last executing test programs: 8m24.128623143s ago: executing program 0 (id=725): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) r0 = open(0x0, 0x261c2, 0x84) r1 = userfaultfd$auto(0x1) statx$auto(r1, 0x0, 0x1000, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000003380)={0xfffffffb, 0xb, 0x1, 0x7ff, 0x1, "eb6183a2c44a716ca16333e5d5d5351305a348104d4c2603478adc3fe84e9d879df7cbd09efda00b5ac99df1e1bbb3b8b5c55fcd284101dfb7554a5fbd869d2e", "0aa103434fc7dee45be80fe485a0977a1026393bf2eec447c39915b2aa33b88417240f775d9caf5bc2ce8df08cfcde40c156df5242859e388d35b287edc71aa0318a1964d2bc3e90fbb1535ca82b3e2d", "d34a080600e6ff1a59435c07000000b2ef3309cfb7fb0100000000000500", 0x0, 0x81}) (async, rerun: 32) r3 = socket(0xa, 0x2, 0x88) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, r1, @relative_id=0x107, 0xe600}, 0x4) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x2}, 0xc) 8m22.80531467s ago: executing program 0 (id=727): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto_PR_MCE_KILL(0x21, 0x10001, 0xa8a3, 0x0, 0xe) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101101, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101101, 0x0) splice$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x80000001) (async) splice$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x80000001) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x0, 0xd}, 0x0, 0x2) io_uring_setup$auto(0x52, 0x0) (async) io_uring_setup$auto(0x52, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, 0x0, 0x1a9842, 0x0) read$auto_proc_pid_set_timerslack_ns_operations_base(r3, &(0x7f00000002c0)=""/223, 0xdf) io_uring_setup$auto(0x166, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r7, 0x301, &(0x7f00000001c0)) (async) ioctl$auto_HDIO_GETGEO(r7, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x406d83, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 8m19.310225533s ago: executing program 0 (id=743): mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x7fffffffe000) madvise$auto(0x0, 0x7ff7ffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x0, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), r0) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x64, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd9d3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xdb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '[^.{^'}, @NBD_ATTR_INDEX={0x8, 0x1, 0xfffff000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa555fcd}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x814, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x134, 0x145, 0x0, 0x1, [@nested={0x12d, 0x59, 0x0, 0x1, [@typed={0x6e, 0x4b, 0x0, 0x0, @binary="f48f4a92b50e6871d62c208b9ce852614cf08b0b6f73793ee0c255c499e640612e30d7aead2e866ca34c9732c1f8f1b6101a7420238a43e9501503c4aada47bf4da4208fb88061fc29a6748e4373d69694ce5ff799a34be1c1282b3d7632430585a3bcf46ebe24ade6b0"}, @nested={0x4, 0x80}, @nested={0x4, 0x13f}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x4c}, @generic="d755dc88f156e8d8b911838f0d5c027510fbd8ecb996e04ad6af232ecd7fd19ec1b32dca348469c9a7a71525fac2e77c701d5832471321cdbb92c4631a11d632982b1392d846ae76428f01329b4cd2ade78a85d8c3d804a2140ecc1cd9210f6512fe94d6ab25ff20ed90a53bb861abc936cc58595dc00ebd01a3434d1267530ef4c1293670d4fe0904da4a55091c7a36e2c4f65bfc6d105937a86d9ef6", @nested={0x4, 0x63}, @nested={0x4, 0x125}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x5a, 0x2d, 0x0, 0x1, [@typed={0x5, 0xba, 0x0, 0x0, @binary="bd"}, @generic="8413af10d254681e30995dc4cf8ad2bb9a36cc53c3983376f60c211db6d5be4eb4fe0f0235e522b3dade27b90194b8efb1715a2702eb642af9a2335f7a6f5ee2888053f664199f79e42241a17c99"]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_IE_PROBE_RESP={0x64b, 0x7f, "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"}, @NL80211_ATTR_MESH_ID={0xe, 0x18, "3c6508da5622573e7fad"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x9}]}, 0x814}, 0x1, 0x0, 0x0, 0x880}, 0x20048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'bond_slave_1\x00', 0x0}) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r5, 0x6f2d, r5) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 8m18.230699764s ago: executing program 0 (id=747): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyz3\x00', 0x60141, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(&(0x7f0000000000)={r2, 0x100}, 0x2, &(0x7f0000000200)={0x8000, 0x982}, &(0x7f0000000180)={0x2e2}, 0x8) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r5, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x8e\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_0={0x1ff, 0x5, 0x26, 0x60, 0xfffffff7, r1, 0x7f, "3f8fc103a0928a1121bb575611e781a2", 0x0, r4, 0x1ff, 0x100, 0x1ff, 0x0, r5, r3}, 0xf) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000040), 0x55) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) 8m13.154322122s ago: executing program 0 (id=762): mmap$auto(0x1fffffffe000, 0x400005, 0x0, 0x3132, 0x9, 0x0) (async) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) (async) fsopen$auto(0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/rose9/statistics/collisions\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000ec0)=""/4096, 0x1000) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) io_uring_setup$auto(0x3, &(0x7f0000000140)={0x4a2, 0x0, 0x7, 0x9, 0x7fffffff, 0x0, r0, [0x8c, 0x0, 0x9], {0x3, 0x41, 0x5, 0x3, 0x7, 0x8, 0x2, 0x6aa9, 0xd6}, {0x57, 0x0, 0x6, 0xa, 0x1, 0xd8f7, 0xd, 0x800}}) (async) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)="a2969fa6884b81c0c624353bee7ae8b815c16b4e859249345025ea92581b59b728464d90f35b9a66bbd2c42e8f5ca4d89c6d1887ee3c947da7a8ef44a8191a3225c299c38e43dc10164977be115d4d2911b1439713a18102c68c6d10d1a3861d8f204647c9b5ea6c6959738e7d0115f9273a420129e9e1fcf720660ee7fc3d75c5a7c52869d9e896b299718bb38a41df9139df2fc2ce9066bab7a195941d28fb918fafe58d50da5498f156676db4d878756923b546e31c68b4fa1595746b1c1e8dba8545ec891be3d4a60e90b1a96f7bb477de7b53572253", 0xd8) 8m11.327620893s ago: executing program 0 (id=765): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r0, 0x4611, r0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/bonding/bond0\x00', 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x8600, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7f) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0xe988, 0x4, 0x17, 0x401, 0x4008000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty39\x00', 0x802, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x80085610, r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x100003, 0x2020009, 0x8001, 0xeb1, r5, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r4, &(0x7f0000000100)={0x0, 0x8}, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) pread64$auto(r1, &(0x7f0000000200)='/proc/scsi/sg/devices\x00', 0x100000001, 0xfd) 7m56.160618479s ago: executing program 32 (id=765): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r0, 0x4611, r0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/bonding/bond0\x00', 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x8600, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7f) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0xe988, 0x4, 0x17, 0x401, 0x4008000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty39\x00', 0x802, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x80085610, r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x100003, 0x2020009, 0x8001, 0xeb1, r5, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r4, &(0x7f0000000100)={0x0, 0x8}, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) pread64$auto(r1, &(0x7f0000000200)='/proc/scsi/sg/devices\x00', 0x100000001, 0xfd) 7m6.422349857s ago: executing program 1 (id=994): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x98, 0x81}, 0x9, 0x0, &(0x7f00000000c0)={0x3}, 0x8) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x7, r0, 0x200, 0x1001, 0x0, 0x10000f, 0xffffffffffffffff, 0x7, 0x5}, 0x6f4) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmmsg$auto(0x3, 0x0, 0x40, 0x100) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb0, 0x602, 0x300040000004) (async) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) mmap$auto(0xfffffffffffffffe, 0x400003, 0x2040000, 0x9b71, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) (async) socketpair$auto(0x1, 0xd, 0x9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r6) (async) r7 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) fcntl$auto(r7, 0x400, 0x1) (async) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async) open(&(0x7f0000000080)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x2, 0x8000, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x14f682, 0x0) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa0}, 0x4) 7m6.342040047s ago: executing program 1 (id=995): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_CEC_ADAP_G_CONNECTOR_INFO(0xffffffffffffffff, 0x8044610a, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000001) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000001) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x400, 0x0) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x400, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) setsockopt$auto(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x4) (async) setsockopt$auto(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x4) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x1906, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) sendfile$auto(r0, r3, 0x0, 0x2ee) (async) sendfile$auto(r0, r3, 0x0, 0x2ee) 7m6.187391961s ago: executing program 1 (id=997): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x9) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/sctp/cookie_hmac_alg\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x04\x00\x00\x00\xf1\xff\x00\xb6', 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) setregid$auto(0xffffffffffffffff, 0xfffe) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 7m4.910749847s ago: executing program 1 (id=1003): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r0, 0x2, r1, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) epoll_create$auto(0x4) (async) socket(0x2, 0x5, 0x0) (async) epoll_ctl$auto(r0, 0x2, r1, 0x0) (async) epoll_create$auto(0x3e) (async) epoll_ctl$auto(r2, 0x1, r0, 0x0) (async) 7m4.190277375s ago: executing program 1 (id=1004): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) r1 = socket(0xa, 0x801, 0x100) setsockopt$auto(r1, 0x6, 0x2, 0x0, 0xfb3) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x28800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x5, 0xeb1, r2, 0x0) 7m2.942149009s ago: executing program 1 (id=1010): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0xa1e925b398002481, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto_binder_fops_binder_internal(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x4010, r0, 0x5) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) unshare$auto(0x40000080) unshare$auto(0xb5) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x40400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyw5\x00', 0x507000, 0x0) semctl$auto(0x100, 0xfffffffffffffffa, 0x3, 0x8) move_pages$auto(0x0, 0x2000001001, 0x0, &(0x7f0000001140), 0x0, 0x2) setrlimit$auto(0x1000000007, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/xrun_debug\x00', 0x10401, 0x0) 6m47.883483531s ago: executing program 33 (id=1010): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0xa1e925b398002481, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto_binder_fops_binder_internal(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x4010, r0, 0x5) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) unshare$auto(0x40000080) unshare$auto(0xb5) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x40400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyw5\x00', 0x507000, 0x0) semctl$auto(0x100, 0xfffffffffffffffa, 0x3, 0x8) move_pages$auto(0x0, 0x2000001001, 0x0, &(0x7f0000001140), 0x0, 0x2) setrlimit$auto(0x1000000007, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/xrun_debug\x00', 0x10401, 0x0) 5.325920785s ago: executing program 3 (id=2606): ioctl$auto_SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0x1df, 0x19, r0, 0x7) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x81, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya9\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x7, 0x7fff, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 5.264066674s ago: executing program 3 (id=2607): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/ext4/sda1/extent_max_zeroout_kb\x00', 0x4929c1, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto_kernfs_file_fops_kernfs_internal(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xd5f) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd5100fbcbdf25030b000098a70000072e0180"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto_SO_NETNS_COOKIE(r3, 0x9, 0x47, &(0x7f0000000540)='nl80211\x00', &(0x7f0000000580)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = prctl$auto(0x203a, 0x0, 0x0, 0xff, 0x4) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r6, 0x0, 0x40000000f42c, 0x80002) r7 = io_uring_setup$auto(0x7, 0x0) epoll_ctl$auto(0x5, 0x1, r7, 0x0) sendmmsg$auto(r7, &(0x7f0000000500)={{&(0x7f00000001c0)="2627efef9a08d2afc78b379e019bc12bcab3047168ec06888ece20fdb330f6d1e117652281a84d9b9d1ca87535304c2a1468842f04ae3e2bee80609e62be2fec3c3230c946ccc7e0099d12eb9930f46cc49d019eb289c86d0d9a727d92507c11814873d0227dca745c1d4e0badad3f3cd8abf907a1903aeb2693838dbd362a2234", 0x6cd1, &(0x7f00000002c0)={&(0x7f0000000380)="cfd1cd519653a074f63519f5b9daf4eb0e820b8885fe8df0dda60b761a99605e14347207d2d8bb8d1bb0b1f2a9a01f77620f41f76214078a0495e7befd7bb4e5331cca898cea750fb71442", 0x4}, 0x13f1, &(0x7f0000000400)="3b9a22c8859f1ed29b3562643fb676719585c0bf6b23b491943ae086e4f8f0043678df4695673136da204287204f836029ee56edd969d7b24db35ccf66101f6d8623a7c10e1ac79a95b4c489d367e97f6d4581b8e471c18a87e015fb8b775b2f020b7106c89837697b509f0a10f3ff249a1caf224ff07e82b6111e29074a6421507628e31631fcef425df5b8ff04a34982db37b86a6757850787ee922a535d6128adf75fb986c03e247b72d4acaa550fefef1cf9dbc28d60cc90d34c5079ad78d5944cbf38900d037658f7efb69d9387910a03b878df1b5024b1c697e2284668d29e", 0xd, 0x7}, 0x10}, 0x5, 0xfff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_BTRFS_IOC_SEND_32(r4, 0x40449426, &(0x7f00000005c0)={@inferred=r5, 0x4, 0x3, 0xe0, 0x7fff, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) poll$auto(0x0, 0x7f, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r8 = socket(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf251c08000014000400bd"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0) 5.263179828s ago: executing program 5 (id=2616): ioctl$auto_SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0x1df, 0x19, r0, 0x7) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x81, 0x0, 0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) socketpair$auto(0x20004, 0x7, 0x7fff, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) 5.09599071s ago: executing program 5 (id=2608): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000480)={{0xfffffffffffffffa, 0xff}, {0x1, 0x3}}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x9, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) 4.538055581s ago: executing program 4 (id=2612): socket(0x15, 0x3, 0x3) (async) socket(0x15, 0x3, 0x3) socket(0xf, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x193000, 0x0) socket(0xa, 0x1, 0x100) (async) r0 = socket(0xa, 0x1, 0x100) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/lru_gen_full\x00', 0x8001, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd7, 0x400000000000948b, 0x200000, 0x3, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) (async) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000180)="4d000000c19906bc4ed3c89946f049a8bb8bbf8b44ae5a5f02f3502fc5cc3655ada1f6e6e9e320fb280928bbfd1e1ff9e69c8e9eb64e67aad0020b95220712e094e581065d6370bc22be7fe6e9", 0x4d) r4 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) poll$auto(&(0x7f0000000280)={r4, 0xf06d, 0x4}, 0x80, 0x5) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = inotify_init1$auto(0x401) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0xffffffffffffffff, 0xab04, r2) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000380)={0x8000, 0x10, 0xec, @state_change={0x7, 0x5, 0x5}}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4044820) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf3a04000000050011002e"], 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4044820) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) (async) r8 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r8, 0x0, 0x2) (async) lseek$auto(r8, 0x0, 0x2) 3.482232949s ago: executing program 4 (id=2615): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x5, &(0x7f00000005c0)={{0xfffffffffffff001, 0x8}, {0x5, 0x7}, 0x7fffffffffffffff, 0x10000, 0x5, 0x2, 0xc00000000, 0x3, 0xb9, 0x9, 0x6, 0xc, 0x0, 0x6, 0xf4, 0x3}) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480), 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x40}, @NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x90, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_SE_APDU={0x74, 0x19, "3d68f56930dfec1e0c9ee2d4ec5cdec5a6617f08331f1e41250fe48416dd92cea0221dc8da3d9efe89fd9d72adf19e0e892f0903c80088663c1275a54ef729132cb8005fda646285b305ef19246d6980ac71aad2e89b11409d9c12c63d7f8f32c7aef96670418e95dd66e8912e6a6af1"}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x41001) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) inotify_init1$auto(0x4) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0x4004af07, &(0x7f00000001c0)=r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) r6 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r6, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/first_error_time\x00', 0xe80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r10, &(0x7f0000001280)=""/4124, 0x101c) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 3.389007655s ago: executing program 5 (id=2617): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x2b, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) (async) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) (async) r1 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r1, 0x29, 0x42, 0x0, 0x0) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/valid_links\x00', 0x88000, 0x0) read$auto(r2, &(0x7f0000001200)='\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) (async) readv$auto(0x3, &(0x7f0000000100)={0x0, 0x7ffffffff001}, 0x4000000000000040) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000000)=""/91, 0x5b) 2.955505398s ago: executing program 3 (id=2619): ioctl$auto_SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0x1df, 0x19, r0, 0x7) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x81, 0x0, 0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) socketpair$auto(0x20004, 0x7, 0x7fff, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) 2.804038046s ago: executing program 5 (id=2620): socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x261c2, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x2, 0x80002, 0x73) unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) pidfd_open$auto(0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x6, 0x1]}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.778949362s ago: executing program 2 (id=2628): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/bus/usb/drivers/uss720/unbind\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) bpf$auto_BPF_PROG_BIND_MAP(0x23, 0x0, 0xe) madvise$auto(0x0, 0x200007, 0x19) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) capset$auto(&(0x7f0000000000)={0x7f, 0xffffffffffffffff}, &(0x7f0000000200)={0xd2d, 0x7, 0x2}) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/mnt\x00') mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x4901, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0x402000a, 0xdf, 0xeb1, 0x401, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.777429123s ago: executing program 3 (id=2621): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) writev$auto(r0, 0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103280, 0x0) r1 = prctl$auto(0x400000a3, 0xa, 0x0, 0x2000000000000, 0x2) mmap$auto(0x0, 0x100, 0xdf, 0x4000eb3, 0x401, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/reboot/type\x00', 0x180102, 0x0) mmap$auto(0x0, 0x1, 0x20000000007, 0x50, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) getrandom$auto(0x0, 0x6000000, 0x3) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x149001, 0x0) socket(0x2b, 0x4, 0x1) writev$auto(r2, &(0x7f0000000200)={0x0, 0x5}, 0x9) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x2005, 0x4, 0x9, 0x7, 0x5, 0x6, 0x5, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x1, 0x3, 0x22000, 0x203, 0x9, 0x800084, 0x0, 0x4, 0x100, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1000000007, 0x6, 0x3, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x10000, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x236a7a98, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x0, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4000000000000, 0x0, 0x2], "f5c3b7bb6ae7a3f5bc51c312e69f3337b32e51569360b7d75005732961ac873511f6591e3617498a4ef7dd6570560a1ef01f034eb0a9c37b75e999bb53cbe7d28b6e39db5e77a30ecd0d0b3d16c75ac4e10f260222d5da3c60d378f3552379502473f8701129292265e6f6a9117822fc5028f450616f0ad9f82daad3b2ed73c8a7de8aeda0072bdd2f3d63fd1486d738061538169ba2b119b4fe1f04307660"}, 0xa, 0x968c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x3, 0x400008, 0xb71, 0x13, r3, 0x7fffffffffffffff) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(r4, 0x0, 0xfdf3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) futimesat$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x101400, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 2.339186043s ago: executing program 4 (id=2622): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa2a82, 0x0) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0xe, 0xdb, 0x9b72, r0, 0x7fff) socketpair$auto(0x2, 0x1, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x1, 0x11, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r1 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_cpumask\x00', 0xa901, 0x0) write$auto(r1, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) madvise$auto(0x7dd0, 0xc, 0xfd) mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x800008000) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) io_uring_setup$auto(0x85, 0x0) ioctl$auto(r5, 0x4008af03, r5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x400df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r2) 1.871472452s ago: executing program 4 (id=2623): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x102400, 0x0) close_range$auto(r0, r1, 0xfffffff7) r2 = open(&(0x7f0000000000)='./file1\x00', 0x261c2, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) read$auto_uprobe_events_ops_trace_uprobe(r2, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x6003f0, 0x14) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video49\x00', 0x20383, 0x0) ioctl$auto(0x3, 0x4020565b, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x8, 0x3) 1.752444552s ago: executing program 2 (id=2624): socket(0x3, 0x5, 0x2000000) socket(0x2, 0x1, 0x106) clock_getres$auto(0x1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq3/carrier_up_count\x00', 0x101100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x68}, 0x4004000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4095, 0xfff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000001080)={{@raw=0x9, 0x7, 0x8e97, 0x5, "bd3e744e5edd9488cb7ed1b8203146cb8bb05d0fe3d7c8c5ff4360769d9492bf1dce45d24a206e1c4140aec6"}, 0x1, @bytes=@data_ptr=&(0x7f0000001040)='/sys/bus/scsi/drivers/st/try_direct_io\x00', "2e55f96343c63025984d3f658a085b18daef88bdd62cfa2c1b5c00ec4dbcb14c3f25de1e93b3f52c184580d70b13ea8be6cd47c6a7072ed28065c2282377f13ec0aaafbd9b43472c1e727bf7b61e9878606c6f5b6d21e403c66ac93e1d0cd17233b2f828a51347515d2a96d92b4bd909dd3068980c45dfb2afe7d272df9b6e61"}) 1.608077169s ago: executing program 3 (id=2625): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2302, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) (async) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x5607, 0xffffffffffffffff) ioctl$auto_TCFLSH2(r5, 0x540b, &(0x7f0000001440)="0904ef8c76a36bb053d6e7e3f53bbc5e2d2788fbafe2003c88096a8295b7925b94176f50950978dbd9ee01186b986eb371cb30098318b6386b294bf0c5b8026337f696572177fe6aa1d519118b812eacb8b6ea1f6744526a16fb599c2b32dfc3ab72163bf6b20c0bf6e5b4ff616795109e1e95f783b6044e0de5748744d68cf3c6e526f1c320d16a4f64fea9c91d8a4f2e8a9d3d15e9af5f9e72ceef76daa860c411c929f4410d4b8e72ce80e23dbc49ea7cf79feeeabaecf78c77724c021e331ffa63a3487474097611bbc6064332a3d0af1df7978e8201fc") mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf250200000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x83b5a3da03b67f5b}, 0x404c040) r7 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_UNLOCK(0xffffff77, 0xc, &(0x7f0000000540)={{0x8000, 0x0, 0x0, 0x0, 0x10000, 0xd19a, 0x7}, 0x5, 0x1000, 0xa, 0xffffffff, @raw=0xefd6, @raw=0x4b, 0x8, 0x0, &(0x7f00000001c0)="b2c4ddc8843b16707b3697bf8e8717df207c28", &(0x7f00000004c0)="82817cc63ccbcfa2622647326c9de9f49103f7038bf09551280115389ade01f11085b275ab5c1cb97bdca52f2f33acfb0aa5b98188853b3483abab4a01e2b1056c8b7ce288daf9eba4fecd9ccb5b"}) (async) shmctl$auto_SHM_UNLOCK(0xffffff77, 0xc, &(0x7f0000000540)={{0x8000, 0x0, 0x0, 0x0, 0x10000, 0xd19a, 0x7}, 0x5, 0x1000, 0xa, 0xffffffff, @raw=0xefd6, @raw=0x4b, 0x8, 0x0, &(0x7f00000001c0)="b2c4ddc8843b16707b3697bf8e8717df207c28", &(0x7f00000004c0)="82817cc63ccbcfa2622647326c9de9f49103f7038bf09551280115389ade01f11085b275ab5c1cb97bdca52f2f33acfb0aa5b98188853b3483abab4a01e2b1056c8b7ce288daf9eba4fecd9ccb5b"}) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="28100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1028}}, 0x4) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x1f, 0xa, 0x7) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000100), 0x0) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000100), 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r10 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r10, 0x89a0, 0x4) unshare$auto(0x40000080) 1.583121815s ago: executing program 5 (id=2626): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20a42, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x65b) epoll_create$auto(0x2) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0xb92f9b5724540a4, 0x0) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) io_cancel$auto(0x7, &(0x7f0000000080)={0x8, 0x7, 0x5, 0x48a8, 0x78, r0, 0x212f, 0x3ff, 0x2, 0x0, 0x3, r0}, &(0x7f0000000040)={0x8e, 0x6, 0x9, 0x7fffffffffffffff}) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3o\rJ\x1e\xe3\xb9\x96\x0f\x80\x91\xb8\xb95\x98F\xf8Q\x01\x00\x93^', 0xfffffffa) 1.543522816s ago: executing program 2 (id=2627): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x610402, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x1000000000000) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20a42, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x65b) r1 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/id\x00', 0x103000, 0x0) readv$auto(r1, &(0x7f0000000700)={&(0x7f0000000640), 0x7f}, 0x8) epoll_create$auto(0x2) symlink$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000) socket(0x2b, 0x1, 0x2000c693) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0xb92f9b5724540a4, 0x0) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) 616.080817ms ago: executing program 5 (id=2629): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x0, 0xd0, 0x0, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r4, 0x0, 0x1) 594.596203ms ago: executing program 2 (id=2630): ioctl$auto_SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0x1df, 0x19, r0, 0x7) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x81, 0x0, 0x0, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) socketpair$auto(0x20004, 0x7, 0x7fff, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) 450.627677ms ago: executing program 2 (id=2631): mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fff) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) r1 = socket(0x1d, 0x2, 0x6) bind$auto(r1, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x200013) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 305.756352ms ago: executing program 4 (id=2632): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000a, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x2100, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="14f505f54c0793dc0e6311000004daba1637abf2e2b8c428c7efc7315f9b5a4eea213fe771f742c90b5f5d7f801c75974802d3dd80dac111a6e27306d6c9b1054e9b0a25720ed2bbdeac587ee597faeb8d5051ec2d085761fe60cbaa7c1d8195ab96f1cce154208d08f7060000005085ddf4b5fbbcf0d11bb68bb562ca963b9feeafb03b2081d14ff9bdaa1d6f0d4a0ca0a66f8fb111d138f7", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf2588000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0x80) 169.640603ms ago: executing program 3 (id=2633): openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x10640, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@typed={0xc, 0x6a, 0x0, 0x0, @u64=0x7}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e6706feba02bccc54f9c8702c88302ed38940e9d9a6431f8"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x68, 0x2a, "ba899f2af7e116fdd000445fa02c27ea2fbb740b4ba2b3b8dec3384ed5970fc67e8c64e573736bd0b06dcf6e5781b90e427223ae92f8c71bdafefd5c818ffcfd9bd3e2b8a9ebff02f8202405cf83829d5fe7afc6ffb0d8faf020caa44121c23cccdbbfaf"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xfffffffa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x10}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2082000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x19d7}]}, 0x20}, 0x1, 0x0, 0x0, 0xc890}, 0x4) r3 = syz_clone3(&(0x7f0000000580)={0x200, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), {0x35}, &(0x7f0000000480)=""/43, 0x2b, &(0x7f00000004c0)=""/87, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x478, r1, 0x2, 0x70bd2d, 0xc, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}, @NL80211_ATTR_EMA_RNR_ELEMS={0x459, 0x145, 0x0, 0x1, [@generic="b32947e314d322c38a28eeb213c532110eefab2a6521cef4c063505cd6a48c441a8eae4aa0379c59", @nested={0x38, 0x1a, 0x0, 0x1, [@typed={0x14, 0x104, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0xac, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xe}, @typed={0xc, 0x81, 0x0, 0x0, @u64}, @nested={0x4, 0x71}]}, @nested={0x186, 0xd1, 0x0, 0x1, [@generic="3555163e49979088576b0d92b02de3f98e1601808ec6a00fb3bec41edacea8e0753327f85cc28d034a90ba3c37175907c3ef3cc3d0420d0c8dcfbd0b47278bcafe93923763297656a216de8590a8e78658c2b43d29deb6d57c5085f43173e5e28e1560c389529f8d14deda124889f6236a600682e2b5af40d62aebbc1738445adda07b", @nested={0x4, 0x133}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}, @generic="6f9cff8a5c6b0753dd84e2affd1be5713df83ee7f22c2c0125b38c5b53a72eee32c8c759165fb2400bc23a18e51d5587a5a10760", @generic="7c694df7ec9d6d48c877be08190ca047f2981d7d676420a8d861285daddeaceb89dea9f455697eb49be41d8e8b8a0ecea97ff5161a19241347c58baf738692d6ea5166aa036435213ccb17b81791ea494c0a29b7934f53d2c59ad776db903bbed047cd13a929814835f362ec9fda5ccd9720511ce6ea116a52236f9ac9a17e33b1146a8299378e2aaf21ad63c2f94acdc36c6b1f09227282c7a1678fe676a1c99b2662fc3d24302cdc815e7396e4df1fd57e3bbce4372ba5b082f4a94ed002"]}, @generic="0105591284eb5fdd3765944b67fd03def847ab429294b483f654d4aab0c64f3a540f84e0512b247cd0e482da7bc394b6402d3fcc4a123ac281ca89fa241f955cdc70464339b8673a71da096aa6cf6ec5e05dd199254e62945d272ef63c38541ac072772ea3dd4ad86c1064479580ee59113303ea6a7618133ecebd10549cdd989cbe110c642654d112ddf5545eba65b8647de6e0940c29683fb8de24a9ae520a606904ba9392310fed99f8a03982b673a40e472b621913209ec01653151d3e3869206680916c062a51f9e94143c4986593c5a52b2fb07404d1ac09", @generic="3ac8ea98a5a9bffe291de9c03283d85d795544e820699f52a181a371afdde0c66247af36bf37e8e51e1fa572195463e6ddc7625ac70d50aeca16b3b3b5193f9970e8c1865d0b", @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x72, 0xdf, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @ipv4=@broadcast}, @generic="b844e105eb3929999a2acce32b3d832c57b6fc5b79c28f92413525d8be00657b0b7b1fe75235a6e3b527e2c53d04991289fb21db4200402236b331cf2f73f00ec8d28eb4c3b5f245b6ae6c8720ead1595fa155a60326ac465e9e", @nested={0x4, 0x150}, @typed={0x8, 0x45, 0x0, 0x0, @pid=r3}]}, @generic="8cf17bdd7008d02efdac4d591988e2a682aec09ed9242dbfe58015568c09e9bbb470c361807722845fa2935b434efe7395025df6d9a65911ba3674778a9bf1e9d6cac5b3dc7b8da953773305b7cf50b003b339cb2b20b0ee25bd06f0933c1e858aaa1a90d1ce9454b9db54c16dd124d5eaa8cf13d5102bd2cb593b61ba8635e04b5e952187738d4d8fd81c70400d6c49edf451f9fdeb33e868eb9133fc367f6f15a6f9faf33c002e0f1a8761f8466cad0032835d377de7af9541d629a237e6432ec9ad1f2020b8563887e853", @typed={0x4, 0xd7}]}]}, 0x478}}, 0x80) shmdt$auto(&(0x7f0000000b00)=')(\x00') execve$auto(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000bc0)=&(0x7f0000000b80)=')\x00', &(0x7f0000000c40)=&(0x7f0000000c00)=']\x00') shmdt$auto(&(0x7f0000000c80)=']\x00') r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000d00), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x488c5) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000001000)={r0, &(0x7f0000000e00)="aa9453b52f14ed5425bbcd96604b5341e47d274bf2fd8a89dc17f43a7b9186be32e9d843f90796e7777c0d575ec8086bce4631aa1bda327b8829752cf746729078d37ab54f4ce6ea79c75b263738db80fcc4c4121c989c11ced9c0e03334a3a2588e694581c8d9c4ce4436865be114c1029f762692f9d22752055c4b0171d17ddbfca58a0d4926c49392d6eda55b303a6a279ec3c256ba54e6c8dd6cfa206234a85d687fccf14348434989416e43d6570c93afa2af", 0x54, &(0x7f0000000ec0)="c6360635de4032e8590059f440f2a7953ae48ec131cf123e6a18e143ac69a25d413e1302dd45686f6dcf58fde0291dec6d421a35927fa096875c96884196c32ec03586d2f7b8be9f5f967d6fa00b8eac6b85eb81d5b504a354d2f345b8f7ec1ceaf56ed2b64cbb9facd8de4a4ae81910663a55d107f90415c460d24931034337aa269e8d56babef7abb24eebc936e276e43bc38975bead9db837781e75fdda954dded47af000c4412cb22372c61f2c8d336627ff900c51f4170aafee707b1c", 0x7, &(0x7f0000000f80)="c02f7dcb80bb7b484971ed6276b3e9c77963bc340cfcda031ca240056d22a51da3e1", &(0x7f0000000fc0)=0x5}) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), r0) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x80}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7f}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x20008000) ioctl$auto(r6, 0xfffff478, r4) r8 = socket(0x8, 0x0, 0xffffffff) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000011c0), r6) sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xe74}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x81) socket(0x10, 0x6, 0x1000) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000012c0)={{0x100, 0x9, 0x3, 0x4a5d}, "4ec3e8b4b1a7471a23a89ea27f68277e520ce70d0e8dbfea9cf49aab5ec29fc1a3deebecbb901476d9a50d3f3c7aefe02dc1e8009f69164f7fdf6fcaf4973ebf4e82fd68996d1205effdd9db25fda809", 0x96f}) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000001340)=@enable_stats, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001440), r8) sendmsg$auto_L2TP_CMD_SESSION_GET(r10, &(0x7f0000002540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002500)={&(0x7f0000001480)={0x1058, r11, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_NONE={0x1004, 0x0, "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"}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x22d}]}, 0x1058}, 0x1, 0x0, 0x0, 0x8854}, 0x80) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000002580), 0x28001, 0x0) waitid$auto(0x7e5, r6, &(0x7f00000025c0)={@_si_pad}, 0x7fffffff, &(0x7f0000002640)={{0x1, 0x7}, {0x10, 0xc40}, 0x6, 0x0, 0x7, 0xffffffffffff0001, 0x6, 0x8000000000000000, 0x7, 0x0, 0x6, 0xf2, 0x3, 0x7, 0xfffffffffffffffe, 0x60}) open(&(0x7f0000002700)='./file0\x00', 0x0, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000003b00)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003ac0)={&(0x7f00000027c0)={0x1300, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0x1214, 0x13, 0x0, 0x1, [@nested={0x120f, 0x5f, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}, @generic="4d4b5d092fc66fd4cda5f49e", @nested={0x4, 0x135}, @generic="bbab21f5c82d977b68ebf768d513597d522cae59df4473f970c91095d2a4703064ea5169e7dc50cb4d43868c1cef4f9a4095ec8b651cbe2a877f0b7b10daf25c13c209329a630ae61a826c6d974bc76a217fad918706d4f0b26c76abfdac25398df49f23a9d74ca081b9019a91f5b9a388eef7d55aac5dd614d0a2f5f440df58feace4aa01ea27f793499e37c993a02c53c7a4283f4deeeb47e9975948d4fa2d449eb8b327fb5533", @generic="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", @generic="43e79b782c7979efc3aef638c8d38fc60cd540f1f250a2aa2729a52a5d1be84640275d9ffc72cf985ee820bb58088d7fa09a0adaa341fbbcd21203c82b6294d862b3b59308603349904100499ef02f79344ff50657efb1cf68f0d4346d7ca7937c0fff6103bbdaa1d01361cc4c84167795bcdeccd1f19893eda5809be13d29d2aefcbb4f3d140b5e9ac85d5281461ce8bd5efb313fd7d8ca2b7baeac51749565e4f5a1597c637bb6c531c8c77b9810773a34f66c0bb7654b202ac8c79a85d16f461ee580f00022fb9bb067f18eb4332b7996ee97ed4f9a728e4a082e0625d9f39e27d3eefb", @generic="16e40da13d83d8ad1bb36e941de0b94b4eb006ce95fbf68b5ccd38e771d4691038a018ca2eb9e74e2f5888fb961ec8df21aeb5862f0162058e870fd6378943befd03ea74fb4b72cc2d0b93b1acab2dc39a3d17870e868e1dc56e95b3c1eb38e09ed3", @nested={0x4, 0x2a}]}]}, @NFC_ATTR_VENDOR_DATA={0xd7, 0x1f, "39c96dd8b6db75587998a27d5b8a6bbbdcf502a95390757ef46cd172cb1e28d58bb7a020ddc0d5d06bd3106d785128fe1a461144d1ef81d41b952ecb79091ad0759f2464deafad52675114158129ccaacdf0c2079f111d5024746c58d0ff0da4ccad44c62b4723474b2bfaebff478356d64f1df8a3cd30a5762d89662d40057b6377b36a397fbe4a82a72c28eb4e51c4350a9c4a31c8d78eb7e26000dcc31420f36717de52a3ff3a69279d2b8a3ca454c89bf9ec15c42c12e8c3fd94ac55cd3214fc91b17f83f832e46db4bc25d50cf0a99444"}]}, 0x1300}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 113.260658ms ago: executing program 2 (id=2634): open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x100) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x714}, 0x1, 0x0, 0x0, 0x40}, 0x24000010) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x1) recvmmsg$auto(r1, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x2000, 0x100000004, 0x80000100000000, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000280)="13e321d145") write$auto(r2, 0x0, 0x4) socket(0x2, 0x800, 0x2) setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c) 0s ago: executing program 4 (id=2635): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x5, 0x10000, 0xff, 0x5, 0x7, 0xfbfffffe, 0x5, 0x7fb, 0x7, 0x9}) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r2) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3b) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x1, 0x0) socket(0x10, 0x80e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x801, 0x84) r3 = socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xf, 0x1, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r4 = socket(0xa, 0x800, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_map_fd=r1, 0x4, @old_prog_fd=r4}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@link_create={@prog_fd=r3, @target_ifindex, 0x5, 0x9, @netfilter={0x7fff, 0x8, 0x2, 0x7}}, 0x4) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) kernel console output (not intermixed with test programs): N|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 537.259862][T13650] post_alloc_hook+0x1c0/0x230 [ 537.326181][T13650] get_page_from_freelist+0x132b/0x38e0 [ 537.332706][T13650] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 537.366590][T13650] alloc_pages_mpol+0x1fb/0x550 [ 537.404054][T13650] new_slab+0x247/0x330 [ 537.418513][T13650] ___slab_alloc+0xcf2/0x1750 [ 537.445782][T13650] __slab_alloc.constprop.0+0x56/0xb0 [ 537.453655][T13650] __kmalloc_noprof+0x2f2/0x510 [ 537.458799][T13650] tomoyo_realpath_from_path+0xc2/0x6e0 [ 537.469999][T13650] tomoyo_path_perm+0x274/0x460 [ 537.482735][T13650] tomoyo_path_unlink+0x91/0xe0 [ 537.511019][T13650] security_path_unlink+0x145/0x2b0 [ 537.529792][T13650] do_unlinkat+0x463/0x6a0 [ 537.538613][T13650] __x64_sys_unlink+0xc5/0x110 [ 537.548383][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 537.557989][T13650] do_syscall_64+0xcd/0x4c0 [ 537.562741][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.570577][T13650] page last free pid 7806 tgid 7803 stack trace: [ 537.577886][T13650] __free_frozen_pages+0x7d5/0x10f0 [ 537.583761][T13650] __put_partials+0x165/0x1c0 [ 537.590333][T13650] qlist_free_all+0x4d/0x120 [ 537.596843][T13650] kasan_quarantine_reduce+0x195/0x1e0 [ 537.603247][T13650] __kasan_slab_alloc+0x69/0x90 [ 537.618426][T13650] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 537.629652][T13650] dup_fd+0x4e/0xb90 [ 537.640189][T13650] __do_sys_close_range+0x4ca/0x730 [ 537.653830][T13650] do_syscall_64+0xcd/0x4c0 [ 537.663615][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.832224][T13680] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 537.844035][T13680] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 539.271185][T13695] FAULT_INJECTION: forcing a failure. [ 539.271185][T13695] name failslab, interval 1, probability 0, space 0, times 0 [ 539.304458][T13695] CPU: 0 UID: 0 PID: 13695 Comm: syz.4.1632 Not tainted syzkaller #0 PREEMPT(full) [ 539.304487][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.304497][T13695] Call Trace: [ 539.304503][T13695] [ 539.304509][T13695] dump_stack_lvl+0x16c/0x1f0 [ 539.304537][T13695] should_fail_ex+0x512/0x640 [ 539.304559][T13695] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 539.304577][T13695] should_failslab+0xc2/0x120 [ 539.304597][T13695] __kmalloc_cache_noprof+0x6a/0x3e0 [ 539.304611][T13695] ? rcu_is_watching+0x12/0xc0 [ 539.304626][T13695] ? snd_pcm_oss_open+0x5eb/0x1400 [ 539.304645][T13695] snd_pcm_oss_open+0x5eb/0x1400 [ 539.304668][T13695] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 539.304685][T13695] ? __lock_acquire+0xb97/0x1ce0 [ 539.304704][T13695] ? __pfx_default_wake_function+0x10/0x10 [ 539.304720][T13695] ? __lock_acquire+0xb97/0x1ce0 [ 539.304743][T13695] ? do_raw_spin_lock+0x12c/0x2b0 [ 539.304766][T13695] ? soundcore_open+0x35a/0x580 [ 539.304780][T13695] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 539.304797][T13695] soundcore_open+0x409/0x580 [ 539.304811][T13695] ? __pfx_soundcore_open+0x10/0x10 [ 539.304841][T13695] chrdev_open+0x234/0x6a0 [ 539.304860][T13695] ? __pfx_apparmor_file_open+0x10/0x10 [ 539.304877][T13695] ? __pfx_chrdev_open+0x10/0x10 [ 539.304897][T13695] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 539.304918][T13695] do_dentry_open+0x982/0x1530 [ 539.304936][T13695] ? __pfx_chrdev_open+0x10/0x10 [ 539.304958][T13695] vfs_open+0x82/0x3f0 [ 539.304982][T13695] path_openat+0x1de4/0x2cb0 [ 539.305005][T13695] ? __pfx_path_openat+0x10/0x10 [ 539.305027][T13695] do_filp_open+0x20b/0x470 [ 539.305044][T13695] ? __pfx_do_filp_open+0x10/0x10 [ 539.305075][T13695] ? alloc_fd+0x471/0x7d0 [ 539.305098][T13695] do_sys_openat2+0x11b/0x1d0 [ 539.305119][T13695] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.305148][T13695] __x64_sys_openat+0x174/0x210 [ 539.305161][T13695] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.305181][T13695] do_syscall_64+0xcd/0x4c0 [ 539.305196][T13695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.305211][T13695] RIP: 0033:0x7f577538eec9 [ 539.305224][T13695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.305238][T13695] RSP: 002b:00007f57762c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.305252][T13695] RAX: ffffffffffffffda RBX: 00007f57755e5fa0 RCX: 00007f577538eec9 [ 539.305261][T13695] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 539.305270][T13695] RBP: 00007f5775411f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.305279][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.305288][T13695] R13: 00007f57755e6038 R14: 00007f57755e5fa0 R15: 00007fffe42657d8 [ 539.305306][T13695] [ 540.706626][T13732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 540.738159][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 541.208035][T13743] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 541.935588][T13758] random: crng reseeded on system resumption [ 543.317047][T13792] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1654'. [ 543.361989][T13797] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1655'. [ 543.403601][T13795] netlink: set zone limit has 8 unknown bytes [ 543.590213][T13796] FAULT_INJECTION: forcing a failure. [ 543.590213][T13796] name failslab, interval 1, probability 0, space 0, times 0 [ 543.606981][T13796] CPU: 1 UID: 0 PID: 13796 Comm: syz.5.1656 Not tainted syzkaller #0 PREEMPT(full) [ 543.607012][T13796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 543.607021][T13796] Call Trace: [ 543.607027][T13796] [ 543.607033][T13796] dump_stack_lvl+0x16c/0x1f0 [ 543.607060][T13796] should_fail_ex+0x512/0x640 [ 543.607083][T13796] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 543.607101][T13796] should_failslab+0xc2/0x120 [ 543.607120][T13796] __kmalloc_cache_noprof+0x6a/0x3e0 [ 543.607135][T13796] ? rcu_is_watching+0x12/0xc0 [ 543.607150][T13796] ? snd_pcm_oss_open+0x5eb/0x1400 [ 543.607168][T13796] snd_pcm_oss_open+0x5eb/0x1400 [ 543.607191][T13796] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 543.607208][T13796] ? __lock_acquire+0xb97/0x1ce0 [ 543.607227][T13796] ? __pfx_default_wake_function+0x10/0x10 [ 543.607243][T13796] ? __lock_acquire+0xb97/0x1ce0 [ 543.607265][T13796] ? do_raw_spin_lock+0x12c/0x2b0 [ 543.607288][T13796] ? soundcore_open+0x35a/0x580 [ 543.607302][T13796] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 543.607319][T13796] soundcore_open+0x409/0x580 [ 543.607333][T13796] ? __pfx_soundcore_open+0x10/0x10 [ 543.607355][T13796] chrdev_open+0x234/0x6a0 [ 543.607374][T13796] ? __pfx_apparmor_file_open+0x10/0x10 [ 543.607408][T13796] ? __pfx_chrdev_open+0x10/0x10 [ 543.607428][T13796] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 543.607449][T13796] do_dentry_open+0x982/0x1530 [ 543.607467][T13796] ? __pfx_chrdev_open+0x10/0x10 [ 543.607489][T13796] vfs_open+0x82/0x3f0 [ 543.607512][T13796] path_openat+0x1de4/0x2cb0 [ 543.607535][T13796] ? __pfx_path_openat+0x10/0x10 [ 543.607557][T13796] do_filp_open+0x20b/0x470 [ 543.607574][T13796] ? __pfx_do_filp_open+0x10/0x10 [ 543.607605][T13796] ? alloc_fd+0x471/0x7d0 [ 543.607626][T13796] do_sys_openat2+0x11b/0x1d0 [ 543.607649][T13796] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.607678][T13796] __x64_sys_openat+0x174/0x210 [ 543.607691][T13796] ? __pfx___x64_sys_openat+0x10/0x10 [ 543.607712][T13796] do_syscall_64+0xcd/0x4c0 [ 543.607727][T13796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.607742][T13796] RIP: 0033:0x7fb50c38eec9 [ 543.607754][T13796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.607769][T13796] RSP: 002b:00007fb50d1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.607783][T13796] RAX: ffffffffffffffda RBX: 00007fb50c5e5fa0 RCX: 00007fb50c38eec9 [ 543.607792][T13796] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 543.607802][T13796] RBP: 00007fb50c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 543.607811][T13796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.607819][T13796] R13: 00007fb50c5e6038 R14: 00007fb50c5e5fa0 R15: 00007ffed88d82b8 [ 543.607838][T13796] [ 545.505457][T13839] blkio.reset_stats is deprecated [ 546.019881][T13852] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 546.133274][T13851] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1671'. [ 547.801764][T13880] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 547.845148][T13880] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 548.492760][T13869] kexec: Could not allocate control_code_buffer [ 550.437062][T13937] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 550.447626][T13937] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 550.456522][T13937] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 550.464319][T13937] page_type: f5(slab) [ 550.468491][T13937] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 550.478928][T13937] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 550.500254][T13937] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 550.520162][T13937] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 550.547150][T13937] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 550.580119][T13937] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 550.595545][T13937] page dumped because: unmovable page [ 550.618549][T13937] page_owner tracks the page as allocated [ 550.671972][T13937] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 550.905496][T13937] post_alloc_hook+0x1c0/0x230 [ 550.912716][T13937] get_page_from_freelist+0x132b/0x38e0 [ 550.949104][T13937] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 551.049684][T13937] alloc_pages_mpol+0x1fb/0x550 [ 551.128488][T13937] new_slab+0x247/0x330 [ 551.132815][T13937] ___slab_alloc+0xcf2/0x1750 [ 551.144334][T13937] __slab_alloc.constprop.0+0x56/0xb0 [ 551.154499][T13937] __kmalloc_noprof+0x2f2/0x510 [ 551.159429][T13937] tomoyo_realpath_from_path+0xc2/0x6e0 [ 551.165137][T13937] tomoyo_path_perm+0x274/0x460 [ 551.170222][T13937] tomoyo_path_unlink+0x91/0xe0 [ 551.179306][T13937] security_path_unlink+0x145/0x2b0 [ 551.185456][T13937] do_unlinkat+0x463/0x6a0 [ 551.190028][T13937] __x64_sys_unlink+0xc5/0x110 [ 551.194943][T13937] do_syscall_64+0xcd/0x4c0 [ 551.199913][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.206021][T13937] page last free pid 7806 tgid 7803 stack trace: [ 551.212804][T13937] __free_frozen_pages+0x7d5/0x10f0 [ 551.218200][T13937] __put_partials+0x165/0x1c0 [ 551.223297][T13937] qlist_free_all+0x4d/0x120 [ 551.264743][T13937] kasan_quarantine_reduce+0x195/0x1e0 [ 551.270453][T13937] __kasan_slab_alloc+0x69/0x90 [ 551.275596][T13937] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 551.281453][T13937] dup_fd+0x4e/0xb90 [ 551.291944][T13937] __do_sys_close_range+0x4ca/0x730 [ 551.297296][T13937] do_syscall_64+0xcd/0x4c0 [ 551.302131][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.920550][T13961] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1698'. [ 551.993593][T13957] netlink: set zone limit has 8 unknown bytes [ 552.726617][T13980] cgroup: fork rejected by pids controller in /syz2 [ 553.605089][T14068] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 553.624712][T14068] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 553.637305][T14068] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 553.645423][T14068] page_type: f5(slab) [ 553.649517][T14068] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 553.659948][T14068] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 553.668892][T14068] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 553.677853][T14068] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 553.687167][T14068] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 553.709963][T14068] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 553.719893][T14068] page dumped because: unmovable page [ 553.736413][T14068] page_owner tracks the page as allocated [ 553.748545][T14068] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 553.770483][T14068] post_alloc_hook+0x1c0/0x230 [ 553.777013][T14068] get_page_from_freelist+0x132b/0x38e0 [ 553.783151][T14068] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 553.789888][T14068] alloc_pages_mpol+0x1fb/0x550 [ 553.795492][T14068] new_slab+0x247/0x330 [ 553.799925][T14068] ___slab_alloc+0xcf2/0x1750 [ 553.812346][T14075] FAULT_INJECTION: forcing a failure. [ 553.812346][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 553.825270][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.4.1708 Not tainted syzkaller #0 PREEMPT(full) [ 553.825301][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.825315][T14075] Call Trace: [ 553.825323][T14075] [ 553.825332][T14075] dump_stack_lvl+0x16c/0x1f0 [ 553.825372][T14075] should_fail_ex+0x512/0x640 [ 553.825414][T14075] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 553.825448][T14075] should_failslab+0xc2/0x120 [ 553.825479][T14075] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 553.825509][T14075] ? __d_alloc+0x32/0xae0 [ 553.825542][T14075] __d_alloc+0x32/0xae0 [ 553.825575][T14075] d_alloc_pseudo+0x1c/0xc0 [ 553.825609][T14075] alloc_file_pseudo+0xcf/0x230 [ 553.825646][T14075] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 553.825680][T14075] ? alloc_fd+0x471/0x7d0 [ 553.825711][T14075] sock_alloc_file+0x50/0x210 [ 553.825735][T14075] __sys_socket+0x1c0/0x260 [ 553.825761][T14075] ? __fget_files+0x20e/0x3c0 [ 553.825787][T14075] ? __pfx___sys_socket+0x10/0x10 [ 553.825815][T14075] ? xfd_validate_state+0x61/0x180 [ 553.825859][T14075] __x64_sys_socket+0x72/0xb0 [ 553.825886][T14075] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.825921][T14075] do_syscall_64+0xcd/0x4c0 [ 553.825946][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.825970][T14075] RIP: 0033:0x7f577538eec9 [ 553.825990][T14075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.826013][T14075] RSP: 002b:00007f57762a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 553.826036][T14075] RAX: ffffffffffffffda RBX: 00007f57755e6090 RCX: 00007f577538eec9 [ 553.826054][T14075] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 553.826068][T14075] RBP: 00007f5775411f91 R08: 0000000000000000 R09: 0000000000000000 [ 553.826083][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.826098][T14075] R13: 00007f57755e6128 R14: 00007f57755e6090 R15: 00007fffe42657d8 [ 553.826131][T14075] [ 554.029260][T14068] __slab_alloc.constprop.0+0x56/0xb0 [ 554.035053][T14068] __kmalloc_noprof+0x2f2/0x510 [ 554.041391][T14068] tomoyo_realpath_from_path+0xc2/0x6e0 [ 554.046979][T14068] tomoyo_path_perm+0x274/0x460 [ 554.051964][T14068] tomoyo_path_unlink+0x91/0xe0 [ 554.056839][T14068] security_path_unlink+0x145/0x2b0 [ 554.062165][T14068] do_unlinkat+0x463/0x6a0 [ 554.066623][T14068] __x64_sys_unlink+0xc5/0x110 [ 554.071429][T14068] do_syscall_64+0xcd/0x4c0 [ 554.076016][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.081965][T14068] page last free pid 7806 tgid 7803 stack trace: [ 554.088348][T14068] __free_frozen_pages+0x7d5/0x10f0 [ 554.094169][T14068] __put_partials+0x165/0x1c0 [ 554.098941][T14068] qlist_free_all+0x4d/0x120 [ 554.103538][T14068] kasan_quarantine_reduce+0x195/0x1e0 [ 554.109139][T14068] __kasan_slab_alloc+0x69/0x90 [ 554.114038][T14068] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 554.119592][T14068] dup_fd+0x4e/0xb90 [ 554.123490][T14068] __do_sys_close_range+0x4ca/0x730 [ 554.128701][T14068] do_syscall_64+0xcd/0x4c0 [ 554.133271][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.052838][T14132] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 556.086833][T14132] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 556.095527][T14132] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 556.103355][T14132] page_type: f5(slab) [ 556.107456][T14132] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 556.120099][T14132] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 556.128957][T14132] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 556.138193][T14132] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 556.147066][T14132] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 556.155920][T14132] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 556.165081][T14132] page dumped because: unmovable page [ 556.170655][T14132] page_owner tracks the page as allocated [ 556.176911][T14132] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 556.199193][T14132] post_alloc_hook+0x1c0/0x230 [ 556.204078][T14132] get_page_from_freelist+0x132b/0x38e0 [ 556.209806][T14132] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 556.215811][T14132] alloc_pages_mpol+0x1fb/0x550 [ 556.221908][T14132] new_slab+0x247/0x330 [ 556.228695][T14132] ___slab_alloc+0xcf2/0x1750 [ 556.234873][T14132] __slab_alloc.constprop.0+0x56/0xb0 [ 556.244026][T14132] __kmalloc_noprof+0x2f2/0x510 [ 556.251224][T14132] tomoyo_realpath_from_path+0xc2/0x6e0 [ 556.256902][T14132] tomoyo_path_perm+0x274/0x460 [ 556.265751][T14132] tomoyo_path_unlink+0x91/0xe0 [ 556.298880][T14132] security_path_unlink+0x145/0x2b0 [ 556.304997][T14132] do_unlinkat+0x463/0x6a0 [ 556.310855][T14132] __x64_sys_unlink+0xc5/0x110 [ 556.320258][T14132] do_syscall_64+0xcd/0x4c0 [ 556.331787][T14132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.356362][T14132] page last free pid 7806 tgid 7803 stack trace: [ 556.368583][T14132] __free_frozen_pages+0x7d5/0x10f0 [ 556.373918][T14132] __put_partials+0x165/0x1c0 [ 556.379731][T14132] qlist_free_all+0x4d/0x120 [ 556.384468][T14132] kasan_quarantine_reduce+0x195/0x1e0 [ 556.391142][T14132] __kasan_slab_alloc+0x69/0x90 [ 556.396120][T14132] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 556.403882][T14132] dup_fd+0x4e/0xb90 [ 556.408038][T14132] __do_sys_close_range+0x4ca/0x730 [ 556.413717][T14132] do_syscall_64+0xcd/0x4c0 [ 556.418523][T14132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.840152][T14146] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 556.860172][T14146] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 557.373271][T14154] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1724'. [ 557.560452][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1727'. [ 559.658372][T14217] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 559.675344][T14217] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 559.686702][T14217] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 559.695842][T14217] page_type: f5(slab) [ 559.701516][T14217] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 559.714429][T14217] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 559.724236][T14217] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 559.734885][T14217] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 559.745560][T14217] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 559.755626][T14217] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 559.765026][T14217] page dumped because: unmovable page [ 559.771806][T14217] page_owner tracks the page as allocated [ 559.777539][T14217] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 