last executing test programs: 12m8.053565221s ago: executing program 1 (id=385): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = dup$auto(0xffffffffffffffff) r1 = socket(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0xffffffffffffffff, 0x8001, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r4 = open_by_handle_at$auto(r0, &(0x7f0000000340)={0xb3, 0xf, "8f8a12f21290de748ef7cf8a6f6d36ffb0f9f8ea6a57a435abfb313886b301f3281e28917add93e93a2e3d3ed947070eb4805fac4afeed5ee47d6fb79b878559417263f3e075b39021cd7b69366dca95032944ddc3f66a86d1fdcf793350aaa17a215dac7264a2a6d70badbc4d1274dcede53ded9329f7ff5a4ccfc4b40879b70095372631e99ebd8b16593ac31dd416f2aba8213a73a5eb46af28bfef10a6b48f1b4bd346bd3f3a553d6e62cdc01b0732b31e"}, 0x5) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_PREV_BSSID={0x86, 0x4f, "185949b5e0103dbd780d2dbc33cd23bf5239fb72f73b5678f874d3a9c3fbc239bc081e8a57960ba0fb10705280df22c5caff0031da6f1671465b65a39700526d1a8581ea0a69fa9bbb84ea818c965a927bcdb60bb94b8ab1e18b2d3294a3a252eb0e945551d88cf04af6d2dfaeea161e254dba1d33e5379a74e4812b06440849c462"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c854) (async) ioctl$auto_FIONREAD(r0, 0x541b, 0xfffffffffffffff8) (async) fcntl$auto(r3, 0x400, 0x1) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/250, 0xfa) (async) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r7, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 12m4.562053371s ago: executing program 1 (id=395): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x98fd3f0000000000, 0x0, 0x20004000}, 0x100000) 12m4.024755992s ago: executing program 1 (id=397): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) 12m3.716265165s ago: executing program 1 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000ae", @ANYRES16=r1, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) 12m3.029306032s ago: executing program 1 (id=402): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) io_uring_register$auto(r0, 0x1f, &(0x7f0000000040)='d)]Z', 0x8000001) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) 11m58.937651025s ago: executing program 1 (id=419): unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0xa02000000000000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x0) pidfd_open$auto(0x1, 0x0) 11m58.424169374s ago: executing program 32 (id=419): unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0xa02000000000000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0x0) pidfd_open$auto(0x1, 0x0) 4m25.602553696s ago: executing program 4 (id=2700): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) socket(0xa, 0x2, 0x88) (async) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = socket$auto(0x0, 0x6, 0x220fdb99) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, r3, 0x8000) (async) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, r3, 0x8000) kill$auto(r2, 0x11) 4m24.662217685s ago: executing program 4 (id=2706): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x32800, 0x8) io_uring_register$auto(r0, 0x23, 0x0, 0x0) 4m24.636591602s ago: executing program 4 (id=2707): mmap$auto(0x0, 0x20000000000000, 0xd2, 0x40eb2, 0xffffffffffffffff, 0x5) unshare$auto(0x40000080) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x2000008, 0x29, 0x0, 0x1bff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)='\x00', 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x8000000009) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) r3 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x212bc0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/duv/\xc0udio1\x00', 0x100000100000a3d9) select$auto(0xc, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xd, 0xe, 0x10000000000004, 0x3, 0x15f4da0a, 0x3, 0x81, 0x1, 0xa56, 0x2, 0x6d3c, 0x9, 0x0, 0x5]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'dvmrp0\x00'}) close_range$auto(0x2, 0x8, 0x7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xa0007, 0x1, 0xb4, r3, 0x11) prctl$auto(0x3b, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe97d, 0xe3, 0x732, r3, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 4m20.727468416s ago: executing program 4 (id=2720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) statmount$auto(&(0x7f0000000000)={0x5, @raw=0x5, 0x6, 0x4}, &(0x7f0000000040)={0x0, 0x1, 0x200, 0x200, 0x5, 0xfffffffffffffffd, 0x1000, 0xf, 0x4, 0x3, 0xfffffffc, 0x80, 0x1, 0x3, 0x400, 0x0, 0x2, 0x6, 0x5, 0x7fff, 0x5, 0x400, 0x4e, 0x1, 0x9, 0x6, 0x7, 0x7, 0x4, 0x3a9, 0x0, [0x7, 0x7, 0x7ff, 0x3, 0x715a, 0x4, 0x2, 0x6, 0x2, 0x4, 0x5, 0x3000000, 0x83, 0x7, 0x7, 0x7f, 0x9de, 0x3, 0xffffffffffffff8d, 0x6, 0x9, 0x9, 0xcdec, 0x3, 0x7, 0x0, 0x100000000, 0x7, 0xe93, 0x0, 0x0, 0x7fff, 0x2000000000000008, 0x0, 0xf6b7, 0x7, 0x5, 0x2000000000006, 0x0, 0x1000, 0x8, 0x8, 0x80000001], "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"}, 0x9, 0x2008) fcntl$auto_F_CREATED_QUERY(r3, 0x404, 0x5f87) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001240), 0x900, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r4, 0xc0045401, r4) io_uring_register$auto(0x2, 0x1a, 0x0, 0x1) ppoll$auto(&(0x7f0000001280)={r4, 0x4, 0xfff}, 0x9, &(0x7f00000012c0)={0x9, 0xffffffff}, &(0x7f0000001300)={0x7}, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20c8088}, 0xc, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="38fc3033e733eac40677aba3b13c6a84cf81fbf0b24c7a9887b761efdccb352acc947d97b2c6faeb036dec4aa6957e7d6c305500650ee5a794cbce95756be83dafef196a7019a41ed7d86191a76b85aa34e0963e35d3f5643f18c41d62627f1f6b3442a14190e69f96c818ff192ba24ed834ff77d5778d8ea140b4b1bd", @ANYRES16=r2, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4008800}, 0x40801) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) 4m18.921181123s ago: executing program 4 (id=2729): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio18\x00', 0x28001, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio18\x00', 0x28001, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) socketpair$auto(0x2, 0x7, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ip6tnl0/name_assign_type\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x8, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x8, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket$nl_generic(0x10, 0x3, 0x10) 4m18.48280898s ago: executing program 4 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040000002fd4607fa6399c32dd5d21aad8548d9aee47eb11ea78e559e0dc2eea052624f979504b5c7669ed54b3cb597ba21c36aa0aa202184ca0f7f868122c414c1df3cec02e5cc32b2613e4f4743a948947f0e1ed1607ba81a76de9490f8e0d6f5097bb91c4f1369426511f13cd7849b73b0d5bb4f20cb189e052453e60dd37c0a7498fd82dae9ab735335de5d0dc53fabb42f4328e2df16ae7a16a8a5a0f28c59ca5802447aa6f4a84e8539828d407d4baa634af47", @ANYRES16=r1, @ANYBLOB="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"], 0x104}}, 0x4000) 4m2.99120088s ago: executing program 33 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040000002fd4607fa6399c32dd5d21aad8548d9aee47eb11ea78e559e0dc2eea052624f979504b5c7669ed54b3cb597ba21c36aa0aa202184ca0f7f868122c414c1df3cec02e5cc32b2613e4f4743a948947f0e1ed1607ba81a76de9490f8e0d6f5097bb91c4f1369426511f13cd7849b73b0d5bb4f20cb189e052453e60dd37c0a7498fd82dae9ab735335de5d0dc53fabb42f4328e2df16ae7a16a8a5a0f28c59ca5802447aa6f4a84e8539828d407d4baa634af47", @ANYRES16=r1, @ANYBLOB="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"], 0x104}}, 0x4000) 7.557300874s ago: executing program 2 (id=3925): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) read$auto(r0, &(0x7f0000000040)='\x00', 0xcc) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x161c01, 0x0) ioctl$auto_SNAPSHOT_FREE(r2, 0x3305, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pselect6$auto(0x400, &(0x7f0000000000)={[0x8, 0x4, 0x40000000000000, 0x6, 0x7fffffff, 0xffffffffffffffff, 0xfff, 0x6, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x6) pwrite64$auto(0x2, 0x0, 0x0, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) write$auto_full_fops_mem(r2, 0x0, 0x0) semctl$auto(0x3, 0x2, 0x13, 0x9) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x25, 0x20, 0x0, 0x20) 5.079710435s ago: executing program 2 (id=3937): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13042dbd70009dd2d28d4ffa5e4f08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) r5 = socket(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r5) r6 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) (async) fcntl$auto_F_GETOWN(r0, 0x9, 0x7f) (async) sendfile$auto(0x1, 0x3, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async, rerun: 64) socket(0x28, 0x1, 0x0) (async, rerun: 64) r7 = epoll_create$auto(0x3e) (async, rerun: 64) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x124, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0x6d, 0x0, 0x1, [@nested={0xfc, 0xbf, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @pid}, @typed={0xee, 0xc5, 0x0, 0x0, @binary="87f454b74c8e4e9578d7cba754b5d17e7b508a36dfee9790d341e70ef583e8ffff7892ba30df567a4c377bf8c32ce765acef088e4a3bf9e10bcab15322db3ca33b0a5220ccf3bbe33f8222c26de306eae48fd985ff6b5a5a9229d1f6c445a1dca488443425085e374acc182c63d278a3657f20d855b63683e744c752161656b077dac3ff96d7d69fbef908b63d8d390d82164ae5db8569b7622ffa894d950e285c5665996cea6977d8801620a96f0d526b3d6993e446a71593d78974a90c1b6d3b85f00898d853d608d02b0627270d6275230648a6c394a4d92c5b5dc91b8f48fb489a8dba08b183599f"}]}]}]}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) epoll_ctl$auto(r7, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000000), r6) (rerun: 64) 4.510655943s ago: executing program 0 (id=3940): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007580)={0x20, r0, 0xd35, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) signalfd$auto(r2, &(0x7f0000000080)={0x2}, 0xfe91) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 4.33013896s ago: executing program 2 (id=3941): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) setregid$auto(0x0, 0xffffffffffffffff) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x87, 0x7fffffffefff, 0x0, 0x9, 0x54906bd6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x9}) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x12d83, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x761ac2, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) r2 = dup$auto(0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0x517b, r2, 0x1000) r3 = socket(0x2, 0x1, 0x203) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto(r3, 0x0, 0xd0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r4 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/make-it-fail\x00', 0x80000, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x800, 0x0) read$auto(r5, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) read$auto(r4, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) 4.318803478s ago: executing program 3 (id=3942): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x106) socket(0x2, 0x3, 0xa) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r0, 0x3, 0x1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250500000008000500030000000c0001800800030008"], 0x28}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) 3.569526872s ago: executing program 3 (id=3944): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e00000000000000000005000300000000000500020000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) 3.5314291s ago: executing program 0 (id=3945): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x26, 0x6, 0x101) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout\x00', 0x80002, 0x0) read$auto(r1, &(0x7f0000000540)='/sys/power/pm_freeze_timeout\x00', 0xe0f) pread64$auto(r1, 0x0, 0x7ff, 0x8) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x6, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto_SO_INCOMING_CPU(0xffffffffffffffff, 0x3, 0x31, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f00000004c0)=0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = inotify_init1$auto(0x3fd) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) io_uring_register$auto_IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000000340)="4581e349a02dce9dc5eb98fa2b4201493c380a48358a84ca61b2b6a6d3932e34af548134d9efb4d78497c43c6bb0ed4e175d8e445548443104ae4cc8b94670312b68fd38ffeb848b15ac127b9222e30149aa10b534d4af354e9e8e80ef4d46be73e35a1256848ba84d1e54d74e0b26cb3a8cc8b892431e28b6fe418e83aad5e68b0d66b39ca207aa21b8ef78a85244cfe8d56ecf3f6ee355e481835bb5c7f1161aa21851bdf71153c617d98f0ab625bc157dd72dc8207186c41181a0647ac968", 0x7ff) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000500), r4) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf25170000001800018014000200767863616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000840) ioctl$auto(0x3, 0x5411, 0x38) 3.339803446s ago: executing program 5 (id=3946): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x2002, 0x0) (async) mmap$auto(0x8c, 0x400004, 0xdf, 0x9b72, 0x2, 0x408002) mmap$auto(0x0, 0x2020009, 0x1, 0xeb0, 0xfffffffffffffffa, 0x8000000000000001) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x10, 0x3, 0x6) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async, rerun: 32) ioctl$auto(0x3, 0xc0045540, 0xb551) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x73) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) (async, rerun: 32) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) (async, rerun: 32) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={r0, &(0x7f00000000c0)="06d147a41b6de0dcc1b265bec9e3e69591a02f44abaa5746cfda35de84221b385c389a17587f61f01a6107bc7c53baf7e68b32ca27eab1f6f01fbc3cdfd6a0b9cb4f1e6fafa7cbb7f34f5cde4e3fb5dfa75a1248c0570b7420538d043cf788a67a8f9f513fa5b7f941caef6665735bbccbc364ef27dd6733a071", 0xffffffff, &(0x7f0000000180)="93cb039b0f32816677e28fffe639c52f237f7467751a10fc02e5b8e250b6a79a4d927802c38a05aaf3903a8a6f4344309697e4bbf4db796a748cf4fe23f21690a158902de7888bc7cb31edef2fb631c5b1b7d2d8e5c80d469c9f030211c0581896df129439a0dc46878aa72ae727e6", 0xed4, &(0x7f0000000040)="8540bd17b078584afc8849514dcf1588b308811f6e3ca91b4a1fc6a3d9222551c22ac31b384aa798dd", &(0x7f0000000280)=0x2}) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x805}, 0xfffffff9, 0x10, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) (async) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000340)={"5a249d828c682515f22caf85257c58736357e89c040905c3f67e79cd443270ee", 0xf, 0xffff, 0x0, 0xe72, 0x80000001, 0x0}) getsid$auto(r4) (async) write$auto(r3, 0x0, 0x800f) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) (async) r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2a004, 0x0) ioctl$auto(r6, 0x3b9d, r5) 3.298650032s ago: executing program 3 (id=3947): r0 = socket(0xf, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x120800, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x0, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES64=r0, @ANYRES64=r5], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) ioctl$auto(0xffffffffffffffff, 0xab04, 0xffffffffffffffff) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000380)={0x5, 0xe, 0xec, @lost_msgs={0x5}}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 2.408458442s ago: executing program 0 (id=3948): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r0 = socket(0x11, 0x80003, 0x300) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x6, 0xfffffffffffffffd, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, r3, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$auto(r2, 0x0, 0x6) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) pread64$auto(r6, 0x0, 0x100000001, 0x100) sendfile$auto(r0, r1, 0x0, 0x3) r7 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) write$auto(r7, 0x0, 0x1) 2.081388781s ago: executing program 3 (id=3949): mmap$auto(0x0, 0x20000000009, 0xfff, 0x8b72, 0x1000000002, 0x80008) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1, 0x1, 0x4, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="edfc0428000000000000000973a2", @ANYRES64=r0, @ANYRES64=r4], 0x310}}, 0x4004010) readv$auto(r3, &(0x7f00000000c0)={0x0, 0xfffe}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto_proc_timens_offsets_operations_base(r1, &(0x7f0000000300)="d2b5631b89bceea804486161c25f19f39b460b8fccf536f34c13210173724219a7bc436f2e0a671bf4fa0c9ce97bd55764a13bcdaa99e86554d06c13b592a93fdbe0a4a194bdc8965792ca408b379ba1836cd75e20028ad01dffdaf6fd58d9e7ead7e7ca0d6031ecf618e1e635c7b553b7fb61e4e669afc4adc2fc3e8cae1bd7b98856a0625b7df265c158e00e92d3a3f213fc9e648d21da9647d1fbdb5f1f68d27e3c3e81", 0xa5) (async) write$auto_proc_timens_offsets_operations_base(r1, &(0x7f0000000300)="d2b5631b89bceea804486161c25f19f39b460b8fccf536f34c13210173724219a7bc436f2e0a671bf4fa0c9ce97bd55764a13bcdaa99e86554d06c13b592a93fdbe0a4a194bdc8965792ca408b379ba1836cd75e20028ad01dffdaf6fd58d9e7ead7e7ca0d6031ecf618e1e635c7b553b7fb61e4e669afc4adc2fc3e8cae1bd7b98856a0625b7df265c158e00e92d3a3f213fc9e648d21da9647d1fbdb5f1f68d27e3c3e81", 0xa5) madvise$auto(0x110c230000, 0x1, 0x9) (async) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x4c3982, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(r2, 0x0, 0x7, 0xe, 0x0) (async) recvmmsg$auto(r2, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x7, 0x3, 0x91, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x80805, 0x0) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x80003) memfd_secret$auto(0x0) (async) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x3) (async) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x3) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) 1.978134528s ago: executing program 5 (id=3950): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) (async) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) (async) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x5, 0x0) (async) ioctl$auto(0x3, 0x80811501, 0xfffffffffffff4e0) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/index\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) (async) unshare$auto(0x40000080) socket(0x11, 0x3, 0x400) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r5, r5, 0x0, 0x5) (async) madvise$auto(0x7, 0x3, 0x4) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x646502, 0x0) (async) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 1.971529843s ago: executing program 0 (id=3951): unshare$auto(0x8000000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) nanosleep$auto(0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7ec}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(r0, 0x5419, r1) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000001280)="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", 0x458) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) r2 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r2, 0x0, 0x1, 0x5) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd5) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r3, 0x7ff, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x27fff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000fc0)={0x9, 0x10000, 0x8000000000000000, 0x8, 0xe, 0x6da, 0x1, 0x4, 0x6, 0xb, 0x4, 0x2, 0x8, 0xd3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0xfffffff9, 0x81, 0x0, 0x401, 0x0, 0x0, 0x3, 0x8000000, 0x7, 0x1, 0x4, 0x0, 0x3, [0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x17, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe], "4e20a4b470fc7be2c85849f1acbb899156537ca3bdcfbec40766e0f02078a211ec770bc9105663ee83bfcb2526250ddbf2574b51f63078f5a35a053edbd62e18346fbdc740d64532051a7b3315feb8bd3d60c62e39f921173836286dcb23d388533dab5c73d6cfb6c43106415467a7131e45ff83f9496efb87ae287649830a5fb71a6a6b387a3f62"}, 0x7, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) 1.768886314s ago: executing program 2 (id=3952): ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)={0x7f, 0x0, [{0x8, 0x8, 0x80000000, 0x5, 0x6, 0xd8, 0x4}, {0x9, 0x3, 0x4, 0x3c, 0xfff, 0x3}, {0x2, 0xfffffffc, 0x9, 0x0, 0x1, 0x1, 0x7}, {0x7fff, 0xe8, 0x80000001, 0x8, 0x0, 0xfff, 0x2d57dc88}, {0x6, 0x4, 0x0, 0x0, 0x9, 0x80000000, 0x5c}, {0x7, 0x5, 0xa, 0x0, 0x4, 0x5, 0x40}]}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:03.0/rescan\x00', 0xa901, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) 1.430287628s ago: executing program 5 (id=3953): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) (async) r0 = socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) r1 = socket(0xa, 0x5, 0x84) setsockopt$auto(r1, 0x10000000084, 0x23, 0x0, 0x8) (async) sysfs$auto(0x2, 0x2, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async) readv$auto(0x3, 0x0, 0x1) (async) setsockopt$auto(r0, 0x107, 0x8, 0x0, 0x6) mmap$auto(0xfffffffffffffffd, 0x8, 0x4000000000df, 0x140eb1, r2, 0x300000000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) (async) read$auto(0x3, 0x0, 0x7) (async) r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040006}, 0x800) (async) socket(0xa, 0x801, 0x84) (async) r5 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000140)={@_si_pad}, 0x9e, &(0x7f00000001c0)={{0x7, 0x3ff}, {0x9, 0x1}, 0xffffffff, 0xb, 0x0, 0xa713, 0x7, 0xc388, 0x8, 0x717, 0x7ff, 0x1, 0x9, 0x7, 0x1000, 0xc}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) io_uring_enter$auto(r5, 0x1, 0xfe, 0x81, 0x0, 0xd) 1.429461564s ago: executing program 2 (id=3954): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0) prctl$auto(0x21, 0x1, 0x2, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/mei/uevent\x00', 0xe0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='5', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) ioctl$auto_BCH_IOCTL_FS_USAGE(r0, 0xc040bc0b, &(0x7f0000000140)={0x3, 0xc1, 0x0, '\x00', 0x8, 0x0, [{0x8, {0x1, 0xb, 0x1, "23bcad8dfd87593d4627d8"}}, {0x2, {0x70, 0x9, 0x14, "682d4219f61400e718"}}, {0x461, {0x5, 0xd9, 0x9e, "28e55cda0a5a848644a8fa6f2f9ea28bed26386796a73d2181d69f688015a049b1d857f50362749a85f1926e188350caccdc990fb1b630cc9d4be958e3ea9b16fd6edd33a3625ba9d086378543465362d7d4ae4d8d4b62ab206d285af10d3eabdab952ccb89bc64a7804dcd740e12430314a02f01d2397d9ec93de1492d27bfd6b775538968a1e38ea355aa548d7cfa6b561436bb84b65ca065492e7ceb6833ca71eb5e0634023bcfc75ee0cf64a8d70cacffff4499e4c09dafd0f46e528c77c09ec541fe50ea116d081ffa4317100000f40ebc3b2a4286c5b"}}, {0x7, {0x16, 0x1000, 0x29, "d48225c6ecd33ce1950d85f3df1965d780953c9ec78eb7f5a517c353168b26f1120a35aae061b6c7836ba4ed8daeda70e717b1f7b138a612972d08fac9f6470f1c5e16529bfb4f34c6fcfa9571a2269a8959ff0bc19a62cb4e01c2aa0049fdfdf4c7c382780b32a2a6c73059ece33eea52fb2d2a8ca4d013c68cfca331380d6c959aab970e7ac944d1ff02cc5bc4e8b0155cc12a31454ef913cf7cf3c7572a54dcdac3d76d34402716032c5a97ac437d73f61a5145407ee2046ed4cf974e1e3ff9e81c9f2dc832981ea5e4e50265cd395d077eff92f7803e087e73b9b7025147cf02cc15faa0bcc361d01d9f0f56052522f32008b81700a0c4820b845e3649c6eb23193280bb77d4abed13e366b92336861753ec784eeee2cc92b6567d50b8e5d2910abb9a4b13dc7e5dc494d0a323a028b98751b5041e635580f2fe2bd3d5b2a3fe80f44a71f1ab6c2982350f97acab3b9848b7d9a4637c76e0f20e9558bb87ed8b28b211b31684d7324286e9a1d2d9001d8b9daa5e670dad014bb69d95ddad19f09eb817b3dc37a96eca1e2407d876ecab3bf448e6d2bf4833749c514d5656c899ad8cf70ede5eabc900499013418238c676d9d4dc1274cb785fd52a1de4c9c1ba4a7c281aefcb6f50d180ef047679310726c87ae71aff50b96b2e5e0742a47a3f2cae31dcfa715c2c154ca54be166daa17eca8171f5f459ecef568a45b1aa6efac2c6be1a5a6b590fe7d58ab3c83094a1a755da9f715838ec10cfe0dba72f2cd1a4c4b7474de32b6adebf307a5ffecbfb5986c486a033c28cffda6452a3c8d299b98861f6efe216f9a95f5aaaed242e8d1348ad8f037fd9367b234c6fd4812d615e358b1685f98afcd3d228fb303b1d292aef40c9a9bc9c9a8558111092e5e336c76cfe6025ea7852eed9657706c4c5cae84ff0bec57464b16893146c17f4d403fed6ef981a98bb42c8e53f77e7dfb0c7a46e265ad92d5f6e7400928d10354afc49efe4077fb83bfbd24cb8680736c4eee4d720f82db5586bf302b9fd710c13dd9f3443442bebff5285c7f346b757013b6a5df480d60d41d91fdda3d0a0bd419d78ecffc2990cf885468603cdc225a1884b08063dfd5fd92ddf7f23a9f2c218b141d41e0d378ffd1cd11335ad150537abd136bb378656619e2396c282c22f019811532681490203df2c0e316a77c6bbf2a1729f6196b364217d0895a371d84748bf93042463af6cec1ae1dc6fa65a98814dd6837af8518b40525022e1e103cd27e4c43b54a62719612f56fb35b0ba9e6b877d701cc47a6b6b501aad3a2aa9c346bf32c1e269329de7e7782ac117538d1dbbd87a53159178ae515e3efafed46bd87ab6223ddfb15fa1f45ea265661152d699f34d4b152cb987b26fe19516212762a6fc8afd2fd7232289180a91735db74ed2e81b1503741f73efd615499d80f1aec7616bd2df82d74122b0f0e552d884b7774dc911366585575b71a3e79683dfeb047322f5096cafabadcf849a2324ca3f79bbbb380c8748694b301a77528f44635a0213b6a9e28277ebc9e1a4e89dd0806292c51c75a3eef236b654e214e6c07eb85f8dfaccefc34bf608bb5dd3067aee9d9a32757d9c9b7dbcfabd849fd32c3d45041ed15d24bc6a0083cb82e0acfe26ada94bdc8868b4183c93a89ffe825358f3e8735fffda7315caabc59a5e5936d68e6cc1c5614369190a33e7fe4245b4eb5246ee004d9f8e4c817a596f361bfd95c8bb7fccf97b4ce5fa066e344b4a471a42975473368d7ea86017e7e75adcec0fb197ba507194898cb69e8422864860b625c28036aebeb7e7592e4efc294e48961deebb45ff3ff04c42b53d011a9dd4cea75b5548c9726057a413daab1d5b72c4c2256c50ab61d8a3ae66ccf5a636016974bcffe7240bdace313f77d2cf53cbafc04e83e9c3eabba2548f998262293a496d61545f286e29347939841607b66e0c86bf9c8a59a61da3cb1ab1ad20ecb7bbc3bca76a047bb86d90f1a8d389d67efd74013ca427bfc3df00c2058eb1e1440f7ad42a95de8b47e0276dfe2065b975f5cb924a0a1363fbf11d5f4e3672a6a1f66a92912574ce2f83fae7a28e59dbc602c2d6c0e752d9e0e09da35b3a720342e259041026f413dd7b3bf63b1fefe9b5cf97b2b418eea2f8cfc20d5212911d22ab42727924820f7b7005e1609c7513651b8ea01696c8276d084598294cd09426c34c402c9bf65fe1e4aae41aa4126d736dc2f4a76a7483f913c785a9f0cc44bd18c04d229c27cf8462bbb8f840535e85d3518fd2025c447fc9a546881553c00193112c21626b9b2bde524474ec5ae6e1b29736728bc4adc584a51d201b9ae7a27380a9b5a6f70951ca724fb5d4d2ea2c30767ff5b4f14de5049dab69fa63ce39d90087b7e587a936aea8e166ed2b8262a7a240f0a038cc7e7d977b50130625382d55588d17fad7aff2f9d8bd223cec943f909c080ec1104cec7db86b426185190c06e0a71e0b0e43e06369263be77129f08ca5e0988ea82c190fe49539a24342a8b80b12b3f261b7c37a88a7b16cc7f3b0180437db67ec2886a3ecdfa3e12affb8627da163355673ee829f075f68ce2aef7fcc0c25174244dbea191965ef5987b5051668def8f32c5a2bae6d03ccb8546eaf7b9e9430b05b3b0140db7e88b315ab96d2c680c1132bd8f8f343b2639b571f81cd7221a15ce86e938f458f892fb5890dec7e3cfd250569977fc83e760dab6499edf96007d0acff313e455c0bd354a0ed756619c0cb1b1643157d394d2e7dfa2883717bcf434b8a3e4163c81766cbcf08f69f190e6101f8b71b9258c97532bfecf2e3e7bd177a7a0dab86de0ef3a758fb38060c897a7ddcde268cf518df838d0e4385ceddceee43a268f7d71d2c80a3c4b73abe24d68954860d04faf317390d3b02162617ee53d422c9be1a570ebd5e43aa29aca9976f236e467a397ea82dc18f2364f33c15361192deda7a62abb184f38ff20038f4be80d12638094fa5281f68ba2f5680f1c2ef687dc1ff21ee6496e129a021a4ac20611c62dc5192eecfa34bac688ea82f1c717021401447895ea35fad68698082409252ae3458fcfd9d777eb556f3c0f739ccef4170948333256cb2bb8920308c3368b82a7f98ba91a7a630c078c35d3f95c15dcc2ad0fa4fc18e2749e6dd17fb219dceb22dbeaff91863057a8264c7d4e5a615d7362d3f6be9b268a198dbf00fe2eccac27f58c83b241ed7f0ecf85a6e7f1b884720efc351b98315c5280c78137d96250956235a7fd323e3b557738aa35420d0d7200b202c448e66c81910fdc6e04cace0ebfb07ec4e4efa4bb9ebbcf684eddcda88dcbf97b433a236416f027ff59a7ab819c1eb8c9b3e29d32881a9650dcd646660da4c914de02b7b6e21b837b43d77102f2dc6159f7d9a1904080dcd33c34dfc05be7b91a73120ed0f9ee41b1d9f107881a8e27179dd706bd37facc45e2bac6c1423b184b3a28de6934ee6ec52647b5d443d4dd7a2d5e85050bad08cc834a893a9084bcf3d3e79f74039d689188db4a17f8d6c516e435b996a8839ff69b42d1441b7ed6482264f84b78089cc3e7d26dd16ad3aebd0829f6102a0ab9d0f142b0f1e8b2c1ddc12933d0aadc47685c23005816d1d414ce1078641f84fc49dbbd889d26d89264fdb1a83cf66d58b9b0b3b622fe98052eb318049afd7287841edf733befaefaf4449860158426639d3621368cfa0bb4225c37727051e3ef0c39803719036ed6c3060f564914d5732b994da696054f1869e89e341a185100b0cd606362b863b8473e327c4c5aea07cf0a10ac8368466a953365485e14cb41b2db07debf2e35494f56c6d626c0c736a452f52e47563c8daa31b5dbc3c133fa9dbbae23c5c662bb26d83fe8971f467f0ede49685e53cf71b7388eae185e968f3fb89aff4b5c617cbf5cdf1c303eb0b7992bc63616c3eb48adb00dba5777778c2982ebe977299e06057823e2981322cdf05c83eaaa8d91dd4c30cd20c0168ec5937e38f5ad67bbcdfcf732bed6359f370626c6d06478167a28954569ce7963bbb32b1e372906f556a0553d31825a0e70a640bb0778b873513cd1b3a73fab3b1e6555ba9335792f275c53a899f337e32bb87e8a25994eab6c18f14164dd71cf1ab52896bfb74818036140452fd529f4cf057b8b7f131327389d26e2fe0b081a42469cd7b92a4f51c1bddf56d95f4e3cca9b5a76997acdd70f0d21f4096e415718037a996b2bfc2f516bbcf96cbdef54bf3e753cb116a237bcb2f089d03917fc19ab43be19b4361ce9e4c9475fa7f690586920c01309d983890a96539c442afb069a53e2977851ec2682d69e76ff35e63ca27138b03d4c07183363fd38ee351bff513ae5ce8b3f4a95a123c041345d8f205e7eb840ee743cc2a232b0d96769c585d258f81afbe35e6e9c8d8d80e1d70627938598ef920cb5a26eca5b4d6b9d13df71f901bce02b8a4112661594520be2a37a986602aa175d43e56ccc1ca988342d076607174c71e11059da997e5b4aca88cb68eec9be5f5d36b67954e02d57a178dde4fec75ec20e1b7d35870882317bb77867d354b33603741de541d72b433d48f42b818f9ce9a49a050c883d1e33b472a151213f706b14893a09e113851ee0057caee89f698a6a7eeaf57cd62b132fbb23cbe041720aa0a21d5a11957463385323610f7f414f12c2efc17c8a5d0b619f599f7239fdb4df866838a26248333083f850950e8690072df0734c945834b42acdaaa334124aa0f1ce3fc1e89fcaecbed8e97e039d5fe0ec1f814ef10818116eb1a89f1eeed73c0c1eaa47d50859533fba7f7f00193012bb1a82ace3509e6b043bf5e3ac4a8208c681ef86d5aae0d18611a38e037a65d55a3b281ba25248cf4a53ce467b9f52ec19a5af4467e7bef67da3e9a017c0a3a5fd9be3bae74a2bc857b998ec678fc2134afd30ecc6a3bd5fd11d230b08dde25d5fc7c67f451f1e6ee5c78e412ade4845cd9b466165aeed4e69ab3810d877886e75d98f29b63d79ddf581082dfbb280c30795cde377ee45656657fb750a90c3cc5e71742370e3a13dd3ad9a0a7a3d184e1ff4d3dadacbb4137519f2faae361d064b4351a560419cf27ef93501bba0ce5cca1e7a4385ac445e5f6e7bb4676a2f2495cb159f69ef301345ef990c77ed10e8fb82731d832bf31eabc2a4400770cafdbee2bd21471aee9605a0e33fbc5c1048461f17cb9b287c8dbc3f11b46edb8517a9ea5220bb332a112004d9f47c87a738878cec01830c27ce91a35be9325efdb188a72330263efdd68a034cc94214864604c7e72116745e0b3a50bb55dc930a1335a102c54ec29650ca697335b5202b2642cc93e328cd433b765bdea58d9ccf58af9824c4cca0796619d28a01cf37d4cf14ff2e7f571deee2bbda7fcf7ccdc0ac304d2cc675b95a0cddce2b5038409447da43b34b5eb410fa320f3f29a753e1b2532c7d10e90e7036c4c64b226b094aa6304524652a8f31926f2dd1c46b461b3d37bf8b507e98cbff821b5ebd36620ac141efdcab03dd278336b6ef084dc6ffe3c8ccfefd7a9e8d92683b44ee3dbc505155e7951f697a5b728e6645f1c65c533e38b96bac13cfdca74b56e255c6b98c76d5d9bc3ac0861fe8ea1972ed91cc78934818cbdd199b1d96804a326ac8198b09d032ff08388f822d9109825cd2722741609764da81a4df5247203467905e9bc0a52537e8703fa42c727df776b01b0585517ae84635618c9d9f34924a44e088e8fe4eec9cac7b96f719f38291c262ddd25b0"}}, {0x79b, {0x66, 0x31, 0x9, "93b1a00d9342e1a9df41fa0c2f85a6d22f6b1b0505a07efa9af4da99de2bfd65ce9d20cd723a9e377c07fcf7eeaa2a46d2"}}]}) 1.06754836s ago: executing program 5 (id=3955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e00000000000000000005000300000000000500020000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) 1.063040295s ago: executing program 0 (id=3956): r0 = socket(0xa, 0x3, 0x3c) mmap$auto(0x0, 0x4, 0xe0, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x311) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8101, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clone$auto(0x4, 0x6, 0x0, 0x0, 0x7) setreuid$auto(0x0, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000180)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, 0x0, 0x263f) msync$auto(0x8, 0x5, 0x6e) 942.09368ms ago: executing program 3 (id=3957): r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x381, 0xde3, 0x800000000008, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x0, 0xc3f, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfff]}, 0xa, 0xd) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x8000400) settimeofday$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x1}, 0x0) r1 = socket(0x2a, 0x2, 0x6) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(0x3, 0x0, 0x9) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd10, &(0x7f00000001c0)) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$auto(0x7fffffff, &(0x7f0000000c80)=@bpf_attr_5={@target_fd=r5, r6, 0x8, 0x8, r1, @relative_fd=r0, 0x10000}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000d80)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r8, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2100018}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x114, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PHY_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_PHY_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5e}]}, @ETHTOOL_A_PHY_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PHY_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PHY_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PHY_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x38}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb57}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x46f}]}, @ETHTOOL_A_PHY_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x30000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'caif0\x00'}) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) 903.746058ms ago: executing program 5 (id=3958): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r0, 0x0, 0x0) listmount$auto(&(0x7f0000000100)={0xba, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) bpf$auto(0x0, 0x0, 0x94) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r1, 0x1fe, 0x40000000000, 0x8000}) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 815.898299ms ago: executing program 3 (id=3959): mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async, rerun: 32) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async, rerun: 64) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x100000, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) (async) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async, rerun: 64) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) (rerun: 64) ioctl$auto(r3, 0x560c, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x800, 0xeb1, r0, 0xf) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) socket(0x848000000015, 0x805, 0x0) socket(0xa, 0x3, 0x100) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) 650.371572ms ago: executing program 0 (id=3960): pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(0x0, 0x9) rename$auto(0x0, 0x0) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media2\x00', 0x400, 0x0) poll$auto(&(0x7f0000000200)={r0, 0x9, 0x3}, 0x3, 0x3) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x1f, 0x0) r3 = socket(0x2, 0x801, 0x106) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r2) (async) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0) (async) mkdir$auto(0x0, 0x1) open(0x0, 0x0, 0x10a) (async) socket(0x2, 0x1, 0x10106) (async) getsockopt$auto(0xffffffffffffffff, 0x110, 0x9, 0xffffffffffffffff, 0x0) (async) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) socket(0x29, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) 434.747799ms ago: executing program 2 (id=3961): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x1ff, 0x2, 0x7ffe, @_sigsys={&(0x7f0000000480)="b089237097b88e400300000000000000f3871bb6271d7c7ebbe31d346d1ad5adaa038e646c925d67cb31086631f969ce129b0382463779415e39b70fdf797cdb0eca20afbf1e054a9d1bf9b9fa44a34ce03f43ec9f1a78f74d9ccfca985bd58f840afb597c60703d4620907775a0081ef431f8be10d6c7e35ff52ec27aa3d1eadd29fe6529475538b872e0ee7197cf928e9dff0c41514b651f787dcf714aff7f2ec83d8412b0ad30a25b000f0e52903ebc130811936d5bd79f1741067769d3a50baa767782d8d0426cfc0ded2e1a2cbd4618d2979c41f4c6a9304c", 0xd, 0xfffffffc}}}, 0x3ff, &(0x7f00000003c0)={{0x3, 0x6}, {0x6, 0x10000}, 0xc4, 0x5, 0x7f, 0xffffffffffffffff, 0x400000000009, 0x5, 0x3ff, 0x6, 0x8, 0x978, 0x4, 0x6, 0x1, 0xb180}) kcmp$auto_KCMP_FILE(r2, 0xffffffffffffffff, 0x0, r1, r0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r4, 0x0, 0x1) 0s ago: executing program 5 (id=3962): r0 = prctl$auto(0x41, 0x3, 0x0, 0x5, 0x0) (async, rerun: 64) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (rerun: 64) socket(0x28, 0x801, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) r2 = getpid() (async) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) (async) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0xffffffffffffffff, r0, 0x3004) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) msync$auto(0x80000001, 0x6, 0x3) (async, rerun: 64) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x40, 0x0) socket(0x2a, 0x1, 0x4) socket(0x15, 0x5, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) (async) read$auto(0x3, 0x0, 0x80) (async) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000001cc0)='/sys/kernel/tracing/available_tracers\x00', 0x420040, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x4) kernel console output (not intermixed with test programs): x860 [ 670.544630][T19235] sock_alloc_send_pskb+0x7f9/0x980 [ 670.544650][T19235] ? find_held_lock+0x2b/0x80 [ 670.544673][T19235] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 670.544691][T19235] ? ip6_finish_output2+0xad9/0x1cf0 [ 670.544711][T19235] ? find_held_lock+0x2b/0x80 [ 670.544731][T19235] __ip6_append_data+0x2a98/0x4740 [ 670.544750][T19235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.544772][T19235] ? __pfx___ip6_append_data+0x10/0x10 [ 670.544787][T19235] ? __pfx_ip6_mtu+0x10/0x10 [ 670.544807][T19235] ? ip6_setup_cork+0xc51/0x1530 [ 670.544823][T19235] ip6_make_skb+0x2c8/0x3f0 [ 670.544839][T19235] ? ip6_dst_check+0x343/0x950 [ 670.544859][T19235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.544874][T19235] ? __pfx_ip6_make_skb+0x10/0x10 [ 670.544890][T19235] ? find_held_lock+0x2b/0x80 [ 670.544912][T19235] ? sk_dst_check+0x1da/0x540 [ 670.544934][T19235] ? udpv6_sendmsg+0x2365/0x2d30 [ 670.544952][T19235] udpv6_sendmsg+0x2365/0x2d30 [ 670.544971][T19235] ? aa_label_sk_perm+0x195/0x600 [ 670.544989][T19235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.545007][T19235] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 670.545037][T19235] ? __pfx___might_resched+0x10/0x10 [ 670.545065][T19235] ? iovec_from_user+0xbb/0x140 [ 670.545084][T19235] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 670.545104][T19235] ? inet6_sendmsg+0x105/0x140 [ 670.545123][T19235] inet6_sendmsg+0x105/0x140 [ 670.545142][T19235] ____sys_sendmsg+0x705/0xc70 [ 670.545159][T19235] ? copy_msghdr_from_user+0x10a/0x160 [ 670.545178][T19235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.545196][T19235] ? kfree+0x252/0x6d0 [ 670.545216][T19235] ___sys_sendmsg+0x134/0x1d0 [ 670.545237][T19235] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.545273][T19235] ? __pfx___might_resched+0x10/0x10 [ 670.545295][T19235] __sys_sendmmsg+0x200/0x420 [ 670.545328][T19235] ? __pfx___sys_sendmmsg+0x10/0x10 [ 670.545347][T19235] ? inet_autobind+0x145/0x1a0 [ 670.545369][T19235] ? __pfx_do_futex+0x10/0x10 [ 670.545395][T19235] ? xfd_validate_state+0x61/0x180 [ 670.545410][T19235] ? __pfx___do_sys_close_range+0x10/0x10 [ 670.545433][T19235] __x64_sys_sendmmsg+0x9c/0x100 [ 670.545452][T19235] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.545472][T19235] do_syscall_64+0xcd/0xfa0 [ 670.545493][T19235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.545508][T19235] RIP: 0033:0x7efea678eec9 [ 670.545521][T19235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.545535][T19235] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.545550][T19235] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 670.545560][T19235] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 670.545568][T19235] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 