last executing test programs: 5m40.561947871s ago: executing program 0 (id=758): r0 = mq_open$auto(&(0x7f0000000600)='/dev/snd/midiC2D0\x00', 0x7, 0xfffc, &(0x7f0000000640)={0x8000000000000000, 0x45e, 0x6e1}) pread64$auto(r0, &(0x7f0000000680)='\x00', 0x7, 0x37b) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) sysfs$auto(0x2, 0x100000000000027, 0x0) (async, rerun: 32) r3 = fsopen$auto(0x0, 0x1) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="627dd39061dd8006967a6f532786b59de74fb2a962ecfcab7157f88c753201f3c5e002e9ff701c941f8e2b1c1ff61e3274545a46788a266ee4da4d0deb54f04bcbd19ab4f4bc1a3126d8183a1816e5b150b23e961b207e8b313841993f2dc0ced2809b6f30c46e55ce359f09ea", @ANYRESDEC=r1, @ANYRES16, @ANYRES64=r2, @ANYRESHEX=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x101, 0x103) 5m39.470078444s ago: executing program 0 (id=763): socket(0x29, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x1600, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x7, 0x101, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00", @raw=0x2}, 0x6, 0x8, 0x6, @raw=0xd7, @enumerated={0x1, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x10000000009e, 0x9}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@inferred=r1, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0xc0485619, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x1e, 0x4, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r4 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x0) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/19, 0x13) 5m39.356068239s ago: executing program 0 (id=764): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x33c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4000) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 5m39.279061759s ago: executing program 0 (id=765): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_dma_buf_debug_fops_(r1, &(0x7f00000003c0)=""/100, 0x64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = dup$auto(r2) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x6, 0x3, 0x15f4da0a, 0xb4000000, 0x3, 0x62, 0x40008000001f, 0x7, 0x100000006d3e, 0x9, 0x2, 0x3]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) faccessat2$auto(r3, &(0x7f0000000040)='./file0\x00', 0x3, 0x2) write$auto(r5, 0x0, 0x4) 5m37.065288041s ago: executing program 0 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="34040000392d1956291d7ef006d89977633c7da4ffbfbcc0787fa0f80775c27695b0dc939366c28542349d23363942040b3fc3eabcac7ddb641b87d83d99bbf85bac859238ee94f1f46915c3d18c6f2a69766437c864f0b4a7ba9bf04b4c1cdb8887bdb476161bbf68c0151bc864f188e8baaef6e139a4ca6463e39c148a07399f0eefd14d9672dfe1bdd319d9e6dea7e08ddad0fb24a598bd155abfc481c21b64dd3d209b4be6c8aa9f64df3f1b719738ea7d36379ef238a69faf83bb4fd8951a", @ANYRES16=r1, @ANYBLOB="210b2abd7000fedbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r4 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) move_pages$auto(r4, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r3, 0x4004af07, &(0x7f00000001c0)=r5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r7, 0x8000) r8 = open_by_handle_at$auto(r3, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r8, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r7, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r10, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r6, @ANYRESOCT=r9], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r9, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 5m35.319847639s ago: executing program 0 (id=781): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0102, 0x0) (async) r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0102, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mq_getsetattr$auto(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa150, 0x3, 0x6ea1b6d0, 0x7}) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(r0, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) r2 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) mprotect$auto(0x200000000000, 0x806124, 0x8) (async) mprotect$auto(0x200000000000, 0x806124, 0x8) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffd, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) umount2$auto(&(0x7f0000000040)='\x00', 0x37) read$auto_long_retry_limit_ops_(r2, 0x0, 0x0) ioctl$auto(0x3, 0x402c542c, 0x38) (async) ioctl$auto(0x3, 0x402c542c, 0x38) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b4b, r3) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) 5m20.244634094s ago: executing program 32 (id=781): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0102, 0x0) (async) r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0102, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mq_getsetattr$auto(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa150, 0x3, 0x6ea1b6d0, 0x7}) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(r0, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) r2 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) mprotect$auto(0x200000000000, 0x806124, 0x8) (async) mprotect$auto(0x200000000000, 0x806124, 0x8) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffd, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) umount2$auto(&(0x7f0000000040)='\x00', 0x37) read$auto_long_retry_limit_ops_(r2, 0x0, 0x0) ioctl$auto(0x3, 0x402c542c, 0x38) (async) ioctl$auto(0x3, 0x402c542c, 0x38) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b4b, r3) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) 4m32.974893076s ago: executing program 4 (id=1027): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20a42, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x65b) epoll_create$auto(0x2) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0xb92f9b5724540a4, 0x0) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) io_cancel$auto(0x7, &(0x7f0000000080)={0x8, 0x7, 0x5, 0x48a8, 0x78, r0, 0x212f, 0x3ff, 0x2, 0x0, 0x3, r0}, &(0x7f0000000040)={0x8e, 0x6, 0x9, 0x7fffffffffffffff}) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3o\rJ\x1e\xe3\xb9\x96\x0f\x80\x91\xb8\xb95\x98F\xf8Q\x01\x00\x93^', 0xfffffffa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="1200", @ANYBLOB="5de1", @ANYRES64=r4, @ANYRES16=r3], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 4m31.863570033s ago: executing program 4 (id=1031): r0 = socket(0xa, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x3e4) socket(0x2, 0x5, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmctl$auto(0x8, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0x7, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) futex_requeue$auto(&(0x7f0000000100)={0xc, 0x2, 0x23}, 0x401, 0xffff, 0x9) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) 4m30.829487812s ago: executing program 4 (id=1035): socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0xe0440, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2, 0x4, 0xb1, r2, 0x7ff) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0x129102, 0x0) read$auto(r3, 0x0, 0x18) write$auto(r3, 0x0, 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto(0x3, 0x5420, 0x38) 4m28.344604284s ago: executing program 4 (id=1045): sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x40, 0x57) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x539000, 0x0) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) 4m27.703560228s ago: executing program 4 (id=1048): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x6002fff6) 4m27.460662387s ago: executing program 4 (id=1049): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xff69, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'}) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0) 4m12.392919368s ago: executing program 33 (id=1049): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xff69, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00'}) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x0) 7.157158339s ago: executing program 5 (id=2220): r0 = socket(0x10, 0x800, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) getsockopt$auto_SO_PASSCRED(r0, 0x7, 0x10, &(0x7f0000000340)='\x00', &(0x7f0000000380)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x1, 0x100) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x6, 0x0, 0x6, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f389da21c9b7335def9a1e06c7211bc1d5406f760fb6ec2c40e12cc75b4cc40a4", 0xfe, 0x8}, 0x2000005}, 0x8, 0x6) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x30040053) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) 4.765781673s ago: executing program 2 (id=2232): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r0, 0x0, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL32(0xffffffffffffffff, 0x8008550e, &(0x7f0000000000)={0x3503, 0x8}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 4.469808846s ago: executing program 2 (id=2234): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 4.104057694s ago: executing program 5 (id=2236): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000040)=@bpf_attr_11={0x8, 0x200, 0x6000000, 0x9b9, 0x80, 0x9, 0xfffffffc, 0xffffffffffffffff}, 0xbe) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) r1 = socket(0x2, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0xf, 0x0, 0x0) socketpair$auto(0x1ff, 0x0, 0x7fff, &(0x7f0000000100)) 3.81611473s ago: executing program 5 (id=2237): mmap$auto(0x5, 0x400004, 0xe, 0x14, 0x2, 0x8008000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r0, &(0x7f0000000300)='*o\xd3\xa49.\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r0, 0x8, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x5, 0x0, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x40c2}, 0x807fff, 0x0, 0x8008000000000000, 0x6}, 0x7}, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/dbroot\x00', 0xc2183, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x98000, 0x0) dup$auto(r3) socket(0x2, 0x4, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0xffffffffffffffff, 0x8, 0xffffefff) mmap$auto(0x6, 0x202000d, 0x2, 0x14, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) 3.566961666s ago: executing program 1 (id=2238): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) (async) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) (async) socket(0xf, 0x3, 0x2) (async) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r3) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) (async) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r4 = open(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c00, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0x176, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x4, 0x6]}, 0x0) (async) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x125200, 0x0) close_range$auto(r0, r5, 0x0) (async) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) 3.088149303s ago: executing program 2 (id=2240): close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6}, 0x6, 0x1000000) (async) r0 = bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) (async) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x5, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) (async) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r0) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x8fe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 2.84838895s ago: executing program 2 (id=2242): r0 = socket(0x15, 0x5, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x80108907, 0x38) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x2, 0x7f}, 0x287) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) read$auto(r0, &(0x7f0000000040)='/dev/ram7\x00', 0x400) setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x82) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) ioprio_set$auto(0x2, 0xd4b, 0x800) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)='1<', 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x60102, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="251729bd7000fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x80, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PEER={0x64, 0x28, 0x0, 0x1, [@nested={0x10, 0x15, 0x0, 0x1, [@typed={0x4, 0x12d}, @nested={0x4, 0x13b}, @nested={0x4, 0xb}]}, @typed={0x4, 0x64}, @nested={0x37, 0x1c, 0x0, 0x1, [@generic="ff27c3638b676eb7b6cacb9538348dd8f73650b38ea72a49fc701004bb7e1eaced0ee759051e30effccac45bb72c93", @nested={0x4, 0x10a}]}, @typed={0xe, 0x4e, 0x0, 0x0, @str='/dev/tty0\x00'}, @nested={0x4, 0x13c}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004054}, 0xc910) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = getpid() pidfd_open$auto(r5, 0x0) socket(0xa, 0x801, 0x84) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) 2.77949548s ago: executing program 5 (id=2243): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.609493003s ago: executing program 1 (id=2245): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/nlmon0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) socketpair$auto(0x1e, 0x7, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x5, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/README\x00', 0x280001, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, 0x0) msgsnd$auto(0x5, 0x0, 0x8000000000000006, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) sendfile$auto(r3, r3, 0x0, 0xd) madvise$auto(0x0, 0x200007, 0x19) 2.607918176s ago: executing program 3 (id=2246): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) keyctl$auto(0x4, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) 2.473629125s ago: executing program 1 (id=2247): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x7fffffff}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x844) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0x3, 0x0, 0xfff8, 0xfffffffe, 0x0}) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 2.454335387s ago: executing program 3 (id=2248): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth0_vlan/retrans_time_ms\x00', 0x68001, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/syz_tun/regen_max_retry\x00', 0x408101, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) landlock_add_rule$auto(r1, 0x3, &(0x7f0000000080)="748bef18ce5a7e316acbdfa2c74574cd0518013e5dae5db8ce38d136ed81e155b56e5f822f774abeec637c2dc6478364fbc06bd912da800c9f49619438829ff837a400c4511fecd1d44ddc409e8c0bed17727da904f44fbdee27e4b065bfe85c34d1fa", 0x70) socket(0x1d, 0x1, 0x7) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) acct$auto(&(0x7f0000001c40)='/dev/iommu\x00') setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) write$auto(r0, 0x0, 0x0) 2.152590266s ago: executing program 3 (id=2249): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000000)={@sival_int=0xe780, @inferred=r0}, &(0x7f0000000040)=0x3) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ubi/version\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/58, 0x3a) sysfs$auto(0x2, 0x1b, 0x0) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x240000, 0xd, 0x1, 0x948b, 0x7, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x300000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xfffffffffffffffe, 0x0, 0xe) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfb1ed3df1f7f3686}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r2, 0x208, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xfc}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x100}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1}, @NFC_ATTR_DEVICE_POWERED={0x5}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\xb6{{]'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40104}, 0x20008001) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000080)={0x1, 0x2, 0x7d4, 0x4, 0x6, 0x4bf, "d8eaeb367570495da2c6eec12cecbd6f", 0x2, 0x3, 0xbe, 0x91, 0x2, 0x4}) 1.791651404s ago: executing program 5 (id=2250): unshare$auto(0x40000080) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x5, 0x3, 0x101, 0x40eb5, 0x401, 0x7) r0 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)=0xfffffffc) inotify_add_watch$auto(r0, &(0x7f00000001c0)='./file0\x00', 0xfffffff9) mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24044805) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4, r1, 0x4, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = inotify_init1$auto(0x100) epoll_wait$auto(r2, 0x0, 0xe007, 0x4) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000000)={r0, 0x9}) io_uring_register$auto(r3, 0x6, &(0x7f0000000080)="1714d214f8466073e0477fc377639d0416b3d740183052eef0904e6b4f3aec113e2292aa305ed1e1e95d7429aeb8983dd26f92b2708e15bf33897be44aa6e950e34492807394174fb9a8f5f13989b2a9b18f6a000f1b049156115d264b4632840e83c447729acfef476e34412cf693579a346dc65a1ea5345d8290d12d794addbdef5621a06d3d25bfd9ee5b7d1e2b861d0618975ea152a5200cda15e90b852574b4807361", 0x731) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x110c230000, 0x0, 0x103, 0x3, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)='+\x00', 0xfdef, 0x1ff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7fff) ioctl$auto(0xffffffffffffffff, 0x2, 0xffffffffffffffff) madvise$auto(0x0, 0x400053, 0x9) 1.458487791s ago: executing program 2 (id=2251): socket(0x1b, 0x3, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0xe0440, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2, 0x4, 0xb1, r2, 0x7ff) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0x129102, 0x0) read$auto(r3, 0x0, 0x18) write$auto(r3, 0x0, 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto(0x3, 0x5420, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0xd551) 1.235004599s ago: executing program 1 (id=2252): r0 = ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=0x7) inotify_init1$auto(0x401) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x0, 0x20, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x5) shmctl$auto_SHM_STAT_ANY(0xfb, 0xf, &(0x7f0000000100)={{0x8, 0x0, 0xee01, 0x7f59, 0x30000, 0x3, 0x68c3}, 0x81, 0x2, 0x5, 0x8, @raw=0xf6f, @inferred, 0xba, 