559.801677][T14217] post_alloc_hook+0x1c0/0x230 [ 559.806654][T14217] get_page_from_freelist+0x132b/0x38e0 [ 559.813617][T14217] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 559.822870][T14217] alloc_pages_mpol+0x1fb/0x550 [ 559.828001][T14217] new_slab+0x247/0x330 [ 559.835708][T14217] ___slab_alloc+0xcf2/0x1750 [ 559.841383][T14217] __slab_alloc.constprop.0+0x56/0xb0 [ 559.847060][T14217] __kmalloc_noprof+0x2f2/0x510 [ 559.855075][T14217] tomoyo_realpath_from_path+0xc2/0x6e0 [ 559.860828][T14217] tomoyo_path_perm+0x274/0x460 [ 559.865819][T14217] tomoyo_path_unlink+0x91/0xe0 [ 559.871097][T14217] security_path_unlink+0x145/0x2b0 [ 559.876460][T14217] do_unlinkat+0x463/0x6a0 [ 559.881049][T14217] __x64_sys_unlink+0xc5/0x110 [ 559.885913][T14217] do_syscall_64+0xcd/0x4c0 [ 559.890855][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.896951][T14217] page last free pid 7806 tgid 7803 stack trace: [ 559.904524][T14217] __free_frozen_pages+0x7d5/0x10f0 [ 559.913149][T14217] __put_partials+0x165/0x1c0 [ 559.917857][T14217] qlist_free_all+0x4d/0x120 [ 559.922495][T14217] kasan_quarantine_reduce+0x195/0x1e0 [ 559.927992][T14217] __kasan_slab_alloc+0x69/0x90 [ 559.935899][T14217] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 559.941444][T14217] dup_fd+0x4e/0xb90 [ 559.945601][T14217] __do_sys_close_range+0x4ca/0x730 [ 559.951073][T14217] do_syscall_64+0xcd/0x4c0 [ 559.955653][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.219950][T14231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 560.482942][T14233] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1744'. [ 560.506730][T14229] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1743'. [ 560.640867][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1745'. [ 560.698412][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.704959][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.881327][T14264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 561.948022][T14264] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 561.990132][T14264] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 562.121350][T14264] page_type: f5(slab) [ 562.125400][T14264] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 562.134424][T14264] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 562.143407][T14264] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 562.152179][T14264] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 562.161006][T14264] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 562.169908][T14264] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 562.178758][T14264] page dumped because: unmovable page [ 562.184454][T14264] page_owner tracks the page as allocated [ 562.190304][T14264] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 562.211181][T14264] post_alloc_hook+0x1c0/0x230 [ 562.215960][T14264] get_page_from_freelist+0x132b/0x38e0 [ 562.221715][T14264] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 562.228224][T14264] alloc_pages_mpol+0x1fb/0x550 [ 562.234204][T14264] new_slab+0x247/0x330 [ 562.246324][T14264] ___slab_alloc+0xcf2/0x1750 [ 562.279582][T14264] __slab_alloc.constprop.0+0x56/0xb0 [ 562.302019][T14264] __kmalloc_noprof+0x2f2/0x510 [ 562.311036][T14264] tomoyo_realpath_from_path+0xc2/0x6e0 [ 562.316763][T14264] tomoyo_path_perm+0x274/0x460 [ 562.321815][T14264] tomoyo_path_unlink+0x91/0xe0 [ 562.330729][T14264] security_path_unlink+0x145/0x2b0 [ 562.337794][T14264] do_unlinkat+0x463/0x6a0 [ 562.342326][T14264] __x64_sys_unlink+0xc5/0x110 [ 562.349797][T14264] do_syscall_64+0xcd/0x4c0 [ 562.354381][T14264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.361748][T14264] page last free pid 7806 tgid 7803 stack trace: [ 562.370733][T14264] __free_frozen_pages+0x7d5/0x10f0 [ 562.376731][T14264] __put_partials+0x165/0x1c0 [ 562.383737][T14264] qlist_free_all+0x4d/0x120 [ 562.389413][T14264] kasan_quarantine_reduce+0x195/0x1e0 [ 562.395140][T14264] __kasan_slab_alloc+0x69/0x90 [ 562.414740][T14264] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 562.429858][T14264] dup_fd+0x4e/0xb90 [ 562.436237][T14264] __do_sys_close_range+0x4ca/0x730 [ 562.445015][T14264] do_syscall_64+0xcd/0x4c0 [ 562.455110][T14264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.809726][T14278] random: crng reseeded on system resumption [ 562.822623][T14282] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1759'. [ 563.432221][T14297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1761'. [ 564.219650][T14319] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 564.269918][T14319] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 564.344465][T14319] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 564.352879][T14319] page_type: f5(slab) [ 564.357375][T14319] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 564.379633][T14319] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 564.429665][T14319] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 564.454574][T14319] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 564.464055][T14319] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 564.484948][T14319] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 564.526718][T14319] page dumped because: unmovable page [ 564.550214][T14319] page_owner tracks the page as allocated [ 564.556883][T14319] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 564.580614][T14319] post_alloc_hook+0x1c0/0x230 [ 564.585493][T14319] get_page_from_freelist+0x132b/0x38e0 [ 564.592778][T14319] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 564.604187][T14319] alloc_pages_mpol+0x1fb/0x550 [ 564.609095][T14319] new_slab+0x247/0x330 [ 564.613362][T14319] ___slab_alloc+0xcf2/0x1750 [ 564.620482][T14319] __slab_alloc.constprop.0+0x56/0xb0 [ 564.626826][T14319] __kmalloc_noprof+0x2f2/0x510 [ 564.632495][T14319] tomoyo_realpath_from_path+0xc2/0x6e0 [ 564.638665][T14319] tomoyo_path_perm+0x274/0x460 [ 564.643553][T14319] tomoyo_path_unlink+0x91/0xe0 [ 564.650443][T14319] security_path_unlink+0x145/0x2b0 [ 564.657143][T14319] do_unlinkat+0x463/0x6a0 [ 564.661675][T14319] __x64_sys_unlink+0xc5/0x110 [ 564.677938][T14319] do_syscall_64+0xcd/0x4c0 [ 564.682654][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.691907][T14319] page last free pid 7806 tgid 7803 stack trace: [ 564.723320][T14319] __free_frozen_pages+0x7d5/0x10f0 [ 564.729403][T14319] __put_partials+0x165/0x1c0 [ 564.770889][T14319] qlist_free_all+0x4d/0x120 [ 564.777445][T14319] kasan_quarantine_reduce+0x195/0x1e0 [ 564.827353][T14319] __kasan_slab_alloc+0x69/0x90 [ 564.832562][T14319] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 564.838971][T14319] dup_fd+0x4e/0xb90 [ 564.846373][T14319] __do_sys_close_range+0x4ca/0x730 [ 564.860080][T14319] do_syscall_64+0xcd/0x4c0 [ 564.868573][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.907747][T14340] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 565.000467][T14338] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1770'. [ 566.234349][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1776'. [ 566.629718][T14377] hub 8-0:1.0: USB hub found [ 566.672163][T14377] hub 8-0:1.0: 1 port detected [ 568.399075][T14435] random: crng reseeded on system resumption [ 568.430214][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 568.468626][T14438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1791'. [ 568.527756][T14434] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1790'. [ 568.580945][T14441] hub 8-0:1.0: USB hub found [ 568.619954][T14441] hub 8-0:1.0: 1 port detected [ 568.789898][T14448] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1793'. [ 569.484527][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1799'. [ 569.667991][T14470] futex_wake_op: syz.2.1800 tries to shift op by -2048; fix this program [ 569.692721][T14470] futex_wake_op: syz.2.1800 tries to shift op by -2048; fix this program [ 570.041729][T14472] zswap: compressor 000 not available [ 570.074907][T14492] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1804'. [ 570.507203][T14498] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 570.933210][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1811'. [ 571.533654][T14546] random: crng reseeded on system resumption [ 571.739896][T14550] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1817'. [ 573.508338][T14606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 573.694921][T14604] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1828'. [ 574.116256][T14622] random: crng reseeded on system resumption [ 576.884440][T14692] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 577.100889][T14690] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1850'. [ 579.216234][T14744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 579.256541][T14744] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 579.256614][T14744] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 579.256643][T14744] page_type: f5(slab) [ 579.256669][T14744] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 579.256695][T14744] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 579.256722][T14744] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 579.256746][T14744] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 579.256769][T14744] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 579.256794][T14744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 579.256808][T14744] page dumped because: unmovable page [ 579.256821][T14744] page_owner tracks the page as allocated [ 579.256859][T14744] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 579.256907][T14744] post_alloc_hook+0x1c0/0x230 [ 579.256939][T14744] get_page_from_freelist+0x132b/0x38e0 [ 579.256968][T14744] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 579.256998][T14744] alloc_pages_mpol+0x1fb/0x550 [ 579.257030][T14744] new_slab+0x247/0x330 [ 579.257054][T14744] ___slab_alloc+0xcf2/0x1750 [ 579.257077][T14744] __slab_alloc.constprop.0+0x56/0xb0 [ 579.257104][T14744] __kmalloc_noprof+0x2f2/0x510 [ 579.257132][T14744] tomoyo_realpath_from_path+0xc2/0x6e0 [ 579.257169][T14744] tomoyo_path_perm+0x274/0x460 [ 579.257200][T14744] tomoyo_path_unlink+0x91/0xe0 [ 579.257224][T14744] security_path_unlink+0x145/0x2b0 [ 579.257257][T14744] do_unlinkat+0x463/0x6a0 [ 579.257287][T14744] __x64_sys_unlink+0xc5/0x110 [ 579.257319][T14744] do_syscall_64+0xcd/0x4c0 [ 579.257342][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.257370][T14744] page last free pid 7806 tgid 7803 stack trace: [ 579.257386][T14744] __free_frozen_pages+0x7d5/0x10f0 [ 579.257411][T14744] __put_partials+0x165/0x1c0 [ 579.257436][T14744] qlist_free_all+0x4d/0x120 [ 579.257463][T14744] kasan_quarantine_reduce+0x195/0x1e0 [ 579.257493][T14744] __kasan_slab_alloc+0x69/0x90 [ 579.257523][T14744] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 579.257553][T14744] dup_fd+0x4e/0xb90 [ 579.257579][T14744] __do_sys_close_range+0x4ca/0x730 [ 579.257609][T14744] do_syscall_64+0xcd/0x4c0 [ 579.288747][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.405628][T14758] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 579.405664][T14758] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 579.405688][T14758] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 579.405716][T14758] page_type: f5(slab) [ 579.405740][T14758] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 579.405765][T14758] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 579.405790][T14758] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 579.405814][T14758] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 579.405840][T14758] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 579.405865][T14758] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 579.405882][T14758] page dumped because: unmovable page [ 579.405895][T14758] page_owner tracks the page as allocated [ 579.405907][T14758] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 579.405953][T14758] post_alloc_hook+0x1c0/0x230 [ 579.405985][T14758] get_page_from_freelist+0x132b/0x38e0 [ 579.406015][T14758] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 579.406046][T14758] alloc_pages_mpol+0x1fb/0x550 [ 579.406086][T14758] new_slab+0x247/0x330 [ 579.406111][T14758] ___slab_alloc+0xcf2/0x1750 [ 579.406137][T14758] __slab_alloc.constprop.0+0x56/0xb0 [ 579.406164][T14758] __kmalloc_noprof+0x2f2/0x510 [ 579.406192][T14758] tomoyo_realpath_from_path+0xc2/0x6e0 [ 579.406228][T14758] tomoyo_path_perm+0x274/0x460 [ 579.406257][T14758] tomoyo_path_unlink+0x91/0xe0 [ 579.406280][T14758] security_path_unlink+0x145/0x2b0 [ 579.406309][T14758] do_unlinkat+0x463/0x6a0 [ 579.406338][T14758] __x64_sys_unlink+0xc5/0x110 [ 579.406367][T14758] do_syscall_64+0xcd/0x4c0 [ 579.406390][T14758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.406418][T14758] page last free pid 7806 tgid 7803 stack trace: [ 579.406434][T14758] __free_frozen_pages+0x7d5/0x10f0 [ 579.406458][T14758] __put_partials+0x165/0x1c0 [ 579.406483][T14758] qlist_free_all+0x4d/0x120 [ 579.406509][T14758] kasan_quarantine_reduce+0x195/0x1e0 [ 579.406538][T14758] __kasan_slab_alloc+0x69/0x90 [ 579.406568][T14758] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 579.406596][T14758] dup_fd+0x4e/0xb90 [ 579.406622][T14758] __do_sys_close_range+0x4ca/0x730 [ 579.406650][T14758] do_syscall_64+0xcd/0x4c0 [ 579.406671][T14758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.510115][T14760] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1867'. [ 581.302902][T14755] tty tty57: ldisc open failed (-12), clearing slot 56 [ 582.130468][T14809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 582.302562][T14807] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1878'. [ 582.631238][ T30] audit: type=1800 audit(4294967465.240:16): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1881" name="lu_gp_id" dev="configfs" ino=49551 res=0 errno=0 [ 582.665270][T14819] kstrtoul() returned -22 for lu_gp_id [ 583.881069][T14849] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1888'. [ 584.090292][T14849] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1888'. [ 584.418651][T14869] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1893'. [ 584.644687][T14881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 584.774200][T14872] zswap: compressor not available [ 584.793200][T14881] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1894'. [ 586.390902][T14911] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 586.403198][T14911] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 586.624396][T14921] FAULT_INJECTION: forcing a failure. [ 586.624396][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 586.674508][T14921] CPU: 0 UID: 0 PID: 14921 Comm: syz.4.1904 Not tainted syzkaller #0 PREEMPT(full) [ 586.674547][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.674562][T14921] Call Trace: [ 586.674572][T14921] [ 586.674583][T14921] dump_stack_lvl+0x16c/0x1f0 [ 586.674627][T14921] should_fail_ex+0x512/0x640 [ 586.674664][T14921] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 586.674699][T14921] should_failslab+0xc2/0x120 [ 586.674734][T14921] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 586.674765][T14921] ? __alloc_skb+0x2b2/0x380 [ 586.674804][T14921] __alloc_skb+0x2b2/0x380 [ 586.674837][T14921] ? __pfx___alloc_skb+0x10/0x10 [ 586.674878][T14921] ? if_nlmsg_size+0x475/0xaf0 [ 586.674919][T14921] rtmsg_ifinfo_build_skb+0x81/0x280 [ 586.674954][T14921] rtmsg_ifinfo+0x9f/0x1a0 [ 586.674988][T14921] netif_state_change+0x17f/0x3b0 [ 586.675016][T14921] ? __pfx_netif_state_change+0x10/0x10 [ 586.675049][T14921] ? tun_get+0x191/0x370 [ 586.675081][T14921] netdev_state_change+0xaa/0x240 [ 586.675109][T14921] __tun_chr_ioctl+0x2443/0x48b0 [ 586.675135][T14921] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 586.675180][T14921] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 586.675212][T14921] ? hook_file_ioctl_common+0x145/0x410 [ 586.675254][T14921] ? __fget_files+0x20e/0x3c0 [ 586.675286][T14921] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 586.675317][T14921] __x64_sys_ioctl+0x18e/0x210 [ 586.675357][T14921] do_syscall_64+0xcd/0x4c0 [ 586.675392][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.675420][T14921] RIP: 0033:0x7f577538eec9 [ 586.675441][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.675467][T14921] RSP: 002b:00007f57762a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.675492][T14921] RAX: ffffffffffffffda RBX: 00007f57755e6090 RCX: 00007f577538eec9 [ 586.675510][T14921] RDX: 000000000000006f RSI: 00000000400454cc RDI: 04000000000000c8 [ 586.675526][T14921] RBP: 00007f5775411f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.675542][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.675557][T14921] R13: 00007f57755e6128 R14: 00007f57755e6090 R15: 00007fffe42657d8 [ 586.675594][T14921] [ 587.899394][T14930] FAULT_INJECTION: forcing a failure. [ 587.899394][T14930] name fail_futex, interval 1, probability 0, space 0, times 0 [ 587.957981][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.4.1909 Not tainted syzkaller #0 PREEMPT(full) [ 587.958018][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.958034][T14930] Call Trace: [ 587.958044][T14930] [ 587.958054][T14930] dump_stack_lvl+0x16c/0x1f0 [ 587.958098][T14930] should_fail_ex+0x512/0x640 [ 587.958142][T14930] get_futex_key+0x1d0/0x1560 [ 587.958180][T14930] ? __pfx_get_futex_key+0x10/0x10 [ 587.958209][T14930] ? kasan_save_stack+0x33/0x60 [ 587.958238][T14930] ? __kasan_slab_alloc+0x89/0x90 [ 587.958267][T14930] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 587.958297][T14930] ? security_file_alloc+0x34/0x2b0 [ 587.958330][T14930] ? init_file+0x93/0x4c0 [ 587.958363][T14930] ? alloc_empty_file+0x73/0x1e0 [ 587.958397][T14930] ? alloc_file_pseudo+0x13a/0x230 [ 587.958432][T14930] ? __anon_inode_getfile+0xe8/0x280 [ 587.958461][T14930] ? anon_inode_getfd+0x52/0xb0 [ 587.958490][T14930] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 587.958518][T14930] ? do_syscall_64+0xcd/0x4c0 [ 587.958546][T14930] futex_wait_setup+0x9d/0x550 [ 587.958595][T14930] __futex_wait+0x194/0x2f0 [ 587.958634][T14930] ? __pfx___futex_wait+0x10/0x10 [ 587.958677][T14930] ? __pfx_futex_wake_mark+0x10/0x10 [ 587.958716][T14930] ? futex_private_hash_put+0x176/0x300 [ 587.958747][T14930] ? futex_private_hash_put+0x18a/0x300 [ 587.958779][T14930] futex_wait+0xe8/0x380 [ 587.958812][T14930] ? __pfx_futex_wait+0x10/0x10 [ 587.958855][T14930] ? lock_acquire+0x179/0x350 [ 587.958888][T14930] do_futex+0x229/0x350 [ 587.958918][T14930] ? __pfx_do_futex+0x10/0x10 [ 587.958948][T14930] ? fd_install+0x244/0x750 [ 587.958987][T14930] __x64_sys_futex+0x1e0/0x4c0 [ 587.959021][T14930] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 587.959052][T14930] ? __pfx___x64_sys_futex+0x10/0x10 [ 587.959095][T14930] do_syscall_64+0xcd/0x4c0 [ 587.959129][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.959156][T14930] RIP: 0033:0x7f577538eec9 [ 587.959175][T14930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.959201][T14930] RSP: 002b:00007f57762c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 587.959225][T14930] RAX: ffffffffffffffda RBX: 00007f57755e5fa8 RCX: 00007f577538eec9 [ 587.959243][T14930] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57755e5fa8 [ 587.959258][T14930] RBP: 00007f57755e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 587.959274][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.959289][T14930] R13: 