last executing test programs: 10m9.048748115s ago: executing program 0 (id=1062): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setfsuid$auto(0xee01) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800007}, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x92bacacda52c840b) socket(0x1e, 0x1, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r1, 0x4020ae76, r3) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_OFD_SETLK(r4, 0x25, 0xff) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000090) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) socket(0x2, 0x80000, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 10m7.984932737s ago: executing program 0 (id=1072): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0xea5003, 0x0) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f0000000200)="f645aed4530da95ce1ad6b601b03da2c34f89009e62eca989f75496c161d717507ccbcd93d125ce7344777ea37eeaff2fec183dd59d0f195435f3a924e257e5072e9ceaf7b8cde138509daecec2ac4b61b47c5b18a7cc09ef2") rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_SG_GET_TIMEOUT2(r1, 0x2202, &(0x7f0000000040)="75486ace85bbeb4813bbce9bc10e72a90546498938432a396ffd85dd8b89398776634cea130b1d7402385def673f") socket(0xa, 0x3, 0x87) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BTRFS_IOC_DEFRAG(r1, 0x50009402, &(0x7f0000000680)={@inferred=r2, "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"}) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) setxattrat$auto(0xffffffffffffffff, 0x0, 0xc24, 0x0, 0x0, 0x20005b) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48a, 0x400, 0x9}]}) getsockopt$auto_SO_TIMESTAMP_NEW(r3, 0x100, 0x3f, &(0x7f0000000080)='(\x00', &(0x7f0000000100)=0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r5) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="3b235d602d9b4e4ce6cf44d45a20236618945a84450bdbd23a75afda5d8c0516e30923c45764452546c923", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf258c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001040000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) madvise$auto(0x0, 0x6003f0, 0x14) 10m7.715675459s ago: executing program 0 (id=1074): mmap$auto(0x0, 0x4020009, 0x1, 0xeb1, 0x401, 0x40) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0xc042, 0x0) pwritev$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x5}, 0x3, 0x0, 0x5) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) mmap$auto(0x0, 0xf2, 0xb93, 0xeb1, 0xf6f6, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) gettimeofday$auto(0xfffffffffffffffd, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x10) ioctl$auto(r1, 0x3b9d, r0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000080)={0x0, 0x2}, 0x2) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000340), 0x206a00, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) r4 = prctl$auto(0x6, 0x3, 0x0, 0x3f800000000000, 0x1ff) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x808) sendmsg$auto_NFC_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x60, 0x0, 0x2, 0x60bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x33, 0x13, 0x0, 0x1, [@typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@mcast2}, @generic="7bfacdbc74b97239244f3a08e50577a009de4301de69d2", @typed={0x4, 0x136, 0x0, 0x0, @binary}]}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}]}, 0x1c}}, 0x20008010) mmap$auto(0x8, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) 10m7.576186412s ago: executing program 0 (id=1075): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket(0x15, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x44004811}, 0x4040040) 10m7.063197407s ago: executing program 0 (id=1078): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/ethtool/get_err\x00', 0x2002, 0x0) write$auto(r1, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) ptrace$auto(0x10, r2, 0x4, 0x8000) connect$auto(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, 0xf7d) 10m6.492615824s ago: executing program 0 (id=1080): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="20ffffff", @ANYRES16=r2, @ANYBLOB="010039bd0f0000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x0) 10m6.089491661s ago: executing program 32 (id=1080): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="20ffffff", @ANYRES16=r2, @ANYBLOB="010039bd0f0000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x0) 1m51.593701889s ago: executing program 1 (id=3678): mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0xa) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5d0a090845fd280f}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x600, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x6}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x7fffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004811}, 0x40) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000140), 0x14, &(0x7f0000000280)={0x0, 0x4e}, 0x7, 0x0, 0x0, 0x1}, 0x7}, 0x8, 0x8000) 1m51.172075042s ago: executing program 1 (id=3682): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r1, r1, 0x0, 0x46) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x5b, 0x0) socket(0xa, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x40304}, 0x3) socket(0xa, 0x3, 0xff) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x5, 0xa, 0x1000009, 0x5f, 0x4, 0x3}, 0x6f3) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x7}, 0xe) io_setup$auto(0x7ffe, &(0x7f0000000000)) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0xfffffffffffffff4, 0x8, 0x4000000000e5, 0x40eb2, 0xd, 0x300000000000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x1c9802, 0x0) pread64$auto(r4, 0x0, 0x100000000, 0x2000002) 1m50.081631735s ago: executing program 1 (id=3688): mmap$auto(0x4, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4040080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_fops_u16_(0xffffffffffffff9c, 