0x0, &(0x7f0000000480)="af203dbcc494b32518c71996ee595d6809b3d0aa34801230b2478d717e83c2040b0471f14cfb10a2ef3c5398923a49a9b21406317f625834c86907bd0f77562249e88cc88b066a77b29f6bf2395b497e08670f46b13117e4e84911a0bc7c1153f7e17501773cec4568b332c9233950a155a82ebd5f7717b30892952098db7f28749f7059a2ce19c73963bbaefc17c0e14c2ce6c2535a43bf314a65bd2271971cb0744a55ede9486afbf7f1bf41e3ec1369a2c2268ef5c639fb7fddf4edbd087f30fff6aeac0e216bea8727279fdf74250e23a9ddfa5402621ff67f5ca9a47c743746c04624c778558b31334b538e906469ea79d7485e5f0fbb870ee0b40b5739a58a16f917ae77e82fa4cd49024fd2e74af117406d00ede0543405c3a6f75355de35b460e413320e420fa411f5581e7106378a937075bc0f84a269f11e7f562f0d829a688f612c27c3d7e7f3d9f832bf976be36837654d6a0c706200fd6395d1a7b1fb7cbb5fa62ae50ee3efa1a3cee74de9755f24e89e66b76ca772203e6351db662ecab1fb22c06081f6758f56bf09ffaa36297c0dee69820ee59ed17977163cae5fba9acc70c172e0b63aa686505dd341f0ca330bbe3cdcbf8f572613a366a3085ef3d41172d20362d9a38bf7b0599cd32821eec26e3bc057e260a8002eed52f49464a8533c052482f0a4d10f0af52cbf0a7a202da871bdb5c694d283d6f91ffcfe5a79765ee0b42c1877caced5efc13b20cb42c977526e7ff6f2418e9f220a1579e00f93793cb7922a09d955b2389861e21069c20b2a52b27e48581ed49867b68a09de70dc56d8e1d0c181e098e4e47ad18eb3c6833329b1f28ed93599e2e0d428a8fdeb8b6631250651595acb9f85785b30fdcd9058717380617364a7d9ebbfdac25a348a8ea30a053aac69e71565e297ae2c0a2feb2a683e06ede67809f28c72c230e784a109ee011efa1af77f7d4bf410ecb1b0580a838073b7b8d9483e484267071f5126ef0f88b29077b5f90fd2c6bd6aecc57b659983717e0a2025f80c2dcbef088aa89f7b05de7769e17b1938b7e7beeb136d4f89401315682cba697715f8636898a368ae750778be973f9ce1238d4f40af5a6092210635d34d06eeb8e9cdda633561da95a796d2b6b3ad45b4f3733411f6993336efd4ad55c9e97f59a707d7e218975b86fdd2d6e9823d83e08ed3683e7f98dde6c284cdd91a3d6ffa74e93d2aaeb2d8f6faf4ddac1de4d3f71495a8eaccdf9a36e8ad48adb0aad43ad83f432fdbd367168476ba91d5ad1176524b3817440f300dfb23b90399f597004a270f5931f2c3115c18ff20a50f74d5f5aa277e5190116beeff828fec9f3079c8af7092db9667ed732216859f2631b4a7664fa58508929781a9f0f3c8905f3d9c78b98cac25fc5b0f13c73e141fcf2f36a9d8dd720cb78419d757ee7f1d2978f251b42fac854e06c4e79966c6fffb5a42480421a47562f7059c1b1b253a48fbd4f89fc212b3bd3935acfee62ce9d916d9d890499ff5b9bdf6509601a305a2da189bc770171a1c24dbc0e3b74af6a989d3c8347f53d54c221bd055ace2a139823b0749c71e33c4f65e8c52a3c8db7890c6b6b2b47d1c32cee93c837dcf27f94dd7242922278371c53fc202fbe5480bb74a42024f5a2e86e65edd948e2a3c649b7f30bb146d1cf000ce7d0451e87d70698ffded928c5ba4b59f364d980285e39d7df396b2e583b618bc48594e2f71188ca9c67d01eb4d09e74fe687bd5f8be50c76029bda33291397d12e13d8082e72f7ebc982e878d78e3b62fcf93f4706ac42f166905c7e7bfbb8a313f24f6efd691e89df036487b709ce797c9f73ae04473ec1496755489484eba99614d015350c0eb83fe4643e774c40abb4b71e0c25f507e2c8e01af13e70bf9b6eb9787dbc3e59c2d787dbde67a45d37f1280f71b46ebe823730cc23bc84c229938fecec7f835d108a47f8217ec5e5fc945fa0a9b693625da01ae81657b2d965bcf2362a15dbedc10c361fbb5aba6099ed17cbe565a2b3be22241ae6b5b583b835c616ccae1df26fe76e3aac4a03b2859c561e8f5778e453cc289c4565519eaa7de26a7cd67cf83226dd62927fb99fc505f50af803acf0cbedf558d453638e5d0a775c6b71023757ae19dfea64360fbb8a31accda02ebd1efb22b3db3be8ea53611d9e4fbcdca2ed18e5e2ed90e7eab826a3dfef9f7632cef971dffbefa47cf190013f9ae0b9efa511efed5eda2b06949a89dd607472a98671cb918a3ad35b5372f2cc3edc542cb0baa65327a8c38a96f35c3995a73531ab760633612d6e6844d157ee0f6d0eb0078659d54186b4895e45afb426347a5855af4d5aabdeb8fb92fa7a8c8983cd6d3aede9b9ddcf14a92afbbd963ccdeff489887c4e3ad87e96217da461c28eef757bf3a277f033d7d0540ee2a9b8063058fab8af8d6d7141623fd83f1efa08e83e9b0681a5b977343bdb2dfab1927623531d5c4805e60345f961c800db5304bbf632cd3c50875b39c26cf199a299d00c816812c387fcda64048cbfdc19293e0abdbb0c8daf0e7ff08720a1f9202333595a9583cbca65a4a9a3321174d250072b1ff84bfb5c2c05d6f462784e61cb80ec2ff241eb23167271fd34a772920bd36b5e73095a4368187635584db23ad2eb1e4593411725ce2261669d8943cb36ffc5be10aeda8eea6afbe8e4e34406f357abd0f96fdca16ac6715e1f7215c5e93343339739138bd1f71f63af4a1986b17f8aaf351a08dbf84d8eb017e3743b537a26b1cb10645bb5de35b6874a8d1616304d71adacc0c53474f50164e3facf283b6340e342b1d00c33563df69f78e9d58e6a46deb5ee97fc6c5199f7cd6324c76d63e45f537b0460a164dfe67994e640f5b8791957e823063cdef2f732086550b7c37c69d64d6fd2008deaa1e3de6c71a1225d8ae3a8d314601e9a04030b76f69f2c8c8073e65d4a1f436fa9281c6dd6fdf8f70ceea3d0b08f9333fedad5bad2cdb744de0c20d5874c812c88665340333a90895996bd367f5002ca9675eb02f7af8d0c5e782305b6b50d198c4068336aac3194b8818dd67d8fe7ed78e623dfe6ad4651e1e95d3b7b95cd06f8a94f76395cddcaa562ca9dc6a45373d6a116576305ab3b6adc6d2f83bbd825a4741c09e288abd227d143c58924467987df399c8324e155f80682024ce8fd534614982103a393b8f0319c5caec42ee938712b016ca2fba434c86fcb6611157b95b564a0f2b662ec6ddca1b5dcdf38865d8bda56742f6b336dbbcfd856de0d3300dadbc06b810fbd351864bbe01362cdc2e101d8745adfbe630b88624a489bf9c7feb49dec1af349e8c979cd618f18a537aa036f7191f42bc5493e2b2bea52ff25977d6e8adf4f2057a1931db0ec510eec64807d7e3df74c96e745ccb56fd8236b90960f355109238f2a4289a95f59402b0113b93a96cc2adfb3deb9db53834a65c748ee5fd3dd3992cd0c73aded9302ad6b3c5b49a5bb50d300a632b63ddaabc089dce842824a3e7c81023c52e52275aee73f5209a847bb80025f2e2f840c2b5dcce52df42ff5dbc4d4a8ecc9be461dc65cd9815547d72af203bd6d54ce28de3351f8dc81f75131bf3ca36819f5c12c5e09f0b71a18682dfdd13857931195c0d0eaa2f187c2a118e02d81034c4bdf7216fba904fbcfc2f300e6e970ef3750596c3acad666dfa0be7351a285ce9be293c72b237b0b50ff529d64ced96ec66fff1ecb904465290b0d82ad6c45680adc4a322dfccd254e5bb8f7a411651e3ed6f3f1cad0f11fa19b822f3eba5a2cd40adc2677068daf61dd899676888ca8edce0268486ee9b6338dd81983838e496f8782253a811abc1717bb45b3a393c02f1a1b6801ab6f95da2f15e690362583b9077021ac8bd397cf8ea9b6a087b8f25fffafb6161aaaff3b3cff3d0ed8dcbd1672851280abccda3a80d6c42110248296c43fc716d213de32117c8dbda18312a741fe7f49a95be12c32bc0d2c6b2724f11a65a07b13d23fc6ea8ffe4096c17cda8b1c9f098726166818991f6230ceec4a9f2687ae1dada78f88b2259c4298351d2189ca973b37796283d486e31d0997e31777482bcc16326d3d6d2f3f1aaab8a74ccc8af9220573d05d79c95186c223763ddd240dee684f350c90d15b60f178800b98d4f3a3454bfe5ffe8db8a105a3c8cdd2dbdb15f3a7a2aac6530f43e91cc19206ac6cb7df7baa5e532257aeaf789b6eac19a2a90cfa0b376f5dd8d0537f123d0680e87f29ad8d26c5fc2c5cec955bdc7200b8bbc024a1f21ed3f92a30174b9f2bb0c9cf5540cb651bb21bc7b4304161d74c5a6f0a9fb77413a3d095bd11159872aa03711bb89983e57d34f057c0ec5302875c32ebdd2c6baf3d0f69bd0d4667c84de0cd1c7a86826b925e6fc6468806e8e984377b550b43dc6ec74ef98c32686682603072f57eba7ab6e20a97665dfc54dbc273bd2ecb9342102a4b37fe5910768138e2e62e9a9b3a3e6797aebc4d671db72deaa9c714e93da64b55d30e02e854d8ce11ea3711290c76bacc4f29c9d977d29ec90a24ecbdd250303e6fa1865b95fdff572043a7f5482b21e9b2b08bc0b1d13cb01c0987b7e1018e9d17b955e5a1da166fcf5a56c32f146e3eee9255052ed151da9eca480f5604b68789c09f3803e907456a22022b89945b85d21de64e07731fb38588cea47e9e36aa1123b8c38612cd752b21b773b9c6476356ec2b310174567306f6e8ae6a75b35a7310c75d75ae132fcabb6bd52250c4c75b1d0cf61dde678bcd57b785bf796b3b2dddb80d1968945111b6d6e107fe7eebd18f5072307c54740ea506fb473757651c3ea85b7c9e841d55e96187a16f7c516f2918beb0f1940a22ad192a9a7bd5281389486a06273f530112dfae089fd619411dae296f03f67bb979c0c34ea8b952016d4a52a30f0ed5436da8c044b66e39d553b8fda4c0ca158a8e8114248745cca159fd584baaf44224ed660080338751c08df6320aaec87fbf0567e6958a7460b76f9deeda227596269d2a479d0ea5bc2a518e7114defffaed0ccdc97e99d745a293b0ecfb742bff2e2fe721c6d64de523ad9164dd28bcda6f365926d092979be3692a31b1eaf38020931cadab96d2a0efceed3a5e2d69d4536bae89a81b7af5dfa6bc38a7e7adbdcb98bcd238db411f6b6e3e905973d89ff0c82aea85d7943bfde628c31d33ee702ca829ec797c28af260992aae3d8d070fa825511c4b1d9395eb690e00c91bfb085a82f85bdf8ea9c6f9b8f30538b5ebba90c55bc1cd0eed0a5748614abd033687038333b7930b250b95e699f2e6582cb040e00ebd16e01a5372e632e7edca3b044242abb538b1ef388efc01a0f78959d0939d6a3a7cc895a60c3754b0bd8c0b3b7d02f735d4f56c38a804915c078ec80bb125afc97cd4d145db0ad236f1336203e940115f49f828af62d5462bd38244808b6e7c9235573649e7893333ff4988c35c5fa883a3fd0862d396f590302c5914b68a272b1621d5b608f07f0246572d4f65696381d04a14d13c5f5c4abc69b33459a3c3b716f8553422332c4a327e903c1a73be4b0cc3bea2828172a3773a6f466145793622cd79bc0ed670758f6079a2b66577762897934576bacaebe731c8c083c2eeefe2933177927a9a999e8dc6f7280ee5dba9abbbf5ff6e7b6910044420e77347b73d196cf8f61bae53db283d8b56695a15b4dbf71cf50ed141f13e6c55e5e4fc43728b4317cd059c7424ecb96afe9e7de437ee5cb780fece54e02547a2c7794", &(0x7f00000000c0)="17a05831d5d3ed24cf4e2fed6bd39eb306072268150700e43929c0ae"}) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) ioctl$auto(r3, 0x921064b1, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40000, 0x0) preadv$auto(0x40000000000003, &(0x7f00000000c0)={0x0, 0xfffffffd}, 0x6, 0xfffffffffffff, 0x5) shmctl$auto_SHM_UNLOCK(0x7, 0xc, &(0x7f0000000340)={{0x10, 0xee01, 0xffffffffffffffff, 0xfffffffc, 0x1ff, 0x1, 0x2}, 0x9, 0x2, 0x268a83c, 0x5, @inferred, @inferred, 0x5, 0x0, &(0x7f0000000180)="5c9eaa9091b70546237f8fc0f70479d20c1dfd48195f0797b074239936392ba035096dafb1a093d4c060017819c8103ec0d654d95a322ce1dd78e94edbc03886430481bcd6b0415ad5e98ab9b6c61abff1ee57dd04146d998929a4907d3b7b04b1248fce4855c9edfb8adc793e74dd7fab5364d3d3067534daf95342a0d5d5db7f95c6aacbd999bb307a138c08418cecd6712628604f94e7799008af7c6a84a68c8ca404", &(0x7f0000000240)="d6a1202915d7023f69cf8fceb9c4742625774637fe8a9a2fc8bb72b42afc5b5ee56539838ee8417d3fe96f44ae7c4d991fbd9863201b276814cfeea7647de1064acc3f303ee951fe9953a2d7aa872752bda93c8bd4ed128c1f3106be21d24c3be2b748e1f54214cb7a42d6fc142ef19238dc97b60b52797360a5d8816672bc9b7a4808ea730457e92aa331aae2f3f27c666da4f7a1abb8432da5036925388bdc0c10ad46567222e9b0a549aed02a595393784a0e28d72f6b61b0f0016a4b6f67750c047bd725b733f113ff759dcbb5257ba931998299ebbf2691552aa41ea662af6600"}) capget$auto(&(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)={0x3, 0xfff, 0x8}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001480)={0x738, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x100, 0x2, 0x0, 0x1, [@nested={0x65, 0x7f, 0x0, 0x1, [@generic="33d4d878167db2ae6cd4e863dfc6b6917b7fdd1ed4f372c4986566d2bf7a8f9fbb30ad827d0bca675ac59609f2501da3292a40165f19546d5a3980604f782de671baca59e703c163fa2574656578b888c4b9da09e0f8672a9560872f4869ba9213"]}, @typed={0x8, 0x10c, 0x0, 0x0, @uid=r2}, @nested={0x14, 0x84, 0x0, 0x1, [@typed={0xc, 0xd0, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x99}]}, @generic="99eb2e75af3f81571e48adee011bcf236060e1c31f14d1f54943e1c4b1f038d6c5ca632dbc0311bf55a900d48810ec5f0258391acd0c7647671f54535ac9152af3c68783c2022934cdc76aad28c535c2ca5b06daf00092dc7f58db14a353966c30e824c50f67ca40489f86b8b8031c7187cd389d6a74354f"]}, @IPVS_CMD_ATTR_SERVICE={0x2a5, 0x1, 0x0, 0x1, [@generic="7171eb3763adf89b81bcd9210b9ebd0e227e5a0a785a5234871d275f31f9a6dfc36c6e8de30dbc22c524cd0c01ad53a00a74a305a603ae324e8a3fff2498b6826ac4b260b20eaece685bb69a740153a79b533ded4ea40cb5ac3f51cb442d2d87ea6ee4d97bfbb2ba2df413a40e9517a24f84820b125d34860508f667e0b775", @nested={0x133, 0x116, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@local}, @generic="5b12702e05439ef4e3d913b454803f7135266f285d1ece804af6df588523f3219307c80585eb371e33a3084b47cd9559c3ac5dcbdabc3e2f2af6746447902d56719e4d2ba796c1b19c120d05342a921ed0d84e1a319f7683610080d750938bc3b97c5b2b0574497474811a417039fee1beb3f0779174d88642cac5dacf3641aa40296495c5a94ee4b281dae3cb68de88d40eef6dc26bcca89d7ce236f0393e4c76b59b9530107cf49262619e6af2ae8026b5b598fbc4793ce6dc25df449ef8bc7180b2b3d67f50bad28fa9f1cb267b8f3fe06440144d48cc349db22466eca9c56d6c50e4e239ff6e69ea56db19517e17e34d2fb9ca1ce8a3bb", @generic="81c2a4ffdb2c04b81196e5b7d127254d14f1d491a8adf7aa58c5f25e9d09764d1f79", @generic, @nested={0x4, 0xfe}, @nested={0x4, 0x150}, @nested={0x4, 0x111}]}, @nested={0xc, 0xbb, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @uid=r4}]}, @generic="93de698cbe221c24d8fa759270ce0f7094924aa66f01ca0e1f92ca993d70a87448bf7c0ff823e2ce15b32e4421e026b471959c4b738b370b8f334726731337a6889a64d53284b2e7c1e016b0608b1598ebb3008caabd5178a9e95852e448cb243848a4bd02b70ff39e6a5e266fb868c25e6591ca882ccdc9f1459ef990bd0e36a7a4fe20e606bfed4b11d5dca023d2ffb86d55a47808904a6c9e44dd1bd2372fcab43d93dcf19878c540dfb2450e89a63e3c377060153a98907ebea1540524194e0d3ef0c372d18a489e4b8e0d44f43f61e25f9ab6f7d9cf1fdba93e6ecd", @nested={0x4, 0x150}]}, @IPVS_CMD_ATTR_SERVICE={0x374, 0x1, 0x0, 0x1, [@nested={0x10, 0x40, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xdd}]}, @generic="9e89690a82005c0d8990adef7545f988770ad0256cdf7aac640822a508d9e17261331f05ad983ff0036c0286d1b23ef83b47e8053ac501f5146dfede71edcf621b1e46dd2ccde6f5ded32eb53e712c37848b0910c02a5763200d5a6c44e70b91068963596a95a82ec950be4ce4d14f4d518d133ddb28ac71d4b213cbc336b411d1ff09d30d3082c9c3da33541db810cd90fae0adebea27aa1d9ef0a71227f76589eff639a567149f14198e6409582230f31a3b316d022c49933c4e16f0", @generic="1f25bf0710f3", @generic="898604d0ff6018cbd1b69e33acdecadf8fa001508ce390db5de2f2d4355c71395360502bea9be208d7980d70d184054600c52584ca725ddc1e0ce8ab71cb13c04c21cec0ffcb2ce219329ba4059947ccaf2103191964a0ea2771d026e2c1fc2c9e1e1271e76dc0dceef24222d271396696ddd1964146d043e1b7eacf49e594c0aeab6f86e6358edf2b1769c0fae2992422f50fdbf3e2c1d3cffe9548ccb98aab46816da3eb6fa5f6dbbce80c5157884579b14a617dbd024dde37d08e54d295c927975c96e86ffdb68e01c1e201ceec28ea49ebbce016765e5a830c7ab5db6c49172fadb649cf9c63aad6fdf892b32575f0b9b13708119086", @typed={0x8, 0x137, 0x0, 0x0, @fd}, @generic="6c4caacf948e773e9d4f3b32ccd8cc3c5d8981e3a62669daf0cfcc2155c35e7efabcc860a4446a4c7d41a28e90e740f060af856f9312ce4e1dd4db458c10c07f2af693733f3be64e3775dc563dceb6a2fb42ca9689ad1e18b5722fb550ba763264b7331a3983fa9cb0e09f509aeff8ad104f9b193cf784b7efd1271150902bd53fa28ff90d6ffda3d31849369a691c076b29d1116a54d57b5acca4f56b74c3781e93cdec8a47855ed0d915e16a814b425af5480082fc9f76f8", @generic="72968f49e603c8050849664b8b1cfc6b2d8fc8f7acc057a0885de8179a01676b4337d219fc7aa3837394c2dad525c7044092a1c17c76333c9e838656631d99d66e6c6e29447da03c1b580231cf134d860fe122527d4780ffed4d9e44ce9730e91eb6007659fb7929f6ce1ecf64e0c505c6bdd7fe93134a2c6afd669b40987dd4fb931489849cfe9b5fc872d46e4293e256803c2e78b47c98443f9cff19092c7a8ae9ad80828ae3cbe61590aff4135521898616e76cb8178346231fdda48879adc06b73fef41114c19e0769e1940edd10bcc15b3e958cc35db90d3b2a86ed4be4da9f0364"]}]}, 0x738}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) settimeofday$auto(&(0x7f0000000440)={0x5a, 0x7}, 0x0) 1.028024781s ago: executing program 1 (id=2253): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x0, 0x0) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000000)='}\x00', &(0x7f0000000040)=0xfffffff5) socket(0x18, 0x5, 0x2) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @multicast1}, 0x6b) ioctl$auto(r0, 0xab03, 0xffffffffffffffff) 989.840848ms ago: executing program 3 (id=2254): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x191bc32377c4cf85, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x406, 0x4000b, 0x101, 0x9b72, r0, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port6/over_current_count\x00', 0x52b083, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi0\x00', 0x408dc1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x89, 0x0}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x382b43, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) mmap$auto(0xf820, 0x2020004, 0x1, 0xeb5, 0xfffffffffffffffa, 0xfffffffffffffff7) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x28102, 0x0) ioctl$auto(r3, 0x4b45, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyq7\x00', 0x10dcc0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/kvm_amd/uevent\x00', 0x101102, 0x0) 823.214329ms ago: executing program 1 (id=2255): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) socket(0x15, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) close_range$auto(0x2, 0x8, 0x0) 573.714144ms ago: executing program 3 (id=2256): mmap$auto(0x3, 0x4, 0x80000000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/syz_tun/regen_max_retry\x00', 0x408101, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) landlock_add_rule$auto(r0, 0x3, &(0x7f0000000080)="748bef18ce5a7e316acbdfa2c74574cd0518013e5dae5db8ce38d136ed81e155b56e5f822f774abeec637c2dc6478364fbc06bd912da800c9f49619438829ff837a400c4511fecd1d44ddc409e8c0bed17727da904f44fbdee27e4b065bfe85c34d1fa", 0x70) socket(0x1d, 0x1, 0x7) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) acct$auto(&(0x7f0000001c40)='/dev/iommu\x00') setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) write$auto(0xffffffffffffffff, 0x0, 0x0) 246.49829ms ago: executing program 3 (id=2257): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) lseek$auto(0x3, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) r1 = pidfd_open$auto(0xffffffffffffffff, 0xfffffff6) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0xffffffffffffff27}, 0x1, 0x0, 0x0, 0x44000}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={0x0, 0x30}}, 0x44044) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x7fffffff) newfstatat$auto(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x36dd98a9, 0x2a29, 0x4, 0x8, 0xffffffffffffffff, 0xee01, 0x0, 0x100000000, 0x4, 0x4, 0x9, 0x8, 0x1, 0x1ff, 0x42b6, 0x3, 0x8000}, 0x3) newfstatat$auto(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001400)={0x4, 0x2, 0x9340, 0x400, r3, 0x0, 0x0, 0x0, 0xf714, 0x9, 0xfffffffffffffffc, 0x9, 0xfe, 0x8000, 0xe1, 0x6, 0x5}, 0x7) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) 119.51536ms ago: executing program 5 (id=2258): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) lseek$auto(0x3, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) r1 = pidfd_open$auto(0xffffffffffffffff, 0xfffffff6) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0xffffffffffffff27}, 0x1, 0x0, 0x0, 0x44000}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={0x0, 0x30}}, 0x44044) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x7fffffff) newfstatat$auto(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x36dd98a9, 0x2a29, 0x4, 0x8, 0xffffffffffffffff, 0xee01, 0x0, 0x100000000, 0x4, 0x4, 0x9, 0x8, 0x1, 0x1ff, 0x42b6, 0x3, 0x8000}, 0x3) newfstatat$auto(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001400)={0x4, 0x2, 0x9340, 0x400, r3, 0x0, 0x0, 0x0, 0xf714, 0x9, 0xfffffffffffffffc, 0x9, 0xfe, 0x8000, 0xe1, 0x6, 0x5}, 0x7) lseek$auto(0x3, 0x0, 0x1) munmap$auto(0x8000, 0xffffffff) 0s ago: executing program 2 (id=2259): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f42) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              [ 456.809405][T13481] FAULT_INJECTION: forcing a failure. [ 456.809405][T13481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.853895][T13481] CPU: 0 UID: 0 PID: 13481 Comm: syz.5.1672 Not tainted syzkaller #0 PREEMPT(full) [ 456.853929][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.853943][T13481] Call Trace: [ 456.853952][T13481] [ 456.853961][T13481] dump_stack_lvl+0x16c/0x1f0 [ 456.853994][T13481] should_fail_ex+0x512/0x640 [ 456.854027][T13481] should_fail_alloc_page+0xe7/0x130 [ 456.854062][T13481] prepare_alloc_pages+0x3c2/0x610 [ 456.854098][T13481] ? rcu_is_watching+0x12/0xc0 [ 456.854127][T13481] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 456.854157][T13481] ? css_rstat_updated+0x1c2/0x510 [ 456.854184][T13481] ? __pfx_css_rstat_updated+0x10/0x10 [ 456.854232][T13481] ? __lock_acquire+0x62e/0x1ce0 [ 456.854272][T13481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.854316][T13481] ? __lock_acquire+0x62e/0x1ce0 [ 