00007f57755e6038 R14: 00007fffe42656f0 R15: 00007fffe42657d8 [ 587.959323][T14930] [ 589.125770][T14966] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.136474][T14966] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.387916][T14974] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.398856][T14974] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 592.891380][T14985] delete_channel: no stack [ 594.011846][T15036] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1936'. [ 595.189972][T15059] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1949'. [ 595.358350][T15047] ecryptfs_parse_packet_length: Error parsing packet length [ 595.419087][T15047] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 595.697250][T15068] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.743973][T15068] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 596.907030][T15080] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 596.922935][T15080] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 598.223749][T15117] netlink: 'syz.3.1959': attribute type 64 has an invalid length. [ 598.237233][T15117] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1959'. [ 599.341405][T15145] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.496381][T15144] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1965'. [ 600.076290][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.088684][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.097534][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 600.108847][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.116931][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 600.586005][ T9592] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.663845][T15171] zram: Removed device: zram0 [ 600.818800][ T9592] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.078196][ T9592] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.290922][ T9592] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.317910][T15152] chnl_net:caif_netlink_parms(): no params data found [ 601.529790][T15183] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 601.572233][T15183] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 601.768687][T15152] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.790250][T15152] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.841522][T15152] bridge_slave_0: entered allmulticast mode [ 601.871158][T15152] bridge_slave_0: entered promiscuous mode [ 601.914421][T15152] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.929424][T15152] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.957969][T15152] bridge_slave_1: entered allmulticast mode [ 601.984689][T15152] bridge_slave_1: entered promiscuous mode [ 602.158904][ T5868] Bluetooth: hci2: command tx timeout [ 602.441998][T15202] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 602.694440][T15201] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1977'. getty: ttyS0: read error: Resource temporarily unavailable [ 603.137725][ T9592] .^: left promiscuous mode [ 603.258990][T15152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.301863][T15152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.647168][T15152] team0: Port device team_slave_0 added [ 603.672362][T15152] team0: Port device team_slave_1 added [ 604.016977][ T30] audit: type=1800 audit(4294967486.731:17): pid=15218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1980" name="dbroot" dev="configfs" ino=52489 res=0 errno=0 [ 604.107664][T15152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.158292][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.184402][T15152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.201087][T15152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.230947][ T5868] Bluetooth: hci2: command tx timeout [ 604.241522][T15152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.375562][T15152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.646470][T15229] ecryptfs_parse_packet_length: Error parsing packet length [ 604.653802][T15229] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 604.715860][T15248] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 604.741478][T15248] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 605.241037][T15152] hsr_slave_0: entered promiscuous mode [ 605.270176][T15152] hsr_slave_1: entered promiscuous mode [ 605.283404][T15152] debugfs: 'hsr0' already exists in 'hsr' [ 605.313749][T15152] Cannot create hsr debugfs directory [ 605.420670][ T9592] hsr_slave_0: left promiscuous mode [ 605.476475][ T9592] hsr_slave_1: left promiscuous mode [ 605.504309][ T9592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.511780][ T9592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.536269][ T9592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.544293][ T9592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.658841][ T9592] veth1_macvtap: left promiscuous mode [ 605.671656][ T9592] veth0_macvtap: left promiscuous mode [ 605.677622][ T9592] veth1_vlan: left promiscuous mode [ 605.700484][ T9592] veth0_vlan: left promiscuous mode [ 606.297293][ T5868] Bluetooth: hci2: command tx timeout [ 606.908294][ T9592] team0 (unregistering): Port device team_slave_1 removed [ 606.999122][ T9592] team0 (unregistering): Port device team_slave_0 removed [ 607.088128][T15269] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 607.191558][T15268] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1988'. [ 607.825079][T15268] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 607.842690][T15268] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 607.872491][T15268] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 608.366687][ T5868] Bluetooth: hci2: command tx timeout [ 610.011301][T15152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 610.041741][T15152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 610.055341][T15152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 610.092763][T15152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 610.402789][T15152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.488259][T15152] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.534940][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.542124][ T9599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.651355][T15338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 610.684919][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.692169][ T9592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.999604][T15333] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1997'. [ 611.438094][T15152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.672009][T15152] veth0_vlan: entered promiscuous mode [ 611.685583][T15152] veth1_vlan: entered promiscuous mode [ 611.732184][T15152] veth0_macvtap: entered promiscuous mode [ 611.742200][T15152] veth1_macvtap: entered promiscuous mode [ 611.768302][T15152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.810113][T15152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.902949][T15364] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2002'. [ 611.923478][ T9607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.946453][ T9607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.003522][ T9607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.046966][ T9607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.293025][ T9636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.356764][ T9636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.523109][ T9592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.542089][ T9592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.699974][T15407] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 613.846652][T15406] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2008'. [ 614.154624][T15415] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.175875][T15415] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.311299][T15415] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 614.811513][T15430] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2012'. [ 615.434314][T15442] FAULT_INJECTION: forcing a failure. [ 615.434314][T15442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.593088][T15442] CPU: 0 UID: 0 PID: 15442 Comm: syz.5.2022 Not tainted syzkaller #0 PREEMPT(full) [ 615.593121][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.593135][T15442] Call Trace: [ 615.593144][T15442] [ 615.593153][T15442] dump_stack_lvl+0x16c/0x1f0 [ 615.593194][T15442] should_fail_ex+0x512/0x640 [ 615.593244][T15442] _copy_from_user+0x2e/0xd0 [ 615.593272][T15442] move_addr_to_kernel+0x65/0x170 [ 615.593304][T15442] __sys_bind+0x11b/0x260 [ 615.593335][T15442] ? __pfx___sys_bind+0x10/0x10 [ 615.593361][T15442] ? __fget_files+0x20e/0x3c0 [ 615.593401][T15442] ? __pfx_ksys_write+0x10/0x10 [ 615.593437][T15442] __x64_sys_bind+0x72/0xb0 [ 615.593464][T15442] ? lockdep_hardirqs_on+0x7c/0x110 [ 615.593498][T15442] do_syscall_64+0xcd/0x4c0 [ 615.593528][T15442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.593553][T15442] RIP: 0033:0x7fb50c38eec9 [ 615.593574][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.593597][T15442] RSP: 002b:00007fb50d1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 615.593621][T15442] RAX: ffffffffffffffda RBX: 00007fb50c5e5fa0 RCX: 00007fb50c38eec9 [ 615.593638][T15442] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000003 [ 615.593653][T15442] RBP: 00007fb50d1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 615.593667][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.593683][T15442] R13: 00007fb50c5e6038 R14: 00007fb50c5e5fa0 R15: 00007ffed88d82b8 [ 615.593717][T15442] [ 615.990412][T15449] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 616.077523][T15449] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2014'. [ 616.685658][T15458] FAULT_INJECTION: forcing a failure. [ 616.685658][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 616.704930][T15458] CPU: 1 UID: 0 PID: 15458 Comm: syz.4.2026 Not tainted syzkaller #0 PREEMPT(full) [ 616.704971][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.704987][T15458] Call Trace: [ 616.704996][T15458] [ 616.705007][T15458] dump_stack_lvl+0x16c/0x1f0 [ 616.705052][T15458] should_fail_ex+0x512/0x640 [ 616.705090][T15458] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 616.705133][T15458] should_failslab+0xc2/0x120 [ 616.705167][T15458] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 616.705198][T15458] ? dup_fd+0x4e/0xb90 [ 616.705225][T15458] ? do_futex+0x122/0x350 [ 616.705260][T15458] dup_fd+0x4e/0xb90 [ 616.705289][T15458] ? find_held_lock+0x2b/0x80 [ 616.705323][T15458] __do_sys_close_range+0x4ca/0x730 [ 616.705358][T15458] ? __pfx___do_sys_close_range+0x10/0x10 [ 616.705402][T15458] do_syscall_64+0xcd/0x4c0 [ 616.705430][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.705456][T15458] RIP: 0033:0x7f577538eec9 [ 616.705478][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.705504][T15458] RSP: 002b:00007f57762c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 616.705528][T15458] RAX: ffffffffffffffda RBX: 00007f57755e5fa0 RCX: 00007f577538eec9 [ 616.705546][T15458] RDX: 0000000000000002 RSI: 0000000000008000 RDI: 0000000000000002 [ 616.705562][T15458] RBP: 00007f5775411f91 R08: 0000000000000000 R09: 0000000000000000 [ 616.705578][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.705593][T15458] R13: 00007f57755e6038 R14: 00007f57755e5fa0 R15: 00007fffe42657d8 [ 616.705629][T15458] [ 617.183783][T15464] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 617.230312][T15464] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 617.238876][T15464] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 617.333911][T15464] page_type: f5(slab) [ 617.337981][T15464] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 617.384335][T15464] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 617.416555][T15464] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 617.425655][T15464] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 617.468612][T15464] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 617.588277][T15464] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 617.653478][T15464] page dumped because: unmovable page [ 617.965744][T15464] page_owner tracks the page as allocated [ 618.005801][T15464] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 618.036196][T15464] post_alloc_hook+0x1c0/0x230 [ 618.043160][T15464] get_page_from_freelist+0x132b/0x38e0 [ 618.072161][T15464] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 618.102420][T15464] alloc_pages_mpol+0x1fb/0x550 [ 618.151728][T15464] new_slab+0x247/0x330 [ 618.156226][T15464] ___slab_alloc+0xcf2/0x1750 [ 618.184239][T15464] __slab_alloc.constprop.0+0x56/0xb0 [ 618.215784][T15464] __kmalloc_noprof+0x2f2/0x510 [ 618.220671][T15464] tomoyo_realpath_from_path+0xc2/0x6e0 [ 618.259244][T15464] tomoyo_path_perm+0x274/0x460 [ 618.264148][T15464] tomoyo_path_unlink+0x91/0xe0 [ 618.274933][T15464] security_path_unlink+0x145/0x2b0 [ 618.323994][T15464] do_unlinkat+0x463/0x6a0 [ 618.353945][T15464] __x64_sys_unlink+0xc5/0x110 [ 618.369412][T15464] do_syscall_64+0xcd/0x4c0 [ 618.379498][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.386241][T15464] page last free pid 7806 tgid 7803 stack trace: [ 618.393117][T15464] __free_frozen_pages+0x7d5/0x10f0 [ 618.398549][T15464] __put_partials+0x165/0x1c0 [ 618.403387][T15464] qlist_free_all+0x4d/0x120 [ 618.408378][T15464] kasan_quarantine_reduce+0x195/0x1e0 [ 618.414336][T15464] __kasan_slab_alloc+0x69/0x90 [ 618.423141][T15464] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 618.439431][T15464] dup_fd+0x4e/0xb90 [ 618.447927][T15464] __do_sys_close_range+0x4ca/0x730 [ 618.462923][T15464] do_syscall_64+0xcd/0x4c0 [ 618.474613][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.777023][T15501] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.821750][T15501] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.904747][T15504] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 619.137589][T15503] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2027'. [ 620.229395][T15523] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 620.238562][T15522] FAULT_INJECTION: forcing a failure. [ 620.238562][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 620.312128][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.5.2032 Not tainted syzkaller #0 PREEMPT(full) [ 620.312162][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 620.312171][T15522] Call Trace: [ 620.312177][T15522] [ 620.312182][T15522] dump_stack_lvl+0x16c/0x1f0 [ 620.312209][T15522] should_fail_ex+0x512/0x640 [ 620.312231][T15522] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 620.312251][T15522] should_failslab+0xc2/0x120 [ 620.312270][T15522] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 620.312287][T15522] ? __pmd_alloc+0xbf/0x930 [ 620.312310][T15522] __pmd_alloc+0xbf/0x930 [ 620.312333][T15522] __handle_mm_fault+0xa06/0x2a50 [ 620.312350][T15522] ? mt_find+0x3ef/0xa30 [ 620.312365][T15522] ? __pfx___handle_mm_fault+0x10/0x10 [ 620.312378][T15522] ? __pfx_mt_find+0x10/0x10 [ 620.312401][T15522] ? find_vma+0xbf/0x140 [ 620.312419][T15522] ? __pfx_find_vma+0x10/0x10 [ 620.312439][T15522] handle_mm_fault+0x589/0xd10 [ 620.312455][T15522] ? trace_raw_output_exceptions+0x131/0x150 [ 620.312479][T15522] do_user_addr_fault+0x7a6/0x1370 [ 620.312503][T15522] ? rcu_is_watching+0x12/0xc0 [ 620.312520][T15522] exc_page_fault+0x5c/0xb0 [ 620.312542][T15522] asm_exc_page_fault+0x26/0x30 [ 620.312556][T15522] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 620.312574][T15522] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 620.312587][T15522] RSP: 0018:ffffc9000c237d88 EFLAGS: 00050202 [ 620.312598][T15522] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000006a [ 620.312607][T15522] RDX: fffff52001846fd0 RSI: 0000000000000000 RDI: ffffc9000c237e10 [ 620.312616][T15522] RBP: 000000000000006a R08: 0000000000000001 R09: fffff52001846fcf [ 620.312624][T15522] R10: ffffc9000c237e79 R11: 0000000000000000 R12: 0000000000000000 [ 620.312632][T15522] R13: ffffc9000c237e10 R14: ffff88802cdd56c0 R15: ffff8880584f6000 [ 620.312651][T15522] _copy_from_user+0x98/0xd0 [ 620.312667][T15522] move_addr_to_kernel+0x65/0x170 [ 620.312686][T15522] __sys_bind+0x11b/0x260 [ 620.312704][T15522] ? __pfx___sys_bind+0x10/0x10 [ 620.312720][T15522] ? __fget_files+0x20e/0x3c0 [ 620.312742][T15522] ? __pfx_ksys_write+0x10/0x10 [ 620.312768][T15522] __x64_sys_bind+0x72/0xb0 [ 620.312788][T15522] ? lockdep_hardirqs_on+0x7c/0x110 [ 620.312808][T15522] do_syscall_64+0xcd/0x4c0 [ 620.312822][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.312835][T15522] RIP: 0033:0x7fb50c38eec9 [ 620.312846][T15522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.312859][T15522] RSP: 002b:00007fb50d1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 620.312871][T15522] RAX: ffffffffffffffda RBX: 00007fb50c5e5fa0 RCX: 00007fb50c38eec9 [ 620.312880][T15522] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000003 [ 620.312888][T15522] RBP: 00007fb50d1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 620.312896][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.312904][T15522] R13: 00007fb50c5e6038 R14: 00007fb50c5e5fa0 R15: 00007ffed88d82b8 [ 620.312922][T15522] [ 621.838382][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.845555][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.105479][T15549] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 622.126427][T15549] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 622.637261][ T30] audit: type=1800 audit(4294967304.784:18): pid=15557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2041" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 623.464946][T15570] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 623.546207][T15572] FAULT_INJECTION: forcing a failure. [ 623.546207][T15572] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 623.559864][T15572] CPU: 0 UID: 0 PID: 15572 Comm: syz.2.2045 Not tainted syzkaller #0 PREEMPT(full) [ 623.559898][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 623.559911][T15572] Call Trace: [ 623.559920][T15572] [ 623.559929][T15572] dump_stack_lvl+0x16c/0x1f0 [ 623.559968][T15572] should_fail_ex+0x512/0x640 [ 623.560006][T15572] should_fail_alloc_page+0xe7/0x130 [ 623.560040][T15572] prepare_alloc_pages+0x3c2/0x610 [ 623.560082][T15572] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 623.560114][T15572] ? stack_trace_save+0x8e/0xc0 [ 623.560142][T15572] ? __pfx_stack_trace_save+0x10/0x10 [ 623.560166][T15572] ? rcu_is_watching+0x12/0xc0 [ 623.560192][T15572] ? stack_depot_save_flags+0x29/0x9c0 [ 623.560236][T15572] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 623.560265][T15572] ? __kasan_slab_alloc+0x89/0x90 [ 623.560293][T15572] ? __pmd_alloc+0xbf/0x930 [ 623.560325][T15572] ? handle_mm_fault+0x589/0xd10 [ 623.560348][T15572] ? do_user_addr_fault+0x7a6/0x1370 [ 623.560381][T15572] ? exc_page_fault+0x5c/0xb0 [ 623.560412][T15572] ? asm_exc_page_fault+0x26/0x30 [ 623.560447][T15572] ? rep_movs_alternative+0x4a/0x90 [ 623.560473][T15572] ? _copy_from_user+0x98/0xd0 [ 623.560497][T15572] ? move_addr_to_kernel+0x65/0x170 [ 623.560540][T15572] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 623.560577][T15572] ? policy_nodemask+0xea/0x4e0 [ 623.560612][T15572] alloc_pages_mpol+0x1fb/0x550 [ 623.560645][T15572] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 623.560687][T15572] alloc_pages_noprof+0x131/0x390 [ 623.560719][T15572] pte_alloc_one+0x1c/0x3a0 [ 623.560744][T15572] do_pte_missing+0x1afc/0x3ba0 [ 623.560769][T15572] ? do_raw_spin_unlock+0x172/0x230 [ 623.560808][T15572] ? __pmd_alloc+0x3fb/0x930 [ 623.560845][T15572] __handle_mm_fault+0x152a/0x2a50 [ 623.560875][T15572] ? mt_find+0x3ef/0xa30 [ 623.560901][T15572] ? __pfx___handle_mm_fault+0x10/0x10 [ 623.560924][T15572] ? __pfx_mt_find+0x10/0x10 [ 623.560965][T15572] ? find_vma+0xbf/0x140 [ 623.560995][T15572] ? __pfx_find_vma+0x10/0x10 [ 623.561029][T15572] handle_mm_fault+0x589/0xd10 [ 623.561053][T15572] ? trace_raw_output_exceptions+0x131/0x150 [ 623.561075][T15572] do_user_addr_fault+0x7a6/0x1370 [ 623.561099][T15572] ? rcu_is_watching+0x12/0xc0 [ 623.561116][T15572] exc_page_fault+0x5c/0xb0 [ 623.561137][T15572] asm_exc_page_fault+0x26/0x30 [ 623.561150][T15572] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 623.561167][T15572] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 623.561181][T15572] RSP: 0018:ffffc9000b667d88 EFLAGS: 00050202 [ 623.561192][T15572] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000006a [ 623.561201][T15572] RDX: fffff520016ccfd0 RSI: 0000000000000000 RDI: ffffc9000b667e10 [ 623.561210][T15572] RBP: 000000000000006a R08: 0000000000000001 R09: fffff520016ccfcf [ 623.561218][T15572] R10: ffffc9000b667e79 R11: 0000000000000000 R12: 0000000000000000 [ 623.561226][T15572] R13: ffffc9000b667e10 R14: ffff888035139180 R15: ffff888041729e00 [ 623.561245][T15572] _copy_from_user+0x98/0xd0 [ 623.561261][T15572] move_addr_to_kernel+0x65/0x170 [ 623.561279][T15572] __sys_bind+0x11b/0x260 [ 623.561296][T15572] ? __pfx___sys_bind+0x10/0x10 [ 623.561312][T15572] ? __fget_files+0x20e/0x3c0 [ 623.561334][T15572] ? __pfx_ksys_write+0x10/0x10 [ 623.561355][T15572] __x64_sys_bind+0x72/0xb0 [ 623.561370][T15572] ? lockdep_hardirqs_on+0x7c/0x110 [ 623.561391][T15572] do_syscall_64+0xcd/0x4c0 [ 623.561405][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.561423][T15572] RIP: 0033:0x7fd1f018eec9 [ 623.561435][T15572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.561448][T15572] RSP: 002b:00007fd1f0f44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 623.561460][T15572] RAX: ffffffffffffffda RBX: 00007fd1f03e5fa0 RCX: 00007fd1f018eec9 [ 623.561469][T15572] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000003 [ 623.561477][T15572] RBP: 00007fd1f0f44090 R08: 0000000000000000 R09: 0000000000000000 [ 623.561485][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.561493][T15572] R13: 00007fd1f03e6038 R14: 00007fd1f03e5fa0 R15: 00007ffe7d730128 [ 623.561511][T15572] [ 624.053720][T15569] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2044'. [ 624.292934][T15578] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.359204][T15578] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.455289][T15569] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 624.494305][T15569] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 624.531148][T15569] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 625.039351][ T5868] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 625.604763][T15602] Invalid ELF header magic: != ELF [ 625.676486][T15606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 625.710141][T15606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 626.226237][T15602] Invalid ELF header magic: != ELF [ 627.890435][T15653] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 627.961132][T15653] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 628.000840][T15653] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 628.055259][T15653] page_type: f5(slab) [ 628.077649][T15653] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 628.120910][T15653] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 628.173402][T15653] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 628.204151][T15653] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 628.213027][T15653] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 628.222256][T15653] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 628.231286][T15653] page dumped because: unmovable page [ 628.236961][T15653] page_owner tracks the page as allocated [ 628.242777][T15653] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (udevd), ts 219327982925, free_ts 219248350313 [ 628.263670][T15653] post_alloc_hook+0x1c0/0x230 [ 628.269133][T15653] get_page_from_freelist+0x132b/0x38e0 [ 628.275232][T15653] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 628.285793][T15662] random: crng reseeded on system resumption [ 628.289173][T15653] alloc_pages_mpol+0x1fb/0x550 [ 628.356151][T15653] new_slab+0x247/0x330 [ 628.432203][T15653] ___slab_alloc+0xcf2/0x1750 [ 628.442510][T15653] __slab_alloc.constprop.0+0x56/0xb0 [ 628.462001][T15653] __kmalloc_noprof+0x2f2/0x510 [ 628.493963][T15653] tomoyo_realpath_from_path+0xc2/0x6e0 [ 628.538415][T15653] tomoyo_path_perm+0x274/0x460 [ 628.544462][T15653] tomoyo_path_unlink+0x91/0xe0 [ 628.549524][T15653] security_path_unlink+0x145/0x2b0 [ 628.555185][T15653] do_unlinkat+0x463/0x6a0 [ 628.559787][T15653] __x64_sys_unlink+0xc5/0x110 [ 628.565488][T15653] do_syscall_64+0xcd/0x4c0 [ 628.570230][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.587639][T15653] page last free pid 7806 tgid 7803 stack trace: [ 628.600764][T15653] __free_frozen_pages+0x7d5/0x10f0 [ 628.646150][T15653] __put_partials+0x165/0x1c0 [ 628.652733][T15653] qlist_free_all+0x4d/0x120 [ 628.657364][T15653] kasan_quarantine_reduce+0x195/0x1e0 [ 628.663019][T15653] __kasan_slab_alloc+0x69/0x90 [ 628.667894][T15653] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 628.673631][T15653] dup_fd+0x4e/0xb90 [ 628.678359][T15653] __do_sys_close_range+0x4ca/0x730 [ 628.683757][T15653] do_syscall_64+0xcd/0x4c0 [ 628.690714][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.469871][T15675] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2064'. [ 630.482522][T15684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2070'. [ 630.709649][T15686] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 630.914026][T15690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 631.405662][T15684] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 632.209409][T15709] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2075'. [ 633.029020][T15726] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 633.068948][T15726] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.186589][T15744] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.225238][T15744] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.733490][T15753] random: crng reseeded on system resumption [ 636.357678][T15773] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 636.514013][T15767] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2086'. [ 636.536328][T15772] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2088'. [ 639.463752][T15822] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.539830][T15822] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.625964][T15810] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 640.921929][T15845] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 640.945575][T15845] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 641.547612][T15859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 641.636716][T15859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 642.416806][T15873] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2110'. [ 643.282464][ T30] audit: type=1800 audit(4294967325.522:19): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2115" name="features" dev="configfs" ino=55931 res=0 errno=0 [ 643.302808][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.355885][T15877] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 643.551166][T15898] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 643.587546][T15894] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 643.946251][T15906] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 644.002593][T15905] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2118'. [ 644.497357][ T30] audit: type=1326 audit(4294967326.748:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15909 comm="syz.3.2120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f805b18eec9 code=0x0 [ 644.872033][T15917] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 644.888657][T15917] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 645.989679][T15937] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 646.009483][T15937] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 646.744858][T15953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 646.927026][T15952] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2130'. [ 647.094721][T15958] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2132'. [ 647.538636][T15944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.563622][T15973] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 647.574556][T15973] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 647.584380][T15944] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 647.608887][T15944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.635244][T15944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.642750][T15944] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.672842][T15944] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.696630][T15944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.707891][T15944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 647.764728][T15944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.229974][T15991] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2136'. [ 648.240334][T15991] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2136'. [ 648.269730][T15992] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 649.194365][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 649.633020][T16020] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 649.649314][T16018] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2144'. [ 649.681594][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 649.687722][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.751219][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.777742][T16020] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 649.872022][T16023] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 650.201356][T16031] zswap: compressor not available [ 651.263442][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 651.742752][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 651.820574][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.866578][T16089] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.123104][T16088] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2160'. [ 653.810175][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 653.843575][T16100] svc: failed to register nfsdv3 RPC service (errno 111). [ 653.893601][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.909852][T16100] svc: failed to register nfsaclv3 RPC service (errno 111). [ 654.265220][T16103] kexec: Could not allocate control_code_buffer [ 655.150622][ T51] Bluetooth: hci1: Malformed LE Event: 0x1d [ 657.665351][T16182] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 657.862744][T16182] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2175'. [ 658.669381][T16192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2177'. [ 659.473457][T16211] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 659.696748][T16214] Process accounting resumed [ 660.556491][T16228] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 661.214943][T16228] tipc: Publication distribution failure [ 661.383778][T16242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 663.636357][T16274] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 663.682580][T16274] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 665.746165][T16316] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 665.892883][T16313] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2200'. [ 666.497614][T16325] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2204'. [ 667.333722][T16337] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 667.417291][T16337] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2213'. [ 668.270905][T16350] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 668.321068][T16350] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 668.787214][T16358] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 668.806593][T16358] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 668.820823][T16359] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2210'. [ 668.832347][T16359] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2210'. [ 669.595404][T16375] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 669.635636][T16375] warning: `syz.2.2214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 670.145717][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.157254][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.194480][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.216704][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.217491][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.613592][T16385] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.680278][T16387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.740185][T16387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.936690][T16385] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2216'. [ 671.435520][ T9607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.586166][ T9607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.637908][T16378] chnl_net:caif_netlink_parms(): no params data found [ 671.784830][ T9607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.866489][T16398] netlink: 'syz.4.2221': attribute type 10 has an invalid length. [ 672.048541][ T9607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.136344][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 672.276252][ T5868] Bluetooth: hci3: command tx timeout [ 672.345725][T16378] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.582890][T16378] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.590217][T16378] bridge_slave_0: entered allmulticast mode [ 672.610604][T16378] bridge_slave_0: entered promiscuous mode [ 672.624493][T16378] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.636227][T16378] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.643620][T16378] bridge_slave_1: entered allmulticast mode [ 672.655220][T16378] bridge_slave_1: entered promiscuous mode [ 672.900305][T16378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.963993][T16378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.238365][T16378] team0: Port device team_slave_0 added [ 673.255331][T16378] team0: Port device team_slave_1 added [ 673.418826][T16378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.426667][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.457853][T16378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.554619][T16378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.581094][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.618686][T16423] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 673.639204][T16378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.653733][T16423] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 673.820876][T16430] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 674.139792][T16428] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2226'. [ 674.343325][ T5868] Bluetooth: hci3: command tx timeout [ 674.818306][T16434] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 675.716878][T16445] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 675.738794][T16445] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 675.960490][T16378] hsr_slave_0: entered promiscuous mode [ 676.009926][T16378] hsr_slave_1: entered promiscuous mode [ 676.040808][T16378] debugfs: 'hsr0' already exists in 'hsr' [ 676.157118][T16378] Cannot create hsr debugfs directory [ 676.412872][ T5868] Bluetooth: hci3: command tx timeout [ 677.089906][T16464] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 677.260975][T16463] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2231'. [ 677.505228][ T9607] hsr_slave_0: left promiscuous mode [ 677.549976][ T9607] hsr_slave_1: left promiscuous mode [ 677.563535][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.596070][ T9607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.620128][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.641028][ T9607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.707013][ T9607] veth1_macvtap: left promiscuous mode [ 677.715370][ T9607] veth0_macvtap: left promiscuous mode [ 677.729756][ T9607] veth1_vlan: left promiscuous mode [ 677.775150][ T9607] veth0_vlan: left promiscuous mode [ 678.431222][T16472] FAULT_INJECTION: forcing a failure. [ 678.431222][T16472] name failslab, interval 1, probability 0, space 0, times 0 [ 678.444601][T16472] CPU: 1 UID: 0 PID: 16472 Comm: syz.5.2234 Not tainted syzkaller #0 PREEMPT(full) [ 678.444637][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 678.444653][T16472] Call Trace: [ 678.444662][T16472] [ 678.444672][T16472] dump_stack_lvl+0x16c/0x1f0 [ 678.444717][T16472] should_fail_ex+0x512/0x640 [ 678.444754][T16472] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 678.444787][T16472] should_failslab+0xc2/0x120 [ 678.444822][T16472] __kmalloc_cache_noprof+0x6a/0x3e0 [ 678.444850][T16472] ? subflow_create_ctx+0x9b/0x2c0 [ 678.444895][T16472] subflow_create_ctx+0x9b/0x2c0 [ 678.444936][T16472] subflow_ulp_init+0xc3/0x4d0 [ 678.444976][T16472] tcp_set_ulp+0x326/0x7f0 [ 678.445006][T16472] mptcp_subflow_create_socket+0x361/0xed0 [ 678.445033][T16472] ? futex_unqueue+0x133/0x2c0 [ 678.445062][T16472] ? aa_label_sk_perm+0x195/0x600 [ 678.445100][T16472] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 678.445130][T16472] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 678.445162][T16472] ? __futex_wait+0x24c/0x2f0 [ 678.445205][T16472] __mptcp_nmpc_sk+0x182/0x890 [ 678.445245][T16472] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 678.445288][T16472] mptcp_connect+0x7e/0xae0 [ 678.445325][T16472] __inet_stream_connect+0x917/0xf60 [ 678.445367][T16472] ? __pfx___inet_stream_connect+0x10/0x10 [ 678.445399][T16472] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 678.445442][T16472] ? __pfx_inet_stream_connect+0x10/0x10 [ 678.445475][T16472] ? __local_bh_enable_ip+0xa4/0x120 [ 678.445510][T16472] ? __pfx_inet_stream_connect+0x10/0x10 [ 678.445539][T16472] inet_stream_connect+0x57/0xa0 [ 678.445572][T16472] __sys_connect_file+0x141/0x1a0 [ 678.445610][T16472] __sys_connect+0x13b/0x160 [ 678.445643][T16472] ? __pfx___sys_connect+0x10/0x10 [ 678.445689][T16472] ? xfd_validate_state+0x61/0x180 [ 678.445723][T16472] ? __pfx_do_writev+0x10/0x10 [ 678.445760][T16472] __x64_sys_connect+0x72/0xb0 [ 678.445791][T16472] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.445827][T16472] do_syscall_64+0xcd/0x4c0 [ 678.445855][T16472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.445881][T16472] RIP: 0033:0x7fb50c38eec9 [ 678.445902][T16472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.445927][T16472] RSP: 002b:00007fb50d1d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 