last executing test programs: 7m16.884351646s ago: executing program 1 (id=1165): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) shutdown$auto(0x200000003, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000004", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25020000000800010070840000"], 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2, 0xd356, 0xeb2, 0x7f, 0x8000) msync$auto(0x0, 0x18fa, 0x4) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000002c0), 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x8dc, 0xb, &(0x7f0000000400)={{0x5, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0x3}, 0x10, 0x0, 0x401, 0x4, @raw=0x1, @raw=0x1, 0x7f, 0x0, &(0x7f0000000300)="31ebec0fc2918aac41f8e878cb35af4a5ebdce7327b8e2a76c0aca6e40b86419b139a7f29d17484292d91b11a1b86f01432b1178b609b890f602a0102132a61c6f73ff5c1abb0ab5f243ca4b4c69b50f34df566c9122a09d98cd168044503fca2e1e5a56ac6350a1f94f7c1f04225715b5f608c63d2c66511f9690368388897f38f55b41a14c174d6411205b4c556839c9b6", &(0x7f00000003c0)="fd364d1715ea4454f8b146b4cc5f56bf73702ee82891a3fe8e6b8428560b12ffc037a2927ca107cc"}) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r5, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000480)={0x294, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NCSI_ATTR_DATA={0x1c7, 0x5, "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"}, @NCSI_ATTR_DATA={0x82, 0x5, "9ae222424791d5448a4b0bbbd33ffdf2b3a457f3c6d1b038489c3a28088d8494f9eb2422c1ef8ae3339fabf86dc0f495e660412a5c167a5adab199f39a9e2925310b2d206342de16b43966f81e12840060e94bd0db8ad2793af80ee602ef6dee14090756f263f9dd6c0a5f02a6cce6ec7b1202d29bf52a12a3368088f441"}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x341}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x10000fff}]}, 0x294}, 0x1, 0x0, 0x0, 0x801}, 0x48084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a8060091", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x6a8}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000000) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r4, 0x4, 0x0, 0x2) select$auto(0x9, &(0x7f0000000000)={[0x8, 0x3ff, 0xff, 0x15, 0x7, 0x2, 0x8, 0x2, 0x9, 0x10001, 0xbffc, 0x7, 0x8, 0x2, 0x40, 0x1e]}, &(0x7f0000000080)={[0xe06b, 0x7f, 0x400, 0x6fbd, 0x79a3, 0x2, 0xb500, 0x7f, 0x520e, 0x1, 0x4, 0xbd, 0x91d, 0x7ff, 0x54, 0x2]}, &(0x7f0000000100)={[0x8001, 0x2, 0x81, 0x8, 0xc, 0x9d0b, 0x8, 0x0, 0x8, 0x5, 0xff, 0x2, 0x9, 0x31, 0x960, 0x1]}, &(0x7f0000000180)={0xc37, 0x6}) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) capget$auto(&(0x7f0000000a00)={0xbca, 0xffffffffffffffff}, &(0x7f0000000a40)={0x4, 0x1, 0x8}) ioctl$auto_XFS_IOC_FREESP(r5, 0x4030580b, &(0x7f0000000a80)={0x3, 0x970f, 0xffffffffffffda6b, 0xffffffffffffffff, 0xfffffffc, r8}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_sg_fops_sg(r0, 0x0, 0x0) 7m14.015714805s ago: executing program 1 (id=1174): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000060) setresuid$auto(0x0, 0x8, 0x0) r2 = setfsuid$auto(0x0) r3 = socket(0x9, 0x7, 0x0) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(r2) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccce21cdd2ac50277c5e4d4"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x4, 0x5, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) r8 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(r1, 0xffffffffffffffff, 0x3) getsockopt$auto_SO_GET_FILTER(r1, 0xa3, 0x1a, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000180)=0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) sendto$auto(r8, 0x0, 0xfffffffffffffdef, 0x8, 0x0, 0x20) 7m12.883539734s ago: executing program 1 (id=1176): close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)={0xdd, 0x0, [{0x4b564d02, 0x9, 0xa}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0xa080, 0x0) socket(0xa, 0x3, 0x3c) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)=0x4) 7m12.278480014s ago: executing program 1 (id=1178): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r1 = setfsuid$auto(0x0) r2 = socket(0x9, 0x7, 0x0) getsockopt$auto(r2, 0x107, 0x1, 0x0, 0x0) setuid$auto(r1) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x0, 0xfffffffffffffffd}, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x8, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccce21cdd2ac50277c5e4d4"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x4, 0x5, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) 7m11.315550336s ago: executing program 1 (id=1182): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r0, 0x40045702, &(0x7f0000000040)=0x7fffffff) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0xaa, 0xb, 0x1, 0x80000001, "e7227115127a1e877000"}) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x756584abe53e01d7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) (async) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) (async) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000200), r5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @pid}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x400c800) ioctl$auto(r1, 0x8, r3) (async) ioctl$auto_FIGETBSZ(r3, 0x2, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) mmap$auto(0x0, 0x4, 0x0, 0x40eb2, 0x402, 0x300000000000) (async) tkill$auto(0x1, 0x7) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x24a000, 0x0) 7m9.496313565s ago: executing program 1 (id=1186): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1a, 0x1, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d8) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) poll$auto(&(0x7f0000000080)={r4, 0x8, 0x2}, 0x7, 0xfffff987) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) r5 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'caif0\x00'}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r6 = socket(0xa, 0x3, 0x3a) ioctl$auto(r6, 0x890c, 0x1) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r7, 0x2, 0x9) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) 7m9.099739978s ago: executing program 32 (id=1186): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1a, 0x1, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d8) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) poll$auto(&(0x7f0000000080)={r4, 0x8, 0x2}, 0x7, 0xfffff987) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) r5 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'caif0\x00'}) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r6 = socket(0xa, 0x3, 0x3a) ioctl$auto(r6, 0x890c, 0x1) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r7, 0x2, 0x9) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) 2m32.271952006s ago: executing program 3 (id=2307): mmap$auto(0x0, 0x2020009, 0x2000, 0x10000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0xa22c0, 0x151) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0xc380, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r1 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000054) clock_gettime$auto(0x2fb, &(0x7f0000001580)={0x5, 0x7ff}) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) ioctl$auto(0x3, 0x890b, 0x38) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x400, 0x3, 0xade5, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x6) ioctl$auto(r2, 0x4000457b, r3) 2m32.014179344s ago: executing program 3 (id=2308): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, 0x0, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="79a327bd700099e8fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r2, 0x0, 0xb4d3) 2m30.621845614s ago: executing program 3 (id=2311): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x27, 0x4, 0xfe) mmap$auto(0x3ff, 0x400008, 0x10000000df, 0x9b7f, r0, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x8002, 0x52, &(0x7f00000001c0)='/dev/virtua\xa5\xb83\x8ei\x00', 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) rseq$auto(0xfffffffffffffffd, 0xfffffffc, 0x0, 0x808) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0xfffffffffffffffa, 0x5, 0x2000000003, 0x1, 0x9, 0x1, 0x2]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram1\x00', 0x1cbe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x8, 0xa, 0x2f0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) socket(0x2, 0x801, 0x6) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8001c01, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 2m29.37430249s ago: executing program 3 (id=2315): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x40, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x1f4, r2, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1dc, 0x1, 0x0, 0x1, [@nested={0x1d8, 0x139, 0x0, 0x1, [@nested={0x1d3, 0xeb, 0x0, 0x1, [@generic="4540411dc202cca7c3000938b0c18de4cfac1203a8319dc7b96f0e2a79334de3be28009e292ede89fa03", @typed={0x8, 0xdd, 0x0, 0x0, @pid}, @generic="6930d90e6909e2b8e7eb7fce61b1c025380ce4702699d87c1fed3cf9f146b4ded92ce82ffe7fa2ac72640f557a845a28a0e484eab4c323b7a631c0e9ea7cd1623d365b31ac8f93d7b7ba1fe0dc38aac8423995fbf05cefbfcc2cf976cdb77a84b14a852fa07c112b31360ea6913f2214d52fd4fdc9d70f5d00ae063c4b369b11a363e0a6f5f9edfc8b527c68e2f43e321c", @nested={0x63, 0xe8, 0x0, 0x1, [@generic="b43e00104808a69ceefccdc7208d795692755d48b7d3eaf37da135891ae1764cf2fdac302d49af25e1cfedfa7d2ea160f99e24961c2a3f75338a77437119afaf3c16c367d73289398b08", @generic="151410cb8e5e702b6c00f1ace487751a9e17", @generic="197d6a"]}, @nested={0x4, 0x12d}, @nested={0x99, 0x109, 0x0, 0x1, [@generic="18dd0047f071cf26f71d7c3e0953a7b809f180b71a907ce8eee916b786c12bef043849f161b88cbb4f01bf22d7564404244d4a13c3a6386f14ef3c114ccaa122e838b4e7a335dea8cbe3bcec519afde9f5c23303b82c57b41f730b3046db635a18dd6ae8e02e7eecc84472f0833c6a03b2d8ab0f34a797c4cc4a02f9775150e42001e3c49e4af528b3", @typed={0xc, 0xf0, 0x0, 0x0, @u64=0x4}]}, @typed={0x8, 0x50, 0x0, 0x0, @uid}]}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) (async) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r3 = socket(0x18, 0x1, 0x0) (async) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x44c942, 0x0) ioctl$auto(r4, 0x5522, 0xf15) (async) ioctl$auto(r4, 0x5523, r4) (async) syz_genetlink_get_family_id$auto_thermal(0x0, r3) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m29.128190005s ago: executing program 3 (id=2316): r0 = syz_clone(0xa00c2000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x1c, r2, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)=@bpf_attr_4={0x7f, 0xffffffffffffffff, 0xf16}, 0xfffffffa) close_range$auto(r1, r3, 0x3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x3, 0x6, 0x2, 0x1a, r4, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) write$auto(0x3, 0x0, 0xffd8) 2m28.038610011s ago: executing program 3 (id=2319): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x2000, 0x2003f0, 0x15) bpf$auto(0x5, 0x0, 0x102) getpid() r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, 0x0, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 2m12.322603771s ago: executing program 33 (id=2319): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x2000, 0x2003f0, 0x15) bpf$auto(0x5, 0x0, 0x102) getpid() r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, 0x0, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 1m18.062487489s ago: executing program 2 (id=2527): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xf, 0x800, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x100280, 0x0) ioctl$auto_SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000280)="81a8995e191c7a05d1fe2d996b3ab435a8eefb74fb3349644c12a73d3767dd9e3e3322662f0b5e556d9c59a6fe67e8ea56f9c138e2a6dec669b2acdc24f41f2d2a2c573d5ecb175958531ae2050f9b9dc0929ffcf1f9d31ffae8ed5e24f083dec29d836ad98f4f3645eba58403dcca63fc35483f11bd1c6f0aa0b06048edefff9537e392c44a11092271cbcfaf7a9d0c684998c6bf44ca6978b911c2e2d17a9627a0af6ec6705c3566f79e114f685919e691d69d02855d424f") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) capset$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x4b, &(0x7f0000000040)={{0x3, 0x1}, {0xc, 0x4c}}, 0x0) 1m16.651630566s ago: executing program 2 (id=2531): kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x21, 0x2, 0x2) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f00000009c0)) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x40085400, 0x5) 1m14.942063102s ago: executing program 2 (id=2534): setresuid$auto(0x2, 0x7, 0x0) r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x3) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) shmctl$auto(0x2, 0x7f, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x2, 0x5}, 0x2, 0x0, 0x6, 0xaf3, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0xfe00, 0x0, &(0x7f0000000180)="bcc64a095861fe4011620722571df88bad7f3144bbb664f51fb1a3837b7f2316c2cfdb4e8b37b1bb7445d79d3942ae77b3838984537e5536ec16c1", &(0x7f00000001c0)="0eee5633eee9ba81f992efed72eee6c58c1c45a40f6dbfcc42eae838f27bd98e7abd96e5d7284effc80137bcad851e55916a3a85a34b303476ea67619540d1405148eae4486ddc9ed8257ffe"}) r3 = openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x141040, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000240)={0x958a, 0x9, 0x2, 0x3, 0x3, 0x0}) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f00000003c0)={0x18a4, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x170a, 0x1, 0x0, 0x1, [@nested={0x209, 0x2d, 0x0, 0x1, [@nested={0x4, 0xd7}, @typed={0x97, 0x1a, 0x0, 0x0, @binary="7cec6bed10b18d16fed0bd2315440bc9798ab57c40df51bb0da22855ff17835c017bcddde4adad78b5e1ae1716fb809fdac87fa8fecfba194c5036d6ff53267ceed4f98caa8c5fa05f3b484abf4cd852484c516bb1c2f3205729ecd50d3aad16048868805fea080676cb5ca265272d29e79de32dfa6e1ee39fe1faa98b46fdecf551d3bf54739affba03bffc1ab997108e7b68"}, @nested={0x4, 0x37}, @generic="3460bda4a6f89bc743d898586d78343ad9408c3a06470569ce23894d0125240ff647ecfc8dfaa335d69448bbe89c22f54af1874558e642ccd25783fdf0ee62732f462b9817a54ee31f3b9f50a97c9be604352c981f175ec50c5a77456d90c6fb7a01c0bdaad210fa9b8d8bc903e3c9c029d9960995", @generic="f5d175eea378694849600fec944b1e4a9be09eda2c7c3f0888f53027369c34f69128246250ecad6671ad49eb8ee5b69d874b817ab525f184fc228892dbfd82d4d0d859b39b4cd368abfea9f95d238602c950cffdfcdf9321cd8e71c4f60b4d1eb22c7115c266765199d7ad2abdf15adbae03f423510ef0031e94491691b93d272c02a1838c566cd1516d6d256f48c32a4cefaeedb4f5a9154a1f10d17270fe6b50c331c15f93831b197264b9f0d034c94fd2adb1f2c74dca6d743c3a6aee102d50d4a03151ff8eb8b50cb666156ddca1a85342daa83a2cca5d25aed095471aaf5c77e95a3f22178c6a59530942a8d4bd"]}, @nested={0x212, 0x3f, 0x0, 0x1, [@generic="05604d538bccda9082d7166960265805d11d0fdc1f56fa4d7daf254f0c70852a245cef720ed39f99703d4a1de19950881651a98b21a6f7b41fdda00e47d62330f7966a1ac86de5a335a3121221584ffe12c7e09a52e368188db2b9660b4c22b3239d8526524acad9c341cf464452730e22489f510739956b64460bb324fd6093f0ad012bf1c81ddeb87c63bff3845fdb7889007e4b", @typed={0xc, 0x118, 0x0, 0x0, @u64=0x63968c0e}, @generic="5095dc2e15d5269879abcea58c8df23afd1246b3995c7bc63cc8fe84b1", @typed={0x67, 0x19, 0x0, 0x0, @binary="1c99a9f04d9b47f1568a2d8835ac3364e07af3af602a1bc954c9300f5d87f4cf57d2745cf1ccf69359504812a2e0398ce9e5fed462f71dbcf1749bcadcf5950f7468fc85ccc89daeb80d9ad2a37592d90f445cc0acf651e72315d40e44978ec2b8503b"}, @typed={0xd4, 0x121, 0x0, 0x0, @binary="8e37bdaf9adf60ccf1a9332a9323f6e4cc51af635f7da91bb6ec15ee08985688f55bd260d612c953a09741fdbe7e24007ec709e24b36ff6e7befa705b471c3b4572542d2d6f4549eb3e2163178f982a5a7ed0f63b49feb51ce81e1b049625931e73aa85fb32d6f6c22ba9747204fa760f016e95623228e158ce87b348752098e6d341cde27cae827cf370d750a7eba601a0c74b53955ad84bff9378e34cc66e5ef72067b42bb086c619f4e58d5255b2119d62308fa803bec3cc5c79c5f20b8b62fea5590766431af8429851162758deb"}, @nested={0x4, 0x9a}, @typed={0x4, 0x18}, @typed={0xb, 0xea, 0x0, 0x0, @str='dummy0\x00'}]}, @generic="02da68c7eacec580f8a9856dfd6193e1ab53a36ee15943dac586ae9477e6aec2be5dd38779c9decf74bcbd33fee4b8ac8343d98186261e39d8cbbc9dec308df8a01838462c681898be0306f8af3f926aab0b451f72e53b2bc1e3daad9c93c2f08b4a23b375c7c044a0cd94a890e3b43d9affc85b191938bb8ed5dd35cd47a1f22bcada2b256966e1889a0ac4d3d8594223d99962eadbeee5886328bb773670837ef9c5f118f94831e39b72c08eb31753bae77a3540b4809f7da6f54d31381992784d2cb7264b16171b529aed34d9cc875bbb7847cb737677631e8501d89e3e8c7030cdf32daf0573", @nested={0xf4, 0x8a, 0x0, 0x1, [@nested={0x4, 0xd8}, @generic="ae5b99e775f9d2513a9cf9eaae7a8c0b5f8ad9bb76365994e1611fd040bb284d37ee7dc6a9270665ff15354f61518b890cf5222abbe2a04f177796dd0e8e61a891bec7f0e0038578d70d424fadd900347bf34549db98adb9a31e19496e5029a3d01020a168bbdfffd3b22cd4f40d6dd092778e423aae83301ee27731b6bb9c41e66caa996c609e6de26cd953cfd29bb4f24720ba34ac256124d7e2d1309fbf36968cb16866ab70563f79a1c89e94a0b4f9dc17718d5c7991034a17b3c54cbb23e8e5ff8e62462d62b021a25915ed169cd9980aa961a44fd9b561a2ff978622403d673abc779aa011", @nested={0x4, 0x2b}]}, @typed={0x8, 0x3f, 0x0, 0x0, @uid=r2}, @generic="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", @typed={0x8, 0x44, 0x0, 0x0, @u32}, @generic="d1319cd983f0e169eb1a7ffbfd87262c73ab7d2599ecd8c0d47b7ba9eadea355fe9be3812f37f5674d26413681e3f121e03fdfb9e92aaa6e97f68e0f4ec2145af568cc37281767fec6b3ec0c87ae1a56d8e2a392e551f8d82cfef5bad249cf01c3ef7bb193b86a57fdb06a78243873c8cff3256c43ae8ae9deb44b50d2ca5dcea98915f5271d45aca44682db4086ec37d7ef0422c6d13b3261e97c7f0e6968ed233299fccd19548f348174a23135db255bea183c029a32c708d549a37bee193770ce1afec053c463cf4af28592dcaff20a5dc5ef97eb1f98d8277a245ae613df1c2339100669cae9ebbc104e31e963dc11aa55160ea027f05593"]}, @TIPC_NLA_MEDIA={0x81, 0x5, 0x0, 0x1, [@typed={0x14, 0x91, 0x0, 0x0, @ipv6=@mcast1}, @generic="e66cb3021a118436db760be8d1eded30774688e7bde301c9368986fffea433081d3a3837c3b0c7820e463841684b69e103257fa8e0f6e38539fae64ee4930e129968929edd6bfceb0039114a710a480e7a832f07927dff726d32999a19d3975f114e1c27660d2f0203"]}, @TIPC_NLA_NODE={0xd6, 0x6, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @fd=r3}, @generic="81d7205b366137a9ca03ebe6d4af1b745e8546395d77d0ff0573e262f905", @generic="1b11948352af7312a2ab29c44284d9bf86ea0cd0e8528acbb374117949696a3b86d0b6d60205344abc8d430dd3a3fc526cf02fc1f089e70ed8c7b1411617eab7103f81175d1688b3482436f2676fa64f63c5eb7aa9001555ba1365548430a5ebb610971767110b6d1c94f122c638b1cd70d3dab4743bdeea79a87e67056c61bcfe2e9473dd7a002be5a935bd", @typed={0x8, 0xf3, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xda, 0x0, 0x0, @ipv4=@loopback}, @typed={0xb, 0xe5, 0x0, 0x0, @str='dummy0\x00'}, @typed={0x4, 0xe0}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@nested={0x24, 0x72, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x27}]}]}]}, 0x18a4}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x2, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, 0xffffffffffffffff, 0x4, 0x201, 0xffffffffffffffff, @relative_fd, 0xe5fa}, 0xf) 1m14.401118262s ago: executing program 2 (id=2535): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) socket(0x2, 0x801, 0x106) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x3f000000, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 1m12.900095854s ago: executing program 2 (id=2537): pkey_free$auto(0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x402e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x786c, 0x6, 0x6, 0x5, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x2000006]}, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) pkey_free$auto(0x1) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800030000000000080016"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r2, 0x84, 0x6d, 0x0, 0x0) read$auto(r2, &(0x7f0000000280)='\x00', 0x5) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r3, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x3ffff) 1m11.852154385s ago: executing program 2 (id=2539): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x26, "0000e100"}, 0x58) prctl$auto(0x7, 0x1, 0x0, 0x1, 0xfffffffffffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1f7, 0x7, 0x8000000000000d3f, 0x2, 0x948f, 0x7a, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x40000062, 0x80000000, 0x0, 0x19, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x3, 0x79d, 0x6d3e, 0x8, 0x6, 0x200000008]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x20029, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) close_range$auto(0x2, r2, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PREFER_BUSY_POLL(r3, 0x100, 0x45, &(0x7f0000000000)='MAC802154_HWSIM\x00', &(0x7f0000000040)=0x6) mmap$auto(0x6, 0x7, 0x7, 0x7ff, r3, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) 56.427087319s ago: executing program 34 (id=2539): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x26, "0000e100"}, 0x58) prctl$auto(0x7, 0x1, 0x0, 0x1, 0xfffffffffffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1f7, 0x7, 0x8000000000000d3f, 0x2, 0x948f, 0x7a, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x40000062, 0x80000000, 0x0, 0x19, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0xa199, 0x5, 0x3, 0x8, 0x3, 0x79d, 0x6d3e, 0x8, 0x6, 0x200000008]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x20029, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) close_range$auto(0x2, r2, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PREFER_BUSY_POLL(r3, 0x100, 0x45, &(0x7f0000000000)='MAC802154_HWSIM\x00', &(0x7f0000000040)=0x6) mmap$auto(0x6, 0x7, 0x7, 0x7ff, r3, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) 11.122600142s ago: executing program 6 (id=2757): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010001000000ffdbdf2507"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x40) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x806, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff8, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(0x3, 0x0, 0x5, 