456.854354][T13481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.854392][T13481] ? policy_nodemask+0xea/0x4e0 [ 456.854428][T13481] alloc_pages_mpol+0x1fb/0x550 [ 456.854461][T13481] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 456.854498][T13481] ? __lock_acquire+0x62e/0x1ce0 [ 456.854532][T13481] folio_alloc_mpol_noprof+0x36/0x2f0 [ 456.854571][T13481] vma_alloc_folio_noprof+0xed/0x1e0 [ 456.854607][T13481] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 456.854660][T13481] do_pte_missing+0x2230/0x3ba0 [ 456.854688][T13481] ? find_held_lock+0x2b/0x80 [ 456.854723][T13481] __handle_mm_fault+0x152a/0x2a50 [ 456.854761][T13481] ? __pfx___handle_mm_fault+0x10/0x10 [ 456.854790][T13481] ? __pte_offset_map_lock+0x174/0x310 [ 456.854851][T13481] ? find_held_lock+0x2b/0x80 [ 456.854888][T13481] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 456.854932][T13481] handle_mm_fault+0x589/0xd10 [ 456.854966][T13481] __get_user_pages+0x551/0x34a0 [ 456.855016][T13481] ? __pfx___get_user_pages+0x10/0x10 [ 456.855063][T13481] populate_vma_page_range+0x267/0x3f0 [ 456.855090][T13481] ? __pfx_populate_vma_page_range+0x10/0x10 [ 456.855113][T13481] ? __pfx_find_vma_intersection+0x10/0x10 [ 456.855149][T13481] ? do_mmap+0x69c/0x1210 [ 456.855186][T13481] __mm_populate+0x1d8/0x380 [ 456.855212][T13481] ? __pfx___mm_populate+0x10/0x10 [ 456.855239][T13481] ? up_write+0x1b2/0x520 [ 456.855277][T13481] vm_mmap_pgoff+0x37f/0x470 [ 456.855317][T13481] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 456.855348][T13481] ? find_held_lock+0x2b/0x80 [ 456.855380][T13481] ? __x64_sys_futex+0x1e0/0x4c0 [ 456.855404][T13481] ? __x64_sys_futex+0x1e9/0x4c0 [ 456.855438][T13481] ksys_mmap_pgoff+0x7d/0x5c0 [ 456.855471][T13481] ? xfd_validate_state+0x61/0x180 [ 456.855511][T13481] __x64_sys_mmap+0x125/0x190 [ 456.855539][T13481] do_syscall_64+0xcd/0x4c0 [ 456.855570][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.855594][T13481] RIP: 0033:0x7f763598eec9 [ 456.855615][T13481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.855645][T13481] RSP: 002b:00007f76368e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 456.855669][T13481] RAX: ffffffffffffffda RBX: 00007f7635be6090 RCX: 00007f763598eec9 [ 456.855686][T13481] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 456.855700][T13481] RBP: 00007f7635a11f91 R08: 0000000000000002 R09: 0000000000008000 [ 456.855727][T13481] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 456.855746][T13481] R13: 00007f7635be6128 R14: 00007f7635be6090 R15: 00007fff6a9fb7d8 [ 456.855781][T13481] [ 457.512645][T13448] Bluetooth: hci1: command 0x0406 tx timeout [ 457.720535][T13501] block nbd7: not configured, cannot reconfigure [ 458.504079][T13522] can: request_module (can-proto-3) failed. [ 459.668952][T13546] FAULT_INJECTION: forcing a failure. [ 459.668952][T13546] name failslab, interval 1, probability 0, space 0, times 0 [ 459.728301][T13546] CPU: 1 UID: 0 PID: 13546 Comm: syz.2.1683 Not tainted syzkaller #0 PREEMPT(full) [ 459.728336][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.728351][T13546] Call Trace: [ 459.728359][T13546] [ 459.728369][T13546] dump_stack_lvl+0x16c/0x1f0 [ 459.728403][T13546] should_fail_ex+0x512/0x640 [ 459.728430][T13546] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 459.728464][T13546] should_failslab+0xc2/0x120 [ 459.728496][T13546] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 459.728526][T13546] ? __alloc_skb+0x2b2/0x380 [ 459.728557][T13546] __alloc_skb+0x2b2/0x380 [ 459.728582][T13546] ? __pfx___alloc_skb+0x10/0x10 [ 459.728610][T13546] ? __pfx___might_resched+0x10/0x10 [ 459.728635][T13546] ? __lock_acquire+0xb97/0x1ce0 [ 459.728673][T13546] netlink_alloc_large_skb+0x69/0x130 [ 459.728705][T13546] netlink_sendmsg+0x6a1/0xdd0 [ 459.728738][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.728771][T13546] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 459.728806][T13546] ____sys_sendmsg+0xa98/0xc70 [ 459.728840][T13546] ? copy_msghdr_from_user+0x10a/0x160 [ 459.728867][T13546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.728904][T13546] ? kfree+0x24f/0x4d0 [ 459.728925][T13546] ? __pfx__kstrtoull+0x10/0x10 [ 459.728966][T13546] ___sys_sendmsg+0x134/0x1d0 [ 459.728996][T13546] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.729055][T13546] ? __pfx___might_resched+0x10/0x10 [ 459.729085][T13546] __sys_sendmmsg+0x200/0x420 [ 459.729114][T13546] ? __pfx___sys_sendmmsg+0x10/0x10 [ 459.729152][T13546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.729197][T13546] ? fput+0x9b/0xd0 [ 459.729229][T13546] ? ksys_write+0x1ac/0x250 [ 459.729256][T13546] ? __pfx_ksys_write+0x10/0x10 [ 459.729289][T13546] __x64_sys_sendmmsg+0x9c/0x100 [ 459.729315][T13546] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.729339][T13546] do_syscall_64+0xcd/0x4c0 [ 459.729368][T13546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.729392][T13546] RIP: 0033:0x7f7f3b38eec9 [ 459.729412][T13546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.729436][T13546] RSP: 002b:00007f7f395f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 459.729460][T13546] RAX: ffffffffffffffda RBX: 00007f7f3b5e5fa0 RCX: 00007f7f3b38eec9 [ 459.729477][T13546] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 459.729492][T13546] RBP: 00007f7f395f6090 R08: 0000000000000000 R09: 0000000000000000 [ 459.729508][T13546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.729523][T13546] R13: 00007f7f3b5e6038 R14: 00007f7f3b5e5fa0 R15: 00007ffe02940578 [ 459.729557][T13546] [ 461.097063][T13579] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 461.630243][T13247] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 461.630281][T13247] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 461.647301][T13247] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 461.647335][T13247] Bluetooth: hci0: Malformed LE Event: 0x0d [ 462.809537][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1688'. [ 462.839239][T13608] bond_slave_1: entered allmulticast mode [ 464.338476][T13247] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 464.338514][T13247] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 464.353563][T13247] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 464.353627][T13247] Bluetooth: hci0: Malformed LE Event: 0x0d [ 464.726773][T13689] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1705'. [ 464.920609][T13697] FAULT_INJECTION: forcing a failure. [ 464.920609][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.973449][T13697] CPU: 1 UID: 0 PID: 13697 Comm: syz.3.1707 Not tainted syzkaller #0 PREEMPT(full) [ 464.973471][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.973481][T13697] Call Trace: [ 464.973486][T13697] [ 464.973492][T13697] dump_stack_lvl+0x16c/0x1f0 [ 464.973513][T13697] should_fail_ex+0x512/0x640 [ 464.973533][T13697] _copy_from_user+0x2e/0xd0 [ 464.973552][T13697] copy_msghdr_from_user+0x98/0x160 [ 464.973569][T13697] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 464.973588][T13697] ? kfree+0x24f/0x4d0 [ 464.973602][T13697] ? __lock_acquire+0x62e/0x1ce0 [ 464.973625][T13697] ___sys_recvmsg+0xdb/0x1a0 [ 464.973640][T13697] ? __pfx____sys_recvmsg+0x10/0x10 [ 464.973666][T13697] ? __pfx___might_resched+0x10/0x10 [ 464.973686][T13697] do_recvmmsg+0x2fe/0x750 [ 464.973704][T13697] ? __pfx_do_recvmmsg+0x10/0x10 [ 464.973723][T13697] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 464.973745][T13697] ? __fget_files+0x20e/0x3c0 [ 464.973766][T13697] __x64_sys_recvmmsg+0x22a/0x280 [ 464.973784][T13697] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 464.973807][T13697] do_syscall_64+0xcd/0x4c0 [ 464.973823][T13697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.973838][T13697] RIP: 0033:0x7f778098eec9 [ 464.973851][T13697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.973865][T13697] RSP: 002b:00007f778181f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 464.973879][T13697] RAX: ffffffffffffffda RBX: 00007f7780be5fa0 RCX: 00007f778098eec9 [ 464.973889][T13697] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 464.973897][T13697] RBP: 00007f778181f090 R08: 0000000000000000 R09: 0000000000000000 [ 464.973906][T13697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.973915][T13697] R13: 00007f7780be6038 R14: 00007f7780be5fa0 R15: 00007ffd91eade58 [ 464.973933][T13697] [ 465.168966][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.461703][T13700] random: crng reseeded on system resumption [ 465.583821][T13687] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1704'. [ 466.161351][T13720] FAULT_INJECTION: forcing a failure. [ 466.161351][T13720] name failslab, interval 1, probability 0, space 0, times 0 [ 466.174312][T13720] CPU: 1 UID: 0 PID: 13720 Comm: syz.2.1711 Not tainted syzkaller #0 PREEMPT(full) [ 466.174346][T13720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.174362][T13720] Call Trace: [ 466.174371][T13720] [ 466.174382][T13720] dump_stack_lvl+0x16c/0x1f0 [ 466.174416][T13720] should_fail_ex+0x512/0x640 [ 466.174446][T13720] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 466.174482][T13720] should_failslab+0xc2/0x120 [ 466.174513][T13720] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 466.174542][T13720] ? __d_alloc+0x32/0xae0 [ 466.174565][T13720] __d_alloc+0x32/0xae0 [ 466.174585][T13720] d_alloc_pseudo+0x1c/0xc0 [ 466.174605][T13720] alloc_file_pseudo+0xcf/0x230 [ 466.174627][T13720] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 466.174654][T13720] __shmem_file_setup+0x1a3/0x330 [ 466.174671][T13720] shmem_zero_setup+0x93/0x1a0 [ 466.174689][T13720] __mmap_region+0x2081/0x27b0 [ 466.174708][T13720] ? finish_task_switch.isra.0+0x21c/0xc10 [ 466.174724][T13720] ? __pfx___mmap_region+0x10/0x10 [ 466.174741][T13720] ? rcu_is_watching+0x12/0xc0 [ 466.174759][T13720] ? rcu_is_watching+0x12/0xc0 [ 466.174773][T13720] ? trace_sched_exit_tp+0xd1/0x120 [ 466.174794][T13720] ? __schedule+0x11a3/0x5de0 [ 466.174807][T13720] ? __lock_acquire+0x62e/0x1ce0 [ 466.174836][T13720] ? __pfx___schedule+0x10/0x10 [ 466.174880][T13720] ? trace_cap_capable+0x18d/0x200 [ 466.174905][T13720] mmap_region+0x1ab/0x3f0 [ 466.174922][T13720] ? __get_unmapped_area+0x267/0x440 [ 466.174945][T13720] do_mmap+0xa3e/0x1210 [ 466.174969][T13720] ? __pfx_do_mmap+0x10/0x10 [ 466.174989][T13720] ? __pfx_down_write_killable+0x10/0x10 [ 466.175010][T13720] vm_mmap_pgoff+0x29e/0x470 [ 466.175034][T13720] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 466.175058][T13720] ? __x64_sys_futex+0x1e0/0x4c0 [ 466.175075][T13720] ? __x64_sys_futex+0x1e9/0x4c0 [ 466.175095][T13720] ksys_mmap_pgoff+0x7d/0x5c0 [ 466.175115][T13720] ? xfd_validate_state+0x61/0x180 [ 466.175135][T13720] ? __pfx_ksys_write+0x10/0x10 [ 466.175154][T13720] __x64_sys_mmap+0x125/0x190 [ 466.175170][T13720] do_syscall_64+0xcd/0x4c0 [ 466.175187][T13720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.175202][T13720] RIP: 0033:0x7f7f3b38eec9 [ 466.175215][T13720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.175229][T13720] RSP: 002b:00007f7f395f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 466.175244][T13720] RAX: ffffffffffffffda RBX: 00007f7f3b5e5fa0 RCX: 00007f7f3b38eec9 [ 466.175253][T13720] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 466.175262][T13720] RBP: 00007f7f3b411f91 R08: 0000000000000401 R09: 0000000000008000 [ 466.175271][T13720] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 466.175280][T13720] R13: 00007f7f3b5e6038 R14: 00007f7f3b5e5fa0 R15: 00007ffe02940578 [ 466.175300][T13720] [ 466.177637][T13720] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1711'. [ 466.377805][T13722] nbd: illegal input index 65536 [ 466.537217][T13720] block nbd0: not configured, cannot reconfigure [ 466.546635][T13721] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1711'. [ 468.769930][T13770] busy [ 469.381458][T13767] bond0: option arp_interval: invalid value () [ 469.407997][T13767] bond0: option arp_interval: allowed values 0 - 2147483647 [ 469.743408][T13767] FAULT_INJECTION: forcing a failure. [ 469.743408][T13767] name failslab, interval 1, probability 0, space 0, times 0 [ 469.799451][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.3.1720 Not tainted syzkaller #0 PREEMPT(full) [ 469.799490][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.799507][T13767] Call Trace: [ 469.799516][T13767] [ 469.799527][T13767] dump_stack_lvl+0x16c/0x1f0 [ 469.799561][T13767] should_fail_ex+0x512/0x640 [ 469.799591][T13767] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 469.799627][T13767] should_failslab+0xc2/0x120 [ 469.799663][T13767] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 469.799695][T13767] ? dup_fd+0x4e/0xb90 [ 469.799727][T13767] dup_fd+0x4e/0xb90 [ 469.799768][T13767] ksys_unshare+0x831/0xa40 [ 469.799802][T13767] ? __pfx_ksys_unshare+0x10/0x10 [ 469.799836][T13767] ? xfd_validate_state+0x61/0x180 [ 469.799893][T13767] __x64_sys_unshare+0x31/0x40 [ 469.799926][T13767] do_syscall_64+0xcd/0x4c0 [ 469.799958][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.799984][T13767] RIP: 0033:0x7f778098eec9 [ 469.800005][T13767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.800030][T13767] RSP: 002b:00007f778181f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 469.800055][T13767] RAX: ffffffffffffffda RBX: 00007f7780be5fa0 RCX: 00007f778098eec9 [ 469.800074][T13767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 469.800090][T13767] RBP: 00007f7780a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 469.800107][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.800123][T13767] R13: 00007f7780be6038 R14: 00007f7780be5fa0 R15: 00007ffd91eade58 [ 469.800159][T13767] [ 470.007097][T13247] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 470.007137][T13247] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 470.022069][T13247] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 470.022127][T13247] Bluetooth: hci0: Malformed LE Event: 0x0d [ 470.119214][T13247] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 470.119253][T13247] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 470.134044][T13247] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 470.134104][T13247] Bluetooth: hci1: Malformed LE Event: 0x0d [ 470.388903][T13801] delete_channel: no stack [ 470.473956][T13807] delete_channel: no stack [ 471.364367][T13826] FAULT_INJECTION: forcing a failure. [ 471.364367][T13826] name failslab, interval 1, probability 0, space 0, times 0 [ 471.377158][T13826] CPU: 0 UID: 0 PID: 13826 Comm: syz.2.1734 Not tainted syzkaller #0 PREEMPT(full) [ 471.377178][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.377187][T13826] Call Trace: [ 471.377193][T13826] [ 471.377198][T13826] dump_stack_lvl+0x16c/0x1f0 [ 471.377220][T13826] should_fail_ex+0x512/0x640 [ 471.377236][T13826] ? fs_reclaim_acquire+0xae/0x150 [ 471.377259][T13826] ? tomoyo_encode2+0x100/0x3e0 [ 471.377280][T13826] should_failslab+0xc2/0x120 [ 471.377299][T13826] __kmalloc_noprof+0xd2/0x510 [ 471.377316][T13826] ? d_absolute_path+0x136/0x1a0 [ 471.377341][T13826] tomoyo_encode2+0x100/0x3e0 [ 471.377364][T13826] tomoyo_encode+0x29/0x50 [ 471.377384][T13826] tomoyo_realpath_from_path+0x18f/0x6e0 [ 471.377426][T13826] tomoyo_path_number_perm+0x245/0x580 [ 471.377444][T13826] ? tomoyo_path_number_perm+0x237/0x580 [ 471.377464][T13826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.377485][T13826] ? find_held_lock+0x2b/0x80 [ 471.377516][T13826] ? fd_install+0x244/0x750 [ 471.377531][T13826] ? hook_file_ioctl_common+0x145/0x410 [ 471.377561][T13826] security_file_ioctl+0x9b/0x240 [ 471.377582][T13826] __x64_sys_ioctl+0xb7/0x210 [ 471.377609][T13826] do_syscall_64+0xcd/0x4c0 [ 471.377627][T13826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.377642][T13826] RIP: 0033:0x7f7f3b38eec9 [ 471.377654][T13826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.377673][T13826] RSP: 002b:00007f7f395f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.377687][T13826] RAX: ffffffffffffffda RBX: 00007f7f3b5e5fa0 RCX: 00007f7f3b38eec9 [ 471.377697][T13826] RDX: 0000000000000000 RSI: 0000000000004b72 RDI: 0000000000000001 [ 471.377706][T13826] RBP: 00007f7f395f6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.377714][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.377723][T13826] R13: 00007f7f3b5e6038 R14: 00007f7f3b5e5fa0 R15: 00007ffe02940578 [ 471.377742][T13826] [ 471.377757][T13826] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.631574][T13858] sp0: Synchronizing with TNC [ 472.732777][T13866] binder: 13860:13866 ioctl 4020565a 38 returned -22 [ 473.056151][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 473.614632][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81634cf9 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 473.629979][ C0] Call Trace: [ 473.633270][ C0] [ 473.636120][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 473.641407][ C0] mce_cpu_restart+0x98/0xb0 [ 473.646001][ C0] __flush_smp_call_function_queue+0x27d/0x8c0 [ 473.652161][ C0] __sysvec_call_function_single+0x87/0x400 [ 473.658057][ C0] sysvec_call_function_single+0x9f/0xc0 [ 473.663684][ C0] [ 473.666603][ C0] [ 473.669529][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 473.675533][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 473.681976][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 7b 48 f6 48 89 df e8 ee ce 48 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 d0 38 f6 65 8b 05 5e 6e 2b 08 85 c0 74 16 5b [ 473.701591][ C0] RSP: 0018:ffffc9000b297b58 EFLAGS: 00000246 [ 473.707655][ C0] RAX: 0000000000000006 RBX: ffff88802fbf5e38 RCX: 0000000000000006 [ 473.715617][ C0] RDX: 0000000000000000 RSI: ffffffff8d9ac5f3 RDI: ffffffff8bcfa140 [ 473.723580][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 473.731542][ C0] R10: ffffffff905f3a97 R11: 0000000000000000 R12: 0000000000000293 [ 473.739522][ C0] R13: 0000000000001000 R14: 0000000000000000 R15: ffffc9000b297d10 [ 473.747500][ C0] snd_rawmidi_proceed+0x120/0x180 [ 473.752626][ C0] snd_vmidi_output_work+0x30c/0x390 [ 473.757918][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 473.763723][ C0] ? rcu_is_watching+0x12/0xc0 [ 473.768484][ C0] process_one_work+0x9cc/0x1b70 [ 473.773442][ C0] ? __pfx_process_one_work+0x10/0x10 [ 473.778824][ C0] ? assign_work+0x1a0/0x250 [ 473.783415][ C0] worker_thread+0x6c8/0xf10 [ 473.788018][ C0] ? __kthread_parkme+0x19e/0x250 [ 473.793042][ C0] ? __pfx_worker_thread+0x10/0x10 [ 473.798157][ C0] kthread+0x3c5/0x780 [ 473.802228][ C0] ? __pfx_kthread+0x10/0x10 [ 473.806820][ C0] ? rcu_is_watching+0x12/0xc0 [ 473.811576][ C0] ? __pfx_kthread+0x10/0x10 [ 473.816167][ C0] ret_from_fork+0x56d/0x730 [ 473.820760][ C0] ? __pfx_kthread+0x10/0x10 [ 473.825367][ C0] ret_from_fork_asm+0x1a/0x30 [ 473.830144][ C0] [ 473.833313][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.172044][T13888] zswap: compressor not available [ 474.999711][T13906] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1753'. [ 475.166046][T13913] Console: switching to colour VGA+ 80x25 [ 475.433163][T13921] FAULT_INJECTION: forcing a failure. [ 475.433163][T13921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.446486][T13921] CPU: 1 UID: 0 PID: 13921 Comm: syz.5.1756 Not tainted syzkaller #0 PREEMPT(full) [ 475.446518][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.446527][T13921] Call Trace: [ 475.446532][T13921] [ 475.446538][T13921] dump_stack_lvl+0x16c/0x1f0 [ 475.446559][T13921] should_fail_ex+0x512/0x640 [ 475.446578][T13921] _copy_from_iter+0x29f/0x1720 [ 475.446599][T13921] ? _copy_from_iter+0x15d/0x1720 [ 475.446615][T13921] ? __pfx__copy_from_iter+0x10/0x10 [ 475.446634][T13921] ? __pfx__copy_from_iter+0x10/0x10 [ 475.446651][T13921] ? arch_stack_walk+0xa6/0x100 [ 475.446671][T13921] copy_page_from_iter+0xde/0x180 [ 475.446690][T13921] skb_copy_datagram_from_iter+0x2a0/0x740 [ 475.446720][T13921] tun_get_user+0x1859/0x3cd0 [ 475.446750][T13921] ? __pfx_tun_get_user+0x10/0x10 [ 475.446771][T13921] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 475.446794][T13921] ? find_held_lock+0x2b/0x80 [ 475.446810][T13921] ? tun_get+0x191/0x370 [ 475.446832][T13921] tun_chr_write_iter+0xdc/0x210 [ 475.446853][T13921] vfs_write+0x7d3/0x11d0 [ 475.446872][T13921] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 475.446894][T13921] ? __pfx_vfs_write+0x10/0x10 [ 475.446909][T13921] ? find_held_lock+0x2b/0x80 [ 475.446935][T13921] __x64_sys_pwrite64+0x1eb/0x250 [ 475.446954][T13921] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 475.446977][T13921] do_syscall_64+0xcd/0x4c0 [ 475.446995][T13921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.447010][T13921] RIP: 0033:0x7f763598eec9 [ 475.447022][T13921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.447036][T13921] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 475.447051][T13921] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 475.447061][T13921] RDX: 0000000000007fff RSI: 00002000000002c0 RDI: 00000000000000c8 [ 475.447070][T13921] RBP: 00007f763690a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.447078][T13921] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 475.447087][T13921] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 475.447106][T13921] [ 476.087596][T13247] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 476.087635][T13247] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 476.112080][T13247] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 476.112140][T13247] Bluetooth: hci3: Malformed LE Event: 0x0d [ 476.537126][T13944] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1761'. [ 477.390837][T13936] Process accounting paused [ 477.892750][T13247] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 477.892789][T13247] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 477.908443][T13247] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 477.908476][T13247] Bluetooth: hci3: Malformed LE Event: 0x0d [ 478.117941][T13970] FAULT_INJECTION: forcing a failure. [ 478.117941][T13970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.150161][T13970] CPU: 1 UID: 0 PID: 13970 Comm: syz.3.1771 Not tainted syzkaller #0 PREEMPT(full) [ 478.150195][T13970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.150209][T13970] Call Trace: [ 478.150218][T13970] [ 478.150228][T13970] dump_stack_lvl+0x16c/0x1f0 [ 478.150261][T13970] should_fail_ex+0x512/0x640 [ 478.150300][T13970] should_fail_alloc_page+0xe7/0x130 [ 478.150335][T13970] prepare_alloc_pages+0x3c2/0x610 [ 478.150372][T13970] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 478.150412][T13970] ? is_bpf_text_address+0x8a/0x1a0 [ 478.150442][T13970] ? bpf_ksym_find+0x124/0x1c0 [ 478.150467][T13970] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 478.150497][T13970] ? is_bpf_text_address+0x94/0x1a0 [ 478.150527][T13970] ? kernel_text_address+0x8d/0x100 [ 478.150561][T13970] ? __lock_acquire+0x62e/0x1ce0 [ 478.150591][T13970] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 478.150619][T13970] ? unwind_get_return_address+0x59/0xa0 [ 478.150664][T13970] ? stack_trace_save+0x8e/0xc0 [ 478.150690][T13970] ? __pfx_stack_trace_save+0x10/0x10 [ 478.150717][T13970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 478.150757][T13970] ? policy_nodemask+0xea/0x4e0 [ 478.150791][T13970] alloc_pages_mpol+0x1fb/0x550 [ 478.150823][T13970] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 478.150862][T13970] alloc_pages_noprof+0x131/0x390 [ 478.150888][T13970] __pud_alloc+0x3b/0x750 [ 478.150921][T13970] __handle_mm_fault+0x13de/0x2a50 [ 478.150944][T13970] ? mt_find+0x3ef/0xa30 [ 478.150970][T13970] ? __pfx___handle_mm_fault+0x10/0x10 [ 478.151015][T13970] handle_mm_fault+0x589/0xd10 [ 478.151043][T13970] __get_user_pages+0x551/0x34a0 [ 478.151080][T13970] ? __pfx_validate_mm+0x10/0x10 [ 478.151104][T13970] ? __pfx___get_user_pages+0x10/0x10 [ 478.151144][T13970] get_user_pages_remote+0x243/0xab0 [ 478.151178][T13970] ? __pfx_get_user_pages_remote+0x10/0x10 [ 478.151206][T13970] ? __pfx_vma_link+0x10/0x10 [ 478.151238][T13970] get_arg_page+0xf4/0x310 [ 478.151259][T13970] ? __pfx_get_arg_page+0x10/0x10 [ 478.151279][T13970] ? up_write+0x1b2/0x520 [ 478.151318][T13970] copy_string_kernel+0x182/0x520 [ 478.151346][T13970] do_execveat_common.isra.0+0x2ed/0x610 [ 478.151374][T13970] __x64_sys_execve+0x8e/0xb0 [ 478.151396][T13970] do_syscall_64+0xcd/0x4c0 [ 478.151421][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.151441][T13970] RIP: 0033:0x7f778098eec9 [ 478.151457][T13970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.151477][T13970] RSP: 002b:00007f778181f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 478.151496][T13970] RAX: ffffffffffffffda RBX: 00007f7780be5fa0 RCX: 00007f778098eec9 [ 478.151509][T13970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 478.151522][T13970] RBP: 00007f778181f090 R08: 0000000000000000 R09: 0000000000000000 [ 478.151533][T13970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.151545][T13970] R13: 00007f7780be6038 R14: 00007f7780be5fa0 R15: 00007ffd91eade58 [ 478.151572][T13970] [ 480.474837][T14027] deleting an unspecified loop device is not supported. [ 483.406540][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 484.439988][T14102] bdi 250:0: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 484.469228][T14107] FAULT_INJECTION: forcing a failure. [ 484.469228][T14107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.500089][T14107] CPU: 1 UID: 0 PID: 14107 Comm: syz.3.1803 Not tainted syzkaller #0 PREEMPT(full) [ 484.500122][T14107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.500137][T14107] Call Trace: [ 484.500146][T14107] [ 484.500156][T14107] dump_stack_lvl+0x16c/0x1f0 [ 484.500190][T14107] should_fail_ex+0x512/0x640 [ 484.500223][T14107] _copy_to_user+0x32/0xd0 [ 484.500256][T14107] simple_read_from_buffer+0xcb/0x170 [ 484.500286][T14107] proc_fail_nth_read+0x197/0x240 [ 484.500317][T14107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.500350][T14107] ? rw_verify_area+0xcf/0x6c0 [ 484.500376][T14107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.500405][T14107] vfs_read+0x1e1/0xcf0 [ 484.500439][T14107] ? __pfx___mutex_lock+0x10/0x10 [ 484.500466][T14107] ? __pfx_vfs_read+0x10/0x10 [ 484.500504][T14107] ? __fget_files+0x20e/0x3c0 [ 484.500543][T14107] ksys_read+0x12a/0x250 [ 484.500571][T14107] ? __pfx_ksys_read+0x10/0x10 [ 484.500610][T14107] do_syscall_64+0xcd/0x4c0 [ 484.500640][T14107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.500666][T14107] RIP: 0033:0x7f778098d8dc [ 484.500687][T14107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 484.500712][T14107] RSP: 002b:00007f778181f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.500736][T14107] RAX: ffffffffffffffda RBX: 00007f7780be5fa0 RCX: 00007f778098d8dc [ 484.500754][T14107] RDX: 000000000000000f RSI: 00007f778181f0a0 RDI: 0000000000000004 [ 484.500770][T14107] RBP: 00007f778181f090 R08: 0000000000000000 R09: 0000000000000000 [ 484.500786][T14107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.500801][T14107] R13: 00007f7780be6038 R14: 00007f7780be5fa0 R15: 00007ffd91eade58 [ 484.500843][T14107] [ 484.889244][T14104] sp0: Synchronizing with TNC [ 486.735102][T14161] hub 1-0:1.0: USB hub found [ 486.740576][T14161] hub 1-0:1.0: 1 port detected [ 486.950294][T14151] zswap: compressor not available [ 488.249689][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 489.660025][T14213] FAULT_INJECTION: forcing a failure. [ 489.660025][T14213] name failslab, interval 1, probability 0, space 0, times 0 [ 489.672836][T14213] CPU: 1 UID: 0 PID: 14213 Comm: syz.3.1827 Not tainted syzkaller #0 PREEMPT(full) [ 489.672866][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.672877][T14213] Call Trace: [ 489.672883][T14213] [ 489.672889][T14213] dump_stack_lvl+0x16c/0x1f0 [ 489.672910][T14213] should_fail_ex+0x512/0x640 [ 489.672927][T14213] ? __kmalloc_noprof+0xbf/0x510 [ 489.672946][T14213] ? lsm_blob_alloc+0x68/0x90 [ 489.672960][T14213] should_failslab+0xc2/0x120 [ 489.672979][T14213] __kmalloc_noprof+0xd2/0x510 [ 489.673000][T14213] lsm_blob_alloc+0x68/0x90 [ 489.673014][T14213] security_sk_alloc+0x30/0x270 [ 489.673032][T14213] sk_prot_alloc+0xfb/0x2a0 [ 489.673052][T14213] sk_alloc+0x36/0xc20 [ 489.673067][T14213] __vsock_create.constprop.0+0x3c/0xbb0 [ 489.673081][T14213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.673104][T14213] vsock_create+0x139/0x500 [ 489.673121][T14213] __sock_create+0x335/0x8d0 [ 489.673145][T14213] __sys_socket+0x14d/0x260 [ 489.673167][T14213] ? __pfx___sys_socket+0x10/0x10 [ 489.673187][T14213] ? xfd_validate_state+0x61/0x180 [ 489.673208][T14213] ? __task_pid_nr_ns+0x1f5/0x500 [ 489.673232][T14213] __x64_sys_socket+0x72/0xb0 [ 489.673261][T14213] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.673276][T14213] do_syscall_64+0xcd/0x4c0 [ 489.673295][T14213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.673311][T14213] RIP: 0033:0x7f778098eec9 [ 489.673323][T14213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.673339][T14213] RSP: 002b:00007f77817fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 489.673355][T14213] RAX: ffffffffffffffda RBX: 00007f7780be6090 RCX: 00007f778098eec9 [ 489.673365][T14213] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 489.673374][T14213] RBP: 00007f7780a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 489.673383][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.673392][T14213] R13: 00007f7780be6128 R14: 00007f7780be6090 R15: 00007ffd91eade58 [ 489.673410][T14213] [ 489.699538][T14212] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1836'. [ 491.951430][T14254] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1838'. [ 491.960578][T14254] –õ\­: renamed from lo (while UP) [ 491.971451][T14253] random: crng reseeded on system resumption [ 492.177826][T14257] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1841'. [ 492.188256][T14257] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1841'. [ 492.203087][T14257] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1841'. [ 492.433821][T14261] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1843'. [ 492.471192][T14263] delete_channel: no stack [ 494.073893][T14291] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1848'. [ 494.153476][T14295] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1848'. [ 494.222508][T14291] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1848'. [ 494.300421][T14299] FAULT_INJECTION: forcing a failure. [ 494.300421][T14299] name failslab, interval 1, probability 0, space 0, times 0 [ 494.324265][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.1.1850 Not tainted syzkaller #0 PREEMPT(full) [ 494.324293][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.324303][T14299] Call Trace: [ 494.324309][T14299] [ 494.324314][T14299] dump_stack_lvl+0x16c/0x1f0 [ 494.324336][T14299] should_fail_ex+0x512/0x640 [ 494.324353][T14299] ? fs_reclaim_acquire+0xae/0x150 [ 494.324377][T14299] ? tomoyo_encode2+0x100/0x3e0 [ 494.324397][T14299] should_failslab+0xc2/0x120 [ 494.324416][T14299] __kmalloc_noprof+0xd2/0x510 [ 494.324434][T14299] ? d_absolute_path+0x136/0x1a0 [ 494.324458][T14299] tomoyo_encode2+0x100/0x3e0 [ 494.324482][T14299] tomoyo_encode+0x29/0x50 [ 494.324502][T14299] tomoyo_realpath_from_path+0x18f/0x6e0 [ 494.324529][T14299] tomoyo_path_number_perm+0x245/0x580 [ 494.324548][T14299] ? tomoyo_path_number_perm+0x237/0x580 [ 494.324568][T14299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.324588][T14299] ? find_held_lock+0x2b/0x80 [ 494.324621][T14299] ? find_held_lock+0x2b/0x80 [ 494.324634][T14299] ? hook_file_ioctl_common+0x145/0x410 [ 494.324659][T14299] ? __fget_files+0x20e/0x3c0 [ 494.324678][T14299] security_file_ioctl+0x9b/0x240 [ 494.324699][T14299] __x64_sys_ioctl+0xb7/0x210 [ 494.324723][T14299] do_syscall_64+0xcd/0x4c0 [ 494.324741][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.324756][T14299] RIP: 0033:0x7fe36618eec9 [ 494.324768][T14299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.324783][T14299] RSP: 002b:00007fe3643f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.324798][T14299] RAX: ffffffffffffffda RBX: 00007fe3663e6090 RCX: 00007fe36618eec9 [ 494.324808][T14299] RDX: 00002000000001c0 RSI: fffffffffffffd0d RDI: 0000000000000004 [ 494.324817][T14299] RBP: 00007fe3643f6090 R08: 0000000000000000 R09: 0000000000000000 [ 494.324826][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.324834][T14299] R13: 00007fe3663e6128 R14: 00007fe3663e6090 R15: 00007fff2a9bd9f8 [ 494.324853][T14299] [ 494.325179][T14299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.554606][T14359] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 497.742753][T14361] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 498.017207][T13247] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 498.017244][T13247] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 498.036537][T13247] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 498.036599][T13247] Bluetooth: hci3: Malformed LE Event: 0x0d [ 499.128255][T14382] FAULT_INJECTION: forcing a failure. [ 499.128255][T14382] name failslab, interval 1, probability 0, space 0, times 0 [ 499.142727][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.5.1865 Not tainted syzkaller #0 PREEMPT(full) [ 499.142760][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.142774][T14382] Call Trace: [ 499.142782][T14382] [ 499.142792][T14382] dump_stack_lvl+0x16c/0x1f0 [ 499.142823][T14382] should_fail_ex+0x512/0x640 [ 499.142850][T14382] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 499.142891][T14382] should_failslab+0xc2/0x120 [ 499.142922][T14382] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 499.142952][T14382] ? ptlock_alloc+0x1f/0x70 [ 499.142984][T14382] ptlock_alloc+0x1f/0x70 [ 499.143008][T14382] pte_alloc_one+0x82/0x3a0 [ 499.143036][T14382] do_pte_missing+0x1afc/0x3ba0 [ 499.143065][T14382] ? do_raw_spin_unlock+0x172/0x230 [ 499.143103][T14382] ? __pmd_alloc+0x3fb/0x930 [ 499.143140][T14382] __handle_mm_fault+0x152a/0x2a50 [ 499.143177][T14382] ? __pfx___handle_mm_fault+0x10/0x10 [ 499.143234][T14382] handle_mm_fault+0x589/0xd10 [ 499.143268][T14382] __get_user_pages+0x551/0x34a0 [ 499.143318][T14382] ? __pfx___get_user_pages+0x10/0x10 [ 499.143363][T14382] populate_vma_page_range+0x267/0x3f0 [ 499.143388][T14382] ? __pfx_populate_vma_page_range+0x10/0x10 [ 499.143411][T14382] ? __pfx_find_vma_intersection+0x10/0x10 [ 499.143446][T14382] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 499.143480][T14382] __mm_populate+0x1d8/0x380 [ 499.143505][T14382] ? __pfx___mm_populate+0x10/0x10 [ 499.143530][T14382] ? up_write+0x1b2/0x520 [ 499.143568][T14382] do_mlock+0x448/0x810 [ 499.143597][T14382] ? __fget_files+0x20e/0x3c0 [ 499.143624][T14382] ? __pfx_do_mlock+0x10/0x10 [ 499.143649][T14382] ? fput+0x9b/0xd0 [ 499.143682][T14382] ? ksys_write+0x1ac/0x250 [ 499.143709][T14382] ? __pfx_ksys_write+0x10/0x10 [ 499.143745][T14382] __x64_sys_mlock+0x59/0x80 [ 499.143774][T14382] do_syscall_64+0xcd/0x4c0 [ 499.143803][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.143828][T14382] RIP: 0033:0x7f763598eec9 [ 499.143849][T14382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.143879][T14382] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 499.143903][T14382] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 499.143920][T14382] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 499.143935][T14382] RBP: 00007f763690a090 R08: 0000000000000000 R09: 0000000000000000 [ 499.143951][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.143965][T14382] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 499.144001][T14382] [ 499.677933][T14389] FAULT_INJECTION: forcing a failure. [ 499.677933][T14389] name failslab, interval 1, probability 0, space 0, times 0 [ 499.698088][T14389] CPU: 1 UID: 0 PID: 14389 Comm: syz.2.1868 Not tainted syzkaller #0 PREEMPT(full) [ 499.698121][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.698135][T14389] Call Trace: [ 499.698144][T14389] [ 499.698153][T14389] dump_stack_lvl+0x16c/0x1f0 [ 499.698185][T14389] should_fail_ex+0x512/0x640 [ 499.698219][T14389] should_failslab+0xc2/0x120 [ 499.698251][T14389] __kmalloc_cache_noprof+0x6a/0x3e0 [ 499.698278][T14389] ? __sctp_v6_cmp_addr+0x206/0x530 [ 499.698302][T14389] ? sctp_add_bind_addr+0xae/0x3f0 [ 499.698339][T14389] sctp_add_bind_addr+0xae/0x3f0 [ 499.698377][T14389] sctp_copy_local_addr_list+0x349/0x550 [ 499.698409][T14389] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 499.698436][T14389] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 499.698464][T14389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 499.698503][T14389] sctp_bind_addr_copy+0xe0/0x530 [ 499.698547][T14389] sctp_connect_new_asoc+0x1c9/0x770 [ 499.698579][T14389] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 499.698615][T14389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 499.698652][T14389] sctp_sendmsg+0x1560/0x1e10 [ 499.698692][T14389] ? __pfx_sctp_sendmsg+0x10/0x10 [ 499.698717][T14389] ? __pfx___might_resched+0x10/0x10 [ 499.698749][T14389] ? aa_sk_perm+0x2f4/0xb10 [ 499.698784][T14389] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.698811][T14389] ? __might_fault+0xe3/0x190 [ 499.698847][T14389] ? __pfx_sctp_sendmsg+0x10/0x10 [ 499.698889][T14389] inet_sendmsg+0x11c/0x140 [ 499.698922][T14389] __sys_sendto+0x43c/0x520 [ 499.698947][T14389] ? __pfx___sys_sendto+0x10/0x10 [ 499.699000][T14389] ? ksys_write+0x1ac/0x250 [ 499.699029][T14389] ? __pfx_ksys_write+0x10/0x10 [ 499.699064][T14389] __x64_sys_sendto+0xe0/0x1c0 [ 499.699085][T14389] ? do_syscall_64+0x91/0x4c0 [ 499.699109][T14389] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.699133][T14389] do_syscall_64+0xcd/0x4c0 [ 499.699161][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.699187][T14389] RIP: 0033:0x7f7f3b38eec9 [ 499.699207][T14389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.699230][T14389] RSP: 002b:00007f7f395f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.699252][T14389] RAX: ffffffffffffffda RBX: 00007f7f3b5e5fa0 RCX: 00007f7f3b38eec9 [ 499.699269][T14389] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000004 [ 499.699283][T14389] RBP: 00007f7f395f6090 R08: 0000200000000000 R09: 000000000000001c [ 499.699300][T14389] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 499.699315][T14389] R13: 00007f7f3b5e6038 R14: 00007f7f3b5e5fa0 R15: 00007ffe02940578 [ 499.699351][T14389] [ 500.035505][T14395] : Can't lookup blockdev [ 500.218779][T14402] FAULT_INJECTION: forcing a failure. [ 500.218779][T14402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.232006][T14402] CPU: 1 UID: 0 PID: 14402 Comm: syz.1.1873 Not tainted syzkaller #0 PREEMPT(full) [ 500.232037][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.232051][T14402] Call Trace: [ 500.232060][T14402] [ 500.232069][T14402] dump_stack_lvl+0x16c/0x1f0 [ 500.232102][T14402] should_fail_ex+0x512/0x640 [ 500.232134][T14402] _copy_from_user+0x2e/0xd0 [ 500.232164][T14402] copy_clone_args_from_user+0x150/0x7e0 [ 500.232196][T14402] ? get_pid_task+0xfc/0x250 [ 500.232229][T14402] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 500.232278][T14402] __do_sys_clone3+0xbd/0x290 [ 500.232308][T14402] ? __pfx___do_sys_clone3+0x10/0x10 [ 500.232355][T14402] ? __fget_files+0x20e/0x3c0 [ 500.232409][T14402] do_syscall_64+0xcd/0x4c0 [ 500.232438][T14402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.232463][T14402] RIP: 0033:0x7fe36618eec9 [ 500.232483][T14402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.232506][T14402] RSP: 002b:00007fe366f47f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 500.232530][T14402] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe36618eec9 [ 500.232547][T14402] RDX: 00007fe366f47f20 RSI: 0000000000000058 RDI: 00007fe366f47f20 [ 500.232562][T14402] RBP: 00007fe366f48090 R08: 0000000000000000 R09: 0000000000000058 [ 500.232584][T14402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.232599][T14402] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 500.232633][T14402] [ 500.745754][T14415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 500.750038][T14413] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1876'. [ 501.058362][T14416] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 501.221568][T14421] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1878'. [ 501.431753][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.438133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.786359][T14446] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1882'. [ 501.829549][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 502.203500][T14457] openvswitch: netlink: IP tunnel dst address not specified [ 503.562069][T14497] ubi0: attaching mtd0 [ 503.565591][T14496] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1892'. [ 503.655209][T14497] ubi0: scanning is finished [ 503.660124][T14497] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 503.954076][T14497] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 505.481362][T14538] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 506.274400][T14540] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 506.816090][T14551] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1903'. [ 506.947839][T14556] FAULT_INJECTION: forcing a failure. [ 506.947839][T14556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.012332][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.5.1905 Not tainted syzkaller #0 PREEMPT(full) [ 507.012374][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.012388][T14556] Call Trace: [ 507.012397][T14556] [ 507.012406][T14556] dump_stack_lvl+0x16c/0x1f0 [ 507.012440][T14556] should_fail_ex+0x512/0x640 [ 507.012473][T14556] should_fail_alloc_page+0xe7/0x130 [ 507.012508][T14556] prepare_alloc_pages+0x3c2/0x610 [ 507.012543][T14556] ? rcu_is_watching+0x12/0xc0 [ 507.012574][T14556] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 507.012606][T14556] ? __lock_acquire+0xb97/0x1ce0 [ 507.012649][T14556] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.012679][T14556] ? do_raw_spin_lock+0x12c/0x2b0 [ 507.012715][T14556] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.012750][T14556] ? find_held_lock+0x2b/0x80 [ 507.012785][T14556] ? __lock_acquire+0xb97/0x1ce0 [ 507.012816][T14556] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.012854][T14556] ? policy_nodemask+0xea/0x4e0 [ 507.012889][T14556] alloc_pages_mpol+0x1fb/0x550 [ 507.012923][T14556] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 507.012966][T14556] folio_alloc_mpol_noprof+0x36/0x2f0 [ 507.013004][T14556] shmem_alloc_folio+0x135/0x160 [ 507.013033][T14556] shmem_alloc_and_add_folio+0x499/0xc20 [ 507.013071][T14556] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 507.013109][T14556] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 507.013145][T14556] shmem_get_folio_gfp+0x67f/0x1600 [ 507.013183][T14556] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 507.013214][T14556] ? __pfx___might_resched+0x10/0x10 [ 507.013247][T14556] shmem_fallocate+0x795/0xf50 [ 507.013292][T14556] ? __pfx_shmem_fallocate+0x10/0x10 [ 507.013334][T14556] ? __lock_acquire+0xb97/0x1ce0 [ 507.013375][T14556] ? __lock_acquire+0x62e/0x1ce0 [ 507.013426][T14556] ? __pfx_shmem_fallocate+0x10/0x10 [ 507.013454][T14556] vfs_fallocate+0x5b1/0x10e0 [ 507.013487][T14556] ? __pfx_vfs_fallocate+0x10/0x10 [ 507.013526][T14556] __x64_sys_fallocate+0xd5/0x150 [ 507.013559][T14556] do_syscall_64+0xcd/0x4c0 [ 507.013588][T14556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.013610][T14556] RIP: 0033:0x7f763598eec9 [ 507.013630][T14556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.013653][T14556] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 507.013675][T14556] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 507.013691][T14556] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 507.013706][T14556] RBP: 00007f763690a090 R08: 0000000000000000 R09: 0000000000000000 [ 507.013721][T14556] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000002 [ 507.013736][T14556] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 507.013771][T14556] [ 507.481405][T14563] Process accounting resumed [ 507.768070][T14577] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 507.783926][T14575] overlayfs: missing 'lowerdir' [ 508.515714][T14579] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 508.938655][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 509.079377][T14599] FAULT_INJECTION: forcing a failure. [ 509.079377][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 509.132769][T14599] CPU: 0 UID: 0 PID: 14599 Comm: syz.1.1918 Not tainted syzkaller #0 PREEMPT(full) [ 509.132803][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.132817][T14599] Call Trace: [ 509.132826][T14599] [ 509.132835][T14599] dump_stack_lvl+0x16c/0x1f0 [ 509.132867][T14599] should_fail_ex+0x512/0x640 [ 509.132893][T14599] ? __kmalloc_noprof+0xbf/0x510 [ 509.132924][T14599] ? lsm_blob_alloc+0x68/0x90 [ 509.132946][T14599] should_failslab+0xc2/0x120 [ 509.132978][T14599] __kmalloc_noprof+0xd2/0x510 [ 509.133010][T14599] lsm_blob_alloc+0x68/0x90 [ 509.133033][T14599] security_sb_alloc+0x28/0x230 [ 509.133069][T14599] alloc_super+0x23d/0xbd0 [ 509.133094][T14599] ? sget_fc+0xd3/0xc20 [ 509.133126][T14599] sget_fc+0x116/0xc20 [ 509.133151][T14599] ? apparmor_capable+0x114/0x1d0 [ 509.133179][T14599] ? __pfx_set_anon_super_fc+0x10/0x10 [ 509.133207][T14599] ? __pfx_binderfs_fill_super+0x10/0x10 [ 509.133231][T14599] get_tree_nodev+0x28/0x190 [ 509.133260][T14599] vfs_get_tree+0x8b/0x340 [ 509.133281][T14599] vfs_cmd_create+0xd7/0x2a0 [ 509.133311][T14599] __do_sys_fsconfig+0x7b8/0xbe0 [ 509.133347][T14599] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 509.133396][T14599] do_syscall_64+0xcd/0x4c0 [ 509.133426][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.133450][T14599] RIP: 0033:0x7fe36618eec9 [ 509.133471][T14599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.133494][T14599] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 509.133518][T14599] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 509.133534][T14599] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 509.133549][T14599] RBP: 00007fe366f48090 R08: 0000000000000000 R09: 0000000000000000 [ 509.133565][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.133579][T14599] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 509.133615][T14599] [ 509.505971][T14597] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1916'. [ 510.659483][ T30] audit: type=1326 audit(4294967359.730:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.5.1929" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f763598eec9 code=0x0 [ 511.456929][T14644] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1931'. [ 511.894755][ T5912] Process accounting resumed [ 513.922272][T14717] __vm_enough_memory: pid: 14717, comm: syz.5.1945, bytes: 4398046511104 not enough memory for the allocation [ 513.939425][T14717] nfsd: Unknown parameter '¨dÿMš%>̈P:óë7©ö£Âö‹æå' [ 516.391342][T14790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 519.297756][T14853] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1967'. [ 519.556084][T14861] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 520.451580][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1972'. [ 520.707876][T14873] FAULT_INJECTION: forcing a failure. [ 520.707876][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 520.722873][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.5.1973 Not tainted syzkaller #0 PREEMPT(full) [ 520.722908][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.722925][T14873] Call Trace: [ 520.722935][T14873] [ 520.722946][T14873] dump_stack_lvl+0x16c/0x1f0 [ 520.722980][T14873] should_fail_ex+0x512/0x640 [ 520.723013][T14873] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 520.723045][T14873] should_failslab+0xc2/0x120 [ 520.723080][T14873] __kmalloc_cache_noprof+0x6a/0x3e0 [ 520.723107][T14873] ? bpf_lsm_capable+0x9/0x10 [ 520.723131][T14873] ? __do_sys_timerfd_create+0xea/0x3e0 [ 520.723170][T14873] __do_sys_timerfd_create+0xea/0x3e0 [ 520.723204][T14873] ? do_syscall_64+0x91/0x4c0 [ 520.723233][T14873] do_syscall_64+0xcd/0x4c0 [ 520.723272][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.723299][T14873] RIP: 0033:0x7f763598eec9 [ 520.723319][T14873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.723344][T14873] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 520.723369][T14873] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 520.723387][T14873] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000008 [ 520.723403][T14873] RBP: 00007f7635a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.723416][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.723432][T14873] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 520.723467][T14873] [ 522.768938][T14896] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1976'. [ 523.209123][ T30] audit: type=1326 audit(4294967372.290:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14920 comm="syz.3.1981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778098eec9 code=0x0 [ 525.574387][T14964] FAULT_INJECTION: forcing a failure. [ 525.574387][T14964] name failslab, interval 1, probability 0, space 0, times 0 [ 525.619910][T14964] CPU: 1 UID: 0 PID: 14964 Comm: syz.1.1991 Not tainted syzkaller #0 PREEMPT(full) [ 525.619948][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.619963][T14964] Call Trace: [ 525.619971][T14964] [ 525.619982][T14964] dump_stack_lvl+0x16c/0x1f0 [ 525.620017][T14964] should_fail_ex+0x512/0x640 [ 525.620047][T14964] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 525.620083][T14964] should_failslab+0xc2/0x120 [ 525.620115][T14964] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 525.620146][T14964] ? security_file_alloc+0x34/0x2b0 [ 525.620197][T14964] security_file_alloc+0x34/0x2b0 [ 525.620234][T14964] init_file+0x93/0x4c0 [ 525.620270][T14964] alloc_empty_file+0x73/0x1e0 [ 525.620305][T14964] path_openat+0xda/0x2cb0 [ 525.620331][T14964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.620369][T14964] ? __pfx_path_openat+0x10/0x10 [ 525.620412][T14964] do_filp_open+0x20b/0x470 [ 525.620443][T14964] ? __pfx_do_filp_open+0x10/0x10 [ 525.620501][T14964] ? alloc_fd+0x471/0x7d0 [ 525.620540][T14964] do_sys_openat2+0x11b/0x1d0 [ 525.620577][T14964] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.620629][T14964] __x64_sys_openat+0x174/0x210 [ 525.620654][T14964] ? __pfx___x64_sys_openat+0x10/0x10 [ 525.620694][T14964] do_syscall_64+0xcd/0x4c0 [ 525.620725][T14964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.620750][T14964] RIP: 0033:0x7fe36618eec9 [ 525.620773][T14964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.620799][T14964] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 525.620826][T14964] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 525.620845][T14964] RDX: 0000000000040802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 525.620863][T14964] RBP: 00007fe366211f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.620880][T14964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.620897][T14964] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 525.620928][T14964] [ 527.554924][T14994] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1996'. [ 531.385126][T15056] FAULT_INJECTION: forcing a failure. [ 531.385126][T15056] name failslab, interval 1, probability 0, space 0, times 0 [ 531.425135][T15056] CPU: 1 UID: 0 PID: 15056 Comm: syz.1.2012 Not tainted syzkaller #0 PREEMPT(full) [ 531.425169][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.425182][T15056] Call Trace: [ 531.425191][T15056] [ 531.425201][T15056] dump_stack_lvl+0x16c/0x1f0 [ 531.425233][T15056] should_fail_ex+0x512/0x640 [ 531.425265][T15056] should_failslab+0xc2/0x120 [ 531.425297][T15056] __kmalloc_cache_noprof+0x6a/0x3e0 [ 531.425324][T15056] ? __sctp_v6_cmp_addr+0x206/0x530 [ 531.425349][T15056] ? sctp_add_bind_addr+0xae/0x3f0 [ 531.425388][T15056] sctp_add_bind_addr+0xae/0x3f0 [ 531.425428][T15056] sctp_copy_local_addr_list+0x349/0x550 [ 531.425459][T15056] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 531.425489][T15056] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 531.425519][T15056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.425567][T15056] sctp_bind_addr_copy+0xe0/0x530 [ 531.425611][T15056] sctp_connect_new_asoc+0x1c9/0x770 [ 531.425645][T15056] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 531.425683][T15056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.425721][T15056] sctp_sendmsg+0x1560/0x1e10 [ 531.425763][T15056] ? __pfx_sctp_sendmsg+0x10/0x10 [ 531.425790][T15056] ? __pfx___might_resched+0x10/0x10 [ 531.425824][T15056] ? aa_sk_perm+0x2f4/0xb10 [ 531.425860][T15056] ? __pfx_aa_sk_perm+0x10/0x10 [ 531.425888][T15056] ? __might_fault+0xe3/0x190 [ 531.425925][T15056] ? __pfx_sctp_sendmsg+0x10/0x10 [ 531.425956][T15056] inet_sendmsg+0x11c/0x140 [ 531.425990][T15056] __sys_sendto+0x43c/0x520 [ 531.426016][T15056] ? __pfx___sys_sendto+0x10/0x10 [ 531.426070][T15056] ? ksys_write+0x1ac/0x250 [ 531.426097][T15056] ? __pfx_ksys_write+0x10/0x10 [ 531.426129][T15056] __x64_sys_sendto+0xe0/0x1c0 [ 531.426152][T15056] ? do_syscall_64+0x91/0x4c0 [ 531.426178][T15056] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.426202][T15056] do_syscall_64+0xcd/0x4c0 [ 531.426231][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.426256][T15056] RIP: 0033:0x7fe36618eec9 [ 531.426276][T15056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.426300][T15056] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 531.426323][T15056] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 531.426340][T15056] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 531.426355][T15056] RBP: 00007fe366f48090 R08: 0000200000000000 R09: 000000000000001c [ 531.426371][T15056] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 531.426386][T15056] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 531.426419][T15056] [ 532.070995][T15059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.077141][T15059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.104287][T15059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.126806][T15059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.133196][T15059] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 532.216332][T15059] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 532.430216][T15073] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2016'. [ 532.474300][T15066] FAULT_INJECTION: forcing a failure. [ 532.474300][T15066] name failslab, interval 1, probability 0, space 0, times 0 [ 532.515382][T15066] CPU: 1 UID: 0 PID: 15066 Comm: syz.1.2015 Not tainted syzkaller #0 PREEMPT(full) [ 532.515420][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.515435][T15066] Call Trace: [ 532.515445][T15066] [ 532.515456][T15066] dump_stack_lvl+0x16c/0x1f0 [ 532.515492][T15066] should_fail_ex+0x512/0x640 [ 532.515522][T15066] ? __kmalloc_noprof+0xbf/0x510 [ 532.515556][T15066] ? mpi_resize+0x188/0x230 [ 532.515587][T15066] should_failslab+0xc2/0x120 [ 532.515624][T15066] __kmalloc_noprof+0xd2/0x510 [ 532.515664][T15066] mpi_resize+0x188/0x230 [ 532.515693][T15066] mpi_sub_ui+0x173/0x8d0 [ 532.515728][T15066] ? __kasan_kmalloc+0xaa/0xb0 [ 532.515762][T15066] rsa_check_payload+0x58/0xc0 [ 