 798.620020][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.635393][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.644409][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.678399][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.689416][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.497415][T18227] chnl_net:caif_netlink_parms(): no params data found [ 799.743381][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.109430][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.212299][T18227] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.226391][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.251365][T18227] bridge_slave_0: entered allmulticast mode [ 800.282040][T18227] bridge_slave_0: entered promiscuous mode [ 800.413763][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.480622][T18227] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.508436][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.546511][T18227] bridge_slave_1: entered allmulticast mode [ 800.554629][T18227] bridge_slave_1: entered promiscuous mode [ 800.739302][ T5848] Bluetooth: hci0: command tx timeout [ 800.762752][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.801500][T18227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.832758][T18227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.101096][T18227] team0: Port device team_slave_0 added [ 801.163775][T18227] team0: Port device team_slave_1 added [ 801.349399][T18260] random: crng reseeded on system resumption [ 801.482142][T18227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.510480][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.618254][T18227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.928607][T18227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.958188][T18227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.028202][T18227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.819076][ T5848] Bluetooth: hci0: command tx timeout [ 803.072744][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.093083][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.114139][ T13] bond0 (unregistering): Released all slaves [ 803.246846][T18227] hsr_slave_0: entered promiscuous mode [ 803.272206][T18227] hsr_slave_1: entered promiscuous mode [ 803.293661][ T13] HfR: left promiscuous mode [ 803.489830][ T13] tipc: Left network mode [ 804.898321][ T5848] Bluetooth: hci0: command tx timeout [ 805.543380][ T13] hsr_slave_0: left promiscuous mode [ 805.586265][ T13] hsr_slave_1: left promiscuous mode [ 805.594847][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.648307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.699040][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.706666][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.765069][T18288] usb usb36: usbfs: process 18288 (syz.2.2299) did not claim interface 0 before use [ 805.804588][ T13] veth1_macvtap: left promiscuous mode [ 805.818568][ T13] veth1_vlan: left promiscuous mode [ 805.824054][ T13] veth0_vlan: left promiscuous mode [ 806.244704][T18307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2301'. [ 806.978499][ T5848] Bluetooth: hci0: command tx timeout [ 807.012358][ T13] team0 (unregistering): Port device team_slave_1 removed [ 807.083379][ T13] team0 (unregistering): Port device team_slave_0 removed [ 808.065334][T18227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 808.103165][T18227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 808.133569][T18227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 808.170471][T18227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 808.560350][T18227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.604060][T18227] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.667141][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.674348][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.740492][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.747640][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.825645][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.833300][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.346745][T18227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.434141][T18227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.692331][T18227] veth0_vlan: entered promiscuous mode [ 810.744755][T18227] veth1_vlan: entered promiscuous mode [ 810.847419][T18227] veth0_macvtap: entered promiscuous mode [ 810.885605][T18227] veth1_macvtap: entered promiscuous mode [ 