last executing test programs: 5.871873526s ago: executing program 0 (id=368): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) 4.946159627s ago: executing program 0 (id=374): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) keyctl$auto_KEYCTL_SETPERM(0x5, 0xfffffffffffffffb, 0x200, 0x1, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x4800) mbind$auto(0x7f, 0x4, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x3, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto_KEYCTL_SETPERM(0x5, 0x4, 0x7, 0x2, 0xcc90) keyctl$auto_KEYCTL_SETPERM(0x5, 0xfffffffffffffffc, 0x7, 0x93e, 0x9) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) io_uring_setup$auto(0x1, 0x0) close_range$auto(r0, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r2, 0x0, 0x8000) socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000040)=0xfffffffffffff001) madvise$auto(0x0, 0x2003f2, 0x15) r3 = getsid$auto(0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) process_vm_readv$auto(r3, &(0x7f00000000c0)={&(0x7f00000001c0)="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", 0x10000004}, 0x5, &(0x7f0000000180)={&(0x7f0000000100)="5a7d13da84ebb930fc87d68075d057582cc3aaecf34446e49f0ad8331b89fb6e74172ed800e9505530df2605", 0x3}, 0x7ffffffffffffffe, 0x5) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fsetxattr$auto(r0, &(0x7f0000000080)='/dev/swradio12\x00', &(0x7f00000004c0)="773b0043acdd6cb021c4deda9fcc5528bbd09c7c385609b08c514dbe46d0ba25859c96862a49619234005a94a8fc583759a9fb5741f7967ca3809cbd88b8cb160bdac87ef0aaf4d4ec709c5c73b4a9d8e7dcbbf1a4b8ef9f08c1b4930da648f948175416387fb993387e8021baa130c88e1c1b4e240b5a589cc22fe026d4e7dc84db825493a3446e87c56adc9bbbcd147337f24d60dca39734cd2e1bec715900d1e9f869c7703691010f1489cb966c868cfe7136f03601f6d31fa910f0446fcad583d9faacf959f3054bd4733f80772120ecdf5ba8a6bd732841825d62704227ee90c6", 0x2, 0x9) ioctl$auto(r5, 0x40045431, 0xffffffffffffffff) 4.763816594s ago: executing program 3 (id=375): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x83}, {0x2, 0x800000000000006}, 0x4, 0x8, 0x1, 0xb, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) poll$auto(&(0x7f0000000040)={r1, 0x0, 0x1}, 0x8000, 0xff) (async) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) r2 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x480, 0x0) mmap$auto(0x0, 0x400009, 0x4, 0x40009b72, 0x2, 0x5) io_uring_setup$auto(0x89, 0x0) (async) mmap$auto(0x80, 0xbb0a, 0x2000000df, 0x18, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) sendfile$auto(0x1, r2, 0x0, 0x7ffff000) epoll_create$auto(0x2) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) 4.342477074s ago: executing program 2 (id=376): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create$auto(0x0, 0x4) r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r0) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000080)={{0x401, 0xffffffffffffffff, 0xee01, 0x4, 0x2, 0x1e, 0x2}, 0xc, 0x7, 0xffffffff, 0x1400000, @raw=0x6, @raw=0x5, 0x8, 0x0, &(0x7f0000000480)="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", &(0x7f0000001480)}) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r3, 0x0) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000002cc0)={0x14f8, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x128c, 0x4, 0x0, 0x1, [@nested={0x4, 0x74}, @nested={0x1147, 0x45, 0x0, 0x1, [@generic="f876acb0f02e31126b1e24d16e112a93b65ab587a281daad4b6b0aa11ff92983ac9971f13b69fc88df52e0db754e9689478da04f7617f795799606c41163b8ecddb0ac1cd5404dc41af7c0f2f821996e39fd85cd60fee6fc260552d592253cf236844ea3730b890ebb58c89a944002d4f6be7fb92a837be4390921ba3144dd13f7df397cc69c5fb7ebb7f7aac0e93cb9a94b8ba98a65f506cac636c78f81696e47634e0dc350", @nested={0x1004, 0xc5, 0x0, 0x1, [@generic="667069b1227bf2eee892592bf6588af8784036d2ba9cb78464cbc539736aa104c183b34654ee97e43cfcb35ec9bce8df4504ddff4d5ef98d91dddf8e2feb7a1b32b8864e34550dc9906e4b74b7985bda9a4885edce1350e67144de5114fbc9ec9e9c9f0e03edc53a2090a30c29479777543bf24035d0be0d67c4166a3910af79f59838ba61e7e23129549884b47d32a4e73f76ab1ac4014c07c1bcee3739730012d36f1e5ac4c45f8d55a3714019022a053e085c1f9a31621f06a53ea469545923e0eef71b5d15e4a683da9f3c1b2ef84b43a125218ccfd5a181459ac1ef32ea9bef7a90471f266a8991f32f5a762518f5afc723ee47fcfe7f86b79a4976415557865ddac813bfdc62da1a7a020fa71933361bb87038172fb6147d214f928300e1cd20c44191dfc6ad5cdde3962bc6653d10058903b7c111cd678013850d32f6f1653bd14f5eb3e82505b93e2b144960a5a3159253124cd840d9968736260841937d635c1a1d51e9f1768cf4c0f7d9114cd322848d8396add813cf852976425322ab2993791ad5b6cbe1a2eb473fc9eb2a062712bba6cf45674927d5e68ed56c2d18ad617da85dd5769f405f07dd32eaacc2c39e4f6d2fe3835fc4b59cd3d05de08de08a37cce59d6cc0259e682815edcb141c57f3a33c67c482f82835c563bb999bb9b81db70566dc6593a852aecce397b8c5bbdd0b3a1d2a7c8a14c8c8b0239dc20fc60aeb6e01515518ddd73cacc6a3faf96963d6ce18a5fd6f5b7dd6066599ed609e34557121517145c1fe628a623a5d93bc23f97d97bd571dc71f4fd412f1e79a6a7e0a82884895f7017df3559544fe288c6dfce6a182a2fabb4cfea2b0d00f55370d4500346a99048cdfc01e8082c94f1ef9d1a1b5b5b7b0ff5f62fb9a95ff1977732467d2aa8b71984112558757ffab76f173a76793ab6fd1d6c25afba3b1555b67c8705fb4b3bedf6d42686fb4b3057c74cd8fce1954f1545ad0c9d0864bd1c68b14a85073266bedfc344a2498d3cd155af5d94c61832b5eae17a10a8603ce7e3fd6d565bc5d06aca668694afb0f46d47d1e030c289954cae2c6aedfb607d6207fa26ac772ceeeca2ecbf2b661a61f2e603c4d8d07f693bd462b96cfa792f115c678bb759b7f9cab76abcf52a83a12822a042a12a3960b07b1304d2552b4eddbdc4a640628b186773e4467c9c1b90b89b27a09010eff304178bf48ac1ba2d8f09f2dd9497c9d1dfccbf318d6e6ebc8c6702575b749e8ba531f63c1004da28d91afd8974e12929b472b25c839aa9b881d2f3435353a2b9ff6a6730847ec92d0fad5a55bcd6d4cea9be62022009fb943a86eb3a0b0394a3af4057584fcec18102099c6b78145a549b24b34e216a3a9cf5e4a21c2816443ab94633f876dd0c166472f30aba52d036e739e7802cc11ae158a250f1b3cafe332ed3b7bd49763a970c47cdaf37aac68f85ba814b05ba27aa5268eaf85ed2636838b9dfe28d343423056fb45d9b94e2d95fce65b1961e3c3e9e5b902e07ff793a8d271d96768ed62f3303a306a0778363e5eb57d13e5de1770cbe616678f82b3c64f40ee67048cd17f1674217c5a5727dd077d2486eba7150b3bc76e467e46ebf99ad3d159b1c4478afc1be146c6288ea9b9b5a9c5fb5ee15fb18b2c6f55a52f5aba96ff38b92145050627b1bc7dcb312c1ceafb094d45151e3ef6bb47de6f6708369988d0f310f5f151ee6fe80b493dd71ab524f606c53c3609f13a7c6c39f5a5a81447ce7715bc204382b1f46d0cd6dbeda6b9c6df6d7b3857bbd6973f509dd54535f873a67e660a7d52956fcff06ec2a02fa4eb894b6926e5920ba80ccf9dbc532c72e537a67340313b37fff814922480bfe823c0a611578a4bd5923b3c7a8b431488669f65b24229bc8e689dddfd404e3ada2462773436704e3d3d92a0cc012025635dcaecb438ef6d51deda5d707df41a32a5c9abab00e052c1ae8451ebe5233313f32e7d992ad1b482e3e1fee3976f45a22402ebd6cab50146f4ea5c34965bea03cf17b04bbc3bfbef3398072ca798fffec9fa732ccfb88131b3cb7dfb73a4dc32a824ef1e05be6cd004c37c8c63d32ab15eb7dfd8bb6176642731f30491f77d762544a953cde6e189898effd43cd0cedc8179139ed94f77b7e72e98abcd8261af01b3723d750dfc16a4048c3b39bb6558f9135fc20f7830f346a81a2a63c816b3a0d8a15b89bfac498ceeb2184f08870e8888e076d18b53fdb8643bc02788bf4756f3820c5887baf77bc03fabed29bc1655774e7b3c6738d7cb188010ea7bca0f72870ce8f8b24a42b8e9fa9828a935d5bfff4492dac69ef33f0510e1fb1bf34306e80bdb01fc262c7bfdb1e6e7cb7f4c75d7f2677ee3d49502da74a6b50849ad0a1164de0605e66b4d6d219b934bd8fde8ad2f2017a352637fb64bcd7be787670356cbf34243d9fd8c0af25a02f0c9621e4f3afa5acd2cb24e4aaf752636a5836322ff69d5d743bd2a4fc09dbd47a1437283250805581351df2ebe598ed3d00796a2be18a401003435b260c5c8b77e6bfc46c8917c6cc843f5136b9471d244354b09085113fde819fe90e6f24518ed0cb96614d8657bfa28b6c5e457c1644f56869d4501b9543d476ac43a17adce428626c36fba63135e5236cc5d14f0232230bdd3dd58f88ffca8a7bb8743b01a1fb698bdf032ce8abef34f8787b7ec541b1a0c657285c316fd9eec53973461bb041704acf963664dd1b868b8773d2afb54e5ecda8934913a723d32dfd8b5f5f0e36e1081469b4e554223feed3a22bcb8af36c8d462671085f5313ddc26c9c2951a2c30ae01ccd395058782ddf5d87d3504bc909be964cc0e4f0f944c2e47e56cd9ca854ef9c91fd61e38a7878456f8a74a705b23cfe244014846eae65a65f28dd19a0109cf8dd02633b300b2aed36aa4e9268fec65ce4fe93ccc07719fcf689c84a3ed2ae1c4b289620f4af19477e9c38f125162b9e2be470584b7b59921288f40d1cf993b1f50310c2475037007990f7d43399901e4c7602a0256c20796d0557b1b431d95ecd029824250c1e6ea0bc7cdc08e3a197af27ad44be101a0d7bf7463a3a3eddc44101613b5022713bebd20035a0a86b852eb20454c78a7636566e612a95d3a55c69bc9123d56b2efc331c0ff55f51c6a3f4e9997fb0df98662ccf18d6e350c663d2eae7834364dbd22e4b5d920153c8903c8f9c1808533c3dca3fd82799383036748a1a451ea09f3e34f2e1ae3dcea2d00ce05416ba5c82317a1d1a5321d8b44e6859664c7fc36b4d64c79f4d4f0cdfc11d1a924bfbef30db0c433070776cae6bf9b7c9c8b17b7e6c6060e1fe7c5ec94b69bf6468c5f0a8e51bf8a060295766bbf3bd299e4b2750f28f4f996d6738eb2e021516641d7d6c839be177a798a022a7d518fa42016c2577969148bc7254c6ea9eab84281d237b32b02f8d48726a3127ef5eda38a10c559613b0fcbea41e8ee96984d5d7e7a3d3fc18cffa6291d7a401c6649727b19d6bc53888916cf7c3b924e569872b9f8ddf5a0dd50769712e64f38ca0c8ce78395b073b7e80c9ad4a7922a532b4c6588cd821fdee9ccddcc0ea0ef519ab22a38fc70edd8f8e26f531db794a2badfd630c2bee9d3329c2a6522857c5611293f59e0ebdfcf51076d077ff2546c7ac8a1a423ff766c66a62582f199cfa6d631a69cb3cb8be6c8ef98a35f2eb3ceeb8c30d745fecc33dfd8a536bfb6b48cb92fee14e36187f909fa62256458afc0841883cb0dda01b5c69398df421c8307540566f485a932dea83e0a65efd179678d5cac91b592bf15eeb878f2061021324cc78c7367ae9def920b25eae086d1c5fa715a40aae682f17ce19b847d073ec7a472d381eb44d9d00a42e0c31e5e087d914cc93e206d8da904a459ec12286377d9dac37bdfc70167ab1005d12c6142b39e586de8236d70e81b8caf87b0eca24066e14f8c9c8c403fe143d76385618c1096e72ad29c62d7d4eaa13fa9a9e4525eb5f835892085efa9d3889247cf62d315ee0d3739e042b7d15dbf3c7a6dbd2002e5affeef6246e42b4586bb620cf562c96857b6da60906f886942831ba7c77755723c763acb284efa4dc3b48f64c085bace25d4b637fa03589e3c18ed694bde46254c15b97fe3267baa9a8465db54ee2c2b13c35901366e65e6b0b4d44cae6cf603187363787c99ce35d67d6586bdac1879d9269702b96e27f694a19c559fc2a35edf24cf50d3db7b88525429375e28902ee549a94a2403f04b84cce2ed9cb09822b1628c959ad7a235cbc9a65bbb121cb95aadfa2f0bcafa3b3237a9e4aa562f562969334284a980b306cd97754784f09ee55b8ccc5d183fe60b6151a4a2c7d5831100018ef0ea60eaba1e7b3cf73aead06ef0127fc06240206b9b7996072ce0a1d590cce953faa0ddf793e40c98104c4f4a37cc728124cdf82253ca02fc46fc7b9390b34a4d68676ad896a1d33c6a3234486d38f8b4fc81977728d715e01696e30e7fb5a216c9545f0c4398e0bdb8590ec7f039b9f54f8c22cf1d76ffabfbc45ed2b076258c1d37557e541403007d578234f0b86144af78a6da0d3d1b3a4a664767ee0af989b2772258b905f4056046bce2aa31a95188a10f20329746ba657d9595dacf537c03ab2f55eabcb467033ef4ce43181e55afc55aaebdd0b67cee5fe446ce14a9ccfa5c05611c1730b57051a1b06a131ac47625614e8b4b9fb40f2862726747d1a52e2382c6ce80b0ad1f59224c50206e1c9aee0544a730a3a06f13c593ead0da80280d51253cc7dad8bacb380fbdb33a5a3c162c8d7f44d0afd9772d9fd7d458b2c10511cf86d82b8e0cdce3a6652c1522215308aa823f85259a1f2a6ad28dbee85ecf092abef739e9f504a41a475ff75ae827139b87b15501c09d080db6527f9d219513de312a6b6174641b15ac100694148779d99afbdb7a56ef94f86ebce1b03ffd3c5a6a71fda0f5188b1c1e2504fce151b43b462351d34c8593d29c2a15d0cd323c93860eec34e7919059efdb05c2e2e95ce42a376a205d07566731bb94b723e59bd813448d629468390bded0cd17f4f0f0a6fd72b7f258cf30c580bae6f53fff78b678c2a9c8453d0eac1cb16bd4967aa74ea9bb1c6045410a84d8e5ba45becfbacfea02ecb6bc296d738e19dba47a644088ce2172310811f5a1420038e3daef1cfa25f58b549f785c892ba33271f2a71072212a7af36490eee3a7f41c00820c0d2725bf37bf106b8d1b7d514e20297e3aa4a355fe65ca96d934e731b3f2fac61ea7809449664d10e840d929d4a36b19b766a83426b15deff7abc8f75e6ffb7f5f0f7a6d3745ac8b3801306771de31d774643280511437d8270ad1c03cce51415ef7d327e1092c5b4c830b551f655df0025a0985b9e7f9456341d0146823f93768b0f82d37e778df3b472093004430c9c0a9152f7fd7c8dbcf2715d859808f1649aaacf278173915b1dbf72a0c6f974e1faa4dbf7c0f45dad2e87b702d6f80c5d0910a5d22209e390f4d9cf73a6a0b187e789fa17eda15a1703b8837e5d50180c55d9fffd6e282aac15fb55cc4af083b3da745c4a99a7d02eac3d0fc496094746edef3d2d79a4c86dc3e041610b7ef8851b457c960a7d3d5ff78eb58d1762e7aa4776c7e2eb93103a697e8218bef0826539deb504322dd7bafbf1431dc95a97ce93e3fd4c3338e40955dd8de1980c2042ae24fff93d265d7f50a8fee50d0ae3a01335b6b694718dbf36e6ac81b24f565dde5a82928a1a7346803d68bf341fa70ce348474e6"]}, @generic="d7a87daa721002abd4a88ed70dd7aa04024340416c242a1a13cf74f054f7ee4d1ad53bd143528fcdfec5c49dcce74d050cfadaa2d3e1a6b839f363a0d634c1c481321058dca9fac8757e8027f5a1410931", @nested={0x46, 