last executing test programs: 14.590192794s ago: executing program 2 (id=1003): pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x9) socket(0x2d, 0x2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000400)={0x8}) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) futimesat$auto(r2, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x8, 0xa8d7}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="35b918", 0x3) r5 = setfsgid$auto(0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x8, 0xc, 0xb476, 0x0, r3, r5, 0xffff, 0x4, 0x3, 0x0, 0x0, 0x80, {0x7, 0x10}, {0x1, 0x9}, {0x1ff, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x6, 0x401, 0x400000000006, 0x7, 0x6, 0x3, 0x40, 0x4, 0x0, 0x9, [0x3, 0x10, 0x7fffffffffffffdf, 0x81, 0xd, 0x7ffd, 0x6, 0x200000000000003, 0x9]}) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='/sys/bus/netdevsim/new_device\x00', 0xd30f, 0xca) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x8, 0x9, &(0x7f00000003c0)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x5) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x3ff) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffd, 0x6, 0x80000000, 0x200010000eb1, 0xffffffffffffffff, 0x400000020007ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) 14.578747903s ago: executing program 0 (id=1004): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000020) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r0, 0x9, 0xffff, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0x3) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, 0x0, 0x40) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) wait4$auto(0xffffffffffffffff, &(0x7f0000000100)=0x400, 0x4, &(0x7f0000000140)={{0x2c6a, 0x9}, {0x9, 0x7}, 0x63f7, 0x8, 0x1e3d, 0xfffffffffffffffa, 0x877, 0xef0f, 0x4, 0x3000, 0xffff, 0xd, 0x7ff, 0x280, 0x9, 0x7ff}) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) 14.222129159s ago: executing program 1 (id=1006): socket(0xa, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xc}, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) setsockopt$auto(r1, 0xce62, 0x7, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x81) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000240)={0x5, @inferred, @raw=0x8, 0x12d9, 0x40, '\x00', {0x8000, 0x1000, 0x3d, 0xee00, 0xffffffffffffffff, 0x8, 0x1ff, 0x5, {0x7, 0x1}, {0x7, 0x6}, {0x8000000000000001, 0x85}, 0x5, 0xbd8, 0x8, 0x3, 0x1, 0x4, 0x9, 0x30, 0xffd6, 0x31, '\x00', 0x572, 0x8, 0xb, 0x4}}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/pppol2tp\x00', 0x48000, 0x0) pread64$auto(r2, 0x0, 0x8, 0x7fff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xd6d5) 10.664815032s ago: executing program 1 (id=1008): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r1) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbd3e0250400001c040005000800040009000000"], 0x20}, 0x1, 0x3000700, 0x0, 0x490}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x9}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r0}, 0x287) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id=0x7, 0x2, 0x10000, r3}, 0xac) unlink$auto(&(0x7f0000000000)='.\x00') r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range$auto(r4, r4, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x11) sendfile$auto(r5, r5, 0x0, 0x1) socket(0x2, 0x801, 0x106) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) 10.570746368s ago: executing program 2 (id=1009): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) socket(0x15, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = io_uring_setup$auto(0x1, 0x0) fcntl$auto_F_GETOWN(r2, 0x9, 0x3f3) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) unshare$auto(0x401) 10.406977285s ago: executing program 0 (id=1010): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) socket(0x15, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = io_uring_setup$auto(0x1, 0x0) fcntl$auto_F_GETOWN(r2, 0x9, 0x3f3) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) unshare$auto(0x401) 10.294112937s ago: executing program 3 (id=1011): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) utimes$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x1, 0xfffffffffffffffb}) umount2$auto(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r2, @ANYBLOB="020005000000fddbdf250000000008000800ff00000008000100e0e4516500000b0000000000"], 0xfffffffffffffd6c}, 0x1, 0x0, 0x0, 0x4}, 0x14) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 8.660537922s ago: executing program 1 (id=1012): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) mq_open$auto(&(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x800, &(0x7f00000002c0)={0x8, 0x7, 0x3, 0x7fff}) write$auto(0xffffffffffffffff, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x101, 0x5, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b7f, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x89ef, 0x74) socketpair$auto(0x55a, 0x6, 0x6, 0x0) socket(0xa, 0x1, 0x84) 7.723306288s ago: executing program 0 (id=1013): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r1) socket(0x15, 0x5, 0x0) mq_open$auto(&(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x800, &(0x7f00000002c0)={0x8, 0x7, 0x3, 0x7fff}) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000240)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000200), 0x420001, 0x0) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsetxattr$auto(r4, &(0x7f0000000040)='&\x00', &(0x7f0000000180)="1ee85262dd03fd7d2cabc33195bcd43bb114d0a31083033ee00150f9f82d41d31991ffcf61fa50f0e9e29693f5cc82c3f3c1df5c646c21e1", 0x1, 0xfffff592) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r2, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) io_setup$auto(0x1, 0x0) 7.708865975s ago: executing program 2 (id=1014): r0 = open(0x0, 0x0, 0x57e) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x1, &(0x7f00000001c0)='/dev001\x00'/21, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/nf_conntrack/parameters/hashsize\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000000c0)='\x03\xcb\x12\xfa\b\x1c\xc7kH\xee\xb9\xc0\xd0;\x88\x1e^2G_\xb2\xa7\xb4\x00D\x12S\xa9W$\xd7\x17/\xbb\xb3\xff\xed_q]a\xd7A\x8e\xabR \xbb3\x1b}\xcb\xda\xbf\x94\xd7\x80\xdbp\xa9\x89\xb8XF\t|', 0x81) unshare$auto(0x40000080) setns(0xc9, 0x0) socket(0x1f, 0x1, 0x0) mmap$auto(0x8, 0x3, 0x3, 0x800ebe, 0xffffffffffffffff, 0x7ffc) r3 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r4, 0x4004ae99, 0x0) madvise$auto(0x611b, 0x9, 0x3) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) 7.399180434s ago: executing program 3 (id=1015): r0 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0xe0) mmap$auto(0x200000, 0x20009, 0x4000000000df, 0xeb1, r0, 0x40000008000) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0xffff7ffc, &(0x7f0000000380)={{}, {0x800002000009, 0x4b}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nbd1\x00', 0x141000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) unshare$auto(0x4000000000000) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180)=0xffff) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) setrlimit$auto(0x305f658d, &(0x7f0000000200)={0x5, 0x3}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setfsuid$auto(0xee00) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)) connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x57) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x0, "ab06fdffff00fff500"}, 0x55) userfaultfd$auto(0xfffffff9) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.991589218s ago: executing program 1 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x80805, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) r3 = setfsuid$auto(0xee01) getpriority$auto_PRIO_USER(0x2, r3) setfsuid$auto(r3) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') setsockopt$auto(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x1) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, 0x0, 0x2000c000) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000012c0), 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/cec26/uevent\x00', 0x181b42, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) sendfile$auto(r5, 0x3, 0x0, 0xc01) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r8) r10 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) writev$auto(r10, &(0x7f0000000000)={0x0, 0x7111}, 0x8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, '\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x13, 0x1, '-*/--[)),[*@:\x1f#'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000810) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf2512000000cc679402c3bee44bcc8f4298c951f7f448f2d565c3eb45371dd3b2a3f14a270c8bda0da4d250b72dc68df81e764f70693d3db429b25e9b9118ffbd8ecd7ffd70e83bf017364aaf79f75e9463930caf0cd6b476ccff9794c2d4e984b1c740b574d140caa6f6fa6d93bda28366540c3c5efa7183cff83c304e57f5e3d56784d4b9c104058cae78b641994a874a175ec95abc7dc6ef96bf301675455acaf65f291a9aa00bbc5186d514fb4a9f6dba8897f69ac47d91d962db6ce50ead25eb29ed50b5dee4b90093000020d36760feeb8ef9159399557c74cbe1bdd22a892c71"], 0xdc}, 0x1, 0x0, 0x0, 0x8810}, 0x20000080) 6.274649621s ago: executing program 1 (id=1017): socket(0xa, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xc}, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) setsockopt$auto(r1, 0xce62, 0x7, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x81) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000240)={0x5, @inferred, @raw=0x8, 0x12d9, 0x40, '\x00', {0x8000, 0x1000, 0x3d, 0xee00, 0xffffffffffffffff, 0x8, 0x1ff, 0x5, {0x7, 0x1}, {0x7, 0x6}, {0x8000000000000001, 0x85}, 0x5, 0xbd8, 0x8, 0x3, 0x1, 0x4, 0x9, 0x30, 0xffd6, 0x31, '\x00', 0x572, 0x8, 0xb, 0x4}}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/pppol2tp\x00', 0x48000, 0x0) pread64$auto(r2, 0x0, 0x8, 0x7fff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xd6d5) 4.647741582s ago: executing program 0 (id=1018): pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x9) socket(0x2d, 0x2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000400)={0x8}) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) futimesat$auto(r2, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x8, 0xa8d7}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="35b918", 0x3) r5 = setfsgid$auto(0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x8, 0xc, 0xb476, 0x0, r3, r5, 0xffff, 0x4, 0x3, 0x0, 0x0, 0x80, {0x7, 0x10}, {0x1, 0x9}, {0x1ff, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x6, 0x401, 0x400000000006, 0x7, 0x6, 0x3, 0x40, 0x4, 0x0, 0x9, [0x3, 0x10, 0x7fffffffffffffdf, 0x81, 0xd, 0x7ffd, 0x6, 0x200000000000003, 0x9]}) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='/sys/bus/netdevsim/new_device\x00', 0xd30f, 0xca) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x8, 0x9, &(0x7f00000003c0)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x5) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x3ff) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffd, 0x6, 0x80000000, 0x200010000eb1, 0xffffffffffffffff, 0x400000020007ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) 4.424055945s ago: executing program 3 (id=1019): socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1c) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) mmap$auto(0x0, 0x400008, 0xa, 0x9b72, r1, 0x800008000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000002, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0x5, 0x0) 3.724668062s ago: executing program 2 (id=1020): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_ratio\x00', 0x141241, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000240)='/\x8ax\xe1daudio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14wO\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xcem\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xcac\x10<4?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x0fq\x02\xe8\x89\xf8\x8c\xed\xef}\xd3Sh\x92\x93\xa1\xfc\xe0K\xed\xa3\x00'/184, 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x1000200) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xc51c, 0x0, 0x9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) open(&(0x7f0000000140)='./cgroup\x00', 0x80080, 0x390) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x101102, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x8, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_START2(r2, 0x4142, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) 3.544213589s ago: executing program 3 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x4840) getsockopt$auto_SO_PEERGROUPS(r0, 0x6, 0x3b, &(0x7f0000000500)='-#!\x00', &(0x7f0000000540)=0x100) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000005c0), r0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3.342691897s ago: executing program 3 (id=1022): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) mq_open$auto(&(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x800, &(0x7f00000002c0)={0x8, 0x7, 0x3, 0x7fff}) write$auto(0xffffffffffffffff, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = io_uring_setup$auto(0x1, 0x0) fcntl$auto_F_GETOWN(r2, 0x9, 0x3f3) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) unshare$auto(0x401) 2.023268252s ago: executing program 1 (id=1023): unshare$auto(0x40000080) unshare$auto(0x6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x4000007c) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r1) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xfa\b\x1c\xc7k\x00\x00\x00\x00\x00\x00', 0x81) write$auto(0x3, 0x0, 0x100082) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000280), 0x7ffff000}, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) rt_sigpending$auto(0x0, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) ioctl$auto_BLKBSZSET(r4, 0x40081271, &(0x7f00000000c0)=0x10000) unshare$auto(0x401) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004090}, 0x48010) 1.631550559s ago: executing program 0 (id=1024): socket(0xa, 0x5, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) msgctl$auto_MSG_STAT(0x2, 0xb, &(0x7f0000000080)={{0x7, 0xffffffffffffffff, 0xee00, 0xd6e, 0xd, 0x1, 0x2004}, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4, 0xd84, 0x1, 0x4, 0x4, 0x5, 0x9, 0x7, 0x9, @raw=0x2}) setfsuid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x200000000000011, 0x2, 0x0) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) mlockall$auto(0x7) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x40100, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, &(0x7f0000000180)=""/205, 0xcd) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b) 1.44896106s ago: executing program 2 (id=1025): keyctl$auto_KEYCTL_REVOKE(0x3, 0x6, 0xffffffffffffffff, 0x0, 0x3f2bda40) keyctl$auto_KEYCTL_REVOKE(0x3, 0x81, 0x2, 0x7, 0x9) keyctl$auto_KEYCTL_REVOKE(0x3, 0x8, 0x5, 0x9, 0x8) keyctl$auto_KEYCTL_REVOKE(0x3, 0x1000000000000, 0x5, 0x100000000, 0x7) keyctl$auto_KEYCTL_REVOKE(0x3, 0x6, 0x7, 0x5, 0x2) keyctl$auto_KEYCTL_REVOKE(0x3, 0x9, 0x33e4, 0x3fa, 0x5) keyctl$auto_KEYCTL_REVOKE(0x3, 0x2, 0x100000000, 0x1000, 0xa14) keyctl$auto_KEYCTL_REVOKE(0x3, 0x4, 0x6, 0x2, 0x2) keyctl$auto_KEYCTL_REVOKE(0x3, 0x9, 0x101, 0x10e8, 0x4) r0 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000000)=0x87ae) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4a6, 