532.515794][T15066] rsa_enc+0x198/0x3b0 [ 532.515825][T15066] ? __pfx_rsa_enc+0x10/0x10 [ 532.515854][T15066] ? __virt_addr_valid+0x81/0x610 [ 532.515886][T15066] ? __phys_addr+0xe8/0x180 [ 532.515918][T15066] ? sg_init_one+0xf5/0x1b0 [ 532.515946][T15066] rsassa_pkcs1_verify+0x4ff/0xb60 [ 532.515992][T15066] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 532.516047][T15066] ? rsa_max_size+0xd/0x70 [ 532.516073][T15066] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 532.516112][T15066] public_key_verify_signature+0x672/0x970 [ 532.516151][T15066] ? __pfx_public_key_verify_signature+0x10/0x10 [ 532.516211][T15066] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 532.516247][T15066] verify_signature+0xdf/0x130 [ 532.516278][T15066] pkcs7_validate_trust+0x220/0x7e0 [ 532.516322][T15066] verify_pkcs7_message_sig+0x12c/0x250 [ 532.516360][T15066] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 532.516400][T15066] ? kfree+0x2b4/0x4d0 [ 532.516422][T15066] ? public_key_signature_free+0xda/0x110 [ 532.516465][T15066] ? pkcs7_parse_message+0x536/0x720 [ 532.516506][T15066] verify_pkcs7_signature+0x6d/0xa0 [ 532.516549][T15066] valid_regdb+0x211/0x590 [ 532.516585][T15066] ? __pfx___mutex_lock+0x10/0x10 [ 532.516615][T15066] ? __pfx_valid_regdb+0x10/0x10 [ 532.516654][T15066] reg_reload_regdb+0x11a/0x460 [ 532.516687][T15066] ? __pfx_reg_reload_regdb+0x10/0x10 [ 532.516719][T15066] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 532.516756][T15066] ? nl80211_pre_doit+0x1b0/0xb10 [ 532.516796][T15066] genl_family_rcv_msg_doit+0x209/0x2f0 [ 532.516833][T15066] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.516863][T15066] ? rcu_is_watching+0x12/0xc0 [ 532.516903][T15066] ? bpf_lsm_capable+0x9/0x10 [ 532.516926][T15066] ? security_capable+0x7e/0x260 [ 532.516963][T15066] genl_rcv_msg+0x55c/0x800 [ 532.516999][T15066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.517032][T15066] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 532.517067][T15066] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 532.517094][T15066] ? __pfx_nl80211_post_doit+0x10/0x10 [ 532.517138][T15066] netlink_rcv_skb+0x158/0x420 [ 532.517167][T15066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.517201][T15066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.517246][T15066] ? netlink_deliver_tap+0x1ae/0xd30 [ 532.517279][T15066] genl_rcv+0x28/0x40 [ 532.517307][T15066] netlink_unicast+0x5a7/0x870 [ 532.517341][T15066] ? __pfx_netlink_unicast+0x10/0x10 [ 532.517370][T15066] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 532.517398][T15066] ? __lock_acquire+0xb97/0x1ce0 [ 532.517440][T15066] netlink_sendmsg+0x8d1/0xdd0 [ 532.517476][T15066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.517506][T15066] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 532.517541][T15066] ____sys_sendmsg+0xa98/0xc70 [ 532.517587][T15066] ? copy_msghdr_from_user+0x10a/0x160 [ 532.517616][T15066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.517669][T15066] ___sys_sendmsg+0x134/0x1d0 [ 532.517701][T15066] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.517776][T15066] __sys_sendmsg+0x16d/0x220 [ 532.517806][T15066] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.517833][T15066] ? __x64_sys_futex+0x1e0/0x4c0 [ 532.517887][T15066] do_syscall_64+0xcd/0x4c0 [ 532.517918][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.517945][T15066] RIP: 0033:0x7fe36618eec9 [ 532.517968][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.517994][T15066] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.518020][T15066] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 532.518039][T15066] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000d [ 532.518055][T15066] RBP: 00007fe366211f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.518072][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.518088][T15066] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 532.518126][T15066] [ 533.058404][T15080] FAULT_INJECTION: forcing a failure. [ 533.058404][T15080] name failslab, interval 1, probability 0, space 0, times 0 [ 533.071598][T15080] CPU: 1 UID: 0 PID: 15080 Comm: syz.1.2018 Not tainted syzkaller #0 PREEMPT(full) [ 533.071619][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.071628][T15080] Call Trace: [ 533.071634][T15080] [ 533.071640][T15080] dump_stack_lvl+0x16c/0x1f0 [ 533.071661][T15080] should_fail_ex+0x512/0x640 [ 533.071678][T15080] ? fs_reclaim_acquire+0xae/0x150 [ 533.071701][T15080] should_failslab+0xc2/0x120 [ 533.071722][T15080] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 533.071742][T15080] ? ima_alloc_tfm+0x21a/0x2e0 [ 533.071757][T15080] ? ima_collect_measurement+0x4b5/0xa40 [ 533.071779][T15080] krealloc_noprof+0x1ff/0x3a0 [ 533.071798][T15080] ima_collect_measurement+0x4b5/0xa40 [ 533.071823][T15080] ? __pfx_ima_collect_measurement+0x10/0x10 [ 533.071854][T15080] ? __mutex_lock+0x1c5/0x1060 [ 533.071870][T15080] ? is_bad_inode+0xd/0x40 [ 533.071883][T15080] ? xattr_resolve_name+0x27b/0x3f0 [ 533.071903][T15080] ? vfs_getxattr_alloc+0xec/0x340 [ 533.071923][T15080] ? ima_get_hash_algo+0x27c/0x400 [ 533.071938][T15080] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 533.071957][T15080] ? process_measurement+0x11fa/0x23e0 [ 533.071972][T15080] process_measurement+0x11fa/0x23e0 [ 533.071995][T15080] ? __pfx_process_measurement+0x10/0x10 [ 533.072012][T15080] ? kasan_save_stack+0x33/0x60 [ 533.072028][T15080] ? __kasan_slab_alloc+0x89/0x90 [ 533.072045][T15080] ? security_file_alloc+0x34/0x2b0 [ 533.072065][T15080] ? init_file+0x93/0x4c0 [ 533.072090][T15080] ? find_held_lock+0x2b/0x80 [ 533.072128][T15080] ima_file_mmap+0x1b1/0x1d0 [ 533.072144][T15080] ? __pfx_ima_file_mmap+0x10/0x10 [ 533.072165][T15080] security_mmap_file+0x88c/0x990 [ 533.072187][T15080] vm_mmap_pgoff+0xec/0x470 [ 533.072210][T15080] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 533.072228][T15080] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 533.072251][T15080] ? hugetlbfs_get_inode+0x31f/0x730 [ 533.072274][T15080] ksys_mmap_pgoff+0x1c8/0x5c0 [ 533.072299][T15080] __x64_sys_mmap+0x125/0x190 [ 533.072315][T15080] do_syscall_64+0xcd/0x4c0 [ 533.072333][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.072348][T15080] RIP: 0033:0x7fe36618eec9 [ 533.072361][T15080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.072375][T15080] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 533.072389][T15080] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 533.072398][T15080] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 533.072407][T15080] RBP: 00007fe366f48090 R08: 0000000000000401 R09: 0000300000000000 [ 533.072416][T15080] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000002 [ 533.072424][T15080] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 533.072443][T15080] [ 533.391707][ T30] audit: type=1800 audit(4294967305.510:21): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2018" name="anon_hugepage" dev="hugetlbfs" ino=44058 res=0 errno=0 [ 533.442834][T15083] ICMPv6: process `syz.1.2019' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 533.550672][T15077] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2017'. [ 534.149333][T13448] Bluetooth: hci1: command 0x0406 tx timeout [ 534.156678][T13247] Bluetooth: hci2: command 0x0c1a tx timeout [ 534.162870][T13247] Bluetooth: hci3: command 0x0c1a tx timeout [ 534.168901][T13448] Bluetooth: hci0: command 0x0c1a tx timeout [ 535.928150][T15133] FAULT_INJECTION: forcing a failure. [ 535.928150][T15133] name failslab, interval 1, probability 0, space 0, times 0 [ 535.941277][T15133] CPU: 0 UID: 0 PID: 15133 Comm: syz.2.2030 Not tainted syzkaller #0 PREEMPT(full) [ 535.941311][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.941328][T15133] Call Trace: [ 535.941337][T15133] [ 535.941348][T15133] dump_stack_lvl+0x16c/0x1f0 [ 535.941382][T15133] should_fail_ex+0x512/0x640 [ 535.941411][T15133] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 535.941450][T15133] should_failslab+0xc2/0x120 [ 535.941484][T15133] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 535.941526][T15133] ? __kernfs_new_node+0xd2/0x8e0 [ 535.941567][T15133] __kernfs_new_node+0xd2/0x8e0 [ 535.941605][T15133] ? kernfs_add_one+0x37d/0x840 [ 535.941641][T15133] ? __pfx___kernfs_new_node+0x10/0x10 [ 535.941686][T15133] ? find_held_lock+0x2b/0x80 [ 535.941714][T15133] ? kernfs_root+0xee/0x2a0 [ 535.941755][T15133] kernfs_new_node+0x13c/0x1e0 [ 535.941800][T15133] __kernfs_create_file+0x53/0x350 [ 535.941834][T15133] sysfs_add_file_mode_ns+0x207/0x3c0 [ 535.941877][T15133] sysfs_create_file_ns+0x13d/0x1d0 [ 535.941910][T15133] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 535.941941][T15133] ? down_read+0x13d/0x480 [ 535.941971][T15133] ? __pfx___up_read+0x10/0x10 [ 535.942008][T15133] ? acpi_device_notify+0x351/0x480 [ 535.942041][T15133] device_create_file+0xf2/0x1e0 [ 535.942081][T15133] device_add+0x2bf/0x1aa0 [ 535.942115][T15133] ? __pfx_dev_set_name+0x10/0x10 [ 535.942151][T15133] ? __pfx_device_add+0x10/0x10 [ 535.942184][T15133] ? lockdep_init_map_type+0x5c/0x280 [ 535.942220][T15133] ? __init_waitqueue_head+0xca/0x150 [ 535.942265][T15133] netdev_register_kobject+0x1a9/0x3d0 [ 535.942304][T15133] register_netdevice+0x13dc/0x2270 [ 535.942344][T15133] ? __pfx_register_netdevice+0x10/0x10 [ 535.942387][T15133] internal_dev_create+0x2d3/0x520 [ 535.942422][T15133] ovs_vport_add+0x147/0x4d0 [ 535.942455][T15133] new_vport+0x16/0x1d0 [ 535.942490][T15133] ovs_dp_cmd_new+0x6ba/0xe60 [ 535.942518][T15133] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 535.942538][T15133] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 535.942560][T15133] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 535.942584][T15133] genl_family_rcv_msg_doit+0x209/0x2f0 [ 535.942605][T15133] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 535.942631][T15133] ? bpf_lsm_capable+0x9/0x10 [ 535.942644][T15133] ? security_capable+0x7e/0x260 [ 535.942661][T15133] ? ns_capable+0xd7/0x110 [ 535.942678][T15133] genl_rcv_msg+0x55c/0x800 [ 535.942698][T15133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.942717][T15133] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 535.942738][T15133] netlink_rcv_skb+0x158/0x420 [ 535.942754][T15133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.942774][T15133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.942798][T15133] ? netlink_deliver_tap+0x1ae/0xd30 [ 535.942816][T15133] genl_rcv+0x28/0x40 [ 535.942832][T15133] netlink_unicast+0x5a7/0x870 [ 535.942851][T15133] ? __pfx_netlink_unicast+0x10/0x10 [ 535.942867][T15133] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 535.942882][T15133] ? __lock_acquire+0xb97/0x1ce0 [ 535.942905][T15133] netlink_sendmsg+0x8d1/0xdd0 [ 535.942925][T15133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.942943][T15133] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 535.942964][T15133] ____sys_sendmsg+0xa98/0xc70 [ 535.942985][T15133] ? copy_msghdr_from_user+0x10a/0x160 [ 535.943000][T15133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.943024][T15133] ? __pfx_futex_wake_mark+0x10/0x10 [ 535.943048][T15133] ___sys_sendmsg+0x134/0x1d0 [ 535.943065][T15133] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.943106][T15133] __sys_sendmsg+0x16d/0x220 [ 535.943122][T15133] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.943137][T15133] ? __x64_sys_futex+0x1e0/0x4c0 [ 535.943167][T15133] do_syscall_64+0xcd/0x4c0 [ 535.943184][T15133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.943199][T15133] RIP: 0033:0x7f7f3b38eec9 [ 535.943212][T15133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.943226][T15133] RSP: 002b:00007f7f395b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.943241][T15133] RAX: ffffffffffffffda RBX: 00007f7f3b5e6180 RCX: 00007f7f3b38eec9 [ 535.943253][T15133] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 000000000000000c [ 535.943262][T15133] RBP: 00007f7f3b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.943271][T15133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.943279][T15133] R13: 00007f7f3b5e6218 R14: 00007f7f3b5e6180 R15: 00007ffe02940578 [ 535.943299][T15133] [ 536.863967][T15097] Bluetooth: hci1: command 0x0406 tx timeout [ 538.253483][T15158] FAULT_INJECTION: forcing a failure. [ 538.253483][T15158] name failslab, interval 1, probability 0, space 0, times 0 [ 538.279235][T15158] CPU: 0 UID: 0 PID: 15158 Comm: syz.2.2037 Not tainted syzkaller #0 PREEMPT(full) [ 538.279269][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.279282][T15158] Call Trace: [ 538.279291][T15158] [ 538.279301][T15158] dump_stack_lvl+0x16c/0x1f0 [ 538.279334][T15158] should_fail_ex+0x512/0x640 [ 538.279361][T15158] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 538.279396][T15158] should_failslab+0xc2/0x120 [ 538.279429][T15158] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 538.279459][T15158] ? __alloc_skb+0x2b2/0x380 [ 538.279489][T15158] __alloc_skb+0x2b2/0x380 [ 538.279514][T15158] ? __pfx___alloc_skb+0x10/0x10 [ 538.279539][T15158] ? genl_rcv_msg+0x490/0x800 [ 538.279568][T15158] ? genl_rcv_msg+0x4bb/0x800 [ 538.279609][T15158] netlink_ack+0x15d/0xb80 [ 538.279647][T15158] netlink_rcv_skb+0x332/0x420 [ 538.279675][T15158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.279708][T15158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.279752][T15158] ? netlink_deliver_tap+0x1ae/0xd30 [ 538.279783][T15158] genl_rcv+0x28/0x40 [ 538.279810][T15158] netlink_unicast+0x5a7/0x870 [ 538.279843][T15158] ? __pfx_netlink_unicast+0x10/0x10 [ 538.279870][T15158] ? __pfx___might_resched+0x10/0x10 [ 538.279896][T15158] ? __lock_acquire+0xb97/0x1ce0 [ 538.279937][T15158] netlink_sendmsg+0x8d1/0xdd0 [ 538.279971][T15158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.280004][T15158] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 538.280039][T15158] ____sys_sendmsg+0xa98/0xc70 [ 538.280073][T15158] ? copy_msghdr_from_user+0x10a/0x160 [ 538.280100][T15158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.280173][T15158] ___sys_sendmsg+0x134/0x1d0 [ 538.280204][T15158] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.280277][T15158] __sys_sendmsg+0x16d/0x220 [ 538.280305][T15158] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.280357][T15158] do_syscall_64+0xcd/0x4c0 [ 538.280388][T15158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.280413][T15158] RIP: 0033:0x7f7f3b38eec9 [ 538.280434][T15158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.280457][T15158] RSP: 002b:00007f7f395f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.280481][T15158] RAX: ffffffffffffffda RBX: 00007f7f3b5e5fa0 RCX: 00007f7f3b38eec9 [ 538.280498][T15158] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 538.280514][T15158] RBP: 00007f7f395f6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.280527][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.280541][T15158] R13: 00007f7f3b5e6038 R14: 00007f7f3b5e5fa0 R15: 00007ffe02940578 [ 538.280575][T15158] [ 538.621539][T15136] Process accounting paused [ 538.959272][T15097] Bluetooth: hci1: command 0x0406 tx timeout [ 539.607507][T15190] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 541.387831][T15226] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 543.239977][T15267] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 48 [ 547.427724][T15326] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(576.8192.696), cmd(13) [ 549.576075][T15368] FAULT_INJECTION: forcing a failure. [ 549.576075][T15368] name failslab, interval 1, probability 0, space 0, times 0 [ 549.625727][T15368] CPU: 0 UID: 0 PID: 15368 Comm: syz.1.2080 Not tainted syzkaller #0 PREEMPT(full) [ 549.625761][T15368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.625776][T15368] Call Trace: [ 549.625784][T15368] [ 549.625794][T15368] dump_stack_lvl+0x16c/0x1f0 [ 549.625827][T15368] should_fail_ex+0x512/0x640 [ 549.625855][T15368] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 549.625886][T15368] should_failslab+0xc2/0x120 [ 549.625918][T15368] __kmalloc_cache_noprof+0x6a/0x3e0 [ 549.625946][T15368] ? resv_map_alloc+0x7e/0x400 [ 549.625978][T15368] ? kasan_save_track+0x14/0x30 [ 549.626010][T15368] resv_map_alloc+0x7e/0x400 [ 549.626044][T15368] hugetlb_reserve_pages+0x53c/0xf40 [ 549.626080][T15368] ? __vma_enter_locked+0x163/0x3f0 [ 549.626107][T15368] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 549.626141][T15368] ? atime_needs_update+0x8b/0x710 [ 549.626178][T15368] hugetlbfs_file_mmap+0x4a1/0x730 [ 549.626206][T15368] __mmap_region+0x1311/0x27b0 [ 549.626233][T15368] ? __pfx___mmap_region+0x10/0x10 [ 549.626264][T15368] ? is_bpf_text_address+0x94/0x1a0 [ 549.626290][T15368] ? kernel_text_address+0x8d/0x100 [ 549.626320][T15368] ? __kernel_text_address+0xd/0x40 [ 549.626349][T15368] ? unwind_get_return_address+0x59/0xa0 [ 549.626371][T15368] ? arch_stack_walk+0xa6/0x100 [ 549.626444][T15368] ? rcu_is_watching+0x12/0xc0 [ 549.626473][T15368] mmap_region+0x1ab/0x3f0 [ 549.626502][T15368] do_mmap+0xa3e/0x1210 [ 549.626536][T15368] ? __pfx_do_mmap+0x10/0x10 [ 549.626563][T15368] ? __pfx_down_write_killable+0x10/0x10 [ 549.626593][T15368] vm_mmap_pgoff+0x29e/0x470 [ 549.626627][T15368] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 549.626659][T15368] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 549.626694][T15368] ? hugetlbfs_get_inode+0x31f/0x730 [ 549.626726][T15368] ksys_mmap_pgoff+0x1c8/0x5c0 [ 549.626758][T15368] __x64_sys_mmap+0x125/0x190 [ 549.626780][T15368] do_syscall_64+0xcd/0x4c0 [ 549.626804][T15368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.626824][T15368] RIP: 0033:0x7fe36618eec9 [ 549.626840][T15368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.626859][T15368] RSP: 002b:00007fe3643f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 549.626878][T15368] RAX: ffffffffffffffda RBX: 00007fe3663e6090 RCX: 00007fe36618eec9 [ 549.626892][T15368] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 549.626905][T15368] RBP: 00007fe3643f6090 R08: 000000000000000d R09: 0000300000000000 [ 549.626918][T15368] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000002 [ 549.626930][T15368] R13: 00007fe3663e6128 R14: 00007fe3663e6090 R15: 00007fff2a9bd9f8 [ 549.626957][T15368] [ 550.394735][T15380] FAULT_INJECTION: forcing a failure. [ 550.394735][T15380] name failslab, interval 1, probability 0, space 0, times 0 [ 550.432099][T15380] CPU: 1 UID: 0 PID: 15380 Comm: syz.1.2084 