811.046568][T18227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.102748][T18227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.111223][T13717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 811.123713][T13717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.135050][T13717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 811.158337][T13717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 811.167812][T13717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 811.290580][ T8646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.392237][ T8646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.424358][ T8646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.494136][ T8646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.582583][T18395] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 811.876982][ T8642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.968836][ T8642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.578891][ T8136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.586831][ T8136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.769863][T18400] chnl_net:caif_netlink_parms(): no params data found [ 813.228518][ T5848] Bluetooth: hci2: command tx timeout [ 813.912688][T18400] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.965703][T18400] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.038661][T18400] bridge_slave_0: entered allmulticast mode [ 814.132542][T18400] bridge_slave_0: entered promiscuous mode [ 814.337820][T18400] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.352904][T18400] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.439463][T18400] bridge_slave_1: entered allmulticast mode [ 814.484358][T18400] bridge_slave_1: entered promiscuous mode [ 815.058099][T18400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.105608][T18400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.308569][ T5848] Bluetooth: hci2: command tx timeout [ 815.460186][T18400] team0: Port device team_slave_0 added [ 815.570929][T18400] team0: Port device team_slave_1 added [ 815.760044][T18400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.767821][T18400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.844191][T18400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.927784][T18400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.939344][T18400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.965410][T18400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.187393][T18400] hsr_slave_0: entered promiscuous mode [ 816.229360][T18400] hsr_slave_1: entered promiscuous mode [ 816.256037][T18400] debugfs: 'hsr0' already exists in 'hsr' [ 816.268891][T18400] Cannot create hsr debugfs directory [ 816.828005][T18486] ptrace attach of "./syz-executor exec"[18227] was attempted by "./syz-executor exec"[18486] [ 817.378335][ T5848] Bluetooth: hci2: command tx timeout [ 817.951639][T18400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 818.456098][T18400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 818.504430][T18400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 818.538891][T18400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.924011][T18400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.183187][T18400] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.332799][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.340240][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.413084][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.420232][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.458386][ T5848] Bluetooth: hci2: command tx timeout [ 820.380249][T18400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.441031][ T30] audit: type=1800 audit(4295000223.154:32): pid=18541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2326" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 821.215827][T18400] veth0_vlan: entered promiscuous mode [ 821.250628][T18400] veth1_vlan: entered promiscuous mode [ 821.452994][T18400] veth0_macvtap: entered promiscuous mode [ 821.505852][T18400] veth1_macvtap: entered promiscuous mode [ 821.566035][T18400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.593836][T18400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.645391][T17253] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.658009][T17253] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.755737][T17253] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.768102][T17253] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.711283][ T8642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.757917][ T8642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.956477][ T8136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.979494][ T8136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.992703][T13717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 826.004866][T13717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 826.014432][T13717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 826.038723][T13717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 826.039414][T13717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 826.090515][T18647] random: crng reseeded on system resumption [ 826.335875][T18644] chnl_net:caif_netlink_parms(): no params data found [ 826.762005][T18658] Restarting kernel threads ... [ 826.767974][T18658] Done restarting kernel threads. [ 826.908423][T18644] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.915590][T18644] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.966470][T18644] bridge_slave_0: entered allmulticast mode [ 826.993145][T18644] bridge_slave_0: entered promiscuous mode [ 827.097527][T18644] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.118600][T18644] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.141719][T18644] bridge_slave_1: entered allmulticast mode [ 827.160054][T18644] bridge_slave_1: entered promiscuous mode [ 827.522270][T18644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.600591][T18644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.924741][T18644] team0: Port device team_slave_0 added [ 827.969547][T18644] team0: Port device team_slave_1 added [ 828.006850][T18666] can: request_module (can-proto-5) failed. [ 828.098509][ T5848] Bluetooth: hci1: command tx timeout [ 828.163142][T18644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.176940][T18644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.217674][T18644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.240805][T18644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.254048][T18644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.290143][T18644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.403202][T18644] hsr_slave_0: entered promiscuous mode [ 828.410562][T18644] hsr_slave_1: entered promiscuous mode [ 828.417150][T18644] debugfs: 'hsr0' already exists in 'hsr' [ 828.423137][T18644] Cannot create hsr debugfs directory [ 828.730134][T18644] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.005997][T18644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.121033][T18644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.837747][T18644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.178291][ T5848] Bluetooth: hci1: command tx timeout [ 830.410622][T18644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.733260][T18644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 830.833901][T18644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 830.987813][T18644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 831.062628][T18644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 831.596056][T18698] random: crng reseeded on system resumption [ 832.276699][ T5848] Bluetooth: hci1: command tx timeout [ 832.296094][T18644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.466366][T18644] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.532288][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.539504][ T8648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.641283][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.648666][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.689900][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2355'. [ 832.739994][T18707] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2355'. [ 832.807138][T18644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.305704][T18644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.338462][ T5848] Bluetooth: hci1: command tx timeout [ 835.011627][T18644] veth0_vlan: entered promiscuous mode [ 835.062033][T18644] veth1_vlan: entered promiscuous mode [ 835.142436][T18644] veth0_macvtap: entered promiscuous mode [ 835.169969][T18644] veth1_macvtap: entered promiscuous mode [ 835.245593][T18644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.277985][T18644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.332949][T17866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.358665][T17866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.393280][T17866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.412921][T17866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.611109][T17255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.654355][T17255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.861120][T17255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.929572][T17255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.693147][T18782] binder: 