670.545577][T19235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.545586][T19235] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 670.545605][T19235] [ 670.940896][T19240] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 671.170079][T19249] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 671.293496][T19245] ICMPv6: process `syz.0.2860' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 671.358691][T19256] openvswitch: netlink: IP tunnel dst address not specified [ 671.616708][T19267] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2864'. [ 672.193050][T19285] bond0: option all_slaves_active: invalid value () [ 672.608201][T19298] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 673.807242][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'. [ 673.836252][T19311] block nbd0: Unsupported socket: should be TCP or UNIX. [ 673.925430][ T5947] smpboot: CPU 1 is now offline [ 677.479619][T19364] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 677.553683][T19364] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 678.201655][T19384] random: crng reseeded on system resumption [ 679.104854][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 679.233754][T19392] block nbd0: Unsupported socket: should be TCP or UNIX. [ 680.017411][T19409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.196033][T19451] sd 0:0:1:0: device reset [ 682.858796][T19471] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 683.203242][T19479] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2909'. [ 683.953341][T19490] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2912'. [ 684.016877][T19495] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 684.060922][T19495] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 684.069611][T19493] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2912'. [ 684.398598][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.404890][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.565477][T19502] FAULT_INJECTION: forcing a failure. [ 684.565477][T19502] name fail_futex, interval 1, probability 0, space 0, times 0 [ 684.631451][T19502] CPU: 0 UID: 0 PID: 19502 Comm: syz.2.2915 Tainted: G U syzkaller #0 PREEMPT(full) [ 684.631476][T19502] Tainted: [U]=USER [ 684.631481][T19502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.631489][T19502] Call Trace: [ 684.631494][T19502] [ 684.631499][T19502] dump_stack_lvl+0x16c/0x1f0 [ 684.631524][T19502] should_fail_ex+0x512/0x640 [ 684.631549][T19502] get_futex_key+0x1d0/0x1560 [ 684.631572][T19502] ? stack_depot_save_flags+0x29/0x9c0 [ 684.631594][T19502] ? __pfx_get_futex_key+0x10/0x10 [ 684.631616][T19502] ? kasan_save_stack+0x42/0x60 [ 684.631636][T19502] ? kasan_save_stack+0x33/0x60 [ 684.631654][T19502] ? kasan_save_track+0x14/0x30 [ 684.631672][T19502] ? __kasan_slab_alloc+0x89/0x90 [ 684.631692][T19502] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 684.631712][T19502] futex_wait_setup+0x9d/0x550 [ 684.631734][T19502] __futex_wait+0x193/0x2f0 [ 684.631751][T19502] ? __pfx___futex_wait+0x10/0x10 [ 684.631771][T19502] ? __pfx_futex_wake_mark+0x10/0x10 [ 684.631790][T19502] ? futex_private_hash_put+0x176/0x300 [ 684.631814][T19502] ? futex_private_hash_put+0x18a/0x300 [ 684.631836][T19502] futex_wait+0xe8/0x380 [ 684.631853][T19502] ? __pfx_futex_wait+0x10/0x10 [ 684.631873][T19502] ? errseq_sample+0x53/0x70 [ 684.631886][T19502] ? file_init_path+0x4fe/0x760 [ 684.631903][T19502] do_futex+0x229/0x350 [ 684.631917][T19502] ? __pfx_do_futex+0x10/0x10 [ 684.631930][T19502] ? fd_install+0x225/0x750 [ 684.631951][T19502] __x64_sys_futex+0x1e0/0x4c0 [ 684.631965][T19502] ? __sys_socket+0xac/0x260 [ 684.631982][T19502] ? __pfx___x64_sys_futex+0x10/0x10 [ 684.631995][T19502] ? xfd_validate_state+0x61/0x180 [ 684.632010][T19502] ? __pfx_do_writev+0x10/0x10 [ 684.632033][T19502] do_syscall_64+0xcd/0xfa0 [ 684.632054][T19502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.632067][T19502] RIP: 0033:0x7f80ddd8eec9 [ 684.632079][T19502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.632092][T19502] RSP: 002b:00007f80deb9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 684.632105][T19502] RAX: ffffffffffffffda RBX: 00007f80ddfe6188 RCX: 00007f80ddd8eec9 [ 684.632115][T19502] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f80ddfe6188 [ 684.632123][T19502] RBP: 00007f80ddfe6180 R08: 0000000000000000 R09: 0000000000000000 [ 684.632136][T19502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.632144][T19502] R13: 00007f80ddfe6218 R14: 00007fffbed50700 R15: 00007fffbed507e8 [ 684.632163][T19502] [ 684.888780][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.181160][T19513] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 685.886203][T19542] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 685.922361][T19543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 686.050857][T19538] FAULT_INJECTION: forcing a failure. [ 686.050857][T19538] name failslab, interval 1, probability 0, space 0, times 0 [ 686.100532][T19538] CPU: 0 UID: 0 PID: 19538 Comm: syz.5.2924 Tainted: G U syzkaller #0 PREEMPT(full) [ 686.100559][T19538] Tainted: [U]=USER [ 686.100564][T19538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 686.100572][T19538] Call Trace: [ 686.100578][T19538] [ 686.100584][T19538] dump_stack_lvl+0x16c/0x1f0 [ 686.100609][T19538] should_fail_ex+0x512/0x640 [ 686.100631][T19538] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 686.100652][T19538] should_failslab+0xc2/0x120 [ 686.100667][T19538] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 686.100684][T19538] ? d_lookup+0xe7/0x190 [ 686.100699][T19538] ? alloc_inode+0x64/0x240 [ 686.100716][T19538] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 686.100732][T19538] ? alloc_inode+0x64/0x240 [ 686.100744][T19538] alloc_inode+0x64/0x240 [ 686.100764][T19538] new_inode+0x22/0x1c0 [ 686.100780][T19538] __debugfs_create_file+0x11c/0x6b0 [ 686.100800][T19538] debugfs_create_file_full+0x41/0x60 [ 686.100821][T19538] ref_tracker_dir_debugfs+0x19d/0x290 [ 686.100835][T19538] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 686.100866][T19538] ? lockdep_init_map_type+0x5c/0x280 [ 686.100885][T19538] preinit_net.part.0+0x24e/0x8a0 [ 686.100908][T19538] copy_net_ns+0x3ba/0x690 [ 686.100924][T19538] create_new_namespaces+0x3ea/0xa90 [ 686.100948][T19538] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 686.100970][T19538] ksys_unshare+0x45b/0xa40 [ 686.100984][T19538] ? __pfx_ksys_unshare+0x10/0x10 [ 686.100998][T19538] ? xfd_validate_state+0x61/0x180 [ 686.101018][T19538] __x64_sys_unshare+0x31/0x40 [ 686.101032][T19538] do_syscall_64+0xcd/0xfa0 [ 686.101053][T19538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.101067][T19538] RIP: 0033:0x7f09f918eec9 [ 686.101079][T19538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.101092][T19538] RSP: 002b:00007f09f9fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 686.101106][T19538] RAX: ffffffffffffffda RBX: 00007f09f93e5fa0 RCX: 00007f09f918eec9 [ 686.101116][T19538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 686.101124][T19538] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 686.101133][T19538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.101141][T19538] R13: 00007f09f93e6038 R14: 00007f09f93e5fa0 R15: 00007fff9bbe9c98 [ 686.101161][T19538] [ 686.101168][T19538] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880325581a8' [ 686.291849][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.743418][T19565] Invalid ELF header magic: != ELF [ 687.832406][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 688.774811][T19603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 688.781191][T19603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 688.895303][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2939'. [ 689.798322][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2945'. [ 689.825035][T19634] netlink: zone id is out of range [ 689.830157][T19634] netlink: zone id is out of range [ 689.929130][T19634] netlink: zone id is out of range [ 689.982568][T19634] netlink: zone id is out of range [ 690.043600][T19634] netlink: zone id is out of range [ 690.129209][T19634] netlink: zone id is out of range [ 690.207656][T19634] netlink: zone id is out of range [ 690.250615][T19634] netlink: zone id is out of range [ 691.686038][T19668] zswap: compressor not available [ 692.107476][T19681] zswap: compressor not available [ 692.477528][T19700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 692.514782][T19702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 692.759579][T19702] bond0: (slave bond_slave_0): Releasing backup interface [ 692.964234][T19707] random: crng reseeded on system resumption [ 693.812313][T19730] random: crng reseeded on system resumption [ 694.099396][ T30] audit: type=1326 audit(4294967432.607:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19731 comm="syz.0.2966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efea678eec9 code=0x0 [ 694.138931][T19737] netlink: 'syz.5.2968': attribute type 1 has an invalid length. [ 694.168962][T19743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2968'. [ 694.499876][T19762] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 694.618355][T19768] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 694.659962][T19768] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 694.785621][T19774] FAULT_INJECTION: forcing a failure. [ 694.785621][T19774] name failslab, interval 1, probability 0, space 0, times 0 [ 694.911950][ T30] audit: type=1806 audit(4294967433.418:51): xattr=0B res=-22 [ 694.981591][T19784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2978'. [ 694.997533][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.2.2977 Tainted: G U syzkaller #0 PREEMPT(full) [ 694.997556][T19774] Tainted: [U]=USER [ 694.997560][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 694.997569][T19774] Call Trace: [ 694.997573][T19774] [ 694.997578][T19774] dump_stack_lvl+0x16c/0x1f0 [ 694.997603][T19774] should_fail_ex+0x512/0x640 [ 694.997624][T19774] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 694.997645][T19774] should_failslab+0xc2/0x120 [ 694.997659][T19774] kmem_cache_alloc_noprof+0x75/0x6e0 [ 694.997676][T19774] ? security_file_alloc+0x34/0x2b0 [ 694.997698][T19774] ? security_file_alloc+0x34/0x2b0 [ 694.997714][T19774] security_file_alloc+0x34/0x2b0 [ 694.997732][T19774] init_file+0x93/0x4c0 [ 694.997746][T19774] alloc_empty_file+0x73/0x1e0 [ 694.997761][T19774] path_openat+0xda/0x2cb0 [ 694.997786][T19774] ? __pfx_path_openat+0x10/0x10 [ 694.997809][T19774] do_filp_open+0x20b/0x470 [ 694.997828][T19774] ? __pfx_do_filp_open+0x10/0x10 [ 694.997859][T19774] ? _raw_spin_unlock+0x28/0x50 [ 694.997877][T19774] ? alloc_fd+0x471/0x7d0 [ 694.997899][T19774] do_sys_openat2+0x11b/0x1d0 [ 694.997914][T19774] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.997936][T19774] __x64_sys_open+0x153/0x1e0 [ 694.997951][T19774] ? __pfx___x64_sys_open+0x10/0x10 [ 694.997969][T19774] ? rcu_is_watching+0x12/0xc0 [ 694.997991][T19774] do_syscall_64+0xcd/0xfa0 [ 694.998012][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.998026][T19774] RIP: 0033:0x7f80ddd8eec9 [ 694.998038][T19774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.998051][T19774] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 694.998065][T19774] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 694.998082][T19774] RDX: 0000000000000130 RSI: 0000000000161342 RDI: 0000200000000000 [ 694.998090][T19774] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 694.998098][T19774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.998107][T19774] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 694.998125][T19774] [ 695.218684][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.444998][ T30] audit: type=1806 audit(4294967433.858:52): xattr="" res=-22 [ 695.529263][T19793] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.138682][T19817] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2987'. [ 696.618272][T19831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.696394][T19831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.529049][T19847] Process accounting resumed [ 697.705290][T19854] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 697.756036][T19854] CPU: 0 UID: 0 PID: 19854 Comm: syz.0.2997 Tainted: G U syzkaller #0 PREEMPT(full) [ 697.756062][T19854] Tainted: [U]=USER [ 697.756067][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 697.756076][T19854] Call Trace: [ 697.756081][T19854] [ 697.756088][T19854] dump_stack_lvl+0x16c/0x1f0 [ 697.756115][T19854] sysfs_warn_dup+0x7f/0xa0 [ 697.756137][T19854] sysfs_create_dir_ns+0x24b/0x2b0 [ 697.756158][T19854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 697.756178][T19854] ? find_held_lock+0x2b/0x80 [ 697.756200][T19854] ? nfs_netns_namespace+0xd/0x40 [ 697.756216][T19854] kobject_add_internal+0x2c4/0x9b0 [ 697.756233][T19854] kobject_init_and_add+0x11b/0x190 [ 697.756248][T19854] ? __pfx_kobject_init_and_add+0x10/0x10 [ 697.756272][T19854] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 697.756288][T19854] nfs_net_init+0x10a/0x340 [ 697.756302][T19854] ? __pfx_nfs_net_init+0x10/0x10 [ 697.756314][T19854] ops_init+0x1e2/0x5f0 [ 697.756338][T19854] setup_net+0x100/0x390 [ 697.756359][T19854] ? __pfx_setup_net+0x10/0x10 [ 697.756381][T19854] ? debug_mutex_init+0x37/0x70 [ 697.756401][T19854] copy_net_ns+0x2f8/0x690 [ 697.756417][T19854] create_new_namespaces+0x3ea/0xa90 [ 697.756442][T19854] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 697.756464][T19854] ksys_unshare+0x45b/0xa40 [ 697.756478][T19854] ? __pfx_ksys_unshare+0x10/0x10 [ 697.756492][T19854] ? xfd_validate_state+0x61/0x180 [ 697.756513][T19854] __x64_sys_unshare+0x31/0x40 [ 697.756526][T19854] do_syscall_64+0xcd/0xfa0 [ 697.756547][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.756561][T19854] RIP: 0033:0x7efea678eec9 [ 697.756573][T19854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.756587][T19854] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 697.756601][T19854] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 697.756610][T19854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 697.756619][T19854] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.756627][T19854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.756635][T19854] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 697.756654][T19854] [ 697.756672][T19854] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 697.938309][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.634815][T19880] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3006'. [ 698.648326][T19882] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 698.669524][T19882] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3005'. [ 698.781687][T19884] kAFS: unparsable volume name [ 698.897397][T19884] kAFS: unparsable volume name [ 698.966221][T19884] kAFS: unparsable volume name [ 698.999053][T19884] kAFS: unparsable volume name [ 699.026759][T19884] kAFS: unparsable volume name [ 699.057678][T19884] kAFS: unparsable volume name [ 699.095834][T19884] kAFS: unparsable volume name [ 699.129534][T19884] kAFS: unparsable volume name [ 699.156357][T19884] kAFS: unparsable volume name [ 699.214275][T19884] kAFS: unparsable volume name [ 699.263043][T19884] kAFS: unparsable volume name [ 699.308737][T19884] kAFS: unparsable volume name [ 699.329634][T19884] kAFS: unparsable volume name [ 699.367623][T19884] kAFS: unparsable volume name [ 699.391679][T19893] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 699.407370][T19884] kAFS: unparsable volume name [ 699.424634][T19884] kAFS: unparsable volume name [ 699.434461][T19893] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 699.834308][T19901] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3009'. [ 699.847736][T19894] Invalid ELF header magic: != ELF [ 700.215387][ T5152] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 700.224558][ T5152] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 700.613495][T19922] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 700.621764][T19919] vmstat_refresh: nr_hugetlb -72704 [ 700.644165][T19919] bond0: invalid ARP target specified [ 700.995612][T19923] zswap: compressor  not available [ 701.137890][T19951] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.227752][T19951] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 702.611675][ T30] audit: type=1800 audit(4294967441.132:53): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3028" name="lu_gp_id" dev="configfs" ino=82516 res=0 errno=0 [ 702.665311][T19987] ALUA LU Group already has a valid ID, ignoring request [ 703.784266][T20010] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 707.031000][T20074] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.308222][T20048] kexec: Could not allocate control_code_buffer [ 707.575516][T20086] FAULT_INJECTION: forcing a failure. [ 707.575516][T20086] name failslab, interval 1, probability 0, space 0, times 0 [ 707.664294][T20086] CPU: 0 UID: 0 PID: 20086 Comm: syz.5.3050 Tainted: G U syzkaller #0 PREEMPT(full) [ 707.664321][T20086] Tainted: [U]=USER [ 707.664326][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.664335][T20086] Call Trace: [ 707.664340][T20086] [ 707.664346][T20086] dump_stack_lvl+0x16c/0x1f0 [ 707.664373][T20086] should_fail_ex+0x512/0x640 [ 707.664396][T20086] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 707.664420][T20086] should_failslab+0xc2/0x120 [ 707.664434][T20086] __kvmalloc_node_noprof+0x141/0x9c0 [ 707.664456][T20086] ? lockdep_init_map_type+0x5c/0x280 [ 707.664471][T20086] ? alloc_netdev_mqs+0xc91/0x1550 [ 707.664496][T20086] ? alloc_netdev_mqs+0xc91/0x1550 [ 707.664516][T20086] alloc_netdev_mqs+0xc91/0x1550 [ 707.664542][T20086] ppp_ioctl+0x168f/0x2880 [ 707.664563][T20086] ? find_held_lock+0x2b/0x80 [ 707.664583][T20086] ? __pfx_ppp_ioctl+0x10/0x10 [ 707.664606][T20086] ? __fget_files+0x20e/0x3c0 [ 707.664627][T20086] ? __pfx_ppp_ioctl+0x10/0x10 [ 707.664652][T20086] __x64_sys_ioctl+0x18e/0x210 [ 707.664671][T20086] do_syscall_64+0xcd/0xfa0 [ 707.664693][T20086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.664707][T20086] RIP: 0033:0x7f09f918eec9 [ 707.664720][T20086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.664734][T20086] RSP: 002b:00007f09f9fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.664747][T20086] RAX: ffffffffffffffda RBX: 00007f09f93e5fa0 RCX: 00007f09f918eec9 [ 707.664757][T20086] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 707.664765][T20086] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 707.664774][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.664782][T20086] R13: 00007f09f93e6038 R14: 00007f09f93e5fa0 R15: 00007fff9bbe9c98 [ 707.664802][T20086] [ 708.527814][T20102] snd_aloop snd_aloop.0: control 7:-2147483391:4::2 is already present [ 708.604188][T20085] zswap: compressor not available [ 709.202752][T20106] zswap: compressor not available [ 709.584210][T20113] FAULT_INJECTION: forcing a failure. [ 709.584210][T20113] name failslab, interval 1, probability 0, space 0, times 0 [ 709.645928][T20115] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 709.692816][T20113] CPU: 0 UID: 0 PID: 20113 Comm: syz.2.3055 Tainted: G U syzkaller #0 PREEMPT(full) [ 709.692900][T20113] Tainted: [U]=USER [ 709.692905][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 709.692915][T20113] Call Trace: [ 709.692923][T20113] [ 709.692929][T20113] dump_stack_lvl+0x16c/0x1f0 [ 709.692955][T20113] should_fail_ex+0x512/0x640 [ 