0xffb) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) ioctl$auto_EVIOCSREP(r4, 0x40084503, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c01006d", @ANYRES16=r3, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000005) socket(0x1e, 0x4, 0x0) r5 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r5, 0x29, 0x1f, 0x0, 0x2) 7.820027667s ago: executing program 6 (id=2770): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40040c0) mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004540)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x34, 0x1, 0x0, 0x1, [@nested={0x30, 0xc9, 0x0, 0x1, [@nested={0x2c, 0x90, 0x0, 0x1, [@nested={0x28, 0x9, 0x0, 0x1, [@nested={0x24, 0xa4, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x8, 0x136, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) lsm_set_self_attr$auto(0x0, &(0x7f0000000040)={0x8000000000000001, 0x1, 0x7, 0x6d, "6751bf6f051932f31c3a065a2c5e868fbaa10d1f078bf9c39a12c278ffb4aaf263edfbf5959f053464bc05f9643628f1d328a0c76d4e10a2dedeae4e56aff6128d11b0d9ce1fa5559832c868d5a6b04af69d0caac6a2ab640f8a4b0005cf86c74f60408101c10de561704c7d19"}, 0x10, 0xf9) 7.422583974s ago: executing program 6 (id=2772): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x9, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) 6.72291799s ago: executing program 6 (id=2775): mmap$auto(0x0, 0x2020009, 0x2000, 0x10000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0xa22c0, 0x151) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0xc380, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r1 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, 0x0, 0x20000054) clock_gettime$auto(0x2fb, &(0x7f0000001580)={0x5, 0x7ff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) bpf$auto(0x0, &(0x7f0000000100)=@link_detach={r0}, 0x8) ioctl$auto(0x3, 0x890b, 0x38) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x400, 0x3, 0xade5, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x6) ioctl$auto(r2, 0x4000457b, r3) 6.142682031s ago: executing program 4 (id=2779): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) mprotect$auto(0x200000000000, 0x806121, 0x8) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f00000003c0)=0xffffffffffffffff, 0x1fe) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) getpgid$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/122, 0x7a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0xfffffffffffffffe, 0x61, 0x100001000000004, 0xfa32, r0, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/attach\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) 6.057089367s ago: executing program 6 (id=2780): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2280, 0x0) lsm_set_self_attr$auto(0x11, 0x0, 0x7e, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="772f35bdf000ffdbdf2505e9a2ceb13ce20e1883819abd22171250aa2da886a01dd2189c38f309136cc1fe0c44f1ac91ea50bc1a46663445fd1cc7114ad224b78438063bfdde94e949568300000076f3bb0bfc82cacb20437035092ac24ea644f3d9fb9a9e89694cb4069b4d31552fb565f0a5372625ab1f3ae0ea17b6f97ea45cdd3b9f933e17862550f717fbfe21dc3c872cca4cdb8d469217ab000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000001700)={@inferred, 0xc, 0x3, 0x9, "9d4724b76f4d07faf46cb94d85033d940fdf05ecff75c12163ddeab942ed73d07dadd6f419694d591eca8162"}) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='\\\xf3%\x00', 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x20940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x8000000000, 0x9, 0x8, 0x8, 0x1, 0x5, 0x7, 0x5d, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, [0x0, 0x0, 0x8e2, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3c9, 0x0, 0x4, 0x0, 0x0, 0xe3a, 0x3]}, 0x400, 0x81) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0xfffffffe, 0x6, "3112be98004a614d19e22adfe72b31cc61c0fbbf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0xfffffffc}, 0x20006, 0x3, 0x4, @inferred, @integer={0x3, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada8dbdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) dup$auto(r3) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae48, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 5.601843076s ago: executing program 5 (id=2782): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51) mmap$auto(0x81e1, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x1ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 5.583260439s ago: executing program 0 (id=2783): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001380)=""/134, 0x86) 5.383965268s ago: executing program 0 (id=2784): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x0, 0x0, 0xc) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) 5.255600256s ago: executing program 0 (id=2785): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000100), 0x6b) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x4, 0x99d6, 0xfffffffffffffffc) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x18b140, 0x0) pread64$auto(r1, 0x0, 0x10, 0x101000000003) socket(0x26, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) poll$auto(&(0x7f0000000040)={r2, 0x81, 0x3}, 0x3, 0x8) io_cancel$auto(0x2, &(0x7f0000000000)={0x1, 0x1, 0x6, 0x92, 0x3, r0, 0x3, 0x1000, 0x6, 0x0, 0x1, r2}, &(0x7f0000000040)={0x9, 0x7, 0x8000000000000001, 0x5}) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, r3, 0x0, 0x100b8c7) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000100)='$&[*{,\x00', 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 4.942045619s ago: executing program 4 (id=2786): mmap$auto(0x0, 0x2020009, 0x2000, 0x10000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0xa22c0, 0x151) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0xc380, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r1 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, 0x0, 0x20000054) clock_gettime$auto(0x2fb, &(0x7f0000001580)={0x5, 0x7ff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) bpf$auto(0x0, &(0x7f0000000100)=@link_detach={r0}, 0x8) ioctl$auto(0x3, 0x890b, 0x38) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x400, 0x3, 0xade5, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x6) ioctl$auto(r2, 0x4000457b, r3) 4.543513372s ago: executing program 4 (id=2787): madvise$auto(0x0, 0xffffffffffff0005, 0x19) 4.261428994s ago: executing program 4 (id=2788): ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0xffffff2c, 0x10001, 0x0, 0xffffff98}, 0x6, 0x8001, "7558773f8cab0038cec94a366679d5e614d8fa9131d880b065ef33b4eddd5aca37afdda6b3942c1b05a4a746bddaa3c3e9416ff0768df32d020cadf60009e0bb", "f43abe13bd78888829019ad764acf6afa95e59d326d57e6c23c991a60f3d48fd32dbb998b40accadd0101b1617ab98639d7023f36c921c06f88f8ae8c03079ea55f4bd2067c7d292a2e01b6efb274267", 0x7, 0xc, 0x6, 0xbe, 0x1, "2e6f75b7431f004435205e6044494fd9be3657ce398e7ce58a7da9e7f2161bc1"}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x101000, 0x0) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x5b) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) timerfd_create$auto_CLOCK_TAI(0xb, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f0000000200)=""/238, 0xee) r1 = socketpair$auto(0x4, 0x9, 0x80, &(0x7f0000000300)=0x4) getsockopt$auto_SO_RCVPRIORITY(r1, 0x4, 0x52, &(0x7f0000000380)='\x10!-\x00', &(0x7f00000003c0)=0x81) unshare$auto(0x40000080) mmap$auto(0x0, 0xede8, 0xdf, 0x9b72, 0x5, 0x28000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80a00, 0x3) 3.719900405s ago: executing program 5 (id=2789): socket(0x2, 0x801, 0x106) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$auto(r0, 0x40076f3f, 0x38) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot/mode\x00', 0x501, 0x0) (rerun: 32) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200), 0x0) (async, rerun: 64) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 64) pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) fcntl$auto(0x3, 0x4, 0xa553) (async, rerun: 32) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) (async) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000002c0)=""/80, 0x50) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 64) setsockopt$auto(r4, 0x6, 0x5, 0x0, 0x6) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r7 = semctl$auto(0x8, 0x6, 0x9, 0xe4f) (async) r8 = getpid() (async) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video70\x00', 0x865c0, 0x0) read$auto_v4l2_fops_v4l2_dev(r9, &(0x7f0000000000)=""/194, 0xc2) (async) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB='`(\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000001000000b000000080016000600000008000b00c8ffffff0a281e808600d1800800fb00", @ANYRES32=0x0, @ANYBLOB="040022806364b5cbdb0021b98c1a486d363aeae89b2d8181d45330a25a71ae406ea9a81dd6e5d3bfceaa9231d59e3ed505ab1d86090efe68a43e822cc185b4bac6da9195431cbfd4ee351b781a7f6e582a8cd771db24a776c950bf5bd517b77c6114c03c4ee6e0790b845f30fda2f91e6d5b8c7d3e32ec7ac5810000e1143cddfe37b4ec0b41438a69f8b5a1cd6fabd8b6245a4412e18df4a9517c00441a37be29bddd990ee1010f5008543aee43d84446d83271ed9098771150147fcb9d9e343bad90c1faf2fc2d95c2926a0882b89196954487432ff14ae21a60d432f32be7e6c2286fd87b600766bf5c18f4320d4d84e65f542e7f0000ab621a566802eec52ff7fc8610e7561396611d674ffc78d806700798ef71758e92d4d9c10f5ea043074562b934789e3557fb99321171a89d7d2eab7cd29c6ebb664b5fa317e1b99ed03be6c6c09ab42dca235295c9cf3a91b4f66b04b250af0f4da99a9bff889ec09503593101165a561962f94736a179f9d3f69a6249f80993b8ff00a023ff601afbc36d7e716d06707cdafa4b825211d98a64fb2610088cbdfd82f4871be5f61c2ee5c230af3704dc7b502d2d7053d305f9467b88a7747b847a75b6d533ab81fe274c4a34ba7758ca57f3329904ac229485afb23bcc8e3ba681ea1d5d076c130757ff71fccc4e5467d7f53aaaa6d78d8d13f415cf087568a28acb454cd74b9323a3924f6b72fb13592fcedcc2fd6c883ad077ed7e6e98dbe301fcdb178567d4f475c05fef52d4ec87c94713dedfbf67ab3883c81da34fde8fceb1d83e961b64a148a51a185842abbf13a67886a44c8853ad3cdae4cd1d0924e882547a65be8cc0ff547661e6a08e65b06030f4a778158d2ec74798c314aa2bd54b9fcf585e109da8f7782658c3cd1ffc5d08dc1f0cb5c2dd6e4ca708840bb5c5d73c9beb570b3d4f44b7d5215b8adfced70d59fb883b208d1a9fce40145df8897988e21a7c8635fdece8b0bd4696f7f69f681c786a16b19d9fb3442d5c2354fce96d9141cceecfaf16f937839989b4f9cefa074b59e39ef337476dddc13179cdbd078ec08d9a18878ebb2dbbfa14a83cb9b8a2efb92549815afb03e2f5d191913ed00e52a771519b0560ce8923409758ada5f4c45eb91cd693ae2b9adc26547b3867fb693de8baa818692fc95dbc2ca8b2737ee2229e9c028f4442e0559c85ae8c8a34706162494ff447eb93d2fbbeffb046189ca2c011b978f4e4044b5c49f4fb92735c0f96a3a7d8e7ffeac62267054994282b82078060c6b688c0a62fd61a5455d891d64b353676dcc6984bb2ef390456346711a232ea8cd8c29bb7d1595acc1381bc3807f21a7b43187ae34ce8025578b5f1a1ca2694c14c64473ac9f92ddc231388413ff14545a6972de3c2e095d566462b1214c20aaa3c0a3f10578737ed5615ec41751183b567f7a4e19eadcafbeb78e29392935e031662a1367e8f1ef38fec4e70b74c95cc8fb57a3abf2885c3d7d5bb743bf7004d402c5dc4cac182750aad60d765111c47907a7aef43fd4ab6e30dd2f7cbfbafbee771a4310046f8edff4aca7546422e52fbb63ef4afcb538a4e87a1f99b32c03d72b5846fb5fdbadac8cb80709735d2196746b8f0d3269007da7133c3bbcf2670f68b4ec855f119dd882a448f234f267adf0eca6c66427d92dbf9241a2af971105aaae4a2709a728e7fbcf3f4d2a18661edbf62291c82ba8bc1bbfad2c536ba6114062d240f2233a125d113023e731e0de7a5281459c55635b8431f3d041c5f92edaf1b399888b7d171529d364f6407c2805e66c9ef255e4446519d2862032c2383a80c01d9282652de05f568c8908047b4d3a8372e742e860f0756642155eb4811bd119d8fbc11f25519a1aa44ea0dfa85c4c6e679c3907c7c55064376584863b46d3cac6811ba5244a39b6c0f53896beba26bb9da3c00b08fee03efbfc79d2955ddac0f85410a2499a02e134b3637210cfcd8c4060daa60ce8c2a398c6ec980450222de444e5ef70344af1c7e63e7909fbfe90af5fda48c5b6a4ce22c26df6abcc06467f114cf07c74b5a876379edb9fcee7ce0606f4bb8a71b5fb3058b1a7b45f20abf73117e4cff1dca91766d0ea160fecc4f8c146bc7c950531b839e39d495a84c57ea731aac0d4a196b733a923c5985fbce28d18c0e05d8643f683af1df841b1538234af272c60389a51b7d7f6f3cfd8b58e9db7d9f07d0a7bf8f5d52cdabfb0e72315b50529998499655679b92e03ea0d37d24927838802bb66d4f954a05c4d41d6db0b1e69269977c55fa0eb05a594edb59320da5ca26372e006e56a0cd8cd9ea48f82f909cdd5ebb3b54942cdecf176c370b05e1f954156a0a4b84784d69c0a3868982b40d2f64904ba9b659fbbff166dc8f044205d53b7b172e21cf0144f1e951edeba3d726df93245a78da21fab41333459e1e8f6845f6ba24b7606e805d32dd1b4a1484278bf7e9d7a582c2fee2dde5031859be33e185609ddd052dafc72241a5f1f3f10ddf776ba91819e26014b29a6806f5a532644364e54aede63d286b699b600bcbf9cd36e1ef9bdf9ee74531baddd6b32dc1d64edbd5de937569229b7a1d7da2711ad3e532ad6a3a72d40f683788900995b9d54db2b5f98841fb77385b35f503cbd6b67b1b741116a86b8ec343ccf4f7383091fa7f821d9158665b28038084ecabbf8f00be81b50a7476c4075f767e3f97f3428011269da5e9f06da62849fe5afb9bfe5a5418460a3c145039661605ff0a1473dae9940c6bc6386c5a7896e149e5a0424bcea1990c726dfdcb26529d7b91db159f5bc284cdb7cd0a3a543d6a38bfbd7b902df245c45c46446440887c18a0ae611865b258ea85e5dd272c44fb1c9d6e4f5fe8472d7cc516babc20e5324d5d3ef00b9d4a14d5d946c706c6696fcd4100bac8bd529e46dc631e88dab45307272aadd3c2fb6ae0d1a9a7b842382ad5d0f8524cbcea773f9142b9afafe6e447f3c43556836c8200e3bf2cf9db51349e53af25498745f1520e3cc9a00ae844fbdc2f161fb50c539631bda3b10e363ebbfbc1d5ac77fef1598fe4bf4503811f8cbc527e1e5d114f610582e8f562afc818d7e08997e8acb97de38ac3ebcbbac237da26526ca9ea624bce1132beea18fc9868a190c8d4f74467c41413c68d853cab6f1dce43ba254167994b5845c356e23958f09651f3efee639dcf394246591e648dd52886dcb26a932d1deacbedc23d8948043facc11b0b53aa774bb9b6318700f2d9e9668e0a172fc1b6000ca90b8909733dd11566162535d08e5afa4c6588ff3686f774ec75b30cc73a96fba425c9d72eb22196ab687e2cdfb3878dbc5b92e808b17db2e999efa4ee5964fa54a1d9d655d23ba0009c856461f871c762e247dad0b7f38a2ed133d89036a7323b6af40ff5a966f80e50ebf27e77ef5e8ee4e96c7cd110b082559167c2b27f3a62812490a68f38b1cbc84bc23615ea207df3b85ed2ad2e3c4de135fa795bc31f21c0bd8e0d91a16de0bb000bb65dd5768ade1034c8f99c104af2889dce203d17461271e86bfe1d8dc57030b6de5d52b7bc42967a2d9b71a8789194d8530b76628b44b31aff8c2f7d9f22bca7a87e5751e1f3c2479dbbdf2841ce87d18b16d1c350977a6ca13425b7082816899dbe82265e47861ae489dc2cd7ebe4dd03dac9af38b69e47bdb217246732390f530c9ed683203e69868fcb874803520311bcdab3d2b7773056571166fa1616b4bba81584e087ef371445ded9eb15715fab29fe3831d2af88da8b7fb0ddcd180f3caebf82e78e711b3aa27c29f47931bd9c25303197b8baba65ce1dcc9af99523a97c612f2047c91755dce6bc1d4ec92e81620ec672b2910b0df8f7b5813f34433642fbcd0865bc9abd23b0567a345132c95a0ee3acc99a0bf69da6130e3c4c18818e654099669e2e3bea1d7b9e14d13538c753b467855b6e5bb6335954310f776217f6421d4e7b8e4052f8d967026d8bb8da3c4169de8b2ae92e84b41f86364ce69fdc5f498d43ea8a7078e0dc4a8fb0d4f504467d4181df0b7bdbd01bc64e82ad3d1c0f09561a2b1ce539f3d6d2c6672d3dd78b99c0aa866ec53c8ca35357fc7a5d7591e559b869093fbea0701146d76bbbb4bf8f69906274e65b45f0114b42ee05234b9db9d1e60fd2ff6c2690d9e049d2aa63a7b066a0ce5b38279172a6107023b2ec8d29a1c26ce38107668a9e847c0d76b6d0fa1d1fea917de758a3b22a26f22971a8b98c62c300822687b518c57ade753638fc75b143241cbea76527cfa9b8b99dc7963616dd074e2869a0a30fca01c8c8c2bef745bd739be943ead6074a23e7d1a71fe32d1b89f2803b8a2b88d225371802dbdc881fe2c0d894670d24e88d51c72079135423853fcfa6a823046c23b72371ba75aee9a7fd3d500c006d0e27acc18813bcae7a7c245362b09ea28d249fa854bd701ab74c62d81592796fe5848eb87f5b0848414ded7e5b2a25e2124c21c6285fc5599e2ff7c7c8879be396eee21307168475ec51133230d4ef4e1cb8b55b023b008e9826f6679e5fa02dece7a92d84e51aec2f99e3812ae375b8cd4bd784a30559f81a7e497c1e7c3f592c9291573dbf323264c96b69fcca025e53252a5a43584167ed42b160f3a0c4547339615dc5aa18af54bf4e1038d822c3f5d9ea505681509be5fbd4e922fec44c8b2b30e90f8cd64c22a42fb9370c19576a59e95983392bf026133e74bf6fcd62cbcef33f7ebf759aaccf393a0de599d67ff770fd91ba850af2ca984e0bf2c0a593d264508a10e8b09906229c512242383561dc1346e4811765add67984712701ba8466bcf6cf4bb16daf25c9da831d324a21c6f8960b85f177c5020c0491760c82efab6a536b4a4fc9160fd411573770d89a34605588f590f1c7222ff87f569c8b38c7beb21d671d73d119cd3965c6cd6ac37342ee2f6c89b16c2686d582e0f01543dcbcdd5b6f6337d91eba8d6453ab15e15221c1ce22a718c00f5b7b480df1647771c814143e5139edaed7f0cc800e271d9d090d2b4ae60b8ce7df82dee993e6a7c67779f844bc7e66023a73c082415a02e200e42cabc0dea08b885cea37404a94ca9213109beef1a939c529d735474140052c3bf371b8bfc88ee0a034b5438f38953893c7d1621140f202eeaf028ba65b9a270e8156a62334f06687272a8d5c1c33843329129da0572d1103b0fafa27f29c6997d3586b942d87b931e8a806bf9be9e771aa5fa977b694a8b42896e23039131c25c81a33f7c75360e111c54697855bbd7311366f0c151b84df9722e4c02be11b7b23381e69d6aa2e60b2d4ab52f97cf39ef677add79fea81b1fb64f33c3609041ca3b50d932fa0e6422947ea99f8f5593745440ef92cf3402f6a9729a919d3730415a2d77730544d3790fa6cf6d04b22ee28187a80ee0e12c3f796b6debe2c697dd3f05f3ac8e220b7b31aafd3eb591fc0175f108a490988535f488a6675ee0eeb55778831a3092c66ee2ca881a29dcad653a3c5780dd8c6b9c2f7aa1d7988ecbae363b65de6291500b3fc8db7d745aab3e4ce784b53ee2773a07f94e74676b7bd5f1a38b0decced81d013c5c81b311b280c6e053bcd67949fcbbf27fd30987aa2f7b451730f04a09b75cd29b595899d2d0e79b33a1a64a582244afaa87399a1a1f4289b1de38e9ff50799dd6827e7d8ebc6d5a5cd8e9f84b27ee41fcd19f113fe23e7ee73d9abef132707e7e2e7a15c7066f37e24a303b23e79991f84cd584be12cd636d61b5bebbf8606226270d786906b3216a890fd8db3fd5d642f691339515ab1cae6a775e394a4e8acf9bb7a0ac5ec362839598370840b5e3091260c1aeee2be78d099a484d16050ac01d73d03222aa6b175df7bf9f9e6fc53c61eababf6203aae525fed5ba5a356de52e3f102e4ffa0e21c60219dd582f4568f99d82ad65fa5ac18d7db4a11aae1c928b2d889c7594e0ce1eaa4f6c5b6185506cd476d0e9ac52dcdcaae07c9550e4e6092692b427359c5916611f34f9d0074854fbd981e83b59de82a80ebcdadb1a617dbf8cdcbb392c9f34bf49250f002c0cf05907fab433269d25548d06d5a84a4bab60063bd5dcd5ea508826017a90a3820f504c6258b9aeb467803e5c403c030a5e08acc5c189ce34bf19f3b83e26bc74e438c53a9c88a9bec52bf5d4088a9b05eac5db130c8088869d12926def99724e302bf96ae7afaca57d93fc599ccf5f728877f446032f1b7a4c3d9d4ef6889f9c6d54a4218c5011de1c92db289f353f22312409ad30f9abb9d6071b1533b59349c7f4d6ed6d45fdbabff81d850f032c842e9b89841366f2ff6225f2faa5934476516898014002c00fe8000000000000000000000000000aa88e38743cebb9532e55c0c5d1b4d05bce50bdcdd2badc87f995fd2b77a2083fef6d07752cfc0358dda1f929e00159201e887feee0bf089cd5f710c29b486ec4fcf361df8f10ac2f19786b9adcce652de810af6f78419bc2367d8d6fb8cad37fc055553d35ff94609a53743d75e949b160a1c5ae214e7b15fbceca4243ac68be1ef39cfe78b1c2777dbc41bbda0ee88d1994e6d2754f01000c98008005200", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000198000001400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800970002000000b9cd509d0835466c63e40887a3ab4ac2608481148d07ef151d0bc96162978470c5a6c3c6ba832ed05fa358f2971c34263bfb568bdc48f898417e02c7a6a7cae9648b916d7348edec6d35233a1cd368513a0151a9394681b97252a1947904004a800800f500", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04001a80776eabc368f5385423d259defefdbf1bdc377b8fdac2f2428ec084de64fd08b8ccb63f36238dea9b2a4d29eb62eafec81260cf7e3dbe9e92d265151f00f55a99426dfdcb6cda6148e341b87360b705269d6f64088f7cedbcc31145a6eb5f3a2781918ee096c58344ef0209a13a0bfa08c9b759d550673b23e7982ac7475effbd1e35bb810de05d8f92db351ca5474ede1d4d96ec7d51c4e1478275fa8a027993ea80e65206e3ad2ff1d92ea8b15d53662e05b78fddde82a8dd858c463a86ee022feaa119ef220ebce71d7d2c6715a4f01400c500ff0100000000000000000000000000010000000000060009000400000008001c00", @ANYRES32=r7, @ANYBLOB="08002a000200000005001f007d00000005001100100000000800050000000000"], 0x2860}, 0x1, 0x0, 0x0, 0x4844}, 0x10000880) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async) process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) 2.18392004s ago: executing program 5 (id=2790): semtimedop$auto(0x9, &(0x7f0000000340)={0x2, 0x0, 0xb}, 0x2, &(0x7f0000000280)={0x1000000004, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x2480, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, 0x0, 0x6f3) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) 2.094557023s ago: executing program 0 (id=2791): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, 0x0, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) bpf$auto(0x5, 0x0, 0x102) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) read$auto(r2, 0x0, 0xb4d3) ustat$auto(0x4, &(0x7f0000000180)={0x3e37, 0x7, "1923a814239e", "b52f6230e98e"}) write$auto(0x3, 0x0, 0xffd8) ustat$auto(0x67, &(0x7f00000001c0)={0xfffffff8, 0x2690, "ca79d011ad1b", "1c51aadb0a7f"}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/binder0\x00', 0x1, 0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 1.468277577s ago: executing program 5 (id=2792): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0xa, 0x1, 0x84) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x8, 0xd, 0x7fffffffffffffff) setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x10000) 1.435112757s ago: executing program 5 (id=2793): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x139800, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6653) prctl$auto(0x9, 0x1, 0x0, 0x1, 0x10000000000) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) msync$auto(0x7fffffff, 0x80, 0x800) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(r1, 0x0, 0xe, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x400802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto(r4, 0xb56b, r1) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgctl$auto(0x7, 0xa3, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000180)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) 1.139203743s ago: executing program 0 (id=2794): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/etherd/interfaces\x00', 0x80100, 0x0) write$auto(r0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001000)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="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", 0x414) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200000000000080) io_uring_setup$auto(0xa, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYBLOB='=', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250b000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r3, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@link_update={r6, @new_prog_fd=0x4, 