0x69, 0x0, 0x1, [@generic="4fac4f0c564edac6f127c2d057f12fb1b26f421a9c5203ae80f1b669ef8deed78cae07743cd1dfdb3bc318990f331ddc570bb524bf5cce86a9573bb7447f1cd04049"]}]}, @typed={0xe, 0xd2, 0x0, 0x0, @str='/dev/cuse\x00'}, @generic="667d917765cb0b82036c616b78015ef6d57d45dbfd40ae2c9e76d9bfacbd2d8d2d37f5c2e19a4d8f6871fd74790cb3b0fe3033def57c780354651d12cd22f6d9de290cb8f7b3811fa299176d85b245c0c216fac9771c2aba206018b8ce987d7295177ccd", @nested={0xba, 0x7d, 0x0, 0x1, [@generic="54d7a41040138082c6b29dd9fc85998de95f4c633b7a63e207f7b5bf80d3b9f4d8e60f220fcc04c2232fdbec80fe0e0d9946a6d0ab4ebe169c3dc82bebc8239c2a76e954df8d6fd6430f28f8121d5cb75bc4394e81d5bd63d27ae92b83602644750d111f36f34f1155ee9874db5f9ce55ee58a715c0b05def6cb7649273bc16e6fe6b8e21bd62d4e3e990b0548166fe3dd485f3486e57e7fa9e89df23fe11d4cfabbaa56eda038e405f7", @typed={0xc, 0xce, 0x0, 0x0, @u64=0x88}]}, @typed={0xc, 0xd3, 0x0, 0x0, @u64=0x8000}]}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0xc}, @THERMAL_GENL_ATTR_TZ_MODE={0x8}, @THERMAL_GENL_ATTR_TZ={0x238, 0x1, 0x0, 0x1, [@typed={0xaa, 0x8a, 0x0, 0x0, @binary="40ad426cbfc4836a5ae345526499cdc8f5daa906c099e1f043fd315197726b38671ffb70c483e17dbbc447b63dc7bd3cadb7f4f2093832505961b2b67c191ce8a1cd8c97e3b603c6ed88c0843c56da2dd52a28d355e81f2c5d0dc2d8decdb403f7483f9fae2dabae39bf5656cfccf1f57844ff1a285e6b60e8589e3026cb450b3fee89513fe8495c7d810ec5f56a89651303d2b5ca025a73740a27ffe7ae4eccc4f555f6ce9f"}, @generic="79d16453d31a8ee7eb10fec8216f7e502c50b83923e541ce0ead604c85107f377d85f3d2e062288c0792186b4682ac95c96185986e4bbbbb9a427ed5edc1a6b1972df0e8f63d8793474875f8df36c7397bbff1a11b276d8914ecb7a10cda71ed161ab22dd762b64d85991a8f60f2206cea54763dce62e392c54ec6b70c637f51b6145e5e84c814eca2b6bcc79013381e697c8ed6cf83b99a299d6f91bb1575e9ebca730b52ecf080", @nested={0xdd, 0x10b, 0x0, 0x1, [@nested={0x4, 0x6e}, @typed={0x8, 0xb, 0x0, 0x0, @binary="dfc8a8e1"}, @typed={0x90, 0x108, 0x0, 0x0, @binary="9d7042145c993fd85d325cd578c5ff394398300d541e2413d4ac142681fcc26c9843fd5a20d2a4693941ac679351fbbc09f93599bfa8c003c5e924381359d82d25226ce4f1065915ef5ab4c39272bdd1481474e881c7d71e5cf1f0c76f3ce31f4966f3bcde64fe094703ed40fba31aa95e7698ace37f26ae36a7078adf40c570ed0ff1c7e2e2ce1cc889085a"}, @generic="2532ba342b543220e33b5311cd0918649314156b89dacb924a4932a95fbdc1a88ce5211451169d14787cd53da47b0b84a70c1453e5", @typed={0x7, 0x10a, 0x0, 0x0, @str='[-\x00'}]}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x3}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x7ff}]}, 0x14f8}, 0x1, 0x0, 0x0, 0x4040840}, 0x20020814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) statx$auto(r0, 0x0, 0x1000, 0xbdf9, 0x0) r5 = socket(0xb, 0x2, 0x101) madvise$auto(0xb37, 0x4, 0x3) getsockopt$auto(r5, 0x84, 0x6f, 0x0, 0x0) 4.076220755s ago: executing program 3 (id=377): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) r1 = gettid() setpgid$auto(0x0, r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) write$auto(r0, &(0x7f0000000040)='\x00', 0x9cd) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, 0x0, 0x6a) (async) gettid() (async) setpgid$auto(0x0, r1) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) write$auto(r0, &(0x7f0000000040)='\x00', 0x9cd) (async) read$auto(r2, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.443935247s ago: executing program 2 (id=378): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x20002, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) 3.26224538s ago: executing program 2 (id=379): r0 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", "213ea76652ad28e8b96ec5ed5243aea3", "25222c3aac25ccff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799448a9576c948fc3fb995daec2f1fc9170a70b4b71b44f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f17a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d615979b05547405d7e633a060cdb0fc80f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0xd) syz_clone3(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x5, 0xd, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setreuid$auto(0x0, 0x7) 2.938008748s ago: executing program 3 (id=380): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r0 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={"a4d1a6dc173b3eb14edc12ea9a0641460dbb41c2c336797b054cea423495cad8", 0xb808, 0x80, 0x8, 0x11, 0xb9, 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r3) close_range$auto(r0, r3, 0xf20a) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000100)={@sival_ptr=&(0x7f0000000080)="072c0e514381efd81a6c13cc367a09301f395f436a323a8978a7bba442fbf687f5dbc667347350cf486c65a8b766a14266c7fbec96a8111326", @raw=0x9, 0x8, @_tid=r2}, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb8f7e25070000005e00098049676b779b2a77a76a060bcd388839c7617a6c0e91845ef4d22e19af93c01df84cf62f00fdf276ac90aa6a448119459bacf1d1702c6021823c82c1da4e746df34815453d66849a3aa082454feaf2980e3d4280983336206e0e2bcd304c93c4e8e2e9628e35"], 0x74}}, 0x48845) close_range$auto(0x2, 0x8, 0x0) r4 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xd) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e00a7619b4e04d05ce0f5757c36be6aa1e270af87"], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) read$auto(r5, &(0x7f00000000c0)='\x00', 0x2) read$auto_cgwb_debug_stats_fops_(r4, &(0x7f0000000280)=""/159, 0x9f) r6 = socketcall$auto(0x8000, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) 2.714979696s ago: executing program 0 (id=382): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) bind$auto(r0, 0x0, 0x68) listen$auto(0x3, 0x81) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/veth0_to_bond/send_redirects\x00', 0x10000, 0x0) ioctl$auto_EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r2, 0x1, 0x1, &(0x7f00000002c0)='.*+%\x00', &(0x7f0000000300)=0xfff) r3 = memfd_secret$auto(0x10001) write$auto(r3, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x7, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) write$auto(0x3, 0x0, 0x100085) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x3c, 0xc}) 2.64617722s ago: executing program 1 (id=383): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x20400, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/direction\x00', 0x20400, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x8926, 0x10000000000402) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card2\x00', 0x48000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.450402268s ago: executing program 1 (id=384): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x20f, 0x1, 0x1e00}]}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) mmap$auto(0x8001, 0x3, 0x0, 0xffff, r2, 0xffffffffffffffff) ioctl$auto(r3, 0x92106411, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x60480, 0x8, 0x10}, 0x18) r4 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$auto_VHOST_SET_VRING_ERR2(r4, 0x4008af22, &(0x7f0000000000)={0x34, r0}) ioctl$auto_SIOCGIFHWADDR2(r4, 0x8927, &(0x7f00000000c0)="cf2817adc9c1aeeec703d58acc46ba6e4a6312738e9e8a4d695e48a2e57e52923f35e80293a5670e3a9f3e1fa1dfed26d4ffe15b2030d0217ba531a9da82f615f820d7dc4f1beeec5bab0f1bb311089803f7f0bf41ba523797fa0bdee2da5d7aea3fb1417b4a996058c93c852e47975e") r5 = socket(0x10, 0x2, 0xf) r6 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r5, 0xffffffff}, 0xd) bpf$auto(0x1, &(0x7f0000000080)=@iter_create={r6, 0x98}, 0xf) mmap$auto(0x3, 0x8, 0xb, 0xfffffffffffff1f6, r4, 0x6) 2.175377593s ago: executing program 1 (id=385): r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000005f6bba441810", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) mmap$auto(0x5, 0x4, 0xa200000000, 0x40eb1, r0, 0x300000000000) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x17, 0x0, 0x9) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x3ffffff, r1, 0x8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, r0, 0x8000008000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1d00, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x8001af85, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x143140, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42840, 0x95) read$auto(r4, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3fd) open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.09480681s ago: executing program 2 (id=386): syz_clone(0x14a10480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x1}, &(0x7f0000000200)=0x1000004) timer_settime$auto(0x40000, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1000, 0x8}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) r1 = memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2604a080}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = prctl$auto_PR_SYS_DISPATCH_ON(0x8, 0x1, 0x0, 0x9, 0x401) read$auto_ext4_dir_operations_ext4(r3, &(0x7f0000000080)=""/4096, 0x1000) ioctl$auto_TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000000100)=0x6) setsockopt$auto(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r4, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 1.948785957s ago: executing program 3 (id=387): mount$auto(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/workqueue/cpumask\x00', 0xa0c00, 0x0) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) r3 = io_uring_setup$auto(0x88f92b, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r3) write$auto_uhid_fops_uhid(r3, &(0x7f00000002c0)="a7a1ca0b5304300753d3ee13544a80c3cca5aaf044d750c044f879c877e713c2757395b312bd07285a79caea5dc3f07d974863e29c1632662c25a343224fa04275c6136f9f5b551b7c7468b9004c9b4c28fdfcac3a8d8193740d2776be1165120e2cc8ee46935b209ffa24a993970e044acd59cc0407f2f4f23ea1125412b39ab9e726ad279cdb88bc0466fe78b2a03ac917956a607f137487e13f4cb97676e56b44a211af7eb9dc6e0346baa1f2baaddbdf5ae9e4f754ae8ab0eb7562b9136985b1c4b5b59de98f7630c3c10d24f2ad75a57c739118a3d951bfc92a21fa1a29fb3ba58e342d56bad5", 0xe9) mmap$auto(0x0, 0x400005, 0xe1, 0x9a72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='\t', 0x1) r5 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x99, 0x100000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r6 = fsopen$auto(0x0, 0x1) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) getsockopt$auto(r5, 0x0, 0x29, 0x0, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x8800, 0x0) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 1.864424073s ago: executing program 2 (id=388): syz_clone(0x40000, &(0x7f0000000000)="cf88854f951c4d45a5d476ede79071ca2497785051cb33dde0dc0884c26450d11b0096e96972", 0x26, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="5d80ca4a43335d24328f792a30bcffec14ba556f2bc2615e22bb6ea359fd24c1827c80a9fa76dce98ea0e58ba530f27883b42f2d4edf54710524ed9082713e1ce374c9755f46f73ea8bc1d8ce2edd3976f1270105f9a272de23afb96c1854440f302c8627253a42378f1fe3641ffcc47ea8c0eab3d040ebab3acd95f1d5203e9d04034c3de2bcca7957b42537c6dc972200ae523fae4a2b19a8fd8e054e9a5a7459b9c993337706499fd55c6eb") bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0xffff5466, 0xffffffff, 0x400, 0x37f, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x28006, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, 0x0) 1.76054911s ago: executing program 0 (id=389): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="200026bd7000ffdbdf355f000000a4d11b91be7983c4ddef152a4bd33f882441ddbf0fa83cd4232916239b4f5a1b5073c37e07c75fdd0e10ba84bbb1f061459ca99179d42361aaae7fc7945306b663e462294c8484f5e48346328ffc267e7eacc2689932ab48d8e746949c944edaf1b1ee24959f91d5932200ff46f4fab883b51fc3f64a1121495360697d66869856366739f5203d35304837e52fe1c2f7ba258f285be44907d172312f51b7d2db4f502d60bbb938c586d2376763818058422ae0489e50158dc4fa9ee2ffc07e77cf3fe34095"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x6, 0x4, 0xdf, 0xebd, 0x401, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x3, 0x8) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x4) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000240)={0x0, 0x5}, 0x3) (async) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) (async) mlockall$auto(0x4) write$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000040)="1e9a069d367207b80613721111d4885cbcdee62e58a82e906f064dca2f0ab2ce2c92b8743678fa039d7546dd5b651d37885f609c1f006619a7b9c03a0957b88aed7ab48d8c28eeaccbd5c065e2d22e35b2bc5b3626a19c3a28389fb7329b042a03eacc51be915e54444286a9713dee29c4cc19a3ac0985943c741837a04a4cf9da69c3b4ce9e4416b1dcaa71e30f21d8d03af377b71bdd9688f82e895b3be032b6d9a37c1210ddd04992b7a1179eb114da63f5c901d2770095e8574bfc300e3c9d5f801c0795783de2d1fa1013", 