709.692980][T20113] ? __kmalloc_cache_noprof+0x5f/0x780 [ 709.693000][T20113] should_failslab+0xc2/0x120 [ 709.693014][T20113] __kmalloc_cache_noprof+0x72/0x780 [ 709.693031][T20113] ? do_kimage_alloc_init+0x40/0x320 [ 709.693053][T20113] ? do_kimage_alloc_init+0x40/0x320 [ 709.693080][T20113] do_kimage_alloc_init+0x40/0x320 [ 709.693098][T20113] do_kexec_load+0x1fd/0x8a0 [ 709.693118][T20113] ? __pfx_do_kexec_load+0x10/0x10 [ 709.693139][T20113] ? _copy_from_user+0x59/0xd0 [ 709.693154][T20113] __x64_sys_kexec_load+0x1bf/0x230 [ 709.693176][T20113] do_syscall_64+0xcd/0xfa0 [ 709.693197][T20113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.693212][T20113] RIP: 0033:0x7f80ddd8eec9 [ 709.693225][T20113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.693238][T20113] RSP: 002b:00007f80debdc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 709.693252][T20113] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8eec9 [ 709.693261][T20113] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 709.693270][T20113] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 709.693278][T20113] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 709.693286][T20113] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 709.693304][T20113] [ 709.987192][T20122] FAULT_INJECTION: forcing a failure. [ 709.987192][T20122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.000312][T20122] CPU: 0 UID: 0 PID: 20122 Comm: syz.0.3057 Tainted: G U syzkaller #0 PREEMPT(full) [ 710.000336][T20122] Tainted: [U]=USER [ 710.000340][T20122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 710.000349][T20122] Call Trace: [ 710.000354][T20122] [ 710.000360][T20122] dump_stack_lvl+0x16c/0x1f0 [ 710.000386][T20122] should_fail_ex+0x512/0x640 [ 710.000410][T20122] strncpy_from_user+0x3b/0x2e0 [ 710.000432][T20122] getname_flags.part.0+0x8f/0x550 [ 710.000450][T20122] getname_flags+0x93/0xf0 [ 710.000468][T20122] do_sys_openat2+0xb8/0x1d0 [ 710.000483][T20122] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.000498][T20122] ? __pfx___might_resched+0x10/0x10 [ 710.000522][T20122] __x64_sys_openat+0x174/0x210 [ 710.000537][T20122] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.000559][T20122] do_syscall_64+0xcd/0xfa0 [ 710.000581][T20122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.000595][T20122] RIP: 0033:0x7efea678eec9 [ 710.000607][T20122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.000620][T20122] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.000634][T20122] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 710.000643][T20122] RDX: 0000000000080000 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 710.000652][T20122] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 710.000660][T20122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.000669][T20122] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 710.000687][T20122] [ 710.685706][T20132] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 711.108207][T20137] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 711.191263][T20139] zswap: compressor not available [ 711.645520][T20166] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 711.715953][T20169] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3069'. [ 713.059207][T20208] i2c i2c-0: delete_device: Can't parse I2C address [ 713.077170][T20210] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.119361][T20210] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.162867][T20213] ptrace attach of "./syz-executor exec"[17141] was attempted by "./syz-executor exec"[20213] [ 715.726025][T20213] i2c i2c-0: delete_device: Can't parse I2C address [ 716.259644][T20229] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 716.312263][T20229] CPU: 0 UID: 0 PID: 20229 Comm: syz.5.3082 Tainted: G U syzkaller #0 PREEMPT(full) [ 716.312290][T20229] Tainted: [U]=USER [ 716.312295][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 716.312313][T20229] Call Trace: [ 716.312318][T20229] [ 716.312324][T20229] dump_stack_lvl+0x16c/0x1f0 [ 716.312351][T20229] sysfs_warn_dup+0x7f/0xa0 [ 716.312373][T20229] sysfs_create_dir_ns+0x24b/0x2b0 [ 716.312394][T20229] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 716.312414][T20229] ? find_held_lock+0x2b/0x80 [ 716.312436][T20229] ? nfs_netns_namespace+0xd/0x40 [ 716.312451][T20229] kobject_add_internal+0x2c4/0x9b0 [ 716.312468][T20229] kobject_init_and_add+0x11b/0x190 [ 716.312483][T20229] ? __pfx_kobject_init_and_add+0x10/0x10 [ 716.312507][T20229] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 716.312523][T20229] nfs_net_init+0x10a/0x340 [ 716.312537][T20229] ? __pfx_nfs_net_init+0x10/0x10 [ 716.312549][T20229] ops_init+0x1e2/0x5f0 [ 716.312572][T20229] setup_net+0x100/0x390 [ 716.312593][T20229] ? __pfx_setup_net+0x10/0x10 [ 716.312615][T20229] ? debug_mutex_init+0x37/0x70 [ 716.312635][T20229] copy_net_ns+0x2f8/0x690 [ 716.312651][T20229] create_new_namespaces+0x3ea/0xa90 [ 716.312676][T20229] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 716.312698][T20229] ksys_unshare+0x45b/0xa40 [ 716.312712][T20229] ? __pfx_ksys_unshare+0x10/0x10 [ 716.312726][T20229] ? xfd_validate_state+0x61/0x180 [ 716.312747][T20229] __x64_sys_unshare+0x31/0x40 [ 716.312760][T20229] do_syscall_64+0xcd/0xfa0 [ 716.312782][T20229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.312795][T20229] RIP: 0033:0x7f09f918eec9 [ 716.312807][T20229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.312821][T20229] RSP: 002b:00007f09f9fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 716.312835][T20229] RAX: ffffffffffffffda RBX: 00007f09f93e6090 RCX: 00007f09f918eec9 [ 716.312844][T20229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 716.312852][T20229] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 716.312861][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.312868][T20229] R13: 00007f09f93e6128 R14: 00007f09f93e6090 R15: 00007fff9bbe9c98 [ 716.312888][T20229] [ 716.312906][T20229] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 716.905069][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.905166][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.914948][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.922451][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.929916][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.937162][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.945638][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.953514][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.961526][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 716.968941][ T5152] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 717.372856][T20256] bridge0: port 3(gretap0) entered blocking state [ 717.558368][T20256] bridge0: port 3(gretap0) entered disabled state [ 717.692304][T20256] gretap0: entered allmulticast mode [ 717.813671][T20256] gretap0: entered promiscuous mode [ 717.869130][T20271] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 717.896561][T20256] bridge0: port 3(gretap0) entered blocking state [ 717.903126][T20256] bridge0: port 3(gretap0) entered forwarding state [ 717.951992][T20272] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 718.916510][T20298] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 719.581713][T20318] delete_channel: no stack [ 719.824661][T20320] random: crng reseeded on system resumption [ 720.261021][ T5152] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 720.268568][ T5152] Bluetooth: hci3: Dropping invalid advertising data [ 720.275536][ T5152] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 721.455615][T20352] FAULT_INJECTION: forcing a failure. [ 721.455615][T20352] name fail_futex, interval 1, probability 0, space 0, times 0 [ 721.533148][T20352] CPU: 0 UID: 0 PID: 20352 Comm: syz.0.3109 Tainted: G U syzkaller #0 PREEMPT(full) [ 721.533175][T20352] Tainted: [U]=USER [ 721.533180][T20352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 721.533189][T20352] Call Trace: [ 721.533194][T20352] [ 721.533200][T20352] dump_stack_lvl+0x16c/0x1f0 [ 721.533226][T20352] should_fail_ex+0x512/0x640 [ 721.533251][T20352] get_futex_key+0x1d0/0x1560 [ 721.533277][T20352] ? __pfx_get_futex_key+0x10/0x10 [ 721.533298][T20352] ? futex_private_hash_put+0x176/0x300 [ 721.533325][T20352] futex_wake+0xea/0x530 [ 721.533344][T20352] ? __pfx_futex_wake+0x10/0x10 [ 721.533364][T20352] ? find_held_lock+0x2b/0x80 [ 721.533382][T20352] ? __might_fault+0xe3/0x190 [ 721.533403][T20352] do_futex+0x1e3/0x350 [ 721.533417][T20352] ? __pfx_do_futex+0x10/0x10 [ 721.533431][T20352] ? fput+0x9b/0xd0 [ 721.533448][T20352] __x64_sys_futex+0x1e0/0x4c0 [ 721.533465][T20352] ? __pfx___x64_sys_futex+0x10/0x10 [ 721.533486][T20352] do_syscall_64+0xcd/0xfa0 [ 721.533507][T20352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.533521][T20352] RIP: 0033:0x7efea678eec9 [ 721.533533][T20352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.533547][T20352] RSP: 002b:00007efea75e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 721.533561][T20352] RAX: ffffffffffffffda RBX: 00007efea69e6188 RCX: 00007efea678eec9 [ 721.533571][T20352] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efea69e618c [ 721.533579][T20352] RBP: 00007efea69e6180 R08: 00007efea7624000 R09: 0000000000000000 [ 721.533588][T20352] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 721.533596][T20352] R13: 00007efea69e6218 R14: 00007ffc8fa72fd0 R15: 00007ffc8fa730b8 [ 721.533615][T20352] [ 722.220590][T20357] Falling back ldisc for ttyS2. [ 722.476068][T20362] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 722.609879][T20364] futex_wake_op: syz.5.3112 tries to shift op by -9; fix this program [ 723.657146][T20378] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 723.709916][T20379] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 724.074016][T20380] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 724.145463][T20384] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.439213][T15765] usb usb38-port5: attempt power cycle [ 724.724496][T20402] zswap: compressor not available [ 724.790441][ T5152] bt_warn_ratelimited: 24 callbacks suppressed [ 724.790456][ T5152] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 724.797319][ T5152] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 725.050364][T15765] usb usb38-port5: unable to enumerate USB device [ 726.682801][T20452] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 734.727568][T20564] dump_stack_lvl+0x16c/0x1f0 [ 734.727594][T20564] should_fail_ex+0x512/0x640 [ 734.727616][T20564] ? __kmalloc_noprof+0xca/0x880 [ 734.727635][T20564] should_failslab+0xc2/0x120 [ 734.727650][T20564] __kmalloc_noprof+0xdd/0x880 [ 734.727667][T20564] ? __register_sysctl_table+0xb3/0x1900 [ 734.727687][T20564] ? __register_sysctl_table+0xb3/0x1900 [ 734.727702][T20564] __register_sysctl_table+0xb3/0x1900 [ 734.727717][T20564] ? is_module_address+0x5f/0xf0 [ 734.727736][T20564] ? __pfx___register_sysctl_table+0x10/0x10 [ 734.727751][T20564] ? is_module_address+0x69/0xf0 [ 734.727764][T20564] ? register_net_sysctl_sz+0x228/0x3e0 [ 734.727780][T20564] ? __asan_memcpy+0x3c/0x60 [ 734.727801][T20564] xfrm4_net_init+0xf0/0x1c0 [ 734.727820][T20564] ? __pfx_xfrm4_net_init+0x10/0x10 [ 734.727842][T20564] ops_init+0x1e2/0x5f0 [ 734.727868][T20564] setup_net+0x100/0x390 [ 734.727890][T20564] ? __pfx_setup_net+0x10/0x10 [ 734.727912][T20564] ? debug_mutex_init+0x37/0x70 [ 734.727934][T20564] copy_net_ns+0x2f8/0x690 [ 734.727950][T20564] create_new_namespaces+0x3ea/0xa90 [ 734.727978][T20564] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 734.728000][T20564] ksys_unshare+0x45b/0xa40 [ 734.728014][T20564] ? __pfx_ksys_unshare+0x10/0x10 [ 734.728029][T20564] ? xfd_validate_state+0x61/0x180 [ 734.728049][T20564] __x64_sys_unshare+0x31/0x40 [ 734.728062][T20564] do_syscall_64+0xcd/0xfa0 [ 734.728084][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.728098][T20564] RIP: 0033:0x7f80ddd8eec9 [ 734.728110][T20564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.728124][T20564] RSP: 002b:00007f80debdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 734.728138][T20564] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8eec9 [ 734.728147][T20564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 734.728155][T20564] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 734.728164][T20564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.728173][T20564] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 734.728193][T20564] [ 735.230446][T20579] bond0: option mode: unable to set because the bond device is up [ 738.240297][ T30] audit: type=1804 audit(4294985820.779:57): pid=20695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3184" name="/newroot/235/file0" dev="tmpfs" ino=1246 res=1 errno=0 [ 740.243728][T20754] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 740.307115][T20754] CPU: 0 UID: 0 PID: 20754 Comm: syz.0.3199 Tainted: G U syzkaller #0 PREEMPT(full) [ 740.307140][T20754] Tainted: [U]=USER [ 740.307144][T20754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 740.307153][T20754] Call Trace: [ 740.307158][T20754] [ 740.307163][T20754] dump_stack_lvl+0x16c/0x1f0 [ 740.307188][T20754] sysfs_warn_dup+0x7f/0xa0 [ 740.307210][T20754] sysfs_create_dir_ns+0x24b/0x2b0 [ 740.307231][T20754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 740.307250][T20754] ? find_held_lock+0x2b/0x80 [ 740.307273][T20754] ? nfs_netns_namespace+0xd/0x40 [ 740.307288][T20754] kobject_add_internal+0x2c4/0x9b0 [ 740.307304][T20754] kobject_init_and_add+0x11b/0x190 [ 740.307319][T20754] ? __pfx_kobject_init_and_add+0x10/0x10 [ 740.307343][T20754] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 740.307359][T20754] nfs_net_init+0x10a/0x340 [ 740.307373][T20754] ? __pfx_nfs_net_init+0x10/0x10 [ 740.307385][T20754] ops_init+0x1e2/0x5f0 [ 740.307414][T20754] setup_net+0x100/0x390 [ 740.307434][T20754] ? __pfx_setup_net+0x10/0x10 [ 740.307456][T20754] ? debug_mutex_init+0x37/0x70 [ 740.307476][T20754] copy_net_ns+0x2f8/0x690 [ 740.307492][T20754] create_new_namespaces+0x3ea/0xa90 [ 740.307516][T20754] copy_namespaces+0x468/0x560 [ 740.307537][T20754] copy_process+0x2828/0x76a0 [ 740.307567][T20754] ? __pfx_copy_process+0x10/0x10 [ 740.307592][T20754] ? _copy_from_user+0x59/0xd0 [ 740.307609][T20754] kernel_clone+0xfc/0x930 [ 740.307631][T20754] ? __pfx_kernel_clone+0x10/0x10 [ 740.307650][T20754] ? futex_private_hash_put+0x18a/0x300 [ 740.307680][T20754] ? __pfx_futex_wake+0x10/0x10 [ 740.307699][T20754] __do_sys_clone3+0x212/0x290 [ 740.307712][T20754] ? __pfx___do_sys_clone3+0x10/0x10 [ 740.307733][T20754] ? __fput+0x68d/0xb70 [ 740.307762][T20754] do_syscall_64+0xcd/0xfa0 [ 740.307783][T20754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.307798][T20754] RIP: 0033:0x7efea678eec9 [ 740.307809][T20754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.307823][T20754] RSP: 002b:00007efea7622f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 740.307837][T20754] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007efea678eec9 [ 740.307846][T20754] RDX: 00007efea7622f20 RSI: 0000000000000058 RDI: 00007efea7622f20 [ 740.307854][T20754] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000058 [ 740.307862][T20754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.307870][T20754] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 740.307889][T20754] [ 741.031020][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 741.111159][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3205'. [ 741.130816][T20777] net_ratelimit: 456 callbacks suppressed [ 741.130828][T20777] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 741.506257][T20777] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 742.006614][T20795] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3206'. [ 742.903901][T20754] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 743.701214][T20824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3215'. [ 743.921165][T20824] team0: Port device team_slave_1 removed [ 746.110491][T20882] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 746.244424][T20881] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 747.088476][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.099360][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.885769][ T30] audit: type=1800 audit(4294985831.424:58): pid=20951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3248" name="dummy_udc" dev="gadgetfs" ino=6922 res=0 errno=0 [ 748.993090][ T30] audit: type=1800 audit(4294985831.514:59): pid=20951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3248" name="dummy_udc" dev="gadgetfs" ino=6922 res=0 errno=0 [ 749.441218][T20975] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 749.486865][T20976] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 751.372935][T21032] random: crng reseeded on system resumption [ 751.491612][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 751.601035][T21039] snd_aloop snd_aloop.0: control 7:-2147483391:4::2 is already present [ 751.665303][T21034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.712646][T21034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.803678][T21034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.833617][T21034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.565535][ T30] audit: type=1804 audit(4294985835.106:60): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3268" name="/newroot/195/file0" dev="tmpfs" ino=1052 res=1 errno=0 [ 753.051200][T21065] FAULT_INJECTION: forcing a failure. [ 753.051200][T21065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 753.169963][T21067] random: crng reseeded on system resumption [ 753.251294][T21065] CPU: 0 UID: 0 PID: 21065 Comm: syz.5.3269 Tainted: G U syzkaller #0 PREEMPT(full) [ 753.251320][T21065] Tainted: [U]=USER [ 753.251325][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 753.251334][T21065] Call Trace: [ 753.251340][T21065] [ 753.251346][T21065] dump_stack_lvl+0x16c/0x1f0 [ 753.251378][T21065] should_fail_ex+0x512/0x640 [ 753.251406][T21065] get_futex_key+0x1d0/0x1560 [ 753.251431][T21065] ? __pfx_get_futex_key+0x10/0x10 [ 753.251455][T21065] ? __lock_acquire+0x622/0x1c90 [ 753.251473][T21065] futex_wake+0xea/0x530 [ 753.251492][T21065] ? __pfx_futex_wake+0x10/0x10 [ 753.251512][T21065] ? mntput_no_expire+0x14f/0xc80 [ 753.251532][T21065] do_futex+0x1e3/0x350 [ 753.251546][T21065] ? __pfx_do_futex+0x10/0x10 [ 753.251559][T21065] ? __pfx_mntput_no_expire+0x10/0x10 [ 753.251575][T21065] ? dput.part.0+0xce/0x9b0 [ 753.251591][T21065] __x64_sys_futex+0x1e0/0x4c0 [ 753.251607][T21065] ? mntput+0x6b/0x90 [ 753.251622][T21065] ? __pfx___x64_sys_futex+0x10/0x10 [ 753.251637][T21065] ? __pfx___x64_sys_truncate+0x10/0x10 [ 753.251663][T21065] do_syscall_64+0xcd/0xfa0 [ 753.251684][T21065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.251698][T21065] RIP: 0033:0x7f09f918eec9 [ 753.251710][T21065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.251724][T21065] RSP: 002b:00007f09f9fc40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 753.251738][T21065] RAX: ffffffffffffffda RBX: 00007f09f93e5fa8 RCX: 00007f09f918eec9 [ 753.251747][T21065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f09f93e5fac [ 753.251756][T21065] RBP: 00007f09f93e5fa0 R08: 00007f09f9fc5000 R09: 0000000000000000 [ 753.251765][T21065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.251774][T21065] R13: 00007f09f93e6038 R14: 00007fff9bbe9bb0 R15: 00007fff9bbe9c98 [ 753.251794][T21065] [ 754.100094][T21091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.260523][T21091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3276'. [ 