18778:18782 ioctl 400c620e 0 returned -22 [ 843.650378][T18877] random: crng reseeded on system resumption [ 846.424777][T18916] FAULT_INJECTION: forcing a failure. [ 846.424777][T18916] name failslab, interval 1, probability 0, space 0, times 0 [ 846.526103][T18916] CPU: 1 UID: 0 PID: 18916 Comm: syz.6.2394 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 846.526133][T18916] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 846.526140][T18916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 846.526148][T18916] Call Trace: [ 846.526153][T18916] [ 846.526158][T18916] dump_stack_lvl+0x16c/0x1f0 [ 846.526182][T18916] should_fail_ex+0x512/0x640 [ 846.526195][T18916] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 846.526210][T18916] should_failslab+0xc2/0x120 [ 846.526228][T18916] __kmalloc_cache_noprof+0x6a/0x3e0 [ 846.526241][T18916] ? ip6addrlbl_add+0x69c/0xc40 [ 846.526258][T18916] ? ip6addrlbl_add+0xbb/0xc40 [ 846.526277][T18916] ip6addrlbl_add+0xbb/0xc40 [ 846.526299][T18916] ip6addrlbl_net_init+0x10a/0x380 [ 846.526318][T18916] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 846.526336][T18916] ops_init+0x1e2/0x5f0 [ 846.526358][T18916] setup_net+0x10f/0x380 [ 846.526375][T18916] ? lockdep_init_map_type+0x5c/0x280 [ 846.526393][T18916] ? __pfx_setup_net+0x10/0x10 [ 846.526412][T18916] ? debug_mutex_init+0x37/0x70 [ 846.526435][T18916] copy_net_ns+0x2a6/0x5f0 [ 846.526449][T18916] create_new_namespaces+0x3ea/0xa90 [ 846.526468][T18916] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 846.526485][T18916] ksys_unshare+0x45b/0xa40 [ 846.526502][T18916] ? __pfx_ksys_unshare+0x10/0x10 [ 846.526519][T18916] ? xfd_validate_state+0x61/0x180 [ 846.526542][T18916] __x64_sys_unshare+0x31/0x40 [ 846.526558][T18916] do_syscall_64+0xcd/0x490 [ 846.526578][T18916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.526602][T18916] RIP: 0033:0x7fccd3b8eb69 [ 846.526614][T18916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.526628][T18916] RSP: 002b:00007fccd4a0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 846.526642][T18916] RAX: ffffffffffffffda RBX: 00007fccd3db5fa0 RCX: 00007fccd3b8eb69 [ 846.526652][T18916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 846.526662][T18916] RBP: 00007fccd3c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 846.526673][T18916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.526681][T18916] R13: 0000000000000000 R14: 00007fccd3db5fa0 R15: 00007ffffb536e58 [ 846.526698][T18916] [ 849.814825][T18961] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2404'. [ 850.422248][T18972] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 853.007712][T19006] perf: Dynamic interrupt throttling disabled, can hang your system! [ 853.842574][T19044] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 856.969478][T19114] cougar: G6 mapped to space [ 857.894002][ T30] audit: type=1804 audit(4295000260.614:33): pid=19126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2439" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 857.900907][T19128] netlink: 'syz.2.2441': attribute type 4 has an invalid length. [ 858.008888][T19128] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 858.261686][T19128] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 859.153823][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2443'. [ 859.624104][T19147] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.846719][T19147] bridge_slave_1 (unregistering): left allmulticast mode [ 859.863573][T19147] bridge_slave_1 (unregistering): left promiscuous mode [ 859.940318][T19147] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.486911][T19186] ubi0: attaching mtd0 [ 861.507787][T19186] ubi0: scanning is finished [ 861.526911][T19186] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 861.767404][T19186] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 862.219655][T19212] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 862.626024][T19218] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1399518286.2975590221.746094147), cmd(5) [ 862.731574][T19218] device-mapper: ioctl: Invalid data size in the ioctl structure: 2371649809 [ 862.815136][T19218] device-mapper: ioctl: Invalid data size in the ioctl structure: 2371649809 [ 862.885298][T19218] device-mapper: ioctl: Invalid data size in the ioctl structure: 2371649809 [ 862.912584][T19218] device-mapper: ioctl: Invalid data size in the ioctl structure: 2371649809 [ 862.975630][T19218] device-mapper: ioctl: Invalid data size in the ioctl structure: 2371649809 [ 863.042965][T19218] device-mapper: ioctl: Invalid data size in the ioctl structure: 2371649809 [ 866.669777][T19301] block2mtd: illegal erase size [ 868.842642][T19346] kvm: user requested TSC rate below hardware speed [ 869.065268][T19353] phram: not enough arguments [ 870.276929][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.291559][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.739762][T19398] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 871.070341][T19401] zswap: compressor not available [ 871.359297][T19416] random: crng reseeded on system resumption [ 872.847421][T19458] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2504'. [ 872.848522][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 872.867448][T19459] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2504'. [ 872.888468][T19457] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2504'. [ 872.938576][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 872.947592][T19457] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2504'. [ 873.078624][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 873.130373][T19469] random: crng reseeded on system resumption [ 873.318465][T19457] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2504'. [ 873.330673][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 873.476367][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 874.342418][T19449] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 876.839163][T19531] kexec: Could not allocate control_code_buffer [ 876.931922][T19543] random: crng reseeded on system resumption [ 877.050260][T19550] __vm_enough_memory: pid: 19550, comm: syz.4.2519, bytes: 4398046511104 not enough memory for the allocation [ 877.671184][T19565] vivid-003: ================= START STATUS ================= [ 877.683192][T19565] vivid-003: Radio HW Seek Mode: Bounded [ 877.788169][T19565] vivid-003: Radio Programmable HW Seek: false [ 877.795847][T19565] vivid-003: RDS Rx I/O Mode: Block I/O [ 877.801822][T19565] vivid-003: Generate RBDS Instead of RDS: false [ 877.816381][T19565] vivid-003: RDS Reception: true [ 877.822100][T19565] vivid-003: RDS Program Type: 0 inactive [ 877.828237][T19565] vivid-003: RDS PS Name: inactive [ 877.833714][T19565] vivid-003: RDS Radio Text: inactive [ 877.840073][T19565] vivid-003: RDS Traffic Announcement: false inactive [ 877.851177][T19565] vivid-003: RDS Traffic Program: false inactive [ 877.934745][T19565] vivid-003: RDS Music: false inactive [ 877.948351][T19565] vivid-003: ================== END STATUS ================== [ 878.488728][T19581] ptp ptp0: only physical clock in use now [ 878.519939][T19583] __nla_validate_parse: 28 callbacks suppressed [ 878.519959][T19583] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2523'. [ 878.642523][T19585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 878.649054][T19585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 883.029619][T19692] FAULT_INJECTION: forcing a failure. [ 883.029619][T19692] name failslab, interval 1, probability 0, space 0, times 0 [ 883.075092][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.4.2544 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 883.075145][T19692] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 883.075157][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.075172][T19692] Call Trace: [ 883.075181][T19692] [ 883.075192][T19692] dump_stack_lvl+0x16c/0x1f0 [ 883.075235][T19692] should_fail_ex+0x512/0x640 [ 883.075265][T19692] should_failslab+0xc2/0x120 [ 883.075297][T19692] __kmalloc_cache_noprof+0x6a/0x3e0 [ 883.075325][T19692] ? __pfx_sctp_get_port_local+0x10/0x10 [ 883.075359][T19692] ? sctp_bind_addr_match+0x193/0x300 [ 883.075388][T19692] ? sctp_add_bind_addr+0xae/0x3f0 [ 883.075422][T19692] sctp_add_bind_addr+0xae/0x3f0 [ 883.075458][T19692] sctp_do_bind+0x2d6/0x700 [ 883.075504][T19692] sctp_bind+0xa4/0x110 [ 883.075541][T19692] ? __pfx_sctp_bind+0x10/0x10 [ 883.075581][T19692] inet6_bind+0x9a/0x120 [ 883.075610][T19692] __sys_bind+0x1a7/0x260 [ 883.075642][T19692] ? __pfx___sys_bind+0x10/0x10 [ 883.075685][T19692] ? xfd_validate_state+0x61/0x180 [ 883.075719][T19692] ? __pfx___do_sys_close_range+0x10/0x10 [ 883.075756][T19692] __x64_sys_bind+0x72/0xb0 [ 883.075783][T19692] ? lockdep_hardirqs_on+0x7c/0x110 [ 883.075816][T19692] do_syscall_64+0xcd/0x490 [ 883.075854][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.075879][T19692] RIP: 0033:0x7f72ceb8eb69 [ 883.075900][T19692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.075926][T19692] RSP: 002b:00007f72cc9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 883.075950][T19692] RAX: ffffffffffffffda RBX: 00007f72cedb5fa0 RCX: 00007f72ceb8eb69 [ 883.075967][T19692] RDX: 000000000000006a RSI: 0000200000000100 RDI: 0000000000000003 [ 883.075983][T19692] RBP: 00007f72cec11df1 R08: 0000000000000000 R09: 0000000000000000 [ 883.075998][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.076013][T19692] R13: 0000000000000000 R14: 00007f72cedb5fa0 R15: 00007fff7842fd78 [ 883.076047][T19692] [ 883.131836][T19696] sctp: [Deprecated]: syz.4.2544 (pid 19696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 883.131836][T19696] Use struct sctp_sack_info instead [ 883.135413][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.314762][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.320853][ C0] hrtimer: interrupt took 242756094 ns [ 883.420885][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.069122][ T30] audit: type=1800 audit(4295000286.794:34): pid=19712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2543" name="features" dev="configfs" ino=76235 res=0 errno=0 [ 886.886089][T19772] FAULT_INJECTION: forcing a failure. [ 886.886089][T19772] name failslab, interval 1, probability 0, space 0, times 0 [ 886.972033][T19772] CPU: 1 UID: 0 PID: 19772 Comm: syz.4.2555 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 886.972084][T19772] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 886.972096][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 886.972111][T19772] Call Trace: [ 886.972118][T19772] [ 886.972127][T19772] dump_stack_lvl+0x16c/0x1f0 [ 886.972169][T19772] should_fail_ex+0x512/0x640 [ 886.972199][T19772] should_failslab+0xc2/0x120 [ 886.972232][T19772] __kmalloc_cache_noprof+0x6a/0x3e0 [ 886.972259][T19772] ? tipc_conn_alloc+0x48/0x590 [ 886.972295][T19772] tipc_conn_alloc+0x48/0x590 [ 886.972326][T19772] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 886.972366][T19772] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 886.972404][T19772] ? net_generic+0xea/0x2a0 [ 886.972444][T19772] tipc_group_create+0x4ab/0x660 [ 886.972483][T19772] tipc_setsockopt+0x7f0/0xdb0 [ 886.972525][T19772] ? __pfx_tipc_setsockopt+0x10/0x10 [ 886.972580][T19772] ? __fget_files+0x204/0x3c0 [ 886.972613][T19772] ? __pfx_tipc_setsockopt+0x10/0x10 [ 886.972654][T19772] do_sock_setsockopt+0xf0/0x1d0 [ 886.972686][T19772] __sys_setsockopt+0x120/0x1a0 [ 886.972726][T19772] __x64_sys_setsockopt+0xbd/0x160 [ 886.972758][T19772] ? do_syscall_64+0x91/0x490 [ 886.972792][T19772] ? lockdep_hardirqs_on+0x7c/0x110 [ 886.972831][T19772] do_syscall_64+0xcd/0x490 [ 886.972868][T19772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.972900][T19772] RIP: 0033:0x7f72ceb8eb69 [ 886.972922][T19772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.972948][T19772] RSP: 002b:00007f72cc9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 886.972973][T19772] RAX: ffffffffffffffda RBX: 00007f72cedb5fa0 RCX: 00007f72ceb8eb69 [ 886.972991][T19772] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 886.973006][T19772] RBP: 00007f72cec11df1 R08: 0000000000000014 R09: 0000000000000000 [ 886.973022][T19772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.973038][T19772] R13: 0000000000000000 R14: 00007f72cedb5fa0 R15: 00007fff7842fd78 [ 886.973072][T19772] [ 887.866698][ T5848] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 887.912267][T19790] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 888.257530][T19778] kexec: Could not allocate control_code_buffer [ 894.431827][T19851] Process accounting resumed [ 895.013186][T19874] random: crng reseeded on system resumption [ 896.263297][T19877] random: crng reseeded on system resumption [ 897.694226][T19927] netlink: zone id is out of range [ 898.044355][T19928] Invalid ELF header magic: != ELF [ 899.404058][T19956] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2592'. [ 900.462484][T19957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2591'. [ 901.869417][T19978] netlink: 'syz.6.2595': attribute type 2 has an invalid length. [ 903.879355][T20016] can: request_module (can-proto-0) failed. [ 903.937601][T20018] mkiss: ax0: crc mode is auto. [ 907.423396][T20064] Line length is too long: Should be less than 4094 [ 907.434284][ T30] audit: type=1804 