0xcd) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) 1.227350788s ago: executing program 1 (id=390): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') futex$auto(&(0x7f0000002f80), 0x6, 0x3ff, 0x0, 0x0, 0x4) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) getdents$auto(r1, &(0x7f0000000180)={0x1000000000304, 0xf88, 0x17, "29e87495efed20fc46210a3f44d3c7be0a1b0442c39cf09c90116473ebcfcc7ffccf1ef0814bec34ee1dd0a5078ce3a51052eb58b2db5819cdd800000000000000809e2fc9842b9de1dd4391fc960d9f08000000fc0a94274ec2f27d872daf624fb3df33e67363be735d000121fc8f83372fcc27643932703c3ff1de37077f888743e19da14360821682a4634884d7b0bb981e6124852035c86a6800dc85996444a51e20e3c566824800007982beb8759492a280ca8736f7c659179f8b9e079198c8a6c7322bba228bc416"}, 0x9d) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) 1.174876163s ago: executing program 3 (id=391): r0 = socket(0x2, 0x3, 0xa) r1 = socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r1, 0x84, 0x7c, 0x0, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x384, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/112, 0x70) poll$auto(0x0, 0x5, 0x400) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x40, 0x5, 0x8000000008012, r3, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) lseek$auto(r0, 0x0, 0x7) getdents$auto(r4, 0x0, 0x62d4) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1.088774337s ago: executing program 1 (id=392): r0 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r2, 0x2, 0x0, 0x0) bind$auto(r0, &(0x7f00000000c0)=@xdp={0x2c, 0xc, r1, 0x21}, 0x4) r3 = socket(0x18, 0x5, 0x1) getpeername$auto(r3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x5, 0x3}, 0x54) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x5, &(0x7f0000000000)={@siginfo_0_0={0x276bb, 0x1b40, 0x4, @_sigchld={0x0, 0xee00, 0x800, 0x8, 0x2}}}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) 993.981678ms ago: executing program 1 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0xfffffffffffff4e0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2051df00d6740db125daf7ee4fb3d009058b0757812e9006e2b66728a8ee5e63d5b854ea3d90e1712bc969f9db6c7e2edf031ab499f14582b78af0d18fd05f72e256c35b3857fa2df5d43189b678bdef52fa2633f47836a76655d929f8cb08d28f76b27c2d9c63ade16c74cd694f117f0fd2e5fa2bf9a476e97a339cb14069d36c7f150c10981323516739d3d619a95d7ec42c0a1fe593d40d13a8b0d8", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) r3 = socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r4 = gettid() kill$auto(r4, 0x11) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x40006, 0xe3, 0x9b72, r3, 0x7fff800000100000) socket(0x2, 0x3, 0xa) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x40, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, "f7f3e02819c4bd5a"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) 852.358622ms ago: executing program 2 (id=394): mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x2, 0x4, 0xdc, 0xb}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000400)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x18, 0x4, 0x0, 0x1, [@nested={0xe, 0x2a, 0x0, 0x1, [@nested={0x8, 0xcc, 0x0, 0x1, [@generic="85f65a9a"]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x2, 0x2, 0x88) setsockopt$auto(r3, 0x0, 0x20, 0x0, 0x6) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) shmget$auto(0x8, 0x10563, 0x568d1af2) mmap$auto(0xa4, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r5) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) 675.835598ms ago: executing program 0 (id=395): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}, @BATADV_ATTR_TQ={0x5, 0x19, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x9}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 482.400879ms ago: executing program 0 (id=396): mmap$auto(0x800104, 0x6, 0x4, 0x1c, 0xfffffffffffffffa, 0x4) r0 = socket(0x15, 0xa, 0x3b) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r1, 0x84, 0xd, 0x0, &(0x7f0000000000)=0x7ffe) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x6, 0x23, 0xffffffffffffff29) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0x1000, 0x10de7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x1000000007, 0x0) userfaultfd$auto(0x1) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, r3, 0x0) mmap$auto(0x4, 0x6, 0x8001, 0x9b72, r0, 0x8000) kill$auto(r4, 0x11) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 0s ago: executing program 3 (id=397): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x1a1880, 0x0) read$auto_dfs_global_fops_debug(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. syzkaller login: [ 81.389097][ T5812] cgroup: Unknown subsys name 'net' [ 81.539112][ T5812] cgroup: Unknown subsys name 'cpuset' [ 81.548085][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.026512][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.785099][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.810733][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.818806][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.827130][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.836012][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.838759][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.844279][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.852653][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.859183][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.872242][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.873280][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.882060][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.887803][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.895158][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.907849][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.911247][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.916924][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.930506][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.930924][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.946923][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.311130][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 85.530569][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 85.566740][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.573986][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.581593][ T5825] bridge_slave_0: entered allmulticast mode [ 85.588844][ T5825] bridge_slave_0: entered promiscuous mode [ 85.632400][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.639585][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.647067][ T5825] bridge_slave_1: entered allmulticast mode [ 85.654082][ T5825] bridge_slave_1: entered promiscuous mode [ 85.661711][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.756394][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.789950][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.840730][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 85.872099][ T5825] team0: Port device team_slave_0 added [ 85.893114][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.900520][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.907982][ T5823] bridge_slave_0: entered allmulticast mode [ 85.914940][ T5823] bridge_slave_0: entered promiscuous mode [ 85.924230][ T5825] team0: Port device team_slave_1 added [ 85.975896][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.983663][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.990928][ T5823] bridge_slave_1: entered allmulticast mode [ 85.998016][ T5823] bridge_slave_1: entered promiscuous mode [ 86.014347][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.021601][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.047571][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.059364][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.067095][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.074316][ T5824] bridge_slave_0: entered allmulticast mode [ 86.081660][ T5824] bridge_slave_0: entered promiscuous mode [ 86.116046][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.123012][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.148981][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.166090][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.173254][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.180959][ T5824] bridge_slave_1: entered allmulticast mode [ 86.188298][ T5824] bridge_slave_1: entered promiscuous mode [ 86.206245][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.251825][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.285271][ T5825] hsr_slave_0: entered promiscuous mode [ 86.292258][ T5825] hsr_slave_1: entered promiscuous mode [ 86.321165][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.334036][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.365311][ T5823] team0: Port device team_slave_0 added [ 86.401135][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.408345][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.415490][ T5826] bridge_slave_0: entered allmulticast mode [ 86.422981][ T5826] bridge_slave_0: entered promiscuous mode [ 86.432062][ T5823] team0: Port device team_slave_1 added [ 86.471751][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.479068][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.486390][ T5826] bridge_slave_1: entered allmulticast mode [ 86.493362][ T5826] bridge_slave_1: entered promiscuous mode [ 86.510158][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.517209][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.543169][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.556324][ T5824] team0: Port device team_slave_0 added [ 86.579229][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.586891][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.613777][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.639667][ T5824] team0: Port device team_slave_1 added [ 86.653072][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.667360][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.738594][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.745885][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.772038][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.785118][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.792256][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.818672][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.864570][ T5826] team0: Port device team_slave_0 added [ 86.887664][ T5823] hsr_slave_0: entered promiscuous mode [ 86.894768][ T5823] hsr_slave_1: entered promiscuous mode [ 86.902135][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 86.908078][ T5823] Cannot create hsr debugfs directory [ 86.931378][ T5826] team0: Port device team_slave_1 added [ 86.976205][ T5147] Bluetooth: hci0: command tx timeout [ 86.976208][ T5832] Bluetooth: hci2: command tx timeout [ 87.046461][ T5147] Bluetooth: hci3: command tx timeout [ 87.046550][ T5832] Bluetooth: hci1: command tx timeout [ 87.087744][ T5824] hsr_slave_0: entered promiscuous mode [ 87.094708][ T5824] hsr_slave_1: entered promiscuous mode [ 87.101137][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 87.107231][ T5824] Cannot create hsr debugfs directory [ 87.122438][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.129474][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.155599][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.179655][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.186664][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.213336][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.388778][ T5826] hsr_slave_0: entered promiscuous mode [ 87.395054][ T5826] hsr_slave_1: entered promiscuous mode [ 87.401688][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 87.407464][ T5826] Cannot create hsr