0x4, @old_map_fd=r7}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="155b07e9", @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf252c000000"], 0x14}, 0x1, 0x1000000}, 0x400c080) pwrite64$auto(r5, 0x0, 0x1, 0x27) mmap$auto(0x7, 0x8000000080000001, 0x100000001, 0xeb2, r4, 0x4000000008000) 649.111515ms ago: executing program 6 (id=2795): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_register$auto(0xffffffffffffffff, 0x12, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) socket(0x2, 0x801, 0x106) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x27, 0x0, 0xc) setsockopt$auto(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x20) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r0, 0x9000643a, 0xc35) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x9) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) 519.950596ms ago: executing program 5 (id=2796): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000004440)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000740), r2) sendmsg$auto_OVS_METER_CMD_FEATURES(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB="05b40000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf25010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x80) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) open_by_handle_at$auto(r0, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x1, 0x3, 0x3, 0xffff, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42a81, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x7, 0x2, 0x9, 0x6, 0x80003, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0x80000002a0, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x1, 0x2000000, 0x0, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc]}, 0x1fe, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1c41, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r7 = io_uring_setup$auto(0x1, 0x0) ioctl$auto(r6, 0xc0585604, r7) 433.988643ms ago: executing program 4 (id=2797): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x80004518, 0x10000000000402) 260.214803ms ago: executing program 4 (id=2798): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xf0ff, 0x9}, 0x9}, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) 0s ago: executing program 0 (id=2799): r0 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000040)=0x9) mmap$auto(0x7fffffffffffffff, 0x2020009, 0x10000000000003, 0x17, r0, 0x8000) bpf$auto(0x0, 0x0, 0xc) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x6f, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) kernel console output (not intermixed with test programs): 0/0x10 [ 875.559921][T15644] ? __pfx_chrdev_open+0x10/0x10 [ 875.559938][T15644] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 875.559957][T15644] do_dentry_open+0x982/0x1530 [ 875.559974][T15644] ? __pfx_chrdev_open+0x10/0x10 [ 875.559994][T15644] vfs_open+0x82/0x3f0 [ 875.560015][T15644] path_openat+0x1de4/0x2cb0 [ 875.560037][T15644] ? __pfx_path_openat+0x10/0x10 [ 875.560058][T15644] do_filp_open+0x20b/0x470 [ 875.560074][T15644] ? __pfx_do_filp_open+0x10/0x10 [ 875.560103][T15644] ? alloc_fd+0x471/0x7d0 [ 875.560123][T15644] do_sys_openat2+0x11b/0x1d0 [ 875.560144][T15644] ? __pfx_do_sys_openat2+0x10/0x10 [ 875.560172][T15644] __x64_sys_openat+0x174/0x210 [ 875.560192][T15644] ? __pfx___x64_sys_openat+0x10/0x10 [ 875.560220][T15644] do_syscall_64+0xcd/0xfa0 [ 875.560238][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.560253][T15644] RIP: 0033:0x7f840258eec9 [ 875.560265][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.560280][T15644] RSP: 002b:00007f84007f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 875.560295][T15644] RAX: ffffffffffffffda RBX: 00007f84027e5fa0 RCX: 00007f840258eec9 [ 875.560305][T15644] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 875.560313][T15644] RBP: 00007f8402611f91 R08: 0000000000000000 R09: 0000000000000000 [ 875.560322][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.560330][T15644] R13: 00007f84027e6038 R14: 00007f84027e5fa0 R15: 00007ffeedcea2a8 [ 875.560352][T15644] [ 875.894570][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.959286][T15664] aoe: could not set interface list: too many interfaces [ 877.028855][T15664] afs: Bad value for 'source' [ 877.902969][T15675] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 878.994733][T15692] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2263'. [ 879.319177][T15698] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 881.176290][T15737] binder: 15736:15737 ioctl 40046210 0 returned -14 [ 881.550489][T15740] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2272'. [ 881.619222][T15740] ima: policy update failed [ 881.653296][ T30] audit: type=1802 audit(6054999242.807:18): pid=15740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2272" res=0 errno=0 [ 882.249276][T15745] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 882.683985][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.693866][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.702140][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.710091][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.719159][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.948992][T15756] FAULT_INJECTION: forcing a failure. [ 882.948992][T15756] name fail_futex, interval 1, probability 0, space 0, times 0 [ 883.023035][T15756] CPU: 0 UID: 0 PID: 15756 Comm: syz.3.2277 Tainted: G I syzkaller #0 PREEMPT(full) [ 883.023071][T15756] Tainted: [I]=FIRMWARE_WORKAROUND [ 883.023078][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 883.023087][T15756] Call Trace: [ 883.023093][T15756] [ 883.023099][T15756] dump_stack_lvl+0x16c/0x1f0 [ 883.023122][T15756] should_fail_ex+0x512/0x640 [ 883.023143][T15756] get_futex_key+0x1d0/0x1560 [ 883.023165][T15756] ? __pfx_get_futex_key+0x10/0x10 [ 883.023183][T15756] ? kasan_save_stack+0x33/0x60 [ 883.023199][T15756] ? kasan_save_track+0x14/0x30 [ 883.023213][T15756] ? __kasan_save_free_info+0x3b/0x60 [ 883.023233][T15756] ? __kasan_slab_free+0x5f/0x80 [ 883.023248][T15756] ? kfree+0x2b8/0x6d0 [ 883.023267][T15756] ? memdup_user+0xbf/0xe0 [ 883.023280][T15756] ? __x64_sys_kexec_load+0x18e/0x230 [ 883.023296][T15756] ? do_syscall_64+0xcd/0xfa0 [ 883.023310][T15756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.023328][T15756] futex_wake+0xea/0x530 [ 883.023351][T15756] ? __pfx_futex_wake+0x10/0x10 [ 883.023381][T15756] do_futex+0x1e3/0x350 [ 883.023399][T15756] ? __pfx_do_futex+0x10/0x10 [ 883.023419][T15756] ? rcu_is_watching+0x12/0xc0 [ 883.023437][T15756] __x64_sys_futex+0x1e0/0x4c0 [ 883.023457][T15756] ? memdup_user+0xbf/0xe0 [ 883.023471][T15756] ? __pfx___x64_sys_futex+0x10/0x10 [ 883.023498][T15756] do_syscall_64+0xcd/0xfa0 [ 883.023514][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.023528][T15756] RIP: 0033:0x7f20a238eec9 [ 883.023541][T15756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.023555][T15756] RSP: 002b:00007f20a31a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 883.023570][T15756] RAX: ffffffffffffffda RBX: 00007f20a25e5fa8 RCX: 00007f20a238eec9 [ 883.023580][T15756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f20a25e5fac [ 883.023589][T15756] RBP: 00007f20a25e5fa0 R08: 00007f20a31a8000 R09: 0000000000000000 [ 883.023598][T15756] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 883.023607][T15756] R13: 00007f20a25e6038 R14: 00007ffce34cb300 R15: 00007ffce34cb3e8 [ 883.023627][T15756] [ 883.245492][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.341223][T15764] sd 0:0:1:0: PR command failed: 1026 [ 883.346681][T15764] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 883.353695][T15764] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 883.863106][ T8600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.224467][ T8600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.492489][ T8600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.645494][ T8600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.812155][ T52] Bluetooth: hci1: command tx timeout [ 885.095024][T15750] chnl_net:caif_netlink_parms(): no params data found [ 885.445826][ T8600] bridge_slave_1: left allmulticast mode [ 885.468059][ T8600] bridge_slave_1: left promiscuous mode [ 885.519127][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.673667][ T8600] bridge_slave_0: left allmulticast mode [ 885.702253][ T8600] bridge_slave_0: left promiscuous mode [ 885.740323][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.893232][ T52] Bluetooth: hci1: command tx timeout [ 887.676023][T15816] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2284'. [ 887.974511][ T8600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.030835][ T8600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.069133][ T8600] bond0 (unregistering): Released all slaves [ 888.207929][ T8600] HfR: left promiscuous mode [ 888.333119][T15750] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.382000][T15750] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.432690][T15750] bridge_slave_0: entered allmulticast mode [ 888.485989][T15750] bridge_slave_0: entered promiscuous mode [ 888.544018][ T8600] tipc: Left network mode [ 888.554688][T15750] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.600184][T15750] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.643517][T15750] bridge_slave_1: entered allmulticast mode [ 888.699176][T15750] bridge_slave_1: entered promiscuous mode [ 888.968313][ T52] Bluetooth: hci1: command tx timeout [ 888.990860][T15750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.074281][T15750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.439850][T15750] team0: Port device team_slave_0 added [ 889.447184][T15750] team0: Port device team_slave_1 added [ 889.554128][T15859] FAULT_INJECTION: forcing a failure. [ 889.554128][T15859] name failslab, interval 1, probability 0, space 0, times 0 [ 889.628270][T15859] CPU: 0 UID: 0 PID: 15859 Comm: syz.0.2292 Tainted: G I syzkaller #0 PREEMPT(full) [ 889.628296][T15859] Tainted: [I]=FIRMWARE_WORKAROUND [ 889.628301][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 889.628310][T15859] Call Trace: [ 889.628316][T15859] [ 889.628323][T15859] dump_stack_lvl+0x16c/0x1f0 [ 889.628345][T15859] should_fail_ex+0x512/0x640 [ 889.628363][T15859] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 889.628385][T15859] should_failslab+0xc2/0x120 [ 889.628405][T15859] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 889.628423][T15859] ? kstrdup_const+0x63/0x80 [ 889.628442][T15859] ? kstrdup+0x53/0x100 [ 889.628454][T15859] kstrdup+0x53/0x100 [ 889.628478][T15859] kstrdup_const+0x63/0x80 [ 889.628494][T15859] __kernfs_new_node+0x9b/0x8e0 [ 889.628516][T15859] ? __pfx___kernfs_new_node+0x10/0x10 [ 889.628540][T15859] ? find_held_lock+0x2b/0x80 [ 889.628557][T15859] ? kernfs_root+0xee/0x2a0 [ 889.628578][T15859] kernfs_new_node+0x13c/0x1e0 [ 889.628601][T15859] kernfs_create_dir_ns+0x4c/0x1a0 [ 889.628624][T15859] sysfs_create_dir_ns+0x13a/0x2b0 [ 889.628642][T15859] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 889.628657][T15859] ? find_held_lock+0x2b/0x80 [ 889.628675][T15859] ? do_raw_spin_unlock+0x172/0x230 [ 889.628698][T15859] kobject_add_internal+0x2c4/0x9b0 [ 889.628719][T15859] kobject_add+0x16e/0x240 [ 889.628737][T15859] ? __pfx_kobject_add+0x10/0x10 [ 889.628755][T15859] ? do_raw_spin_unlock+0x172/0x230 [ 889.628777][T15859] ? kobject_put+0xab/0x5a0 [ 889.628799][T15859] device_add+0x288/0x1aa0 [ 889.628817][T15859] ? __pfx_dev_set_name+0x10/0x10 [ 889.628836][T15859] ? __pfx_device_add+0x10/0x10 [ 889.628853][T15859] ? lockdep_init_map_type+0x5c/0x280 [ 889.628873][T15859] ? __init_waitqueue_head+0xca/0x150 [ 889.628900][T15859] rfkill_register+0x1ad/0xb40 [ 889.628924][T15859] nfc_register_device+0x11f/0x3c0 [ 889.628942][T15859] nci_register_device+0x7f1/0xb80 [ 889.628966][T15859] ? __pfx_nci_register_device+0x10/0x10 [ 889.628992][T15859] ? lockdep_init_map_type+0x5c/0x280 [ 889.629015][T15859] virtual_ncidev_open+0x141/0x220 [ 889.629035][T15859] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 889.629055][T15859] misc_open+0x26d/0x450 [ 889.629073][T15859] ? __pfx_misc_open+0x10/0x10 [ 889.629088][T15859] chrdev_open+0x234/0x6a0 [ 889.629105][T15859] ? __pfx_apparmor_file_open+0x10/0x10 [ 889.629125][T15859] ? __pfx_chrdev_open+0x10/0x10 [ 889.629142][T15859] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 889.629162][T15859] do_dentry_open+0x982/0x1530 [ 889.629179][T15859] ? __pfx_chrdev_open+0x10/0x10 [ 889.629199][T15859] vfs_open+0x82/0x3f0 [ 889.629227][T15859] path_openat+0x1de4/0x2cb0 [ 889.629250][T15859] ? __pfx_path_openat+0x10/0x10 [ 889.629272][T15859] do_filp_open+0x20b/0x470 [ 889.629288][T15859] ? __pfx_do_filp_open+0x10/0x10 [ 889.629319][T15859] ? alloc_fd+0x471/0x7d0 [ 889.629339][T15859] do_sys_openat2+0x11b/0x1d0 [ 889.629359][T15859] ? __pfx_do_sys_openat2+0x10/0x10 [ 889.629387][T15859] __x64_sys_openat+0x174/0x210 [ 889.629406][T15859] ? __pfx___x64_sys_openat+0x10/0x10 [ 889.629435][T15859] do_syscall_64+0xcd/0xfa0 [ 889.629452][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.629467][T15859] RIP: 0033:0x7fb9da18eec9 [ 889.629486][T15859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.629500][T15859] RSP: 002b:00007fb9db08e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 889.629515][T15859] RAX: ffffffffffffffda RBX: 00007fb9da3e5fa0 RCX: 00007fb9da18eec9 [ 889.629525][T15859] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 889.629535][T15859] RBP: 00007fb9da211f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.629544][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.629552][T15859] R13: 00007fb9da3e6038 R14: 00007fb9da3e5fa0 R15: 00007ffcab0311d8 [ 889.629574][T15859] [ 889.629584][T15859] kobject: kobject_add_internal failed for rfkill158 (error: -12 parent: nfc2) [ 890.063268][T15868] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 890.345875][T15750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.367943][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.393918][ C0] vkms_vblank_simulate: vblank timer overrun [ 890.470921][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 890.488015][T15750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.553800][T15750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.578100][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.604027][ C0] vkms_vblank_simulate: vblank timer overrun [ 890.671121][T15750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.828827][T15750] hsr_slave_0: entered promiscuous mode [ 890.857171][T15750] hsr_slave_1: entered promiscuous mode [ 890.883034][T15750] debugfs: 'hsr0' already exists in 'hsr' [ 890.914598][T15750] Cannot create hsr debugfs directory [ 891.047824][ T52] Bluetooth: hci1: command tx timeout [ 891.800923][ T8600] hsr_slave_0: left promiscuous mode [ 891.871731][ T8600] hsr_slave_1: left promiscuous mode [ 891.902824][T15905] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 891.921689][ T8600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.953115][ T8600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.014670][ T8600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.056121][ T8600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.184144][ T8600] veth1_macvtap: left promiscuous mode [ 892.218507][ T8600] veth0_macvtap: left promiscuous mode [ 892.256675][ T8600] veth1_vlan: left promiscuous mode [ 892.283788][ T8600] veth0_vlan: left promiscuous mode [ 893.473773][ T8600] team0 (unregistering): Port device team_slave_1 removed [ 893.551950][ T8600] team0 (unregistering): Port device team_slave_0 removed [ 894.729159][T15913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 894.744508][T15913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 894.770748][T15913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 894.788953][T15913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 894.806751][T15913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 894.874560][T15913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 894.918752][T15911] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 894.924773][T15932] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 895.315515][T15750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 895.356541][T15951] usb usb2: usbfs: process 15951 (syz.4.2305) did not claim interface 0 before use [ 895.501446][T15750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.581462][T15750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.688424][T15750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.112070][T15750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.196641][T15750] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.308626][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.315859][ T8599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.400020][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.407165][ T8599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.414630][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 896.807877][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 896.813952][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 896.821442][T11675] Bluetooth: hci2: command 0x0c1a tx timeout [ 896.851678][T15987] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 897.334181][T15750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.543804][T15750] veth0_vlan: entered promiscuous mode [ 897.641216][T15750] veth1_vlan: entered promiscuous mode [ 897.736842][T15750] veth0_macvtap: entered promiscuous mode [ 897.771562][T16019] FAULT_INJECTION: forcing a failure. [ 897.771562][T16019] name failslab, interval 1, probability 0, space 0, times 0 [ 897.840175][T15750] veth1_macvtap: entered promiscuous mode [ 897.858373][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.4.2312 Tainted: G I syzkaller #0 PREEMPT(full) [ 897.858400][T16019] Tainted: [I]=FIRMWARE_WORKAROUND [ 897.858406][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.858414][T16019] Call Trace: [ 897.858420][T16019] [ 897.858427][T16019] dump_stack_lvl+0x16c/0x1f0 [ 897.858447][T16019] should_fail_ex+0x512/0x640 [ 897.858465][T16019] ? __kmalloc_noprof+0xca/0x880 [ 897.858489][T16019] should_failslab+0xc2/0x120 [ 897.858509][T16019] __kmalloc_noprof+0xdd/0x880 [ 897.858531][T16019] ? nfc_llcp_build_tlv+0xfd/0x230 [ 897.858550][T16019] ? nfc_llcp_build_tlv+0xfd/0x230 [ 897.858564][T16019] nfc_llcp_build_tlv+0xfd/0x230 [ 897.858581][T16019] nfc_llcp_build_gb.isra.0+0x193/0x400 [ 897.858606][T16019] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 897.858644][T16019] ? nfc_data_exchange+0x530/0x5e0 [ 897.858664][T16019] ? lockdep_init_map_type+0x5c/0x280 [ 897.858689][T16019] nfc_llcp_register_device+0x600/0xa60 [ 897.858706][T16019] nfc_register_device+0x6d/0x3c0 [ 897.858724][T16019] nci_register_device+0x7f1/0xb80 [ 897.858747][T16019] ? __pfx_nci_register_device+0x10/0x10 [ 897.858771][T16019] ? lockdep_init_map_type+0x5c/0x280 [ 897.858793][T16019] virtual_ncidev_open+0x141/0x220 [ 897.858815][T16019] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 897.858834][T16019] misc_open+0x26d/0x450 [ 897.858851][T16019] ? __pfx_misc_open+0x10/0x10 [ 897.858868][T16019] chrdev_open+0x234/0x6a0 [ 897.858884][T16019] ? __pfx_apparmor_file_open+0x10/0x10 [ 897.858904][T16019] ? __pfx_chrdev_open+0x10/0x10 [ 897.858921][T16019] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 897.858941][T16019] do_dentry_open+0x982/0x1530 [ 897.858957][T16019] ? __pfx_chrdev_open+0x10/0x10 [ 897.858977][T16019] vfs_open+0x82/0x3f0 [ 897.858999][T16019] path_openat+0x1de4/0x2cb0 [ 897.859020][T16019] ? __pfx_path_openat+0x10/0x10 [ 897.859040][T16019] do_filp_open+0x20b/0x470 [ 897.859056][T16019] ? __pfx_do_filp_open+0x10/0x10 [ 897.859085][T16019] ? alloc_fd+0x471/0x7d0 [ 897.859104][T16019] do_sys_openat2+0x11b/0x1d0 [ 897.859123][T16019] ? __pfx_do_sys_openat2+0x10/0x10 [ 897.859150][T16019] __x64_sys_openat+0x174/0x210 [ 897.859170][T16019] ? __pfx___x64_sys_openat+0x10/0x10 [ 897.859198][T16019] do_syscall_64+0xcd/0xfa0 [ 897.859215][T16019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.859230][T16019] RIP: 0033:0x7f840258eec9 [ 897.859242][T16019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.859256][T16019] RSP: 002b:00007f84007f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 897.859270][T16019] RAX: ffffffffffffffda RBX: 00007f84027e5fa0 RCX: 00007f840258eec9 [ 897.859280][T16019] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 897.859289][T16019] RBP: 00007f8402611f91 R08: 0000000000000000 R09: 0000000000000000 [ 897.859297][T16019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.859306][T16019] R13: 00007f84027e6038 R14: 00007f84027e5fa0 R15: 00007ffeedcea2a8 [ 897.859327][T16019] [ 898.234674][T15750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.244736][T15750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.566403][T16032] netlink: zone id is out of range [ 898.572913][T16034] binder: 16031:16034 ioctl c00c6211 0 returned -14 [ 898.579750][T16032] netlink: zone id is out of range [ 898.588532][T16032] netlink: zone id is out of range [ 898.603413][T16032] netlink: zone id is out of range [ 898.618458][T16032] netlink: zone id