0x0, 0x440, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, 0x0, 0x400) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ppoll$auto(&(0x7f0000000100)={r0, 0x101, 0x24}, 0x4, &(0x7f0000000180)={0x8, 0xd}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r3 = socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) fstat$auto(r3, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) 1m49.56085431s ago: executing program 1 (id=3693): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) write$auto(0xca, 0x0, 0x2d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 1m48.966821114s ago: executing program 1 (id=3696): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r1, r1, 0x0, 0x46) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x5b, 0x0) socket(0xa, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x40304}, 0x3) socket(0xa, 0x3, 0xff) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x5, 0xa, 0x1000009, 0x5f, 0x4, 0x3}, 0x6f3) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x7}, 0xe) io_setup$auto(0x7ffe, &(0x7f0000000000)) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0xfffffffffffffff4, 0x8, 0x4000000000e5, 0x40eb2, 0xd, 0x300000000000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x1c9802, 0x0) pread64$auto(r4, 0x0, 0x100000000, 0x2000002) 1m47.897980737s ago: executing program 1 (id=3702): socket(0x4, 0x2, 0xc) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0x3, 0x711c, 0xffffffffffffffff, 0x8000) (rerun: 32) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x6, 0x2, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/writes_17\x00', 0x337900, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x20) (async, rerun: 32) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x4e800, 0x0) (rerun: 32) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) sync_file_range$auto(r2, 0x1, 0xa31e, 0x7) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) fstat$auto(r1, 0x0) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x20000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x143961, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd80, 0x0) (async) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) (async) semctl$auto(0x1ff, 0x2, 0x4, 0x2000000000000004) fanotify_init$auto(0xb, 0x4000003) getpgrp(0xffffffffffffffff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0xfff, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\xa4\x84\xafBP\xb4\x8e/dev/audi\x04\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x100000001, 0x100000000000004, 0x1004000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) 1m32.734070438s ago: executing program 33 (id=3702): socket(0x4, 0x2, 0xc) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0x3, 0x711c, 0xffffffffffffffff, 0x8000) (rerun: 32) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x6, 0x2, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/writes_17\x00', 0x337900, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x20) (async, rerun: 32) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x4e800, 0x0) (rerun: 32) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) sync_file_range$auto(r2, 0x1, 0xa31e, 0x7) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) fstat$auto(r1, 0x0) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x20000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x143961, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd80, 0x0) (async) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) (async) semctl$auto(0x1ff, 0x2, 0x4, 0x2000000000000004) fanotify_init$auto(0xb, 0x4000003) getpgrp(0xffffffffffffffff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0xfff, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\xa4\x84\xafBP\xb4\x8e/dev/audi\x04\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x100000001, 0x100000000000004, 0x1004000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) 9.734124862s ago: executing program 4 (id=4071): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r1, r1, 0x0, 0x46) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x5b, 0x0) socket(0xa, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x40304}, 0x3) socket(0xa, 0x3, 0xff) bpf$auto(0x0, 0x0, 0x6f3) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x7}, 0xe) io_setup$auto(0x7ffe, &(0x7f0000000000)) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0xfffffffffffffff4, 0x8, 0x4000000000e5, 0x40eb2, 0xd, 0x300000000000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x1c9802, 0x0) pread64$auto(r4, 0x0, 0x100000000, 0x2000002) 8.236759907s ago: executing program 4 (id=4075): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0xfff, 0x1, 0x0, 0x1, 0x10) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/dummy0/forwarding\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x48) mmap$auto(0x8, 0xe46, 0x3, 0x16, r0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) getxattrat$auto(r4, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)="8c08fde9e0", 0xb) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r5, &(0x7f0000000080)=""/228, 0xe4) unlinkat$auto(r1, &(0x7f0000000180)='./file1/file0\x00', 0x400) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 5.577682562s ago: executing program 3 (id=4084): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 5.361925843s ago: executing program 3 (id=4085): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) pipe$auto(0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x900400a3d7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x7, 0x81a6}) socket(0x2, 0x1, 0x0) r3 = getsockopt$auto(r1, 0x100005, 0x23, 0x0, &(0x7f0000000040)=0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x3, 0x19, 0xfffffffffffffffa, 