0x70bd26, 0x25dfdbfd, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x4}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x38}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7}, @ILA_ATTR_IFINDEX={0x8, 0x4, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) keyctl$auto_KEYCTL_REVOKE(0x3, 0x9, 0x12a0, 0xf06e, 0xffffffffffff3d56) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000001c0), r0) r3 = clone3$auto(&(0x7f0000000200)={0x7fffffff, 0x81, 0x0, 0xcba8, 0x0, 0xff, 0x8, 0x1, 0x0, 0x9, 0x5}, 0x3) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a0, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, "0ea02aa0daf9c3a6830a16b8a2879d"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xdbe0}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x170, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x161, 0x2, "5aeb44599d705380ab1c12f51d07bb71197543b09584ab91c7f47bae2dd1301a3a8080ceefc7c8c5f23a1a71104e2c9597460b61f94dc0b544c17748bc33ab5f730f93e2d1c550b21ca265008ff30f9bad74fa095d2826f2b569d29659a517fbb55e4f8be54b50580d7eba2b517a7995161bad189d6972b67e0211beacd680a2a8a355dca9db6903154f50b8443445e2c4d278498a07c60b725a85627b5d906e100c13e01143dc89cc44dd7703c3d23678c7e87b57ce93de2d649c0ab8ef19492655930bf740b8bce51a54807c0e7e7fac872194d2dd5a8daa14e68e56d63f10c9cd9af8aeb5ac21e0f17c89bc63f98e3b960b5a40a2ec74404b95a4e0ce76160dd30d13415d893a5b81023c963ad1b590605c8472e87e341767f2408fe85e713a8413420cdf57011feb2732815051afe0b6f44e51307576db077df98181ad1757cc9ed800e6762bb263a82f6e37daf7fbd098c8114d6a621f92563790"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x814}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r6 = wait4$auto(r3, &(0x7f0000000600)=0x5, 0x1, &(0x7f0000000640)={{0x8, 0x6}, {0x7, 0x4}, 0x8, 0x3, 0x4, 0x3, 0x9, 0x6, 0x81, 0x8, 0x6, 0x3, 0x5, 0x3, 0x6, 0x10}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)="2c031592ed8f241175f0dac14203a670a353a3055b4f9288fa6967e2d83e9d9b92d78842b99d4156cc82d1e0527b24b4a61032247006c67c8ff22436", 0x8, &(0x7f0000000780)={&(0x7f0000000740)="3eea9951d5c71835d3acf02ba8a45c785967e917fe792d1a53633b048a7ee1568e4dc170b691c214d5291535e23f29353965ce16", 0x10001}, 0x1, &(0x7f00000007c0)="6cbf18b95673ed7eb12390fe25628a37ae1f42cc2b8fca181b03568057308723e35a8186ccbc285e7307e648fffbad46f3581f1de478646333b9fac0316b0df66a7ccbdd7eeefef876b0cc19bf1b852c416ef27536f32cbadf130d334b3759259fe49def7183b152e5eb3a3d40a99023ffc1f173542162daf82f191becb1", 0x3, 0xa18}, 0x7) keyctl$auto_KEYCTL_REVOKE(0x3, 0x18000000000, 0x4beb, 0x3, 0xad0ad00) io_uring_setup$auto(0x7, &(0x7f0000000880)={0x9, 0x9, 0xff2c, 0xfff, 0x2, 0xca0, r0, [0x9, 0xe84e, 0x6], {0x101, 0x20000, 0x90000000, 0x101, 0x6, 0x8, 0x2, 0x4, 0x100}, {0x90, 0x7, 0x9, 0x1, 0x6, 0x800, 0x71b, 0x6, 0x4}}) keyctl$auto_KEYCTL_REVOKE(0x3, 0x9, 0x1, 0x9, 0x0) keyctl$auto_KEYCTL_REVOKE(0x3, 0xa51, 0x4, 0x8, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000940), r0) sendmsg$auto_TASKSTATS_CMD_GET(r8, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r6}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xe, 0x3, 'TASKSTATS\x00'}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r3}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r3}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xc, 0x3, 'nl80211\x00'}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x8, 0x3, '@{-('}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r6}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xc, 0x3, 'nl80211\x00'}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000001) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r7, 0xc038586b, &(0x7f0000000c40)={r0, &(0x7f0000000a80)="86cabcd90475be7e2f0ac49fa843d154756f4d42e0150173c8c7d5a93ae95b5618874f8db545a998fb5fe9ad048ba9202adff27ac23e66afffbf9fab9ff819fd9ed09ab60b4a453c5ae4eb05ce83fbbd61ac66554fc708408e459824e2ad27783b220397e8d9b060e745af91b9115c31bfe72a4a", 0x400000, &(0x7f0000000b00)="ae6f886124754e6d9b0c8fcaff07a465bd549ecab339689178ff5008b1b2f1a1adca5e345ceb748797c6754c32c4c8219c410fa6763614cb62a2ff53d4d2fb98a8135e75694f5f8d481a6cba6c", 0x9, &(0x7f0000000b80)="3202e05bbd191ce075a21388f1cf43964e5bcd64003654c4a0591cb475193081ea29687b7739006994f6f1af29db5bbcbca7408511f6ce26b691844c43edcfa3536c2728d7064dfd7d6d009178331c068b067d32b90d", &(0x7f0000000c00)=0x8000}) pipe2$auto(&(0x7f0000000c80), 0x823) 217.704313ms ago: executing program 2 (id=1026): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) socket(0x15, 0x5, 0x0) mq_open$auto(&(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x800, &(0x7f00000002c0)={0x8, 0x7, 0x3, 0x7fff}) write$auto(0xffffffffffffffff, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x3, r2, 0x0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = io_uring_setup$auto(0x1, 0x0) fcntl$auto_F_GETOWN(r3, 0x9, 0x3f3) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) unshare$auto(0x401) 217.390135ms ago: executing program 3 (id=1027): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pipe$auto(0x0) exit$auto(0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0xfef4, 0xc, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) socket(0x18, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdb\b\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xffffffff976cd9fd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) pwrite64$auto(0xc8, 0x0, 0x4f, 0x1) mmap$auto(0x10, 0x9, 0x5, 0x16, 0xffffffffffffffff, 0x619) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x4202, 0x84) flock$auto(r3, 0x1) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) madvise$auto_MADV_FREE(0x5, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) r5 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_0={0x1, 0x3, 0xa, 0xce, 0x2, 0xffffffffffffffff, 0x0, "1018180970fb67bb972acd43fa70a7dd", r4, r1, 0xffffffd8, 0xa0f, 0x4, 0x1, r1, r5}, 0x8000) bpf$auto_BPF_LINK_UPDATE(0x1d, 0x0, 0x3fa) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 0 (id=1028): r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xfffffffffffffffd) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) pread64$auto(r0, 0x0, 0x1000, 0x3a) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000401}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fbdb46a1960e9c7ec4ce55df25080000"], 0x1c}}, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\' 1 [ 131.136165][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.153627][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.178111][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.193086][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.369029][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.069201][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082753][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225729][ T5625] Bluetooth: hci0: command tx timeout [ 134.449117][ T6117] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 134.498490][ T36] bridge_slave_1: left allmulticast mode [ 134.522070][ T36] bridge_slave_1: left promiscuous mode [ 134.548367][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.609085][ T36] bridge_slave_0: left allmulticast mode [ 134.627218][ T36] bridge_slave_0: left promiscuous mode [ 134.676023][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.305792][ T5625] Bluetooth: hci0: command tx timeout [ 135.594812][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.660985][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.692011][ T36] bond0 (unregistering): Released all slaves [ 136.330903][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 137.386749][ T5625] Bluetooth: hci0: command tx timeout [ 137.618785][ T36] hsr_slave_0: left promiscuous mode [ 137.638276][ T36] hsr_slave_1: left promiscuous mode [ 137.650449][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.670741][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.702826][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.715634][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.769331][ T36] veth1_macvtap: left promiscuous mode [ 137.799853][ T36] veth0_macvtap: left promiscuous mode [ 137.817544][ T36] veth1_vlan: left promiscuous mode [ 137.824158][ T36] veth0_vlan: left promiscuous mode [ 138.620910][ T36] team0 (unregistering): Port device team_slave_1 removed [ 138.662516][ T36] team0 (unregistering): Port device team_slave_0 removed [ 138.997935][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 139.467199][ T5625] Bluetooth: hci0: command tx timeout [ 140.619182][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 140.779268][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.787906][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.795173][ T6080] bridge_slave_0: entered allmulticast mode [ 140.804585][ T6080] bridge_slave_0: entered promiscuous mode [ 140.815246][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.822514][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.832200][ T6080] bridge_slave_1: entered allmulticast mode [ 140.840345][ T6080] bridge_slave_1: entered promiscuous mode [ 140.922016][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.941260][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.049471][ T6080] team0: Port device team_slave_0 added [ 141.073077][ T6080] team0: Port device team_slave_1 added [ 141.132551][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.143209][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.187528][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.218071][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.228033][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.254536][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.949915][ T6080] hsr_slave_0: entered promiscuous mode [ 141.968131][ T6080] hsr_slave_1: entered promiscuous mode [ 142.484551][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.714850][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 142.817027][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.829047][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.837513][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.849700][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.863188][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.958779][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.228295][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.526924][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.903072][ T47] bridge_slave_1: left allmulticast mode [ 144.909441][ T50] Bluetooth: hci2: command tx timeout [ 144.923153][ T47] bridge_slave_1: left promiscuous mode [ 144.931485][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.962771][ T47] bridge_slave_0: left allmulticast mode [ 144.975645][ T47] bridge_slave_0: left promiscuous mode [ 144.994977][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.139691][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.152551][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.167231][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.183557][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.198139][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.436408][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.459418][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.479564][ T47] bond0 (unregistering): Released all slaves [ 146.230625][ T47] hsr_slave_0: left promiscuous mode [ 146.250520][ T47] hsr_slave_1: left promiscuous mode [ 146.273061][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.300256][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.332985][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.360511][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.450906][ T47] veth1_macvtap: left promiscuous mode [ 146.465897][ T47] veth0_macvtap: left promiscuous mode [ 146.477434][ T47] veth1_vlan: left promiscuous mode [ 146.488918][ T47] veth0_vlan: left promiscuous mode [ 146.988491][ T50] Bluetooth: hci2: command tx timeout [ 147.247245][ T47] team0 (unregistering): Port device team_slave_1 removed [ 147.281496][ T47] team0 (unregistering): Port device team_slave_0 removed [ 147.307817][ T50] Bluetooth: hci3: command tx timeout [ 147.601999][ T6080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.621092][ T6080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.654139][ T6080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.680984][ T6080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.706241][ T6080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.731435][ T6080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.778121][ T6080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.830566][ T6080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.921891][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.929491][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.948091][ T6225] bridge_slave_0: entered allmulticast mode [ 147.972132][ T6225] bridge_slave_0: entered promiscuous mode [ 148.019726][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.029266][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.036928][ T6225] bridge_slave_1: entered allmulticast mode [ 148.045224][ T6225] bridge_slave_1: entered promiscuous mode [ 148.227640][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.393000][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.439119][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.580674][ T6225] team0: Port device team_slave_0 added [ 148.664347][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.779308][ T6225] team0: Port device team_slave_1 added [ 149.025442][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.065688][ T50] Bluetooth: hci2: command tx timeout [ 149.080062][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.087340][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.122668][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.246276][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.255247][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.285470][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.310100][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 149.371921][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.397841][ T50] Bluetooth: hci3: command tx timeout [ 149.834762][ T6225] hsr_slave_0: entered promiscuous mode [ 149.857140][ T6225] hsr_slave_1: entered promiscuous mode [ 149.863875][ T6225] debugfs: 'hsr0' already exists in 'hsr' [ 149.872490][ T6225] Cannot create hsr debugfs directory [ 150.111963][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.131641][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.140165][ T6271] bridge_slave_0: entered allmulticast mode [ 150.150011][ T6271] bridge_slave_0: entered promiscuous mode [ 150.216067][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.223557][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.231468][ T6271] bridge_slave_1: entered allmulticast mode [ 150.240458][ T6271] bridge_slave_1: entered promiscuous mode [ 150.376030][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.433714][ T47] bridge_slave_1: left allmulticast mode [ 150.445642][ T47] bridge_slave_1: left promiscuous mode [ 150.457881][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.483172][ T47] bridge_slave_0: left allmulticast mode [ 150.490453][ T47] bridge_slave_0: left promiscuous mode [ 150.496865][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.931646][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.968506][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.984094][ T47] bond0 (unregistering): Released all slaves [ 151.008414][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.126119][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.160550][ T50] Bluetooth: hci2: command tx timeout [ 151.249556][ T6271] team0: Port device team_slave_0 added [ 151.295322][ T6271] team0: Port device team_slave_1 added [ 151.478128][ T50] Bluetooth: hci3: command tx timeout [ 151.599692][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.606965][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.645919][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.678405][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.734046][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.755186][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.786804][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.866018][ T47] hsr_slave_0: left promiscuous mode [ 151.876726][ T47] hsr_slave_1: left promiscuous mode [ 151.883013][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.890598][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.898951][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.907543][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.923201][ T47] veth1_macvtap: left promiscuous mode [ 151.928876][ T47] veth0_macvtap: left promiscuous mode [ 151.934507][ T47] veth1_vlan: left promiscuous mode [ 151.940078][ T47] veth0_vlan: left promiscuous mode [ 152.245272][ T47] team0 (unregistering): Port device team_slave_1 removed [ 152.262309][ T47] team0 (unregistering): Port device team_slave_0 removed [ 152.413333][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.420695][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.440118][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.610565][ T6271] hsr_slave_0: entered promiscuous mode [ 152.620797][ T6271] hsr_slave_1: entered promiscuous mode [ 152.628374][ T6271] debugfs: 'hsr0' already exists in 'hsr' [ 152.634885][ T6271] Cannot create hsr debugfs directory [ 152.649672][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.657051][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.555710][ T50] Bluetooth: hci3: command tx timeout [ 154.429045][ T6225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.478011][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.641423][ T6225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.672774][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.701170][ T6225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.723299][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.789221][ T6225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.809321][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.385113][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.355191][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.641610][ T6080] veth0_vlan: entered promiscuous mode [ 156.814176][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.837592][ T6080] veth1_vlan: entered promiscuous mode [ 156.965925][ T6271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.990367][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.027671][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.034924][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.062342][ T6271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.085096][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.107670][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.115017][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.145198][ T6271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.184160][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.226969][ T6271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.262502][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.325014][ T6080] veth0_macvtap: entered promiscuous mode [ 157.427292][ T6080] veth1_macvtap: entered promiscuous mode [ 157.524175][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.623498][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.595810][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.915664][ T101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.425838][ T101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.434739][ T101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.853643][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.963510][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.009688][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.017526][ T6271] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.055124][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.062316][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.112743][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.119970][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.153707][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.168839][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.199983][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.460959][ T6225] veth0_vlan: entered promiscuous mode [ 160.503930][ T6225] veth1_vlan: entered promiscuous mode [ 160.634582][ T6225] veth0_macvtap: entered promiscuous mode [ 160.667869][ T6225] veth1_macvtap: entered promiscuous mode [ 160.739864][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.787569][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.831118][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.865366][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.037435][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.176858][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.405223][ T3335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.435894][ T3335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.687302][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.720566][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.602241][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.661976][ T6271] veth0_vlan: entered promiscuous mode [ 163.731353][ T6271] veth1_vlan: entered promiscuous mode [ 163.852032][ T6271] veth0_macvtap: entered promiscuous mode [ 163.889585][ T6271] veth1_macvtap: entered promiscuous mode [ 163.982028][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.028665][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.065954][ T101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.096169][ T101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.396739][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.643062][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.682733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.146904][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.598740][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.606829][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.313978][ T6642] can: request_module (can-proto-0) failed. [ 169.191842][ T6666] FAULT_INJECTION: forcing a failure. [ 169.191842][ T6666] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.256084][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 169.256125][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.256147][ T6666] Call Trace: [ 169.256158][ T6666] [ 169.256170][ T6666] dump_stack_lvl+0x100/0x190 [ 169.256233][ T6666] should_fail_ex.cold+0x5/0xa [ 169.256269][ T6666] _copy_to_user+0x32/0xd0 [ 169.256322][ T6666] keyctl_capabilities+0x5a/0x160 [ 169.256363][ T6666] __do_sys_keyctl+0x427/0x5a0 [ 169.256402][ T6666] do_syscall_64+0x115/0x840 [ 169.256446][ T6666] ? clear_bhb_loop+0x70/0xc0 [ 169.256486][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.256520][ T6666] RIP: 0033:0x7fba12d9e0d9 [ 169.256554][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.256584][ T6666] RSP: 002b:00007fba13c71028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 169.256614][ T6666] RAX: ffffffffffffffda RBX: 00007fba13026450 RCX: 00007fba12d9e0d9 [ 169.256639][ T6666] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 169.256659][ T6666] RBP: 00007fba13c71090 R08: 00000000000003ff R09: 0000000000000000 [ 169.256679][ T6666] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 169.256698][ T6666] R13: 00007fba130264e8 R14: 00007fba13026450 R15: 00007ffe34877f58 [ 169.256741][ T6666] [ 174.214817][ T6716] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 174.433200][ T6719] hub 1-0:1.0: USB hub found [ 174.472561][ T6719] hub 1-0:1.0: 1 port detected [ 177.831272][ T6754] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 187.242389][ T6834] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 187.272341][ T6834] nbd: error processing sock list [ 188.962379][ T6867] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 189.157939][ T6875] FAULT_INJECTION: forcing a failure. [ 189.157939][ T6875] name failslab, interval 1, probability 0, space 0, times 1 [ 189.171864][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT(full) [ 189.171904][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.171922][ T6875] Call Trace: [ 189.171932][ T6875] [ 189.171944][ T6875] dump_stack_lvl+0x100/0x190 [ 189.171989][ T6875] should_fail_ex.cold+0x5/0xa [ 189.172027][ T6875] should_failslab+0xc2/0x120 [ 189.172076][ T6875] kmem_cache_alloc_noprof+0x91/0x6a0 [ 189.172118][ T6875] ? do_getname+0x35/0x390 [ 189.172152][ T6875] do_getname+0x35/0x390 [ 189.172184][ T6875] do_sys_openat2+0xc7/0x1e0 [ 189.172216][ T6875] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.172251][ T6875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.172288][ T6875] ? __fget_files+0x21f/0x3d0 [ 189.172318][ T6875] __x64_sys_openat+0x12d/0x210 [ 189.172351][ T6875] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.172382][ T6875] ? ksys_write+0x1ac/0x250 [ 189.172413][ T6875] do_syscall_64+0x115/0x840 [ 189.172445][ T6875] ? clear_bhb_loop+0x70/0xc0 [ 189.172473][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.172497][ T6875] RIP: 0033:0x7fba12d9e0d9 [ 189.172516][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.172537][ T6875] RSP: 002b:00007fba13cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.172559][ T6875] RAX: ffffffffffffffda RBX: 00007fba13026090 RCX: 00007fba12d9e0d9 [ 189.172574][ T6875] RDX: 0000000000008040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 189.172588][ T6875] RBP: 00007fba13cf5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.172602][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.172615][ T6875] R13: 00007fba13026128 R14: 00007fba13026090 R15: 00007ffe34877f58 [ 189.172644][ T6875] [ 190.780856][ T6867] syz.1.107 (6867) used greatest stack depth: 19120 bytes left [ 194.510079][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.517694][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.207222][ T6949] syz.3.118 (6949): attempted to duplicate a private mapping with mremap. This is not supported. [ 196.718949][ T6960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.804803][ T6960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.021205][ T6960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.061955][ T6960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.095469][ T6960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.162946][ T6960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.308195][ T6960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.334922][ T6960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.393558][ T6960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.451371][ T6960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.466459][ T6960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.552678][ T6960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.745841][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.065725][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.305810][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.465682][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.826452][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.147630][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.390042][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.547043][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.906080][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.227339][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.467551][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.625608][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.882202][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.917866][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.930893][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.939159][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.950709][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.963270][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.192664][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.390455][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.685885][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.184614][ T101] bridge_slave_1: left allmulticast mode [ 206.198347][ T101] bridge_slave_1: left promiscuous mode [ 206.204581][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.216987][ T101] bridge_slave_0: left allmulticast mode [ 206.222799][ T101] bridge_slave_0: left promiscuous mode [ 206.235700][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.796218][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.837546][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.887760][ T101] bond0 (unregistering): Released all slaves [ 206.993695][ T50] Bluetooth: hci2: command tx timeout [ 207.836188][ T101] hsr_slave_0: left promiscuous mode [ 207.858968][ T101] hsr_slave_1: left promiscuous mode [ 207.876711][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.895636][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.906548][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.930228][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.992121][ T101] veth1_macvtap: left promiscuous mode [ 207.998337][ T101] veth0_macvtap: left promiscuous mode [ 208.004402][ T101] veth1_vlan: left promiscuous mode [ 208.014396][ T101] veth0_vlan: left promiscuous mode [ 208.384423][ T101] team0 (unregistering): Port device team_slave_1 removed [ 208.421605][ T101] team0 (unregistering): Port device team_slave_0 removed [ 208.692821][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 209.066433][ T50] Bluetooth: hci2: command tx timeout [ 211.040060][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 211.145842][ T50] Bluetooth: hci2: command tx timeout [ 211.695903][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.719222][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.747235][ T7035] bridge_slave_0: entered allmulticast mode [ 211.755438][ T7035] bridge_slave_0: entered promiscuous mode [ 211.797594][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.818249][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.829659][ T7035] bridge_slave_1: entered allmulticast mode [ 211.848192][ T7035] bridge_slave_1: entered promiscuous mode [ 212.005445][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.059600][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.165929][ T7035] team0: Port device team_slave_0 added [ 212.182991][ T7035] team0: Port device team_slave_1 added [ 212.298907][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.317204][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.386456][ T7151] FAULT_INJECTION: forcing a failure. [ 212.386456][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.405871][ T7035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.431982][ T7151] CPU: 0 UID: 0 PID: 7151 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(full) [ 212.432025][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.432044][ T7151] Call Trace: [ 212.432055][ T7151] [ 212.432066][ T7151] dump_stack_lvl+0x100/0x190 [ 212.432109][ T7151] should_fail_ex.cold+0x5/0xa [ 212.432147][ T7151] _copy_from_iter+0x1f4/0x1690 [ 212.432204][ T7151] ? rcu_is_watching+0x12/0xc0 [ 212.432245][ T7151] ? __pfx__copy_from_iter+0x10/0x10 [ 212.432293][ T7151] ? __kasan_kmalloc+0xaa/0xb0 [ 212.432336][ T7151] ? __kvmalloc_node_noprof+0x36d/0x970 [ 212.432381][ T7151] ? proc_sys_call_handler+0x2c7/0x5a0 [ 212.432426][ T7151] proc_sys_call_handler+0x3ed/0x5a0 [ 212.432468][ T7151] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 212.432519][ T7151] vfs_write+0x6ac/0x1050 [ 212.432552][ T7151] ? __pfx_proc_sys_write+0x10/0x10 [ 212.432593][ T7151] ? __pfx_vfs_write+0x10/0x10 [ 212.432622][ T7151] ? find_held_lock+0x2b/0x80 [ 212.432691][ T7151] __x64_sys_pwrite64+0x1eb/0x250 [ 212.432728][ T7151] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 212.432776][ T7151] do_syscall_64+0x115/0x840 [ 212.432833][ T7151] ? clear_bhb_loop+0x70/0xc0 [ 212.432873][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.432905][ T7151] RIP: 0033:0x7f4bbc59e0d9 [ 212.432930][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.432960][ T7151] RSP: 002b:00007f4bbd4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 212.432990][ T7151] RAX: ffffffffffffffda RBX: 00007f4bbc825fa0 RCX: 00007f4bbc59e0d9 [ 212.433009][ T7151] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 212.433027][ T7151] RBP: 00007f4bbd4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 212.433046][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.433064][ T7151] R13: 00007f4bbc826038 R14: 00007f4bbc825fa0 R15: 00007fffb6a8eaf8 [ 212.433109][ T7151] [ 212.734012][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.743597][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.771253][ T7035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.891998][ T7035] hsr_slave_0: entered promiscuous mode [ 212.913728][ T7035] hsr_slave_1: entered promiscuous mode [ 212.926610][ T7035] debugfs: 'hsr0' already exists in 'hsr' [ 212.942913][ T7035] Cannot create hsr debugfs directory [ 212.958080][ T7162] vivid-008: ================= START STATUS ================= [ 212.980588][ T7162] vivid-008: ================== END STATUS ================== [ 213.226769][ T50] Bluetooth: hci2: command tx timeout [ 213.422677][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 216.729155][ T7035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.761581][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.812664][ T7035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.835978][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.864056][ T7035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.903072][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.928643][ T7035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.974082][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.991981][ T7249] can: request_module (can-proto-5) failed. [ 218.035389][ T7035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.736437][ T7274] smpboot: CPU 1 is now offline [ 218.825108][ T7035] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.330922][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.338243][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.422343][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 219.859550][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.892744][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.930849][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.948996][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.003691][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.010946][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.585435][ T7312] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 221.679598][ T7312] nbd: error processing sock list [ 224.819555][ T7035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.514188][ T7035] veth0_vlan: entered promiscuous mode [ 226.618394][ T7035] veth1_vlan: entered promiscuous mode [ 228.158488][ T7035] veth0_macvtap: entered promiscuous mode [ 228.200938][ T7035] veth1_macvtap: entered promiscuous mode [ 228.321404][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.382558][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.487094][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.535312][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.587849][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.855721][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.110640][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.154500][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.634263][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.675044][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.824096][ T7439] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 232.927971][ T7439] nbd: error processing sock list [ 237.318526][ T7501] capability: warning: `syz.1.188' uses 32-bit capabilities (legacy support in use) [ 237.333668][ T7500] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 237.443767][ T7500] nbd: error processing sock list [ 240.292119][ T30] audit: type=1804 audit(1786427219.429:3): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.191" name="/newroot/35/file0" dev="tmpfs" ino=209 res=1 errno=0 [ 249.011205][ T7608] netlink: 'syz.0.205': attribute type 1 has an invalid length. [ 249.152055][ T7608] nbd: error processing sock list [ 254.707974][ T7651] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 254.866848][ T7651] nbd: error processing sock list [ 255.954756][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965447][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.708458][ T7709] FAULT_INJECTION: forcing a failure. [ 260.708458][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 260.741766][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 260.741798][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.741811][ T7709] Call Trace: [ 260.741818][ T7709] [ 260.741827][ T7709] dump_stack_lvl+0x100/0x190 [ 260.741858][ T7709] should_fail_ex.cold+0x5/0xa [ 260.741884][ T7709] should_failslab+0xc2/0x120 [ 260.741918][ T7709] kmem_cache_alloc_noprof+0x91/0x6a0 [ 260.741947][ T7709] ? __pfx_map_id_range_down+0x10/0x10 [ 260.741982][ T7709] ? security_inode_alloc+0x3b/0x2c0 [ 260.742014][ T7709] security_inode_alloc+0x3b/0x2c0 [ 260.742041][ T7709] inode_init_always_gfp+0xc77/0xfb0 [ 260.742069][ T7709] alloc_inode+0x8e/0x250 [ 260.742101][ T7709] sock_alloc+0x44/0x280 [ 260.742135][ T7709] ? security_socket_create+0x7f/0x250 [ 260.742162][ T7709] __sock_create+0xc2/0x860 [ 260.742191][ T7709] __sys_socketpair+0x1e4/0x5b0 [ 260.742220][ T7709] ? __pfx___sys_socketpair+0x10/0x10 [ 260.742251][ T7709] ? __pfx_ksys_write+0x10/0x10 [ 260.742279][ T7709] __x64_sys_socketpair+0x96/0x100 [ 260.742306][ T7709] ? lockdep_hardirqs_on+0x78/0x100 [ 260.742347][ T7709] do_syscall_64+0x115/0x840 [ 260.742379][ T7709] ? clear_bhb_loop+0x70/0xc0 [ 260.742407][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.742430][ T7709] RIP: 0033:0x7f4bbc59e0d9 [ 260.742449][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.742470][ T7709] RSP: 002b:00007f4bbd4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 260.742492][ T7709] RAX: ffffffffffffffda RBX: 00007f4bbc825fa0 RCX: 00007f4bbc59e0d9 [ 260.742507][ T7709] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 260.742521][ T7709] RBP: 00007f4bbd4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 260.742534][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.742548][ T7709] R13: 00007f4bbc826038 R14: 00007f4bbc825fa0 R15: 00007fffb6a8eaf8 [ 260.742577][ T7709] [ 260.742735][ T7709] socket: no more sockets [ 262.448396][ T7733] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 262.636102][ T7738] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 264.976753][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 265.660575][ T7771] FAULT_INJECTION: forcing a failure. [ 265.660575][ T7771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.738485][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT(full) [ 265.738521][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.738536][ T7771] Call Trace: [ 265.738544][ T7771] [ 265.738554][ T7771] dump_stack_lvl+0x100/0x190 [ 265.738588][ T7771] should_fail_ex.cold+0x5/0xa [ 265.738618][ T7771] strncpy_from_user+0x3b/0x2d0 [ 265.738660][ T7771] do_getname+0x78/0x390 [ 265.738698][ T7771] do_sys_openat2+0xc7/0x1e0 [ 265.738748][ T7771] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.738785][ T7771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.738827][ T7771] ? __fget_files+0x21f/0x3d0 [ 265.738857][ T7771] __x64_sys_openat+0x12d/0x210 [ 265.738894][ T7771] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.738930][ T7771] ? ksys_write+0x1ac/0x250 [ 265.738965][ T7771] do_syscall_64+0x115/0x840 [ 265.739002][ T7771] ? clear_bhb_loop+0x70/0xc0 [ 265.739034][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.739061][ T7771] RIP: 0033:0x7f63f3b9e0d9 [ 265.739082][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.739106][ T7771] RSP: 002b:00007f63f49af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.739130][ T7771] RAX: ffffffffffffffda RBX: 00007f63f3e26090 RCX: 00007f63f3b9e0d9 [ 265.739146][ T7771] RDX: 0000000000101000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 265.739162][ T7771] RBP: 00007f63f49af090 R08: 0000000000000000 R09: 0000000000000000 [ 265.739178][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.739192][ T7771] R13: 00007f63f3e26128 R14: 00007f63f3e26090 R15: 00007ffcec34dc78 [ 265.739230][ T7771] [ 270.488557][ T7806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 276.215692][ T30] audit: type=1800 audit(1786427255.359:4): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.247" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 281.133111][ T7914] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 281.323533][ T7915] FAULT_INJECTION: forcing a failure. [ 281.323533][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 281.374555][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.2.256 Not tainted syzkaller #0 PREEMPT(full) [ 281.374587][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.374601][ T7915] Call Trace: [ 281.374608][ T7915] [ 281.374616][ T7915] dump_stack_lvl+0x100/0x190 [ 281.374647][ T7915] should_fail_ex.cold+0x5/0xa [ 281.374673][ T7915] should_failslab+0xc2/0x120 [ 281.374708][ T7915] __kmalloc_noprof+0xfc/0x820 [ 281.374736][ T7915] ? __pfx_inc_ucount+0x10/0x10 [ 281.374768][ T7915] ? net_alloc_generic+0x1e/0x70 [ 281.374808][ T7915] net_alloc_generic+0x1e/0x70 [ 281.374843][ T7915] copy_net_ns+0xc6/0x7c0 [ 281.374863][ T7915] ? copy_cgroup_ns+0x71/0x970 [ 281.374888][ T7915] create_new_namespaces+0x3ea/0xac0 [ 281.374920][ T7915] unshare_nsproxy_namespaces+0xf2/0x220 [ 281.374948][ T7915] ksys_unshare+0x438/0xab0 [ 281.374981][ T7915] ? __pfx_ksys_unshare+0x10/0x10 [ 281.375011][ T7915] ? ksys_write+0x1ac/0x250 [ 281.375041][ T7915] __x64_sys_unshare+0x31/0x40 [ 281.375071][ T7915] do_syscall_64+0x115/0x840 [ 281.375104][ T7915] ? clear_bhb_loop+0x70/0xc0 [ 281.375140][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.375164][ T7915] RIP: 0033:0x7f4bbc59e0d9 [ 281.375182][ T7915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.375203][ T7915] RSP: 002b:00007f4bbd4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 281.375224][ T7915] RAX: ffffffffffffffda RBX: 00007f4bbc825fa0 RCX: 00007f4bbc59e0d9 [ 281.375239][ T7915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 281.375253][ T7915] RBP: 00007f4bbd4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 281.375266][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.375279][ T7915] R13: 00007f4bbc826038 R14: 00007f4bbc825fa0 R15: 00007fffb6a8eaf8 [ 281.375308][ T7915] [ 291.220123][ T8005] FAULT_INJECTION: forcing a failure. [ 291.220123][ T8005] name failslab, interval 1, probability 0, space 0, times 0 [ 292.187173][ T8005] CPU: 0 UID: 0 PID: 8005 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 292.187205][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.187218][ T8005] Call Trace: [ 292.187226][ T8005] [ 292.187234][ T8005] dump_stack_lvl+0x100/0x190 [ 292.187266][ T8005] should_fail_ex.cold+0x5/0xa [ 292.187292][ T8005] should_failslab+0xc2/0x120 [ 292.187327][ T8005] __kmalloc_cache_noprof+0x91/0x6c0 [ 292.187352][ T8005] ? find_held_lock+0x2b/0x80 [ 292.187381][ T8005] ? snd_seq_port_connect+0x61/0x540 [ 292.187424][ T8005] snd_seq_port_connect+0x61/0x540 [ 292.187461][ T8005] ? _raw_read_unlock+0x28/0x50 [ 292.187491][ T8005] ? check_subscription_permission.isra.0+0x146/0x240 [ 292.187533][ T8005] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 292.187560][ T8005] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 292.187605][ T8005] call_seq_client_ctl+0xa3/0x130 [ 292.187646][ T8005] snd_seq_kernel_client_ctl+0x77/0xd0 [ 292.187684][ T8005] snd_seq_oss_midi_open+0x465/0x680 [ 292.187715][ T8005] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 292.187743][ T8005] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 292.187782][ T8005] ? __mutex_lock+0x26d/0x1bd0 [ 292.187821][ T8005] snd_seq_oss_synth_reset+0x439/0x890 [ 292.187850][ T8005] ? __pfx___mutex_lock+0x10/0x10 [ 292.187884][ T8005] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 292.187915][ T8005] ? __pfx___fsnotify_parent+0x10/0x10 [ 292.187946][ T8005] ? __pfx_odev_release+0x10/0x10 [ 292.187986][ T8005] snd_seq_oss_reset+0x73/0x290 [ 292.188009][ T8005] ? __pfx_odev_release+0x10/0x10 [ 292.188046][ T8005] snd_seq_oss_release+0x7c/0x180 [ 292.188074][ T8005] ? __pfx_odev_release+0x10/0x10 [ 292.188109][ T8005] odev_release+0x4c/0x70 [ 292.188144][ T8005] __fput+0x3ff/0xb50 [ 292.188180][ T8005] task_work_run+0x150/0x240 [ 292.188217][ T8005] ? __pfx_task_work_run+0x10/0x10 [ 292.188260][ T8005] exit_to_user_mode_loop+0x1d8/0x6f0 [ 292.188285][ T8005] ? rcu_is_watching+0x12/0xc0 [ 292.188316][ T8005] do_syscall_64+0x652/0x840 [ 292.188349][ T8005] ? clear_bhb_loop+0x70/0xc0 [ 292.188377][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.188401][ T8005] RIP: 0033:0x7f4bbc59e0d9 [ 292.188419][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.188441][ T8005] RSP: 