is out of range [ 898.633230][T16032] netlink: zone id is out of range [ 898.645612][T16032] netlink: zone id is out of range [ 898.658799][T16032] netlink: zone id is out of range [ 898.676408][T16032] netlink: zone id is out of range [ 898.686818][T16032] netlink: zone id is out of range [ 898.892816][T11675] Bluetooth: hci1: command 0x0c1a tx timeout [ 899.029105][ T6744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.190711][ T6744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.254912][ T6744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.378509][ T6744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.635276][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.713251][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.843977][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.877841][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.970139][T11675] Bluetooth: hci1: command 0x0c1a tx timeout [ 901.908633][T16099] FAULT_INJECTION: forcing a failure. [ 901.908633][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 901.908664][T16099] CPU: 0 UID: 0 PID: 16099 Comm: syz.2.2322 Tainted: G I syzkaller #0 PREEMPT(full) [ 901.908686][T16099] Tainted: [I]=FIRMWARE_WORKAROUND [ 901.908692][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 901.908701][T16099] Call Trace: [ 901.908707][T16099] [ 901.908712][T16099] dump_stack_lvl+0x16c/0x1f0 [ 901.908734][T16099] should_fail_ex+0x512/0x640 [ 901.908752][T16099] ? __kmalloc_cache_noprof+0x5f/0x780 [ 901.908779][T16099] should_failslab+0xc2/0x120 [ 901.908797][T16099] __kmalloc_cache_noprof+0x72/0x780 [ 901.908821][T16099] ? device_add+0xccc/0x1aa0 [ 901.908841][T16099] ? device_add+0xccc/0x1aa0 [ 901.908858][T16099] device_add+0xccc/0x1aa0 [ 901.908873][T16099] ? dev_set_name+0xc7/0x100 [ 901.908891][T16099] ? __pfx_dev_set_name+0x10/0x10 [ 901.908910][T16099] ? __pfx_device_add+0x10/0x10 [ 901.908927][T16099] ? lockdep_init_map_type+0x5c/0x280 [ 901.908948][T16099] ? __init_waitqueue_head+0xca/0x150 [ 901.908975][T16099] rfkill_register+0x1ad/0xb40 [ 901.908998][T16099] nfc_register_device+0x11f/0x3c0 [ 901.909017][T16099] nci_register_device+0x7f1/0xb80 [ 901.909039][T16099] ? __pfx_nci_register_device+0x10/0x10 [ 901.909063][T16099] ? lockdep_init_map_type+0x5c/0x280 [ 901.909086][T16099] virtual_ncidev_open+0x141/0x220 [ 901.909107][T16099] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 901.909126][T16099] misc_open+0x26d/0x450 [ 901.909143][T16099] ? __pfx_misc_open+0x10/0x10 [ 901.909159][T16099] chrdev_open+0x234/0x6a0 [ 901.909175][T16099] ? __pfx_apparmor_file_open+0x10/0x10 [ 901.909195][T16099] ? __pfx_chrdev_open+0x10/0x10 [ 901.909219][T16099] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 901.909240][T16099] do_dentry_open+0x982/0x1530 [ 901.909258][T16099] ? __pfx_chrdev_open+0x10/0x10 [ 901.909280][T16099] vfs_open+0x82/0x3f0 [ 901.909339][T16099] path_openat+0x1de4/0x2cb0 [ 901.909362][T16099] ? __pfx_path_openat+0x10/0x10 [ 901.909384][T16099] do_filp_open+0x20b/0x470 [ 901.909400][T16099] ? __pfx_do_filp_open+0x10/0x10 [ 901.909430][T16099] ? alloc_fd+0x471/0x7d0 [ 901.909450][T16099] do_sys_openat2+0x11b/0x1d0 [ 901.909469][T16099] ? __pfx_do_sys_openat2+0x10/0x10 [ 901.909497][T16099] __x64_sys_openat+0x174/0x210 [ 901.909517][T16099] ? __pfx___x64_sys_openat+0x10/0x10 [ 901.909545][T16099] do_syscall_64+0xcd/0xfa0 [ 901.909562][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.909577][T16099] RIP: 0033:0x7f171ff8eec9 [ 901.909590][T16099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.909604][T16099] RSP: 002b:00007f1720f13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 901.909619][T16099] RAX: ffffffffffffffda RBX: 00007f17201e5fa0 RCX: 00007f171ff8eec9 [ 901.909629][T16099] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 901.909639][T16099] RBP: 00007f1720011f91 R08: 0000000000000000 R09: 0000000000000000 [ 901.909648][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.909658][T16099] R13: 00007f17201e6038 R14: 00007f17201e5fa0 R15: 00007ffdcb023d98 [ 901.909679][T16099] [ 902.275896][T16110] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2323'. [ 902.276588][T16110] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2323'. [ 902.276748][T16110] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2323'. [ 902.276895][T16110] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2323'. [ 902.277035][T16110] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2323'. [ 903.430721][T16127] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 904.462053][T16147] FAULT_INJECTION: forcing a failure. [ 904.462053][T16147] name failslab, interval 1, probability 0, space 0, times 0 [ 904.462119][T16147] CPU: 0 UID: 0 PID: 16147 Comm: syz.0.2329 Tainted: G I syzkaller #0 PREEMPT(full) [ 904.462141][T16147] Tainted: [I]=FIRMWARE_WORKAROUND [ 904.462147][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 904.462157][T16147] Call Trace: [ 904.462162][T16147] [ 904.462169][T16147] dump_stack_lvl+0x16c/0x1f0 [ 904.462189][T16147] should_fail_ex+0x512/0x640 [ 904.462208][T16147] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 904.462224][T16147] should_failslab+0xc2/0x120 [ 904.462244][T16147] kmem_cache_alloc_noprof+0x75/0x6e0 [ 904.462258][T16147] ? __proc_create+0x2ce/0x8e0 [ 904.462281][T16147] ? __proc_create+0x2ce/0x8e0 [ 904.462299][T16147] __proc_create+0x2ce/0x8e0 [ 904.462319][T16147] ? __pfx___proc_create+0x10/0x10 [ 904.462337][T16147] ? proc_register+0x554/0x8b0 [ 904.462359][T16147] ? _raw_write_unlock+0x28/0x50 [ 904.462376][T16147] proc_create_reg+0x7d/0x180 [ 904.462398][T16147] proc_create_net_data+0x8e/0x1c0 [ 904.462418][T16147] ? __pfx_proc_create_net_data+0x10/0x10 [ 904.462440][T16147] ? __pfx_uevent_net_rcv+0x10/0x10 [ 904.462460][T16147] ? __pfx_dev_proc_net_init+0x10/0x10 [ 904.462475][T16147] wext_proc_init+0x53/0x70 [ 904.462491][T16147] dev_proc_net_init+0x10b/0x220 [ 904.462506][T16147] ops_init+0x1df/0x5f0 [ 904.462525][T16147] setup_net+0x100/0x390 [ 904.462541][T16147] ? __pfx_setup_net+0x10/0x10 [ 904.462558][T16147] ? debug_mutex_init+0x37/0x70 [ 904.462576][T16147] copy_net_ns+0x2f8/0x690 [ 904.462596][T16147] create_new_namespaces+0x3ea/0xa90 [ 904.462617][T16147] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 904.462635][T16147] ksys_unshare+0x45b/0xa40 [ 904.462654][T16147] ? __pfx_ksys_unshare+0x10/0x10 [ 904.462673][T16147] ? xfd_validate_state+0x61/0x180 [ 904.462698][T16147] __x64_sys_unshare+0x31/0x40 [ 904.462717][T16147] do_syscall_64+0xcd/0xfa0 [ 904.462733][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.462748][T16147] RIP: 0033:0x7fb9da18eec9 [ 904.462761][T16147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.462775][T16147] RSP: 002b:00007fb9db08e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 904.462789][T16147] RAX: ffffffffffffffda RBX: 00007fb9da3e5fa0 RCX: 00007fb9da18eec9 [ 904.462799][T16147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 904.462807][T16147] RBP: 00007fb9da211f91 R08: 0000000000000000 R09: 0000000000000000 [ 904.462816][T16147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.462825][T16147] R13: 00007fb9da3e6038 R14: 00007fb9da3e5fa0 R15: 00007ffcab0311d8 [ 904.462846][T16147] [ 906.819631][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2340'. [ 906.946709][T16193] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 907.640698][T16206] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2342'. [ 908.469482][T16219] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2345'. [ 909.138081][T16226] FAULT_INJECTION: forcing a failure. [ 909.138081][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 909.138111][T16226] CPU: 0 UID: 0 PID: 16226 Comm: syz.2.2347 Tainted: G I syzkaller #0 PREEMPT(full) [ 909.138133][T16226] Tainted: [I]=FIRMWARE_WORKAROUND [ 909.138140][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 909.138149][T16226] Call Trace: [ 909.138154][T16226] [ 909.138161][T16226] dump_stack_lvl+0x16c/0x1f0 [ 909.138182][T16226] should_fail_ex+0x512/0x640 [ 909.138200][T16226] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 909.138217][T16226] should_failslab+0xc2/0x120 [ 909.138236][T16226] kmem_cache_alloc_noprof+0x75/0x6e0 [ 909.138251][T16226] ? __kernfs_new_node+0xd2/0x8e0 [ 909.138274][T16226] ? __kernfs_new_node+0xd2/0x8e0 [ 909.138290][T16226] __kernfs_new_node+0xd2/0x8e0 [ 909.138310][T16226] ? __pfx___kernfs_new_node+0x10/0x10 [ 909.138332][T16226] ? find_held_lock+0x2b/0x80 [ 909.138349][T16226] ? kernfs_root+0xee/0x2a0 [ 909.138370][T16226] kernfs_new_node+0x13c/0x1e0 [ 909.138393][T16226] __kernfs_create_file+0x53/0x350 [ 909.138410][T16226] sysfs_add_file_mode_ns+0x207/0x3c0 [ 909.138432][T16226] internal_create_group+0x578/0xf30 [ 909.138455][T16226] ? __pfx_internal_create_group+0x10/0x10 [ 909.138476][T16226] ? kernfs_create_link+0x1bd/0x240 [ 909.138493][T16226] internal_create_groups+0x9d/0x150 [ 909.138513][T16226] device_add+0x6d1/0x1aa0 [ 909.138533][T16226] ? __pfx_device_add+0x10/0x10 [ 909.138550][T16226] ? lockdep_init_map_type+0x5c/0x280 [ 909.138570][T16226] ? __init_waitqueue_head+0xca/0x150 [ 909.138597][T16226] rfkill_register+0x1ad/0xb40 [ 909.138621][T16226] nfc_register_device+0x11f/0x3c0 [ 909.138648][T16226] nci_register_device+0x7f1/0xb80 [ 909.138671][T16226] ? __pfx_nci_register_device+0x10/0x10 [ 909.138697][T16226] ? lockdep_init_map_type+0x5c/0x280 [ 909.138721][T16226] virtual_ncidev_open+0x141/0x220 [ 909.138742][T16226] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 909.138762][T16226] misc_open+0x26d/0x450 [ 909.138779][T16226] ? __pfx_misc_open+0x10/0x10 [ 909.138795][T16226] chrdev_open+0x234/0x6a0 [ 909.138812][T16226] ? __pfx_apparmor_file_open+0x10/0x10 [ 909.138831][T16226] ? __pfx_chrdev_open+0x10/0x10 [ 909.138849][T16226] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 909.138868][T16226] do_dentry_open+0x982/0x1530 [ 909.138885][T16226] ? __pfx_chrdev_open+0x10/0x10 [ 909.138905][T16226] vfs_open+0x82/0x3f0 [ 909.138927][T16226] path_openat+0x1de4/0x2cb0 [ 909.138949][T16226] ? __pfx_path_openat+0x10/0x10 [ 909.138970][T16226] do_filp_open+0x20b/0x470 [ 909.138985][T16226] ? __pfx_do_filp_open+0x10/0x10 [ 909.139015][T16226] ? alloc_fd+0x471/0x7d0 [ 909.139034][T16226] do_sys_openat2+0x11b/0x1d0 [ 909.139053][T16226] ? __pfx_do_sys_openat2+0x10/0x10 [ 909.139081][T16226] __x64_sys_openat+0x174/0x210 [ 909.139101][T16226] ? __pfx___x64_sys_openat+0x10/0x10 [ 909.139129][T16226] do_syscall_64+0xcd/0xfa0 [ 909.139147][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.139162][T16226] RIP: 0033:0x7f171ff8eec9 [ 909.139176][T16226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.139190][T16226] RSP: 002b:00007f1720f13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 909.139205][T16226] RAX: ffffffffffffffda RBX: 00007f17201e5fa0 RCX: 00007f171ff8eec9 [ 909.139219][T16226] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 909.139228][T16226] RBP: 00007f1720011f91 R08: 0000000000000000 R09: 0000000000000000 [ 909.139237][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.139246][T16226] R13: 00007f17201e6038 R14: 00007f17201e5fa0 R15: 00007ffdcb023d98 [ 909.139268][T16226] [ 909.564846][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2350'. [ 909.940313][T16241] FAULT_INJECTION: forcing a failure. [ 909.940313][T16241] name failslab, interval 1, probability 0, space 0, times 0 [ 909.940344][T16241] CPU: 0 UID: 0 PID: 16241 Comm: syz.4.2351 Tainted: G I syzkaller #0 PREEMPT(full) [ 909.940366][T16241] Tainted: [I]=FIRMWARE_WORKAROUND [ 909.940372][T16241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 909.940381][T16241] Call Trace: [ 909.940386][T16241] [ 909.940393][T16241] dump_stack_lvl+0x16c/0x1f0 [ 909.940412][T16241] should_fail_ex+0x512/0x640 [ 909.940431][T16241] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 909.940448][T16241] should_failslab+0xc2/0x120 [ 909.940469][T16241] kmem_cache_alloc_noprof+0x75/0x6e0 [ 909.940482][T16241] ? node_tag_clear+0x105/0x290 [ 909.940502][T16241] ? __kernfs_new_node+0xd2/0x8e0 [ 909.940524][T16241] ? __kernfs_new_node+0xd2/0x8e0 [ 909.940540][T16241] __kernfs_new_node+0xd2/0x8e0 [ 909.940559][T16241] ? __pfx___kernfs_new_node+0x10/0x10 [ 909.940590][T16241] ? find_held_lock+0x2b/0x80 [ 909.940607][T16241] ? kernfs_root+0xee/0x2a0 [ 909.940629][T16241] kernfs_new_node+0x13c/0x1e0 [ 909.940654][T16241] __kernfs_create_file+0x53/0x350 [ 909.940672][T16241] sysfs_add_file_mode_ns+0x207/0x3c0 [ 909.940694][T16241] internal_create_group+0x578/0xf30 [ 909.940718][T16241] ? __pfx_internal_create_group+0x10/0x10 [ 909.940740][T16241] ? kernfs_create_link+0x1bd/0x240 [ 909.940757][T16241] internal_create_groups+0x9d/0x150 [ 909.940777][T16241] device_add+0x6d1/0x1aa0 [ 909.940797][T16241] ? __pfx_device_add+0x10/0x10 [ 909.940813][T16241] ? lockdep_init_map_type+0x5c/0x280 [ 909.940833][T16241] ? __init_waitqueue_head+0xca/0x150 [ 909.940860][T16241] rfkill_register+0x1ad/0xb40 [ 909.940884][T16241] nfc_register_device+0x11f/0x3c0 [ 909.940903][T16241] nci_register_device+0x7f1/0xb80 [ 909.940925][T16241] ? __pfx_nci_register_device+0x10/0x10 [ 909.940950][T16241] ? lockdep_init_map_type+0x5c/0x280 [ 909.940973][T16241] virtual_ncidev_open+0x141/0x220 [ 909.940993][T16241] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 909.941013][T16241] misc_open+0x26d/0x450 [ 909.941030][T16241] ? __pfx_misc_open+0x10/0x10 [ 909.941046][T16241] chrdev_open+0x234/0x6a0 [ 909.941062][T16241] ? __pfx_apparmor_file_open+0x10/0x10 [ 909.941082][T16241] ? __pfx_chrdev_open+0x10/0x10 [ 909.941099][T16241] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 909.941119][T16241] do_dentry_open+0x982/0x1530 [ 909.941135][T16241] ? __pfx_chrdev_open+0x10/0x10 [ 909.941155][T16241] vfs_open+0x82/0x3f0 [ 909.941177][T16241] path_openat+0x1de4/0x2cb0 [ 909.941199][T16241] ? __pfx_path_openat+0x10/0x10 [ 909.941219][T16241] do_filp_open+0x20b/0x470 [ 909.941235][T16241] ? __pfx_do_filp_open+0x10/0x10 [ 909.941265][T16241] ? alloc_fd+0x471/0x7d0 [ 909.941284][T16241] do_sys_openat2+0x11b/0x1d0 [ 909.941304][T16241] ? __pfx_do_sys_openat2+0x10/0x10 [ 909.941331][T16241] __x64_sys_openat+0x174/0x210 [ 909.941351][T16241] ? __pfx___x64_sys_openat+0x10/0x10 [ 909.941380][T16241] do_syscall_64+0xcd/0xfa0 [ 909.941397][T16241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.941412][T16241] RIP: 0033:0x7f840258eec9 [ 909.941426][T16241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.941445][T16241] RSP: 002b:00007f84007f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 909.941463][T16241] RAX: ffffffffffffffda RBX: 00007f84027e5fa0 RCX: 00007f840258eec9 [ 909.941474][T16241] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 909.941483][T16241] RBP: 00007f8402611f91 R08: 0000000000000000 R09: 0000000000000000 [ 909.941492][T16241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.941501][T16241] R13: 00007f84027e6038 R14: 00007f84027e5fa0 R15: 00007ffeedcea2a8 [ 909.941521][T16241] [ 911.724712][T16265] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 911.724766][T16265] CPU: 0 UID: 0 PID: 16265 Comm: syz.0.2358 Tainted: G I syzkaller #0 PREEMPT(full) [ 911.724788][T16265] Tainted: [I]=FIRMWARE_WORKAROUND [ 911.724794][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 911.724804][T16265] Call Trace: [ 911.724810][T16265] [ 911.724816][T16265] dump_stack_lvl+0x16c/0x1f0 [ 911.724837][T16265] sysfs_warn_dup+0x7f/0xa0 [ 911.724855][T16265] sysfs_do_create_link_sd+0x124/0x140 [ 911.724875][T16265] sysfs_create_link+0x61/0xc0 [ 911.724893][T16265] device_add+0x62c/0x1aa0 [ 911.724914][T16265] ? __pfx_device_add+0x10/0x10 [ 911.724930][T16265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 911.724954][T16265] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 911.724976][T16265] wiphy_register+0x1eb0/0x2b20 [ 911.724994][T16265] ? netdev_run_todo+0x864/0x1320 [ 911.725019][T16265] ? __pfx_wiphy_register+0x10/0x10 [ 911.725047][T16265] ieee80211_register_hw+0x253d/0x4120 [ 911.725073][T16265] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 911.725092][T16265] ? __pfx___debug_object_init+0x10/0x10 [ 911.725118][T16265] ? find_held_lock+0x2b/0x80 [ 911.725134][T16265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 911.725157][T16265] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 911.725172][T16265] ? __hrtimer_setup+0x176/0x280 [ 911.725195][T16265] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 911.725227][T16265] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 911.725252][T16265] hwsim_new_radio_nl+0xba2/0x1330 [ 911.725274][T16265] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 911.725300][T16265] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 911.725321][T16265] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 911.725346][T16265] genl_family_rcv_msg_doit+0x206/0x2f0 [ 911.725367][T16265] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 911.725408][T16265] ? bpf_lsm_capable+0x9/0x10 [ 911.725427][T16265] ? security_capable+0x7e/0x260 [ 911.725446][T16265] ? ns_capable+0xd7/0x110 [ 911.725463][T16265] genl_rcv_msg+0x55c/0x800 [ 911.725485][T16265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 911.725505][T16265] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 911.725532][T16265] netlink_rcv_skb+0x155/0x420 [ 911.725549][T16265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 911.725570][T16265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 911.725596][T16265] ? netlink_deliver_tap+0x1ae/0xd30 [ 911.725615][T16265] genl_rcv+0x28/0x40 [ 911.725632][T16265] netlink_unicast+0x5aa/0x870 [ 911.725652][T16265] ? __pfx_netlink_unicast+0x10/0x10 [ 911.725669][T16265] ? __pfx___might_resched+0x10/0x10 [ 911.725684][T16265] ? __lock_acquire+0xb97/0x1ce0 [ 911.725709][T16265] netlink_sendmsg+0x8c8/0xdd0 [ 911.725730][T16265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.725750][T16265] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 911.725772][T16265] ____sys_sendmsg+0xa98/0xc70 [ 911.725793][T16265] ? copy_msghdr_from_user+0x10a/0x160 [ 911.725809][T16265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.725834][T16265] ? __pfx_futex_wake_mark+0x10/0x10 [ 911.725858][T16265] ___sys_sendmsg+0x134/0x1d0 [ 911.725876][T16265] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.725918][T16265] __sys_sendmsg+0x16d/0x220 [ 911.725934][T16265] ? __pfx___sys_sendmsg+0x10/0x10 [ 911.725950][T16265] ? __x64_sys_futex+0x1e0/0x4c0 [ 911.725981][T16265] do_syscall_64+0xcd/0xfa0 [ 911.725999][T16265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.726014][T16265] RIP: 0033:0x7fb9da18eec9 [ 911.726028][T16265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.726042][T16265] RSP: 002b:00007fb9db08e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.726057][T16265] RAX: ffffffffffffffda RBX: 00007fb9da3e5fa0 RCX: 00007fb9da18eec9 [ 911.726067][T16265] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 911.726076][T16265] RBP: 00007fb9da211f91 R08: 0000000000000000 R09: 0000000000000000 [ 911.726086][T16265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.726095][T16265] R13: 00007fb9da3e6038 R14: 00007fb9da3e5fa0 R15: 00007ffcab0311d8 [ 911.726117][T16265] [ 913.516570][T16284] i2c i2c-0: new_device: Can't parse I2C address [ 913.961804][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 913.964868][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 913.967761][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 913.968396][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 913.968854][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 915.372656][T16286] chnl_net:caif_netlink_parms(): no params data found [ 916.017680][ T52] Bluetooth: hci4: command tx timeout [ 916.401510][T16286] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.416772][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.459681][T11675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 916.477867][T11675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 916.486030][T11675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 916.499529][T11675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 916.520730][T11675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 916.528301][T16286] bridge_slave_0: entered allmulticast mode [ 916.577954][T16286] bridge_slave_0: entered promiscuous mode [ 916.618686][T16286] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.625932][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.693377][T16286] bridge_slave_1: entered allmulticast mode [ 916.728749][T16286] bridge_slave_1: entered promiscuous mode [ 917.161088][T16286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.375434][ T8601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.440413][T16286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.651290][ T8601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.890806][T16286] team0: Port device team_slave_0 added [ 917.936075][ T8601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.001977][T16286] team0: Port device team_slave_1 added [ 918.092101][T11675] Bluetooth: hci4: command tx timeout [ 918.253726][ T8601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.343221][T16286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.370523][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.456488][T16286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.517831][T16286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.554054][T16286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.584710][T11675] Bluetooth: hci0: command tx timeout [ 918.643942][T16286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.863804][T16286] hsr_slave_0: entered promiscuous mode [ 918.880847][T16286] hsr_slave_1: entered promiscuous mode [ 918.902272][T16286] debugfs: 'hsr0' already exists in 'hsr' [ 918.955217][T16286] Cannot create hsr debugfs directory [ 919.694829][ T8601] bridge_slave_1: left allmulticast mode [ 919.723298][ T8601] bridge_slave_1: left promiscuous mode [ 919.754895][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.831384][ T8601] bridge_slave_0: left allmulticast mode [ 919.873417][ T8601] bridge_slave_0: left promiscuous mode [ 919.909817][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.177847][T11675] Bluetooth: hci4: command tx timeout [ 920.409919][T16360] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 920.657725][T11675] Bluetooth: hci0: command tx timeout [ 921.590914][T16379] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.2379: bg 1: bad block bitmap checksum [ 921.721506][T16379] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 6 with max blocks 1 with error 74 [ 921.919589][T16379] EXT4-fs (sda1): This should not happen!! Data will be lost [ 921.919589][T16379] [ 922.247917][T11675] Bluetooth: hci4: command tx timeout [ 922.449510][ T8601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.490691][ T8601] bond_slave_0: left allmulticast mode [ 922.527293][ T8601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.556951][ T8601] bond_slave_1: left allmulticast mode [ 922.574037][ T8601] bond0 (unregistering): Released all slaves [ 922.655584][T16316] chnl_net:caif_netlink_parms(): no params data found [ 922.728006][T11675] Bluetooth: hci0: command tx timeout [ 922.978383][T16392] ======================================================= [ 922.978383][T16392] WARNING: The mand mount option has been deprecated and [ 922.978383][T16392] and is ignored by this kernel. Remove the mand [ 922.978383][T16392] option from the mount to silence this warning. [ 922.978383][T16392] ======================================================= [ 924.160836][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.178340][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.195963][T16316] bridge_slave_0: entered allmulticast mode [ 924.209213][T16316] bridge_slave_0: entered promiscuous mode [ 924.337520][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.355383][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.367929][T16316] bridge_slave_1: entered allmulticast mode [ 924.385144][T16316] bridge_slave_1: entered promiscuous mode [ 924.816394][T11675] Bluetooth: hci0: command tx timeout [ 924.879679][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.920477][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.017777][ T8601] hsr_slave_0: left promiscuous mode [ 925.066718][ T8601] hsr_slave_1: left promiscuous mode [ 925.083096][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.123293][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.164409][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.195153][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.252982][ T8601] veth1_macvtap: left promiscuous mode [ 925.289117][ T8601] veth0_macvtap: left promiscuous mode [ 925.307993][ T8601] veth1_vlan: left promiscuous mode [ 925.325402][ T8601] veth0_vlan: left promiscuous mode [ 926.209498][ T8601] team0 (unregistering): Port device team_slave_1 removed [ 926.250447][ T8601] team0 (unregistering): Port device team_slave_0 removed [ 926.861458][T16316] team0: Port device team_slave_0 added [ 926.957023][T16316] team0: Port device team_slave_1 added [ 927.098490][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.105446][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.227742][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.271693][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.292657][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.359406][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.404259][T16286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 927.435382][T16286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 927.452952][T16447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 927.464336][T16447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 927.477143][T16286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 927.484280][T16447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 927.507893][T16447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 927.604540][T16447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 927.634211][T16447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 927.660110][T16447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 927.700053][T16447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 927.731603][ T8601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.877780][T16286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 927.977037][T16461] FAULT_INJECTION: forcing a failure. [ 927.977037][T16461] name failslab, interval 1, probability 0, space 0, times 0 [ 928.023251][T16316] hsr_slave_0: entered promiscuous mode [ 928.039134][T16461] CPU: 0 UID: 0 PID: 16461 Comm: syz.2.2387 Tainted: G I syzkaller #0 PREEMPT(full) [ 928.039161][T16461] Tainted: [I]=FIRMWARE_WORKAROUND [ 928.039167][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 928.039176][T16461] Call Trace: [ 928.039181][T16461] [ 928.039187][T16461] dump_stack_lvl+0x16c/0x1f0 [ 928.039210][T16461] should_fail_ex+0x512/0x640 [ 928.039231][T16461] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 928.039249][T16461] should_failslab+0xc2/0x120 [ 928.039268][T16461] kmem_cache_alloc_noprof+0x75/0x6e0 [ 928.039281][T16461] ? alloc_empty_file+0x55/0x1e0 [ 928.039306][T16461] ? alloc_empty_file+0x55/0x1e0 [ 928.039324][T16461] alloc_empty_file+0x55/0x1e0 [ 928.039343][T16461] alloc_file_pseudo+0x13a/0x230 [ 928.039363][T16461] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 928.039384][T16461] ? do_raw_spin_unlock+0x172/0x230 [ 928.039409][T16461] __anon_inode_getfile+0xe8/0x280 [ 928.039428][T16461] anon_inode_getfile_fmode+0x37/0xa0 [ 928.039446][T16461] do_eventfd+0x19b/0x2c0 [ 928.039464][T16461] ? rcu_is_watching+0x12/0xc0 [ 928.039480][T16461] __x64_sys_eventfd+0x32/0x50 [ 928.039499][T16461] do_syscall_64+0xcd/0xfa0 [ 928.039517][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.039531][T16461] RIP: 0033:0x7f171ff8eec9 [ 928.039544][T16461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.039558][T16461] RSP: 002b:00007f1720f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 928.039573][T16461] RAX: ffffffffffffffda RBX: 00007f17201e5fa0 RCX: 00007f171ff8eec9 [ 928.039583][T16461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 928.039592][T16461] RBP: 00007f1720011f91 R08: 0000000000000000 R09: 0000000000000000 [ 928.039601][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.039610][T16461] R13: 00007f17201e6038 R14: 00007f17201e5fa0 R15: 00007ffdcb023d98 [ 928.039629][T16461] [ 928.046555][T16316] hsr_slave_1: entered promiscuous mode [ 928.581896][T16316] debugfs: 'hsr0' already exists in 'hsr' [ 928.610209][T16316] Cannot create hsr debugfs directory [ 928.677062][ T8601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.103813][ T8601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.374168][ T8601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.529711][T11675] Bluetooth: hci4: command 0x0c1a tx timeout [ 929.535771][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 929.541858][ T5876] Bluetooth: hci3: command 0x0c1a tx timeout [ 929.689245][T11675] Bluetooth: hci0: command 0x0c1a tx timeout [ 929.738987][T11675] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 930.270373][ T30] audit: type=1800 audit(6054999291.427:19): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2391" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 930.357316][T16286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.613916][ T8601] bridge_slave_1: left allmulticast mode [ 930.623949][ T8601] bridge_slave_1: left promiscuous mode [ 930.639243][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.658279][ T8601] bridge_slave_0: left allmulticast mode [ 930.663939][ T8601] bridge_slave_0: left promiscuous mode [ 930.688029][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.970312][ T8601] erspan0 (unregistering): left allmulticast mode [ 931.255811][ T8601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.266709][ T8601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.277114][ T8601] bond0 (unregistering): Released all slaves [ 931.371167][ T8601] ovs_: left promiscuous mode [ 931.393195][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.559673][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.566801][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.611792][T11675] Bluetooth: hci4: command 0x0c1a tx timeout [ 931.655518][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.662725][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.744004][T16316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 931.768737][T11675] Bluetooth: hci0: command 0x0c1a tx timeout [ 931.852142][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.858944][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.905804][T16316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 931.952289][T16286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.031360][T16316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 932.083197][T16316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 932.694149][ T8601] hsr_slave_0: left promiscuous mode [ 932.753456][ T8601] hsr_slave_1: left promiscuous mode [ 932.808177][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.842449][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.920826][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.958259][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.042994][ T8601] veth1_macvtap: left promiscuous mode [ 933.072739][ T8601] veth0_macvtap: left promiscuous mode [ 933.104041][ T8601] veth1_vlan: left promiscuous mode [ 933.139457][ T8601] veth0_vlan: left promiscuous mode [ 933.690067][T11675] Bluetooth: hci4: command 0x0c1a tx timeout [ 933.851481][T11675] Bluetooth: hci0: command 0x0c1a tx timeout [ 934.067893][T16599] FAULT_INJECTION: forcing a failure. [ 934.067893][T16599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 934.207199][T16599] CPU: 0 UID: 0 PID: 16599 Comm: syz.2.2399 Tainted: G I syzkaller #0 PREEMPT(full) [ 934.207227][T16599] Tainted: [I]=FIRMWARE_WORKAROUND [ 934.207233][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 934.207242][T16599] Call Trace: [ 934.207248][T16599] [ 934.207255][T16599] dump_stack_lvl+0x16c/0x1f0 [ 934.207276][T16599] should_fail_ex+0x512/0x640 [ 934.207298][T16599] should_fail_alloc_page+0xe7/0x130 [ 934.207319][T16599] prepare_alloc_pages+0x3c2/0x610 [ 934.207341][T16599] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 934.207359][T16599] ? kasan_save_stack+0x42/0x60 [ 934.207374][T16599] ? kasan_save_stack+0x33/0x60 [ 934.207388][T16599] ? kasan_save_track+0x14/0x30 [ 934.207402][T16599] ? __kasan_save_free_info+0x3b/0x60 [ 934.207422][T16599] ? __kasan_slab_free+0x5f/0x80 [ 934.207438][T16599] ? kfree+0x2b8/0x6d0 [ 934.207456][T16599] ? tomoyo_path_number_perm+0x470/0x580 [ 934.207476][T16599] ? security_file_ioctl+0x9b/0x240 [ 934.207496][T16599] ? __x64_sys_ioctl+0xb7/0x210 [ 934.207515][T16599] ? do_syscall_64+0xcd/0xfa0 [ 934.207529][T16599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.207546][T16599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 934.207572][T16599] ? look_up_lock_class+0x59/0x150 [ 934.207590][T16599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.207614][T16599] ? policy_nodemask+0xea/0x4e0 [ 934.207634][T16599] alloc_pages_mpol+0x1fb/0x550 [ 934.207654][T16599] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 934.207673][T16599] ? do_raw_spin_lock+0x12c/0x2b0 [ 934.207694][T16599] ? find_held_lock+0x2b/0x80 [ 934.207710][T16599] ___kmalloc_large_node+0xed/0x160 [ 934.207732][T16599] __kmalloc_large_noprof+0x1c/0x70 [ 934.207750][T16599] ? get_task_mm+0xc7/0xf0 [ 934.207764][T16599] vhost_dev_set_owner+0x3af/0xa50 [ 934.207783][T16599] ? __mutex_lock+0x1c5/0x1060 [ 934.207805][T16599] vhost_dev_ioctl+0x2eb/0xe20 [ 934.207822][T16599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.207847][T16599] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 934.207874][T16599] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 934.207891][T16599] ? hook_file_ioctl_common+0x145/0x410 [ 934.207914][T16599] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 934.207933][T16599] ? __fget_files+0x20e/0x3c0 [ 934.207949][T16599] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 934.207967][T16599] __x64_sys_ioctl+0x18b/0x210 [ 934.207989][T16599] do_syscall_64+0xcd/0xfa0 [ 934.208005][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.208020][T16599] RIP: 0033:0x7f171ff8eec9 [ 934.208033][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.208047][T16599] RSP: 002b:00007f1720eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.208061][T16599] RAX: ffffffffffffffda RBX: 00007f17201e6270 RCX: 00007f171ff8eec9 [ 934.208071][T16599] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 934.208080][T16599] RBP: 00007f1720011f91 R08: 0000000000000000 R09: 0000000000000000 [ 934.208088][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.208097][T16599] R13: 00007f17201e6308 R14: 00007f17201e6270 R15: 00007ffdcb023d98 [ 934.208118][T16599] [ 934.664192][ T8601] team0 (unregistering): Port device team_slave_0 removed [ 935.084914][T16604] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 935.084914][T16604] program syz.4.2400 not setting count and/or reply_len properly [ 935.527069][T16605] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2400'. [ 935.628862][T16286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.661630][T16606] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2400'. [ 935.865361][T16286] veth0_vlan: entered promiscuous mode 6[ 935.987824][T16286] veth1_vlan: entered promiscuous mode [ 936.159103][T16316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.182216][T16286] veth0_macvtap: entered promiscuous mode [ 936.247030][T16286] veth1_macvtap: entered promiscuous mode [ 936.315969][T16316] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.334089][T16625] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 936.370175][T16286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.384593][T16627] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 936.410632][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.417794][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.466898][T16286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.494161][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.501347][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.558378][ T8600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.598621][ T8601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.642971][ T8601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.693257][ T8601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.966966][ T8600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.049412][ T8600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.111249][ T8601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.174762][ T8601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.549107][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.003949][T16316] veth0_vlan: entered promiscuous mode [ 939.186154][T16316] veth1_vlan: entered promiscuous mode [ 939.311253][T16316] veth0_macvtap: entered promiscuous mode [ 939.392520][T16316] veth1_macvtap: entered promiscuous mode [ 939.483738][T16700] binder: 16697:16700 ioctl 40046210 0 returned -14 [ 939.501131][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.563004][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.632723][ T8589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.705156][ T8589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.775016][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2414'. [ 939.843442][ T8589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.903021][ T8589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.189187][ T8592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.197018][ T8592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.347175][ T8592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.412668][ T8592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.003674][T16749] FAULT_INJECTION: forcing a failure. [ 941.003674][T16749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.029645][T16747] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2419'. [ 941.072376][T16749] CPU: 0 UID: 0 PID: 16749 Comm: syz.5.2367 Tainted: G I syzkaller #0 PREEMPT(full) [ 941.072401][T16749] Tainted: [I]=FIRMWARE_WORKAROUND [ 941.072407][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 941.072416][T16749] Call Trace: [ 941.072421][T16749] [ 941.072428][T16749] dump_stack_lvl+0x16c/0x1f0 [ 941.072448][T16749] should_fail_ex+0x512/0x640 [ 941.072469][T16749] _copy_to_user+0x32/0xd0 [ 941.072489][T16749] simple_read_from_buffer+0xcb/0x170 [ 941.072512][T16749] proc_fail_nth_read+0x197/0x240 [ 941.072529][T16749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 941.072544][T16749] ? rw_verify_area+0xcf/0x6c0 [ 941.072566][T16749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 941.072580][T16749] vfs_read+0x1e1/0xcf0 [ 941.072597][T16749] ? __pfx___mutex_lock+0x10/0x10 [ 941.072614][T16749] ? __pfx_vfs_read+0x10/0x10 [ 941.072633][T16749] ? __fget_files+0x20e/0x3c0 [ 941.072652][T16749] ksys_read+0x12a/0x250 [ 941.072666][T16749] ? __pfx_ksys_read+0x10/0x10 [ 941.072686][T16749] do_syscall_64+0xcd/0xfa0 [ 941.072703][T16749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.072717][T16749] RIP: 0033:0x7f6e3f78d8dc [ 941.072729][T16749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 941.072742][T16749] RSP: 002b:00007f6e406a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 941.072757][T16749] RAX: ffffffffffffffda RBX: 00007f6e3f9e5fa0 RCX: 00007f6e3f78d8dc [ 941.072766][T16749] RDX: 000000000000000f RSI: 00007f6e406a20a0 RDI: 0000000000000003 [ 941.072775][T16749] RBP: 00007f6e406a2090 R08: 0000000000000000 R09: 0000000000000000 [ 941.072783][T16749] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 941.072791][T16749] R13: 00007f6e3f9e6038 R14: 00007f6e3f9e5fa0 R15: 00007ffcc1d2ca98 [ 941.072811][T16749] [ 941.895458][T16767] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2422'. [ 942.942343][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2429'. [ 944.946810][T16847] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2440'. [ 946.146517][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 947.554450][T16915] FAULT_INJECTION: forcing a failure. [ 947.554450][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.735311][T16915] CPU: 0 UID: 0 PID: 16915 Comm: syz.2.2453 Tainted: G I syzkaller #0 PREEMPT(full) [ 947.735338][T16915] Tainted: [I]=FIRMWARE_WORKAROUND [ 947.735344][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 947.735352][T16915] Call Trace: [ 947.735358][T16915] [ 947.735364][T16915] dump_stack_lvl+0x16c/0x1f0 [ 947.735385][T16915] should_fail_ex+0x512/0x640 [ 947.735406][T16915] _copy_to_user+0x32/0xd0 [ 947.735426][T16915] simple_read_from_buffer+0xcb/0x170 [ 947.735450][T16915] proc_fail_nth_read+0x197/0x240 [ 947.735465][T16915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.735481][T16915] ? rw_verify_area+0xcf/0x6c0 [ 947.735502][T16915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.735517][T16915] vfs_read+0x1e1/0xcf0 [ 947.735534][T16915] ? __pfx___mutex_lock+0x10/0x10 [ 947.735556][T16915] ? __pfx_vfs_read+0x10/0x10 [ 947.735576][T16915] ? __fget_files+0x20e/0x3c0 [ 947.735595][T16915] ksys_read+0x12a/0x250 [ 947.735609][T16915] ? __pfx_ksys_read+0x10/0x10 [ 947.735629][T16915] do_syscall_64+0xcd/0xfa0 [ 947.735646][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.735660][T16915] RIP: 0033:0x7f171ff8d8dc [ 947.735672][T16915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 947.735687][T16915] RSP: 002b:00007f1720ed1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 947.735702][T16915] RAX: ffffffffffffffda RBX: 00007f17201e6180 RCX: 00007f171ff8d8dc [ 947.735711][T16915] RDX: 000000000000000f RSI: 00007f1720ed10a0 RDI: 0000000000000004 [ 947.735720][T16915] RBP: 00007f1720ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 947.735729][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.735737][T16915] R13: 00007f17201e6218 R14: 00007f17201e6180 R15: 00007ffdcb023d98 [ 947.735757][T16915] [ 949.918276][T16956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 950.938220][T16971] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 952.275763][T16986] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 954.153404][T17033] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 955.119311][T17058] FAULT_INJECTION: forcing a failure. [ 955.119311][T17058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 955.235475][T17058] CPU: 0 UID: 0 PID: 17058 Comm: syz.5.2475 