678.445952][T16472] RAX: ffffffffffffffda RBX: 00007fb50c5e5fa0 RCX: 00007fb50c38eec9 [ 678.445970][T16472] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000003 [ 678.445985][T16472] RBP: 00007fb50c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.446001][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.446016][T16472] R13: 00007fb50c5e6038 R14: 00007fb50c5e5fa0 R15: 00007ffed88d82b8 [ 678.446054][T16472] [ 678.485658][ T5868] Bluetooth: hci3: command tx timeout [ 678.832557][ T9607] team0 (unregistering): Port device team_slave_1 removed [ 678.875437][ T9607] team0 (unregistering): Port device team_slave_0 removed [ 679.166189][T16463] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 679.193334][T16463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 679.230710][T16463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 679.843769][T16378] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 679.856299][T16378] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.868226][T16378] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.879651][T16378] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 679.980278][T16378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.004802][T16378] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.022112][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.029341][ T9599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.048024][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.055233][ T9599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.391494][T16378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.474541][T16378] veth0_vlan: entered promiscuous mode [ 680.492549][T16378] veth1_vlan: entered promiscuous mode [ 680.544994][T16378] veth0_macvtap: entered promiscuous mode [ 680.557597][T16378] veth1_macvtap: entered promiscuous mode [ 680.583882][T16378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.604340][T16378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.619618][ T9632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.633242][ T9632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.649964][ T9632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.659898][ T9632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.768030][ T9587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.795050][ T9587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.836229][ T9599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.848183][ T9599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.976119][T16523] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.027935][T16528] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.066817][T16530] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 681.078907][T16528] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.108764][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.116916][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.160591][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.160655][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.160712][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.160765][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.160821][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.228054][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.228162][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 681.228223][T16530] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 682.003899][T16549] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.021769][T16549] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.070814][T16549] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 682.112072][T16552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.148199][T16552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.944677][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 682.951154][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.297819][ T30] audit: type=1800 audit(4294967365.760:21): pid=16563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2238" name="dbroot" dev="configfs" ino=59971 res=0 errno=0 [ 684.528063][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 684.907260][T16602] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 685.955085][T16615] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 685.968623][T16615] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 686.097414][T16619] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2255'. [ 686.461154][T16631] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 686.473995][T16630] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 686.518450][T16631] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2257'. [ 686.859667][T16628] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2256'. [ 688.075622][T16648] bridge0: port 3(gretap0) entered blocking state [ 688.082532][T16648] bridge0: port 3(gretap0) entered disabled state [ 688.089551][T16648] gretap0: entered allmulticast mode [ 688.099338][T16648] gretap0: entered promiscuous mode [ 688.105877][T16648] bridge0: port 3(gretap0) entered blocking state [ 688.112461][T16648] bridge0: port 3(gretap0) entered forwarding state [ 688.262630][T16650] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 689.287616][T16663] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 689.456571][T16666] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 689.490616][T16666] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 690.685381][ T30] audit: type=1800 audit(4294967373.178:22): pid=16678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2269" name="dbroot" dev="configfs" ino=60693 res=0 errno=0 [ 691.499166][T16695] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 691.715775][T16691] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2271'. [ 692.397455][T16707] Console: switching to colour VGA+ 80x25 [ 692.591758][T16709] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 693.820138][T16735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 693.859396][T16735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 695.611835][ T30] audit: type=1800 audit(4294967378.134:23): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2283" name="dbroot" dev="configfs" ino=60980 res=0 errno=0 [ 695.697212][ T5868] Bluetooth: hci3: Malformed HCI Event [ 695.777409][T16757] bridge0: port 3(gretap0) entered blocking state [ 695.784181][T16757] bridge0: port 3(gretap0) entered disabled state [ 695.791025][T16757] gretap0: entered allmulticast mode [ 695.800707][T16757] gretap0: entered promiscuous mode [ 695.842913][T16757] bridge0: port 3(gretap0) entered blocking state [ 695.849427][T16757] bridge0: port 3(gretap0) entered forwarding state [ 695.992112][T16759] FAULT_INJECTION: forcing a failure. [ 695.992112][T16759] name failslab, interval 1, probability 0, space 0, times 0 [ 696.005263][T16759] CPU: 1 UID: 0 PID: 16759 Comm: syz.5.2285 Not tainted syzkaller #0 PREEMPT(full) [ 696.005287][T16759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.005296][T16759] Call Trace: [ 696.005301][T16759] [ 696.005307][T16759] dump_stack_lvl+0x16c/0x1f0 [ 696.005335][T16759] should_fail_ex+0x512/0x640 [ 696.005357][T16759] ? fs_reclaim_acquire+0xae/0x150 [ 696.005381][T16759] ? tomoyo_encode2+0x100/0x3e0 [ 696.005401][T16759] should_failslab+0xc2/0x120 [ 696.005420][T16759] __kmalloc_noprof+0xd2/0x510 [ 696.005442][T16759] tomoyo_encode2+0x100/0x3e0 [ 696.005464][T16759] tomoyo_encode+0x29/0x50 [ 696.005483][T16759] tomoyo_realpath_from_path+0x18f/0x6e0 [ 696.005509][T16759] tomoyo_check_open_permission+0x2ab/0x3c0 [ 696.005526][T16759] ? security_file_alloc+0x34/0x2b0 [ 696.005545][T16759] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 696.005563][T16759] ? pidfs_alloc_file+0x18f/0x290 [ 696.005577][T16759] ? do_syscall_64+0xcd/0x4c0 [ 696.005589][T16759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.005621][T16759] ? find_held_lock+0x2b/0x80 [ 696.005640][T16759] tomoyo_file_open+0x6b/0x90 [ 696.005654][T16759] security_file_open+0x84/0x1e0 [ 696.005674][T16759] do_dentry_open+0x596/0x1530 [ 696.005698][T16759] vfs_open+0x82/0x3f0 [ 696.005721][T16759] dentry_open+0x71/0xd0 [ 696.005742][T16759] pidfs_alloc_file+0x18f/0x290 [ 696.005755][T16759] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 696.005771][T16759] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.005792][T16759] pidfd_prepare+0x129/0x200 [ 696.005811][T16759] __x64_sys_pidfd_open+0x105/0x1a0 [ 696.005833][T16759] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 696.005857][T16759] ? rcu_is_watching+0x12/0xc0 [ 696.005873][T16759] do_syscall_64+0xcd/0x4c0 [ 696.005887][T16759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.005900][T16759] RIP: 0033:0x7fb50c38eec9 [ 696.005913][T16759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.005926][T16759] RSP: 002b:00007fb50d1d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 696.005940][T16759] RAX: ffffffffffffffda RBX: 00007fb50c5e5fa0 RCX: 00007fb50c38eec9 [ 696.005949][T16759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 696.005958][T16759] RBP: 00007fb50c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 696.005966][T16759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.005974][T16759] R13: 00007fb50c5e6038 R14: 00007fb50c5e5fa0 R15: 00007ffed88d82b8 [ 696.005993][T16759] [ 696.006037][T16759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 697.393677][T16782] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.732607][T16788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.788635][T16788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.937884][ T30] audit: type=1800 audit(4294967380.466:24): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2293" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 698.466177][T16796] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 698.527020][T16796] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 699.249544][T16803] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 699.498570][T16802] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2303'. [ 700.752678][T16828] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.217630][T16848] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2306'. [ 701.445556][T16851] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 703.944731][T16902] random: crng reseeded on system resumption [ 704.998999][T16917] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 705.241017][T16916] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2328'. [ 706.092438][T16929] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 706.110767][T16929] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 706.348184][T16936] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 706.788636][T16943] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.006209][T16942] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2324'. [ 707.387472][T16945] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2327'. [ 709.166545][T16976] FAULT_INJECTION: forcing a failure. [ 709.166545][T16976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.213090][T16976] CPU: 0 UID: 0 PID: 16976 Comm: syz.3.2333 Not tainted syzkaller #0 PREEMPT(full) [ 709.213124][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 709.213137][T16976] Call Trace: [ 709.213145][T16976] [ 709.213154][T16976] dump_stack_lvl+0x16c/0x1f0 [ 709.213203][T16976] should_fail_ex+0x512/0x640 [ 709.213241][T16976] _copy_from_user+0x2e/0xd0 [ 709.213268][T16976] io_uring_setup+0xb4/0x20c0 [ 709.213302][T16976] ? __pfx_io_uring_setup+0x10/0x10 [ 709.213332][T16976] ? do_futex+0x122/0x350 [ 709.213363][T16976] ? __pfx_do_futex+0x10/0x10 [ 709.213394][T16976] ? find_held_lock+0x2b/0x80 [ 709.213432][T16976] ? xfd_validate_state+0x61/0x180 [ 709.213464][T16976] ? bpf_lsm_capable+0x9/0x10 [ 709.213493][T16976] __x64_sys_io_uring_setup+0xc2/0x170 [ 709.213526][T16976] do_syscall_64+0xcd/0x4c0 [ 709.213549][T16976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.213572][T16976] RIP: 0033:0x7f508338eec9 [ 709.213590][T16976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.213612][T16976] RSP: 002b:00007f5084250038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 709.213635][T16976] RAX: ffffffffffffffda RBX: 00007f50835e5fa0 RCX: 00007f508338eec9 [ 709.213651][T16976] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 709.213664][T16976] RBP: 00007f5083411f91 R08: 0000000000000000 R09: 0000000000000000 [ 709.213678][T16976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.213693][T16976] R13: 00007f50835e6038 R14: 00007f50835e5fa0 R15: 00007fff23948e08 [ 709.213724][T16976] [ 709.440141][T16985] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 709.458457][T16985] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 709.925984][T16987] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 710.156584][T16987] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2334'. [ 710.575585][T16997] FAULT_INJECTION: forcing a failure. [ 710.575585][T16997] name failslab, interval 1, probability 0, space 0, times 0 [ 710.589902][T16997] CPU: 0 UID: 0 PID: 16997 Comm: syz.2.2337 Not tainted syzkaller #0 PREEMPT(full) [ 710.589937][T16997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.589953][T16997] Call Trace: [ 710.589962][T16997] [ 710.589973][T16997] dump_stack_lvl+0x16c/0x1f0 [ 710.590017][T16997] should_fail_ex+0x512/0x640 [ 710.590054][T16997] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 710.590091][T16997] should_failslab+0xc2/0x120 [ 710.590124][T16997] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 710.590157][T16997] ? __d_alloc+0x32/0xae0 [ 710.590194][T16997] __d_alloc+0x32/0xae0 [ 710.590230][T16997] d_alloc_parallel+0x111/0x1480 [ 710.590284][T16997] ? __pfx_d_alloc_parallel+0x10/0x10 [ 710.590326][T16997] ? lockdep_init_map_type+0x5c/0x280 [ 710.590363][T16997] ? lockdep_init_map_type+0x5c/0x280 [ 710.590404][T16997] __lookup_slow+0x193/0x460 [ 710.590444][T16997] ? __pfx___lookup_slow+0x10/0x10 [ 710.590486][T16997] ? perf_trace_mm_compaction_suitable_template+0x3a0/0x5e0 [ 710.590533][T16997] ? perf_trace_mm_compaction_suitable_template+0x3a0/0x5e0 [ 710.590572][T16997] ? d_lookup+0xe7/0x190 [ 710.590615][T16997] lookup_noperm+0xe1/0x110 [ 710.590654][T16997] simple_start_creating+0xd1/0x1b0 [ 710.590685][T16997] start_creating.part.0+0x82/0x190 [ 710.590716][T16997] __debugfs_create_file+0xa7/0x6b0 [ 710.590769][T16997] debugfs_create_file_full+0x41/0x60 [ 710.590805][T16997] ref_tracker_dir_debugfs+0x19d/0x290 [ 710.590833][T16997] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 710.590895][T16997] ? lockdep_init_map_type+0x5c/0x280 [ 710.590935][T16997] preinit_net+0x296/0x8f0 [ 710.590975][T16997] copy_net_ns+0x1da/0x5f0 [ 710.591006][T16997] create_new_namespaces+0x3ea/0xa90 [ 710.591045][T16997] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 710.591078][T16997] ksys_unshare+0x45b/0xa40 [ 710.591113][T16997] ? __pfx_ksys_unshare+0x10/0x10 [ 710.591148][T16997] ? xfd_validate_state+0x61/0x180 [ 710.591195][T16997] __x64_sys_unshare+0x31/0x40 [ 710.591228][T16997] do_syscall_64+0xcd/0x4c0 [ 710.591255][T16997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.591281][T16997] RIP: 0033:0x7fd1f018eec9 [ 710.591302][T16997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.591327][T16997] RSP: 002b:00007fd1f0f44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 710.591352][T16997] RAX: ffffffffffffffda RBX: 00007fd1f03e5fa0 RCX: 00007fd1f018eec9 [ 710.591370][T16997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 710.591386][T16997] RBP: 00007fd1f0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 710.591402][T16997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.591419][T16997] R13: 00007fd1f03e6038 R14: 00007fd1f03e5fa0 R15: 00007ffe7d730128 [ 710.591456][T16997] [ 710.993242][T16996] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 711.403103][T17010] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 711.873135][T17006] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2339'. [ 712.359758][T17025] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 712.393859][T17025] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.379879][T17040] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.468794][T17040] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2348'. [ 713.490540][T17043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 713.597970][T17043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 714.087871][T17052] random: crng reseeded on system resumption [ 715.776992][T17083] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 718.187664][T17123] random: crng reseeded on system resumption [ 719.012412][T17146] FAULT_INJECTION: forcing a failure. [ 719.012412][T17146] name fail_futex, interval 1, probability 0, space 0, times 0 [ 719.031203][T17146] CPU: 0 UID: 0 PID: 17146 Comm: syz.4.2374 Not tainted syzkaller #0 PREEMPT(full) [ 719.031224][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 719.031233][T17146] Call Trace: [ 719.031238][T17146] [ 719.031244][T17146] dump_stack_lvl+0x16c/0x1f0 [ 719.031271][T17146] should_fail_ex+0x512/0x640 [ 719.031296][T17146] get_futex_key+0xff0/0x1560 [ 719.031317][T17146] ? __pfx_get_futex_key+0x10/0x10 [ 719.031333][T17146] ? __mutex_trylock_common+0xe9/0x250 [ 719.031358][T17146] futex_wake+0xea/0x530 [ 719.031380][T17146] ? __pfx_futex_wake+0x10/0x10 [ 719.031408][T17146] do_futex+0x1e3/0x350 [ 719.031426][T17146] ? __pfx_do_futex+0x10/0x10 [ 719.031443][T17146] ? __might_fault+0xe3/0x190 [ 719.031464][T17146] mm_release+0x24e/0x300 [ 719.031482][T17146] do_exit+0x68e/0x2bf0 [ 719.031505][T17146] ? __pfx_do_exit+0x10/0x10 [ 719.031524][T17146] ? do_raw_spin_lock+0x12c/0x2b0 [ 719.031544][T17146] ? find_held_lock+0x2b/0x80 [ 719.031561][T17146] do_group_exit+0xd3/0x2a0 [ 719.031582][T17146] get_signal+0x2673/0x26d0 [ 719.031605][T17146] ? __pfx_get_signal+0x10/0x10 [ 719.031621][T17146] ? do_futex+0x122/0x350 [ 719.031638][T17146] ? __pfx_do_futex+0x10/0x10 [ 719.031658][T17146] arch_do_signal_or_restart+0x8f/0x790 [ 719.031678][T17146] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 719.031700][T17146] ? ksys_mmap_pgoff+0x85/0x5c0 [ 719.031719][T17146] ? xfd_validate_state+0x61/0x180 [ 719.031739][T17146] ? __pfx_do_writev+0x10/0x10 [ 719.031759][T17146] exit_to_user_mode_loop+0x84/0x110 [ 719.031781][T17146] do_syscall_64+0x41c/0x4c0 [ 719.031795][T17146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.031809][T17146] RIP: 0033:0x7f577538eec9 [ 719.031824][T17146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.031837][T17146] RSP: 002b:00007f57762a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 719.031851][T17146] RAX: fffffffffffffe00 RBX: 00007f57755e6098 RCX: 00007f577538eec9 [ 719.031860][T17146] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57755e6098 [ 719.031868][T17146] RBP: 00007f57755e6090 R08: 0000000000000000 R09: 0000000000000000 [ 719.031877][T17146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.031885][T17146] R13: 00007f57755e6128 R14: 00007fffe42656f0 R15: 00007fffe42657d8 [ 719.031903][T17146] [ 721.752862][T17196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 721.821655][T17197] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 722.998448][T17215] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 723.482951][T17231] raw_sendmsg: syz.5.2393 forgot to set AF_INET. Fix it! [ 723.802381][T17237] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 