002b:00007f4bbd4de028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 292.188463][ T8005] RAX: 0000000000000000 RBX: 00007f4bbc826090 RCX: 00007f4bbc59e0d9 [ 292.188477][ T8005] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000002 [ 292.188490][ T8005] RBP: 00007f4bbd4de090 R08: 0000000000000000 R09: 0000000000000000 [ 292.188504][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.188517][ T8005] R13: 00007f4bbc826128 R14: 00007f4bbc826090 R15: 00007fffb6a8eaf8 [ 292.188547][ T8005] [ 295.138855][ T8020] FAULT_INJECTION: forcing a failure. [ 295.138855][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 295.199880][ T8020] CPU: 0 UID: 0 PID: 8020 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) [ 295.199911][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.199924][ T8020] Call Trace: [ 295.199932][ T8020] [ 295.199940][ T8020] dump_stack_lvl+0x100/0x190 [ 295.199971][ T8020] should_fail_ex.cold+0x5/0xa [ 295.199997][ T8020] should_failslab+0xc2/0x120 [ 295.200031][ T8020] __kmalloc_noprof+0xfc/0x820 [ 295.200060][ T8020] ? __pfx_inc_ucount+0x10/0x10 [ 295.200092][ T8020] ? net_alloc_generic+0x1e/0x70 [ 295.200132][ T8020] net_alloc_generic+0x1e/0x70 [ 295.200167][ T8020] copy_net_ns+0xc6/0x7c0 [ 295.200187][ T8020] ? copy_cgroup_ns+0x71/0x970 [ 295.200212][ T8020] create_new_namespaces+0x3ea/0xac0 [ 295.200244][ T8020] unshare_nsproxy_namespaces+0xf2/0x220 [ 295.200273][ T8020] ksys_unshare+0x438/0xab0 [ 295.200305][ T8020] ? __pfx_ksys_unshare+0x10/0x10 [ 295.200336][ T8020] ? ksys_write+0x1ac/0x250 [ 295.200366][ T8020] __x64_sys_unshare+0x31/0x40 [ 295.200396][ T8020] do_syscall_64+0x115/0x840 [ 295.200428][ T8020] ? clear_bhb_loop+0x70/0xc0 [ 295.200456][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.200480][ T8020] RIP: 0033:0x7f63f3b9e0d9 [ 295.200498][ T8020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.200519][ T8020] RSP: 002b:00007f63f49d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 295.200541][ T8020] RAX: ffffffffffffffda RBX: 00007f63f3e25fa0 RCX: 00007f63f3b9e0d9 [ 295.200556][ T8020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 295.200570][ T8020] RBP: 00007f63f49d0090 R08: 0000000000000000 R09: 0000000000000000 [ 295.200583][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.200596][ T8020] R13: 00007f63f3e26038 R14: 00007f63f3e25fa0 R15: 00007ffcec34dc78 [ 295.200625][ T8020] [ 302.389539][ T8100] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 302.423727][ T8100] nbd: error processing sock list [ 302.541125][ T8104] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 302.599997][ T8104] nbd: error processing sock list [ 303.264684][ T8095] mmap: syz.2.282 (8095) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 303.667177][ T8110] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 316.160232][ T8215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.387251][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399594][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.352307][ T8244] syz.2.303 (8244): /proc/8244/oom_adj is deprecated, please use /proc/8244/oom_score_adj instead. [ 318.853582][ T8251] FAULT_INJECTION: forcing a failure. [ 318.853582][ T8251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.013781][ T8251] CPU: 0 UID: 0 PID: 8251 Comm: syz.1.304 Not tainted syzkaller #0 PREEMPT(full) [ 319.013813][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.013826][ T8251] Call Trace: [ 319.013833][ T8251] [ 319.013841][ T8251] dump_stack_lvl+0x100/0x190 [ 319.013873][ T8251] should_fail_ex.cold+0x5/0xa [ 319.013898][ T8251] _copy_to_user+0x32/0xd0 [ 319.013937][ T8251] simple_read_from_buffer+0xcb/0x170 [ 319.013983][ T8251] proc_fail_nth_read+0x1af/0x230 [ 319.014018][ T8251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.014054][ T8251] ? rw_verify_area+0xce/0x6d0 [ 319.014089][ T8251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.014123][ T8251] vfs_read+0x1e4/0xb40 [ 319.014149][ T8251] ? __pfx_vfs_read+0x10/0x10 [ 319.014169][ T8251] ? __fget_files+0x215/0x3d0 [ 319.014198][ T8251] ? __fget_files+0x21f/0x3d0 [ 319.014228][ T8251] ksys_read+0x12a/0x250 [ 319.014249][ T8251] ? __pfx_ksys_read+0x10/0x10 [ 319.014286][ T8251] do_syscall_64+0x115/0x840 [ 319.014318][ T8251] ? clear_bhb_loop+0x70/0xc0 [ 319.014347][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.014371][ T8251] RIP: 0033:0x7f63f3b5e90e [ 319.014389][ T8251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.014411][ T8251] RSP: 002b:00007f63f49aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.014432][ T8251] RAX: ffffffffffffffda RBX: 00007f63f49af6c0 RCX: 00007f63f3b5e90e [ 319.014447][ T8251] RDX: 000000000000000f RSI: 00007f63f49af0a0 RDI: 0000000000000006 [ 319.014460][ T8251] RBP: 00007f63f49af090 R08: 0000000000000000 R09: 0000000000000000 [ 319.014474][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.014487][ T8251] R13: 00007f63f3e26128 R14: 00007f63f3e26090 R15: 00007ffcec34dc78 [ 319.014516][ T8251] [ 323.226616][ T8302] FAULT_INJECTION: forcing a failure. [ 323.226616][ T8302] name fail_futex, interval 1, probability 0, space 0, times 1 [ 323.240723][ T8302] CPU: 0 UID: 0 PID: 8302 Comm: syz.1.313 Not tainted syzkaller #0 PREEMPT(full) [ 323.240754][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.240768][ T8302] Call Trace: [ 323.240775][ T8302] [ 323.240783][ T8302] dump_stack_lvl+0x100/0x190 [ 323.240815][ T8302] should_fail_ex.cold+0x5/0xa [ 323.240841][ T8302] should_fail_futex+0x4c/0x60 [ 323.240872][ T8302] futex_lock_pi_atomic+0x12d/0xaf0 [ 323.240910][ T8302] futex_lock_pi+0x278/0x7f0 [ 323.240946][ T8302] ? __pfx_futex_lock_pi+0x10/0x10 [ 323.240974][ T8302] ? try_to_wake_up+0x70a/0x1c90 [ 323.241003][ T8302] ? __pfx_try_to_wake_up+0x10/0x10 [ 323.241036][ T8302] ? plist_check_list+0x1b8/0x280 [ 323.241072][ T8302] ? futex_private_hash_put+0x115/0x1c0 [ 323.241099][ T8302] ? __pfx_futex_wake_mark+0x10/0x10 [ 323.241138][ T8302] ? rcu_read_lock_any_held+0x6a/0xa0 [ 323.241172][ T8302] ? vfs_write+0x15d/0x1050 [ 323.241200][ T8302] do_futex+0x371/0x440 [ 323.241226][ T8302] ? __pfx_do_futex+0x10/0x10 [ 323.241250][ T8302] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.241289][ T8302] __x64_sys_futex+0x34f/0x4d0 [ 323.241319][ T8302] ? __pfx___x64_sys_futex+0x10/0x10 [ 323.241446][ T8302] do_syscall_64+0x115/0x840 [ 323.241494][ T8302] ? clear_bhb_loop+0x70/0xc0 [ 323.241528][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.241552][ T8302] RIP: 0033:0x7f63f3b9e0d9 [ 323.241572][ T8302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.241594][ T8302] RSP: 002b:00007f63f1df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 323.241618][ T8302] RAX: ffffffffffffffda RBX: 00007f63f3e26270 RCX: 00007f63f3b9e0d9 [ 323.241634][ T8302] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000000 [ 323.241648][ T8302] RBP: 00007f63f3c35024 R08: 0000000000000000 R09: 000000008000fff7 [ 323.241662][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.241676][ T8302] R13: 00007f63f3e26308 R14: 00007f63f3e26270 R15: 00007ffcec34dc78 [ 323.241706][ T8302] [ 329.708217][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 360.824090][ T8691] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 360.865357][ T8691] nbd: error processing sock list [ 378.146467][ T8850] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 378.186659][ T8850] nbd: error processing sock list [ 378.834746][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.845515][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.056556][ T8861] FAULT_INJECTION: forcing a failure. [ 380.056556][ T8861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.160902][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.1.396 Not tainted syzkaller #0 PREEMPT(full) [ 380.160934][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.160962][ T8861] Call Trace: [ 380.160997][ T8861] [ 380.161006][ T8861] dump_stack_lvl+0x100/0x190 [ 380.161102][ T8861] should_fail_ex.cold+0x5/0xa [ 380.161141][ T8861] _copy_to_user+0x32/0xd0 [ 380.161259][ T8861] str_to_user+0x48/0xa0 [ 380.161364][ T8861] evdev_do_ioctl+0x1322/0x1b30 [ 380.161405][ T8861] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 380.161441][ T8861] ? __pfx___mutex_lock+0x10/0x10 [ 380.161546][ T8861] evdev_ioctl+0x16f/0x1a0 [ 380.161566][ T8861] ? __pfx_evdev_ioctl+0x10/0x10 [ 380.161588][ T8861] __x64_sys_ioctl+0x18e/0x210 [ 380.161646][ T8861] do_syscall_64+0x115/0x840 [ 380.161764][ T8861] ? clear_bhb_loop+0x70/0xc0 [ 380.161800][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.161824][ T8861] RIP: 0033:0x7f63f3b9e0d9 [ 380.161844][ T8861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.161866][ T8861] RSP: 002b:00007f63f49d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.161917][ T8861] RAX: ffffffffffffffda RBX: 00007f63f3e25fa0 RCX: 00007f63f3b9e0d9 [ 380.161932][ T8861] RDX: 0010000000000402 RSI: 0000000080004507 RDI: 0000000000000002 [ 380.161953][ T8861] RBP: 00007f63f49d0090 R08: 0000000000000000 R09: 0000000000000000 [ 380.161967][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.161980][ T8861] R13: 00007f63f3e26038 R14: 00007f63f3e25fa0 R15: 00007ffcec34dc78 [ 380.162009][ T8861] [ 398.790537][ T9058] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 398.966446][ T9058] nbd: error processing sock list [ 405.655384][ T9133] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 405.771548][ T9133] nbd: error processing sock list [ 413.863021][ T9200] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 413.953818][ T9200] nbd: error processing sock list [ 414.253533][ T9211] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 414.401846][ T9211] nbd: error processing sock list [ 422.066604][ T9282] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 422.225556][ T9282] nbd: error processing sock list [ 429.366610][ T9363] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 429.499356][ T9363] nbd: error processing sock list [ 437.812960][ T9445] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 438.069587][ T9445] nbd: error processing sock list [ 440.270308][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.280501][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.064419][ T9652] netlink: 'syz.3.511': attribute type 1 has an invalid length. [ 460.145954][ T9652] nbd: error processing sock list [ 501.708799][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.719343][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.445013][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 511.533251][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 511.566379][T10170] nbd: must specify at least one socket [ 513.175896][T10170] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 545.770048][T10499] process 'syz.0.648' launched './file0' with NULL argv: empty string added [ 552.063846][T10568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'. [ 552.233363][ T50] Bluetooth: hci0: unexpected event 0x18 length: 726 > 23 [ 553.980235][T10568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.082958][T10575] kexec: Could not allocate control_code_buffer [ 555.756538][T10599] random: crng reseeded on system resumption [ 560.193398][T10666] FAULT_INJECTION: forcing a failure. [ 560.193398][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 560.250233][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.1.675 Not tainted syzkaller #0 PREEMPT(full) [ 560.250270][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.250286][T10666] Call Trace: [ 560.250294][T10666] [ 560.250304][T10666] dump_stack_lvl+0x100/0x190 [ 560.250339][T10666] should_fail_ex.cold+0x5/0xa [ 560.250366][T10666] should_failslab+0xc2/0x120 [ 560.250428][T10666] __kvmalloc_node_noprof+0x116/0x970 [ 560.250464][T10666] ? alloc_pages_bulk_noprof+0x668/0x13c0 [ 560.250493][T10666] ? seq_read_iter+0x819/0x1270 [ 560.250546][T10666] seq_read_iter+0x819/0x1270 [ 560.250585][T10666] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 560.250612][T10666] ? rcu_is_watching+0x12/0xc0 [ 560.250656][T10666] ? __kasan_kmalloc+0xaa/0xb0 [ 560.250690][T10666] kernfs_fop_read_iter+0x46c/0x610 [ 560.250782][T10666] copy_splice_read+0x4ba/0xbb0 [ 560.250814][T10666] ? __pfx_copy_splice_read+0x10/0x10 [ 560.250850][T10666] ? __fget_files+0x215/0x3d0 [ 560.250876][T10666] ? __pfx_copy_splice_read+0x10/0x10 [ 560.250900][T10666] do_splice_read+0x285/0x370 [ 560.250928][T10666] splice_file_to_pipe+0x82/0x120 [ 560.250957][T10666] do_sendfile+0x366/0xe20 [ 560.251000][T10666] ? __pfx_do_sendfile+0x10/0x10 [ 560.251035][T10666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.251075][T10666] ? __fget_files+0x21f/0x3d0 [ 560.251104][T10666] __x64_sys_sendfile64+0x1d8/0x220 [ 560.251132][T10666] ? ksys_write+0x1ac/0x250 [ 560.251153][T10666] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 560.251190][T10666] do_syscall_64+0x115/0x840 [ 560.251223][T10666] ? clear_bhb_loop+0x70/0xc0 [ 560.251255][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.251279][T10666] RIP: 0033:0x7f63f3b9e0d9 [ 560.251298][T10666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.251320][T10666] RSP: 002b:00007f63f49d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 560.251342][T10666] RAX: ffffffffffffffda RBX: 00007f63f3e25fa0 RCX: 00007f63f3b9e0d9 [ 560.251357][T10666] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 560.251370][T10666] RBP: 00007f63f49d0090 R08: 0000000000000000 R09: 0000000000000000 [ 560.251384][T10666] R10: 400000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 560.251398][T10666] R13: 00007f63f3e26038 R14: 00007f63f3e25fa0 R15: 00007ffcec34dc78 [ 560.251428][T10666] [ 563.156203][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.168220][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.919245][T10715] nbd: must specify at least one socket [ 585.626378][T10975] FAULT_INJECTION: forcing a failure. [ 585.626378][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 585.677573][T10975] CPU: 0 UID: 0 PID: 10975 Comm: syz.2.717 Not tainted syzkaller #0 PREEMPT(full) [ 585.677606][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.677620][T10975] Call Trace: [ 585.677628][T10975] [ 585.677636][T10975] dump_stack_lvl+0x100/0x190 [ 585.677670][T10975] should_fail_ex.cold+0x5/0xa [ 585.677698][T10975] should_failslab+0xc2/0x120 [ 585.677734][T10975] __kmalloc_noprof+0xfc/0x820 [ 585.677764][T10975] ? __register_sysctl_table+0xbc8/0x1650 [ 585.677858][T10975] ? __register_sysctl_table+0xbc8/0x1650 [ 585.677887][T10975] ? __register_sysctl_table+0xbe4/0x1650 [ 585.677923][T10975] __register_sysctl_table+0xbe4/0x1650 [ 585.677959][T10975] ? __pfx___register_sysctl_table+0x10/0x10 [ 585.677988][T10975] ? is_module_address+0x69/0xf0 [ 585.678031][T10975] ? register_net_sysctl_sz+0x222/0x430 [ 585.678140][T10975] __devinet_sysctl_register+0x1b9/0x360 [ 585.678220][T10975] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 585.678260][T10975] ? __asan_memcpy+0x3c/0x60 [ 585.678290][T10975] devinet_init_net+0x303/0x8d0 [ 585.678350][T10975] ? __pfx_devinet_init_net+0x10/0x10 [ 585.678384][T10975] ops_init+0x1e2/0x5f0 [ 585.678473][T10975] setup_net+0x118/0x3a0 [ 585.678511][T10975] ? __pfx_setup_net+0x10/0x10 [ 