Tainted: G I syzkaller #0 PREEMPT(full) [ 955.235510][T17058] Tainted: [I]=FIRMWARE_WORKAROUND [ 955.235516][T17058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 955.235525][T17058] Call Trace: [ 955.235531][T17058] [ 955.235537][T17058] dump_stack_lvl+0x16c/0x1f0 [ 955.235561][T17058] should_fail_ex+0x512/0x640 [ 955.235583][T17058] get_futex_key+0x1d0/0x1560 [ 955.235606][T17058] ? __pfx_get_futex_key+0x10/0x10 [ 955.235630][T17058] futex_wait_setup+0x9d/0x550 [ 955.235659][T17058] __futex_wait+0x193/0x2f0 [ 955.235682][T17058] ? __pfx___futex_wait+0x10/0x10 [ 955.235713][T17058] ? __pfx_futex_wake_mark+0x10/0x10 [ 955.235738][T17058] ? futex_private_hash_put+0x176/0x300 [ 955.235760][T17058] ? futex_private_hash_put+0x18a/0x300 [ 955.235780][T17058] futex_wait+0xe8/0x380 [ 955.235803][T17058] ? __pfx_futex_wait+0x10/0x10 [ 955.235829][T17058] ? _copy_from_user+0x59/0xd0 [ 955.235847][T17058] ? io_uring_setup+0x16e4/0x20e0 [ 955.235866][T17058] do_futex+0x229/0x350 [ 955.235885][T17058] ? __pfx_do_futex+0x10/0x10 [ 955.235904][T17058] ? snd_pcm_oss_ioctl+0x2c2/0x37c0 [ 955.235926][T17058] ? find_held_lock+0x2b/0x80 [ 955.235946][T17058] __x64_sys_futex+0x1e0/0x4c0 [ 955.235968][T17058] ? __pfx___x64_sys_futex+0x10/0x10 [ 955.235986][T17058] ? xfd_validate_state+0x61/0x180 [ 955.236013][T17058] do_syscall_64+0xcd/0xfa0 [ 955.236030][T17058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.236045][T17058] RIP: 0033:0x7f6e3f78eec9 [ 955.236057][T17058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.236071][T17058] RSP: 002b:00007f6e406a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 955.236085][T17058] RAX: ffffffffffffffda RBX: 00007f6e3f9e5fa8 RCX: 00007f6e3f78eec9 [ 955.236095][T17058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6e3f9e5fa8 [ 955.236104][T17058] RBP: 00007f6e3f9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 955.236112][T17058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.236121][T17058] R13: 00007f6e3f9e6038 R14: 00007ffcc1d2c9b0 R15: 00007ffcc1d2ca98 [ 955.236140][T17058] [ 955.457778][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.287160][T17085] random: crng reseeded on system resumption [ 959.832770][T17161] netlink: 'syz.0.2494': attribute type 11 has an invalid length. [ 959.918816][T17161] netlink: 'syz.0.2494': attribute type 11 has an invalid length. [ 959.980537][T17157] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2493'. [ 959.990181][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 960.030592][T17161] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2494'. [ 960.077089][T17165] Invalid ELF header magic: != ELF [ 960.097694][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 960.146193][T17161] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2494'. [ 962.958685][T17228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2504'. [ 964.130061][T17243] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 964.422650][T17204] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 965.516063][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 965.540473][ T30] audit: type=1804 audit(6054999335.666:20): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2510" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=1189 res=1 errno=0 [ 965.911839][T17287] net_ratelimit: 29 callbacks suppressed [ 965.911857][T17287] openvswitch: netlink: Key type 103 is out of range max 32 [ 970.413802][T17380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 971.187662][T17405] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 971.187662][T17405] program syz.4.2530 not setting count and/or reply_len properly [ 971.289958][T17389] zswap: compressor not available [ 973.060000][T17434] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2532'. [ 973.233700][T17436] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2532'. [ 973.390680][T17436] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2532'. [ 973.601183][T17436] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2532'. [ 973.850213][T17436] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2532'. [ 974.680185][T17447] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 975.444734][T17459] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2537'. [ 975.836630][T17458] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2538'. [ 977.745048][T17486] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 978.008146][T17486] CPU: 0 UID: 0 PID: 17486 Comm: syz.4.2542 Tainted: G I syzkaller #0 PREEMPT(full) [ 978.008174][T17486] Tainted: [I]=FIRMWARE_WORKAROUND [ 978.008180][T17486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 978.008189][T17486] Call Trace: [ 978.008195][T17486] [ 978.008201][T17486] dump_stack_lvl+0x16c/0x1f0 [ 978.008223][T17486] sysfs_warn_dup+0x7f/0xa0 [ 978.008242][T17486] sysfs_do_create_link_sd+0x124/0x140 [ 978.008262][T17486] sysfs_create_link+0x61/0xc0 [ 978.008280][T17486] device_add+0x62c/0x1aa0 [ 978.008300][T17486] ? __pfx_device_add+0x10/0x10 [ 978.008317][T17486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 978.008343][T17486] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 978.008363][T17486] wiphy_register+0x1eb0/0x2b20 [ 978.008382][T17486] ? netdev_run_todo+0x864/0x1320 [ 978.008406][T17486] ? __pfx_wiphy_register+0x10/0x10 [ 978.008434][T17486] ieee80211_register_hw+0x253d/0x4120 [ 978.008461][T17486] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 978.008480][T17486] ? __pfx___debug_object_init+0x10/0x10 [ 978.008507][T17486] ? find_held_lock+0x2b/0x80 [ 978.008523][T17486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 978.008546][T17486] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 978.008561][T17486] ? __hrtimer_setup+0x176/0x280 [ 978.008584][T17486] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 978.008617][T17486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 978.008643][T17486] hwsim_new_radio_nl+0xba2/0x1330 [ 978.008665][T17486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 978.008691][T17486] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 978.008712][T17486] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 978.008737][T17486] genl_family_rcv_msg_doit+0x206/0x2f0 [ 978.008759][T17486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 978.008786][T17486] ? bpf_lsm_capable+0x9/0x10 [ 978.008804][T17486] ? security_capable+0x7e/0x260 [ 978.008823][T17486] ? ns_capable+0xd7/0x110 [ 978.008840][T17486] genl_rcv_msg+0x55c/0x800 [ 978.008862][T17486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 978.008882][T17486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 978.008908][T17486] netlink_rcv_skb+0x155/0x420 [ 978.008925][T17486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 978.008946][T17486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 978.008972][T17486] ? netlink_deliver_tap+0x1ae/0xd30 [ 978.008991][T17486] genl_rcv+0x28/0x40 [ 978.009008][T17486] netlink_unicast+0x5aa/0x870 [ 978.009028][T17486] ? __pfx_netlink_unicast+0x10/0x10 [ 978.009055][T17486] ? __pfx___might_resched+0x10/0x10 [ 978.009071][T17486] ? __lock_acquire+0xb97/0x1ce0 [ 978.009097][T17486] netlink_sendmsg+0x8c8/0xdd0 [ 978.009118][T17486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.009138][T17486] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 978.009160][T17486] ____sys_sendmsg+0xa98/0xc70 [ 978.009181][T17486] ? copy_msghdr_from_user+0x10a/0x160 [ 978.009198][T17486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.009222][T17486] ? __pfx_futex_wake_mark+0x10/0x10 [ 978.009247][T17486] ___sys_sendmsg+0x134/0x1d0 [ 978.009265][T17486] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.009307][T17486] __sys_sendmsg+0x16d/0x220 [ 978.009324][T17486] ? __pfx___sys_sendmsg+0x10/0x10 [ 978.009339][T17486] ? __x64_sys_futex+0x1e0/0x4c0 [ 978.009371][T17486] do_syscall_64+0xcd/0xfa0 [ 978.009389][T17486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.009403][T17486] RIP: 0033:0x7f840258eec9 [ 978.009417][T17486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.009431][T17486] RSP: 002b:00007f84007f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.009446][T17486] RAX: ffffffffffffffda RBX: 00007f84027e5fa0 RCX: 00007f840258eec9 [ 978.009456][T17486] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 978.009465][T17486] RBP: 00007f8402611f91 R08: 0000000000000000 R09: 0000000000000000 [ 978.009475][T17486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.009484][T17486] R13: 00007f84027e6038 R14: 00007f84027e5fa0 R15: 00007ffeedcea2a8 [ 978.009505][T17486] [ 980.636363][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2545'. [ 980.903913][T17524] team0: Port device team_slave_1 removed [ 981.935488][T17547] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 986.135577][T17628] bridge0: port 3(hsr0) entered blocking state [ 986.267100][T17628] bridge0: port 3(hsr0) entered disabled state [ 986.352946][T17628] hsr0: entered allmulticast mode [ 986.530369][T17628] hsr_slave_0: entered allmulticast mode [ 986.536111][T17628] hsr_slave_1: entered allmulticast mode [ 986.660032][T17628] hsr0: entered promiscuous mode [ 986.789193][T17628] bridge0: port 3(hsr0) entered blocking state [ 986.795495][T17628] bridge0: port 3(hsr0) entered forwarding state [ 988.826433][T17657] binder: 17656:17657 ioctl 40046210 0 returned -14 [ 989.339379][T17652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2565'. [ 990.532538][T17673] FAULT_INJECTION: forcing a failure. [ 990.532538][T17673] name failslab, interval 1, probability 0, space 0, times 0 [ 990.669228][T17673] CPU: 0 UID: 0 PID: 17673 Comm: syz.4.2570 Tainted: G I syzkaller #0 PREEMPT(full) [ 990.669253][T17673] Tainted: [I]=FIRMWARE_WORKAROUND [ 990.669259][T17673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 990.669267][T17673] Call Trace: [ 990.669272][T17673] [ 990.669278][T17673] dump_stack_lvl+0x16c/0x1f0 [ 990.669298][T17673] should_fail_ex+0x512/0x640 [ 990.669315][T17673] ? __kmalloc_noprof+0xca/0x880 [ 990.669338][T17673] should_failslab+0xc2/0x120 [ 990.669357][T17673] __kmalloc_noprof+0xdd/0x880 [ 990.669377][T17673] ? look_up_lock_class+0x59/0x150 [ 990.669392][T17673] ? iovec_from_user+0x108/0x140 [ 990.669413][T17673] ? iovec_from_user+0x108/0x140 [ 990.669429][T17673] iovec_from_user+0x108/0x140 [ 990.669448][T17673] __import_iovec+0x88/0x650 [ 990.669467][T17673] ? find_held_lock+0x2b/0x80 [ 990.669484][T17673] import_iovec+0x86/0xb0 [ 990.669504][T17673] vfs_writev+0x19b/0xde0 [ 990.669518][T17673] ? __pfx___might_resched+0x10/0x10 [ 990.669537][T17673] ? __pfx_vfs_writev+0x10/0x10 [ 990.669549][T17673] ? __mutex_lock+0x1c5/0x1060 [ 990.669570][T17673] ? __pfx___mutex_lock+0x10/0x10 [ 990.669593][T17673] ? __fget_files+0x20e/0x3c0 [ 990.669605][T17673] ? __fget_files+0x1b0/0x3c0 [ 990.669623][T17673] ? do_writev+0x132/0x340 [ 990.669634][T17673] do_writev+0x132/0x340 [ 990.669647][T17673] ? __pfx_do_writev+0x10/0x10 [ 990.669666][T17673] do_syscall_64+0xcd/0xfa0 [ 990.669683][T17673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.669697][T17673] RIP: 0033:0x7f840258eec9 [ 990.669709][T17673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.669722][T17673] RSP: 002b:00007f84007f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 990.669736][T17673] RAX: ffffffffffffffda RBX: 00007f84027e5fa0 RCX: 00007f840258eec9 [ 990.669745][T17673] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000003 [ 990.669754][T17673] RBP: 00007f84007f6090 R08: 0000000000000000 R09: 0000000000000000 [ 990.669762][T17673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.669771][T17673] R13: 00007f84027e6038 R14: 00007f84027e5fa0 R15: 00007ffeedcea2a8 [ 990.669790][T17673] [ 992.374223][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 992.384986][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 992.394147][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 992.414790][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 992.423644][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 992.436535][ T6742] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 890 with max blocks 8 with error 117 [ 992.547687][ T6742] EXT4-fs (sda1): This should not happen!! Data will be lost [ 992.547687][ T6742] [ 993.180392][ T8601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.292200][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.300953][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.333992][T17685] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2574'. [ 993.482082][ T8601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.611901][T17709] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2579'. [ 993.755228][ T8601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.803246][T17711] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 993.865937][T17687] chnl_net:caif_netlink_parms(): no params data found [ 994.014408][ T8601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.446621][T17687] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.487762][ T52] Bluetooth: hci2: command tx timeout [ 994.495822][T17687] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.534402][T17687] bridge_slave_0: entered allmulticast mode [ 994.604259][T17687] bridge_slave_0: entered promiscuous mode [ 994.681146][T17687] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.718322][T17687] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.725506][T17687] bridge_slave_1: entered allmulticast mode [ 994.809156][T17687] bridge_slave_1: entered promiscuous mode [ 995.030243][T17687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.117957][T17687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.313180][T17687] team0: Port device team_slave_0 added [ 995.339447][ T8601] bridge_slave_1: left allmulticast mode [ 995.358056][ T8601] bridge_slave_1: left promiscuous mode [ 995.384090][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.441772][ T8601] bridge_slave_0: left allmulticast mode [ 995.466037][ T8601] bridge_slave_0: left promiscuous mode [ 995.489391][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.567757][ T52] Bluetooth: hci2: command tx timeout [ 996.683519][T17780] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2590'. [ 996.951347][ T8601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.966378][ T8601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.976907][ T8601] bond0 (unregistering): Released all slaves [ 996.990847][T17687] team0: Port device team_slave_1 added [ 997.310366][T17687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.338967][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.436244][T17687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.521284][T17687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.548355][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.667655][T17687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.241652][T17687] hsr_slave_0: entered promiscuous mode [ 998.269606][T17687] hsr_slave_1: entered promiscuous mode [ 998.288432][T17687] debugfs: 'hsr0' already exists in 'hsr' [ 998.294172][T17687] Cannot create hsr debugfs directory [ 998.396373][ T8601] hsr_slave_0: left promiscuous mode [ 998.418887][ T8601] hsr_slave_1: left promiscuous mode [ 998.445465][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.460242][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.481366][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.499108][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.544799][ T8601] veth1_macvtap: left promiscuous mode [ 998.561301][ T8601] veth0_macvtap: left promiscuous mode [ 998.577798][ T8601] veth1_vlan: left promiscuous mode [ 998.590339][ T8601] veth0_vlan: left promiscuous mode [ 998.648695][ T52] Bluetooth: hci2: command tx timeout [ 999.174860][T17824] FAULT_INJECTION: forcing a failure. [ 999.174860][T17824] name failslab, interval 1, probability 0, space 0, times 0 [ 999.207058][T17824] CPU: 0 UID: 0 PID: 17824 Comm: syz.4.2598 Tainted: G I syzkaller #0 PREEMPT(full) [ 999.207091][T17824] Tainted: [I]=FIRMWARE_WORKAROUND [ 999.207096][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 999.207106][T17824] Call Trace: [ 999.207114][T17824] [ 999.207121][T17824] dump_stack_lvl+0x16c/0x1f0 [ 999.207143][T17824] should_fail_ex+0x512/0x640 [ 999.207161][T17824] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 999.207178][T17824] should_failslab+0xc2/0x120 [ 999.207197][T17824] kmem_cache_alloc_noprof+0x75/0x6e0 [ 999.207212][T17824] ? __kernfs_new_node+0xd2/0x8e0 [ 999.207233][T17824] ? __kernfs_new_node+0xd2/0x8e0 [ 999.207249][T17824] __kernfs_new_node+0xd2/0x8e0 [ 999.207267][T17824] ? kernfs_add_one+0x14e/0x840 [ 999.207286][T17824] ? __pfx___kernfs_new_node+0x10/0x10 [ 999.207309][T17824] ? find_held_lock+0x2b/0x80 [ 999.207325][T17824] ? kernfs_root+0xee/0x2a0 [ 999.207345][T17824] kernfs_new_node+0x13c/0x1e0 [ 999.207368][T17824] kernfs_create_link+0xcc/0x240 [ 999.207385][T17824] sysfs_do_create_link_sd+0x90/0x140 [ 999.207403][T17824] sysfs_create_link+0x61/0xc0 [ 999.207420][T17824] device_add+0x50a/0x1aa0 [ 999.207440][T17824] ? __pfx_device_add+0x10/0x10 [ 999.207457][T17824] ? lockdep_init_map_type+0x5c/0x280 [ 999.207477][T17824] ? __init_waitqueue_head+0xca/0x150 [ 999.207504][T17824] rfkill_register+0x1ad/0xb40 [ 999.207532][T17824] nfc_register_device+0x11f/0x3c0 [ 999.207551][T17824] nci_register_device+0x7f1/0xb80 [ 999.207573][T17824] ? __pfx_nci_register_device+0x10/0x10 [ 999.207598][T17824] ? lockdep_init_map_type+0x5c/0x280 [ 999.207622][T17824] virtual_ncidev_open+0x141/0x220 [ 999.207643][T17824] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 999.207663][T17824] misc_open+0x26d/0x450 [ 999.207680][T17824] ? __pfx_misc_open+0x10/0x10 [ 999.207696][T17824] chrdev_open+0x234/0x6a0 [ 999.207712][T17824] ? __pfx_apparmor_file_open+0x10/0x10 [ 999.207732][T17824] ? __pfx_chrdev_open+0x10/0x10 [ 999.207750][T17824] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 999.207769][T17824] do_dentry_open+0x982/0x1530 [ 999.207785][T17824] ? __pfx_chrdev_open+0x10/0x10 [ 999.207806][T17824] vfs_open+0x82/0x3f0 [ 999.207827][T17824] path_openat+0x1de4/0x2cb0 [ 999.207849][T17824] ? __pfx_path_openat+0x10/0x10 [ 999.207870][T17824] do_filp_open+0x20b/0x470 [ 999.207886][T17824] ? __pfx_do_filp_open+0x10/0x10 [ 999.207915][T17824] ? alloc_fd+0x471/0x7d0 [ 999.207935][T17824] do_sys_openat2+0x11b/0x1d0 [ 999.207955][T17824] ? __pfx_do_sys_openat2+0x10/0x10 [ 999.207976][T17824] ? getname_flags.part.0+0x24c/0x550 [ 999.208000][T17824] __x64_sys_openat+0x174/0x210 [ 999.208020][T17824] ? __pfx___x64_sys_openat+0x10/0x10 [ 999.208049][T17824] do_syscall_64+0xcd/0xfa0 [ 999.208072][T17824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.208088][T17824] RIP: 0033:0x7f840258eec9 [ 999.208101][T17824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.208116][T17824] RSP: 002b:00007f84007f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 999.208131][T17824] RAX: ffffffffffffffda RBX: 00007f84027e5fa0 RCX: 00007f840258eec9 [ 999.208141][T17824] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 999.208151][T17824] RBP: 00007f8402611f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.208161][T17824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.208170][T17824] R13: 00007f84027e6038 R14: 00007f84027e5fa0 R15: 00007ffeedcea2a8 [ 999.208192][T17824] [ 999.667296][ T8601] team0 (unregistering): Port device team_slave_1 removed [ 999.706640][ T8601] team0 (unregistering): Port device team_slave_0 removed [ 1000.728292][T17835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1000.734255][T17835] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1000.740527][ T52] Bluetooth: hci2: command tx timeout [ 1000.919368][T17835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1000.945834][T17835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1000.955785][T17835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1000.965222][T17835] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1001.134008][T17687] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1001.139337][T17835] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1001.193988][T17687] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1001.214687][T17687] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1001.231188][T17687] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1001.232544][T17831] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2599'. [ 1001.520467][T17687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.547487][T17687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.589198][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.589302][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.620315][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.620385][ T8592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.771237][T17687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.349531][T17877] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1002.634618][T17687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.809892][T11675] Bluetooth: hci3: command 0x0c1a tx timeout [ 1002.970270][T11675] Bluetooth: hci2: command 0x0c1a tx timeout [ 1002.970323][T11675] Bluetooth: hci0: command 0x0c1a tx timeout [ 1002.970348][T11675] Bluetooth: hci4: command 0x0c1a tx timeout [ 1003.552098][T17687] veth0_vlan: entered promiscuous mode [ 1003.596762][T17687] veth1_vlan: entered promiscuous mode [ 