Not tainted syzkaller #0 PREEMPT(full) [ 550.432135][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.432150][T15380] Call Trace: [ 550.432159][T15380] [ 550.432169][T15380] dump_stack_lvl+0x16c/0x1f0 [ 550.432200][T15380] should_fail_ex+0x512/0x640 [ 550.432227][T15380] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 550.432262][T15380] should_failslab+0xc2/0x120 [ 550.432293][T15380] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 550.432337][T15380] ? __alloc_skb+0x2b2/0x380 [ 550.432366][T15380] __alloc_skb+0x2b2/0x380 [ 550.432390][T15380] ? __pfx___alloc_skb+0x10/0x10 [ 550.432419][T15380] ? __pfx___mutex_trylock_common+0x10/0x10 [ 550.432453][T15380] ? __pfx___might_resched+0x10/0x10 [ 550.432486][T15380] netlink_dump+0x19b/0xd30 [ 550.432517][T15380] ? __pfx_netlink_dump+0x10/0x10 [ 550.432570][T15380] __netlink_dump_start+0x6d6/0x990 [ 550.432600][T15380] ? __pfx_mpls_dump_routes+0x10/0x10 [ 550.432627][T15380] rtnetlink_rcv_msg+0xb3e/0xe90 [ 550.432655][T15380] ? __pfx_mpls_dump_routes+0x10/0x10 [ 550.432684][T15380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 550.432712][T15380] ? __pfx_rtnl_dumpit+0x10/0x10 [ 550.432744][T15380] ? __pfx_mpls_dump_routes+0x10/0x10 [ 550.432776][T15380] ? ref_tracker_free+0x37c/0x830 [ 550.432808][T15380] netlink_rcv_skb+0x158/0x420 [ 550.432836][T15380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 550.432866][T15380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.432907][T15380] ? netlink_deliver_tap+0x1ae/0xd30 [ 550.432941][T15380] netlink_unicast+0x5a7/0x870 [ 550.432972][T15380] ? __pfx_netlink_unicast+0x10/0x10 [ 550.432999][T15380] ? __pfx___might_resched+0x10/0x10 [ 550.433022][T15380] ? __lock_acquire+0xb97/0x1ce0 [ 550.433061][T15380] netlink_sendmsg+0x8d1/0xdd0 [ 550.433094][T15380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.433123][T15380] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 550.433157][T15380] ____sys_sendmsg+0xa98/0xc70 [ 550.433190][T15380] ? copy_msghdr_from_user+0x10a/0x160 [ 550.433217][T15380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.433254][T15380] ? kfree+0x24f/0x4d0 [ 550.433275][T15380] ? __pfx__kstrtoull+0x10/0x10 [ 550.433317][T15380] ___sys_sendmsg+0x134/0x1d0 [ 550.433346][T15380] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.433414][T15380] ? __pfx___might_resched+0x10/0x10 [ 550.433446][T15380] __sys_sendmmsg+0x200/0x420 [ 550.433478][T15380] ? __pfx___sys_sendmmsg+0x10/0x10 [ 550.433518][T15380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.433560][T15380] ? fput+0x9b/0xd0 [ 550.433591][T15380] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 550.433626][T15380] ? syscall_user_dispatch+0x78/0x140 [ 550.433667][T15380] __x64_sys_sendmmsg+0x9c/0x100 [ 550.433696][T15380] do_syscall_64+0xcd/0x4c0 [ 550.433725][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.433750][T15380] RIP: 0033:0x7fe36618eec9 [ 550.433769][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.433792][T15380] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 550.433816][T15380] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 550.433833][T15380] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 550.433848][T15380] RBP: 00007fe366f48090 R08: 0000000000000000 R09: 0000000000000000 [ 550.433863][T15380] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.433878][T15380] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 550.433913][T15380] [ 552.329663][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2096'. [ 552.821662][T15433] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2099'. [ 552.832128][T15433] FAULT_INJECTION: forcing a failure. [ 552.832128][T15433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.848115][T15433] CPU: 0 UID: 0 PID: 15433 Comm: syz.5.2099 Not tainted syzkaller #0 PREEMPT(full) [ 552.848144][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.848156][T15433] Call Trace: [ 552.848165][T15433] [ 552.848174][T15433] dump_stack_lvl+0x16c/0x1f0 [ 552.848203][T15433] should_fail_ex+0x512/0x640 [ 552.848243][T15433] should_fail_alloc_page+0xe7/0x130 [ 552.848275][T15433] prepare_alloc_pages+0x3c2/0x610 [ 552.848315][T15433] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 552.848347][T15433] ? stack_trace_save+0x8e/0xc0 [ 552.848375][T15433] ? __pfx_stack_trace_save+0x10/0x10 [ 552.848400][T15433] ? rcu_is_watching+0x12/0xc0 [ 552.848425][T15433] ? stack_depot_save_flags+0x29/0x9c0 [ 552.848462][T15433] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.848490][T15433] ? __kasan_slab_alloc+0x89/0x90 [ 552.848518][T15433] ? __pmd_alloc+0xbf/0x930 [ 552.848551][T15433] ? handle_mm_fault+0x589/0xd10 [ 552.848575][T15433] ? do_user_addr_fault+0x7a6/0x1370 [ 552.848598][T15433] ? exc_page_fault+0x5c/0xb0 [ 552.848621][T15433] ? asm_exc_page_fault+0x26/0x30 [ 552.848644][T15433] ? rep_movs_alternative+0x4a/0x90 [ 552.848675][T15433] ? _copy_from_iter+0x383/0x1720 [ 552.848702][T15433] ? netlink_sendmsg+0x829/0xdd0 [ 552.848732][T15433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.848766][T15433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.848803][T15433] ? policy_nodemask+0xea/0x4e0 [ 552.848838][T15433] alloc_pages_mpol+0x1fb/0x550 [ 552.848871][T15433] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 552.848914][T15433] alloc_pages_noprof+0x131/0x390 [ 552.848947][T15433] pte_alloc_one+0x1c/0x3a0 [ 552.848975][T15433] do_pte_missing+0x1afc/0x3ba0 [ 552.849003][T15433] ? do_raw_spin_unlock+0x172/0x230 [ 552.849045][T15433] ? __pmd_alloc+0x3fb/0x930 [ 552.849081][T15433] __handle_mm_fault+0x152a/0x2a50 [ 552.849111][T15433] ? mt_find+0x3ef/0xa30 [ 552.849140][T15433] ? __pfx___handle_mm_fault+0x10/0x10 [ 552.849163][T15433] ? __pfx_mt_find+0x10/0x10 [ 552.849210][T15433] ? find_vma+0xbf/0x140 [ 552.849248][T15433] ? __pfx_find_vma+0x10/0x10 [ 552.849282][T15433] handle_mm_fault+0x589/0xd10 [ 552.849310][T15433] ? trace_raw_output_exceptions+0x131/0x150 [ 552.849349][T15433] do_user_addr_fault+0x7a6/0x1370 [ 552.849378][T15433] ? rcu_is_watching+0x12/0xc0 [ 552.849407][T15433] exc_page_fault+0x5c/0xb0 [ 552.849433][T15433] asm_exc_page_fault+0x26/0x30 [ 552.849456][T15433] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 552.849489][T15433] Code: 1e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 1e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 552.849513][T15433] RSP: 0018:ffffc9000b9d77d0 EFLAGS: 00050206 [ 552.849532][T15433] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 552.849546][T15433] RDX: ffffed1005fa4951 RSI: 0000000000000000 RDI: ffff88802fd249c0 [ 552.849562][T15433] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1005fa4950 [ 552.849577][T15433] R10: ffff88802fd24a83 R11: 0000000000000000 R12: ffffc9000b9d7d60 [ 552.849592][T15433] R13: 00000000000000c4 R14: ffff88802fd249c0 R15: 00007ffffffff000 [ 552.849627][T15433] _copy_from_iter+0x383/0x1720 [ 552.849661][T15433] ? __alloc_skb+0x200/0x380 [ 552.849687][T15433] ? __pfx__copy_from_iter+0x10/0x10 [ 552.849718][T15433] ? __pfx___might_resched+0x10/0x10 [ 552.849743][T15433] ? __lock_acquire+0xb97/0x1ce0 [ 552.849784][T15433] netlink_sendmsg+0x829/0xdd0 [ 552.849818][T15433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.849851][T15433] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 552.849887][T15433] ____sys_sendmsg+0xa98/0xc70 [ 552.849921][T15433] ? copy_msghdr_from_user+0x10a/0x160 [ 552.849948][T15433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.849986][T15433] ? __pfx__kstrtoull+0x10/0x10 [ 552.850028][T15433] ___sys_sendmsg+0x134/0x1d0 [ 552.850057][T15433] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.850102][T15433] ? find_held_lock+0x2b/0x80 [ 552.850150][T15433] __sys_sendmmsg+0x200/0x420 [ 552.850182][T15433] ? __pfx___sys_sendmmsg+0x10/0x10 [ 552.850222][T15433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.850270][T15433] ? fput+0x9b/0xd0 [ 552.850303][T15433] ? ksys_write+0x1ac/0x250 [ 552.850330][T15433] ? __pfx_ksys_write+0x10/0x10 [ 552.850365][T15433] __x64_sys_sendmmsg+0x9c/0x100 [ 552.850391][T15433] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.850416][T15433] do_syscall_64+0xcd/0x4c0 [ 552.850445][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.850469][T15433] RIP: 0033:0x7f763598eec9 [ 552.850489][T15433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.850511][T15433] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 552.850533][T15433] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 552.850550][T15433] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 552.850565][T15433] RBP: 00007f763690a090 R08: 0000000000000000 R09: 0000000000000000 [ 552.850580][T15433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.850595][T15433] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 552.850630][T15433] [ 553.529167][ T30] audit: type=1800 audit(4294967325.900:22): pid=15438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2100" name="version" dev="configfs" ino=45258 res=0 errno=0 [ 553.753684][T15441] FAULT_INJECTION: forcing a failure. [ 553.753684][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 553.766459][T15441] CPU: 1 UID: 0 PID: 15441 Comm: syz.3.2102 Not tainted syzkaller #0 PREEMPT(full) [ 553.766491][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.766505][T15441] Call Trace: [ 553.766515][T15441] [ 553.766524][T15441] dump_stack_lvl+0x16c/0x1f0 [ 553.766556][T15441] should_fail_ex+0x512/0x640 [ 553.766581][T15441] ? __kmalloc_noprof+0xbf/0x510 [ 553.766612][T15441] ? alloc_pipe_info+0x1ec/0x590 [ 553.766639][T15441] should_failslab+0xc2/0x120 [ 553.766671][T15441] __kmalloc_noprof+0xd2/0x510 [ 553.766706][T15441] alloc_pipe_info+0x1ec/0x590 [ 553.766739][T15441] splice_direct_to_actor+0x77d/0xa30 [ 553.766768][T15441] ? __pfx_direct_splice_actor+0x10/0x10 [ 553.766793][T15441] ? finish_task_switch.isra.0+0x21c/0xc10 [ 553.766817][T15441] ? __pfx_aa_file_perm+0x10/0x10 [ 553.766837][T15441] ? rcu_is_watching+0x12/0xc0 [ 553.766863][T15441] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 553.766887][T15441] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 553.766913][T15441] ? rcu_is_watching+0x12/0xc0 [ 553.766939][T15441] do_splice_direct+0x174/0x240 [ 553.766965][T15441] ? __pfx_do_splice_direct+0x10/0x10 [ 553.766991][T15441] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 553.767019][T15441] ? bpf_lsm_file_permission+0x9/0x10 [ 553.767052][T15441] ? security_file_permission+0x71/0x210 [ 553.767087][T15441] ? rw_verify_area+0xcf/0x6c0 [ 553.767114][T15441] do_sendfile+0xb06/0xe50 [ 553.767146][T15441] ? __pfx_do_sendfile+0x10/0x10 [ 553.767177][T15441] ? rcu_is_watching+0x12/0xc0 [ 553.767201][T15441] ? irqentry_exit+0x3b/0x90 [ 553.767231][T15441] __x64_sys_sendfile64+0x1d8/0x220 [ 553.767266][T15441] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 553.767302][T15441] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 553.767345][T15441] do_syscall_64+0xcd/0x4c0 [ 553.767375][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.767400][T15441] RIP: 0033:0x7f778098eec9 [ 553.767429][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.767452][T15441] RSP: 002b:00007f77817fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 553.767476][T15441] RAX: ffffffffffffffda RBX: 00007f7780be6090 RCX: 00007f778098eec9 [ 553.767492][T15441] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 553.767507][T15441] RBP: 00007f77817fe090 R08: 0000000000000000 R09: 0000000000000000 [ 553.767522][T15441] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 553.767538][T15441] R13: 00007f7780be6128 R14: 00007f7780be6090 R15: 00007ffd91eade58 [ 553.767572][T15441] [ 554.966431][T15468] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2109'. [ 555.108348][T15468] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.188828][T15468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.196786][T15468] IPv6: NLM_F_CREATE should be set when creating new route [ 555.204034][T15468] IPv6: NLM_F_CREATE should be set when creating new route [ 556.676512][T15470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 556.684016][T15470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.715887][T15470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.725443][T15470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.763700][T15482] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 557.349173][T15097] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.712257][T15097] Bluetooth: hci3: command 0x0c1a tx timeout [ 558.790408][T15097] Bluetooth: hci1: command 0x0406 tx timeout [ 558.797661][T13242] Bluetooth: hci2: command 0x0c1a tx timeout [ 559.160924][T15549] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:2 is already present [ 559.372308][T15554] FAULT_INJECTION: forcing a failure. [ 559.372308][T15554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.452555][T15554] CPU: 1 UID: 0 PID: 15554 Comm: syz.5.2126 Not tainted syzkaller #0 PREEMPT(full) [ 559.452590][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.452604][T15554] Call Trace: [ 559.452614][T15554] [ 559.452624][T15554] dump_stack_lvl+0x16c/0x1f0 [ 559.452657][T15554] should_fail_ex+0x512/0x640 [ 559.452691][T15554] _copy_from_iter+0x29f/0x1720 [ 559.452730][T15554] ? __pfx__copy_from_iter+0x10/0x10 [ 559.452762][T15554] ? rcu_is_watching+0x12/0xc0 [ 559.452809][T15554] ? trace_kmalloc+0x2b/0xd0 [ 559.452841][T15554] ? __kmalloc_noprof+0x242/0x510 [ 559.452879][T15554] kernfs_fop_write_iter+0x19a/0x570 [ 559.452911][T15554] vfs_write+0x7d3/0x11d0 [ 559.452942][T15554] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 559.452970][T15554] ? __pfx___mutex_lock+0x10/0x10 [ 559.452998][T15554] ? __pfx_vfs_write+0x10/0x10 [ 559.453050][T15554] ksys_write+0x12a/0x250 [ 559.453079][T15554] ? __pfx_ksys_write+0x10/0x10 [ 559.453119][T15554] do_syscall_64+0xcd/0x4c0 [ 559.453149][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.453175][T15554] RIP: 0033:0x7f763598eec9 [ 559.453196][T15554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.453218][T15554] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.453242][T15554] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 559.453259][T15554] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000002 [ 559.453275][T15554] RBP: 00007f763690a090 R08: 0000000000000000 R09: 0000000000000000 [ 559.453290][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.453305][T15554] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 559.453340][T15554] [ 560.570619][ T30] audit: type=1800 audit(4294967332.970:23): pid=15577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2133" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 561.041587][T15575] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2130'. [ 562.874149][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.884497][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.153400][T15636] FAULT_INJECTION: forcing a failure. [ 564.153400][T15636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.232069][T15636] CPU: 1 UID: 0 PID: 15636 Comm: syz.3.2146 Not tainted syzkaller #0 PREEMPT(full) [ 564.232103][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.232117][T15636] Call Trace: [ 564.232125][T15636] [ 564.232135][T15636] dump_stack_lvl+0x16c/0x1f0 [ 564.232167][T15636] should_fail_ex+0x512/0x640 [ 564.232200][T15636] _copy_from_iter+0x29f/0x1720 [ 564.232233][T15636] ? __alloc_skb+0x200/0x380 [ 564.232259][T15636] ? __pfx__copy_from_iter+0x10/0x10 [ 564.232290][T15636] ? __pfx___might_resched+0x10/0x10 [ 564.232315][T15636] ? __lock_acquire+0xb97/0x1ce0 [ 564.232356][T15636] netlink_sendmsg+0x829/0xdd0 [ 564.232390][T15636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.232421][T15636] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 564.232465][T15636] ____sys_sendmsg+0xa98/0xc70 [ 564.232498][T15636] ? copy_msghdr_from_user+0x10a/0x160 [ 564.232525][T15636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.232563][T15636] ? kfree+0x24f/0x4d0 [ 564.232584][T15636] ? __pfx__kstrtoull+0x10/0x10 [ 564.232625][T15636] ___sys_sendmsg+0x134/0x1d0 [ 564.232654][T15636] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.232713][T15636] ? __pfx___might_resched+0x10/0x10 [ 564.232745][T15636] __sys_sendmmsg+0x200/0x420 [ 564.232776][T15636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 564.232814][T15636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 564.232855][T15636] ? fput+0x9b/0xd0 [ 564.232888][T15636] ? ksys_write+0x1ac/0x250 [ 564.232915][T15636] ? __pfx_ksys_write+0x10/0x10 [ 564.232949][T15636] __x64_sys_sendmmsg+0x9c/0x100 [ 564.232975][T15636] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.233000][T15636] do_syscall_64+0xcd/0x4c0 [ 564.233029][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.233053][T15636] RIP: 0033:0x7f778098eec9 [ 564.233074][T15636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.233096][T15636] RSP: 002b:00007f778181f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 564.233120][T15636] RAX: ffffffffffffffda RBX: 00007f7780be5fa0 RCX: 00007f778098eec9 [ 564.233137][T15636] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 564.233152][T15636] RBP: 00007f778181f090 R08: 0000000000000000 R09: 0000000000000000 [ 564.233167][T15636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.233182][T15636] R13: 00007f7780be6038 R14: 00007f7780be5fa0 R15: 00007ffd91eade58 [ 564.233216][T15636] [ 564.575684][T15643] can: request_module (can-proto-0) failed. [ 564.706751][T15650] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:2 is already present [ 565.251605][T15662] FAULT_INJECTION: forcing a failure. [ 565.251605][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 565.277477][T15662] CPU: 1 UID: 0 PID: 15662 Comm: syz.1.2152 Not tainted syzkaller #0 PREEMPT(full) [ 565.277509][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.277524][T15662] Call Trace: [ 565.277533][T15662] [ 565.277543][T15662] dump_stack_lvl+0x16c/0x1f0 [ 565.277574][T15662] should_fail_ex+0x512/0x640 [ 565.277601][T15662] ? fs_reclaim_acquire+0xae/0x150 [ 565.277645][T15662] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 565.277680][T15662] should_failslab+0xc2/0x120 [ 565.277712][T15662] __kmalloc_noprof+0xd2/0x510 [ 565.277750][T15662] tomoyo_realpath_from_path+0xc2/0x6e0 [ 565.277788][T15662] ? tomoyo_profile+0x47/0x60 [ 565.277817][T15662] tomoyo_path_number_perm+0x245/0x580 [ 565.277847][T15662] ? tomoyo_path_number_perm+0x237/0x580 [ 