audit(4295000310.144:35): pid=20064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2613" name="/newroot/431/file0" dev="tmpfs" ino=2268 res=1 errno=0 [ 1325.233472][T26994] Process accounting resumed [ 1325.442031][T27039] netlink: 302 bytes leftover after parsing attributes in process `syz.4.4029'. [ 1327.056510][T27083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 1328.184387][T27106] [ 1328.187021][T27106] ====================================================== [ 1328.194381][T27106] WARNING: possible circular locking dependency detected [ 1328.201395][T27106] 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 Tainted: GF R U [ 1328.209798][T27106] ------------------------------------------------------ [ 1328.216806][T27106] syz.4.4042/27106 is trying to acquire lock: [ 1328.223402][T27106] ffff88814276d468 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 1328.232967][T27106] [ 1328.232967][T27106] but task is already holding lock: [ 1328.240333][T27106] ffff88814276cf28 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1328.251572][T27106] [ 1328.251572][T27106] which lock already depends on the new lock. [ 1328.251572][T27106] [ 1328.262077][T27106] [ 1328.262077][T27106] the existing dependency chain (in reverse order) is: [ 1328.271386][T27106] [ 1328.271386][T27106] -> #3 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 1328.280261][T27106] blk_alloc_queue+0x619/0x760 [ 1328.285763][T27106] blk_mq_alloc_queue+0x172/0x280 [ 1328.291777][T27106] __blk_mq_alloc_disk+0x29/0x120 [ 1328.297888][T27106] loop_add+0x490/0xb70 [ 1328.303336][T27106] loop_init+0x164/0x270 [ 1328.308219][T27106] do_one_initcall+0x120/0x6e0 [ 1328.313526][T27106] kernel_init_freeable+0x5c2/0x900 [ 1328.319506][T27106] kernel_init+0x1c/0x2b0 [ 1328.324384][T27106] ret_from_fork+0x5d7/0x6f0 [ 1328.329674][T27106] ret_from_fork_asm+0x1a/0x30 [ 1328.335045][T27106] [ 1328.335045][T27106] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1328.342442][T27106] fs_reclaim_acquire+0x102/0x150 [ 1328.348479][T27106] prepare_alloc_pages+0x162/0x610 [ 1328.354353][T27106] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1328.360899][T27106] __alloc_pages_noprof+0xb/0x1b0 [ 1328.366726][T27106] pcpu_populate_chunk+0x110/0xb00 [ 1328.372385][T27106] pcpu_alloc_noprof+0x86a/0x1470 [ 1328.378162][T27106] bpf_map_alloc_percpu+0x9a/0x4b0 [ 1328.383909][T27106] htab_map_alloc+0x10ca/0x1570 [ 1328.389490][T27106] map_create+0x58f/0x1db0 [ 1328.394457][T27106] __sys_bpf+0x44d2/0x4de0 [ 1328.399435][T27106] __x64_sys_bpf+0x78/0xc0 [ 1328.404457][T27106] do_syscall_64+0xcd/0x490 [ 1328.409923][T27106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.416632][T27106] [ 1328.416632][T27106] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1328.424614][T27106] __mutex_lock+0x191/0x1070 [ 1328.429724][T27106] pcpu_alloc_noprof+0xb4c/0x1470 [ 1328.435427][T27106] sbitmap_init_node+0x2fd/0x770 [ 1328.440979][T27106] sbitmap_queue_init_node+0x41/0x560 [ 1328.446860][T27106] blk_mq_init_tags+0x12d/0x2b0 [ 1328.452216][T27106] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1328.458270][T27106] blk_mq_init_sched+0x30c/0x610 [ 1328.463756][T27106] elevator_switch+0x1e1/0x7f0 [ 1328.469056][T27106] elevator_change+0x2ac/0x400 [ 1328.474725][T27106] elevator_set_default+0x2c4/0x360 [ 1328.480454][T27106] blk_register_queue+0x393/0x4f0 [ 1328.486251][T27106] __add_disk+0x74a/0xf00 [ 1328.491125][T27106] add_disk_fwnode+0x13f/0x5d0 [ 1328.496500][T27106] nbd_dev_add+0x783/0xbb0 [ 1328.501510][T27106] nbd_init+0x181/0x320 [ 1328.506466][T27106] do_one_initcall+0x120/0x6e0 [ 1328.511757][T27106] kernel_init_freeable+0x5c2/0x900 [ 1328.517560][T27106] kernel_init+0x1c/0x2b0 [ 1328.522393][T27106] ret_from_fork+0x5d7/0x6f0 [ 1328.527597][T27106] ret_from_fork_asm+0x1a/0x30 [ 1328.533059][T27106] [ 1328.533059][T27106] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1328.540960][T27106] __lock_acquire+0x126f/0x1c90 [ 1328.546387][T27106] lock_acquire+0x179/0x350 [ 1328.551876][T27106] __mutex_lock+0x191/0x1070 [ 1328.557093][T27106] elevator_change+0x103/0x400 [ 1328.562472][T27106] elv_iosched_store+0x2eb/0x3a0 [ 1328.567946][T27106] queue_attr_store+0x268/0x310 [ 1328.573560][T27106] sysfs_kf_write+0xef/0x150 [ 1328.578691][T27106] kernfs_fop_write_iter+0x354/0x510 [ 1328.584720][T27106] vfs_write+0x6c7/0x1150 [ 1328.589667][T27106] ksys_write+0x12a/0x250 [ 1328.594590][T27106] do_syscall_64+0xcd/0x490 [ 1328.599734][T27106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.606309][T27106] [ 1328.606309][T27106] other