585.678549][T10975] ? mutex_init_lockdep+0xf1/0x120 [ 585.678585][T10975] copy_net_ns+0x46f/0x7c0 [ 585.678610][T10975] create_new_namespaces+0x3ea/0xac0 [ 585.678656][T10975] unshare_nsproxy_namespaces+0xf2/0x220 [ 585.678687][T10975] ksys_unshare+0x438/0xab0 [ 585.678726][T10975] ? __pfx_ksys_unshare+0x10/0x10 [ 585.678770][T10975] __x64_sys_unshare+0x31/0x40 [ 585.678803][T10975] do_syscall_64+0x115/0x840 [ 585.678839][T10975] ? clear_bhb_loop+0x70/0xc0 [ 585.678870][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.678895][T10975] RIP: 0033:0x7f4bbc59e0d9 [ 585.678916][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.678939][T10975] RSP: 002b:00007f4bbd4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 585.678962][T10975] RAX: ffffffffffffffda RBX: 00007f4bbc825fa0 RCX: 00007f4bbc59e0d9 [ 585.678978][T10975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 585.678995][T10975] RBP: 00007f4bbc635024 R08: 0000000000000000 R09: 0000000000000000 [ 585.679011][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.679025][T10975] R13: 00007f4bbc826038 R14: 00007f4bbc825fa0 R15: 00007fffb6a8eaf8 [ 585.679056][T10975] [ 585.683616][T10975] sysctl could not get directory: /net/ipv4 -12 [ 587.074464][T10984] FAULT_INJECTION: forcing a failure. [ 587.074464][T10984] name failslab, interval 1, probability 0, space 0, times 0 [ 587.144822][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.2.720 Not tainted syzkaller #0 PREEMPT(full) [ 587.144855][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.144870][T10984] Call Trace: [ 587.144878][T10984] [ 587.144887][T10984] dump_stack_lvl+0x100/0x190 [ 587.144921][T10984] should_fail_ex.cold+0x5/0xa [ 587.144948][T10984] should_failslab+0xc2/0x120 [ 587.144985][T10984] __kmalloc_cache_noprof+0x91/0x6c0 [ 587.145019][T10984] ? netdev_init+0x151/0x3c0 [ 587.145109][T10984] netdev_init+0x151/0x3c0 [ 587.145143][T10984] ? __pfx_netdev_init+0x10/0x10 [ 587.145167][T10984] ops_init+0x1e2/0x5f0 [ 587.145208][T10984] setup_net+0x118/0x3a0 [ 587.145246][T10984] ? __pfx_setup_net+0x10/0x10 [ 587.145283][T10984] ? mutex_init_lockdep+0xf1/0x120 [ 587.145314][T10984] copy_net_ns+0x46f/0x7c0 [ 587.145341][T10984] create_new_namespaces+0x3ea/0xac0 [ 587.145376][T10984] unshare_nsproxy_namespaces+0xf2/0x220 [ 587.145406][T10984] ksys_unshare+0x438/0xab0 [ 587.145441][T10984] ? __pfx_ksys_unshare+0x10/0x10 [ 587.145485][T10984] __x64_sys_unshare+0x31/0x40 [ 587.145518][T10984] do_syscall_64+0x115/0x840 [ 587.145553][T10984] ? clear_bhb_loop+0x70/0xc0 [ 587.145582][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.145607][T10984] RIP: 0033:0x7f4bbc59e0d9 [ 587.145628][T10984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.145651][T10984] RSP: 002b:00007f4bbd4ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 587.145674][T10984] RAX: ffffffffffffffda RBX: 00007f4bbc825fa0 RCX: 00007f4bbc59e0d9 [ 587.145690][T10984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 587.145705][T10984] RBP: 00007f4bbc635024 R08: 0000000000000000 R09: 0000000000000000 [ 587.145719][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.145733][T10984] R13: 00007f4bbc826038 R14: 00007f4bbc825fa0 R15: 00007fffb6a8eaf8 [ 587.145764][T10984] [ 594.107296][T11047] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.0.1), cmd(5) [ 601.490404][T11139] FAULT_INJECTION: forcing a failure. [ 601.490404][T11139] name failslab, interval 1, probability 0, space 0, times 0 [ 601.549159][T11139] CPU: 0 UID: 0 PID: 11139 Comm: syz.0.747 Not tainted syzkaller #0 PREEMPT(full) [ 601.549192][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.549206][T11139] Call Trace: [ 601.549213][T11139] [ 601.549221][T11139] dump_stack_lvl+0x100/0x190 [ 601.549253][T11139] should_fail_ex.cold+0x5/0xa [ 601.549279][T11139] should_failslab+0xc2/0x120 [ 601.549314][T11139] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 601.549346][T11139] ? __kasan_kmalloc+0xaa/0xb0 [ 601.549377][T11139] ? __request_module+0x2d5/0x6a0 [ 601.549408][T11139] kstrdup+0x51/0xe0 [ 601.549462][T11139] __request_module+0x2d5/0x6a0 [ 601.549489][T11139] ? __pfx___request_module+0x10/0x10 [ 601.549523][T11139] ? rcu_is_watching+0x12/0xc0 [ 601.549553][T11139] ? apparmor_capable+0x1d7/0x4d0 [ 601.549626][T11139] ? find_held_lock+0x2b/0x80 [ 601.549660][T11139] ? tcp_ca_find_autoload+0xec/0x2f0 [ 601.549729][T11139] ? tcp_ca_find_autoload+0xec/0x2f0 [ 601.549759][T11139] tcp_ca_find_autoload+0x10d/0x2f0 [ 601.549785][T11139] tcp_set_default_congestion_control+0x63/0x3b0 [ 601.549815][T11139] proc_tcp_congestion_control+0x19d/0x1c0 [ 601.549884][T11139] ? __pfx_proc_tcp_congestion_control+0x10/0x10 [ 601.549924][T11139] ? __kvmalloc_node_noprof+0x36d/0x970 [ 601.549957][T11139] ? proc_sys_call_handler+0x2c7/0x5a0 [ 601.549988][T11139] proc_sys_call_handler+0x47f/0x5a0 [ 601.550016][T11139] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 601.550051][T11139] vfs_write+0x6ac/0x1050 [ 601.550074][T11139] ? __pfx_proc_sys_write+0x10/0x10 [ 601.550102][T11139] ? __pfx_vfs_write+0x10/0x10 [ 601.550121][T11139] ? find_held_lock+0x2b/0x80 [ 601.550170][T11139] __x64_sys_pwrite64+0x1eb/0x250 [ 601.550196][T11139] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 601.550229][T11139] do_syscall_64+0x115/0x840 [ 601.550263][T11139] ? clear_bhb_loop+0x70/0xc0 [ 601.550290][T11139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.550314][T11139] RIP: 0033:0x7fba12d9e0d9 [ 601.550332][T11139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.550354][T11139] RSP: 002b:00007fba13d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 601.550375][T11139] RAX: ffffffffffffffda RBX: 00007fba13025fa0 RCX: 00007fba12d9e0d9 [ 601.550390][T11139] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 601.550404][T11139] RBP: 00007fba13d16090 R08: 0000000000000000 R09: 0000000000000000 [ 601.550417][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.550430][T11139] R13: 00007fba13026038 R14: 00007fba13025fa0 R15: 00007ffe34877f58 [ 601.550460][T11139] [ 608.247284][T11200] FAULT_INJECTION: forcing a failure. [ 608.247284][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 608.292290][T11200] CPU: 0 UID: 0 PID: 11200 Comm: syz.1.755 Not tainted syzkaller #0 PREEMPT(full) [ 608.292322][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.292336][T11200] Call Trace: [ 608.292343][T11200] [ 608.292351][T11200] dump_stack_lvl+0x100/0x190 [ 608.292383][T11200] should_fail_ex.cold+0x5/0xa [ 608.292409][T11200] should_failslab+0xc2/0x120 [ 608.292444][T11200] kmem_cache_alloc_noprof+0x91/0x6a0 [ 608.292474][T11200] ? trace_kmem_cache_alloc+0xdd/0x100 [ 608.292508][T11200] ? security_file_alloc+0x34/0x2c0 [ 608.292629][T11200] security_file_alloc+0x34/0x2c0 [ 608.292662][T11200] init_file+0x95/0x480 [ 608.292691][T11200] alloc_empty_file+0x79/0x1c0 [ 608.292722][T11200] path_openat+0xe7/0x4280 [ 608.292745][T11200] ? __kasan_slab_alloc+0x89/0x90 [ 608.292776][T11200] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 608.292807][T11200] ? do_getname+0x35/0x390 [ 608.292835][T11200] ? do_sys_openat2+0xc7/0x1e0 [ 608.292865][T11200] ? __x64_sys_openat+0x12d/0x210 [ 608.292895][T11200] ? do_syscall_64+0x115/0x840 [ 608.292927][T11200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.292959][T11200] ? __pfx_path_openat+0x10/0x10 [ 608.292991][T11200] do_file_open+0x20e/0x430 [ 608.293017][T11200] ? __pfx_do_file_open+0x10/0x10 [ 608.293061][T11200] ? alloc_fd+0x471/0x7a0 [ 608.293092][T11200] ? do_getname+0x191/0x390 [ 608.293125][T11200] do_sys_openat2+0x10f/0x1e0 [ 608.293156][T11200] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.293189][T11200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 608.293224][T11200] ? __fget_files+0x21f/0x3d0 [ 608.293251][T11200] __x64_sys_openat+0x12d/0x210 [ 608.293285][T11200] ? __pfx___x64_sys_openat+0x10/0x10 [ 608.293316][T11200] ? ksys_write+0x1ac/0x250 [ 608.293348][T11200] do_syscall_64+0x115/0x840 [ 608.293381][T11200] ? clear_bhb_loop+0x70/0xc0 [ 608.293409][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.293433][T11200] RIP: 0033:0x7f63f3b9e0d9 [ 608.293452][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.293473][T11200] RSP: 002b:00007f63f49d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 608.293495][T11200] RAX: ffffffffffffffda RBX: 00007f63f3e25fa0 RCX: 00007f63f3b9e0d9 [ 608.293510][T11200] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 608.293524][T11200] RBP: 00007f63f49d0090 R08: 0000000000000000 R09: 0000000000000000 [ 608.293538][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.293551][T11200] R13: 00007f63f3e26038 R14: 00007f63f3e25fa0 R15: 00007ffcec34dc78 [ 608.293580][T11200] [ 609.051744][T11205] FAULT_INJECTION: forcing a failure. [ 609.051744][T11205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.170238][T11205] CPU: 0 UID: 0 PID: 11205 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 609.170273][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.170287][T11205] Call Trace: [ 609.170295][T11205] [ 609.170304][T11205] dump_stack_lvl+0x100/0x190 [ 609.170337][T11205] should_fail_ex.cold+0x5/0xa [ 609.170365][T11205] _copy_to_user+0x32/0xd0 [ 609.170408][T11205] simple_read_from_buffer+0xcb/0x170 [ 609.170453][T11205] mqueue_read_file+0x230/0x3b0 [ 609.170581][T11205] ? __pfx_mqueue_read_file+0x10/0x10 [ 609.170638][T11205] ? __pfx_mqueue_read_file+0x10/0x10 [ 609.170679][T11205] vfs_readv+0x5d8/0x8d0 [ 609.170727][T11205] ? __pfx_vfs_readv+0x10/0x10 [ 609.170789][T11205] ? __fget_files+0x21f/0x3d0 [ 609.170819][T11205] ? do_readv+0x13e/0x340 [ 609.170863][T11205] do_readv+0x13e/0x340 [ 609.170903][T11205] ? __pfx_do_readv+0x10/0x10 [ 609.170949][T11205] do_syscall_64+0x115/0x840 [ 609.170986][T11205] ? clear_bhb_loop+0x70/0xc0 [ 609.171016][T11205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.171042][T11205] RIP: 0033:0x7fba12d9e0d9 [ 609.171062][T11205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.171085][T11205] RSP: 002b:00007fba13cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 609.171109][T11205] RAX: ffffffffffffffda RBX: 00007fba13026090 RCX: 00007fba12d9e0d9 [ 609.171124][T11205] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 609.171139][T11205] RBP: 00007fba12e35024 R08: 0000000000000000 R09: 0000000000000000 [ 609.171154][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.171168][T11205] R13: 00007fba13026128 R14: 00007fba13026090 R15: 00007ffe34877f58 [ 609.171199][T11205] [ 612.274081][T11244] i2c i2c-0: delete_device: Extra parameters [ 613.250650][T11250] hub 1-0:1.0: USB hub found [ 613.300981][T11250] hub 1-0:1.0: 1 port detected [ 613.368214][T11250] FAULT_INJECTION: forcing a failure. [ 613.368214][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 613.473352][T11250] CPU: 0 UID: 0 PID: 11250 Comm: syz.0.765 Not tainted syzkaller #0 PREEMPT(full) [ 613.473394][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.473415][T11250] Call Trace: [ 613.473423][T11250] [ 613.473432][T11250] dump_stack_lvl+0x100/0x190 [ 613.473467][T11250] should_fail_ex.cold+0x5/0xa [ 613.473494][T11250] should_failslab+0xc2/0x120 [ 613.473532][T11250] __kmalloc_cache_noprof+0x91/0x6c0 [ 613.473560][T11250] ? device_add+0xd3f/0x1970 [ 613.473690][T11250] device_add+0xd3f/0x1970 [ 613.473712][T11250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 613.473755][T11250] ? lockdep_init_map_type+0x5c/0x250 [ 613.473779][T11250] ? __pfx_device_add+0x10/0x10 [ 613.473801][T11250] ? lockdep_init_map_type+0x5c/0x250 [ 613.473825][T11250] ? __init_waitqueue_head+0xca/0x150 [ 613.473860][T11250] usb_hub_create_port_device+0x3c6/0xe60 [ 613.473948][T11250] hub_probe.cold+0x2974/0x2ed9 [ 613.473996][T11250] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 613.474025][T11250] ? __pfx_hub_probe+0x10/0x10 [ 613.474094][T11250] ? debug_mutex_add_waiter+0x30/0x200 [ 613.474125][T11250] ? __pfx___closure_sync_timeout+0x10/0x10 [ 613.474180][T11250] ? find_held_lock+0x2b/0x80 [ 613.474214][T11250] ? mark_held_locks+0x40/0x70 [ 613.474254][T11250] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 613.474291][T11250] usb_probe_interface+0x303/0x8f0 [ 613.474352][T11250] ? __pfx_usb_probe_interface+0x10/0x10 [ 613.474394][T11250] really_probe+0x241/0xa60 [ 613.474456][T11250] __driver_probe_device+0x20e/0x450 [ 613.474492][T11250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 613.474531][T11250] driver_probe_device+0x4a/0x140 [ 613.474568][T11250] __device_attach_driver+0x1df/0x320 [ 613.474607][T11250] ? __pfx___device_attach_driver+0x10/0x10 [ 613.474643][T11250] bus_for_each_drv+0x159/0x1e0 [ 613.474673][T11250] ? __pfx_bus_for_each_drv+0x10/0x10 [ 613.474703][T11250] ? lockdep_hardirqs_on+0x78/0x100 [ 613.474738][T11250] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 613.474777][T11250] __device_attach+0x1e4/0x4d0 [ 613.474814][T11250] ? __pfx___device_attach+0x10/0x10 [ 613.474851][T11250] ? do_raw_spin_unlock+0x145/0x1e0 [ 613.474885][T11250] device_initial_probe+0xaf/0xd0 [ 613.474923][T11250] bus_probe_device+0x64/0x160 [ 613.474958][T11250] device_add+0x121d/0x1970 [ 613.474983][T11250] ? __pfx_device_add+0x10/0x10 [ 613.475005][T11250] ? mark_held_locks+0x40/0x70 [ 613.475045][T11250] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 613.475085][T11250] usb_set_configuration+0xd97/0x1c60 [ 613.475139][T11250] bConfigurationValue_store+0x103/0x180 [ 613.475177][T11250] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 613.475216][T11250] ? find_held_lock+0x2b/0x80 [ 613.475246][T11250] ? sysfs_file_kobj+0xe4/0x290 [ 613.475282][T11250] ? sysfs_file_kobj+0xe4/0x290 [ 613.475320][T11250] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 613.475357][T11250] dev_attr_store+0x58/0x80 [ 613.475422][T11250] ? __pfx_dev_attr_store+0x10/0x10 [ 613.475462][T11250] sysfs_kf_write+0xf2/0x150 [ 613.475501][T11250] kernfs_fop_write_iter+0x3e0/0x5f0 [ 613.475532][T11250] ? __pfx_sysfs_kf_write+0x10/0x10 [ 613.475571][T11250] iter_file_splice_write+0x830/0x10b0 [ 613.475614][T11250] ? copy_splice_read+0x739/0xbb0 [ 613.475639][T11250] ? __pfx_iter_file_splice_write+0x10/0x10 [ 613.475673][T11250] ? __pfx_copy_splice_read+0x10/0x10 [ 613.475716][T11250] ? __pfx_iter_file_splice_write+0x10/0x10 [ 613.475746][T11250] direct_splice_actor+0x192/0x690 [ 613.475776][T11250] splice_direct_to_actor+0x345/0xa30 [ 613.475806][T11250] ? __pfx_direct_splice_actor+0x10/0x10 [ 613.475838][T11250] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 613.475875][T11250] do_splice_direct+0x174/0x240 [ 613.475903][T11250] ? __pfx_do_splice_direct+0x10/0x10 [ 613.475931][T11250] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 613.475962][T11250] ? rw_verify_area+0xce/0x6d0 [ 613.476002][T11250] do_sendfile+0xadc/0xe20 [ 613.476048][T11250] ? __pfx_do_sendfile+0x10/0x10 [ 613.476093][T11250] ? __x64_sys_futex+0x34f/0x4d0 [ 613.476120][T11250] ? __x64_sys_futex+0x358/0x4d0 [ 613.476152][T11250] __x64_sys_sendfile64+0x1d8/0x220 [ 613.476183][T11250] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 613.476223][T11250] do_syscall_64+0x115/0x840 [ 613.476258][T11250] ? clear_bhb_loop+0x70/0xc0 [ 613.476288][T11250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.476315][T11250] RIP: 