debugfs directory [ 87.493634][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.537235][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.553486][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.574955][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.725795][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.737436][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.759340][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.777304][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.848994][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.860500][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.870634][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.884261][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.998842][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.009782][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.030877][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.063206][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.073508][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.101788][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.138076][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.145323][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.163851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.171049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.212833][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.259976][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.281249][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.288441][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.318948][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.326108][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.347438][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.391905][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.434874][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.442087][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.468571][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.475809][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.551105][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.640662][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.682279][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.742492][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.764961][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.776547][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.783727][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.814947][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.822217][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.943740][ T5825] veth0_vlan: entered promiscuous mode [ 88.970674][ T5825] veth1_vlan: entered promiscuous mode [ 89.023898][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.046903][ T5832] Bluetooth: hci0: command tx timeout [ 89.047153][ T5147] Bluetooth: hci2: command tx timeout [ 89.090878][ T5825] veth0_macvtap: entered promiscuous mode [ 89.130282][ T5147] Bluetooth: hci3: command tx timeout [ 89.136434][ T5147] Bluetooth: hci1: command tx timeout [ 89.150084][ T5825] veth1_macvtap: entered promiscuous mode [ 89.181955][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.196501][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.238096][ T5823] veth0_vlan: entered promiscuous mode [ 89.249263][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.269484][ T5823] veth1_vlan: entered promiscuous mode [ 89.284971][ T4374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.297105][ T4374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308677][ T3554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.334126][ T3554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388620][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.401328][ T5823] veth0_macvtap: entered promiscuous mode [ 89.412796][ T5823] veth1_macvtap: entered promiscuous mode [ 89.475345][ T5824] veth0_vlan: entered promiscuous mode [ 89.486666][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.518326][ T5824] veth1_vlan: entered promiscuous mode [ 89.546579][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.562503][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.573170][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.596124][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.635943][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.668674][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.678696][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.691432][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.696247][ T5824] veth0_macvtap: entered promiscuous mode [ 89.705962][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.721234][ T5826] veth0_vlan: entered promiscuous mode [ 89.737522][ T5824] veth1_macvtap: entered promiscuous mode [ 89.770637][ T5826] veth1_vlan: entered promiscuous mode [ 89.799244][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.834828][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.890616][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.915820][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.924773][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.941098][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.970857][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.982154][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002073][ T5826] veth0_macvtap: entered promiscuous mode [ 90.035139][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.050389][ T5826] veth1_macvtap: entered promiscuous mode [ 90.056543][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.065797][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.093609][ T5915] Zero length message leads to an empty skb [ 90.164208][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.201589][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.265109][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.288869][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.299274][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.312707][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.324047][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337623][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.432062][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.453577][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.692894][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.766989][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.786891][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.840487][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.851576][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.857579][ T5928] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.143270][ T5147] Bluetooth: hci2: command tx timeout [ 91.148814][ T5147] Bluetooth: hci0: command tx timeout [ 91.206199][ T5147] Bluetooth: hci3: command tx timeout [ 91.207840][ T5832] Bluetooth: hci1: command tx timeout [ 91.286338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.516213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.935917][ T9] cfg80211: failed to load regulatory.db [ 93.207582][ T5832] Bluetooth: hci2: command tx timeout [ 93.215863][ T5832] Bluetooth: hci0: command tx timeout [ 93.286246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.287057][ T5832] Bluetooth: hci1: command tx timeout [ 93.297035][ T5147] Bluetooth: hci3: command tx timeout [ 93.326495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.975675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.496776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.516738][ T5986] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 94.719754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.036893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.212729][ T6000] Unable to find swap-space signature [ 95.221772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 95.242230][ T6003] forcing mempool usage for bvec_alloc+0x197/0x210 [ 95.408383][ T6007] FAULT_INJECTION: forcing a failure. [ 95.408383][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 95.421288][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) [ 95.421314][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 95.421328][ T6007] Call Trace: [ 95.421334][ T6007] [ 95.421339][ T6007] dump_stack_lvl+0x100/0x190 [ 95.421366][ T6007] should_fail_ex.cold+0x5/0xa [ 95.421392][ T6007] should_failslab+0xc2/0x120 [ 95.421412][ T6007] __kvmalloc_node_noprof+0x101/0xac0 [ 95.421430][ T6007] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.421454][ T6007] ? do_semtimedop+0x233/0x2e0 [ 95.421478][ T6007] ? do_semtimedop+0x233/0x2e0 [ 95.421496][ T6007] do_semtimedop+0x233/0x2e0 [ 95.421517][ T6007] ? __pfx_do_semtimedop+0x10/0x10 [ 95.421568][ T6007] ? __x64_sys_futex+0x34f/0x4d0 [ 95.421587][ T6007] ? __x64_sys_futex+0x358/0x4d0 [ 95.421610][ T6007] __x64_sys_semtimedop+0x1b4/0x1f0 [ 95.421631][ T6007] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 95.421658][ T6007] do_syscall_64+0xc9/0xf80 [ 95.421678][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.421693][ T6007] RIP: 0033:0x7fe9c859aeb9 [ 95.421710][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.421726][ T6007] RSP: 002b:00007fe9c94e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 95.421742][ T6007] RAX: ffffffffffffffda RBX: 00007fe9c8816180 RCX: 00007fe9c859aeb9 [ 95.421752][ T6007] RDX: 00000000000001f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.421760][ T6007] RBP: 00007fe9c8608c1f R08: 0000000000000000 R09: 0000000000000000 [ 95.421770][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.421778][ T6007] R13: 00007fe9c8816218 R14: 00007fe9c8816180 R15: 00007fff027394b8 [ 95.421798][ T6007] [ 95.686489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.158462][ T6010] binder: 6009:6010 ioctl c018620c 0 returned -1 [ 96.498261][ T6016] nvme_fcloop: unknown parameter or missing value '7' [ 97.948152][ T6038] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 98.578970][ T6057] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.044367][ T6068] FAULT_INJECTION: forcing a failure. [ 99.044367][ T6068] name fail_futex, interval 1, probability 0, space 0, times 1 [ 99.062993][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 99.063030][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.063045][ T6068] Call Trace: [ 99.063055][ T6068] [ 99.063065][ T6068] dump_stack_lvl+0x100/0x190 [ 99.063104][ T6068] should_fail_ex.cold+0x5/0xa [ 99.063151][ T6068] get_futex_key+0x1d2/0x1620 [ 99.063192][ T6068] ? __pfx_get_futex_key+0x10/0x10 [ 99.063227][ T6068] ? find_held_lock+0x2b/0x80 [ 99.063253][ T6068] ? futex_wake+0x456/0x530 [ 99.063304][ T6068] futex_wake+0xea/0x530 [ 99.063349][ T6068] ? __pfx_futex_wait+0x10/0x10 [ 99.063375][ T6068] ? __pfx_futex_wake+0x10/0x10 [ 99.063424][ T6068] ? find_held_lock+0x2b/0x80 [ 99.063450][ T6068] ? __might_fault+0xc5/0x140 [ 99.063489][ T6068] ? __might_fault+0xc5/0x140 [ 99.063527][ T6068] do_futex+0x32b/0x350 [ 99.063563][ T6068] ? __pfx_do_futex+0x10/0x10 [ 99.063601][ T6068] ? __do_sys_capset+0xfb/0x460 [ 99.063636][ T6068] __x64_sys_futex+0x34f/0x4d0 [ 99.063683][ T6068] ? __fget_files+0x21f/0x3d0 [ 99.063714][ T6068] ? __pfx___x64_sys_futex+0x10/0x10 [ 99.063752][ T6068] ? xfd_validate_state+0x129/0x190 [ 99.063814][ T6068] do_syscall_64+0xc9/0xf80 [ 99.063852][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.063881][ T6068] RIP: 0033:0x7fe9c859aeb9 [ 99.063903][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.063929][ T6068] RSP: 002b:00007fe9c952b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.063959][ T6068] RAX: ffffffffffffffda RBX: 00007fe9c8815fa8 RCX: 00007fe9c859aeb9 [ 99.063978][ T6068] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe9c8815fac [ 99.063996][ T6068] RBP: 00007fe9c8815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 99.064014][ T6068] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 99.064032][ T6068] R13: 00007fe9c8816038 R14: 