754.881875][T21102] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 755.069181][ T30] audit: type=1804 audit(4294985837.607:61): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3278" name="/newroot/129/file0" dev="tmpfs" ino=697 res=1 errno=0 [ 755.229741][ T30] audit: type=1800 audit(4294985837.607:62): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3278" name="file0" dev="tmpfs" ino=697 res=0 errno=0 [ 755.562259][T21117] vhci_hcd: invalid port number 16 [ 755.750414][T21112] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 755.772060][T21113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.422991][T21146] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 758.063510][T21173] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 758.107416][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 759.130089][T21197] ubi0: attaching mtd0 [ 759.171152][T21197] ubi0: scanning is finished [ 759.193781][T21197] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 759.223074][T21200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3299'. [ 759.383314][T21205] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 759.555956][T21197] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 760.803757][T21244] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3310'. [ 760.886382][T21250] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 760.932903][T21245] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 761.034833][T21245] File: /dev/mtdblock0 PID: 21245 Comm: syz.2.3310 [ 761.088671][T21243] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 761.127181][T21243] CPU: 0 UID: 0 PID: 21243 Comm: syz.2.3310 Tainted: G U syzkaller #0 PREEMPT(full) [ 761.127206][T21243] Tainted: [U]=USER [ 761.127210][T21243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 761.127219][T21243] Call Trace: [ 761.127224][T21243] [ 761.127230][T21243] dump_stack_lvl+0x16c/0x1f0 [ 761.127257][T21243] sysfs_warn_dup+0x7f/0xa0 [ 761.127279][T21243] sysfs_create_dir_ns+0x24b/0x2b0 [ 761.127299][T21243] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 761.127318][T21243] ? find_held_lock+0x2b/0x80 [ 761.127340][T21243] ? nfs_netns_namespace+0xd/0x40 [ 761.127354][T21243] kobject_add_internal+0x2c4/0x9b0 [ 761.127371][T21243] kobject_init_and_add+0x11b/0x190 [ 761.127385][T21243] ? __pfx_kobject_init_and_add+0x10/0x10 [ 761.127408][T21243] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 761.127424][T21243] nfs_net_init+0x10a/0x340 [ 761.127438][T21243] ? __pfx_nfs_net_init+0x10/0x10 [ 761.127450][T21243] ops_init+0x1e2/0x5f0 [ 761.127473][T21243] setup_net+0x100/0x390 [ 761.127494][T21243] ? __pfx_setup_net+0x10/0x10 [ 761.127515][T21243] ? debug_mutex_init+0x37/0x70 [ 761.127536][T21243] copy_net_ns+0x2f8/0x690 [ 761.127551][T21243] create_new_namespaces+0x3ea/0xa90 [ 761.127576][T21243] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 761.127597][T21243] ksys_unshare+0x45b/0xa40 [ 761.127611][T21243] ? __pfx_ksys_unshare+0x10/0x10 [ 761.127624][T21243] ? xfd_validate_state+0x61/0x180 [ 761.127645][T21243] __x64_sys_unshare+0x31/0x40 [ 761.127658][T21243] do_syscall_64+0xcd/0xfa0 [ 761.127679][T21243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.127693][T21243] RIP: 0033:0x7f80ddd8eec9 [ 761.127712][T21243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.127725][T21243] RSP: 002b:00007f80debdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 761.127738][T21243] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8eec9 [ 761.127748][T21243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 761.127756][T21243] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 761.127765][T21243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.127773][T21243] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 761.127792][T21243] [ 761.356489][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.828830][T21239] Process accounting resumed [ 762.503293][T21243] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 764.030890][T21342] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3328'. [ 764.123175][T21346] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3328'. [ 764.801918][T21371] ubi0: attaching mtd0 [ 764.866027][T21371] ubi0: scanning is finished [ 764.894823][T21371] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 765.529976][T21371] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 766.547476][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3342'. [ 766.789540][T21431] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 768.541744][T21462] FAULT_INJECTION: forcing a failure. [ 768.541744][T21462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.584333][T21465] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 768.592791][T21462] CPU: 0 UID: 0 PID: 21462 Comm: syz.0.3351 Tainted: G U syzkaller #0 PREEMPT(full) [ 768.592813][T21462] Tainted: [U]=USER [ 768.592818][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 768.592826][T21462] Call Trace: [ 768.592831][T21462] [ 768.592836][T21462] dump_stack_lvl+0x16c/0x1f0 [ 768.592861][T21462] should_fail_ex+0x512/0x640 [ 768.592885][T21462] _copy_from_iter+0x29f/0x1720 [ 768.592912][T21462] ? __pfx__copy_from_iter+0x10/0x10 [ 768.592933][T21462] ? __sk_mem_raise_allocated+0x817/0x14b0 [ 768.592963][T21462] mptcp_sendmsg+0x1050/0x1ec0 [ 768.592991][T21462] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 768.593014][T21462] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 768.593033][T21462] inet_sendmsg+0x11c/0x140 [ 768.593052][T21462] ____sys_sendmsg+0x973/0xc70 [ 768.593068][T21462] ? copy_msghdr_from_user+0x10a/0x160 [ 768.593088][T21462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.593112][T21462] ___sys_sendmsg+0x134/0x1d0 [ 768.593133][T21462] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.593151][T21462] ? __lock_acquire+0x622/0x1c90 [ 768.593188][T21462] __sys_sendmsg+0x16d/0x220 [ 768.593208][T21462] ? __pfx___sys_sendmsg+0x10/0x10 [ 768.593240][T21462] do_syscall_64+0xcd/0xfa0 [ 768.593261][T21462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.593275][T21462] RIP: 0033:0x7efea678eec9 [ 768.593287][T21462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.593301][T21462] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.593315][T21462] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 768.593324][T21462] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 768.593332][T21462] RBP: 00007efea7623090 R08: 0000000000000000 R09: 0000000000000000 [ 768.593341][T21462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.593349][T21462] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 768.593373][T21462] [ 768.794148][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.881952][T21480] openvswitch: netlink: Flow key attr not present in new flow. [ 769.977061][T21480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3355'. [ 770.394253][T21502] vhci_hcd: invalid port number 21 [ 770.415894][T21501] vhci_hcd: invalid port number 21 [ 771.381068][T21523] size and base must be multiples of 4 kiB [ 771.579035][T21523] CPU: 0 UID: 0 PID: 21523 Comm: syz.5.3365 Tainted: G U syzkaller #0 PREEMPT(full) [ 771.579061][T21523] Tainted: [U]=USER [ 771.579066][T21523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 771.579076][T21523] Call Trace: [ 771.579081][T21523] [ 771.579087][T21523] dump_stack_lvl+0x16c/0x1f0 [ 771.579113][T21523] mtrr_del+0xd1/0x110 [ 771.579128][T21523] mtrr_ioctl+0x922/0xcf0 [ 771.579143][T21523] ? __pfx_mtrr_ioctl+0x10/0x10 [ 771.579161][T21523] ? find_held_lock+0x2b/0x80 [ 771.579189][T21523] ? __fget_files+0x20e/0x3c0 [ 771.579208][T21523] ? __pfx_mtrr_ioctl+0x10/0x10 [ 771.579222][T21523] proc_reg_unlocked_ioctl+0x229/0x320 [ 771.579236][T21523] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 771.579252][T21523] __x64_sys_ioctl+0x18e/0x210 [ 771.579269][T21523] do_syscall_64+0xcd/0xfa0 [ 771.579290][T21523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.579304][T21523] RIP: 0033:0x7f09f918eec9 [ 771.579317][T21523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.579330][T21523] RSP: 002b:00007f09f9f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.579344][T21523] RAX: ffffffffffffffda RBX: 00007f09f93e6180 RCX: 00007f09f918eec9 [ 771.579354][T21523] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 771.579362][T21523] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 771.579371][T21523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.579379][T21523] R13: 00007f09f93e6218 R14: 00007f09f93e6180 R15: 00007fff9bbe9c98 [ 771.579398][T21523] [ 771.766956][T21528] random: crng reseeded on system resumption [ 773.937628][T21570] zswap: compressor not available [ 775.179124][T21602] FAULT_INJECTION: forcing a failure. [ 775.179124][T21602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.264642][T21602] CPU: 0 UID: 0 PID: 21602 Comm: syz.0.3387 Tainted: G U syzkaller #0 PREEMPT(full) [ 775.264668][T21602] Tainted: [U]=USER [ 775.264673][T21602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 775.264683][T21602] Call Trace: [ 775.264688][T21602] [ 775.264694][T21602] dump_stack_lvl+0x16c/0x1f0 [ 775.264721][T21602] should_fail_ex+0x512/0x640 [ 775.264744][T21602] strncpy_from_user+0x3b/0x2e0 [ 775.264766][T21602] getname_flags.part.0+0x8f/0x550 [ 775.264785][T21602] getname_flags+0x93/0xf0 [ 775.264803][T21602] do_sys_openat2+0xb8/0x1d0 [ 775.264818][T21602] ? __pfx_do_sys_openat2+0x10/0x10 [ 775.264841][T21602] __x64_sys_openat+0x174/0x210 [ 775.264857][T21602] ? __pfx___x64_sys_openat+0x10/0x10 [ 775.264880][T21602] do_syscall_64+0xcd/0xfa0 [ 775.264901][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.264915][T21602] RIP: 0033:0x7efea678eec9 [ 775.264928][T21602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.264941][T21602] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 775.264955][T21602] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 775.264964][T21602] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 775.264973][T21602] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 775.264981][T21602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.264990][T21602] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 775.265009][T21602] [ 776.469074][T21633] ptp ptp0: only physical clock in use now [ 777.685341][T21672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'. [ 778.269494][T21659] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 778.391412][T21684] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 778.818156][T21693] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 779.868849][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 780.666890][T21744] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 780.715906][T21744] CPU: 0 UID: 0 PID: 21744 Comm: syz.5.3423 Tainted: G U syzkaller #0 PREEMPT(full) [ 780.715931][T21744] Tainted: [U]=USER [ 780.715935][T21744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 780.715943][T21744] Call Trace: [ 780.715948][T21744] [ 780.715954][T21744] dump_stack_lvl+0x16c/0x1f0 [ 780.715979][T21744] sysfs_warn_dup+0x7f/0xa0 [ 780.716001][T21744] sysfs_create_dir_ns+0x24b/0x2b0 [ 780.716021][T21744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 780.716040][T21744] ? find_held_lock+0x2b/0x80 [ 780.716063][T21744] ? nfs_netns_namespace+0xd/0x40 [ 780.716077][T21744] kobject_add_internal+0x2c4/0x9b0 [ 780.716094][T21744] kobject_init_and_add+0x11b/0x190 [ 780.716108][T21744] ? __pfx_kobject_init_and_add+0x10/0x10 [ 780.716132][T21744] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 780.716147][T21744] nfs_net_init+0x10a/0x340 [ 780.716161][T21744] ? __pfx_nfs_net_init+0x10/0x10 [ 780.716179][T21744] ops_init+0x1e2/0x5f0 [ 780.716203][T21744] setup_net+0x100/0x390 [ 780.716224][T21744] ? __pfx_setup_net+0x10/0x10 [ 780.716246][T21744] ? debug_mutex_init+0x37/0x70 [ 780.716266][T21744] copy_net_ns+0x2f8/0x690 [ 780.716282][T21744] create_new_namespaces+0x3ea/0xa90 [ 780.716307][T21744] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 780.716328][T21744] ksys_unshare+0x45b/0xa40 [ 780.716343][T21744] ? __pfx_ksys_unshare+0x10/0x10 [ 780.716357][T21744] ? xfd_validate_state+0x61/0x180 [ 780.716377][T21744] __x64_sys_unshare+0x31/0x40 [ 780.716390][T21744] do_syscall_64+0xcd/0xfa0 [ 780.716412][T21744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.716426][T21744] RIP: 0033:0x7f09f918eec9 [ 780.716437][T21744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.716451][T21744] RSP: 002b:00007f09f9fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 780.716464][T21744] RAX: ffffffffffffffda RBX: 00007f09f93e5fa0 RCX: 00007f09f918eec9 [ 780.716474][T21744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 780.716482][T21744] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 780.716490][T21744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.716499][T21744] R13: 00007f09f93e6038 R14: 00007f09f93e5fa0 R15: 00007fff9bbe9c98 [ 780.716518][T21744] [ 780.716538][T21744] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 781.244908][T21761] netlink: 'syz.0.3427': attribute type 1 has an invalid length. [ 781.697674][T21779] FAULT_INJECTION: forcing a failure. [ 781.697674][T21779] name failslab, interval 1, probability 0, space 0, times 0 [ 781.779793][T21779] CPU: 0 UID: 0 PID: 21779 Comm: syz.0.3432 Tainted: G U syzkaller #0 PREEMPT(full) [ 781.779820][T21779] Tainted: [U]=USER [ 781.779825][T21779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 781.779834][T21779] Call Trace: [ 781.779840][T21779] [ 781.779846][T21779] dump_stack_lvl+0x16c/0x1f0 [ 781.779871][T21779] should_fail_ex+0x512/0x640 [ 781.779892][T21779] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 781.779914][T21779] should_failslab+0xc2/0x120 [ 781.779928][T21779] kmem_cache_alloc_noprof+0x75/0x6e0 [ 781.779946][T21779] ? alloc_empty_file+0x55/0x1e0 [ 781.779964][T21779] ? alloc_empty_file+0x55/0x1e0 [ 781.779977][T21779] ? _raw_spin_unlock+0x28/0x50 [ 781.779993][T21779] alloc_empty_file+0x55/0x1e0 [ 781.780013][T21779] alloc_file_pseudo+0x13a/0x230 [ 781.780038][T21779] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 781.780056][T21779] ? do_raw_spin_unlock+0x172/0x230 [ 781.780078][T21779] __anon_inode_getfile+0xe8/0x280 [ 781.780102][T21779] anon_inode_getfile_fmode+0x37/0xa0 [ 781.780131][T21779] __do_sys_fanotify_init+0x9da/0xc80 [ 781.780151][T21779] do_syscall_64+0xcd/0xfa0 [ 781.780173][T21779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.780188][T21779] RIP: 0033:0x7efea678eec9 [ 781.780200][T21779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.780214][T21779] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 781.780228][T21779] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 781.780238][T21779] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 781.780246][T21779] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 781.780255][T21779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.780263][T21779] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 781.780282][T21779] [ 782.870253][T21789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3435'. [ 782.940685][ T30] audit: type=1326 audit(6442450960.587:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21788 comm="syz.2.3435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80ddd8eec9 code=0x0 [ 783.415307][T21805] snd_aloop snd_aloop.0: control 7:257:7::2 is already present [ 784.303291][T21816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 784.860738][T21843] random: crng reseeded on system resumption [ 784.900379][T21834] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 785.278591][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 786.157517][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3455'. [ 786.251108][T21883] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.461112][T21888] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 786.517558][T21883] bridge_slave_1 (unregistering): left allmulticast mode [ 786.575263][T21883] bridge_slave_1 (unregistering): left promiscuous mode [ 786.644690][T21883] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.441146][T21882] kexec: Could not allocate control_code_buffer [ 788.802675][T21930] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3466'. [ 788.932713][T21937] netlink: 'syz.3.3469': attribute type 7 has an invalid length. [ 789.036393][T21940] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3468'. [ 789.048087][T21937] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3469'. [ 789.070198][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3470'. [ 789.564163][T21953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 789.739102][T21952] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 792.222082][T22004] Process accounting paused [ 792.379227][T22010] zswap: compressor not available [ 792.689577][T22025] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 792.910197][T22035] random: crng reseeded on system resumption [ 793.587785][T22043] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3492'. [ 794.529614][ T5152] Bluetooth: hci3: Malformed LE Event: 0x0b [ 794.931355][T22080] FAULT_INJECTION: forcing a failure. [ 794.931355][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 795.009208][T22081] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3501'. [ 795.100483][T22080] CPU: 0 UID: 0 PID: 22080 Comm: syz.2.3500 Tainted: G U syzkaller #0 PREEMPT(full) [ 795.100509][T22080] Tainted: [U]=USER [ 795.100513][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 795.100522][T22080] Call Trace: [ 795.100528][T22080] [ 795.100533][T22080] dump_stack_lvl+0x16c/0x1f0 [ 795.100560][T22080] should_fail_ex+0x512/0x640 [ 795.100582][T22080] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 795.100604][T22080] should_failslab+0xc2/0x120 [ 795.100618][T22080] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 795.100638][T22080] ? __d_alloc+0x32/0xae0 [ 795.100661][T22080] ? __d_alloc+0x32/0xae0 [ 795.100679][T22080] __d_alloc+0x32/0xae0 [ 795.100701][T22080] d_alloc_pseudo+0x1c/0xc0 [ 795.100715][T22080] alloc_file_pseudo+0xcf/0x230 [ 795.100731][T22080] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 795.100746][T22080] ? alloc_fd+0x471/0x7d0 [ 795.100767][T22080] sock_alloc_file+0x50/0x210 [ 795.100789][T22080] __sys_socket+0x1c0/0x260 [ 795.100806][T22080] ? __pfx___sys_socket+0x10/0x10 [ 795.100821][T22080] ? xfd_validate_state+0x61/0x180 [ 795.100836][T22080] ? __pfx_ksys_write+0x10/0x10 [ 795.100858][T22080] __x64_sys_socket+0x72/0xb0 [ 795.100873][T22080] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.100893][T22080] do_syscall_64+0xcd/0xfa0 [ 795.100914][T22080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.100928][T22080] RIP: 0033:0x7f80ddd8eec9 [ 795.100940][T22080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.100953][T22080] RSP: 002b:00007f80debdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 795.100966][T22080] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8eec9 [ 795.100976][T22080] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 795.100984][T22080] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 795.101002][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.101010][T22080] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 795.101030][T22080] [ 795.833889][T22095] cougar: G6 mapped to space [ 795.921317][ T30] audit: type=1804 audit(6442450973.531:64): pid=22095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3504" name="/newroot/317/file0" dev="tmpfs" ino=1673 res=1 errno=0 [ 796.491667][T22110] vivid-007: ================= START STATUS ================= [ 796.630898][T22110] vivid-007: Enable Output Cropping: true [ 796.687385][T22110] vivid-007: Enable Output Composing: true [ 796.757869][T22110] vivid-007: Enable Output Scaler: true [ 796.812980][T22110] vivid-007: Tx RGB Quantization Range: Automatic [ 796.898801][T22110] vivid-007: Transmit Mode: HDMI [ 797.309966][T22110] vivid-007: Hotplug Present: 0x00000000 [ 797.512005][T22110] vivid-007: RxSense Present: 0x00000000 [ 797.583531][T22110] vivid-007: EDID Present: 0x00000000 [ 797.634068][T22110] vivid-007: ================== END STATUS ================== [ 803.220510][T22213] FAULT_INJECTION: forcing a failure. [ 803.220510][T22213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.118703][T22213] CPU: 0 UID: 0 PID: 22213 Comm: syz.2.3533 Tainted: G U syzkaller #0 PREEMPT(full) [ 804.118727][T22213] Tainted: [U]=USER [ 804.118731][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 804.118740][T22213] Call Trace: [ 804.118744][T22213] [ 804.118750][T22213] dump_stack_lvl+0x16c/0x1f0 [ 804.118775][T22213] should_fail_ex+0x512/0x640 [ 804.118800][T22213] _copy_to_user+0x32/0xd0 [ 804.118815][T22213] simple_read_from_buffer+0xcb/0x170 [ 804.118834][T22213] proc_fail_nth_read+0x197/0x240 [ 804.118854][T22213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 804.118874][T22213] ? rw_verify_area+0xcf/0x6c0 [ 804.118890][T22213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 804.118909][T22213] vfs_read+0x1e4/0xcf0 [ 804.118930][T22213] ? __pfx___mutex_lock+0x10/0x10 [ 804.118951][T22213] ? __pfx_vfs_read+0x10/0x10 [ 804.118980][T22213] ? __fget_files+0x20e/0x3c0 [ 804.119003][T22213] ksys_read+0x12a/0x250 [ 804.119021][T22213] ? __pfx_ksys_read+0x10/0x10 [ 804.119045][T22213] do_syscall_64+0xcd/0xfa0 [ 804.119066][T22213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.119080][T22213] RIP: 0033:0x7f80ddd8d8dc [ 804.119093][T22213] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 804.119106][T22213] RSP: 002b:00007f80debdc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 804.119120][T22213] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8d8dc [ 804.119129][T22213] RDX: 000000000000000f RSI: 00007f80debdc0a0 RDI: 0000000000000005 [ 804.119138][T22213] RBP: 00007f80debdc090 R08: 0000000000000000 R09: 0000000000000000 [ 804.119146][T22213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.119154][T22213] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 804.119173][T22213] [ 804.306431][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.494104][T22234] bond0: option arp_validate: invalid value (fusectl) [ 805.715043][T22243] program syz.0.3539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.086117][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3541'. [ 806.588343][T22266] can0: slcan on ptm0. [ 806.855894][T22263] can0 (unregistered): slcan off ptm0. [ 807.713134][T22312] snd_aloop snd_aloop.0: control 7:257:7::2 is already present [ 808.519068][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.528258][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.117509][T22406] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 811.150428][T22406] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 813.039655][T22440] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3584'. [ 815.589730][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3586'. [ 816.209185][T22471] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 816.273153][T22471] CPU: 0 UID: 0 PID: 22471 Comm: syz.0.3589 Tainted: G U syzkaller #0 PREEMPT(full) [ 816.273178][T22471] Tainted: [U]=USER [ 816.273183][T22471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 816.273193][T22471] Call Trace: [ 816.273198][T22471] [ 816.273204][T22471] dump_stack_lvl+0x16c/0x1f0 [ 816.273231][T22471] sysfs_warn_dup+0x7f/0xa0 [ 816.273254][T22471] sysfs_create_dir_ns+0x24b/0x2b0 [ 816.273283][T22471] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 816.273304][T22471] ? find_held_lock+0x2b/0x80 [ 816.273328][T22471] ? nfs_netns_namespace+0xd/0x40 [ 816.273344][T22471] kobject_add_internal+0x2c4/0x9b0 [ 816.273361][T22471] kobject_init_and_add+0x11b/0x190 [ 816.273376][T22471] ? __pfx_kobject_init_and_add+0x10/0x10 [ 816.273400][T22471] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 816.273416][T22471] nfs_net_init+0x10a/0x340 [ 816.273430][T22471] ? __pfx_nfs_net_init+0x10/0x10 [ 816.273443][T22471] ops_init+0x1e2/0x5f0 [ 816.273467][T22471] setup_net+0x100/0x390 [ 816.273487][T22471] ? __pfx_setup_net+0x10/0x10 [ 816.273509][T22471] ? debug_mutex_init+0x37/0x70 [ 816.273530][T22471] copy_net_ns+0x2f8/0x690 [ 816.273546][T22471] create_new_namespaces+0x3ea/0xa90 [ 816.273571][T22471] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 816.273592][T22471] ksys_unshare+0x45b/0xa40 [ 816.273607][T22471] ? __pfx_ksys_unshare+0x10/0x10 [ 816.273621][T22471] ? xfd_validate_state+0x61/0x180 [ 816.273642][T22471] __x64_sys_unshare+0x31/0x40 [ 816.273655][T22471] do_syscall_64+0xcd/0xfa0 [ 816.273676][T22471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.273690][T22471] RIP: 0033:0x7efea678eec9 [ 816.273703][T22471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.273717][T22471] RSP: 002b:00007efea75e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 816.273731][T22471] RAX: ffffffffffffffda RBX: 00007efea69e6180 RCX: 00007efea678eec9 [ 816.273740][T22471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 816.273749][T22471] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 816.273757][T22471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.273766][T22471] R13: 00007efea69e6218 R14: 00007efea69e6180 R15: 00007ffc8fa730b8 [ 816.273785][T22471] [ 816.273804][T22471] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 816.532006][T22467] usb usb36: usbfs: process 22467 (syz.2.3590) did not claim interface 0 before use [ 817.166068][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3593'. [ 817.288976][T22493] random: crng reseeded on system resumption [ 818.630487][T22525] program syz.3.3600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.667360][T22557] netlink: 29 bytes leftover after parsing attributes in process `syz.5.3608'. [ 819.791636][T22564] [U] / [ 822.183950][T22613] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3619'. [ 822.591729][T22617] Process accounting resumed [ 825.255618][T22655] zswap: compressor not available [ 826.533307][T22695] random: crng reseeded on system resumption [ 827.094846][T22711] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 827.101261][T22711] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 828.444353][T22740] random: crng reseeded on system resumption [ 829.192515][T22758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3650'. [ 829.336250][T22758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.417418][T22763] FAULT_INJECTION: forcing a failure. [ 829.417418][T22763] name failslab, interval 1, probability 0, space 0, times 0 [ 829.516340][T22758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.619803][T22768] snd_aloop snd_aloop.0: control 7:-2147483391:4::2 is already present [ 829.662181][T22763] CPU: 0 UID: 0 PID: 22763 Comm: syz.0.3650 Tainted: G U syzkaller #0 PREEMPT(full) [ 829.662206][T22763] Tainted: [U]=USER [ 829.662211][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 829.662220][T22763] Call Trace: [ 829.662235][T22763] [ 829.662241][T22763] dump_stack_lvl+0x16c/0x1f0 [ 829.662268][T22763] should_fail_ex+0x512/0x640 [ 829.662291][T22763] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 829.662315][T22763] should_failslab+0xc2/0x120 [ 829.662329][T22763] __kvmalloc_node_noprof+0x141/0x9c0 [ 829.662351][T22763] ? alloc_shrinker_info+0xef/0x470 [ 829.662375][T22763] ? alloc_shrinker_info+0xef/0x470 [ 829.662393][T22763] alloc_shrinker_info+0xef/0x470 [ 829.662418][T22763] mem_cgroup_css_online+0x217/0x640 [ 829.662436][T22763] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 829.662454][T22763] online_css+0xb2/0x350 [ 829.662470][T22763] cgroup_apply_control_enable+0x702/0xbb0 [ 829.662500][T22763] cgroup_mkdir+0x5e0/0x12e0 [ 829.662520][T22763] ? __pfx_cgroup_mkdir+0x10/0x10 [ 829.662538][T22763] kernfs_iop_mkdir+0x111/0x190 [ 829.662552][T22763] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 829.662572][T22763] vfs_mkdir+0x593/0x8c0 [ 829.662591][T22763] do_mkdirat+0x304/0x3e0 [ 829.662612][T22763] ? __pfx_do_mkdirat+0x10/0x10 [ 829.662634][T22763] ? getname_flags.part.0+0x1c5/0x550 [ 829.662651][T22763] __x64_sys_mkdir+0xef/0x140 [ 829.662671][T22763] do_syscall_64+0xcd/0xfa0 [ 829.662692][T22763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.662706][T22763] RIP: 0033:0x7efea678eec9 [ 829.662719][T22763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.662733][T22763] RSP: 002b:00007efea7602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 829.662747][T22763] RAX: ffffffffffffffda RBX: 00007efea69e6090 RCX: 00007efea678eec9 [ 829.662756][T22763] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 829.662764][T22763] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 829.662773][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.662781][T22763] R13: 00007efea69e6128 R14: 00007efea69e6090 R15: 00007ffc8fa730b8 [ 829.662802][T22763] [ 830.388768][T22758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.408391][T22758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.043734][T22840] FAULT_INJECTION: forcing a failure. [ 832.043734][T22840] name failslab, interval 1, probability 0, space 0, times 0 [ 832.122743][T22840] CPU: 0 UID: 0 PID: 22840 Comm: syz.2.3670 Tainted: G U syzkaller #0 PREEMPT(full) [ 832.122771][T22840] Tainted: [U]=USER [ 832.122776][T22840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 832.122785][T22840] Call Trace: [ 832.122790][T22840] [ 832.122796][T22840] dump_stack_lvl+0x16c/0x1f0 [ 832.122821][T22840] should_fail_ex+0x512/0x640 [ 832.122844][T22840] ? fs_reclaim_acquire+0xae/0x150 [ 832.122860][T22840] should_failslab+0xc2/0x120 [ 832.122874][T22840] __kmalloc_noprof+0xdd/0x880 [ 832.122894][T22840] ? kfree+0x252/0x6d0 [ 832.122909][T22840] ? trace_kmalloc+0x2b/0xd0 [ 832.122921][T22840] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.122946][T22840] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.122965][T22840] tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.122986][T22840] ? tomoyo_fill_path_info+0x233/0x420 [ 832.123003][T22840] tomoyo_mount_acl+0x1ae/0x850 [ 832.123019][T22840] ? bpf_ksym_find+0x124/0x1c0 [ 832.123039][T22840] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.123061][T22840] ? is_bpf_text_address+0x94/0x1a0 [ 832.123083][T22840] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 832.123101][T22840] ? unwind_get_return_address+0x59/0xa0 [ 832.123143][T22840] ? tomoyo_domain+0xbb/0x150 [ 832.123164][T22840] ? tomoyo_profile+0x47/0x60 [ 832.123188][T22840] tomoyo_mount_permission+0x16d/0x420 [ 832.123205][T22840] ? tomoyo_mount_permission+0x14f/0x420 [ 832.123223][T22840] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 832.123252][T22840] security_sb_mount+0x9b/0x260 [ 832.123268][T22840] path_mount+0x158/0x23a0 [ 832.123292][T22840] ? __pfx_path_mount+0x10/0x10 [ 832.123313][T22840] ? kmem_cache_free+0x2d4/0x6c0 [ 832.123331][T22840] ? putname+0x154/0x1a0 [ 832.123346][T22840] ? putname+0x154/0x1a0 [ 832.123357][T22840] ? putname+0x154/0x1a0 [ 832.123371][T22840] ? __x64_sys_mount+0x293/0x310 [ 832.123389][T22840] __x64_sys_mount+0x293/0x310 [ 832.123410][T22840] ? __pfx___x64_sys_mount+0x10/0x10 [ 832.123435][T22840] do_syscall_64+0xcd/0xfa0 [ 832.123457][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.123471][T22840] RIP: 0033:0x7f80ddd8eec9 [ 832.123483][T22840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.123496][T22840] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 832.123510][T22840] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 832.123519][T22840] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 832.123528][T22840] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 832.123537][T22840] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 832.123546][T22840] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 832.123567][T22840] [ 833.292408][ T5152] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 833.292451][ T5152] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 833.321387][ T5152] Bluetooth: hci4: Dropping invalid advertising data [ 833.328786][ T5152] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 833.345157][T22861] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 833.552232][T22861] CPU: 0 UID: 0 PID: 22861 Comm: syz.5.3674 Tainted: G U syzkaller #0 PREEMPT(full) [ 833.552257][T22861] Tainted: [U]=USER [ 833.552262][T22861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.552271][T22861] Call Trace: [ 833.552276][T22861] [ 833.552282][T22861] dump_stack_lvl+0x16c/0x1f0 [ 833.552307][T22861] sysfs_warn_dup+0x7f/0xa0 [ 833.552329][T22861] sysfs_create_dir_ns+0x24b/0x2b0 [ 833.552350][T22861] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 833.552370][T22861] ? find_held_lock+0x2b/0x80 [ 833.552393][T22861] ? nfs_netns_namespace+0xd/0x40 [ 833.552408][T22861] kobject_add_internal+0x2c4/0x9b0 [ 833.552425][T22861] kobject_init_and_add+0x11b/0x190 [ 833.552439][T22861] ? __pfx_kobject_init_and_add+0x10/0x10 [ 833.552463][T22861] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 833.552480][T22861] nfs_net_init+0x10a/0x340 [ 833.552494][T22861] ? __pfx_nfs_net_init+0x10/0x10 [ 833.552507][T22861] ops_init+0x1e2/0x5f0 [ 833.552531][T22861] setup_net+0x100/0x390 [ 833.552552][T22861] ? __pfx_setup_net+0x10/0x10 [ 833.552573][T22861] ? debug_mutex_init+0x37/0x70 [ 833.552594][T22861] copy_net_ns+0x2f8/0x690 [ 833.552611][T22861] create_new_namespaces+0x3ea/0xa90 [ 833.552636][T22861] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 833.552658][T22861] ksys_unshare+0x45b/0xa40 [ 833.552672][T22861] ? __pfx_ksys_unshare+0x10/0x10 [ 833.552687][T22861] ? xfd_validate_state+0x61/0x180 [ 833.552707][T22861] __x64_sys_unshare+0x31/0x40 [ 833.552724][T22861] do_syscall_64+0xcd/0xfa0 [ 833.552745][T22861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.552760][T22861] RIP: 0033:0x7f09f918eec9 [ 833.552772][T22861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.552787][T22861] RSP: 002b:00007f09f9fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 833.552801][T22861] RAX: ffffffffffffffda RBX: 00007f09f93e6090 RCX: 00007f09f918eec9 [ 833.552810][T22861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 833.552819][T22861] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 833.552827][T22861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.552836][T22861] R13: 00007f09f93e6128 R14: 00007f09f93e6090 R15: 00007fff9bbe9c98 [ 833.552856][T22861] [ 833.786067][T22840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 834.019682][T22861] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 835.567275][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 835.720886][T22910] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3685'. [ 835.884180][T22910] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3685'. [ 836.900740][T22948] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 836.939780][T22948] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 837.301948][T22955] wlan1: mtu less than device minimum [ 837.476858][T22958] vhci_hcd: invalid port number 16 [ 838.305532][T22994] Process accounting resumed [ 838.393168][T22988] zswap: compressor not available [ 839.252843][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 839.294539][T23031] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3716'. [ 839.700559][T23038] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 840.465311][T23049] mkiss: ax0: crc mode is auto. [ 841.014748][T23045] mkiss: ax0: crc mode is auto. [ 841.596411][T23072] FAULT_INJECTION: forcing a failure. [ 841.596411][T23072] name failslab, interval 1, probability 0, space 0, times 0 [ 841.743200][T23072] CPU: 0 UID: 0 PID: 23072 Comm: syz.0.3725 Tainted: G U syzkaller #0 PREEMPT(full) [ 841.743236][T23072] Tainted: [U]=USER [ 841.743242][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 841.743251][T23072] Call Trace: [ 841.743257][T23072] [ 841.743264][T23072] dump_stack_lvl+0x16c/0x1f0 [ 841.743294][T23072] should_fail_ex+0x512/0x640 [ 841.743316][T23072] ? __kmalloc_noprof+0xca/0x880 [ 841.743336][T23072] should_failslab+0xc2/0x120 [ 841.743351][T23072] __kmalloc_noprof+0xdd/0x880 [ 841.743368][T23072] ? __register_sysctl_table+0xb3/0x1900 [ 841.743388][T23072] ? __register_sysctl_table+0xb3/0x1900 [ 841.743403][T23072] __register_sysctl_table+0xb3/0x1900 [ 841.743419][T23072] ? is_module_address+0x5f/0xf0 [ 841.743439][T23072] ? __pfx___register_sysctl_table+0x10/0x10 [ 841.743455][T23072] ? is_module_address+0x69/0xf0 [ 841.743470][T23072] ? register_net_sysctl_sz+0x228/0x3e0 [ 841.743486][T23072] ? __asan_memcpy+0x3c/0x60 [ 841.743508][T23072] sysctl_route_net_init+0x15e/0x2c0 [ 841.743526][T23072] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 841.743542][T23072] ops_init+0x1e2/0x5f0 [ 841.743566][T23072] setup_net+0x100/0x390 [ 841.743587][T23072] ? __pfx_setup_net+0x10/0x10 [ 841.743609][T23072] ? debug_mutex_init+0x37/0x70 [ 841.743631][T23072] copy_net_ns+0x2f8/0x690 [ 841.743647][T23072] create_new_namespaces+0x3ea/0xa90 [ 841.743672][T23072] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 841.743694][T23072] ksys_unshare+0x45b/0xa40 [ 841.743709][T23072] ? __pfx_ksys_unshare+0x10/0x10 [ 841.743724][T23072] ? xfd_validate_state+0x61/0x180 [ 841.743745][T23072] __x64_sys_unshare+0x31/0x40 [ 841.743758][T23072] do_syscall_64+0xcd/0xfa0 [ 841.743780][T23072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.743794][T23072] RIP: 0033:0x7efea678eec9 [ 841.743807][T23072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.743821][T23072] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 841.743835][T23072] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 841.743845][T23072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 841.743854][T23072] RBP: 00007efea6811f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.743864][T23072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.743872][T23072] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 841.743893][T23072] [ 843.169671][T23089] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 843.310555][T23099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3730'. [ 844.784820][T23130] FAULT_INJECTION: forcing a failure. [ 844.784820][T23130] name failslab, interval 1, probability 0, space 0, times 0 [ 844.867622][T23130] CPU: 0 UID: 0 PID: 23130 Comm: syz.2.3736 Tainted: G U syzkaller #0 PREEMPT(full) [ 844.867649][T23130] Tainted: [U]=USER [ 844.867655][T23130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 844.867664][T23130] Call Trace: [ 844.867669][T23130] [ 844.867676][T23130] dump_stack_lvl+0x16c/0x1f0 [ 844.867702][T23130] should_fail_ex+0x512/0x640 [ 844.867725][T23130] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 844.867748][T23130] should_failslab+0xc2/0x120 [ 844.867763][T23130] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 844.867783][T23130] ? __d_alloc+0x32/0xae0 [ 844.867806][T23130] ? __d_alloc+0x32/0xae0 [ 844.867825][T23130] ? is_bpf_text_address+0x8a/0x1a0 [ 844.867840][T23130] __d_alloc+0x32/0xae0 [ 844.867858][T23130] ? bpf_ksym_find+0x124/0x1c0 [ 844.867879][T23130] d_alloc_parallel+0x111/0x1480 [ 844.867895][T23130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.867910][T23130] ? unwind_get_return_address+0x59/0xa0 [ 844.867930][T23130] ? arch_stack_walk+0xa6/0x100 [ 844.867951][T23130] ? __pfx_d_alloc_parallel+0x10/0x10 [ 844.867969][T23130] ? lockdep_init_map_type+0x5c/0x280 [ 844.867985][T23130] ? lockdep_init_map_type+0x5c/0x280 [ 844.868004][T23130] __lookup_slow+0x193/0x460 [ 844.868020][T23130] ? __pfx___lookup_slow+0x10/0x10 [ 844.868037][T23130] ? folio_mapping+0x90/0x190 [ 844.868063][T23130] ? folio_mapping+0x90/0x190 [ 844.868083][T23130] ? d_lookup+0xe7/0x190 [ 844.868112][T23130] lookup_noperm+0xe1/0x110 [ 844.868129][T23130] simple_start_creating+0xd1/0x1b0 [ 844.868151][T23130] debugfs_start_creating.part.0+0x82/0x190 [ 844.868171][T23130] __debugfs_create_file+0xa7/0x6b0 [ 844.868191][T23130] debugfs_create_file_full+0x41/0x60 [ 844.868210][T23130] kvm_dev_ioctl+0x14ca/0x1a80 [ 844.868238][T23130] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 844.868265][T23130] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 844.868286][T23130] __x64_sys_ioctl+0x18e/0x210 [ 844.868304][T23130] do_syscall_64+0xcd/0xfa0 [ 844.868326][T23130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.868340][T23130] RIP: 0033:0x7f80ddd8eec9 [ 844.868352][T23130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.868366][T23130] RSP: 002b:00007f80debdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.868380][T23130] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8eec9 [ 844.868390][T23130] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 844.868399][T23130] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.868407][T23130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.868416][T23130] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 844.868436][T23130] [ 845.448440][T23138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3737'. [ 845.655447][T23141] netlink: set zone limit has 8 unknown bytes [ 846.246677][T23155] FAULT_INJECTION: forcing a failure. [ 846.246677][T23155] name failslab, interval 1, probability 0, space 0, times 0 [ 846.320113][T23155] CPU: 0 UID: 0 PID: 23155 Comm: syz.2.3742 Tainted: G U syzkaller #0 PREEMPT(full) [ 846.320138][T23155] Tainted: [U]=USER [ 846.320144][T23155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 846.320152][T23155] Call Trace: [ 846.320157][T23155] [ 846.320163][T23155] dump_stack_lvl+0x16c/0x1f0 [ 846.320188][T23155] should_fail_ex+0x512/0x640 [ 846.320211][T23155] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 846.320232][T23155] should_failslab+0xc2/0x120 [ 846.320246][T23155] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 846.320266][T23155] ? shmem_alloc_inode+0x25/0x50 [ 846.320291][T23155] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 846.320311][T23155] ? shmem_alloc_inode+0x25/0x50 [ 846.320332][T23155] shmem_alloc_inode+0x25/0x50 [ 846.320352][T23155] alloc_inode+0x64/0x240 [ 846.320367][T23155] new_inode+0x22/0x1c0 [ 846.320379][T23155] ? trace_cap_capable+0x18d/0x200 [ 846.320395][T23155] shmem_get_inode+0x19a/0xfb0 [ 846.320411][T23155] ? __vm_enough_memory+0x184/0x3f0 [ 846.320426][T23155] __shmem_file_setup+0x279/0x330 [ 846.320444][T23155] shmem_zero_setup+0x93/0x1a0 [ 846.320464][T23155] __mmap_region+0x2076/0x27a0 [ 846.320485][T23155] ? __pfx___mmap_region+0x10/0x10 [ 846.320501][T23155] ? lock_acquire+0x179/0x350 [ 846.320516][T23155] ? find_held_lock+0x2b/0x80 [ 846.320535][T23155] ? finish_task_switch.isra.0+0x21c/0xc10 [ 846.320556][T23155] ? rcu_is_watching+0x12/0xc0 [ 846.320575][T23155] ? finish_task_switch.isra.0+0x221/0xc10 [ 846.320598][T23155] ? trace_sched_exit_tp+0xd1/0x120 [ 846.320614][T23155] ? __schedule+0x11a3/0x5de0 [ 846.320664][T23155] ? trace_cap_capable+0x18d/0x200 [ 846.320684][T23155] mmap_region+0x1ab/0x3f0 [ 846.320702][T23155] ? __get_unmapped_area+0x267/0x440 [ 846.320718][T23155] do_mmap+0xa3e/0x1210 [ 846.320734][T23155] ? __pfx_do_mmap+0x10/0x10 [ 846.320747][T23155] ? __pfx_down_write_killable+0x10/0x10 [ 846.320765][T23155] vm_mmap_pgoff+0x29e/0x470 [ 846.320790][T23155] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 846.320816][T23155] ? __x64_sys_futex+0x1e0/0x4c0 [ 846.320830][T23155] ? __x64_sys_futex+0x1e9/0x4c0 [ 846.320846][T23155] ksys_mmap_pgoff+0x7d/0x5c0 [ 846.320867][T23155] ? xfd_validate_state+0x61/0x180 [ 846.320885][T23155] __x64_sys_mmap+0x125/0x190 [ 846.320904][T23155] do_syscall_64+0xcd/0xfa0 [ 846.320925][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.320939][T23155] RIP: 0033:0x7f80ddd8eec9 [ 846.320957][T23155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.320971][T23155] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 846.320986][T23155] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 846.320995][T23155] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 846.321004][T23155] RBP: 00007f80dde11f91 R08: 0000000000000401 R09: 0000000000008000 [ 846.321013][T23155] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 846.321021][T23155] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 846.321040][T23155] [ 849.291972][T23174] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 849.377944][T23174] CPU: 0 UID: 0 PID: 23174 Comm: syz.5.3746 Tainted: G U syzkaller #0 PREEMPT(full) [ 849.377971][T23174] Tainted: [U]=USER [ 849.377977][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 849.377986][T23174] Call Trace: [ 849.377991][T23174] [ 849.377998][T23174] dump_stack_lvl+0x16c/0x1f0 [ 849.378024][T23174] sysfs_warn_dup+0x7f/0xa0 [ 849.378047][T23174] sysfs_create_dir_ns+0x24b/0x2b0 [ 849.378068][T23174] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 849.378090][T23174] ? find_held_lock+0x2b/0x80 [ 849.378112][T23174] ? nfs_netns_namespace+0xd/0x40 [ 849.378127][T23174] kobject_add_internal+0x2c4/0x9b0 [ 849.378144][T23174] kobject_init_and_add+0x11b/0x190 [ 849.378159][T23174] ? __pfx_kobject_init_and_add+0x10/0x10 [ 849.378183][T23174] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 849.378200][T23174] nfs_net_init+0x10a/0x340 [ 849.378214][T23174] ? __pfx_nfs_net_init+0x10/0x10 [ 849.378227][T23174] ops_init+0x1e2/0x5f0 [ 849.378251][T23174] setup_net+0x100/0x390 [ 849.378272][T23174] ? __pfx_setup_net+0x10/0x10 [ 849.378294][T23174] ? debug_mutex_init+0x37/0x70 [ 849.378318][T23174] copy_net_ns+0x2f8/0x690 [ 849.378334][T23174] create_new_namespaces+0x3ea/0xa90 [ 849.378359][T23174] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 849.378381][T23174] ksys_unshare+0x45b/0xa40 [ 849.378396][T23174] ? __pfx_ksys_unshare+0x10/0x10 [ 849.378410][T23174] ? xfd_validate_state+0x61/0x180 [ 849.378431][T23174] __x64_sys_unshare+0x31/0x40 [ 849.378445][T23174] do_syscall_64+0xcd/0xfa0 [ 849.378466][T23174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.378481][T23174] RIP: 0033:0x7f09f918eec9 [ 849.378494][T23174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.378508][T23174] RSP: 002b:00007f09f9fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 849.378522][T23174] RAX: ffffffffffffffda RBX: 00007f09f93e6090 RCX: 00007f09f918eec9 [ 849.378532][T23174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 849.378540][T23174] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 849.378549][T23174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.378557][T23174] R13: 00007f09f93e6128 R14: 00007f09f93e6090 R15: 00007fff9bbe9c98 [ 849.378578][T23174] [ 849.378615][T23174] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 849.693287][T23184] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3747'. [ 850.451217][T23192] hub 1-0:1.0: USB hub found [ 850.499176][T23192] hub 1-0:1.0: 1 port detected [ 852.114965][T23237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3758'. [ 852.469522][T23249] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 852.475964][T23249] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 853.470525][T23241] Process accounting resumed [ 853.577239][T23256] Process accounting paused [ 853.623305][T23272] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 853.945952][T23280] FAULT_INJECTION: forcing a failure. [ 853.945952][T23280] name failslab, interval 1, probability 0, space 0, times 0 [ 854.028438][T23280] CPU: 0 UID: 0 PID: 23280 Comm: syz.0.3768 Tainted: G U syzkaller #0 PREEMPT(full) [ 854.028464][T23280] Tainted: [U]=USER [ 854.028469][T23280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 854.028477][T23280] Call Trace: [ 854.028482][T23280] [ 854.028488][T23280] dump_stack_lvl+0x16c/0x1f0 [ 854.028513][T23280] should_fail_ex+0x512/0x640 [ 854.028535][T23280] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 854.028556][T23280] should_failslab+0xc2/0x120 [ 854.028570][T23280] kmem_cache_alloc_noprof+0x75/0x6e0 [ 854.028588][T23280] ? __anon_vma_prepare+0x344/0x5e0 [ 854.028609][T23280] ? __anon_vma_prepare+0x344/0x5e0 [ 854.028624][T23280] __anon_vma_prepare+0x344/0x5e0 [ 854.028643][T23280] __vmf_anon_prepare+0x11c/0x240 [ 854.028658][T23280] do_huge_pmd_anonymous_page+0x161/0x1f50 [ 854.028678][T23280] ? find_held_lock+0x2b/0x80 [ 854.028699][T23280] __handle_mm_fault+0x1cff/0x2aa0 [ 854.028721][T23280] ? __pfx___handle_mm_fault+0x10/0x10 [ 854.028753][T23280] handle_mm_fault+0x589/0xd10 [ 854.028773][T23280] __get_user_pages+0x54e/0x3530 [ 854.028795][T23280] ? __pfx___get_user_pages+0x10/0x10 [ 854.028815][T23280] populate_vma_page_range+0x267/0x3f0 [ 854.028831][T23280] ? __pfx_populate_vma_page_range+0x10/0x10 [ 854.028845][T23280] ? __pfx_find_vma_intersection+0x10/0x10 [ 854.028868][T23280] ? do_mmap+0x69c/0x1210 [ 854.028882][T23280] __mm_populate+0x1d8/0x380 [ 854.028898][T23280] ? __pfx___mm_populate+0x10/0x10 [ 854.028914][T23280] ? up_write+0x1b2/0x520 [ 854.028932][T23280] vm_mmap_pgoff+0x37f/0x470 [ 854.028957][T23280] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 854.028978][T23280] ? lock_acquire+0x179/0x350 [ 854.028995][T23280] ? __x64_sys_futex+0x1e0/0x4c0 [ 854.029009][T23280] ? __x64_sys_futex+0x1e9/0x4c0 [ 854.029025][T23280] ksys_mmap_pgoff+0x7d/0x5c0 [ 854.029045][T23280] ? xfd_validate_state+0x61/0x180 [ 854.029064][T23280] __x64_sys_mmap+0x125/0x190 [ 854.029082][T23280] do_syscall_64+0xcd/0xfa0 [ 854.029104][T23280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.029118][T23280] RIP: 0033:0x7efea678eec9 [ 854.029130][T23280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.029144][T23280] RSP: 002b:00007efea7623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 854.029157][T23280] RAX: ffffffffffffffda RBX: 00007efea69e5fa0 RCX: 00007efea678eec9 [ 854.029167][T23280] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 854.029176][T23280] RBP: 00007efea6811f91 R08: 0000000000000002 R09: 0000000000008000 [ 854.029185][T23280] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 854.029194][T23280] R13: 00007efea69e6038 R14: 00007efea69e5fa0 R15: 00007ffc8fa730b8 [ 854.029213][T23280] [ 854.694345][T23296] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 854.733994][T23302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3771'. [ 855.602370][T23318] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3773'. [ 855.900383][T23302] team0 (unregistering): Port device team_slave_0 removed [ 855.943756][T23302] team0 (unregistering): Port device team_slave_1 removed [ 856.697467][T23335] : entered promiscuous mode [ 861.611343][T23445] FAULT_INJECTION: forcing a failure. [ 861.611343][T23445] name fail_futex, interval 1, probability 0, space 0, times 0 [ 861.642995][T23445] CPU: 0 UID: 0 PID: 23445 Comm: syz.2.3801 Tainted: G U syzkaller #0 PREEMPT(full) [ 861.643021][T23445] Tainted: [U]=USER [ 861.643026][T23445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 861.643035][T23445] Call Trace: [ 861.643041][T23445] [ 861.643047][T23445] dump_stack_lvl+0x16c/0x1f0 [ 861.643074][T23445] should_fail_ex+0x512/0x640 [ 861.643099][T23445] get_futex_key+0x1d0/0x1560 [ 861.643123][T23445] ? cmp_ex_search+0x8b/0xb0 [ 861.643142][T23445] ? __pfx_get_futex_key+0x10/0x10 [ 861.643166][T23445] ? search_extable+0x82/0xb0 [ 861.643186][T23445] ? __pfx_search_extable+0x10/0x10 [ 861.643207][T23445] futex_wait_setup+0x9d/0x550 [ 861.643230][T23445] __futex_wait+0x193/0x2f0 [ 861.643248][T23445] ? __pfx___futex_wait+0x10/0x10 [ 861.643268][T23445] ? __pfx_futex_wake_mark+0x10/0x10 [ 861.643288][T23445] ? futex_private_hash_put+0x176/0x300 [ 861.643312][T23445] ? futex_private_hash_put+0x18a/0x300 [ 861.643335][T23445] futex_wait+0xe8/0x380 [ 861.643351][T23445] ? __pfx_futex_wait+0x10/0x10 [ 861.643372][T23445] ? _copy_from_user+0x59/0xd0 [ 861.643386][T23445] ? io_uring_setup+0x16e4/0x20e0 [ 861.643409][T23445] do_futex+0x229/0x350 [ 861.643424][T23445] ? __pfx_do_futex+0x10/0x10 [ 861.643443][T23445] __x64_sys_futex+0x1e0/0x4c0 [ 861.643460][T23445] ? __pfx___x64_sys_futex+0x10/0x10 [ 861.643474][T23445] ? xfd_validate_state+0x61/0x180 [ 861.643489][T23445] ? __pfx_ksys_write+0x10/0x10 [ 861.643514][T23445] do_syscall_64+0xcd/0xfa0 [ 861.643536][T23445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.643550][T23445] RIP: 0033:0x7f80ddd8eec9 [ 861.643562][T23445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.643576][T23445] RSP: 002b:00007f80debdc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 861.643590][T23445] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa8 RCX: 00007f80ddd8eec9 [ 861.643599][T23445] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f80ddfe5fa8 [ 861.643608][T23445] RBP: 00007f80ddfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 861.643617][T23445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.643626][T23445] R13: 00007f80ddfe6038 R14: 00007fffbed50700 R15: 00007fffbed507e8 [ 861.643653][T23445] [ 862.167098][T23447] nbd: must specify a device to reconfigure [ 863.387131][T23487] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 863.695309][T23494] netlink: zone id is out of range [ 863.700433][T23494] netlink: zone id is out of range [ 863.766745][T23494] netlink: zone id is out of range [ 863.771865][T23494] netlink: zone id is out of range [ 863.813169][T23494] netlink: zone id is out of range [ 863.818290][T23494] netlink: zone id is out of range [ 863.869909][T23494] netlink: zone id is out of range [ 863.911119][T23494] netlink: zone id is out of range [ 863.936428][T23494] netlink: zone id is out of range [ 863.958201][T23494] netlink: zone id is out of range [ 864.801695][T23522] sysfs: cannot create duplicate filename '/fs/nfs/net' [ 864.831843][T23522] CPU: 0 UID: 0 PID: 23522 Comm: syz.5.3815 Tainted: G U syzkaller #0 PREEMPT(full) [ 864.831869][T23522] Tainted: [U]=USER [ 864.831875][T23522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 864.831884][T23522] Call Trace: [ 864.831890][T23522] [ 864.831897][T23522] dump_stack_lvl+0x16c/0x1f0 [ 864.831922][T23522] sysfs_warn_dup+0x7f/0xa0 [ 864.831945][T23522] sysfs_create_dir_ns+0x24b/0x2b0 [ 864.831967][T23522] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 864.831988][T23522] ? find_held_lock+0x2b/0x80 [ 864.832011][T23522] ? nfs_netns_namespace+0xd/0x40 [ 864.832026][T23522] kobject_add_internal+0x2c4/0x9b0 [ 864.832044][T23522] kobject_init_and_add+0x11b/0x190 [ 864.832059][T23522] ? __pfx_kobject_init_and_add+0x10/0x10 [ 864.832084][T23522] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 864.832100][T23522] nfs_net_init+0x10a/0x340 [ 864.832115][T23522] ? __pfx_nfs_net_init+0x10/0x10 [ 864.832127][T23522] ops_init+0x1e2/0x5f0 [ 864.832151][T23522] setup_net+0x100/0x390 [ 864.832173][T23522] ? __pfx_setup_net+0x10/0x10 [ 864.832195][T23522] ? debug_mutex_init+0x37/0x70 [ 864.832216][T23522] copy_net_ns+0x2f8/0x690 [ 864.832232][T23522] create_new_namespaces+0x3ea/0xa90 [ 864.832257][T23522] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 864.832279][T23522] ksys_unshare+0x45b/0xa40 [ 864.832294][T23522] ? __pfx_ksys_unshare+0x10/0x10 [ 864.832308][T23522] ? xfd_validate_state+0x61/0x180 [ 864.832329][T23522] __x64_sys_unshare+0x31/0x40 [ 864.832342][T23522] do_syscall_64+0xcd/0xfa0 [ 864.832364][T23522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.832378][T23522] RIP: 0033:0x7f09f918eec9 [ 864.832400][T23522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.832414][T23522] RSP: 002b:00007f09f9fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 864.832429][T23522] RAX: ffffffffffffffda RBX: 00007f09f93e5fa0 RCX: 00007f09f918eec9 [ 864.832439][T23522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 864.832448][T23522] RBP: 00007f09f9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 864.832457][T23522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.832466][T23522] R13: 00007f09f93e6038 R14: 00007f09f93e5fa0 R15: 00007fff9bbe9c98 [ 864.832487][T23522] [ 864.832506][T23522] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 866.217230][T23533] zswap: compressor 000 not available [ 866.579208][T23553] Falling back ldisc for ttyS2. [ 868.035001][T23594] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 868.094083][T23594] copy_params: 53 callbacks suppressed [ 868.094095][T23594] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 868.131678][T23554] kexec: Could not allocate control_code_buffer [ 868.544963][T23605] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 868.725994][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3836'. [ 869.167823][T23623] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3838'. [ 869.293555][T23623] veth1_macvtap: left promiscuous mode [ 869.314838][T23623] macsec0: entered promiscuous mode [ 869.345908][T23623] macsec0: entered allmulticast mode [ 869.672560][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3840'. [ 869.761166][T23632] [U] [ 869.763963][T23632] [U] [ 869.766638][T23632] [U] [ 869.769310][T23632] [U] [ 869.811430][T23632] [U] [ 869.814144][T23632] [U] [ 869.816817][T23632] [U] [ 869.819484][T23632] [U] [ 869.855879][T23632] [U] [ 869.858606][T23632] [U] [ 869.861280][T23632] [U] [ 869.863952][T23632] [U] [ 869.935293][T23632] [U] [ 869.937997][T23632] [U] EezR[Ǵ$v#@#t"#P5qjM$J^sR9 [ 869.945004][T23632] [U] K]VYaĬDC[r*X Y,hG [ 869.952442][T23632] [U] p?xC{І$qL2)U¾K|tHQQ [ 869.959101][T23632] [U] r@0' [ 869.962632][T23632] [U] PfyN [ 869.966420][T23632] [U] Nl8y7FO|/d[A9@IE5Dž3Zԥ+# [ 869.974374][T23632] [U] eROL3LLßrxh= [ 869.981723][T23632] [U] & Ȼp>`"hȪkD0JB r"SGO_^ JO V% r̐e]LTܥ0{Qgn׵cxiV;b [ 869.994807][T23632] [U] c}g˄1 [ 869.999032][T23632] [U] +-#`HT^އhZޕVK\h1oɛHo<@a>m_Qd*ѳ,%%~ [ 870.008116][T23632] [U] y8Vg#aj &F=>.2\Թ [ 870.014429][T23632] [U] .F=}T rwdӷ;>3!uz4&xt. [ 870.021341][T23632] [U] D\{رyMȤ[n`yIK`'Dۮ.wNOК*]9ޤI00O [ 870.030865][T23632] [U] \8wyv7ktKc)cF6iǪi]sv)o,v_taeؑ6t&(* ۳u}oSR/jBef8O׸"֤eUtv. [ 870.045794][T23632] [U] ]unsJ%go2Nd [ 870.051233][T23632] [U] *ߗyiQN$WO5 [ 870.055720][T23632] [U] oTQa}tN+҃ʈƯuV+ݵQ΀VȲb*x [ 881.141430][T23922] dump_stack_lvl+0x16c/0x1f0 [ 881.141455][T23922] sysfs_warn_dup+0x7f/0xa0 [ 881.141478][T23922] sysfs_create_dir_ns+0x24b/0x2b0 [ 881.141499][T23922] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 881.141519][T23922] ? find_held_lock+0x2b/0x80 [ 881.141541][T23922] ? nfs_netns_namespace+0xd/0x40 [ 881.141557][T23922] kobject_add_internal+0x2c4/0x9b0 [ 881.141574][T23922] kobject_init_and_add+0x11b/0x190 [ 881.141588][T23922] ? __pfx_kobject_init_and_add+0x10/0x10 [ 881.141613][T23922] nfs_netns_sysfs_setup+0xf9/0x1f0 [ 881.141629][T23922] nfs_net_init+0x10a/0x340 [ 881.141644][T23922] ? __pfx_nfs_net_init+0x10/0x10 [ 881.141656][T23922] ops_init+0x1e2/0x5f0 [ 881.141680][T23922] setup_net+0x100/0x390 [ 881.141702][T23922] ? __pfx_setup_net+0x10/0x10 [ 881.141723][T23922] ? debug_mutex_init+0x37/0x70 [ 881.141744][T23922] copy_net_ns+0x2f8/0x690 [ 881.141760][T23922] create_new_namespaces+0x3ea/0xa90 [ 