0033:0x7fba12d9e0d9 [ 613.476336][T11250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.476359][T11250] RSP: 002b:00007fba13d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 613.476382][T11250] RAX: ffffffffffffffda RBX: 00007fba13025fa0 RCX: 00007fba12d9e0d9 [ 613.476406][T11250] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 613.476421][T11250] RBP: 00007fba12e35024 R08: 0000000000000000 R09: 0000000000000000 [ 613.476435][T11250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 613.476450][T11250] R13: 00007fba13026038 R14: 00007fba13025fa0 R15: 00007ffe34877f58 [ 613.476482][T11250] [ 617.081718][T11250] hub 1-0:1.0: couldn't create port1 device. [ 617.141958][T11250] hub 1-0:1.0: config failed, out of memory (err -12) [ 619.031127][T11293] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 619.119865][T11293] nbd: error processing sock list [ 624.587521][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.606185][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.891927][T11415] NFSD: Failed to start, no listeners configured. [ 640.994720][T11500] i2c i2c-0: delete_device: Extra parameters [ 650.123585][T11582] sd 0:0:1:0: PR command failed: 1026 [ 650.197844][T11582] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 650.320178][T11582] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 653.230840][T11610] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 653.346255][T11610] nbd: error processing sock list [ 657.736958][T11651] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 657.824324][T11651] nbd: error processing sock list [ 658.169190][T11656] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 658.231767][T11656] nbd: error processing sock list [ 659.564568][T11669] i2c i2c-0: delete_device: Extra parameters [ 664.781345][T11727] i2c i2c-0: delete_device: Extra parameters [ 672.212136][T11746] Process accounting resumed [ 673.915099][T11798] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 674.089102][T11798] nbd: error processing sock list [ 686.029515][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.040730][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 694.451275][T11947] FAULT_INJECTION: forcing a failure. [ 694.451275][T11947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.654124][T11947] CPU: 0 UID: 0 PID: 11947 Comm: syz.2.874 Not tainted syzkaller #0 PREEMPT(full) [ 694.654155][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 694.654169][T11947] Call Trace: [ 694.654177][T11947] [ 694.654185][T11947] dump_stack_lvl+0x100/0x190 [ 694.654218][T11947] should_fail_ex.cold+0x5/0xa [ 694.654245][T11947] _copy_to_user+0x32/0xd0 [ 694.654286][T11947] keyctl_capabilities+0x5a/0x160 [ 694.654377][T11947] __do_sys_keyctl+0x427/0x5a0 [ 694.654404][T11947] do_syscall_64+0x115/0x840 [ 694.654440][T11947] ? clear_bhb_loop+0x70/0xc0 [ 694.654468][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.654492][T11947] RIP: 0033:0x7f4bbc59e0d9 [ 694.654511][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.654532][T11947] RSP: 002b:00007f4bbd47b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 694.654554][T11947] RAX: ffffffffffffffda RBX: 00007f4bbc826360 RCX: 00007f4bbc59e0d9 [ 694.654568][T11947] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000000001f [ 694.654582][T11947] RBP: 00007f4bbd47b090 R08: 00000000000003ff R09: 0000000000000000 [ 694.654596][T11947] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 694.654609][T11947] R13: 00007f4bbc8263f8 R14: 00007f4bbc826360 R15: 00007fffb6a8eaf8 [ 694.654638][T11947] [ 696.263109][T11962] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 696.371288][T11962] nbd: error processing sock list [ 702.193419][T12020] i2c i2c-0: delete_device: Extra parameters [ 705.259294][T12000] Process accounting paused [ 713.574913][T12102] FAULT_INJECTION: forcing a failure. [ 713.574913][T12102] name failslab, interval 1, probability 0, space 0, times 0 [ 713.649303][T12102] CPU: 0 UID: 0 PID: 12102 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(full) [ 713.649335][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.649349][T12102] Call Trace: [ 713.649356][T12102] [ 713.649364][T12102] dump_stack_lvl+0x100/0x190 [ 713.649400][T12102] should_fail_ex.cold+0x5/0xa [ 713.649426][T12102] should_failslab+0xc2/0x120 [ 713.649461][T12102] __kmalloc_noprof+0xfc/0x820 [ 713.649498][T12102] ? trace_kmem_cache_alloc+0xdd/0x100 [ 713.649533][T12102] ? lsm_blob_alloc+0x68/0x90 [ 713.649636][T12102] lsm_blob_alloc+0x68/0x90 [ 713.649673][T12102] security_sk_alloc+0x2d/0x290 [ 713.649718][T12102] sk_prot_alloc+0x1d1/0x2a0 [ 713.649770][T12102] sk_alloc+0x36/0xe80 [ 713.649803][T12102] tipc_sk_create+0xfc/0x2400 [ 713.649877][T12102] ? __sock_create+0x2f3/0x860 [ 713.649919][T12102] ? __sock_create+0x2f3/0x860 [ 713.649947][T12102] __sock_create+0x339/0x860 [ 713.649977][T12102] __sys_socketpair+0x1e4/0x5b0 [ 713.650006][T12102] ? __pfx___sys_socketpair+0x10/0x10 [ 713.650037][T12102] ? __pfx_ksys_write+0x10/0x10 [ 713.650067][T12102] __x64_sys_socketpair+0x96/0x100 [ 713.650094][T12102] ? lockdep_hardirqs_on+0x78/0x100 [ 713.650127][T12102] do_syscall_64+0x115/0x840 [ 713.650159][T12102] ? clear_bhb_loop+0x70/0xc0 [ 713.650187][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.650211][T12102] RIP: 0033:0x7f1a1ab9e0d9 [ 713.650229][T12102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.650251][T12102] RSP: 002b:00007f1a1ba4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 713.650273][T12102] RAX: ffffffffffffffda RBX: 00007f1a1ae25fa0 RCX: 00007f1a1ab9e0d9 [ 713.650288][T12102] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 713.650301][T12102] RBP: 00007f1a1ba4a090 R08: 0000000000000000 R09: 0000000000000000 [ 713.650315][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.650328][T12102] R13: 00007f1a1ae26038 R14: 00007f1a1ae25fa0 R15: 00007ffc60a5bd08 [ 713.650357][T12102] [ 714.829048][T12116] i2c i2c-0: delete_device: Extra parameters [ 718.444717][T12150] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 718.540624][T12150] nbd: error processing sock list [ 719.673386][T12163] i2c i2c-0: delete_device: Extra parameters [ 722.363094][T12171] FAULT_INJECTION: forcing a failure. [ 722.363094][T12171] name failslab, interval 1, probability 0, space 0, times 0 [ 722.413986][T12171] CPU: 0 UID: 0 PID: 12171 Comm: syz.3.911 Not tainted syzkaller #0 PREEMPT(full) [ 722.414021][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.414036][T12171] Call Trace: [ 722.414045][T12171] [ 722.414053][T12171] dump_stack_lvl+0x100/0x190 [ 722.414087][T12171] should_fail_ex.cold+0x5/0xa [ 722.414129][T12171] should_failslab+0xc2/0x120 [ 722.414166][T12171] __kmalloc_cache_noprof+0x91/0x6c0 [ 722.414194][T12171] ? blk_alloc_queue_stats+0x3f/0x110 [ 722.414302][T12171] blk_alloc_queue_stats+0x3f/0x110 [ 722.414337][T12171] blk_alloc_queue+0xda/0x790 [ 722.414397][T12171] blk_mq_alloc_queue+0x174/0x290 [ 722.414424][T12171] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 722.414469][T12171] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 722.414505][T12171] __blk_mq_alloc_disk+0x29/0x120 [ 722.414534][T12171] loop_add+0x498/0xb60 [ 722.414619][T12171] ? __pfx_loop_add+0x10/0x10 [ 722.414665][T12171] ? find_held_lock+0x2b/0x80 [ 722.414698][T12171] ? __fget_files+0x215/0x3d0 [ 722.414724][T12171] loop_control_ioctl+0xae/0x620 [ 722.414756][T12171] ? __pfx_loop_control_ioctl+0x10/0x10 [ 722.414791][T12171] ? __pfx_loop_control_ioctl+0x10/0x10 [ 722.414823][T12171] __x64_sys_ioctl+0x18e/0x210 [ 722.414862][T12171] do_syscall_64+0x115/0x840 [ 722.414897][T12171] ? clear_bhb_loop+0x70/0xc0 [ 722.414930][T12171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.414956][T12171] RIP: 0033:0x7f1a1ab9e0d9 [ 722.414976][T12171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.414999][T12171] RSP: 002b:00007f1a1ba29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.415022][T12171] RAX: ffffffffffffffda RBX: 00007f1a1ae26090 RCX: 00007f1a1ab9e0d9 [ 722.415038][T12171] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 722.415053][T12171] RBP: 00007f1a1ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 722.415068][T12171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.415082][T12171] R13: 00007f1a1ae26128 R14: 00007f1a1ae26090 R15: 00007ffc60a5bd08 [ 722.415119][T12171] [ 729.016795][T12256] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 729.186148][T12256] nbd: error processing sock list [ 731.233871][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 736.668087][T12340] can: request_module (can-proto-4) failed. [ 736.969227][T12308] Process accounting resumed [ 742.582431][T12417] FAULT_INJECTION: forcing a failure. [ 742.582431][T12417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.648012][T12417] CPU: 0 UID: 0 PID: 12417 Comm: syz.2.951 Not tainted syzkaller #0 PREEMPT(full) [ 742.648045][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.648065][T12417] Call Trace: [ 742.648073][T12417] [ 742.648081][T12417] dump_stack_lvl+0x100/0x190 [ 742.648113][T12417] should_fail_ex.cold+0x5/0xa [ 742.648139][T12417] _copy_to_user+0x32/0xd0 [ 742.648182][T12417] simple_read_from_buffer+0xcb/0x170 [ 742.648224][T12417] proc_fail_nth_read+0x1af/0x230 [ 742.648323][T12417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.648360][T12417] ? rw_verify_area+0xce/0x6d0 [ 742.648395][T12417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.648429][T12417] vfs_read+0x1e4/0xb40 [ 742.648454][T12417] ? __pfx_vfs_read+0x10/0x10 [ 742.648475][T12417] ? __fget_files+0x215/0x3d0 [ 742.648503][T12417] ? __fget_files+0x21f/0x3d0 [ 742.648533][T12417] ksys_read+0x12a/0x250 [ 742.648554][T12417] ? __pfx_ksys_read+0x10/0x10 [ 742.648584][T12417] do_syscall_64+0x115/0x840 [ 742.648617][T12417] ? clear_bhb_loop+0x70/0xc0 [ 742.648646][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.648674][T12417] RIP: 0033:0x7f4bbc55e90e [ 742.648695][T12417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 742.648717][T12417] RSP: 002b:00007f4bbd4fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 742.648738][T12417] RAX: ffffffffffffffda RBX: 00007f4bbd4ff6c0 RCX: 00007f4bbc55e90e [ 742.648753][T12417] RDX: 000000000000000f RSI: 00007f4bbd4ff0a0 RDI: 0000000000000004 [ 742.648767][T12417] RBP: 00007f4bbd4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 742.648780][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.648793][T12417] R13: 00007f4bbc826038 R14: 00007f4bbc825fa0 R15: 00007fffb6a8eaf8 [ 742.648823][T12417] [ 742.972761][T12421] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 742.980720][T12421] nbd: error processing sock list [ 746.092887][T12276] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3 [ 746.097885][T12459] program syz.2.955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.468911][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.480916][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.269791][T12584] i2c i2c-0: delete_device: Extra parameters [ 763.054473][T12607] i2c i2c-0: delete_device: Extra parameters [ 763.277826][T12614] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 763.359554][T12614] nbd: error processing sock list [ 766.672745][T12627] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 766.870029][T12627] File: /dev/nullb0 PID: 12627 Comm: syz.3.980 [ 767.893384][T12638] Process accounting paused [ 769.475684][T12653] FAULT_INJECTION: forcing a failure. [ 769.475684][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 769.761715][T12653] CPU: 0 UID: 0 PID: 12653 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) [ 769.761747][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.761761][T12653] Call Trace: [ 769.761768][T12653] [ 769.761776][T12653] dump_stack_lvl+0x100/0x190 [ 769.761810][T12653] should_fail_ex.cold+0x5/0xa [ 769.761837][T12653] should_failslab+0xc2/0x120 [ 769.761872][T12653] __kmalloc_cache_noprof+0x91/0x6c0 [ 769.761897][T12653] ? net_alloc_generic+0x1e/0x70 [ 769.761935][T12653] ? copy_net_ns+0x135/0x7c0 [ 769.761961][T12653] copy_net_ns+0x135/0x7c0 [ 769.761980][T12653] ? copy_cgroup_ns+0x71/0x970 [ 769.762006][T12653] create_new_namespaces+0x3ea/0xac0 [ 769.762039][T12653] unshare_nsproxy_namespaces+0xf2/0x220 [ 769.762068][T12653] ksys_unshare+0x438/0xab0 [ 769.762101][T12653] ? __pfx_ksys_unshare+0x10/0x10 [ 769.762142][T12653] ? ksys_write+0x1ac/0x250 [ 769.762173][T12653] __x64_sys_unshare+0x31/0x40 [ 769.762203][T12653] do_syscall_64+0x115/0x840 [ 769.762237][T12653] ? clear_bhb_loop+0x70/0xc0 [ 769.762266][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.762289][T12653] RIP: 0033:0x7fba12d9e0d9 [ 769.762308][T12653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.762330][T12653] RSP: 002b:00007fba13d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 769.762351][T12653] RAX: ffffffffffffffda RBX: 00007fba13025fa0 RCX: 00007fba12d9e0d9 [ 769.762366][T12653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 769.762380][T12653] RBP: 00007fba13d16090 R08: 0000000000000000 R09: 0000000000000000 [ 769.762393][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.762406][T12653] R13: 00007fba13026038 R14: 00007fba13025fa0 R15: 00007ffe34877f58 [ 769.762435][T12653] [ 775.671620][T12689] hub 1-0:1.0: USB hub found [ 775.705079][T12689] hub 1-0:1.0: 1 port detected [ 775.801800][T12689] FAULT_INJECTION: forcing a failure. [ 775.801800][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 775.933364][T12689] CPU: 0 UID: 0 PID: 12689 Comm: syz.3.987 Not tainted syzkaller #0 PREEMPT(full) [ 775.933398][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.933413][T12689] Call Trace: [ 775.933421][T12689] [ 775.933430][T12689] dump_stack_lvl+0x100/0x190 [ 775.933465][T12689] should_fail_ex.cold+0x5/0xa [ 775.933492][T12689] should_failslab+0xc2/0x120 [ 775.933529][T12689] kmem_cache_alloc_noprof+0x91/0x6a0 [ 775.933563][T12689] ? __kernfs_new_node+0xd2/0xa10 [ 775.933596][T12689] __kernfs_new_node+0xd2/0xa10 [ 775.933634][T12689] ? __pfx___kernfs_new_node+0x10/0x10 [ 775.933669][T12689] ? find_held_lock+0x2b/0x80 [ 775.933701][T12689] ? kernfs_root+0xee/0x2a0 [ 775.933723][T12689] ? kernfs_root+0xee/0x2a0 [ 775.933752][T12689] kernfs_new_node+0x117/0x150 [ 775.933784][T12689] __kernfs_create_file+0x53/0x350 [ 775.933822][T12689] sysfs_add_file_mode_ns+0x207/0x3c0 [ 775.933869][T12689] internal_create_group+0x593/0xfb0 [ 775.933962][T12689] ? sysfs_create_file_ns+0x14c/0x1e0 [ 775.934001][T12689] ? __pfx_internal_create_group+0x10/0x10 [ 775.934030][T12689] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 775.934074][T12689] ? __pfx_usb_acpi_find_companion+0x10/0x10 [ 775.934129][T12689] ? acpi_device_notify+0xcf/0x500 [ 775.934224][T12689] ? lockdep_init_map_type+0x5c/0x250 [ 775.934253][T12689] internal_create_groups+0x9d/0x150 [ 775.934281][T12689] device_add+0x7c8/0x1970 [ 775.934309][T12689] ? __pfx_device_add+0x10/0x10 [ 775.934331][T12689] ? lockdep_init_map_type+0x5c/0x250 [ 775.934356][T12689] ? __init_waitqueue_head+0xca/0x150 [ 775.934391][T12689] usb_hub_create_port_device+0x3c6/0xe60 [ 775.934437][T12689] hub_probe.cold+0x2974/0x2ed9 [ 