0xb) madvise$auto(0xffffffffffff7ffe, 0x2000040080000044, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x4000, 0xffffffffffff0001, 0x1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x509100, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f0, 0x15) 4.952446007s ago: executing program 4 (id=4088): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) socket(0x2, 0x80002, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x3, r0, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 4.916678418s ago: executing program 5 (id=4089): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x4, 0x20, 0x0, 0x2c, 0x2d, 0x7, 0x3}) 4.486150017s ago: executing program 5 (id=4090): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x4, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) io_uring_setup$auto(0x4bf15e09, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x88, 0x9, 0xffffffffffffffff, [0x103, 0x9, 0x7f], {0x2, 0x7, 0x3030, 0x10, 0xf, 0x9, 0x5, 0xfffffff9, 0xf08a2b3}, {0x8, 0x9, 0x8, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x4}}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0285443, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000280)='batad,0\x00', 0x7) madvise$auto(0x200000, 0x7fffffffc0000001, 0xa) setns(r0, 0x0) syz_clone(0x8200000, 0x0, 0x6, 0x0, 0x0, 0x0) socket(0x9, 0x2, 0x7) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffffe, 0x40000000000006, 0x9, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0xa747, 0x9, 0x804}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.388626292s ago: executing program 4 (id=4091): close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, '\v\x00\x00\x00\x00\x00\x00\x00'}, 0x2) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mtd0\x00', 0x8a02, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc87452a055975210d2de48606", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) ioctl$auto_MEMERASE(r1, 0x40084d02, &(0x7f0000000300)={0x3, 0x7fff}) 4.263160957s ago: executing program 3 (id=4092): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0xc8bf, 0x0, 0x2, 0xb}, 0xfff}, 0x659bba88, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0xa, 0x3, 0x3a) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="94130000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf2509000000f512058086b73436701db5f38c25b71de750d767dcd72726b66becbd359e14a5c135b861c3687263ee1a37e5d24c208a5a20de0c3c5e5bfa3e4bc6c75f88dc834adc859d0a5e54b6d4d1fa9a6581d701b90c478b81e50eb859d6594026f18225b925f67ee9996b3e2f60fac9db86fa6b418826bc24b72e90db102186845caa5e6f577a610f648116e8ac007fab36b7c34d48975777cf037e039e3d2821465c2efee445f97fa4a32d19670e7b212f477ab0b015ec27848be0df690954cc000a800400238008001c007f00000108003700", @ANYRES32=0x0, @ANYBLOB="b2002f0050c78a6c1e3a4058a9bb8c735a14a8da96fc7ae8a0cdd50a1c6d365178af0fda721dab15a3c2b8f9b09d6fce4bd142bb335a017569ac6ff7d9e139c8fbc21cb6e2a9ba7b49b57986502e8fc259e240de42ffccdde586e1dbc45a2860790e14f86fdd898a669c31cb1f31b291197e5ac4824a042b3141138edec4d1efa3e1b0d512ab2b01419c8541b381b71764832c0f200d71a7e72623bd7376bb1c8e15b7b45269b19cf33d9dbbae8cc4d0730900000975052a72b40c3d03d09b5201cc35fe4c002b7da06ba72374a6c166e3da59855ac348ac12524a79d0550ca6302fc8749f80efd2d53b8535dbbeff88ae79253f92ee48f7585fba99e51c886c8df647d23c2d4c3acc5c5e9cc0ed1d69c801b6b37b0d403d88c8bfc560614e31b059bd83c99642255338c98776b74a45d1cc0faf752f4eb2148f8189a47e9bcd656383e454ca2601c4231ba028f34105b4ba947c40e6d80a120c3667dde8a05383b2b7817c404631291a86559f7954ec41e33df672f211b4d74b3e74d8ad1bb5435b913cdc6965be3d302b086cf9cad9bcdd52be0cc60f2b1686bbfd8e87909426a268aa2e7e69d6ac0f2b216d2fa0927ac6ddf4e8f2ce574ea50371b14a3f07f6642ba44da42264212a2b552732e1353e5343cc84ccccba5e181bff5787e0433b48e72d7d38de728c3620818ba330d6d81279c5bffb9c8cc75aa0184274f9dc4d60862246b3f3259cc9df99fbc31f122160fc122d3f7281494dc8b67d6cc93c5fad8c9fe85560783efedc03195120c38dfdd81f84a5840006d836038be3232e7020e365103ac74857d88b6ccc477e63391d33b3cec9f1f07dad24effaec25fb724c6526b410fdda6389f35087c19de97797a9d82961c8bd24698f039c36a70f61dfffa88efaa833af911fefca8915bea32eb9ff4de2eb16b445227256d90e3a55d284f8c79a408dec62740d7270ebfc910ba78d7dcf1bedb5abd3ccd15d9af88f860170281bd0f0089de38c5395d528fd93f086d33a34d5575669cf6676f1d4fbe4e950f8ca7f268ca73fae0301aebfa3490b4d9627dea0d11e7ee0ce91879e3d95320447109568bd3ee25ce2e6c266b094fabf31296d64319bc7f81e5f228c7ab399e796f5ef0e2e9958c64f97233790d2ffd719b9aa6c1e6e2da578b8d10f9562395e545f648388b5525c421ed16c25c87f9dfff6564fb5e4cfd23e0975cb9d057991508eb60e5a46aedaa375fa6638fb1425ec15714b0b13e3b1d35057df0ecbcf7360a0181202f6369eb21266f6c2766e80323278430114f4a3d31f533bbf6851d4a076d52c1c69ffb7ee96bfe74567debb60a483e1e06f142b8feeb0322dba252ee21d496fd9f68f11c34450abac66d240e501c9eca54bf874c830ff3be63bc41c8f3f34feae1334bb8d733c01ff126aa44e86e904b51337d4d4a66a58ed21b3e2f9a653000d01be105b946f7c872f638952ed14061a077ee953461267b455b75fe15b54c28c647cfc3771a3ef10477f5445ae10ee66b67a9c01977e51b4c8b0726350d92cf8c19f047e8b3296ce91fec626ae007cc6fcae2ea9a3a5f4b2d9bca53ac8d5f04a7804e2f49f0688f9dd78fbdb9d566d8cc60fea3a9159ba13c59bfd7b4d8daf4ae817fd02f313e5dde7ea5318e4a01feb39fac181d640d616a5db7fbbf97bd01c8c80c1ea52828d59f21b1f9e916653d94059f9a414913233aa8e93cb5d7fe66bd4c09ced2dd728c9d7934f8fabda6ed968fa2c486b53b18aac0f613a8d34797dc53bc3feddeea269a03a12ff7a56e844d1868a959cad91d3840a323f8e13d6672921a944c0a2fb6395ae31b2159308ace1ce906ef58cfe0289a08ca523dd1ca4fd93d27f296e10fba4dc8a991630ab19f533e37329459ed3f997771ec5d49d96a6647d9daf57219bc016469942f0aa4a77a16d95052a702c019546d7bb17bdbba85991156c0a5589ad99edcea72d078b11712242162b803b92c40ef1cbac8506e48d5e815ec8ea8c139cb4b625baab1e788d90b6d403a94716453fb37d6828d43d963ce05342669f9643da75114930b4ec5ebfca601d2093d2846bae559fc099871bfc6f9e7aca2d48cf7ba83da98afa4e8594ec450de6f3994af3efa8bedd640f07ad3fae611527f92d4