723.893060][T17237] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 724.301608][T17246] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 724.316389][T17246] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 725.811897][T17263] random: crng reseeded on system resumption [ 726.575222][T17252] delete_channel: no stack [ 728.027193][T17296] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 728.068979][T17296] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 728.145699][T17306] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 728.240676][T17301] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2414'. [ 729.223610][T17320] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 729.322708][T17321] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 731.209579][T17361] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 731.386804][T17361] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 731.678472][T17369] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 731.690851][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 731.709170][T17369] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.639520][T17381] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.668156][T17381] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.847841][T17388] random: crng reseeded on system resumption [ 733.586309][T17399] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 733.836831][T17398] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2427'. [ 734.965342][T17425] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 734.977107][T17425] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 735.949935][T17446] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 736.118312][T17445] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2436'. [ 736.685546][T17451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2439'. [ 738.036307][T17483] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2445'. [ 738.549695][T17494] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 739.764881][T17521] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 740.511147][T17543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 741.021880][T17532] random: crng reseeded on system resumption [ 741.046633][T17542] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2454'. [ 741.447051][T17557] random: crng reseeded on system resumption [ 742.560462][T17579] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 742.960604][T17573] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2456'. [ 743.050799][T17584] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 744.066231][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.076116][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.200899][T17591] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 744.201268][T17582] copy_params: 54 callbacks suppressed [ 744.201284][T17582] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 744.277296][T17593] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 744.319719][T17593] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 745.811772][T17612] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 745.895674][T17612] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2466'. [ 746.010025][ T5868] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 746.914066][T17625] zswap: compressor not available [ 747.947615][T17648] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 748.213304][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2472'. [ 748.332492][T17654] overlayfs: missing 'lowerdir' [ 749.567179][T17679] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 749.914364][T17678] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2475'. [ 749.998825][T17683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.021690][T17683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.914437][T17688] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.933793][T17688] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 751.464004][T17706] bridge0: port 4(team0) entered blocking state [ 751.483483][T17706] bridge0: port 4(team0) entered disabled state [ 751.512347][T17709] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 751.542200][T17706] team0: entered allmulticast mode [ 751.563800][T17706] team_slave_0: entered allmulticast mode [ 751.578946][T17706] team_slave_1: entered allmulticast mode [ 751.625926][T17706] team0: entered promiscuous mode [ 751.628409][T17707] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2481'. [ 751.631116][T17706] team_slave_0: entered promiscuous mode [ 751.664563][T17706] team_slave_1: entered promiscuous mode [ 751.711486][T17706] bridge0: port 4(team0) entered blocking state [ 751.718711][T17706] bridge0: port 4(team0) entered forwarding state [ 752.365285][T17718] random: crng reseeded on system resumption [ 752.424382][T17719] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 752.730166][T17719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2483'. [ 753.101844][T17728] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 753.275948][T17727] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2484'. [ 753.451686][T17735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 753.527020][T17735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 753.963962][T17741] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.112296][T17741] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2488'. [ 754.581944][T17753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.625933][T17754] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.804167][T17752] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2490'. [ 754.844403][T17747] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2489'. [ 755.690919][ T5868] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 755.758671][T17779] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.114914][T17778] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2493'. [ 756.405116][T17795] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.475061][T17798] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.541300][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'. [ 757.645598][T17816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 757.725656][T17816] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2500'. [ 758.896660][T17838] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 758.985395][T17831] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 759.088545][T17831] CIFS mount error: No usable UNC path provided in device string! [ 759.088545][T17831] [ 759.139043][T17831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 759.351070][T17836] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2504'. [ 760.872633][T17853] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 761.059443][ T51] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 761.815086][T17871] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 762.244102][T17869] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2509'. [ 764.866983][T17935] bridge0: port 3(team0) entered blocking state [ 764.878097][T17935] bridge0: port 3(team0) entered disabled state [ 764.885234][T17935] team0: entered allmulticast mode [ 764.890484][T17935] team_slave_0: entered allmulticast mode [ 764.898495][T17935] team_slave_1: entered allmulticast mode [ 764.983321][T17935] team0: entered promiscuous mode [ 765.013377][T17935] team_slave_0: entered promiscuous mode [ 765.106091][T17935] team_slave_1: entered promiscuous mode [ 765.165545][T17935] bridge0: port 3(team0) entered blocking state [ 765.171922][T17935] bridge0: port 3(team0) entered forwarding state [ 765.622391][T17953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 766.243038][ T30] audit: type=1800 audit(4294967325.849:25): pid=17964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2524" name="lu_gp_id" dev="configfs" ino=69940 res=0 errno=0 [ 766.581010][T17970] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 766.616538][T17970] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 766.622201][T17973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2526'. [ 768.576274][T18005] ima: policy update failed [ 768.591183][ T30] audit: type=1802 audit(4294967328.201:26): pid=18005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2533" res=0 errno=0 [ 768.675976][T18011] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 770.211932][T18038] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 770.311401][T18040] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 770.399451][T18040] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 771.239105][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 771.844090][ T9607] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.885733][T18073] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 771.928399][T18068] CIFS mount error: No usable UNC path provided in device string! [ 771.928399][T18068] [ 771.964549][ T9607] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.980230][T18072] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2544'. [ 771.996575][ T9607] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.025355][ T9607] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.065180][T18068] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 773.700945][T18105] nvme_fcloop: unknown parameter or missing value '7' [ 774.969054][T18117] netlink: 'syz.2.2552': attribute type 5 has an invalid length. [ 775.010777][T18116] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(768.8192.108), cmd(6) [ 775.011902][T18117] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 775.049840][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 776.608790][T18133] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2556'. [ 777.356482][T18133] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 777.367111][T18133] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 777.437633][T18133] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 778.832844][T18195] nvme_fcloop: unknown parameter or missing value '7' [ 780.656705][T18225] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2571'. [ 780.705272][T18217] pty pty185: ldisc open failed (-12), clearing slot 185 [ 781.410206][T18239] FAULT_INJECTION: forcing a failure. [ 781.410206][T18239] name failslab, interval 1, probability 0, space 0, times 0 [ 781.424460][T18239] CPU: 0 UID: 0 PID: 18239 Comm: syz.4.2574 Not tainted syzkaller #0 PREEMPT(full) [ 781.424493][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 781.424508][T18239] Call Trace: [ 781.424516][T18239] [ 781.424526][T18239] dump_stack_lvl+0x16c/0x1f0 [ 781.424570][T18239] should_fail_ex+0x512/0x640 [ 781.424610][T18239] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 781.424647][T18239] should_failslab+0xc2/0x120 [ 781.424681][T18239] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 781.424714][T18239] ? mqueue_alloc_inode+0x25/0x50 [ 781.424754][T18239] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 781.424779][T18239] mqueue_alloc_inode+0x25/0x50 [ 781.424805][T18239] alloc_inode+0x64/0x240 [ 781.424844][T18239] new_inode+0x22/0x1c0 [ 781.424883][T18239] mqueue_get_inode+0x2e/0xdd0 [ 781.424916][T18239] mqueue_create_attr+0x261/0x440 [ 781.424950][T18239] vfs_mkobj+0x3d8/0x620 [ 781.424974][T18239] ? __pfx_mqueue_create_attr+0x10/0x10 [ 781.425004][T18239] do_mq_open+0x71e/0x8c0 [ 781.425036][T18239] ? __pfx_do_mq_open+0x10/0x10 [ 781.425073][T18239] __x64_sys_mq_open+0x155/0x1e0 [ 781.425101][T18239] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 781.425148][T18239] do_syscall_64+0xcd/0x4c0 [ 781.425176][T18239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.425203][T18239] RIP: 0033:0x7f577538eec9 [ 781.425226][T18239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.425251][T18239] RSP: 002b:00007f57762a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 781.425277][T18239] RAX: ffffffffffffffda RBX: 00007f57755e6090 RCX: 00007f577538eec9 [ 781.425295][T18239] RDX: 000000000000b9fb RSI: 00000000000061df RDI: 0000200000000040 [ 781.425312][T18239] RBP: 00007f5775411f91 R08: 0000000000000000 R09: 0000000000000000 [ 781.425329][T18239] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 781.425346][T18239] R13: 00007f57755e6128 R14: 00007f57755e6090 R15: 00007fffe42657d8 [ 781.425383][T18239] [ 782.374948][T18244] random: crng reseeded on system resumption [ 789.660522][T18359] FAULT_INJECTION: forcing a failure. [ 789.660522][T18359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.693869][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.2.2600 Not tainted syzkaller #0 PREEMPT(full) [ 789.693903][T18359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 789.693918][T18359] Call Trace: [ 789.693926][T18359] [ 789.693935][T18359] dump_stack_lvl+0x16c/0x1f0 [ 789.693976][T18359] should_fail_ex+0x512/0x640 [ 789.694014][T18359] _copy_to_user+0x32/0xd0 [ 789.694042][T18359] simple_read_from_buffer+0xcb/0x170 [ 789.694069][T18359] proc_fail_nth_read+0x197/0x240 [ 789.694096][T18359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.694133][T18359] ? rw_verify_area+0xcf/0x6c0 [ 789.694159][T18359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.694186][T18359] vfs_read+0x1e4/0xcf0 [ 789.694219][T18359] ? __pfx___mutex_lock+0x10/0x10 [ 789.694242][T18359] ? __pfx_vfs_read+0x10/0x10 [ 789.694280][T18359] ? __fget_files+0x20e/0x3c0 [ 789.694303][T18359] ? __ia32_compat_sys_old_shmctl+0x30/0xc0 [ 789.694351][T18359] ksys_read+0x12a/0x250 [ 789.694376][T18359] ? __pfx_ksys_read+0x10/0x10 [ 789.694402][T18359] ? __pfx___x64_sys_shmat+0x10/0x10 [ 789.694444][T18359] do_syscall_64+0xcd/0x4c0 [ 789.694468][T18359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.694493][T18359] RIP: 0033:0x7fd1f018d8dc [ 789.694512][T18359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 789.694536][T18359] RSP: 002b:00007fd1ee3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.694560][T18359] RAX: ffffffffffffffda RBX: 00007fd1f03e6090 RCX: 00007fd1f018d8dc [ 789.694577][T18359] RDX: 000000000000000f RSI: 00007fd1ee3f60a0 RDI: 0000000000000009 [ 789.694592][T18359] RBP: 00007fd1ee3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 789.694608][T18359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.694623][T18359] R13: 00007fd1f03e6128 R14: 00007fd1f03e6090 R15: 00007ffe7d730128 [ 789.694659][T18359] [ 791.046628][T18367] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2602'. [ 791.390338][T18374] random: crng reseeded on system resumption [ 791.971747][T18360] Bluetooth: hci3: command 0x0406 tx timeout [ 792.795208][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'. [ 792.839903][T18403] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2610'. [ 793.850250][T18422] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2614'. [ 794.419457][T18428] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2615'. [ 797.421016][T18488] Console: switching to colour frame buffer device 128x48 [ 797.608979][T18497] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 797.616826][T18497] #PF: supervisor instruction fetch in kernel mode [ 797.623337][T18497] #PF: error_code(0x0010) - not-present page [ 797.629324][T18497] PGD 8000000025197067 P4D 8000000025197067 PUD 0 [ 797.635857][T18497] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 797.641245][T18497] CPU: 1 UID: 0 PID: 18497 Comm: syz.4.2635 Not tainted syzkaller #0 PREEMPT(full) [ 797.650629][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 797.660698][T18497] RIP: 0010:0x0 [ 797.664173][T18497] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 797.671529][T18497] RSP: 0018:ffffc90012e679c8 EFLAGS: 00010287 [ 797.677591][T18497] RAX: 000000000000092d RBX: 0000000000000000 RCX: ffffc900189d9000 [ 797.685560][T18497] RDX: 0000000000080000 RSI: ffffea00021d72c0 RDI: ffff88807818d340 [ 797.693529][T18497] RBP: ffffea00021d72c0 R08: 0000000000000007 R09: 0000000000000000 [ 797.701492][T18497] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920025ccf3a [ 797.709468][T18497] R13: ffff88807818d340 R14: 0000000000000000 R15: dffffc0000000000 [ 797.717439][T18497] FS: 00007f57762c16c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 797.726384][T18497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 797.732976][T18497] CR2: ffffffffffffffd6 CR3: 000000007a8e2000 CR4: 00000000003526f0 [ 797.740940][T18497] Call Trace: [ 797.744208][T18497] [ 797.747129][T18497] filemap_read_folio+0xc5/0x2a0 [ 797.752071][T18497] ? __pfx_filemap_read_folio+0x10/0x10 [ 797.757617][T18497] ? __filemap_get_folio+0x32b/0xc30 [ 797.762903][T18497] ? down_read+0x13d/0x480 [ 797.767311][T18497] do_read_cache_folio+0x263/0x5c0 [ 797.772421][T18497] freader_get_folio+0x337/0x930 [ 797.777360][T18497] freader_fetch+0xc2/0x5e0 [ 797.781864][T18497] ? mt_find+0x3ef/0xa30 [ 797.786104][T18497] __build_id_parse.isra.0+0xec/0x7a0 [ 797.791480][T18497] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 797.797469][T18497] ? __pfx_find_vma+0x10/0x10 [ 797.802149][T18497] do_procmap_query+0xd96/0x1090 [ 797.807086][T18497] ? __pfx_do_procmap_query+0x10/0x10 [ 797.812474][T18497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 797.818374][T18497] ? do_vfs_ioctl+0x128/0x14f0 [ 797.823149][T18497] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 797.828188][T18497] ? __fget_files+0x20e/0x3c0 [ 797.832863][T18497] procfs_procmap_ioctl+0x7d/0xb0 [ 797.837903][T18497] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 797.843619][T18497] __x64_sys_ioctl+0x18e/0x210 [ 797.848385][T18497] do_syscall_64+0xcd/0x4c0 [ 797.852885][T18497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.858770][T18497] RIP: 0033:0x7f577538eec9 [ 797.863207][T18497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.882809][T18497] RSP: 002b:00007f57762c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.891218][T18497] RAX: ffffffffffffffda RBX: 00007f57755e5fa0 RCX: 00007f577538eec9 [ 797.899185][T18497] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000004 [ 797.907144][T18497] RBP: 00007f5775411f91 R08: 0000000000000000 R09: 0000000000000000 [ 797.915106][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.923065][T18497] R13: 00007f57755e6038 R14: 00007f57755e5fa0 R15: 00007fffe42657d8 [ 797.931033][T18497] [ 797.934043][T18497] Modules linked in: [ 797.937933][T18497] CR2: 0000000000000000 [ 797.942082][T18497] ---[ end trace 0000000000000000 ]--- [ 797.947518][T18497] RIP: 0010:0x0 [ 797.950973][T18497] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 797.958320][T18497] RSP: 0018:ffffc90012e679c8 EFLAGS: 00010287 [ 797.964373][T18497] RAX: 000000000000092d RBX: 0000000000000000 RCX: ffffc900189d9000 [ 797.972337][T18497] RDX: 0000000000080000 RSI: ffffea00021d72c0 RDI: ffff88807818d340 [ 797.980298][T18497] RBP: ffffea00021d72c0 R08: 0000000000000007 R09: 0000000000000000 [ 797.988257][T18497] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920025ccf3a [ 797.996224][T18497] R13: ffff88807818d340 R14: 0000000000000000 R15: dffffc0000000000 [ 798.004183][T18497] FS: 00007f57762c16c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 798.013106][T18497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.019680][T18497] CR2: ffffffffffffffd6 CR3: 000000007a8e2000 CR4: 00000000003526f0 [ 798.027643][T18497] Kernel panic - not syncing: Fatal exception [ 798.033944][T18497] Kernel Offset: disabled [ 798.038248][T18497] Rebooting in 86400 seconds..