1003.685176][T17687] veth0_macvtap: entered promiscuous mode [ 1003.702857][T17687] veth1_macvtap: entered promiscuous mode [ 1003.753522][T17687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.773681][T17687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.788656][ T8589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.788731][ T8589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.788770][ T8589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.788806][ T8589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.987304][ T8589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.987322][ T8589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.074498][ T8592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.074516][ T8592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.276110][T17888] tty tty17: ldisc open failed (-12), clearing slot 16 [ 1004.888411][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1005.048005][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1005.163605][T17926] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2612'. [ 1005.890003][T17957] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1007.139249][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1007.337184][T17977] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 1007.532775][T17981] ubi0: attaching mtd0 [ 1007.571833][T17981] ubi0: scanning is finished [ 1007.600879][T17981] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1007.657484][T17983] FAULT_INJECTION: forcing a failure. [ 1007.657484][T17983] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.841414][T17983] CPU: 0 UID: 0 PID: 17983 Comm: syz.6.2624 Tainted: G I syzkaller #0 PREEMPT(full) [ 1007.841441][T17983] Tainted: [I]=FIRMWARE_WORKAROUND [ 1007.841448][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1007.841457][T17983] Call Trace: [ 1007.841463][T17983] [ 1007.841469][T17983] dump_stack_lvl+0x16c/0x1f0 [ 1007.841493][T17983] should_fail_ex+0x512/0x640 [ 1007.841512][T17983] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1007.841529][T17983] should_failslab+0xc2/0x120 [ 1007.841547][T17983] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1007.841561][T17983] ? __do_sys_getcwd+0xe0/0x930 [ 1007.841584][T17983] ? __do_sys_getcwd+0xe0/0x930 [ 1007.841601][T17983] __do_sys_getcwd+0xe0/0x930 [ 1007.841619][T17983] ? do_raw_spin_unlock+0x172/0x230 [ 1007.841644][T17983] ? __x64_sys_futex+0x1e0/0x4c0 [ 1007.841662][T17983] ? __x64_sys_futex+0x1e9/0x4c0 [ 1007.841680][T17983] ? __pfx___do_sys_getcwd+0x10/0x10 [ 1007.841700][T17983] ? xfd_validate_state+0x61/0x180 [ 1007.841719][T17983] ? __pfx_do_writev+0x10/0x10 [ 1007.841738][T17983] do_syscall_64+0xcd/0xfa0 [ 1007.841755][T17983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.841769][T17983] RIP: 0033:0x7f9883b8eec9 [ 1007.841782][T17983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.841795][T17983] RSP: 002b:00007f98849c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 1007.841810][T17983] RAX: ffffffffffffffda RBX: 00007f9883de6180 RCX: 00007f9883b8eec9 [ 1007.841820][T17983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1007.841828][T17983] RBP: 00007f9883c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1007.841837][T17983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.841845][T17983] R13: 00007f9883de6218 R14: 00007f9883de6180 R15: 00007ffd63ce7798 [ 1007.841866][T17983] [ 1008.036305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.397452][T17995] netlink: 'syz.4.2625': attribute type 11 has an invalid length. [ 1008.441323][T17995] netlink: 'syz.4.2625': attribute type 11 has an invalid length. [ 1008.771577][T17994] zswap: compressor not available [ 1009.320712][T17981] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1010.315685][T18037] binder: 18036:18037 ioctl 40046210 0 returned -14 [ 1010.550468][T18039] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2634'. [ 1011.798477][T18071] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 1012.632527][T18089] FAULT_INJECTION: forcing a failure. [ 1012.632527][T18089] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.721177][T18089] CPU: 0 UID: 0 PID: 18089 Comm: syz.5.2650 Tainted: G I syzkaller #0 PREEMPT(full) [ 1012.721203][T18089] Tainted: [I]=FIRMWARE_WORKAROUND [ 1012.721209][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1012.721219][T18089] Call Trace: [ 1012.721225][T18089] [ 1012.721232][T18089] dump_stack_lvl+0x16c/0x1f0 [ 1012.721255][T18089] should_fail_ex+0x512/0x640 [ 1012.721273][T18089] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1012.721298][T18089] should_failslab+0xc2/0x120 [ 1012.721317][T18089] __kmalloc_cache_noprof+0x72/0x780 [ 1012.721341][T18089] ? mem_cgroup_css_alloc+0x83a/0x1e80 [ 1012.721358][T18089] ? mem_cgroup_css_alloc+0x83a/0x1e80 [ 1012.721369][T18089] ? _raw_spin_unlock+0x28/0x50 [ 1012.721382][T18089] mem_cgroup_css_alloc+0x83a/0x1e80 [ 1012.721402][T18089] cgroup_apply_control_enable+0x4b0/0xbb0 [ 1012.721432][T18089] cgroup_mkdir+0x5e0/0x12e0 [ 1012.721449][T18089] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1012.721464][T18089] kernfs_iop_mkdir+0x10e/0x190 [ 1012.721483][T18089] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1012.721499][T18089] vfs_mkdir+0x590/0x8c0 [ 1012.721522][T18089] do_mkdirat+0x304/0x3e0 [ 1012.721539][T18089] ? __pfx_do_mkdirat+0x10/0x10 [ 1012.721556][T18089] ? getname_flags.part.0+0x1c5/0x550 [ 1012.721578][T18089] __x64_sys_mkdir+0xef/0x140 [ 1012.721594][T18089] do_syscall_64+0xcd/0xfa0 [ 1012.721610][T18089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.721625][T18089] RIP: 0033:0x7f6e3f78eec9 [ 1012.721637][T18089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.721651][T18089] RSP: 002b:00007f6e40681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1012.721669][T18089] RAX: ffffffffffffffda RBX: 00007f6e3f9e6090 RCX: 00007f6e3f78eec9 [ 1012.721678][T18089] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1012.721687][T18089] RBP: 00007f6e3f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.721696][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.721705][T18089] R13: 00007f6e3f9e6128 R14: 00007f6e3f9e6090 R15: 00007ffcc1d2ca98 [ 1012.721726][T18089] [ 1014.170448][T18129] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 1015.105599][T18150] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1015.309368][ T30] audit: type=1800 audit(6054999385.466:21): pid=18154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2666" name="lu_gp_id" dev="configfs" ino=66218 res=0 errno=0 [ 1017.595037][T18144] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1018.530451][T18218] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2679'. [ 1018.541234][T18208] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2675'. [ 1018.665960][T18218] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2679'. [ 1018.971331][T18228] FAULT_INJECTION: forcing a failure. [ 1018.971331][T18228] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.971375][T18228] CPU: 0 UID: 0 PID: 18228 Comm: syz.6.2680 Tainted: G I syzkaller #0 PREEMPT(full) [ 1018.971397][T18228] Tainted: [I]=FIRMWARE_WORKAROUND [ 1018.971403][T18228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1018.971413][T18228] Call Trace: [ 1018.971418][T18228] [ 1018.971425][T18228] dump_stack_lvl+0x16c/0x1f0 [ 1018.971445][T18228] should_fail_ex+0x512/0x640 [ 1018.971463][T18228] ? __kmalloc_noprof+0xca/0x880 [ 1018.971488][T18228] should_failslab+0xc2/0x120 [ 1018.971507][T18228] __kmalloc_noprof+0xdd/0x880 [ 1018.971527][T18228] ? __pfx_sprintf+0x10/0x10 [ 1018.971539][T18228] ? do_syscall_64+0xcd/0xfa0 [ 1018.971554][T18228] ? ima_write_template_field_data+0x5d/0x1f0 [ 1018.971573][T18228] ? ima_write_template_field_data+0x5d/0x1f0 [ 1018.971588][T18228] ima_write_template_field_data+0x5d/0x1f0 [ 1018.971607][T18228] ima_eventdigest_init_common+0x154/0x430 [ 1018.971625][T18228] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 1018.971654][T18228] ? trace_kmalloc+0x2b/0xd0 [ 1018.971670][T18228] ? __kmalloc_noprof+0x34f/0x880 [ 1018.971691][T18228] ? ima_alloc_init_template+0x19d/0x720 [ 1018.971716][T18228] ima_alloc_init_template+0x39d/0x720 [ 1018.971741][T18228] ima_store_measurement+0x1eb/0x5c0 [ 1018.971764][T18228] ? __pfx_ima_store_measurement+0x10/0x10 [ 1018.971786][T18228] ? vfs_getxattr_alloc+0xec/0x350 [ 1018.971806][T18228] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1018.971827][T18228] process_measurement+0x1ddb/0x23e0 [ 1018.971853][T18228] ? __pfx_process_measurement+0x10/0x10 [ 1018.971871][T18228] ? __kasan_slab_alloc+0x89/0x90 [ 1018.971888][T18228] ? security_file_alloc+0x34/0x2b0 [ 1018.971901][T18228] ? alloc_empty_file+0x73/0x1e0 [ 1018.971918][T18228] ? alloc_file_pseudo+0x13a/0x230 [ 1018.971942][T18228] ? find_held_lock+0x2b/0x80 [ 1018.971980][T18228] ima_file_mmap+0x1b1/0x1d0 [ 1018.971998][T18228] ? __pfx_ima_file_mmap+0x10/0x10 [ 1018.972021][T18228] security_mmap_file+0x88c/0x990 [ 1018.972036][T18228] vm_mmap_pgoff+0xec/0x470 [ 1018.972056][T18228] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1018.972071][T18228] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1018.972092][T18228] ? hugetlbfs_get_inode+0x31f/0x730 [ 1018.972114][T18228] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1018.972135][T18228] __x64_sys_mmap+0x125/0x190 [ 1018.972167][T18228] do_syscall_64+0xcd/0xfa0 [ 1018.972185][T18228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.972200][T18228] RIP: 0033:0x7f9883b8eec9 [ 1018.972214][T18228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.972234][T18228] RSP: 002b:00007f9884a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1018.972249][T18228] RAX: ffffffffffffffda RBX: 00007f9883de5fa0 RCX: 00007f9883b8eec9 [ 1018.972259][T18228] RDX: 00004000000000df RSI: 0000000000000004 RDI: 00000000001fffff [ 1018.972268][T18228] RBP: 00007f9883c11f91 R08: 0000000000000401 R09: 0000300000000000 [ 1018.972277][T18228] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1018.972286][T18228] R13: 00007f9883de6038 R14: 00007f9883de5fa0 R15: 00007ffd63ce7798 [ 1018.972307][T18228] [ 1018.992327][ T30] audit: type=1804 audit(6054999389.146:22): pid=18228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.2680" name="anon_hugepage" dev="hugetlbfs" ino=66562 res=0 errno=0 [ 1019.089227][T18233] ICMPv6: process `syz.4.2681' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1019.551087][T18246] FAULT_INJECTION: forcing a failure. [ 1019.551087][T18246] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.551122][T18246] CPU: 0 UID: 0 PID: 18246 Comm: syz.0.2684 Tainted: G I syzkaller #0 PREEMPT(full) [ 1019.551144][T18246] Tainted: [I]=FIRMWARE_WORKAROUND [ 1019.551151][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1019.551160][T18246] Call Trace: [ 1019.551165][T18246] [ 1019.551171][T18246] dump_stack_lvl+0x16c/0x1f0 [ 1019.551192][T18246] should_fail_ex+0x512/0x640 [ 1019.551209][T18246] ? __kmalloc_noprof+0xca/0x880 [ 1019.551234][T18246] should_failslab+0xc2/0x120 [ 1019.551253][T18246] __kmalloc_noprof+0xdd/0x880 [ 1019.551276][T18246] ? __register_sysctl_table+0xb3/0x1900 [ 1019.551301][T18246] ? __register_sysctl_table+0xb3/0x1900 [ 1019.551320][T18246] __register_sysctl_table+0xb3/0x1900 [ 1019.551340][T18246] ? is_module_address+0x5f/0xf0 [ 1019.551363][T18246] ? __pfx___register_sysctl_table+0x10/0x10 [ 1019.551382][T18246] ? is_module_address+0x69/0xf0 [ 1019.551401][T18246] ? register_net_sysctl_sz+0x228/0x3e0 [ 1019.551421][T18246] ? __asan_memcpy+0x3c/0x60 [ 1019.551437][T18246] sysctl_route_net_init+0x15e/0x2c0 [ 1019.551458][T18246] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 1019.551477][T18246] ops_init+0x1df/0x5f0 [ 1019.551496][T18246] setup_net+0x100/0x390 [ 1019.551513][T18246] ? __pfx_setup_net+0x10/0x10 [ 1019.551531][T18246] ? debug_mutex_init+0x37/0x70 [ 1019.551549][T18246] copy_net_ns+0x2f8/0x690 [ 1019.551569][T18246] create_new_namespaces+0x3ea/0xa90 [ 1019.551590][T18246] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1019.551609][T18246] ksys_unshare+0x45b/0xa40 [ 1019.551627][T18246] ? __pfx_ksys_unshare+0x10/0x10 [ 1019.551647][T18246] ? xfd_validate_state+0x61/0x180 [ 1019.551672][T18246] __x64_sys_unshare+0x31/0x40 [ 1019.551690][T18246] do_syscall_64+0xcd/0xfa0 [ 1019.551707][T18246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.551722][T18246] RIP: 0033:0x7ff11bb8eec9 [ 1019.551734][T18246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.551748][T18246] RSP: 002b:00007ff11c9ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1019.551763][T18246] RAX: ffffffffffffffda RBX: 00007ff11bde6180 RCX: 00007ff11bb8eec9 [ 1019.551773][T18246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1019.551781][T18246] RBP: 00007ff11bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1019.551790][T18246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.551799][T18246] R13: 00007ff11bde6218 R14: 00007ff11bde6180 R15: 00007ffd9880fbf8 [ 1019.551819][T18246] [ 1019.672893][T18250] FAULT_INJECTION: forcing a failure. [ 1019.672893][T18250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.672922][T18250] CPU: 0 UID: 0 PID: 18250 Comm: syz.6.2685 Tainted: G I syzkaller #0 PREEMPT(full) [ 1019.672943][T18250] Tainted: [I]=FIRMWARE_WORKAROUND [ 1019.672948][T18250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1019.672957][T18250] Call Trace: [ 1019.672963][T18250] [ 1019.672968][T18250] dump_stack_lvl+0x16c/0x1f0 [ 1019.672989][T18250] should_fail_ex+0x512/0x640 [ 1019.673012][T18250] _copy_to_user+0x32/0xd0 [ 1019.673033][T18250] put_user_ifreq+0x72/0xc0 [ 1019.673052][T18250] sock_do_ioctl+0x230/0x280 [ 1019.673071][T18250] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1019.673104][T18250] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1019.673130][T18250] sock_ioctl+0x227/0x6b0 [ 1019.673152][T18250] ? __pfx_sock_ioctl+0x10/0x10 [ 1019.673172][T18250] ? hook_file_ioctl_common+0x145/0x410 [ 1019.673199][T18250] ? __fget_files+0x20e/0x3c0 [ 1019.673215][T18250] ? __pfx_sock_ioctl+0x10/0x10 [ 1019.673237][T18250] __x64_sys_ioctl+0x18b/0x210 [ 1019.673258][T18250] do_syscall_64+0xcd/0xfa0 [ 1019.673275][T18250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.673289][T18250] RIP: 0033:0x7f9883b8eec9 [ 1019.673302][T18250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.673315][T18250] RSP: 002b:00007f9884a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.673329][T18250] RAX: ffffffffffffffda RBX: 00007f9883de5fa0 RCX: 00007f9883b8eec9 [ 1019.673339][T18250] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 1019.673347][T18250] RBP: 00007f9883c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1019.673356][T18250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.673364][T18250] R13: 00007f9883de6038 R14: 00007f9883de5fa0 R15: 00007ffd63ce7798 [ 1019.673384][T18250] [ 1021.316722][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 1023.385970][T18242] tty tty60: ldisc open failed (-12), clearing slot 59 [ 1023.733253][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 1024.840538][T18356] binder: 18355:18356 ioctl 40046210 0 returned -14 [ 1025.132507][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1025.150827][ T30] audit: type=1800 audit(6054999395.306:23): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2704" name="lu_gp_id" dev="configfs" ino=67203 res=0 errno=0 [ 1025.171202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.264024][T18363] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1025.631153][T18369] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2705'. [ 1025.662847][T18368] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2705'. [ 1026.410296][T18380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1026.476255][T18380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1026.551672][T18380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.584012][T18386] FAULT_INJECTION: forcing a failure. [ 1026.584012][T18386] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1026.621070][T18380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.648562][T18386] CPU: 0 UID: 0 PID: 18386 Comm: syz.6.2708 Tainted: G I syzkaller #0 PREEMPT(full) [ 1026.648588][T18386] Tainted: [I]=FIRMWARE_WORKAROUND [ 1026.648594][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1026.648603][T18386] Call Trace: [ 1026.648609][T18386] [ 1026.648616][T18386] dump_stack_lvl+0x16c/0x1f0 [ 1026.648638][T18386] should_fail_ex+0x512/0x640 [ 1026.648659][T18386] get_futex_key+0x1d0/0x1560 [ 1026.648681][T18386] ? __pfx_get_futex_key+0x10/0x10 [ 1026.648700][T18386] ? __pfx___schedule+0x10/0x10 [ 1026.648714][T18386] ? do_raw_spin_unlock+0x172/0x230 [ 1026.648739][T18386] futex_wait_setup+0x9d/0x550 [ 1026.648766][T18386] __futex_wait+0x193/0x2f0 [ 1026.648788][T18386] ? __pfx___futex_wait+0x10/0x10 [ 1026.648813][T18386] ? __pfx_futex_wake_mark+0x10/0x10 [ 1026.648837][T18386] ? futex_private_hash_put+0x176/0x300 [ 1026.648858][T18386] ? futex_private_hash_put+0x18a/0x300 [ 1026.648877][T18386] futex_wait+0xe8/0x380 [ 1026.648898][T18386] ? __pfx_futex_wait+0x10/0x10 [ 1026.648929][T18386] do_futex+0x229/0x350 [ 1026.648948][T18386] ? __pfx_do_futex+0x10/0x10 [ 1026.648967][T18386] ? sock_ioctl+0x3a9/0x6b0 [ 1026.648991][T18386] __x64_sys_futex+0x1e0/0x4c0 [ 1026.649011][T18386] ? __fget_files+0x20e/0x3c0 [ 1026.649025][T18386] ? __pfx___x64_sys_futex+0x10/0x10 [ 1026.649044][T18386] ? xfd_validate_state+0x61/0x180 [ 1026.649071][T18386] do_syscall_64+0xcd/0xfa0 [ 1026.649087][T18386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.649102][T18386] RIP: 0033:0x7f9883b8eec9 [ 1026.649115][T18386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.649128][T18386] RSP: 002b:00007f98849e40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1026.649143][T18386] RAX: ffffffffffffffda RBX: 00007f9883de6098 RCX: 00007f9883b8eec9 [ 1026.649153][T18386] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9883de6098 [ 1026.649161][T18386] RBP: 00007f9883de6090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.649170][T18386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.649179][T18386] R13: 00007f9883de6128 R14: 00007ffd63ce76b0 R15: 00007ffd63ce7798 [ 1026.649199][T18386] [ 1026.876728][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.459418][T18400] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1028.489579][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1028.495752][T11675] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.567774][T11675] Bluetooth: hci0: command 0x0c1a tx timeout [ 1028.649924][T11675] Bluetooth: hci2: command 0x0c1a tx timeout [ 1029.695432][T18442] FAULT_INJECTION: forcing a failure. [ 1029.695432][T18442] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.762329][T18442] CPU: 0 UID: 0 PID: 18442 Comm: syz.0.2723 Tainted: G I syzkaller #0 PREEMPT(full) [ 1029.762356][T18442] Tainted: [I]=FIRMWARE_WORKAROUND [ 1029.762362][T18442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1029.762371][T18442] Call Trace: [ 1029.762377][T18442] [ 1029.762384][T18442] dump_stack_lvl+0x16c/0x1f0 [ 1029.762405][T18442] should_fail_ex+0x512/0x640 [ 1029.762423][T18442] ? __kmalloc_noprof+0xca/0x880 [ 1029.762449][T18442] should_failslab+0xc2/0x120 [ 1029.762467][T18442] __kmalloc_noprof+0xdd/0x880 [ 1029.762489][T18442] ? __register_sysctl_table+0xea2/0x1900 [ 1029.762514][T18442] ? __register_sysctl_table+0xea2/0x1900 [ 1029.762533][T18442] __register_sysctl_table+0xea2/0x1900 [ 1029.762558][T18442] ? __pfx___register_sysctl_table+0x10/0x10 [ 1029.762577][T18442] ? is_module_address+0x69/0xf0 [ 1029.762597][T18442] ? register_net_sysctl_sz+0x228/0x3e0 [ 1029.762621][T18442] brnf_init_net+0x289/0x450 [ 1029.762638][T18442] ? __pfx_brnf_init_net+0x10/0x10 [ 1029.762653][T18442] ops_init+0x1df/0x5f0 [ 1029.762674][T18442] setup_net+0x100/0x390 [ 1029.762691][T18442] ? __pfx_setup_net+0x10/0x10 [ 1029.762708][T18442] ? debug_mutex_init+0x37/0x70 [ 1029.762727][T18442] copy_net_ns+0x2f8/0x690 [ 1029.762749][T18442] create_new_namespaces+0x3ea/0xa90 [ 1029.762770][T18442] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1029.762788][T18442] ksys_unshare+0x45b/0xa40 [ 1029.762807][T18442] ? __pfx_ksys_unshare+0x10/0x10 [ 1029.762827][T18442] ? xfd_validate_state+0x61/0x180 [ 1029.762852][T18442] __x64_sys_unshare+0x31/0x40 [ 1029.762870][T18442] do_syscall_64+0xcd/0xfa0 [ 1029.762888][T18442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.762903][T18442] RIP: 0033:0x7ff11bb8eec9 [ 1029.762916][T18442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.762932][T18442] RSP: 002b:00007ff11ca10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1029.762946][T18442] RAX: ffffffffffffffda RBX: 00007ff11bde6090 RCX: 00007ff11bb8eec9 [ 1029.762956][T18442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1029.762965][T18442] RBP: 00007ff11bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.762974][T18442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.762982][T18442] R13: 00007ff11bde6128 R14: 00007ff11bde6090 R15: 00007ffd9880fbf8 [ 1029.763003][T18442] [ 1029.763437][T18442] sysctl could not get directory: /net/bridge -12 [ 1030.335992][T18448] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2726'. [ 1031.719880][T18486] zswap: compressor hmǾÄ*}ʱMոL]JL not available [ 1032.337253][T18502] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 