293b3d1358e72680ee25119ad0bbb75db88d5a67252438875215484f2f9b23f6ad7c270f3457c55b098f5f2d0b588c4914efb856cff3bf291d4bea13965d5ca858d6f0f82689c725b027e64544bbfc16bcacd14dfbf4db1c156af2b45b13e9ee5fd08ca89b0cd7a3924070845434ea210eded42fdac0987fc020481b1a0908be833ecc231c43a91add728d3beab400d7a49226ab96c070ea993e5063bc7bbe60abc02ba123c80818ef600af7cb33c8500049052b26dbe7c0b1be86bd23a46dd6ceeb3f92e25836c40e08547f53f5b3b7ea34b0193a9b9ce535ed0e916fd0bce5f0905c22c87a872568dc8588d90c9464ac836edf372124c8888002aeacddeed63d78fc8a9175ed18884808578bb0378e83b0f84edc20f34536164df72a026db136cee2880b2ab3d2c89b387b79c88450ac856a8dbc8061842dd6f1dbba749d8533c29695ed5f9683afc286f2be574360413c2e88d48a35f7039f021cef486d1c0e621b658b045d8465e0341fec9bc70dd7311de31b3d177bffac7026bdbf27f542580f5eedf7a99f5f28f03843b401c300b1009662e570c10d64538ce6387cba69079cd83af9fea81d2d984d9355e3205cf919f50b9a1fe1e3e4d224a3cc9831f42f53b9c290f2b1210455897d3d08cb4280570b5d67f1482acebdbd0a2d9490a25d0538da51bdb106a895125a9c11abf2bb58bc8101507f4b455b3e5a12c7dfd7083e20b6b00a2025c8ba97201131da0e03fb89de7ad9bb2dbc6e7240effdeeefa853f38d921cefeb37e85734524928a680cafc207cea7accb047eb5006c04ee4872e0a32a4e9a0587eb561155f23cc7fcfb07ce6edca7a7e95e3e972413b6cab8e4f87600b0b242c1539e2c8a69615a958d93089c38baf99be2f63bb1082747a0e40524ad09820fb4ec97b8f49f84ce50aaedf42ad20b6eb393c8685905c6aa9f1a937103a0b30e8f3a9a848e25f39674a5588dd161614030fd1e3518d344300e9a1b4f1d34db222547936699dfd9700c85f3e7a6b10b2e1792f7f9275eb8c0a0ea3634ef682cecaa80a98711b053922c8f8abf94b3c46ef670c518e090ccd7c1e5c8c74992a4fdf464d26622262c828dc2354fc9e70bbeebc85de4b8df7f0c54da6ede2053ed7c3723bc27804a7d8139fc18e9f2a8742ccf9d95827e14849c902b38376a7a24357524920e7e46b7cd25356553b576d62205b2d623f042551457c4a41e2c40652b276ed6fa9b9dfbf2d93cd1ba85340313a7a1c63e53667dcd48be0d46b4da6544ac229992c3f713ef9e49bfcd2ac64b607fd2a83f01ccf3c1f8b909c3ee920c089623bfaedd900ad96c88a8db146310ecffb1098f0a60e5d9b72bfe09d2a9a7bf4472fce7f188b1b842eccbce2195f3d5e928b26e591934fef10274d2613fa7febd1a163339448ec4d0a951658cfb790232e34e0d0edd56e40cfa13395f7e3596477a49fa7713969c686035826948b0e34b17af0f2fa5466f77c85f5f5ef5f91c04445f31b44593a711c48f445d35d69a6713f45f00c954a3528c89bd04cdb9deb620c23e4499d3af521bf4494d716ed98a2809333afc4327500741d153577933aeae24d7360de2365410618cccc8f241f20e93e4f9798bf6771975abdb5333b7922c140c63e6f0e6daf88014145b8730482ad89affc8e65b627eecea1cc5cbd34bd5e3fd313e94efbc0087779f963af567d5bbe4c1945ac3bd65fea88bc7a5d2409dde93f96bba7b664a349a418ca343a13aadadef18d0519c471179d8a4a4a8c281e1a70ddde884a8def79ea46dae5a9185837038ffee2edf641b54064009083dcc67dd320273cb896487e59ac0bf669465b061cebc43a43684b052b6446ad62ade7d48ee091653f46aaf06106a2311affb3d878f6d05349248f97fac8921811a119a060f535c8033dc4c1e71c83baf4e7b39a2cf117094941ae33ddbf16f633d5d8f2b5a677ed1ea86570ab95e1664fc0c93ddb6b61a3711c2ef82e0ba442a64ae35132f77fbc5f2900367534f80035428af9320e88280111230eb8f3990fd55da3956e0b6950b91c7d2a160f3e7d08521f8d3408753ecb4611fb4b805c162643dcf5681bc8734ff8f1f83dd8fdb4c7406dc31f97739033a7391e875a7d050663bcd71a503086e9a5b153c402305237a6ac0e274019ee13eb1a1e631b176447e5033600042d95bb6873f30b7172d08b9465c723d18dc2af7886d5a8f428003d8914da2ea7f7485900153d2e7a91954fedd4dd76223070756693d1145b769e02bc52f76cb1e31d6dee3ae867a258c5465681ea9e36638687b4616ab9da75f832a9875b1b565add9f5c99d4c858bd4ba7aec6cbfd1a0d6f6994ae5b600b37b1aa85b3d47224a5e2bfba1074cb8b654ab3e580d36dd831a4e517c4e07350d2e36231767f42cf398d49c055b7d5dfd121b265f0d735324dee513d29925f9d927967faaf92fe123bea7fc16edeb7cab46b471f722c9d00db3ff4e753bfad710466d7988124017ea5d13fcba88a544fcd8197b3ed5cc398b5f6aed864631010bf751f95e68f22108f15be1c629417c6ca7dd1a3935f4f45b0597c0b530cbf75de96da697da56ddf89443752c22afe63285223e863f3cbbbbd110cda27b2b768c51dbd5df845ab44aa8b0e64d07e17ff312fa66ae366776ba4c113af938b4c6842ec921cd4551ab5731c1cd032cb16c5c0df4e9dbfa446df909e35ea61c5390f062ff99f8355bc8e7f4cb614950f62123c42a16e6e3ccb5287ff074f520b4d6d9376ebcd85e1c8939044d2a9e9ac0d070bd7db25db936059d882def7f43366fcc614f79b58a67dad1f5c96c6bdd53840f3e23a21287b0e6fc5acf6aec98cda5c0d6aa62a70b5140ccd2a58f51dd8e4a58139b95281b32289a6b6f252ca518dfd5f92df3b495b682ce96f032bf28a624e9dc7d72f132a87a74f5a5bc007be2463ece0b1ae990b6b17b8f0526e0390d5bd2aa5e7383c9d4cd17fbceb706159857b783eb5e0bf7e440c42a6b6ce2debb4f7cb0cc4696c2f85c532be76287333993f538914b990e36aa4f1603987a29efcbf38de8107d3f83698781294a3b5dbbf3ec60e685367de5c3e17f9ae4b17804fca94461dce6cf987fd0ef4a349e5b96ae8a04f0f0455dafeae7ff5dd4227c9bda632e9dd6da824282c1a27f94414937672ff4e715280f6f9cb2767ef78ccbc8c24387db3ce6745c08b1c88f135121dd06ff29e77edf5aaafb4428557172385084fa6c14036fdde8d55b1a2422de59129c798e37b2fc1c4826c16f077481aa0215f1f11f8c0128e8da61b4aac2cce422804b7f5b276c2114cb381cf2bca9ecf78d8cf240033db361c3657bde7b61db101ea24023e686c3e1be2b2af7883fac59942fd1ff2a33d7306f9f2f17f2b213e0c647cda92aaf88e4014dae0dad8cc9b0a53ad253cb808e0392b0e6d7b8c946214db5613380ebd41c7bfdcaf7556deb44ee790f9f6cc47339a094f24c3d60dcef914e851a41604184e32780d5973c80da8ac1856a9e26acd36937f839560cd7421f082c4f6a1c2b2e99b4836f83c1f2b5947523dec30f6c7d68a595d42413df5bb9254220d472413c43fc7d29d964484301cb2a3fcd61ab10d37a359c4b91260f2abc6828ed628c6722d9a945c2bc9e298359f641956c3321e5afee5e86b8b819cf76416ad4176802bad02a21159f1f6931bf6e216daf1d0710260887de547792b8643754e70e8ff32d960a0a2f58f02568313dd64b02b9ec7c299a50242e588b2f8e5dc4b3bfea5aff068f61d71a5938caa3c43f9b5c570258f6f26a0d296e0fef7446ed3d5b37407f21b50db7f1d6a1f3f713d5b64abfa23476cc81fe6a0542fc71656daa63a8b3fdca005e2e1b1b2c6b411accb004599dd70e0ee35ccb7513cfc352d104ad5d5723803b91b480fca336acf13dcca99f95b51bddcdabe07ce6a2f45ba81440f4305ee7407a869c18dc05fd861f07a40ac00c3346b1c734fbf7ce06bb1b852a1096f7d2d709bfc72c007258593f0370a40e29c5593e860bf3065978410b69a4dbcfd35c2de5eb51807b5d56527e50497370b4825f3e73367d26695ba6ed01c85a184b387c79f916a5fb8c24783ac4c5f7644f48ba2de9886b8c9ff769f0d2684be0adeb310fd2cf306e7d20aee9c5dba8c4bbb4b0522ebc3cd98349feecacbc71233b75e9af14f920fb9ce1b4492af0bcfba5faff316f9202f443331afa5b7a2b7ecd5f6e54c1aac49a71cd718fa0829418532ce2f21042fce27338ea447b39e85bea861bbc6f267c1a4ea2161d5293b1ef070a58f45afba1495898df7228a1c61a938012333a96246b5fb193c86d887a95c451347dda638ca92a8a18c77f4928ede88d08deed470f86b85370594231fe7acdf00c2e16970a4b099fa7c35b2f9e3ec3000000870003807c56041bd5224375693152f9cbad39a0a07727f09286b76c31ac38a3bb7a7ef1949b744facd82d9281d5c70b1f26d0b8f44c669d512c1a3ef88e7ce987b2eee69538fe5c068a318f9b4ab7c78be900e4be8a83012ede6295e6d5c5f14d256e99f26b6c9bc9c4814a43fcc7048c8bd95fd3369c58b9e4ea92b0052f0800e900", @ANYRES32=r0, @ANYBLOB="9b"], 