info that might help us debug this: [ 1328.606309][T27106] [ 1328.616543][T27106] Chain exists of: [ 1328.616543][T27106] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 1328.616543][T27106] [ 1328.630741][T27106] Possible unsafe locking scenario: [ 1328.630741][T27106] [ 1328.638189][T27106] CPU0 CPU1 [ 1328.643798][T27106] ---- ---- [ 1328.649764][T27106] lock(&q->q_usage_counter(io)#18); [ 1328.655136][T27106] lock(fs_reclaim); [ 1328.661635][T27106] lock(&q->q_usage_counter(io)#18); [ 1328.669513][T27106] lock(&q->elevator_lock); [ 1328.674170][T27106] [ 1328.674170][T27106] *** DEADLOCK *** [ 1328.674170][T27106] [ 1328.682296][T27106] 7 locks held by syz.4.4042/27106: [ 1328.687560][T27106] #0: ffff888064427eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1328.696651][T27106] #1: ffff888024d8e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1328.705882][T27106] #2: ffff88804510e488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1328.715716][T27106] #3: ffff888142bc5788 (kn->active#379){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1328.726149][T27106] #4: ffff888025d8e368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 1328.737031][T27106] #5: ffff88814276cf28 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1328.748923][T27106] #6: ffff88814276cf60 (&q->q_usage_counter(queue)#26){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1328.761027][T27106] [ 1328.761027][T27106] stack backtrace: [ 1328.766987][T27106] CPU: 0 UID: 0 PID: 27106 Comm: syz.4.4042 Tainted: GF R U 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1328.767015][T27106] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1328.767021][T27106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1328.767031][T27106] Call Trace: [ 1328.767038][T27106] [ 1328.767045][T27106] dump_stack_lvl+0x116/0x1f0 [ 1328.767077][T27106] print_circular_bug+0x275/0x350 [ 1328.767095][T27106] check_noncircular+0x14c/0x170 [ 1328.767114][T27106] __lock_acquire+0x126f/0x1c90 [ 1328.767133][T27106] lock_acquire+0x179/0x350 [ 1328.767149][T27106] ? elevator_change+0x103/0x400 [ 1328.767165][T27106] ? __pfx___might_resched+0x10/0x10 [ 1328.767181][T27106] ? elevator_change+0x103/0x400 [ 1328.767195][T27106] __mutex_lock+0x191/0x1070 [ 1328.767214][T27106] ? elevator_change+0x103/0x400 [ 1328.767300][T27106] ? __pfx___mutex_lock+0x10/0x10 [ 1328.767321][T27106] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 1328.767342][T27106] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 1328.767364][T27106] ? elevator_change+0x103/0x400 [ 1328.767379][T27106] elevator_change+0x103/0x400 [ 1328.767394][T27106] elv_iosched_store+0x2eb/0x3a0 [ 1328.767412][T27106] ? __pfx_elv_iosched_store+0x10/0x10 [ 1328.767430][T27106] ? __mutex_trylock_common+0xe9/0x250 [ 1328.767448][T27106] ? __pfx_elv_iosched_store+0x10/0x10 [ 1328.767465][T27106] queue_attr_store+0x268/0x310 [ 1328.767484][T27106] ? __pfx_queue_attr_store+0x10/0x10 [ 1328.767496][T27106] ? __lock_acquire+0x622/0x1c90 [ 1328.767516][T27106] ? find_held_lock+0x2b/0x80 [ 1328.767528][T27106] ? sysfs_file_kobj+0xe4/0x290 [ 1328.767543][T27106] ? __pfx_queue_attr_store+0x10/0x10 [ 1328.767556][T27106] sysfs_kf_write+0xef/0x150 [ 1328.767570][T27106] kernfs_fop_write_iter+0x354/0x510 [ 1328.767590][T27106] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1328.767604][T27106] vfs_write+0x6c7/0x1150 [ 1328.767619][T27106] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1328.767640][T27106] ? __pfx___mutex_lock+0x10/0x10 [ 1328.767658][T27106] ? __pfx_vfs_write+0x10/0x10 [ 1328.767676][T27106] ksys_write+0x12a/0x250 [ 1328.767691][T27106] ? __pfx_ksys_write+0x10/0x10 [ 1328.767707][T27106] do_syscall_64+0xcd/0x490 [ 1328.767727][T27106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.767742][T27106] RIP: 0033:0x7f301eb8eb69 [ 1328.767755][T27106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.767769][T27106] RSP: 002b:00007f301f9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1328.767783][T27106] RAX: ffffffffffffffda RBX: 00007f301edb5fa0 RCX: 00007f301eb8eb69 [ 1328.767793][T27106] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000004 [ 1328.767802][T27106] RBP: 00007f301ec11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1328.767811][T27106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.767820][T27106] R13: 0000000000000000 R14: 00007f301edb5fa0 R15: 00007fffc3123cb8 [ 1328.767833][T27106] [ 1328.767888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.072063][ C0] vkms_vblank_simulate: vblank timer overrun