1032.470519][T18503] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2739'. [ 1034.572700][ T30] audit: type=1800 audit(6054999404.716:24): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2747" name="lu_gp_id" dev="configfs" ino=67998 res=0 errno=0 [ 1034.630855][T18538] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 1035.090265][T18523] kexec: Could not allocate control_code_buffer [ 1036.029994][T18561] snd_virmidi snd_virmidi.0: control 16781581:4:5:'x?F/zF˷fC:7 is already present [ 1036.150169][T18560] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2753'. [ 1036.430701][T18564] svc: failed to register nfsdv3 RPC service (errno 111). [ 1036.558169][T18564] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1036.881018][T18574] QAT: Stopping all acceleration devices. [ 1036.974585][T11675] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1036.974611][T11675] Bluetooth: hci4: unexpected subevent 0x0a length: 725 > 30 [ 1037.109686][T18576] FAULT_INJECTION: forcing a failure. [ 1037.109686][T18576] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.200292][T18576] CPU: 0 UID: 0 PID: 18576 Comm: syz.6.2757 Tainted: G I syzkaller #0 PREEMPT(full) [ 1037.200319][T18576] Tainted: [I]=FIRMWARE_WORKAROUND [ 1037.200325][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1037.200334][T18576] Call Trace: [ 1037.200340][T18576] [ 1037.200347][T18576] dump_stack_lvl+0x16c/0x1f0 [ 1037.200368][T18576] should_fail_ex+0x512/0x640 [ 1037.200386][T18576] ? __kmalloc_noprof+0xca/0x880 [ 1037.200416][T18576] should_failslab+0xc2/0x120 [ 1037.200435][T18576] __kmalloc_noprof+0xdd/0x880 [ 1037.200457][T18576] ? lsm_blob_alloc+0x68/0x90 [ 1037.200478][T18576] ? lsm_blob_alloc+0x68/0x90 [ 1037.200492][T18576] lsm_blob_alloc+0x68/0x90 [ 1037.200509][T18576] security_sk_alloc+0x30/0x270 [ 1037.200529][T18576] sk_prot_alloc+0x1c7/0x2a0 [ 1037.200551][T18576] sk_alloc+0x36/0xc20 [ 1037.200566][T18576] __netlink_create+0x5e/0x2c0 [ 1037.200579][T18576] ? __wake_up+0x3f/0x60 [ 1037.200596][T18576] netlink_create+0x39e/0x620 [ 1037.200611][T18576] ? __pfx_genl_bind+0x10/0x10 [ 1037.200627][T18576] ? __pfx_genl_unbind+0x10/0x10 [ 1037.200643][T18576] ? __pfx_genl_release+0x10/0x10 [ 1037.200664][T18576] __sock_create+0x335/0x8d0 [ 1037.200687][T18576] __sys_socket+0x14d/0x260 [ 1037.200708][T18576] ? __pfx___sys_socket+0x10/0x10 [ 1037.200730][T18576] ? do_user_addr_fault+0x843/0x1370 [ 1037.200746][T18576] __x64_sys_socket+0x72/0xb0 [ 1037.200765][T18576] ? lockdep_hardirqs_on+0x7c/0x110 [ 1037.200781][T18576] do_syscall_64+0xcd/0xfa0 [ 1037.200797][T18576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.200812][T18576] RIP: 0033:0x7f9883b90de7 [ 1037.200825][T18576] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.200839][T18576] RSP: 002b:00007f9884a03fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1037.200854][T18576] RAX: ffffffffffffffda RBX: 00007f9883de5fa0 RCX: 00007f9883b90de7 [ 1037.200864][T18576] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1037.200873][T18576] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1037.200882][T18576] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 1037.200891][T18576] R13: 00007f9883de6038 R14: 00007f9883de5fa0 R15: 00007ffd63ce7798 [ 1037.200912][T18576] [ 1038.542758][T18599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1038.773508][T18599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.858590][T18599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.941670][T18599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1039.362125][T18607] random: crng reseeded on system resumption [ 1039.540736][T18611] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1039.540736][T18611] program syz.5.2767 not setting count and/or reply_len properly [ 1039.852906][T18611] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2767'. [ 1040.084937][T18618] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2767'. [ 1040.248492][T18625] netlink: zone id is out of range [ 1040.311061][T18625] netlink: zone id is out of range [ 1040.567673][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1040.807646][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1040.890204][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1040.971322][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.143993][T18658] Console: switching to colour VGA+ 32x100 [ 1044.473775][T18697] FAULT_INJECTION: forcing a failure. [ 1044.473775][T18697] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.773190][T18697] CPU: 0 UID: 0 PID: 18697 Comm: syz.5.2789 Tainted: G I syzkaller #0 PREEMPT(full) [ 1044.773216][T18697] Tainted: [I]=FIRMWARE_WORKAROUND [ 1044.773221][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1044.773230][T18697] Call Trace: [ 1044.773235][T18697] [ 1044.773242][T18697] dump_stack_lvl+0x16c/0x1f0 [ 1044.773262][T18697] should_fail_ex+0x512/0x640 [ 1044.773280][T18697] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1044.773304][T18697] should_failslab+0xc2/0x120 [ 1044.773322][T18697] __kmalloc_cache_noprof+0x72/0x780 [ 1044.773344][T18697] ? kernfs_fop_open+0x244/0xda0 [ 1044.773370][T18697] ? kernfs_fop_open+0x244/0xda0 [ 1044.773390][T18697] kernfs_fop_open+0x244/0xda0 [ 1044.773416][T18697] do_dentry_open+0x982/0x1530 [ 1044.773433][T18697] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1044.773458][T18697] vfs_open+0x82/0x3f0 [ 1044.773480][T18697] path_openat+0x1de4/0x2cb0 [ 1044.773502][T18697] ? __pfx_path_openat+0x10/0x10 [ 1044.773521][T18697] do_filp_open+0x20b/0x470 [ 1044.773537][T18697] ? __pfx_do_filp_open+0x10/0x10 [ 1044.773565][T18697] ? alloc_fd+0x471/0x7d0 [ 1044.773584][T18697] do_sys_openat2+0x11b/0x1d0 [ 1044.773603][T18697] ? __pfx_do_sys_openat2+0x10/0x10 [ 1044.773621][T18697] ? find_held_lock+0x2b/0x80 [ 1044.773643][T18697] __x64_sys_openat+0x174/0x210 [ 1044.773663][T18697] ? __pfx___x64_sys_openat+0x10/0x10 [ 1044.773695][T18697] do_syscall_64+0xcd/0xfa0 [ 1044.773712][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.773727][T18697] RIP: 0033:0x7f6e3f78eec9 [ 1044.773739][T18697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.773753][T18697] RSP: 002b:00007f6e40681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1044.773767][T18697] RAX: ffffffffffffffda RBX: 00007f6e3f9e6090 RCX: 00007f6e3f78eec9 [ 1044.773777][T18697] RDX: 0000000000000501 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1044.773786][T18697] RBP: 00007f6e3f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1044.773794][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.773802][T18697] R13: 00007f6e3f9e6128 R14: 00007f6e3f9e6090 R15: 00007ffcc1d2ca98 [ 1044.773822][T18697] [ 1045.869001][T18707] FAULT_INJECTION: forcing a failure. [ 1045.869001][T18707] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.019862][T18707] CPU: 0 UID: 0 PID: 18707 Comm: syz.5.2790 Tainted: G I syzkaller #0 PREEMPT(full) [ 1046.019889][T18707] Tainted: [I]=FIRMWARE_WORKAROUND [ 1046.019895][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1046.019905][T18707] Call Trace: [ 1046.019910][T18707] [ 1046.019917][T18707] dump_stack_lvl+0x16c/0x1f0 [ 1046.019939][T18707] should_fail_ex+0x512/0x640 [ 1046.019958][T18707] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1046.019984][T18707] should_failslab+0xc2/0x120 [ 1046.020004][T18707] __kmalloc_cache_noprof+0x72/0x780 [ 1046.020027][T18707] ? ptp_open+0xe4/0x550 [ 1046.020047][T18707] ? ptp_open+0xe4/0x550 [ 1046.020061][T18707] ptp_open+0xe4/0x550 [ 1046.020080][T18707] ? __pfx_ptp_open+0x10/0x10 [ 1046.020102][T18707] ? __pfx_ptp_open+0x10/0x10 [ 1046.020118][T18707] posix_clock_open+0x178/0x290 [ 1046.020136][T18707] ? __pfx_posix_clock_open+0x10/0x10 [ 1046.020153][T18707] chrdev_open+0x234/0x6a0 [ 1046.020170][T18707] ? __pfx_apparmor_file_open+0x10/0x10 [ 1046.020190][T18707] ? __pfx_chrdev_open+0x10/0x10 [ 1046.020207][T18707] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1046.020226][T18707] do_dentry_open+0x982/0x1530 [ 1046.020243][T18707] ? __pfx_chrdev_open+0x10/0x10 [ 1046.020263][T18707] vfs_open+0x82/0x3f0 [ 1046.020285][T18707] path_openat+0x1de4/0x2cb0 [ 1046.020307][T18707] ? __pfx_path_openat+0x10/0x10 [ 1046.020328][T18707] do_filp_open+0x20b/0x470 [ 1046.020343][T18707] ? __pfx_do_filp_open+0x10/0x10 [ 1046.020372][T18707] ? alloc_fd+0x471/0x7d0 [ 1046.020391][T18707] do_sys_openat2+0x11b/0x1d0 [ 1046.020410][T18707] ? __pfx_do_sys_openat2+0x10/0x10 [ 1046.020438][T18707] __x64_sys_openat+0x174/0x210 [ 1046.020458][T18707] ? __pfx___x64_sys_openat+0x10/0x10 [ 1046.020486][T18707] do_syscall_64+0xcd/0xfa0 [ 1046.020503][T18707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.020518][T18707] RIP: 0033:0x7f6e3f78eec9 [ 1046.020531][T18707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.020546][T18707] RSP: 002b:00007f6e40681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1046.020561][T18707] RAX: ffffffffffffffda RBX: 00007f6e3f9e6090 RCX: 00007f6e3f78eec9 [ 1046.020571][T18707] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1046.020580][T18707] RBP: 00007f6e3f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1046.020589][T18707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.020597][T18707] R13: 00007f6e3f9e6128 R14: 00007f6e3f9e6090 R15: 00007ffcc1d2ca98 [ 1046.020617][T18707] [ 1047.926731][T18735] ================================================================== [ 1047.926746][T18735] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1047.926770][T18735] Read of size 256 at addr ffff888058e09fc0 by task syz.6.2795/18735 [ 1047.926783][T18735] [ 1047.926794][T18735] CPU: 0 UID: 0 PID: 18735 Comm: syz.6.2795 Tainted: G I syzkaller #0 PREEMPT(full) [ 1047.926815][T18735] Tainted: [I]=FIRMWARE_WORKAROUND [ 1047.926821][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1047.926830][T18735] Call Trace: [ 1047.926836][T18735] [ 1047.926843][T18735] dump_stack_lvl+0x116/0x1f0 [ 1047.926860][T18735] print_report+0xcd/0x630 [ 1047.926878][T18735] ? __virt_addr_valid+0x81/0x610 [ 1047.926896][T18735] ? __phys_addr+0xe8/0x180 [ 1047.926914][T18735] ? fbcon_prepare_logo+0xa03/0xc70 [ 1047.926933][T18735] kasan_report+0xe0/0x110 [ 1047.926951][T18735] ? fbcon_prepare_logo+0xa03/0xc70 [ 1047.926969][T18735] kasan_check_range+0x100/0x1b0 [ 1047.926991][T18735] __asan_memcpy+0x23/0x60 [ 1047.927005][T18735] fbcon_prepare_logo+0xa03/0xc70 [ 1047.927025][T18735] fbcon_init+0xd77/0x1900 [ 1047.927041][T18735] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1047.927059][T18735] visual_init+0x320/0x620 [ 1047.927076][T18735] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1047.927097][T18735] store_bind+0x61d/0x760 [ 1047.927116][T18735] ? sysfs_file_kobj+0xe4/0x290 [ 1047.927131][T18735] ? __pfx_store_bind+0x10/0x10 [ 1047.927149][T18735] dev_attr_store+0x58/0x80 [ 1047.927164][T18735] ? __pfx_dev_attr_store+0x10/0x10 [ 1047.927179][T18735] sysfs_kf_write+0xf2/0x150 [ 1047.927194][T18735] kernfs_fop_write_iter+0x3af/0x570 [ 1047.927215][T18735] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1047.927230][T18735] iter_file_splice_write+0xa21/0x12e0 [ 1047.927251][T18735] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1047.927266][T18735] ? __pfx_copy_splice_read+0x10/0x10 [ 1047.927292][T18735] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1047.927306][T18735] direct_splice_actor+0x18f/0x6c0 [ 1047.927320][T18735] splice_direct_to_actor+0x342/0xa30 [ 1047.927343][T18735] ? __pfx_direct_splice_actor+0x10/0x10 [ 1047.927358][T18735] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1047.927382][T18735] do_splice_direct+0x174/0x240 [ 1047.927403][T18735] ? __pfx_do_splice_direct+0x10/0x10 [ 1047.927433][T18735] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1047.927456][T18735] ? rw_verify_area+0xcf/0x6c0 [ 1047.927480][T18735] do_sendfile+0xb06/0xe50 [ 1047.927496][T18735] ? __pfx_do_sendfile+0x10/0x10 [ 1047.927509][T18735] ? __pfx___might_resched+0x10/0x10 [ 1047.927525][T18735] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1047.927543][T18735] __x64_sys_sendfile64+0x1d8/0x220 [ 1047.927560][T18735] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1047.927580][T18735] do_syscall_64+0xcd/0xfa0 [ 1047.927596][T18735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.927612][T18735] RIP: 0033:0x7f9883b8eec9 [ 1047.927624][T18735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.927638][T18735] RSP: 002b:00007f98849c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1047.927652][T18735] RAX: ffffffffffffffda RBX: 00007f9883de6180 RCX: 00007f9883b8eec9 [ 1047.927662][T18735] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1047.927672][T18735] RBP: 00007f9883c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1047.927681][T18735] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1047.927690][T18735] R13: 00007f9883de6218 R14: 00007f9883de6180 R15: 00007ffd63ce7798 [ 1047.927705][T18735] [ 1047.927711][T18735] [ 1047.927715][T18735] Allocated by task 16316: [ 1047.927723][T18735] kasan_save_stack+0x33/0x60 [ 1047.927738][T18735] kasan_save_track+0x14/0x30 [ 1047.927752][T18735] __kasan_kmalloc+0xaa/0xb0 [ 1047.927767][T18735] ipv6_add_dev+0x6af/0x15f0 [ 1047.927782][T18735] addrconf_notify+0x53e/0x19e0 [ 1047.927802][T18735] notifier_call_chain+0xbc/0x410 [ 1047.927818][T18735] call_netdevice_notifiers_info+0xbe/0x140 [ 1047.927838][T18735] register_netdevice+0x182e/0x2270 [ 1047.927854][T18735] macvlan_common_newlink+0x10e7/0x1a20 [ 1047.927871][T18735] macvtap_newlink+0x17a/0x240 [ 1047.927888][T18735] rtnl_newlink+0xc42/0x2000 [ 1047.927903][T18735] rtnetlink_rcv_msg+0x95b/0xe90 [ 1047.927918][T18735] netlink_rcv_skb+0x155/0x420 [ 1047.927934][T18735] netlink_unicast+0x5aa/0x870 [ 1047.927949][T18735] netlink_sendmsg+0x8c8/0xdd0 [ 1047.927964][T18735] __sys_sendto+0x4a0/0x520 [ 1047.927976][T18735] __x64_sys_sendto+0xe0/0x1c0 [ 1047.927988][T18735] do_syscall_64+0xcd/0xfa0 [ 1047.928001][T18735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.928015][T18735] [ 1047.928018][T18735] The buggy address belongs to the object at ffff888058e08000 [ 1047.928018][T18735] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1047.928031][T18735] The buggy address is located 4032 bytes to the right of [ 1047.928031][T18735] allocated 4096-byte region [ffff888058e08000, ffff888058e09000) [ 1047.928046][T18735] [ 1047.928050][T18735] The buggy address belongs to the physical page: [ 1047.928068][T18735] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58e08 [ 1047.928082][T18735] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1047.928094][T18735] memcg:ffff888032b02601 [ 1047.928101][T18735] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1047.928115][T18735] page_type: f5(slab) [ 1047.928129][T18735] raw: 00fff00000000040 ffff88813ffb0500 dead000000000100 dead000000000122 [ 1047.928142][T18735] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888032b02601 [ 1047.928155][T18735] head: 00fff00000000040 ffff88813ffb0500 dead000000000100 dead000000000122 [ 1047.928168][T18735] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888032b02601 [ 1047.928180][T18735] head: 00fff00000000003 ffffea0001638201 00000000ffffffff 00000000ffffffff [ 1047.928193][T18735] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1047.928201][T18735] page dumped because: kasan: bad access detected [ 1047.928212][T18735] page_owner tracks the page as allocated [ 1047.928218][T18735] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16316, tgid 16316 (syz-executor), ts 929980383813, free_ts 926969896493 [ 1047.928243][T18735] post_alloc_hook+0x1c0/0x230 [ 1047.928264][T18735] get_page_from_freelist+0x10a3/0x3a30 [ 1047.928286][T18735] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1047.928300][T18735] alloc_pages_mpol+0x1fb/0x550 [ 1047.928316][T18735] new_slab+0x24a/0x360 [ 1047.928335][T18735] ___slab_alloc+0xdc4/0x1ae0 [ 1047.928353][T18735] __slab_alloc.constprop.0+0x63/0x110 [ 1047.928372][T18735] __kmalloc_cache_noprof+0x477/0x780 [ 1047.928391][T18735] ipv6_add_dev+0x6af/0x15f0 [ 1047.928405][T18735] addrconf_notify+0x53e/0x19e0 [ 1047.928430][T18735] notifier_call_chain+0xbc/0x410 [ 1047.928448][T18735] call_netdevice_notifiers_info+0xbe/0x140 [ 1047.928467][T18735] register_netdevice+0x182e/0x2270 [ 1047.928483][T18735] macvlan_common_newlink+0x10e7/0x1a20 [ 1047.928500][T18735] macvtap_newlink+0x17a/0x240 [ 1047.928517][T18735] rtnl_newlink+0xc42/0x2000 [ 1047.928532][T18735] page last free pid 5871 tgid 5871 stack trace: [ 1047.928540][T18735] __free_frozen_pages+0x7df/0x1160 [ 1047.928558][T18735] __put_partials+0x130/0x170 [ 1047.928577][T18735] qlist_free_all+0x4d/0x120 [ 1047.928591][T18735] kasan_quarantine_reduce+0x195/0x1e0 [ 1047.928605][T18735] __kasan_slab_alloc+0x69/0x90 [ 1047.928621][T18735] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1047.928632][T18735] getname_flags.part.0+0x4c/0x550 [ 1047.928650][T18735] getname_flags+0x93/0xf0 [ 1047.928661][T18735] do_sys_openat2+0xb8/0x1d0 [ 1047.928679][T18735] __x64_sys_openat+0x174/0x210 [ 1047.928696][T18735] do_syscall_64+0xcd/0xfa0 [ 1047.928709][T18735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.928722][T18735] [ 1047.928725][T18735] Memory state around the buggy address: [ 1047.928732][T18735] ffff888058e09e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1047.928742][T18735] ffff888058e09f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1047.928751][T18735] >ffff888058e09f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1047.928759][T18735] ^ [ 1047.928767][T18735] ffff888058e0a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.928809][T18735] ffff888058e0a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.928819][T18735] ================================================================== [ 1048.059959][T18735] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1048.059979][T18735] CPU: 0 UID: 0 PID: 18735 Comm: syz.6.2795 Tainted: G I syzkaller #0 PREEMPT(full) [ 1048.060001][T18735] Tainted: [I]=FIRMWARE_WORKAROUND [ 1048.060007][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1048.060016][T18735] Call Trace: [ 1048.060021][T18735] [ 1048.060028][T18735] dump_stack_lvl+0x3d/0x1f0 [ 1048.060048][T18735] vpanic+0x640/0x6f0 [ 1048.060069][T18735] panic+0xca/0xd0 [ 1048.060088][T18735] ? __pfx_panic+0x10/0x10 [ 1048.060107][T18735] ? fbcon_prepare_logo+0xa03/0xc70 [ 1048.060124][T18735] ? preempt_schedule_common+0x44/0xc0 [ 1048.060139][T18735] ? preempt_schedule_thunk+0x16/0x30 [ 1048.060158][T18735] check_panic_on_warn+0xab/0xb0 [ 1048.060179][T18735] end_report+0x107/0x170 [ 1048.060196][T18735] kasan_report+0xee/0x110 [ 1048.060214][T18735] ? fbcon_prepare_logo+0xa03/0xc70 [ 1048.060231][T18735] kasan_check_range+0x100/0x1b0 [ 1048.060252][T18735] __asan_memcpy+0x23/0x60 [ 1048.060265][T18735] fbcon_prepare_logo+0xa03/0xc70 [ 1048.060285][T18735] fbcon_init+0xd77/0x1900 [ 1048.060300][T18735] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1048.060318][T18735] visual_init+0x320/0x620 [ 1048.060336][T18735] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1048.060357][T18735] store_bind+0x61d/0x760 [ 1048.060380][T18735] ? sysfs_file_kobj+0xe4/0x290 [ 1048.060401][T18735] ? __pfx_store_bind+0x10/0x10 [ 1048.060419][T18735] dev_attr_store+0x58/0x80 [ 1048.060436][T18735] ? __pfx_dev_attr_store+0x10/0x10 [ 1048.060451][T18735] sysfs_kf_write+0xf2/0x150 [ 1048.060466][T18735] kernfs_fop_write_iter+0x3af/0x570 [ 1048.060486][T18735] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1048.060502][T18735] iter_file_splice_write+0xa21/0x12e0 [ 1048.060522][T18735] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1048.060538][T18735] ? __pfx_copy_splice_read+0x10/0x10 [ 1048.060564][T18735] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1048.060579][T18735] direct_splice_actor+0x18f/0x6c0 [ 1048.060594][T18735] splice_direct_to_actor+0x342/0xa30 [ 1048.060616][T18735] ? __pfx_direct_splice_actor+0x10/0x10 [ 1048.060631][T18735] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1048.060655][T18735] do_splice_direct+0x174/0x240 [ 1048.060677][T18735] ? __pfx_do_splice_direct+0x10/0x10 [ 1048.060698][T18735] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1048.060721][T18735] ? rw_verify_area+0xcf/0x6c0 [ 1048.060743][T18735] do_sendfile+0xb06/0xe50 [ 1048.060758][T18735] ? __pfx_do_sendfile+0x10/0x10 [ 1048.060771][T18735] ? __pfx___might_resched+0x10/0x10 [ 1048.060786][T18735] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1048.060804][T18735] __x64_sys_sendfile64+0x1d8/0x220 [ 1048.060821][T18735] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1048.060842][T18735] do_syscall_64+0xcd/0xfa0 [ 1048.060857][T18735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.060872][T18735] RIP: 0033:0x7f9883b8eec9 [ 1048.060884][T18735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.060898][T18735] RSP: 002b:00007f98849c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1048.060913][T18735] RAX: ffffffffffffffda RBX: 00007f9883de6180 RCX: 00007f9883b8eec9 [ 1048.060923][T18735] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1048.060932][T18735] RBP: 00007f9883c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1048.060941][T18735] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1048.060950][T18735] R13: 00007f9883de6218 R14: 00007f9883de6180 R15: 00007ffd63ce7798 [ 1048.060964][T18735] [ 1048.061013][T18735] Kernel Offset: disabled