0x1394}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048004) socket(0xa, 0x3, 0x73) setsockopt$auto(r2, 0x10029, 0xd2, 0x0, 0x3) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4G\xcc\v\xcc7>\xb3w\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcftU\x14w\xb4\x14\x1dU\t\x00\x00\x00\x00\x00\x00\x00\xab\"&\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea\b\x00\x00\x00\x00\x00\x00\x00\xd4m\xbf\xc7\x15\x9e\x01\x98\xd7lD\x97)}\xfaK\xc4>\\\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\x88\xad(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x3) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r3, 0x8008b705, 0x1000000000000) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2f000000000, 0xdf, 0x809b75, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/bus/usb/drivers/net1080/new_id\x00', 0x20240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb4, 0x401, 0x7ffd) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 4.169848333s ago: executing program 5 (id=4093): mmap$auto(0xc, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002c0a279e10000000e8f144ffa956d4d9c0226566864e6445a946475b522ef4e92531224ae3ec08d45f83968ff5e2c31375a8ae2067bc4564365d9ed9d00861f24406b7d773a593d469444ce9238542f9effef9317626aa6d82c9025254ecf1681b805df23cb20482f35c6c8a370efcf51386cf4a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x0, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x800202, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1000000000d, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) r4 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) ioctl$auto_RNDADDENTROPY2(r4, 0x40085203, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 3.627307494s ago: executing program 4 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32, @ANYBLOB="f703d11013cd2fce200fdac69590f46ed2e2136c268f75bbb1b2de81f8f3"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.26890972s ago: executing program 3 (id=4098): mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xfffffffffffffffb, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0xe9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r2 = socket(0x29, 0x2, 0x86) socketpair$auto(0x101, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) rt_sigaction$auto(0x3, &(0x7f0000000180)={&(0x7f00000000c0)=&(0x7f0000000080)=0x4, 0x0, &(0x7f0000000140)=&(0x7f0000000100)=0xf8, {0x8000000000000000}}, &(0x7f00000002c0)={&(0x7f0000000200)=&(0x7f00000001c0)=0x2, 0x9, &(0x7f0000000280)=&(0x7f0000000240)=0x8, {0x3}}, 0x8) ioctl$auto(0x3, 0xae41, r3) fstat$auto(r2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x4018aee1, 0x0) 3.023739992s ago: executing program 4 (id=4099): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x610000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast1}, 0x54) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) r2 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x1000001, 0x0, 0x9}]}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r3, r4, 0x0, 0x1) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x2) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008003) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x9000643c, 0xc35) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 2.940318918s ago: executing program 5 (id=4100): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) pipe$auto(0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x900400a3d7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x7, 0x81a6}) socket(0x2, 0x1, 0x0) r3 = getsockopt$auto(r1, 0x100005, 0x23, 0x0, &(0x7f0000000040)=0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x3, 0x19, 0xfffffffffffffffa, 0xb) madvise$auto(0xffffffffffff7ffe, 0x2000040080000044, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x4000, 0xffffffffffff0001, 0x1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x509100, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f0, 0x15) 2.825083329s ago: executing program 3 (id=4101): openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) io_uring_setup$auto(0x5, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setsockopt$auto(r0, 0x3, 0x8, &(0x7f0000000040)='/dev/dsp1\x00', 0x44) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) read$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r3, 0x0, 0x38f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) ioprio_set$auto(0x3, 0x0, 0x4b34) msgget$auto(0x6, 0xfffffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x108, 0x0, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev5\x00', 0x101000, 0x0) 1.741262169s ago: executing program 3 (id=4103): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r0, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000340)=@bpf_attr_0={0x0, 0x1, 0x1, 0x5, 0x4, 0xffffffffffffffff, 0x9, "38b7bbd1f7965a807264335b76c22027", 0x0, 0xffffffffffffffff, 0x22, 0x10, 0x7, 0x748}, 0x400) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) 1.70187099s ago: executing program 2 (id=4104): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x7, 0x81a6}) 1.514231066s ago: executing program 2 (id=4105): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x7, 0x81a6}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/0/spurious\x00', 0x20042, 0x0) 1.340700062s ago: executing program 2 (id=4106): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='.