565.277881][T15662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.277915][T15662] ? find_held_lock+0x2b/0x80 [ 565.277973][T15662] ? find_held_lock+0x2b/0x80 [ 565.277996][T15662] ? hook_file_ioctl_common+0x145/0x410 [ 565.278038][T15662] ? __fget_files+0x20e/0x3c0 [ 565.278072][T15662] security_file_ioctl+0x9b/0x240 [ 565.278109][T15662] __x64_sys_ioctl+0xb7/0x210 [ 565.278148][T15662] do_syscall_64+0xcd/0x4c0 [ 565.278177][T15662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.278203][T15662] RIP: 0033:0x7fe36618eec9 [ 565.278223][T15662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.278246][T15662] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.278270][T15662] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 565.278288][T15662] RDX: 00002000000001c0 RSI: 00000000c1105517 RDI: 0000000000000005 [ 565.278304][T15662] RBP: 00007fe366f48090 R08: 0000000000000000 R09: 0000000000000000 [ 565.278320][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.278335][T15662] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 565.278369][T15662] [ 565.278437][T15662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.489274][T15662] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:2 is already present [ 566.079904][T15667] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2153'. [ 568.831323][T15724] Process accounting resumed [ 572.194984][T15811] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2178'. [ 572.961775][T15829] FAULT_INJECTION: forcing a failure. [ 572.961775][T15829] name failslab, interval 1, probability 0, space 0, times 0 [ 572.984759][T15829] CPU: 0 UID: 0 PID: 15829 Comm: syz.5.2185 Not tainted syzkaller #0 PREEMPT(full) [ 572.984793][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.984808][T15829] Call Trace: [ 572.984817][T15829] [ 572.984827][T15829] dump_stack_lvl+0x16c/0x1f0 [ 572.984859][T15829] should_fail_ex+0x512/0x640 [ 572.984882][T15829] ? fs_reclaim_acquire+0xae/0x150 [ 572.984910][T15829] ? tomoyo_encode2+0x100/0x3e0 [ 572.984931][T15829] should_failslab+0xc2/0x120 [ 572.984951][T15829] __kmalloc_noprof+0xd2/0x510 [ 572.984968][T15829] ? d_absolute_path+0x136/0x1a0 [ 572.984994][T15829] tomoyo_encode2+0x100/0x3e0 [ 572.985019][T15829] tomoyo_encode+0x29/0x50 [ 572.985040][T15829] tomoyo_realpath_from_path+0x18f/0x6e0 [ 572.985068][T15829] tomoyo_check_open_permission+0x2ab/0x3c0 [ 572.985088][T15829] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 572.985138][T15829] ? do_raw_spin_lock+0x12c/0x2b0 [ 572.985165][T15829] tomoyo_file_open+0x6b/0x90 [ 572.985182][T15829] security_file_open+0x84/0x1e0 [ 572.985203][T15829] do_dentry_open+0x596/0x1530 [ 572.985227][T15829] vfs_open+0x82/0x3f0 [ 572.985251][T15829] path_openat+0x1de4/0x2cb0 [ 572.985274][T15829] ? __pfx_path_openat+0x10/0x10 [ 572.985296][T15829] do_filp_open+0x20b/0x470 [ 572.985313][T15829] ? __pfx_do_filp_open+0x10/0x10 [ 572.985344][T15829] ? alloc_fd+0x471/0x7d0 [ 572.985365][T15829] do_sys_openat2+0x11b/0x1d0 [ 572.985387][T15829] ? __pfx_do_sys_openat2+0x10/0x10 [ 572.985411][T15829] ? __fget_files+0x20e/0x3c0 [ 572.985430][T15829] __x64_sys_openat+0x174/0x210 [ 572.985443][T15829] ? __pfx___x64_sys_openat+0x10/0x10 [ 572.985455][T15829] ? ksys_write+0x1ac/0x250 [ 572.985479][T15829] do_syscall_64+0xcd/0x4c0 [ 572.985496][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.985512][T15829] RIP: 0033:0x7f763598eec9 [ 572.985524][T15829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.985537][T15829] RSP: 002b:00007f763690a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.985552][T15829] RAX: ffffffffffffffda RBX: 00007f7635be5fa0 RCX: 00007f763598eec9 [ 572.985561][T15829] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 572.985571][T15829] RBP: 00007f763690a090 R08: 0000000000000000 R09: 0000000000000000 [ 572.985579][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.985587][T15829] R13: 00007f7635be6038 R14: 00007f7635be5fa0 R15: 00007fff6a9fb7d8 [ 572.985606][T15829] [ 572.985871][T15829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 573.731344][T15843] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2187'. [ 574.934947][T15881] ICMPv6: process `syz.5.2198' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 574.978677][T15883] FAULT_INJECTION: forcing a failure. [ 574.978677][T15883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.999204][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.1.2199 Not tainted syzkaller #0 PREEMPT(full) [ 574.999237][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.999252][T15883] Call Trace: [ 574.999261][T15883] [ 574.999271][T15883] dump_stack_lvl+0x16c/0x1f0 [ 574.999301][T15883] should_fail_ex+0x512/0x640 [ 574.999332][T15883] should_fail_alloc_page+0xe7/0x130 [ 574.999366][T15883] prepare_alloc_pages+0x3c2/0x610 [ 574.999401][T15883] ? rcu_is_watching+0x12/0xc0 [ 574.999427][T15883] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 574.999454][T15883] ? stack_depot_save_flags+0x29/0x9c0 [ 574.999486][T15883] ? __lock_acquire+0x62e/0x1ce0 [ 574.999527][T15883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 574.999570][T15883] ? __lock_acquire+0x62e/0x1ce0 [ 574.999607][T15883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 574.999645][T15883] ? policy_nodemask+0xea/0x4e0 [ 574.999680][T15883] alloc_pages_mpol+0x1fb/0x550 [ 574.999712][T15883] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 574.999746][T15883] ? __lock_acquire+0x62e/0x1ce0 [ 574.999780][T15883] folio_alloc_mpol_noprof+0x36/0x2f0 [ 574.999818][T15883] vma_alloc_folio_noprof+0xed/0x1e0 [ 574.999853][T15883] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 574.999899][T15883] do_pte_missing+0x2230/0x3ba0 [ 574.999927][T15883] ? find_held_lock+0x2b/0x80 [ 574.999962][T15883] __handle_mm_fault+0x152a/0x2a50 [ 575.000004][T15883] ? __pfx___handle_mm_fault+0x10/0x10 [ 575.000032][T15883] ? __pte_offset_map_lock+0x174/0x310 [ 575.000063][T15883] ? find_held_lock+0x2b/0x80 [ 575.000098][T15883] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 575.000143][T15883] handle_mm_fault+0x589/0xd10 [ 575.000176][T15883] __get_user_pages+0x551/0x34a0 [ 575.000224][T15883] ? __pfx___get_user_pages+0x10/0x10 [ 575.000268][T15883] populate_vma_page_range+0x267/0x3f0 [ 575.000295][T15883] ? __pfx_populate_vma_page_range+0x10/0x10 [ 575.000318][T15883] ? __pfx_find_vma_intersection+0x10/0x10 [ 575.000354][T15883] ? do_mmap+0x69c/0x1210 [ 575.000391][T15883] __mm_populate+0x1d8/0x380 [ 575.000416][T15883] ? __pfx___mm_populate+0x10/0x10 [ 575.000443][T15883] ? up_write+0x1b2/0x520 [ 575.000480][T15883] vm_mmap_pgoff+0x37f/0x470 [ 575.000518][T15883] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 575.000554][T15883] ? __fget_files+0x20e/0x3c0 [ 575.000592][T15883] ksys_mmap_pgoff+0x7d/0x5c0 [ 575.000625][T15883] ? __pfx_ksys_write+0x10/0x10 [ 575.000658][T15883] __x64_sys_mmap+0x125/0x190 [ 575.000686][T15883] do_syscall_64+0xcd/0x4c0 [ 575.000717][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.000741][T15883] RIP: 0033:0x7fe36618eec9 [ 575.000762][T15883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.000785][T15883] RSP: 002b:00007fe366f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 575.000808][T15883] RAX: ffffffffffffffda RBX: 00007fe3663e5fa0 RCX: 00007fe36618eec9 [ 575.000824][T15883] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 575.000840][T15883] RBP: 00007fe366f48090 R08: 0000000000000002 R09: 0000000000008000 [ 575.000855][T15883] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 575.000870][T15883] R13: 00007fe3663e6038 R14: 00007fe3663e5fa0 R15: 00007fff2a9bd9f8 [ 575.000906][T15883] [ 576.028178][T15892] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2202'. [ 578.817495][T15963] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2219'. [ 578.944394][T15970] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:0 is already present [ 578.989394][T15969] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 579.660923][T15985] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2223'. [ 579.895574][T15988] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:0 is already present [ 581.226782][T16004] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 581.769400][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 582.495292][T16037] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2235'. [ 582.637716][ T30] audit: type=1800 audit(4294967355.070:24): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2237" name="dbroot" dev="configfs" ino=48420 res=0 errno=0 [ 584.593316][T16090] usb usb2: usbfs: process 16090 (syz.1.2247) did not claim interface 0 before use [ 586.554683][T16138] FAULT_INJECTION: forcing a failure. [ 586.554683][T16138] name failslab, interval 1, probability 0, space 0, times 0 [ 586.614761][T16138] CPU: 1 UID: 0 PID: 16138 Comm: syz.2.2259 Not tainted syzkaller #0 PREEMPT(full) [ 586.614797][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.614812][T16138] Call Trace: [ 586.614821][T16138] [ 586.614832][T16138] dump_stack_lvl+0x16c/0x1f0 [ 586.614868][T16138] should_fail_ex+0x512/0x640 [ 586.614899][T16138] ? __kvmalloc_node_noprof+0x124/0x620 [ 586.614928][T16138] should_failslab+0xc2/0x120 [ 586.614958][T16138] __kvmalloc_node_noprof+0x137/0x620 [ 586.614987][T16138] ? io_alloc_cache_init+0x33/0x170 [ 586.615020][T16138] ? io_alloc_cache_init+0x33/0x170 [ 586.615047][T16138] io_alloc_cache_init+0x33/0x170 [ 586.615077][T16138] io_uring_setup+0x656/0x20c0 [ 586.615117][T16138] ? __pfx_io_uring_setup+0x10/0x10 [ 586.615151][T16138] ? do_futex+0x122/0x350 [ 586.615183][T16138] ? __pfx_do_futex+0x10/0x10 [ 586.615213][T16138] ? __pfx___might_resched+0x10/0x10 [ 586.615249][T16138] ? xfd_validate_state+0x61/0x180 [ 586.615291][T16138] ? __pfx___do_sys_close_range+0x10/0x10 [ 586.615332][T16138] __x64_sys_io_uring_setup+0xc2/0x170 [ 586.615370][T16138] do_syscall_64+0xcd/0x4c0 [ 586.615401][T16138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.615427][T16138] RIP: 0033:0x7f7f3b38eec9 [ 586.615448][T16138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.615473][T16138] RSP: 002b:00007f7f395f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 586.615499][T16138] RAX: ffffffffffffffda RBX: 00007f7f3b5e5fa0 RCX: 00007f7f3b38eec9 [ 586.615518][T16138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 586.615532][T16138] RBP: 00007f7f3b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.615548][T16138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.615563][T16138] R13: 00007f7f3b5e6038 R14: 00007f7f3b5e5fa0 R15: 00007ffe02940578 [ 586.615597][T16138] [ 586.810451][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.878123][ T6909] ------------[ cut here ]------------ [ 586.883651][ T6909] ida_free called for id=964 which is not allocated. [ 586.891865][ T6909] WARNING: CPU: 1 PID: 6909 at lib/idr.c:592 ida_free+0x1f9/0x2e0 [ 586.899758][ T6909] Modules linked in: [ 586.903669][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.1.213 Not tainted syzkaller #0 PREEMPT(full) [ 586.912920][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.923019][ T6909] RIP: 0010:ida_free+0x1f9/0x2e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 586.927994][ T6909] Code: 79 f6 41 83 fe 3e 76 72 e8 b4 5b 79 f6 48 8b 7c 24 28 4c 89 ee e8 b7 33 0d 00 90 48 c7 c7 e0 63 cf 8c 89 ee e8 78 3e 38 f6 90 <0f> 0b 90 90 e8 8e 5b 79 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 586.947697][ T6909] RSP: 0018:ffffc9000b76f980 EFLAGS: 00010286 [ 586.954117][ T6909] RAX: 0000000000000000 RBX: 1ffff920016edf31 RCX: ffffffff81791df8 [ 586.962169][ T6909] RDX: ffff888032e53c00 RSI: ffffffff81791e05 RDI: 0000000000000001 [ 586.970190][ T6909] RBP: 00000000000003c4 R08: 0000000000000001 R09: 0000000000000000 [ 586.978184][ T6909] R10: 0000000000000000 R11: fffffffffffe4298 R12: ffff88814169d000 [ 586.986228][ T6909] R13: 0000000000000293 R14: 00000000000003c4 R15: ffff88814169d078 [ 586.994511][ T6909] FS: 0000000000000000(0000) GS:ffff888124f88000(0000) knlGS:0000000000000000 [ 587.003710][ T6909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.010386][ T6909] CR2: 0000001b3200aff8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 587.018376][ T6909] Call Trace: [ 587.021750][ T6909] [ 587.024711][ T6909] ? __pfx_ida_free+0x10/0x10 [ 587.029446][ T6909] ? kasan_quarantine_put+0x10a/0x240 [ 587.034842][ T6909] ? namespace_unlock+0x4e7/0x920 [ 587.039917][ T6909] ? kfree+0x2b4/0x4d0 [ 587.044032][ T6909] free_mnt_ns+0xe0/0x110 [ 587.048384][ T6909] namespace_unlock+0x542/0x920 [ 587.053360][ T6909] ? umount_tree+0xaa2/0xf00 [ 587.058000][ T6909] ? __pfx_namespace_unlock+0x10/0x10 [ 587.063433][ T6909] ? find_held_lock+0x2b/0x80 [ 587.068126][ T6909] ? put_mnt_ns+0xf0/0x120 [ 587.072597][ T6909] ? free_nsproxy+0x3a/0x400 [ 587.077227][ T6909] put_mnt_ns+0xf5/0x120 [ 587.081536][ T6909] free_nsproxy+0x3a/0x400 [ 587.085971][ T6909] switch_task_namespaces+0xeb/0x100 [ 587.091327][ T6909] do_exit+0x86a/0x2bf0 [ 587.095741][ T6909] ? __pfx_do_exit+0x10/0x10 [ 587.100587][ T6909] ? do_raw_spin_lock+0x12c/0x2b0 [ 587.105641][ T6909] ? find_held_lock+0x2b/0x80 [ 587.110392][ T6909] do_group_exit+0xd3/0x2a0 [ 587.114917][ T6909] get_signal+0x2673/0x26d0 [ 587.119483][ T6909] ? css_rstat_updated+0x1c2/0x510 [ 587.124633][ T6909] ? __pfx_get_signal+0x10/0x10 [ 587.129555][ T6909] ? do_futex+0x122/0x350 [ 587.133904][ T6909] ? __pfx_do_futex+0x10/0x10 [ 587.138600][ T6909] arch_do_signal_or_restart+0x8f/0x790 [ 587.144307][ T6909] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 587.150545][ T6909] exit_to_user_mode_loop+0x84/0x110 [ 587.155858][ T6909] do_syscall_64+0x41c/0x4c0 [ 587.160522][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.166427][ T6909] RIP: 0033:0x7fe36618eec9 [ 587.170908][ T6909] Code: Unable to access opcode bytes at 0x7fe36618ee9f. [ 587.177951][ T6909] RSP: 002b:00007fe366f480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 587.186467][ T6909] RAX: fffffffffffffe00 RBX: 00007fe3663e5fa8 RCX: 00007fe36618eec9 [ 587.194721][ T6909] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3663e5fa8 [ 587.202920][ T6909] RBP: 00007fe3663e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 587.210988][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.218964][ T6909] R13: 00007fe3663e6038 R14: 00007fff2a9bd910 R15: 00007fff2a9bd9f8 [ 587.227004][ T6909] [ 587.230083][ T6909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 587.237370][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.1.213 Not tainted syzkaller #0 PREEMPT(full) [ 587.246745][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.256793][ T6909] Call Trace: [ 587.260062][ T6909] [ 587.262983][ T6909] dump_stack_lvl+0x3d/0x1f0 [ 587.267572][ T6909] vpanic+0x6e8/0x7a0 [ 587.271553][ T6909] ? __pfx_vpanic+0x10/0x10 [ 587.276060][ T6909] ? ida_free+0x1f9/0x2e0 [ 587.280378][ T6909] panic+0xca/0xd0 [ 587.284098][ T6909] ? __pfx_panic+0x10/0x10 [ 587.288517][ T6909] ? check_panic_on_warn+0x1f/0xb0 [ 587.293627][ T6909] check_panic_on_warn+0xab/0xb0 [ 587.298565][ T6909] __warn+0xf6/0x3c0 [ 587.302462][ T6909] ? __pfx_vprintk_emit+0x10/0x10 [ 587.307481][ T6909] ? ida_free+0x1f9/0x2e0 [ 587.311803][ T6909] report_bug+0x3c3/0x580 [ 587.316124][ T6909] ? ida_free+0x1f9/0x2e0 [ 587.320443][ T6909] handle_bug+0x184/0x210 [ 587.324767][ T6909] exc_invalid_op+0x17/0x50 [ 587.329267][ T6909] asm_exc_invalid_op+0x1a/0x20 [ 587.334119][ T6909] RIP: 0010:ida_free+0x1f9/0x2e0 [ 587.339049][ T6909] Code: 79 f6 41 83 fe 3e 76 72 e8 b4 5b 79 f6 48 8b 7c 24 28 4c 89 ee e8 b7 33 0d 00 90 48 c7 c7 e0 63 cf 8c 89 ee e8 78 3e 38 f6 90 <0f> 0b 90 90 e8 8e 5b 79 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 587.358656][ T6909] RSP: 0018:ffffc9000b76f980 EFLAGS: 00010286 [ 587.364715][ T6909] RAX: 0000000000000000 RBX: 1ffff920016edf31 RCX: ffffffff81791df8 [ 587.372675][ T6909] RDX: ffff888032e53c00 RSI: ffffffff81791e05 RDI: 0000000000000001 [ 587.380633][ T6909] RBP: 00000000000003c4 R08: 0000000000000001 R09: 0000000000000000 [ 587.388591][ T6909] R10: 0000000000000000 R11: fffffffffffe4298 R12: ffff88814169d000 [ 587.396549][ T6909] R13: 0000000000000293 R14: 00000000000003c4 R15: ffff88814169d078 [ 587.404515][ T6909] ? __warn_printk+0x198/0x350 [ 587.409283][ T6909] ? __warn_printk+0x1a5/0x350 [ 587.414065][ T6909] ? __pfx_ida_free+0x10/0x10 [ 587.418734][ T6909] ? kasan_quarantine_put+0x10a/0x240 [ 587.424105][ T6909] ? namespace_unlock+0x4e7/0x920 [ 587.429124][ T6909] ? kfree+0x2b4/0x4d0 [ 587.433201][ T6909] free_mnt_ns+0xe0/0x110 [ 587.437538][ T6909] namespace_unlock+0x542/0x920 [ 587.442380][ T6909] ? umount_tree+0xaa2/0xf00 [ 587.446982][ T6909] ? __pfx_namespace_unlock+0x10/0x10 [ 587.452345][ T6909] ? find_held_lock+0x2b/0x80 [ 587.457016][ T6909] ? put_mnt_ns+0xf0/0x120 [ 587.461427][ T6909] ? free_nsproxy+0x3a/0x400 [ 587.466017][ T6909] put_mnt_ns+0xf5/0x120 [ 587.470257][ T6909] free_nsproxy+0x3a/0x400 [ 587.474666][ T6909] switch_task_namespaces+0xeb/0x100 [ 587.479945][ T6909] do_exit+0x86a/0x2bf0 [ 587.484105][ T6909] ? __pfx_do_exit+0x10/0x10 [ 587.488693][ T6909] ? do_raw_spin_lock+0x12c/0x2b0 [ 587.493717][ T6909] ? find_held_lock+0x2b/0x80 [ 587.498390][ T6909] do_group_exit+0xd3/0x2a0 [ 587.502890][ T6909] get_signal+0x2673/0x26d0 [ 587.507392][ T6909] ? css_rstat_updated+0x1c2/0x510 [ 587.512500][ T6909] ? __pfx_get_signal+0x10/0x10 [ 587.517344][ T6909] ? do_futex+0x122/0x350 [ 587.521670][ T6909] ? __pfx_do_futex+0x10/0x10 [ 587.526346][ T6909] arch_do_signal_or_restart+0x8f/0x790 [ 587.531891][ T6909] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 587.538060][ T6909] exit_to_user_mode_loop+0x84/0x110 [ 587.543347][ T6909] do_syscall_64+0x41c/0x4c0 [ 587.548021][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.553905][ T6909] RIP: 0033:0x7fe36618eec9 [ 587.558319][ T6909] Code: Unable to access opcode bytes at 0x7fe36618ee9f. [ 587.565321][ T6909] RSP: 002b:00007fe366f480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 587.573724][ T6909] RAX: fffffffffffffe00 RBX: 00007fe3663e5fa8 RCX: 00007fe36618eec9 [ 587.581684][ T6909] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3663e5fa8 [ 587.589640][ T6909] RBP: 00007fe3663e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 587.597598][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.605557][ T6909] R13: 00007fe3663e6038 R14: 00007fff2a9bd910 R15: 00007fff2a9bd9f8 [ 587.613535][ T6909] [ 587.616786][ T6909] Kernel Offset: disabled [ 587.621100][ T6909] Rebooting in 86400 seconds..