00007fff027393d0 R15: 00007fff027394b8 [ 99.064065][ T6068] [ 100.531613][ T6102] mmap: syz.2.40 (6102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.523543][ T6120] netlink: 186 bytes leftover after parsing attributes in process `syz.0.42'. [ 102.718703][ T6159] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.532457][ T6153] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.605986][ T30] audit: type=1804 audit(1770052324.505:2): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.43" name="/newroot/sys/kernel/debug/tracing/tracing_cpumask" dev="tracefs" ino=9 res=1 errno=0 [ 106.299305][ T6239] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 106.740681][ T6240] NFSD: Failed to start, no listeners configured. [ 108.589922][ T6267] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 108.625800][ T6262] zswap: compressor not available [ 108.923296][ T6283] FAULT_INJECTION: forcing a failure. [ 108.923296][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 109.022602][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) [ 109.022647][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 109.022663][ T6283] Call Trace: [ 109.022672][ T6283] [ 109.022682][ T6283] dump_stack_lvl+0x100/0x190 [ 109.022724][ T6283] should_fail_ex.cold+0x5/0xa [ 109.022767][ T6283] should_failslab+0xc2/0x120 [ 109.022805][ T6283] ? tomoyo_encode2+0xfb/0x3c0 [ 109.022831][ T6283] __kmalloc_noprof+0xf6/0x9c0 [ 109.022862][ T6283] ? tomoyo_realpath_from_path+0x19c/0x690 [ 109.022900][ T6283] ? tomoyo_encode2+0xfb/0x3c0 [ 109.022924][ T6283] tomoyo_encode2+0xfb/0x3c0 [ 109.022957][ T6283] tomoyo_encode+0x29/0x50 [ 109.022982][ T6283] tomoyo_path_perm+0x3a7/0x460 [ 109.023027][ T6283] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 109.023069][ T6283] ? do_raw_spin_lock+0x128/0x260 [ 109.023118][ T6283] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.023175][ T6283] ? __pfx_current_check_access_path+0x10/0x10 [ 109.023218][ T6283] ? simple_lookup+0x105/0x1d0 [ 109.023246][ T6283] ? lookup_one_qstr_excl+0xb3/0x250 [ 109.023287][ T6283] tomoyo_path_symlink+0x97/0xe0 [ 109.023316][ T6283] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 109.023354][ T6283] security_path_symlink+0x152/0x2d0 [ 109.023391][ T6283] do_symlinkat+0x11d/0x510 [ 109.023426][ T6283] ? __pfx_do_symlinkat+0x10/0x10 [ 109.023457][ T6283] ? strncpy_from_user+0x19d/0x2d0 [ 109.023497][ T6283] ? getname_flags.part.0+0x1c5/0x540 [ 109.023537][ T6283] __x64_sys_symlink+0x177/0x210 [ 109.023577][ T6283] do_syscall_64+0xc9/0xf80 [ 109.023615][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.023652][ T6283] RIP: 0033:0x7f4365d9aeb9 [ 109.023676][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.023702][ T6283] RSP: 002b:00007f4363ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 109.023728][ T6283] RAX: ffffffffffffffda RBX: 00007f4366015fa0 RCX: 00007f4365d9aeb9 [ 109.023747][ T6283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.023763][ T6283] RBP: 00007f4365e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 109.023780][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.023796][ T6283] R13: 00007f4366016038 R14: 00007f4366015fa0 R15: 00007ffec8260588 [ 109.023829][ T6283] [ 110.782129][ T6315] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 111.052810][ T6301] Process accounting resumed [ 111.647949][ T6330] Falling back ldisc for pty66. [ 111.931837][ T6325] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 111.981212][ T6323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.573110][ T5147] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 112.995963][ T30] audit: type=1800 audit(1770052333.905:3): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="discovery_nqn" dev="configfs" ino=9550 res=0 errno=0 [ 113.082041][ T6352] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 113.460137][ T6361] syz.1.78 uses obsolete (PF_INET,SOCK_PACKET) [ 114.154634][ T6374] binder: 6373:6374 ioctl c0306201 0 returned -14 [ 114.403818][ T6380] WARNING! power/level is deprecated; use power/control instead [ 116.034833][ T6404] FAULT_INJECTION: forcing a failure. [ 116.034833][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 116.055884][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 116.055964][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 116.055980][ T6404] Call Trace: [ 116.055989][ T6404] [ 116.056000][ T6404] dump_stack_lvl+0x100/0x190 [ 116.056040][ T6404] should_fail_ex.cold+0x5/0xa [ 116.056085][ T6404] should_failslab+0xc2/0x120 [ 116.056124][ T6404] kmem_cache_alloc_noprof+0x83/0x780 [ 116.056159][ T6404] ? d_instantiate+0x90/0xb0 [ 116.056194][ T6404] ? alloc_empty_file+0x55/0x1c0 [ 116.056239][ T6404] ? alloc_empty_file+0x55/0x1c0 [ 116.056277][ T6404] alloc_empty_file+0x55/0x1c0 [ 116.056319][ T6404] alloc_file_pseudo+0x13a/0x230 [ 116.056361][ T6404] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 116.056402][ T6404] ? alloc_fd+0x476/0x790 [ 116.056439][ T6404] sock_alloc_file+0x50/0x210 [ 116.056485][ T6404] __sys_socket+0x1c0/0x260 [ 116.056515][ T6404] ? __pfx_task_work_run+0x10/0x10 [ 116.056556][ T6404] ? __pfx___sys_socket+0x10/0x10 [ 116.056587][ T6404] ? xfd_validate_state+0x129/0x190 [ 116.056640][ T6404] __x64_sys_socket+0x72/0xb0 [ 116.056671][ T6404] ? lockdep_hardirqs_on+0x78/0x100 [ 116.056703][ T6404] do_syscall_64+0xc9/0xf80 [ 116.056740][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.056769][ T6404] RIP: 0033:0x7f39f4b9aeb9 [ 116.056791][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.056817][ T6404] RSP: 002b:00007f39f596e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.056844][ T6404] RAX: ffffffffffffffda RBX: 00007f39f4e15fa0 RCX: 00007f39f4b9aeb9 [ 116.056863][ T6404] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 116.056879][ T6404] RBP: 00007f39f4c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 116.056896][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.056911][ T6404] R13: 00007f39f4e16038 R14: 00007f39f4e15fa0 R15: 00007fff6f58d5e8 [ 116.056959][ T6404] [ 116.813274][ T6418] blktrace: Concurrent blktraces are not allowed on loop2 [ 116.879576][ T6415] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 117.763391][ T6418] netlink: 'syz.1.93': attribute type 11 has an invalid length. [ 117.791500][ T6418] netlink: 236 bytes leftover after parsing attributes in process `syz.1.93'. [ 117.943145][ T6433] input: jJǸ-lQ J86 as /devices/virtual/input/input6 [ 119.149733][ T6457] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 120.249788][ T6471] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 121.009283][ T6487] FAULT_INJECTION: forcing a failure. [ 121.009283][ T6487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.076046][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) [ 121.076082][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.076098][ T6487] Call Trace: [ 121.076106][ T6487] [ 121.076116][ T6487] dump_stack_lvl+0x100/0x190 [ 121.076155][ T6487] should_fail_ex.cold+0x5/0xa [ 121.076193][ T6487] ? prepare_alloc_pages+0x16d/0x5f0 [ 121.076238][ T6487] should_fail_alloc_page+0xeb/0x140 [ 121.076277][ T6487] prepare_alloc_pages+0x1f0/0x5f0 [ 121.076317][ T6487] ? rcu_is_watching+0x12/0xc0 [ 121.076349][ T6487] __alloc_frozen_pages_noprof+0x193/0x2410 [ 121.076385][ T6487] ? __lock_acquire+0x4a5/0x2630 [ 121.076434][ T6487] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.076466][ T6487] ? do_raw_spin_lock+0x128/0x260 [ 121.076513][ T6487] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.076554][ T6487] ? find_held_lock+0x2b/0x80 [ 121.076593][ T6487] ? __lock_acquire+0x4a5/0x2630 [ 121.076629][ T6487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.076661][ T6487] ? policy_nodemask+0xed/0x4f0 [ 121.076700][ T6487] alloc_pages_mpol+0x1fb/0x550 [ 121.076741][ T6487] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 121.076779][ T6487] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 121.076817][ T6487] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 121.076861][ T6487] folio_alloc_mpol_noprof+0x36/0x340 [ 121.076906][ T6487] shmem_alloc_folio+0x135/0x160 [ 121.076935][ T6487] shmem_alloc_and_add_folio+0x371/0xd40 [ 121.076979][ T6487] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 121.077016][ T6487] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 121.077058][ T6487] shmem_get_folio_gfp+0x6ab/0x1900 [ 121.077101][ T6487] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 121.077137][ T6487] ? filemap_map_pages+0x9e0/0x2110 [ 121.077178][ T6487] shmem_fault+0x1f9/0xa20 [ 121.077210][ T6487] ? __lock_acquire+0x4a5/0x2630 [ 121.077244][ T6487] ? __pfx_shmem_fault+0x10/0x10 [ 121.077284][ T6487] ? __pfx_filemap_map_pages+0x10/0x10 [ 121.077329][ T6487] __do_fault+0x10d/0x550 [ 121.077370][ T6487] do_fault+0xaf9/0x1990 [ 121.077418][ T6487] __handle_mm_fault+0x1807/0x2b50 [ 121.077454][ T6487] ? mt_find+0x45e/0x8e0 [ 121.077489][ T6487] ? __pfx___handle_mm_fault+0x10/0x10 [ 121.077522][ T6487] ? __pfx_mt_find+0x10/0x10 [ 121.077578][ T6487] ? find_vma+0xbf/0x140 [ 121.077614][ T6487] ? __pfx_find_vma+0x10/0x10 [ 121.077654][ T6487] handle_mm_fault+0x36d/0xa20 [ 121.077692][ T6487] do_user_addr_fault+0x74c/0x12f0 [ 121.077733][ T6487] exc_page_fault+0x6f/0xd0 [ 121.077765][ T6487] asm_exc_page_fault+0x26/0x30 [ 121.077792][ T6487] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 121.077834][ T6487] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 121.077859][ T6487] RSP: 0018:ffffc90003b9fc10 EFLAGS: 00050206 [ 121.077887][ T6487] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000002def [ 121.077903][ T6487] RDX: 0000000000000001 RSI: 000000000000d000 RDI: ffff888059f2d000 [ 121.077921][ T6487] RBP: 000000000000fdef R08: 0000000000000001 R09: ffffed100b3e5fbd [ 121.077937][ T6487] R10: ffff888059f2fdee R11: 0000000000000000 R12: 0000000000000000 [ 121.077954][ T6487] R13: ffff888059f20000 R14: ffffc90003b9fca8 R15: 1ffff92000773fac [ 121.077986][ T6487] _copy_from_user+0x98/0xd0 [ 121.078026][ T6487] memdup_user_nul+0x6c/0x120 [ 121.078046][ T6487] bitmap_parse_user+0x24/0x90 [ 121.078061][ T6487] tracing_cpumask_write+0x11e/0x1e0 [ 121.078083][ T6487] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 121.078111][ T6487] vfs_write+0x2aa/0x1070 [ 121.078128][ T6487] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 121.078152][ T6487] ? __pfx_vfs_write+0x10/0x10 [ 121.078167][ T6487] ? find_held_lock+0x2b/0x80 [ 121.078182][ T6487] ? __fget_files+0x215/0x3d0 [ 121.078201][ T6487] ? __fget_files+0x21f/0x3d0 [ 121.078222][ T6487] ksys_write+0x12a/0x250 [ 121.078239][ T6487] ? __pfx_ksys_write+0x10/0x10 [ 121.078263][ T6487] do_syscall_64+0xc9/0xf80 [ 121.078282][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.078297][ T6487] RIP: 0033:0x7f39f4b9aeb9 [ 121.078314][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.078327][ T6487] RSP: 002b:00007f39f596e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.078340][ T6487] RAX: ffffffffffffffda RBX: 00007f39f4e15fa0 RCX: 00007f39f4b9aeb9 [ 121.078349][ T6487] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 121.078357][ T6487] RBP: 00007f39f596e090 R08: 0000000000000000 R09: 0000000000000000 [ 121.078365][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.078373][ T6487] R13: 00007f39f4e16038 R14: 00007f39f4e15fa0 R15: 00007fff6f58d5e8 [ 121.078392][ T6487] [ 121.903124][ T6498] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 122.632754][ T6508] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.697964][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 123.176431][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 123.221625][ T6528] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 125.809227][ T6572] mkiss: ax0: crc mode is auto. [ 126.174844][ T6577] Invalid ELF header magic: != ELF [ 127.202319][ T6590] capability: warning: `syz.2.134' uses 32-bit capabilities (legacy support in use) [ 127.368417][ T6577] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input7 [ 127.437368][ T6577] FAULT_INJECTION: forcing a failure. [ 