\x00', 0x100, 0x161) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x4, 0x0, &(0x7f00000000c0)={[0x1, 0x3, 0x1, 0x9, 0xde, 0x6daff1ff, 0xb0af, 0x7a, 0x2ddb, 0xd, 0x5, 0x400040, 0x2, 0x0, 0x4d, 0x57]}, 0x0, 0x0) r0 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyvb\x00', 0x100000, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='7', 0x1) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x741041, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, 0x0) getdents64$auto(0x0, 0x0, 0x18) getdents$auto(0x0, 0x0, 0x700) 1.203203292s ago: executing program 5 (id=4107): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x1c, r2, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, 0x0) preadv$auto(r4, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x5}, 0x9}, 0x16d, 0x6, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r6) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) readv$auto(r8, &(0x7f0000000240)={0x0, 0x9}, 0x3) close_range$auto(r7, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0x200}, 0xfffffffffffffffe, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x7000000) 1.083105303s ago: executing program 2 (id=4108): r0 = socket(0x2, 0x1, 0x0) madvise$auto(0x10000, 0xc, 0xe2eb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="89a0583fb4ca0a1d1b776194152c0c5d4753a40a1d5dff5860e75158a9ab7c68e264a40f43f6bf3af3fd166e2c557f10cb30e5c0f5de717f12084c748749b7fae60cf6511bb4fd8d44537e4bd68d3789cc29b577925c1c33cf"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004845) getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x14) 851.001294ms ago: executing program 2 (id=4109): symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)) lgetxattr$auto(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='%-\x00', &(0x7f0000000040)="4699a9644d7e6b54efc4a93a01cf78d42b681aba4c9ca115b463b2", 0x5) 634.44366ms ago: executing program 2 (id=4110): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0xf4000000, 0x2, 0x2, 0x0, 0x7, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x2}, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0x4001090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/queue/nomerges\x00', 0x80302, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/queue/nomerges\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) r3 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) 0s ago: executing program 5 (id=4111): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) r1 = socket(0x10, 0x2, 0x4) bind$auto(r1, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x0) socket(0xa, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x100000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x25, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0009, 0x1a) kernel console output (not intermixed with test programs): 60122][T23619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 742.460139][T23619] RBP: 00007f6b7d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.460154][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.460167][T23619] R13: 00007f6b7d9e6038 R14: 00007f6b7d9e5fa0 R15: 00007ffd4b9f7698 [ 742.460199][T23619] [ 743.209062][T20024] Bluetooth: hci1: command tx timeout [ 743.583775][T20024] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 743.583814][T20024] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 743.598930][T20024] Bluetooth: hci3: Dropping invalid advertising data [ 743.606515][T20024] Bluetooth: hci3: Dropping invalid advertising data [ 743.613549][T20024] Bluetooth: hci3: Malformed LE Event: 0x02 [ 743.716571][T23053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 743.723765][T23662] FAULT_INJECTION: forcing a failure. [ 743.723765][T23662] name failslab, interval 1, probability 0, space 0, times 0 [ 743.767139][T23662] CPU: 1 UID: 0 PID: 23662 Comm: syz.3.3545 Not tainted syzkaller #0 PREEMPT(full) [ 743.767175][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 743.767192][T23662] Call Trace: [ 743.767203][T23662] [ 743.767213][T23662] dump_stack_lvl+0x16c/0x1f0 [ 743.767257][T23662] should_fail_ex+0x512/0x640 [ 743.767297][T23662] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 743.767329][T23662] should_failslab+0xc2/0x120 [ 743.767364][T23662] __kmalloc_cache_noprof+0x6a/0x3e0 [ 743.767393][T23662] ? create_filter_start.constprop.0+0x103/0x300 [ 743.767433][T23662] create_filter_start.constprop.0+0x103/0x300 [ 743.767470][T23662] create_filter+0xb5/0x210 [ 743.767504][T23662] ? __pfx_create_filter+0x10/0x10 [ 743.767536][T23662] ? __pfx___mutex_lock+0x10/0x10 [ 743.767564][T23662] ? find_held_lock+0x2b/0x80 [ 743.767587][T23662] apply_event_filter+0x220/0x500 [ 743.767621][T23662] ? __pfx_apply_event_filter+0x10/0x10 [ 743.767664][T23662] event_filter_write+0x16d/0x290 [ 743.767705][T23662] ? __pfx_event_filter_write+0x10/0x10 [ 743.767741][T23662] vfs_write+0x29d/0x11d0 [ 743.767776][T23662] ? __pfx___mutex_lock+0x10/0x10 [ 743.767815][T23662] ? __pfx_vfs_write+0x10/0x10 [ 743.767857][T23662] ? __fget_files+0x20e/0x3c0 [ 743.767903][T23662] ksys_write+0x12a/0x250 [ 743.767931][T23662] ? __pfx_ksys_write+0x10/0x10 [ 743.767970][T23662] do_syscall_64+0xcd/0x4c0 [ 743.768011][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.768038][T23662] RIP: 0033:0x7f184f18eec9 [ 743.768060][T23662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.768083][T23662] RSP: 002b:00007f1850031038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.768109][T23662] RAX: ffffffffffffffda RBX: 00007f184f3e5fa0 RCX: 00007f184f18eec9 [ 743.768126][T23662] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 743.768143][T23662] RBP: 00007f184f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 743.768158][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.768174][T23662] R13: 00007f184f3e6038 R14: 00007f184f3e5fa0 R15: 00007ffd7ee77628 [ 743.768210][T23662] [ 743.778722][T23053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.174964][T23053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 744.203554][T23053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 744.517586][ T9791] hsr_slave_0: left promiscuous mode [ 744.534061][ T9791] hsr_slave_1: left promiscuous mode [ 744.605106][ T9791] veth1_vlan: left promiscuous mode [ 744.653458][ T9791] veth0_vlan: left promiscuous mode [ 745.729682][T23494] Process accounting resumed [ 746.038141][ T9791] team0 (unregistering): Port device team_slave_1 removed [ 746.147681][ T9791] team0 (unregistering): Port device team_slave_0 removed [ 747.145408][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'. [ 747.229568][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.236990][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.688324][T23053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.730012][T23857] [U]  [ 747.733206][T23857] [U] [ 747.735931][T23857] [U] [ 747.738654][T23857] [U] [ 747.746986][T23053] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.759940][T23857] [U] [ 747.762734][T23857] [U] [ 747.765462][T23857] [U] [ 747.768182][T23857] [U] [ 747.778628][T23857] [U] [ 747.778975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.781383][T23857] [U] [ 747.781440][T23857] [U] [ 747.788610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.791168][T23857] [U] [ 747.815499][T23857] [U] [ 747.818264][T23857] [U] [ 747.820976][T23857] [U] [ 747.823680][T23857] [U] [ 747.830067][T23857] [U] [ 747.832825][T23857] [U] [ 747.835579][T23857] [U] [ 747.838315][T23857] [U] [ 747.857595][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.864823][ T9784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.878357][T23857] [U] [ 747.881123][T23857] [U] [ 747.883847][T23857] [U] [ 747.886627][T23857] [U] [ 747.895230][T23857] [U] [ 747.897995][T23857] [U] [ 747.900699][T23857] [U] [ 747.903407][T23857] [U] [ 747.911284][T23857] [U] [ 747.914025][T23857] [U] [ 747.916724][T23857] [U] [ 747.919415][T23857] [U] [ 747.929745][T23857] [U] [ 747.932482][T23857] [U] [ 747.935177][T23857] [U] [ 747.937872][T23857] [U] [ 747.948770][T23857] [U] [ 747.951537][T23857] [U] [ 747.954254][T23857] [U] [ 747.956970][T23857] [U] [ 748.000672][T23857] [U] [ 748.003440][T23857] [U] [ 748.006168][T23857] [U] [ 748.008889][T23857] [U] [ 748.022074][T23857] [U] [ 748.024830][T23857] [U] [ 748.027537][T23857] [U] [ 748.030251][T23857] [U] [ 748.042155][T23857] [U] [ 748.044911][T23857] [U] [ 748.047626][T23857] [U] [ 748.050352][T23857] [U] [ 748.074972][T23857] [U] [ 748.077745][T23857] [U] [ 748.080463][T23857] [U] [ 748.083191][T23857] [U] [ 748.143037][T23857] [U] [ 748.145806][T23857] [U] [ 748.148527][T23857] [U] [ 748.151243][T23857] [U] [ 748.162980][T23857] [U] [ 748.165750][T23857] [U] [ 748.168480][T23857] [U] [ 748.171203][T23857] [U] [ 748.190606][T23857] [U] [ 748.193410][T23857] [U] [ 748.196145][T23857] [U] [ 748.198848][T23857] [U] [ 748.210903][T23857] [U] [ 748.213657][T23857] [U] [ 748.216377][T23857] [U] [ 748.219096][T23857] [U] [ 748.229203][T23857] [U] [ 748.231962][T23857] [U] [ 748.234680][T23857] [U] [ 748.237393][T23857] [U] [ 748.255919][T23857] [U] [ 748.258676][T23857] [U] [ 748.261390][T23857] [U] [ 748.264103][T23857] [U] [ 748.285925][T23857] [U] [ 748.288646][T23857] [U] [ 748.291367][T23857] [U] [ 748.294103][T23857] [U] [ 748.309672][T23857] [U] [ 748.312406][T23857] [U] [ 748.315092][T23857] [U] [ 748.317773][T23857] [U] [ 748.349577][T23857] [U] [ 748.352348][T23857] [U] [ 748.355082][T23857] [U] [ 748.357796][T23857] [U] [ 748.369966][T23857] [U] [ 748.372828][T23857] [U] [ 748.375549][T23857] [U] [ 748.378264][T23857] [U] [ 748.386179][T23857] [U] [ 748.388938][T23857] [U] [ 748.391678][T23857] [U] [ 748.394392][T23857] [U] [ 748.398049][T23857] [U] [ 748.400781][T23857] [U] [ 748.403506][T23857] [U] [ 748.406220][T23857] [U] [ 748.415189][T23857] [U] [ 748.417949][T23857] [U] [ 748.420659][T23857] [U] [ 748.423379][T23857] [U] [ 748.428902][T23857] [U] [ 748.431660][T23857] [U] [ 748.434375][T23857] [U] [ 748.437067][T23857] [U] [ 748.463141][T23857] [U] [ 748.488765][T23053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.614631][T23884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3558'. [ 748.906091][T23053] veth0_vlan: entered promiscuous mode [ 748.927874][T23053] veth1_vlan: entered promiscuous mode [ 748.995577][T23053] veth0_macvtap: entered promiscuous mode [ 749.036398][T23053] veth1_macvtap: entered promiscuous mode [ 749.112672][T23053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.630279][T23053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.820131][ T9784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.829748][ T9784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.988483][ T9784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.130202][ T9784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.336144][T21175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.354594][T21175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.480657][T21175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.522170][T21175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.811868][T24013] FAULT_INJECTION: forcing a failure. [ 754.811868][T24013] name failslab, interval 1, probability 0, space 0, times 0 [ 