775.934475][T12689] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 775.934504][T12689] ? __pfx_hub_probe+0x10/0x10 [ 775.934539][T12689] ? debug_mutex_add_waiter+0x30/0x200 [ 775.934570][T12689] ? __pfx___closure_sync_timeout+0x10/0x10 [ 775.934601][T12689] ? find_held_lock+0x2b/0x80 [ 775.934636][T12689] ? mark_held_locks+0x40/0x70 [ 775.934675][T12689] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 775.934711][T12689] usb_probe_interface+0x303/0x8f0 [ 775.934758][T12689] ? __pfx_usb_probe_interface+0x10/0x10 [ 775.934800][T12689] really_probe+0x241/0xa60 [ 775.934839][T12689] __driver_probe_device+0x20e/0x450 [ 775.934874][T12689] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.934920][T12689] driver_probe_device+0x4a/0x140 [ 775.934957][T12689] __device_attach_driver+0x1df/0x320 [ 775.935004][T12689] ? __pfx___device_attach_driver+0x10/0x10 [ 775.935053][T12689] bus_for_each_drv+0x159/0x1e0 [ 775.935082][T12689] ? __pfx_bus_for_each_drv+0x10/0x10 [ 775.935113][T12689] ? lockdep_hardirqs_on+0x78/0x100 [ 775.935149][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 775.935185][T12689] __device_attach+0x1e4/0x4d0 [ 775.935221][T12689] ? __pfx___device_attach+0x10/0x10 [ 775.935259][T12689] ? do_raw_spin_unlock+0x145/0x1e0 [ 775.935293][T12689] device_initial_probe+0xaf/0xd0 [ 775.935330][T12689] bus_probe_device+0x64/0x160 [ 775.935364][T12689] device_add+0x121d/0x1970 [ 775.935390][T12689] ? __pfx_device_add+0x10/0x10 [ 775.935412][T12689] ? mark_held_locks+0x40/0x70 [ 775.935451][T12689] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 775.935491][T12689] usb_set_configuration+0xd97/0x1c60 [ 775.935546][T12689] bConfigurationValue_store+0x103/0x180 [ 775.935584][T12689] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 775.935622][T12689] ? find_held_lock+0x2b/0x80 [ 775.935653][T12689] ? sysfs_file_kobj+0xe4/0x290 [ 775.935688][T12689] ? sysfs_file_kobj+0xe4/0x290 [ 775.935725][T12689] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 775.935762][T12689] dev_attr_store+0x58/0x80 [ 775.935801][T12689] ? __pfx_dev_attr_store+0x10/0x10 [ 775.935840][T12689] sysfs_kf_write+0xf2/0x150 [ 775.935879][T12689] kernfs_fop_write_iter+0x3e0/0x5f0 [ 775.935910][T12689] ? __pfx_sysfs_kf_write+0x10/0x10 [ 775.935949][T12689] iter_file_splice_write+0x830/0x10b0 [ 775.935991][T12689] ? copy_splice_read+0x739/0xbb0 [ 775.936017][T12689] ? __pfx_iter_file_splice_write+0x10/0x10 [ 775.936056][T12689] ? __pfx_copy_splice_read+0x10/0x10 [ 775.936099][T12689] ? __pfx_iter_file_splice_write+0x10/0x10 [ 775.936130][T12689] direct_splice_actor+0x192/0x690 [ 775.936160][T12689] splice_direct_to_actor+0x345/0xa30 [ 775.936190][T12689] ? __pfx_direct_splice_actor+0x10/0x10 [ 775.936222][T12689] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 775.936259][T12689] do_splice_direct+0x174/0x240 [ 775.936288][T12689] ? __pfx_do_splice_direct+0x10/0x10 [ 775.936317][T12689] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 775.936348][T12689] ? rw_verify_area+0xce/0x6d0 [ 775.936388][T12689] do_sendfile+0xadc/0xe20 [ 775.936434][T12689] ? __pfx_do_sendfile+0x10/0x10 [ 775.936478][T12689] ? __x64_sys_futex+0x34f/0x4d0 [ 775.936506][T12689] ? __x64_sys_futex+0x358/0x4d0 [ 775.936538][T12689] __x64_sys_sendfile64+0x1d8/0x220 [ 775.936569][T12689] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 775.936608][T12689] do_syscall_64+0x115/0x840 [ 775.936643][T12689] ? clear_bhb_loop+0x70/0xc0 [ 775.936673][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.936699][T12689] RIP: 0033:0x7f1a1ab9e0d9 [ 775.936721][T12689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.936746][T12689] RSP: 002b:00007f1a1ba4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 775.936769][T12689] RAX: ffffffffffffffda RBX: 00007f1a1ae25fa0 RCX: 00007f1a1ab9e0d9 [ 775.936786][T12689] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 775.936801][T12689] RBP: 00007f1a1ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 775.936815][T12689] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 775.936830][T12689] R13: 00007f1a1ae26038 R14: 00007f1a1ae25fa0 R15: 00007ffc60a5bd08 [ 775.936861][T12689] [ 777.581331][T12689] hub 1-0:1.0: couldn't create port1 device. [ 777.613153][T12689] hub 1-0:1.0: config failed, out of memory (err -12) [ 777.901253][T12710] i2c i2c-0: delete_device: Extra parameters [ 778.452755][T12730] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 778.574000][T12730] nbd: error processing sock list [ 778.970775][T12724] netlink: 'syz.1.990': attribute type 9 has an invalid length. [ 784.570210][T12797] i2c i2c-0: delete_device: Extra parameters [ 787.503225][T12817] i2c i2c-0: delete_device: Extra parameters [ 791.755037][T12861] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 791.845702][T12861] nbd: error processing sock list [ 794.830703][T12888] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 797.184103][T12909] i2c i2c-0: delete_device: Extra parameters [ 797.325455][T12907] futex_wake_op: syz.3.1019 tries to shift op by -2048; fix this program [ 799.656984][T12905] Process accounting resumed [ 799.670159][ T30] audit: type=1800 audit(4294967815.680:5): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1023" name="discovery_nqn" dev="configfs" ino=78786 res=0 errno=0 [ 799.751881][T12929] FAULT_INJECTION: forcing a failure. [ 799.751881][T12929] name fail_futex, interval 1, probability 0, space 0, times 0 [ 799.910807][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT(full) [ 799.910841][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.910856][T12929] Call Trace: [ 799.910863][T12929] [ 799.910872][T12929] dump_stack_lvl+0x100/0x190 [ 799.910906][T12929] should_fail_ex.cold+0x5/0xa [ 799.910940][T12929] get_futex_key+0x1d2/0x14f0 [ 799.910970][T12929] ? __pfx_get_futex_key+0x10/0x10 [ 799.910995][T12929] ? rcu_is_watching+0x12/0xc0 [ 799.911027][T12929] ? vfs_writev+0x1d5/0xdd0 [ 799.911064][T12929] ? kfree+0x1e5/0x6c0 [ 799.911094][T12929] futex_wake+0xf4/0x5e0 [ 799.911125][T12929] ? rcu_is_watching+0x12/0xc0 [ 799.911155][T12929] ? trace_contention_end+0x126/0x160 [ 799.911180][T12929] ? __pfx_futex_wake+0x10/0x10 [ 799.911217][T12929] ? find_held_lock+0x2b/0x80 [ 799.911248][T12929] ? do_writev+0x214/0x340 [ 799.911286][T12929] ? do_writev+0x214/0x340 [ 799.911328][T12929] do_futex+0x2b2/0x440 [ 799.911357][T12929] ? __pfx_do_futex+0x10/0x10 [ 799.911384][T12929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 799.911424][T12929] ? __fget_files+0x21f/0x3d0 [ 799.911450][T12929] __x64_sys_futex+0x34f/0x4d0 [ 799.911482][T12929] ? __pfx___x64_sys_futex+0x10/0x10 [ 799.911512][T12929] ? __pfx_do_writev+0x10/0x10 [ 799.911559][T12929] do_syscall_64+0x115/0x840 [ 799.911593][T12929] ? clear_bhb_loop+0x70/0xc0 [ 799.911623][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.911648][T12929] RIP: 0033:0x7f63f3b9e0d9 [ 799.911668][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.911692][T12929] RSP: 002b:00007f63f498e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 799.911715][T12929] RAX: ffffffffffffffda RBX: 00007f63f3e26188 RCX: 00007f63f3b9e0d9 [ 799.911731][T12929] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f63f3e2618c [ 799.911746][T12929] RBP: 00007f63f3e26180 R08: 0000000000000001 R09: 0000000000000000 [ 799.911760][T12929] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 799.911774][T12929] R13: 00007f63f3e26218 R14: 00007ffcec34db90 R15: 00007ffcec34dc78 [ 799.911804][T12929] [ 800.501800][T12929] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x3389b [ 800.609195][T12929] memcg:ffff888032912600 [ 800.650699][T12929] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 800.746421][T12929] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 800.816220][T12929] raw: 000000000000001f 0000000000000000 00000001ffffffff ffff888032912600 [ 800.976949][T12929] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 801.209909][T12929] page_owner tracks the page as allocated [ 801.302524][T12929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12929, tgid 12926 (syz.1.1023), ts 800501761960, free_ts 800456131117 [ 801.567260][T12929] post_alloc_hook+0xfd/0x120 [ 801.628750][T12929] get_page_from_freelist+0xf48/0x3530 [ 801.716606][T12929] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 801.810446][T12929] alloc_pages_mpol+0x1fb/0x540 [ 801.875958][T12929] folio_alloc_noprof+0x22/0x250 [ 801.954099][T12929] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 802.046102][T12929] filemap_alloc_folio_noprof+0x5e/0x80 [ 802.122038][T12929] page_cache_ra_order+0x539/0xed0 [ 802.204322][T12929] filemap_fault+0x1943/0x3130 [ 802.281221][T12929] __do_fault+0x10b/0x440 [ 802.329479][T12929] do_fault+0xeb2/0x1750 [ 802.380883][T12929] __handle_mm_fault+0x187d/0x2a00 [ 802.419126][T12929] handle_mm_fault+0x37b/0xa30 [ 802.466609][T12929] __get_user_pages+0x1178/0x32a0 [ 802.514931][T12929] populate_vma_page_range+0x267/0x3f0 [ 802.554550][T12929] __mm_populate+0x107/0x3a0 [ 802.595898][T12929] page last free pid 12934 tgid 12926 stack trace: [ 802.645404][T12929] free_unref_folios+0xa44/0x1710 [ 802.685093][T12929] folios_put_refs+0x585/0xaa0 [ 802.722501][T12929] truncate_inode_pages_range+0x30c/0x1050 [ 802.743615][T12929] set_blocksize+0x2d1/0x460 [ 802.764840][T12929] blkdev_bszset+0x19b/0x240 [ 802.787825][T12929] blkdev_ioctl+0x513/0x6f0 [ 802.804577][T12929] __x64_sys_ioctl+0x18e/0x210 [ 802.822050][T12929] do_syscall_64+0x115/0x840 [ 802.841908][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.863712][T12929] ------------[ cut here ]------------ [ 802.869563][T12929] kernel BUG at mm/filemap.c:858! [ 802.922965][T12929] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 802.929265][T12929] CPU: 0 UID: 0 PID: 12929 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT(full) [ 802.938654][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.948828][T12929] RIP: 0010:__filemap_add_folio+0x1033/0x12f0 [ 802.954915][T12929] Code: 3a c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 d5 ee 12 00 90 0f 0b e8 ed 39 c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 be ee 12 00 90 <0f> 0b e8 d6 39 c2 ff 90 0f 0b 90 e9 76 fe ff ff e8 c8 39 c2 ff 90 [ 802.974542][T12929] RSP: 0018:ffffc900045873f8 EFLAGS: 00010246 [ 802.980628][T12929] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900104b3000 [ 802.988633][T12929] RDX: 0000000000080000 RSI: ffffffff825a8508 RDI: ffff888033fe61c4 [ 802.996635][T12929] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 803.004706][T12929] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 803.013043][T12929] R13: ffffea0000ce26c0 R14: 0000000000000000 R15: 1ffff920008b0eaa [ 803.021218][T12929] FS: 00007f63f498e6c0(0000) GS:ffff888123df3000(0000) knlGS:0000000000000000 [ 803.030168][T12929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.036765][T12929] CR2: 0000001b34a90ff8 CR3: 000000007cb1e000 CR4: 00000000003526f0 [ 803.044754][T12929] Call Trace: [ 803.048060][T12929] [ 803.051004][T12929] ? __pfx___filemap_add_folio+0x10/0x10 [ 803.056662][T12929] filemap_add_folio+0x1d3/0x630 [ 803.061617][T12929] ? __lock_acquire+0x49f/0x1a40 [ 803.066569][T12929] ? __pfx_filemap_add_folio+0x10/0x10 [ 803.072045][T12929] ? __pfx___css_rstat_updated+0x10/0x10 [ 803.077737][T12929] page_cache_ra_order+0x602/0xed0 [ 803.082888][T12929] filemap_fault+0x1943/0x3130 [ 803.087673][T12929] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 803.093508][T12929] ? __pfx_filemap_fault+0x10/0x10 [ 803.098639][T12929] ? blk_cgroup_congested+0x136/0x270 [ 803.104086][T12929] ? blk_cgroup_congested+0x136/0x270 [ 803.109483][T12929] ? __pfx_filemap_map_pages+0x10/0x10 [ 803.114957][T12929] __do_fault+0x10b/0x440 [ 803.119398][T12929] do_fault+0xeb2/0x1750 [ 803.123669][T12929] __handle_mm_fault+0x187d/0x2a00 [ 803.128803][T12929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 803.134194][T12929] ? __pfx___handle_mm_fault+0x10/0x10 [ 803.139758][T12929] ? pte_offset_map_lock+0x174/0x320 [ 803.145067][T12929] ? find_held_lock+0x2b/0x80 [ 803.149777][T12929] ? follow_page_pte+0x4d0/0x13f0 [ 803.155093][T12929] handle_mm_fault+0x37b/0xa30 [ 803.159885][T12929] __get_user_pages+0x1178/0x32a0 [ 803.165047][T12929] ? __pfx___get_user_pages+0x10/0x10 [ 803.170455][T12929] populate_vma_page_range+0x267/0x3f0 [ 803.175941][T12929] ? __pfx_populate_vma_page_range+0x10/0x10 [ 803.181973][T12929] ? __pfx_find_vma_intersection+0x10/0x10 [ 803.187808][T12929] ? do_mmap+0x93f/0x12f0 [ 803.192168][T12929] __mm_populate+0x107/0x3a0 [ 803.196793][T12929] ? __pfx___mm_populate+0x10/0x10 [ 803.202106][T12929] ? up_write+0x2e5/0x5c0 [ 803.206493][T12929] vm_mmap_pgoff+0x37f/0x470 [ 803.211157][T12929] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 803.216329][T12929] ? __fget_files+0x215/0x3d0 [ 803.221031][T12929] ? __fget_files+0x21f/0x3d0 [ 803.225755][T12929] ksys_mmap_pgoff+0x3cb/0x610 [ 803.230547][T12929] ? __x64_sys_futex+0x358/0x4d0 [ 803.235527][T12929] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 803.240853][T12929] ? xfd_validate_state+0x129/0x190 [ 803.246112][T12929] __x64_sys_mmap+0x125/0x190 [ 803.250834][T12929] do_syscall_64+0x115/0x840 [ 803.255538][T12929] ? clear_bhb_loop+0x70/0xc0 [ 803.260259][T12929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.266262][T12929] RIP: 0033:0x7f63f3b9e0d9 [ 803.270695][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.290504][T12929] RSP: 002b:00007f63f498e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 803.299205][T12929] RAX: ffffffffffffffda RBX: 00007f63f3e26180 RCX: 00007f63f3b9e0d9 [ 803.307194][T12929] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 803.315277][T12929] RBP: 00007f63f3c35024 R08: 0000000000000007 R09: 0000000000008000 [ 803.323273][T12929] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 803.331256][T12929] R13: 00007f63f3e26218 R14: 00007f63f3e26180 R15: 00007ffcec34dc78 [ 803.339250][T12929] [ 803.342312][T12929] Modules linked in: [ 803.347483][T12929] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 803.832466][T12929] RIP: 0010:__filemap_add_folio+0x1033/0x12f0 [ 803.888760][T12929] Code: 3a c2 ff 48 c7 c6 e0 89 dd 8b 4c 89 ef e8 d5 ee 12 00 90 0f 0b e8 ed 39 c2 ff 48 c7 c6 40 8a dd 8b 4c 89 ef e8 be ee 12 00 90 <0f> 0b e8 d6 39 c2 ff 90 0f 0b 90 e9 76 fe ff ff e8 c8 39 c2 ff 90 [ 803.985787][T12929] RSP: 0018:ffffc900045873f8 EFLAGS: 00010246 [ 804.014477][T12929] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900104b3000 [ 804.055158][T12929] RDX: 0000000000080000 RSI: ffffffff825a8508 RDI: ffff888033fe61c4 [ 804.070933][T12929] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 804.081158][T12929] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 804.098089][T12929] R13: ffffea0000ce26c0 R14: 0000000000000000 R15: 1ffff920008b0eaa [ 804.142354][T12929] FS: 00007f63f498e6c0(0000) GS:ffff888123df3000(0000) knlGS:0000000000000000 [ 804.180610][T12929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.215748][T12929] CR2: 0000557078b87ee8 CR3: 000000007cb1e000 CR4: 00000000003526f0 [ 804.259847][T12929] Kernel panic - not syncing: Fatal exception [ 804.266052][T12929] Kernel Offset: disabled [ 804.270415][T12929] Rebooting in 86400 seconds..