881.141785][T23922] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 881.141808][T23922] ksys_unshare+0x45b/0xa40 [ 881.141822][T23922] ? __pfx_ksys_unshare+0x10/0x10 [ 881.141837][T23922] ? xfd_validate_state+0x61/0x180 [ 881.141858][T23922] __x64_sys_unshare+0x31/0x40 [ 881.141871][T23922] do_syscall_64+0xcd/0xfa0 [ 881.141893][T23922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.141907][T23922] RIP: 0033:0x7f80ddd8eec9 [ 881.141920][T23922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.141933][T23922] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 881.141948][T23922] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 881.141958][T23922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 881.141967][T23922] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 881.141975][T23922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.141984][T23922] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 881.142004][T23922] [ 881.142024][T23922] kobject: kobject_add_internal failed for net with -EEXIST, don't try to register things with the same name in the same directory. [ 881.587016][T23930] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 881.774957][T23915] ima: policy update failed [ 881.793225][ T30] audit: type=1802 audit(4294967366.510:65): pid=23915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3903" res=0 errno=0 [ 882.114487][ T5152] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 883.650197][T23967] Process accounting paused [ 883.753052][T23950] Process accounting resumed [ 884.314076][T23982] FAULT_INJECTION: forcing a failure. [ 884.314076][T23982] name failslab, interval 1, probability 0, space 0, times 0 [ 884.383010][T23982] CPU: 0 UID: 0 PID: 23982 Comm: syz.2.3916 Tainted: G U syzkaller #0 PREEMPT(full) [ 884.383038][T23982] Tainted: [U]=USER [ 884.383043][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 884.383053][T23982] Call Trace: [ 884.383058][T23982] [ 884.383065][T23982] dump_stack_lvl+0x16c/0x1f0 [ 884.383090][T23982] should_fail_ex+0x512/0x640 [ 884.383112][T23982] ? __kmalloc_cache_noprof+0x5f/0x780 [ 884.383133][T23982] should_failslab+0xc2/0x120 [ 884.383148][T23982] __kmalloc_cache_noprof+0x72/0x780 [ 884.383165][T23982] ? lockdep_init_map_type+0x5c/0x280 [ 884.383180][T23982] ? nci_hci_allocate+0x45/0x330 [ 884.383200][T23982] ? debug_mutex_init+0x37/0x70 [ 884.383220][T23982] ? nci_hci_allocate+0x45/0x330 [ 884.383238][T23982] nci_hci_allocate+0x45/0x330 [ 884.383258][T23982] nci_allocate_device+0x26f/0x430 [ 884.383277][T23982] virtual_ncidev_open+0x6f/0x220 [ 884.383294][T23982] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 884.383310][T23982] misc_open+0x26d/0x450 [ 884.383331][T23982] ? __pfx_misc_open+0x10/0x10 [ 884.383351][T23982] chrdev_open+0x234/0x6a0 [ 884.383372][T23982] ? __pfx_apparmor_file_open+0x10/0x10 [ 884.383388][T23982] ? __pfx_chrdev_open+0x10/0x10 [ 884.383409][T23982] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 884.383433][T23982] do_dentry_open+0x982/0x1530 [ 884.383453][T23982] ? __pfx_chrdev_open+0x10/0x10 [ 884.383486][T23982] vfs_open+0x82/0x3f0 [ 884.383505][T23982] path_openat+0x1de4/0x2cb0 [ 884.383532][T23982] ? __pfx_path_openat+0x10/0x10 [ 884.383554][T23982] ? __lock_acquire+0xb8a/0x1c90 [ 884.383571][T23982] do_filp_open+0x20b/0x470 [ 884.383590][T23982] ? __pfx_do_filp_open+0x10/0x10 [ 884.383624][T23982] ? alloc_fd+0x471/0x7d0 [ 884.383647][T23982] do_sys_openat2+0x11b/0x1d0 [ 884.383662][T23982] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.383685][T23982] __x64_sys_openat+0x174/0x210 [ 884.383702][T23982] ? __pfx___x64_sys_openat+0x10/0x10 [ 884.383725][T23982] do_syscall_64+0xcd/0xfa0 [ 884.383747][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.383761][T23982] RIP: 0033:0x7f80ddd8eec9 [ 884.383774][T23982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.383788][T23982] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.383803][T23982] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 884.383812][T23982] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 884.383828][T23982] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 884.383837][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.383847][T23982] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 884.383868][T23982] [ 884.671773][T23980] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3915'. [ 886.083135][T24002] zswap: compressor not available [ 887.641391][T24027] random: crng reseeded on system resumption [ 887.764965][T24023] FAULT_INJECTION: forcing a failure. [ 887.764965][T24023] name failslab, interval 1, probability 0, space 0, times 0 [ 887.921945][T24023] CPU: 0 UID: 0 PID: 24023 Comm: syz.2.3925 Tainted: G U syzkaller #0 PREEMPT(full) [ 887.921972][T24023] Tainted: [U]=USER [ 887.921978][T24023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 887.921987][T24023] Call Trace: [ 887.921993][T24023] [ 887.922000][T24023] dump_stack_lvl+0x16c/0x1f0 [ 887.922026][T24023] should_fail_ex+0x512/0x640 [ 887.922047][T24023] ? __kmalloc_cache_noprof+0x5f/0x780 [ 887.922074][T24023] should_failslab+0xc2/0x120 [ 887.922089][T24023] __kmalloc_cache_noprof+0x72/0x780 [ 887.922107][T24023] ? do_raw_spin_lock+0x12c/0x2b0 [ 887.922123][T24023] ? alloc_fdtable+0xbd/0x2d0 [ 887.922143][T24023] ? alloc_fdtable+0xbd/0x2d0 [ 887.922159][T24023] alloc_fdtable+0xbd/0x2d0 [ 887.922177][T24023] dup_fd+0x83b/0xb90 [ 887.922201][T24023] __do_sys_close_range+0x4ca/0x730 [ 887.922223][T24023] ? __pfx___do_sys_close_range+0x10/0x10 [ 887.922248][T24023] do_syscall_64+0xcd/0xfa0 [ 887.922269][T24023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.922284][T24023] RIP: 0033:0x7f80ddd8eec9 [ 887.922297][T24023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.922310][T24023] RSP: 002b:00007f80debdc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 887.922325][T24023] RAX: ffffffffffffffda RBX: 00007f80ddfe5fa0 RCX: 00007f80ddd8eec9 [ 887.922335][T24023] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 887.922344][T24023] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 887.922353][T24023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.922362][T24023] R13: 00007f80ddfe6038 R14: 00007f80ddfe5fa0 R15: 00007fffbed507e8 [ 887.922382][T24023] [ 888.639081][T24037] Falling back ldisc for ptm0. [ 889.320349][T24058] Line length is too long: Should be less than 4094 [ 890.044956][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3937'. [ 890.781595][T24119] ima: policy update failed [ 890.824226][ T30] audit: type=1802 audit(4294967375.560:66): pid=24119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3942" res=0 errno=0 [ 890.992611][T24119] netlink: 266 bytes leftover after parsing attributes in process `syz.3.3942'. [ 891.089986][T24119] IPv6: NLM_F_CREATE should be specified when creating new route [ 891.839070][T24141] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 892.469957][T24153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 892.554309][T24153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 892.560336][T24153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 892.637816][T24153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 892.683686][T24153] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 893.067514][ T5837] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 894.061431][T24205] synth uevent: /bus/mei: unknown uevent action string [ 894.102982][ T5152] Bluetooth: hci4: command 0x0c1a tx timeout [ 894.586140][ T5152] Bluetooth: hci1: command 0x040f tx timeout [ 894.592168][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 894.663016][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 894.909977][T24241] ================================================================== [ 894.909996][T24241] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 894.910026][T24241] Read of size 256 at addr ffff888031f7a3c0 by task syz.2.3961/24241 [ 894.910039][T24241] [ 894.910050][T24241] CPU: 0 UID: 0 PID: 24241 Comm: syz.2.3961 Tainted: G U syzkaller #0 PREEMPT(full) [ 894.910071][T24241] Tainted: [U]=USER [ 894.910076][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 894.910085][T24241] Call Trace: [ 894.910091][T24241] [ 894.910098][T24241] dump_stack_lvl+0x116/0x1f0 [ 894.910119][T24241] print_report+0xcd/0x630 [ 894.910134][T24241] ? __virt_addr_valid+0x81/0x610 [ 894.910148][T24241] ? __phys_addr+0xe8/0x180 [ 894.910161][T24241] ? fbcon_prepare_logo+0xa03/0xc70 [ 894.910182][T24241] kasan_report+0xe0/0x110 [ 894.910196][T24241] ? fbcon_prepare_logo+0xa03/0xc70 [ 894.910218][T24241] kasan_check_range+0x100/0x1b0 [ 894.910235][T24241] __asan_memcpy+0x23/0x60 [ 894.910253][T24241] fbcon_prepare_logo+0xa03/0xc70 [ 894.910277][T24241] fbcon_init+0xd77/0x1900 [ 894.910299][T24241] visual_init+0x320/0x620 [ 894.910320][T24241] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 894.910337][T24241] store_bind+0x61d/0x760 [ 894.910352][T24241] ? sysfs_file_kobj+0xe4/0x290 [ 894.910372][T24241] ? __pfx_store_bind+0x10/0x10 [ 894.910385][T24241] dev_attr_store+0x58/0x80 [ 894.910406][T24241] ? __pfx_dev_attr_store+0x10/0x10 [ 894.910425][T24241] sysfs_kf_write+0xf2/0x150 [ 894.910444][T24241] kernfs_fop_write_iter+0x3af/0x570 [ 894.910461][T24241] ? __pfx_sysfs_kf_write+0x10/0x10 [ 894.910480][T24241] iter_file_splice_write+0xa24/0x12e0 [ 894.910504][T24241] ? __pfx_iter_file_splice_write+0x10/0x10 [ 894.910525][T24241] ? __pfx_copy_splice_read+0x10/0x10 [ 894.910546][T24241] ? __pfx_iter_file_splice_write+0x10/0x10 [ 894.910565][T24241] direct_splice_actor+0x192/0x6c0 [ 894.910584][T24241] splice_direct_to_actor+0x345/0xa30 [ 894.910602][T24241] ? __pfx_direct_splice_actor+0x10/0x10 [ 894.910621][T24241] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 894.910641][T24241] do_splice_direct+0x174/0x240 [ 894.910659][T24241] ? __pfx_do_splice_direct+0x10/0x10 [ 894.910676][T24241] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 894.910695][T24241] ? rw_verify_area+0xcf/0x6c0 [ 894.910713][T24241] do_sendfile+0xb06/0xe50 [ 894.910733][T24241] ? __pfx_do_sendfile+0x10/0x10 [ 894.910752][T24241] ? __x64_sys_futex+0x1e0/0x4c0 [ 894.910767][T24241] ? __x64_sys_futex+0x1e9/0x4c0 [ 894.910782][T24241] __x64_sys_sendfile64+0x1d8/0x220 [ 894.910796][T24241] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 894.910821][T24241] do_syscall_64+0xcd/0xfa0 [ 894.910843][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.910858][T24241] RIP: 0033:0x7f80ddd8eec9 [ 894.910873][T24241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.910887][T24241] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 894.910902][T24241] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 894.910912][T24241] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 894.910922][T24241] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 894.910931][T24241] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 894.910941][T24241] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 894.910956][T24241] [ 894.910962][T24241] [ 894.910967][T24241] Allocated by task 9351: [ 894.910974][T24241] kasan_save_stack+0x33/0x60 [ 894.911003][T24241] kasan_save_track+0x14/0x30 [ 894.911022][T24241] __kasan_kmalloc+0xaa/0xb0 [ 894.911042][T24241] __kmalloc_node_track_caller_noprof+0x345/0x8a0 [ 894.911065][T24241] kmalloc_reserve+0xef/0x2c0 [ 894.911079][T24241] __alloc_skb+0x166/0x380 [ 894.911096][T24241] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 894.911117][T24241] process_one_work+0x9cf/0x1b70 [ 894.911133][T24241] worker_thread+0x6c8/0xf10 [ 894.911148][T24241] kthread+0x3c5/0x780 [ 894.911162][T24241] ret_from_fork+0x675/0x7d0 [ 894.911177][T24241] ret_from_fork_asm+0x1a/0x30 [ 894.911190][T24241] [ 894.911194][T24241] Freed by task 9351: [ 894.911201][T24241] kasan_save_stack+0x33/0x60 [ 894.911219][T24241] kasan_save_track+0x14/0x30 [ 894.911238][T24241] __kasan_save_free_info+0x3b/0x60 [ 894.911254][T24241] __kasan_slab_free+0x5f/0x80 [ 894.911273][T24241] kfree+0x2b8/0x6d0 [ 894.911287][T24241] skb_free_head+0x114/0x210 [ 894.911303][T24241] skb_release_data+0x795/0x9e0 [ 894.911321][T24241] consume_skb+0xbf/0x100 [ 894.911333][T24241] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 894.911353][T24241] process_one_work+0x9cf/0x1b70 [ 894.911368][T24241] worker_thread+0x6c8/0xf10 [ 894.911383][T24241] kthread+0x3c5/0x780 [ 894.911397][T24241] ret_from_fork+0x675/0x7d0 [ 894.911410][T24241] ret_from_fork_asm+0x1a/0x30 [ 894.911423][T24241] [ 894.911427][T24241] The buggy address belongs to the object at ffff888031f7a000 [ 894.911427][T24241] which belongs to the cache kmalloc-4k of size 4096 [ 894.911438][T24241] The buggy address is located 960 bytes inside of [ 894.911438][T24241] freed 4096-byte region [ffff888031f7a000, ffff888031f7b000) [ 894.911453][T24241] [ 894.911457][T24241] The buggy address belongs to the physical page: [ 894.911465][T24241] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31f78 [ 894.911477][T24241] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 894.911489][T24241] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 894.911502][T24241] page_type: f5(slab) [ 894.911516][T24241] raw: 00fff00000000040 ffff88813ffa7140 dead000000000122 0000000000000000 [ 894.911529][T24241] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 894.911543][T24241] head: 00fff00000000040 ffff88813ffa7140 dead000000000122 0000000000000000 [ 894.911556][T24241] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 894.911569][T24241] head: 00fff00000000003 ffffea0000c7de01 00000000ffffffff 00000000ffffffff [ 894.911582][T24241] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 894.911589][T24241] page dumped because: kasan: bad access detected [ 894.911597][T24241] page_owner tracks the page as allocated [ 894.911601][T24241] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9351, tgid 9351 (kworker/u8:20), ts 888964135643, free_ts 888857146812 [ 894.911626][T24241] post_alloc_hook+0x1c0/0x230 [ 894.911642][T24241] get_page_from_freelist+0x10a3/0x3a30 [ 894.911659][T24241] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 894.911676][T24241] alloc_pages_mpol+0x1fb/0x550 [ 894.911688][T24241] new_slab+0x24a/0x360 [ 894.911702][T24241] ___slab_alloc+0xdc4/0x1ae0 [ 894.911716][T24241] __slab_alloc.constprop.0+0x63/0x110 [ 894.911732][T24241] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 894.911752][T24241] kmalloc_reserve+0xef/0x2c0 [ 894.911764][T24241] __alloc_skb+0x166/0x380 [ 894.911781][T24241] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 894.911801][T24241] process_one_work+0x9cf/0x1b70 [ 894.911816][T24241] worker_thread+0x6c8/0xf10 [ 894.911831][T24241] kthread+0x3c5/0x780 [ 894.911844][T24241] ret_from_fork+0x675/0x7d0 [ 894.911858][T24241] ret_from_fork_asm+0x1a/0x30 [ 894.911871][T24241] page last free pid 7651 tgid 7651 stack trace: [ 894.911878][T24241] __free_frozen_pages+0x7df/0x1160 [ 894.911892][T24241] __put_partials+0x130/0x170 [ 894.911907][T24241] qlist_free_all+0x4d/0x120 [ 894.911925][T24241] kasan_quarantine_reduce+0x195/0x1e0 [ 894.911943][T24241] __kasan_slab_alloc+0x69/0x90 [ 894.911963][T24241] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 894.911981][T24241] __alloc_skb+0x2b2/0x380 [ 894.912005][T24241] mpls_netconf_notify_devconf+0x4a/0x110 [ 894.912025][T24241] mpls_dev_notify+0x726/0xa20 [ 894.912044][T24241] notifier_call_chain+0xbc/0x410 [ 894.912057][T24241] call_netdevice_notifiers_info+0xbe/0x140 [ 894.912074][T24241] unregister_netdevice_many_notify+0xf76/0x24c0 [ 894.912088][T24241] ops_undo_list+0x8fc/0xab0 [ 894.912107][T24241] cleanup_net+0x41b/0x8b0 [ 894.912119][T24241] process_one_work+0x9cf/0x1b70 [ 894.912133][T24241] worker_thread+0x6c8/0xf10 [ 894.912148][T24241] [ 894.912152][T24241] Memory state around the buggy address: [ 894.912159][T24241] ffff888031f7a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 894.912169][T24241] ffff888031f7a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 894.912179][T24241] >ffff888031f7a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 894.912187][T24241] ^ [ 894.912195][T24241] ffff888031f7a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 894.912205][T24241] ffff888031f7a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 894.912213][T24241] ================================================================== [ 894.912222][T24241] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 894.912234][T24241] CPU: 0 UID: 0 PID: 24241 Comm: syz.2.3961 Tainted: G U syzkaller #0 PREEMPT(full) [ 894.912256][T24241] Tainted: [U]=USER [ 894.912262][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 894.912271][T24241] Call Trace: [ 894.912277][T24241] [ 894.912284][T24241] dump_stack_lvl+0x3d/0x1f0 [ 894.912304][T24241] vpanic+0x640/0x6f0 [ 894.912322][T24241] panic+0xca/0xd0 [ 894.912336][T24241] ? __pfx_panic+0x10/0x10 [ 894.912355][T24241] check_panic_on_warn+0xab/0xb0 [ 894.912371][T24241] end_report+0x107/0x170 [ 894.912384][T24241] kasan_report+0xee/0x110 [ 894.912398][T24241] ? fbcon_prepare_logo+0xa03/0xc70 [ 894.912420][T24241] kasan_check_range+0x100/0x1b0 [ 894.912437][T24241] __asan_memcpy+0x23/0x60 [ 894.912456][T24241] fbcon_prepare_logo+0xa03/0xc70 [ 894.912479][T24241] fbcon_init+0xd77/0x1900 [ 894.912501][T24241] visual_init+0x320/0x620 [ 894.912523][T24241] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 894.912541][T24241] store_bind+0x61d/0x760 [ 894.912556][T24241] ? sysfs_file_kobj+0xe4/0x290 [ 894.912575][T24241] ? __pfx_store_bind+0x10/0x10 [ 894.912589][T24241] dev_attr_store+0x58/0x80 [ 894.912609][T24241] ? __pfx_dev_attr_store+0x10/0x10 [ 894.912629][T24241] sysfs_kf_write+0xf2/0x150 [ 894.912649][T24241] kernfs_fop_write_iter+0x3af/0x570 [ 894.912666][T24241] ? __pfx_sysfs_kf_write+0x10/0x10 [ 894.912686][T24241] iter_file_splice_write+0xa24/0x12e0 [ 894.912711][T24241] ? __pfx_iter_file_splice_write+0x10/0x10 [ 894.912732][T24241] ? __pfx_copy_splice_read+0x10/0x10 [ 894.912753][T24241] ? __pfx_iter_file_splice_write+0x10/0x10 [ 894.912772][T24241] direct_splice_actor+0x192/0x6c0 [ 894.912791][T24241] splice_direct_to_actor+0x345/0xa30 [ 894.912810][T24241] ? __pfx_direct_splice_actor+0x10/0x10 [ 894.912830][T24241] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 894.912850][T24241] do_splice_direct+0x174/0x240 [ 894.912873][T24241] ? __pfx_do_splice_direct+0x10/0x10 [ 894.912892][T24241] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 894.912912][T24241] ? rw_verify_area+0xcf/0x6c0 [ 894.912931][T24241] do_sendfile+0xb06/0xe50 [ 894.912952][T24241] ? __pfx_do_sendfile+0x10/0x10 [ 894.912972][T24241] ? __x64_sys_futex+0x1e0/0x4c0 [ 894.912986][T24241] ? __x64_sys_futex+0x1e9/0x4c0 [ 894.913008][T24241] __x64_sys_sendfile64+0x1d8/0x220 [ 894.913023][T24241] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 894.913040][T24241] do_syscall_64+0xcd/0xfa0 [ 894.913062][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.913077][T24241] RIP: 0033:0x7f80ddd8eec9 [ 894.913089][T24241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.913103][T24241] RSP: 002b:00007f80debbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 894.913118][T24241] RAX: ffffffffffffffda RBX: 00007f80ddfe6090 RCX: 00007f80ddd8eec9 [ 894.913129][T24241] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 894.913139][T24241] RBP: 00007f80dde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 894.913148][T24241] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 894.913158][T24241] R13: 00007f80ddfe6128 R14: 00007f80ddfe6090 R15: 00007fffbed507e8 [ 894.913173][T24241] [ 894.913228][T24241] Kernel Offset: disabled