127.437368][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 127.580339][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 127.580381][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 127.580398][ T6577] Call Trace: [ 127.580408][ T6577] [ 127.580419][ T6577] dump_stack_lvl+0x100/0x190 [ 127.580461][ T6577] should_fail_ex.cold+0x5/0xa [ 127.580510][ T6577] should_failslab+0xc2/0x120 [ 127.580552][ T6577] kmem_cache_alloc_noprof+0x83/0x780 [ 127.580591][ T6577] ? __kernfs_new_node+0xd2/0x960 [ 127.580637][ T6577] ? __kernfs_new_node+0xd2/0x960 [ 127.580681][ T6577] __kernfs_new_node+0xd2/0x960 [ 127.580721][ T6577] ? __lock_acquire+0x4a5/0x2630 [ 127.580759][ T6577] ? __pfx___kernfs_new_node+0x10/0x10 [ 127.580808][ T6577] ? find_held_lock+0x2b/0x80 [ 127.580835][ T6577] ? kernfs_root+0xee/0x2a0 [ 127.580870][ T6577] ? kernfs_root+0xee/0x2a0 [ 127.580915][ T6577] kernfs_new_node+0x11b/0x1a0 [ 127.580963][ T6577] __kernfs_create_file+0x53/0x350 [ 127.580999][ T6577] sysfs_add_file_mode_ns+0x207/0x3c0 [ 127.581045][ T6577] sysfs_create_file_ns+0x145/0x1e0 [ 127.581081][ T6577] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 127.581122][ T6577] ? mark_held_locks+0x40/0x70 [ 127.581165][ T6577] device_create_file+0xf2/0x1d0 [ 127.581212][ T6577] device_add+0xa74/0x1950 [ 127.581255][ T6577] ? __pfx_device_add+0x10/0x10 [ 127.581300][ T6577] ? kobject_get+0xbb/0x150 [ 127.581340][ T6577] cdev_device_add+0x12b/0x270 [ 127.581378][ T6577] evdev_connect+0x3a8/0x4b0 [ 127.581420][ T6577] input_attach_handler.isra.0+0x177/0x1e0 [ 127.581458][ T6577] input_register_device.cold+0x139/0x375 [ 127.581503][ T6577] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 127.581550][ T6577] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.581588][ T6577] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 127.581644][ T6577] ? find_held_lock+0x2b/0x80 [ 127.581667][ T6577] ? hook_file_ioctl_common+0x146/0x410 [ 127.581721][ T6577] ? __pfx_uinput_ioctl+0x10/0x10 [ 127.581762][ T6577] __x64_sys_ioctl+0x18e/0x210 [ 127.581804][ T6577] do_syscall_64+0xc9/0xf80 [ 127.581836][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.581861][ T6577] RIP: 0033:0x7f4365d9aeb9 [ 127.581882][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.581905][ T6577] RSP: 002b:00007f4363ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.581930][ T6577] RAX: ffffffffffffffda RBX: 00007f4366015fa0 RCX: 00007f4365d9aeb9 [ 127.581947][ T6577] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 127.581962][ T6577] RBP: 00007f4365e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 127.581977][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.581992][ T6577] R13: 00007f4366016038 R14: 00007f4366015fa0 R15: 00007ffec8260588 [ 127.582026][ T6577] [ 127.874510][ T6577] input: failed to attach handler evdev to device input7, error: -12 [ 132.275152][ T6651] zswap: compressor not available [ 132.808845][ T6672] sd 0:0:1:0: PR command failed: 1026 [ 132.830473][ T6672] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 132.891321][ T6672] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 133.045168][ T6674] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 133.055881][ T6674] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.063219][ T6674] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 133.100716][ T6674] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 133.195879][ T6674] page dumped because: unmovable page [ 133.201454][ T6674] page_owner tracks the page as allocated [ 133.210154][ T6674] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 6386, tgid 6379 (syz.2.85), ts 115393755886, free_ts 112209518517 [ 133.276416][ T6674] post_alloc_hook+0x1e1/0x250 [ 133.291816][ T6674] get_page_from_freelist+0xe3d/0x2e10 [ 133.309605][ T6674] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 133.345680][ T6674] alloc_pages_bulk_noprof+0x777/0x1500 [ 133.351314][ T6674] __kasan_populate_vmalloc+0xf0/0x210 [ 133.385687][ T6674] alloc_vmap_area+0x935/0x2a00 [ 133.425684][ T6674] __get_vm_area_node+0x1ca/0x330 [ 133.436440][ T6674] get_vm_area_caller+0x71/0xa0 [ 133.441393][ T6674] vmap+0x131/0x2f0 [ 133.445232][ T6674] relay_open_buf.part.0+0x433/0xc10 [ 133.511517][ T6674] relay_open+0x7b9/0xa00 [ 133.526841][ T6674] blk_trace_setup_prepare+0x35c/0x6c0 [ 133.552752][ T6674] blk_trace_setup+0x1bf/0x330 [ 133.595685][ T6674] blk_trace_ioctl+0x245/0x320 [ 133.600530][ T6674] blkdev_ioctl+0x17c/0x6f0 [ 133.605075][ T6674] __x64_sys_ioctl+0x18e/0x210 [ 133.655706][ T6674] page last free pid 6320 tgid 6319 stack trace: [ 133.675706][ T6674] __free_frozen_pages+0x822/0x1130 [ 133.705669][ T6674] kimage_free+0x245/0x5a0 [ 133.710253][ T6674] do_kexec_load+0x34c/0x810 [ 133.722017][ T6674] __x64_sys_kexec_load+0x1bf/0x230 [ 133.745653][ T6674] do_syscall_64+0xc9/0xf80 [ 133.750304][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.165703][ T5147] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 135.545064][ T6725] netlink: 330 bytes leftover after parsing attributes in process `syz.1.167'. [ 135.873352][ T6732] FAULT_INJECTION: forcing a failure. [ 135.873352][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 136.001763][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(full) [ 136.001800][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 136.001815][ T6732] Call Trace: [ 136.001823][ T6732] [ 136.001833][ T6732] dump_stack_lvl+0x100/0x190 [ 136.001871][ T6732] should_fail_ex.cold+0x5/0xa [ 136.001923][ T6732] should_failslab+0xc2/0x120 [ 136.001960][ T6732] ? tomoyo_realpath_from_path+0xb6/0x690 [ 136.001988][ T6732] __kmalloc_noprof+0xf6/0x9c0 [ 136.002027][ T6732] ? tomoyo_realpath_from_path+0xb6/0x690 [ 136.002054][ T6732] tomoyo_realpath_from_path+0xb6/0x690 [ 136.002091][ T6732] tomoyo_path_number_perm+0x23c/0x580 [ 136.002132][ T6732] ? tomoyo_path_number_perm+0x22e/0x580 [ 136.002172][ T6732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 136.002249][ T6732] ? find_held_lock+0x2b/0x80 [ 136.002275][ T6732] ? hook_file_ioctl_common+0x146/0x410 [ 136.002314][ T6732] ? __fget_files+0x215/0x3d0 [ 136.002350][ T6732] ? __fget_files+0x21f/0x3d0 [ 136.002385][ T6732] security_file_ioctl+0xd3/0x230 [ 136.002426][ T6732] __x64_sys_ioctl+0xb7/0x210 [ 136.002471][ T6732] do_syscall_64+0xc9/0xf80 [ 136.002508][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.002535][ T6732] RIP: 0033:0x7fe9c859aeb9 [ 136.002557][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.002589][ T6732] RSP: 002b:00007fe9c952b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.002615][ T6732] RAX: ffffffffffffffda RBX: 00007fe9c8815fa0 RCX: 00007fe9c859aeb9 [ 136.002633][ T6732] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000002 [ 136.002649][ T6732] RBP: 00007fe9c952b090 R08: 0000000000000000 R09: 0000000000000000 [ 136.002665][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.002681][ T6732] R13: 00007fe9c8816038 R14: 00007fe9c8815fa0 R15: 00007fff027394b8 [ 136.002718][ T6732] [ 136.002760][ T6732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.237303][ T6732] mkiss: ax0: crc mode is auto. [ 138.009216][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.017240][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.131397][ T6792] FAULT_INJECTION: forcing a failure. [ 138.131397][ T6792] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.186128][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.1.186 Not tainted syzkaller #0 PREEMPT(full) [ 138.186150][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.186158][ T6792] Call Trace: [ 138.186163][ T6792] [ 138.186169][ T6792] dump_stack_lvl+0x100/0x190 [ 138.186191][ T6792] should_fail_ex.cold+0x5/0xa [ 138.186216][ T6792] _copy_from_user+0x2e/0xd0 [ 138.186239][ T6792] get_timespec64+0x8b/0x1b0 [ 138.186257][ T6792] ? __pfx_get_timespec64+0x10/0x10 [ 138.186279][ T6792] __x64_sys_futex+0x21a/0x4d0 [ 138.186302][ T6792] ? __pfx___x64_sys_futex+0x10/0x10 [ 138.186329][ T6792] do_syscall_64+0xc9/0xf80 [ 138.186359][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.186374][ T6792] RIP: 0033:0x7f4365d9aeb9 [ 138.186387][ T6792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.186400][ T6792] RSP: 002b:00007ffec82606e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.186414][ T6792] RAX: ffffffffffffffda RBX: 0000000000021b79 RCX: 00007f4365d9aeb9 [ 138.186423][ T6792] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4366015fac [ 138.186432][ T6792] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 138.186440][ T6792] R10: 00007ffec82607f0 R11: 0000000000000246 R12: 00007ffec8260810 [ 138.186448][ T6792] R13: 00007f4366015fac R14: 0000000000021bab R15: 00007ffec82607f0 [ 138.186467][ T6792] [ 138.356683][ T6800] process 'syz.1.186' launched './file0' with NULL argv: empty string added [ 140.216997][ T6831] aoe: can't write to that file. [ 140.892365][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 141.045664][ T5147] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 141.089249][ T6852] netlink: 504 bytes leftover after parsing attributes in process `syz.0.198'. [ 141.626577][ T6839] Process accounting paused [ 142.379818][ T6887] NFSD: Failed to start, no listeners configured. [ 144.282811][ T6861] syz.3.199 (6861) used greatest stack depth: 19688 bytes left [ 144.645752][ T5147] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.040435][ T6949] FAULT_INJECTION: forcing a failure. [ 145.040435][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.085691][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT(full) [ 145.085713][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 145.085721][ T6949] Call Trace: [ 145.085726][ T6949] [ 145.085732][ T6949] dump_stack_lvl+0x100/0x190 [ 145.085755][ T6949] should_fail_ex.cold+0x5/0xa [ 145.085779][ T6949] _copy_from_user+0x2e/0xd0 [ 145.085802][ T6949] get_timespec64+0x8b/0x1b0 [ 145.085820][ T6949] ? __pfx_get_timespec64+0x10/0x10 [ 145.085840][ T6949] ? do_io_getevents+0x117/0x170 [ 145.085860][ T6949] __x64_sys_io_getevents+0x14c/0x2e0 [ 145.085880][ T6949] ? __pfx___x64_sys_io_getevents+0x10/0x10 [ 145.085906][ T6949] do_syscall_64+0xc9/0xf80 [ 145.085925][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.085940][ T6949] RIP: 0033:0x7f39f4b9aeb9 [ 145.085952][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.085965][ T6949] RSP: 002b:00007f39f596e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 145.085986][ T6949] RAX: ffffffffffffffda RBX: 00007f39f4e15fa0 RCX: 00007f39f4b9aeb9 [ 145.085995][ T6949] RDX: fffffffffffffffe RSI: 0000000000000401 RDI: 0000000000000001 [ 145.086004][ T6949] RBP: 00007f39f4c08c1f R08: 00002000000000c0 R09: 0000000000000000 [ 145.086012][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.086020][ T6949] R13: 00007f39f4e16038 R14: 00007f39f4e15fa0 R15: 00007fff6f58d5e8 [ 145.086039][ T6949] [ 145.128244][ T6956] usbip-vudc usbip-vudc.0: gadget not bound [ 146.746767][ T7004] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 147.766774][ T7026] hub 1-0:1.0: USB hub found [ 147.818774][ T7026] hub 1-0:1.0: 1 port detected [ 150.311318][ T7088] netlink: 504 bytes leftover after parsing attributes in process `syz.3.250'. [ 150.606424][ T7094] binder: BINDER_SET_CONTEXT_MGR already set [ 150.625731][ T7094] binder: 7093:7094 ioctl 4018620d 9 returned -16 [ 151.281722][ T7114] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 153.081747][ T7152] FAULT_INJECTION: forcing a failure. [ 153.081747][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 153.107415][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.2.267 Not tainted syzkaller #0 PREEMPT(full) [ 153.107451][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 153.107467][ T7152] Call Trace: [ 153.107475][ T7152] [ 153.107486][ T7152] dump_stack_lvl+0x100/0x190 [ 153.107526][ T7152] should_fail_ex.cold+0x5/0xa [ 153.107571][ T7152] should_failslab+0xc2/0x120 [ 153.107614][ T7152] kmem_cache_alloc_noprof+0x83/0x780 [ 153.107651][ T7152] ? d_instantiate+0x90/0xb0 [ 153.107688][ T7152] ? alloc_empty_file+0x55/0x1c0 [ 153.107731][ T7152] ? alloc_empty_file+0x55/0x1c0 [ 153.107764][ T7152] alloc_empty_file+0x55/0x1c0 [ 153.107800][ T7152] alloc_file_pseudo+0x13a/0x230 [ 153.107838][ T7152] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 153.107885][ T7152] __shmem_file_setup+0x1a3/0x330 [ 153.107914][ T7152] shmem_zero_setup+0x93/0x1b0 [ 153.107949][ T7152] __mmap_region+0x2101/0x2820 [ 153.107985][ T7152] ? __pfx___mmap_region+0x10/0x10 [ 153.108040][ T7152] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 153.108073][ T7152] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 153.108121][ T7152] ? __schedule+0xff6/0x5e10 [ 153.108146][ T7152] ? __pfx_css_rstat_updated+0x10/0x10 [ 153.108176][ T7152] ? __lock_acquire+0x4a5/0x2630 [ 153.108248][ T7152] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 153.108295][ T7152] ? rcu_is_watching+0x12/0xc0 [ 153.108330][ T7152] mmap_region+0x180/0x3e0 [ 153.108368][ T7152] do_mmap+0xc63/0x12f0 [ 153.108417][ T7152] ? __pfx_do_mmap+0x10/0x10 [ 153.108459][ T7152] ? __pfx_down_write_killable+0x10/0x10 [ 153.108506][ T7152] vm_mmap_pgoff+0x29e/0x470 [ 153.108551][ T7152] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 153.108597][ T7152] ? __x64_sys_futex+0x34f/0x4d0 [ 153.108631][ T7152] ? __x64_sys_futex+0x358/0x4d0 [ 153.108670][ T7152] ksys_mmap_pgoff+0x7d/0x5b0 [ 153.108713][ T7152] __x64_sys_mmap+0x125/0x190 [ 153.108742][ T7152] do_syscall_64+0xc9/0xf80 [ 153.108777][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.108804][ T7152] RIP: 0033:0x7f423ff9aeb9 [ 153.108824][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.108849][ T7152] RSP: 002b:00007f423e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 153.108874][ T7152] RAX: ffffffffffffffda RBX: 00007f4240215fa0 RCX: 00007f423ff9aeb9 [ 153.108892][ T7152] RDX: 0000000000000003 RSI: 000000000000e983 RDI: 0000000000000000 [ 153.108907][ T7152] RBP: 00007f4240008c1f R08: ffffffffffffffff R09: 0000000000008000 [ 153.108923][ T7152] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 153.108937][ T7152] R13: 00007f4240216038 R14: 00007f4240215fa0 R15: 00007ffc10396fb8 [ 153.108978][ T7152] [ 154.547339][ T7167] hub 1-0:1.0: USB hub found [ 154.569848][ T7167] hub 1-0:1.0: 1 port detected [ 154.608872][ T7175] netlink: 342 bytes leftover after parsing attributes in process `syz.0.273'. [ 154.723001][ T7178] netlink: 342 bytes leftover after parsing attributes in process `syz.0.273'. [ 157.187024][ T7222] FAULT_INJECTION: forcing a failure. [ 157.187024][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 157.215929][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 157.215969][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 157.215986][ T7222] Call Trace: [ 157.215995][ T7222] [ 157.216006][ T7222] dump_stack_lvl+0x100/0x190 [ 157.216047][ T7222] should_fail_ex.cold+0x5/0xa [ 157.216092][ T7222] should_failslab+0xc2/0x120 [ 157.216140][ T7222] kmem_cache_alloc_noprof+0x83/0x780 [ 157.216177][ T7222] ? getname_flags.part.0+0x4c/0x540 [ 157.216226][ T7222] ? getname_flags.part.0+0x4c/0x540 [ 157.216277][ T7222] getname_flags.part.0+0x4c/0x540 [ 157.216324][ T7222] getname_flags+0x93/0xf0 [ 157.216354][ T7222] do_sys_openat2+0xc5/0x220 [ 157.216399][ T7222] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.216444][ T7222] ? find_held_lock+0x2b/0x80 [ 157.216482][ T7222] __x64_sys_openat+0x12d/0x210 [ 157.216526][ T7222] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.216569][ T7222] ? xfd_validate_state+0x129/0x190 [ 157.216621][ T7222] do_syscall_64+0xc9/0xf80 [ 157.216656][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.216684][ T7222] RIP: 0033:0x7f4365d9aeb9 [ 157.216705][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.216733][ T7222] RSP: 002b:00007f4363ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.216762][ T7222] RAX: ffffffffffffffda RBX: 00007f4366015fa0 RCX: 00007f4365d9aeb9 [ 157.216782][ T7222] RDX: 0000000000121000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 157.216800][ T7222] RBP: 00007f4365e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 157.216817][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.216835][ T7222] R13: 00007f4366016038 R14: 00007f4366015fa0 R15: 00007ffec8260588 [ 157.216872][ T7222] [ 157.766488][ T7236] syz.2.286 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 161.806726][ T7252] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.140454][ T7353] i2c i2c-0: new_device: Extra parameters [ 162.722229][ T7382] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 164.144993][ T30] audit: type=1804 audit(1770052385.055:4): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.327" name="/newroot/71/file0" dev="tmpfs" ino=394 res=1 errno=0 [ 164.524802][ T30] audit: type=1804 audit(1770052385.105:5): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.327" name="/newroot/71/file0" dev="tmpfs" ino=394 res=1 errno=0 [ 164.883542][ T7435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'. [ 165.359465][ T7442] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 166.764952][ T7479] random: crng reseeded on system resumption [ 166.945287][ T30] audit: type=1800 audit(1770052387.855:6): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.341" name="lu_gp_id" dev="configfs" ino=16736 res=0 errno=0 [ 169.054837][ T7527] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 169.138343][ T7499] FAULT_INJECTION: forcing a failure. [ 169.138343][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 169.204803][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 169.204837][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.204846][ T7499] Call Trace: [ 169.204852][ T7499] [ 169.204858][ T7499] dump_stack_lvl+0x100/0x190 [ 169.204881][ T7499] should_fail_ex.cold+0x5/0xa [ 169.204907][ T7499] should_failslab+0xc2/0x120 [ 169.204928][ T7499] kmem_cache_alloc_noprof+0x83/0x780 [ 169.204948][ T7499] ? __pud_alloc+0x575/0x760 [ 169.204969][ T7499] ? __pmd_alloc+0xbf/0x9c0 [ 169.204994][ T7499] ? __pmd_alloc+0xbf/0x9c0 [ 169.205015][ T7499] __pmd_alloc+0xbf/0x9c0 [ 169.205036][ T7499] ? __pud_alloc+0x57a/0x760 [ 169.205061][ T7499] copy_page_range+0x4527/0x6ba0 [ 169.205079][ T7499] ? __lock_acquire+0x4a5/0x2630 [ 169.205101][ T7499] ? __lock_acquire+0x4a5/0x2630 [ 169.205128][ T7499] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.205145][ T7499] ? __pfx_copy_page_range+0x10/0x10 [ 169.205167][ T7499] ? mas_store+0x666/0xac0 [ 169.205189][ T7499] ? __pfx_mas_store+0x10/0x10 [ 169.205242][ T7499] dup_mmap+0xbea/0x1e20 [ 169.205278][ T7499] ? __pfx_dup_mmap+0x10/0x10 [ 169.205328][ T7499] copy_process+0x7451/0x7890 [ 169.205382][ T7499] ? __pfx_copy_process+0x10/0x10 [ 169.205417][ T7499] ? find_held_lock+0x2b/0x80 [ 169.205454][ T7499] kernel_clone+0xfc/0x930 [ 169.205487][ T7499] ? __pfx_futex_wait+0x10/0x10 [ 169.205518][ T7499] ? __pfx_kernel_clone+0x10/0x10 [ 169.205572][ T7499] __do_sys_clone+0xd9/0x120 [ 169.205611][ T7499] ? __pfx___do_sys_clone+0x10/0x10 [ 169.205647][ T7499] ? find_held_lock+0x2b/0x80 [ 169.205697][ T7499] ? fdget+0x18b/0x210 [ 169.205732][ T7499] do_syscall_64+0xc9/0xf80 [ 169.205768][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.205806][ T7499] RIP: 0033:0x7f423ff9aeb9 [ 169.205829][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.205853][ T7499] RSP: 002b:00007f423e1f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 169.205885][ T7499] RAX: ffffffffffffffda RBX: 00007f4240215fa0 RCX: 00007f423ff9aeb9 [ 169.205904][ T7499] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000002100000 [ 169.205918][ T7499] RBP: 00007f4240008c1f R08: 0000000000000000 R09: 0000000000000000 [ 169.205934][ T7499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.205948][ T7499] R13: 00007f4240216038 R14: 00007f4240215fa0 R15: 00007ffc10396fb8 [ 169.205989][ T7499] [ 171.817127][ T7558] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.020913][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.028613][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.075910][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.083395][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.125610][ T48] rtc rtc0: __rtc_set_alarm: err=-22 [ 172.874960][ T7548] Process accounting resumed [ 172.894855][ T7573] FAULT_INJECTION: forcing a failure. [ 172.894855][ T7573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.008040][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: syz.3.359 Not tainted syzkaller #0 PREEMPT(full) [ 173.008077][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.008092][ T7573] Call Trace: [ 173.008101][ T7573] [ 173.008110][ T7573] dump_stack_lvl+0x100/0x190 [ 173.008147][ T7573] should_fail_ex.cold+0x5/0xa [ 173.008191][ T7573] _copy_from_user+0x2e/0xd0 [ 173.008232][ T7573] copy_msghdr_from_user+0x9f/0x4f0 [ 173.008266][ T7573] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.008315][ T7573] ___sys_sendmsg+0x106/0x1e0 [ 173.008348][ T7573] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.008395][ T7573] ? find_held_lock+0x2b/0x80 [ 173.008445][ T7573] __sys_sendmsg+0x170/0x220 [ 173.008490][ T7573] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.008552][ T7573] do_syscall_64+0xc9/0xf80 [ 173.008588][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.008615][ T7573] RIP: 0033:0x7fe9c859aeb9 [ 173.008636][ T7573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.008661][ T7573] RSP: 002b:00007fe9c952b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.008686][ T7573] RAX: ffffffffffffffda RBX: 00007fe9c8815fa0 RCX: 00007fe9c859aeb9 [ 173.008704][ T7573] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 173.008720][ T7573] RBP: 00007fe9c952b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.008735][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.008751][ T7573] R13: 00007fe9c8816038 R14: 00007fe9c8815fa0 R15: 00007fff027394b8 [ 173.008787][ T7573] [ 173.793304][ T7587] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 174.366279][ T7598] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 175.341510][ T7619] Invalid ELF header magic: != ELF [ 176.662339][ T7648] FAULT_INJECTION: forcing a failure. [ 176.662339][ T7648] name failslab, interval 1, probability 0, space 0, times 0 [ 176.675359][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(full) [ 176.675391][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.675404][ T7648] Call Trace: [ 176.675412][ T7648] [ 176.675421][ T7648] dump_stack_lvl+0x100/0x190 [ 176.675456][ T7648] should_fail_ex.cold+0x5/0xa [ 176.675495][ T7648] ? __pfx_filemap_map_pages+0x10/0x10 [ 176.675529][ T7648] should_failslab+0xc2/0x120 [ 176.675564][ T7648] kmem_cache_alloc_noprof+0x83/0x780 [ 176.675596][ T7648] ? ptlock_alloc+0x1f/0x70 [ 176.675624][ T7648] ? __pfx_filemap_map_pages+0x10/0x10 [ 176.675654][ T7648] ? ptlock_alloc+0x1f/0x70 [ 176.675677][ T7648] ptlock_alloc+0x1f/0x70 [ 176.675701][ T7648] pte_alloc_one+0x84/0x3e0 [ 176.675733][ T7648] __do_fault+0x359/0x550 [ 176.675767][ T7648] ? __pfx_filemap_map_pages+0x10/0x10 [ 176.675796][ T7648] do_fault+0x2db/0x1990 [ 176.675831][ T7648] ? __pmd_alloc+0x6aa/0x9c0 [ 176.675869][ T7648] __handle_mm_fault+0x1807/0x2b50 [ 176.675900][ T7648] ? mt_find+0x45e/0x8e0 [ 176.675933][ T7648] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.675957][ T7648] ? __pfx_mt_find+0x10/0x10 [ 176.676004][ T7648] ? find_vma+0xbf/0x140 [ 176.676035][ T7648] ? __pfx_find_vma+0x10/0x10 [ 176.676070][ T7648] handle_mm_fault+0x36d/0xa20 [ 176.676103][ T7648] do_user_addr_fault+0x74c/0x12f0 [ 176.676145][ T7648] exc_page_fault+0x6f/0xd0 [ 176.676173][ T7648] asm_exc_page_fault+0x26/0x30 [ 176.676197][ T7648] RIP: 0010:__put_user_4+0xd/0x20 [ 176.676224][ T7648] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 b9 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 176.676247][ T7648] RSP: 0018:ffffc9000b307c90 EFLAGS: 00050246 [ 176.676267][ T7648] RAX: 0000000000000158 RBX: 0000000000000000 RCX: 0000000000000000 [ 176.676281][ T7648] RDX: 1ffff92001660fc0 RSI: ffffffff82526ce1 RDI: ffffc9000b307e00 [ 176.676298][ T7648] RBP: ffff88801cb21e80 R08: 0000000000000001 R09: 00000000000001c1 [ 176.676312][ T7648] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000002360400 [ 176.676327][ T7648] R13: 1ffff92001660f97 R14: ffff888029d26300 R15: 0000000000000000 [ 176.676352][ T7648] ? __might_fault+0x111/0x140 [ 176.676383][ T7648] kernel_clone+0x68c/0x930 [ 176.676417][ T7648] ? __pfx_kernel_clone+0x10/0x10 [ 176.676467][ T7648] __do_sys_clone+0xd9/0x120 [ 176.676498][ T7648] ? __pfx___do_sys_clone+0x10/0x10 [ 176.676543][ T7648] ? xfd_validate_state+0x129/0x190 [ 176.676591][ T7648] do_syscall_64+0xc9/0xf80 [ 176.676621][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.676645][ T7648] RIP: 0033:0x7fe9c859aeb9 [ 176.676664][ T7648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.676685][ T7648] RSP: 002b:00007fe9c952afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 176.676708][ T7648] RAX: ffffffffffffffda RBX: 00007fe9c8815fa0 RCX: 00007fe9c859aeb9 [ 176.676723][ T7648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 176.676738][ T7648] RBP: 00007fe9c8608c1f R08: 0000000000000000 R09: 0000000000000000 [ 176.676752][ T7648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.676766][ T7648] R13: 00007fe9c8816038 R14: 00007fe9c8815fa0 R15: 00007fff027394b8 [ 176.676799][ T7648] [ 178.906233][ T7703] FAULT_INJECTION: forcing a failure. [ 178.906233][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 178.921579][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(full) [ 178.921600][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.921611][ T7703] Call Trace: [ 178.921617][ T7703] [ 178.921623][ T7703] dump_stack_lvl+0x100/0x190 [ 178.921645][ T7703] should_fail_ex.cold+0x5/0xa [ 178.921669][ T7703] should_failslab+0xc2/0x120 [ 178.921689][ T7703] ? tracepoint_add_func+0x2c5/0xed0 [ 178.921705][ T7703] __kmalloc_noprof+0xf6/0x9c0 [ 178.921721][ T7703] ? __mutex_lock+0x26a/0x1b90 [ 178.921742][ T7703] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 178.921759][ T7703] ? tracepoint_add_func+0x2c5/0xed0 [ 178.921774][ T7703] tracepoint_add_func+0x2c5/0xed0 [ 178.921789][ T7703] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 178.921808][ T7703] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 178.921824][ T7703] tracepoint_probe_register+0xc4/0x110 [ 178.921840][ T7703] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 178.921856][ T7703] ? ftrace_set_clr_event+0x156/0x330 [ 178.921875][ T7703] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 178.921890][ T7703] ? __lock_acquire+0x4a5/0x2630 [ 178.921914][ T7703] tracing_start_sched_switch+0xaf/0x170 [ 178.921929][ T7703] __ftrace_event_enable_disable+0x557/0x6f0 [ 178.921948][ T7703] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 178.921972][ T7703] ftrace_set_clr_event+0x16e/0x330 [ 178.921992][ T7703] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 178.922011][ T7703] ? trace_get_user+0x3ae/0xa70 [ 178.922033][ T7703] ftrace_event_write+0x259/0x2c0 [ 178.922052][ T7703] ? __pfx_ftrace_event_write+0x10/0x10 [ 178.922080][ T7703] vfs_write+0x2aa/0x1070 [ 178.922102][ T7703] ? __pfx_ftrace_event_write+0x10/0x10 [ 178.922123][ T7703] ? __pfx_vfs_write+0x10/0x10 [ 178.922138][ T7703] ? find_held_lock+0x2b/0x80 [ 178.922152][ T7703] ? __fget_files+0x215/0x3d0 [ 178.922172][ T7703] ? __fget_files+0x21f/0x3d0 [ 178.922193][ T7703] ksys_write+0x12a/0x250 [ 178.922209][ T7703] ? __pfx_ksys_write+0x10/0x10 [ 178.922231][ T7703] do_syscall_64+0xc9/0xf80 [ 178.922250][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.922265][ T7703] RIP: 0033:0x7f39f4b9aeb9 [ 178.922278][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.922291][ T7703] RSP: 002b:00007f39f596e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.922305][ T7703] RAX: ffffffffffffffda RBX: 00007f39f4e15fa0 RCX: 00007f39f4b9aeb9 [ 178.922314][ T7703] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 000000000000000b [ 178.922322][ T7703] RBP: 00007f39f4c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 178.922331][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.922339][ T7703] R13: 00007f39f4e16038 R14: 00007f39f4e15fa0 R15: 00007fff6f58d5e8 [ 178.922358][ T7703] [ 178.922365][ T7703] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 179.974744][ T30] audit: type=1800 audit(1770052400.885:7): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.394" name="dbroot" dev="configfs" ino=17671 res=0 errno=0 [ 180.098413][ T7727] netlink: 2 bytes leftover after parsing attributes in process `syz.2.394'. [ 180.599963][ T7729] ------------[ cut here ]------------ [ 180.605773][ T7729] IS_ERR(old) [ 180.605804][ T7729] WARNING: kernel/tracepoint.c:358 at tracepoint_probe_unregister+0x7ff/0xc90, CPU#1: syz.0.396/7729 [ 180.620064][ T7729] Modules linked in: [ 180.624090][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT(full) [ 180.633922][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.644483][ T7729] RIP: 0010:tracepoint_probe_unregister+0x7ff/0xc90 [ 180.651408][ T7729] Code: 5e 41 5f c3 cc cc cc cc e8 4e 33 fe ff 48 8d 7b f0 48 c7 c6 d0 06 08 82 e8 5e ff e3 ff eb c1 bb fe ff ff ff e8 32 33 fe ff 90 <0f> 0b 90 eb b3 e8 27 33 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 180.671500][ T7729] RSP: 0018:ffffc9000ee978a8 EFLAGS: 00010287 [ 180.677995][ T7729] RAX: 0000000000051af3 RBX: 00000000fffffffe RCX: ffffc9000beda000 [ 180.686354][ T7729] RDX: 0000000000080000 RSI: ffffffff8208178e RDI: ffff88802f641e80 [ 180.694317][ T7729] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 180.702544][ T7729] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff820e2290 [ 180.710838][ T7729] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8e9fac40 [ 180.719148][ T7729] FS: 00007f39f596e6c0(0000) GS:ffff8881246e3000(0000) knlGS:0000000000000000 [ 180.728170][ T7729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.734767][ T7729] CR2: 00007f0d7a2e9000 CR3: 000000004e1ea000 CR4: 00000000003526f0 [ 180.743096][ T7729] Call Trace: [ 180.746608][ T7729] [ 180.749537][ T7729] tracing_stop_cmdline_record+0x66/0xa0 [ 180.755160][ T7729] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 180.761178][ T7729] ftrace_event_set_open+0x224/0x380 [ 180.766497][ T7729] do_dentry_open+0x73e/0x1570 [ 180.771260][ T7729] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 180.777095][ T7729] ? security_inode_permission+0xbf/0x250 [ 180.782872][ T7729] vfs_open+0x82/0x3f0 [ 180.786962][ T7729] path_openat+0x21dc/0x3120 [ 180.791562][ T7729] ? __pfx_path_openat+0x10/0x10 [ 180.796595][ T7729] do_filp_open+0x1f7/0x420 [ 180.801092][ T7729] ? __pfx_do_filp_open+0x10/0x10 [ 180.806201][ T7729] ? _raw_spin_unlock+0x28/0x50 [ 180.811054][ T7729] ? alloc_fd+0x476/0x790 [ 180.815466][ T7729] do_sys_openat2+0x12e/0x220 [ 180.820243][ T7729] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.825449][ T7729] ? __sys_connect+0xe4/0x170 [ 180.830156][ T7729] __x64_sys_openat+0x12d/0x210 [ 180.835007][ T7729] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.840740][ T7729] ? xfd_validate_state+0x129/0x190 [ 180.846313][ T7729] do_syscall_64+0xc9/0xf80 [ 180.850852][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.856828][ T7729] RIP: 0033:0x7f39f4b9aeb9 [ 180.861232][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.880889][ T7729] RSP: 002b:00007f39f596e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.889356][ T7729] RAX: ffffffffffffffda RBX: 00007f39f4e15fa0 RCX: 00007f39f4b9aeb9 [ 180.897358][ T7729] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 180.905317][ T7729] RBP: 00007f39f4c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 180.913313][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.921359][ T7729] R13: 00007f39f4e16038 R14: 00007f39f4e15fa0 R15: 00007fff6f58d5e8 [ 180.929388][ T7729] [ 180.932403][ T7729] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 180.939676][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT(full) [ 180.948881][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.958927][ T7729] Call Trace: [ 180.962194][ T7729] [ 180.965135][ T7729] dump_stack_lvl+0x100/0x190 [ 180.969808][ T7729] vpanic+0x20d/0x630 [ 180.973781][ T7729] panic+0xd1/0xd1 [ 180.977487][ T7729] ? __pfx_panic+0x10/0x10 [ 180.981896][ T7729] check_panic_on_warn.cold+0x19/0x34 [ 180.987259][ T7729] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 180.993230][ T7729] __warn.cold+0x191/0x2f8 [ 180.997635][ T7729] __report_bug+0x296/0x3d0 [ 181.002131][ T7729] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 181.008104][ T7729] ? __pfx___report_bug+0x10/0x10 [ 181.013117][ T7729] ? rcu_is_watching+0x12/0xc0 [ 181.017869][ T7729] ? trace_contention_end+0xd6/0x110 [ 181.023149][ T7729] ? __mutex_lock+0x26a/0x1b90 [ 181.027903][ T7729] ? tracepoint_probe_unregister+0x31/0xc90 [ 181.033785][ T7729] ? rcu_is_watching+0x12/0xc0 [ 181.038538][ T7729] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 181.044509][ T7729] report_bug+0xb2/0x220 [ 181.048746][ T7729] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 181.054721][ T7729] handle_bug+0x166/0x2a0 [ 181.059047][ T7729] exc_invalid_op+0x17/0x50 [ 181.063541][ T7729] asm_exc_invalid_op+0x1a/0x20 [ 181.068380][ T7729] RIP: 0010:tracepoint_probe_unregister+0x7ff/0xc90 [ 181.074958][ T7729] Code: 5e 41 5f c3 cc cc cc cc e8 4e 33 fe ff 48 8d 7b f0 48 c7 c6 d0 06 08 82 e8 5e ff e3 ff eb c1 bb fe ff ff ff e8 32 33 fe ff 90 <0f> 0b 90 eb b3 e8 27 33 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 181.094552][ T7729] RSP: 0018:ffffc9000ee978a8 EFLAGS: 00010287 [ 181.100608][ T7729] RAX: 0000000000051af3 RBX: 00000000fffffffe RCX: ffffc9000beda000 [ 181.108567][ T7729] RDX: 0000000000080000 RSI: ffffffff8208178e RDI: ffff88802f641e80 [ 181.116524][ T7729] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 181.124481][ T7729] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff820e2290 [ 181.132436][ T7729] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8e9fac40 [ 181.140395][ T7729] ? __pfx_probe_sched_switch+0x10/0x10 [ 181.145945][ T7729] ? tracepoint_probe_unregister+0x7fe/0xc90 [ 181.152011][ T7729] ? tracepoint_probe_unregister+0x7fe/0xc90 [ 181.157984][ T7729] tracing_stop_cmdline_record+0x66/0xa0 [ 181.163607][ T7729] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 181.169585][ T7729] ftrace_event_set_open+0x224/0x380 [ 181.174863][ T7729] do_dentry_open+0x73e/0x1570 [ 181.179622][ T7729] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 181.185423][ T7729] ? security_inode_permission+0xbf/0x250 [ 181.191139][ T7729] vfs_open+0x82/0x3f0 [ 181.195206][ T7729] path_openat+0x21dc/0x3120 [ 181.199795][ T7729] ? __pfx_path_openat+0x10/0x10 [ 181.204731][ T7729] do_filp_open+0x1f7/0x420 [ 181.209222][ T7729] ? __pfx_do_filp_open+0x10/0x10 [ 181.214249][ T7729] ? _raw_spin_unlock+0x28/0x50 [ 181.219089][ T7729] ? alloc_fd+0x476/0x790 [ 181.223415][ T7729] do_sys_openat2+0x12e/0x220 [ 181.228097][ T7729] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.233305][ T7729] ? __sys_connect+0xe4/0x170 [ 181.237978][ T7729] __x64_sys_openat+0x12d/0x210 [ 181.242840][ T7729] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.248209][ T7729] ? xfd_validate_state+0x129/0x190 [ 181.253414][ T7729] do_syscall_64+0xc9/0xf80 [ 181.257925][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.263848][ T7729] RIP: 0033:0x7f39f4b9aeb9 [ 181.268262][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.287866][ T7729] RSP: 002b:00007f39f596e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.296273][ T7729] RAX: ffffffffffffffda RBX: 00007f39f4e15fa0 RCX: 00007f39f4b9aeb9 [ 181.304232][ T7729] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 181.312199][ T7729] RBP: 00007f39f4c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 181.320157][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.328117][ T7729] R13: 00007f39f4e16038 R14: 00007f39f4e15fa0 R15: 00007fff6f58d5e8 [ 181.336117][ T7729] [ 181.339468][ T7729] Kernel Offset: disabled [ 181.343786][ T7729] Rebooting in 86400 seconds..