754.839553][T24013] CPU: 0 UID: 0 PID: 24013 Comm: syz.3.3576 Not tainted syzkaller #0 PREEMPT(full) [ 754.839591][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 754.839609][T24013] Call Trace: [ 754.839619][T24013] [ 754.839630][T24013] dump_stack_lvl+0x16c/0x1f0 [ 754.839677][T24013] should_fail_ex+0x512/0x640 [ 754.839716][T24013] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 754.839753][T24013] should_failslab+0xc2/0x120 [ 754.839787][T24013] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 754.839821][T24013] ? __d_alloc+0x32/0xae0 [ 754.839857][T24013] __d_alloc+0x32/0xae0 [ 754.839894][T24013] d_alloc_pseudo+0x1c/0xc0 [ 754.839933][T24013] alloc_file_pseudo+0xcf/0x230 [ 754.839974][T24013] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 754.840022][T24013] __shmem_file_setup+0x1a3/0x330 [ 754.840054][T24013] shmem_zero_setup+0x93/0x1a0 [ 754.840089][T24013] __mmap_region+0x2081/0x27b0 [ 754.840119][T24013] ? finish_task_switch.isra.0+0x21c/0xc10 [ 754.840147][T24013] ? __pfx___mmap_region+0x10/0x10 [ 754.840170][T24013] ? rcu_is_watching+0x12/0xc0 [ 754.840200][T24013] ? rcu_is_watching+0x12/0xc0 [ 754.840224][T24013] ? trace_sched_exit_tp+0xd1/0x120 [ 754.840259][T24013] ? __schedule+0x11a3/0x5de0 [ 754.840289][T24013] ? __lock_acquire+0x62e/0x1ce0 [ 754.840341][T24013] ? __pfx___schedule+0x10/0x10 [ 754.840424][T24013] ? trace_cap_capable+0x18d/0x200 [ 754.840467][T24013] mmap_region+0x1ab/0x3f0 [ 754.840498][T24013] ? __get_unmapped_area+0x267/0x440 [ 754.840537][T24013] do_mmap+0xa3e/0x1210 [ 754.840575][T24013] ? __pfx_do_mmap+0x10/0x10 [ 754.840607][T24013] ? __pfx_down_write_killable+0x10/0x10 [ 754.840637][T24013] vm_mmap_pgoff+0x29e/0x470 [ 754.840680][T24013] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 754.840724][T24013] ? __x64_sys_futex+0x1e0/0x4c0 [ 754.840756][T24013] ? __x64_sys_futex+0x1e9/0x4c0 [ 754.840793][T24013] ksys_mmap_pgoff+0x7d/0x5c0 [ 754.840828][T24013] ? xfd_validate_state+0x61/0x180 [ 754.840863][T24013] ? __pfx_ksys_write+0x10/0x10 [ 754.840896][T24013] __x64_sys_mmap+0x125/0x190 [ 754.840937][T24013] do_syscall_64+0xcd/0x4c0 [ 754.840977][T24013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.841003][T24013] RIP: 0033:0x7f184f18eec9 [ 754.841025][T24013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.841048][T24013] RSP: 002b:00007f1850031038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 754.841073][T24013] RAX: ffffffffffffffda RBX: 00007f184f3e5fa0 RCX: 00007f184f18eec9 [ 754.841091][T24013] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 754.841106][T24013] RBP: 00007f184f211f91 R08: 000000000000000a R09: 0000000000008000 [ 754.841122][T24013] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 754.841137][T24013] R13: 00007f184f3e6038 R14: 00007f184f3e5fa0 R15: 00007ffd7ee77628 [ 754.841172][T24013] [ 755.178297][T24013] sock: sock_timestamping_bind_phc: sock not bind to device [ 755.606101][T24013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 755.648596][T24013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 755.684423][T24013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 755.711679][T24013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 755.742537][T24013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 755.758476][T24013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 757.423720][T24051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3583'. [ 757.538560][T20024] Bluetooth: hci4: command 0x0406 tx timeout [ 757.587088][T24144] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 757.684729][T24159] FAULT_INJECTION: forcing a failure. [ 757.684729][T24159] name failslab, interval 1, probability 0, space 0, times 0 [ 757.697817][T24159] CPU: 0 UID: 0 PID: 24159 Comm: syz.4.3591 Not tainted syzkaller #0 PREEMPT(full) [ 757.697840][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.697849][T24159] Call Trace: [ 757.697855][T24159] [ 757.697862][T24159] dump_stack_lvl+0x16c/0x1f0 [ 757.697889][T24159] should_fail_ex+0x512/0x640 [ 757.697911][T24159] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 757.697931][T24159] should_failslab+0xc2/0x120 [ 757.697950][T24159] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 757.697968][T24159] ? __d_alloc+0x32/0xae0 [ 757.697989][T24159] __d_alloc+0x32/0xae0 [ 757.698009][T24159] d_alloc_pseudo+0x1c/0xc0 [ 757.698029][T24159] alloc_file_pseudo+0xcf/0x230 [ 757.698052][T24159] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 757.698079][T24159] __shmem_file_setup+0x1a3/0x330 [ 757.698096][T24159] shmem_zero_setup+0x93/0x1a0 [ 757.698115][T24159] __mmap_region+0x2081/0x27b0 [ 757.698133][T24159] ? finish_task_switch.isra.0+0x21c/0xc10 [ 757.698149][T24159] ? __pfx___mmap_region+0x10/0x10 [ 757.698164][T24159] ? rcu_is_watching+0x12/0xc0 [ 757.698186][T24159] ? rcu_is_watching+0x12/0xc0 [ 757.698201][T24159] ? trace_sched_exit_tp+0xd1/0x120 [ 757.698222][T24159] ? __schedule+0x11a3/0x5de0 [ 757.698240][T24159] ? __lock_acquire+0x62e/0x1ce0 [ 757.698268][T24159] ? __pfx___schedule+0x10/0x10 [ 757.698308][T24159] ? trace_cap_capable+0x18d/0x200 [ 757.698330][T24159] mmap_region+0x1ab/0x3f0 [ 757.698347][T24159] ? __get_unmapped_area+0x267/0x440 [ 757.698369][T24159] do_mmap+0xa3e/0x1210 [ 757.698392][T24159] ? __pfx_do_mmap+0x10/0x10 [ 757.698412][T24159] ? __pfx_down_write_killable+0x10/0x10 [ 757.698438][T24159] vm_mmap_pgoff+0x29e/0x470 [ 757.698463][T24159] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 757.698489][T24159] ? __x64_sys_futex+0x1e0/0x4c0 [ 757.698508][T24159] ? __x64_sys_futex+0x1e9/0x4c0 [ 757.698529][T24159] ksys_mmap_pgoff+0x7d/0x5c0 [ 757.698548][T24159] ? xfd_validate_state+0x61/0x180 [ 757.698567][T24159] ? __pfx_ksys_write+0x10/0x10 [ 757.698586][T24159] __x64_sys_mmap+0x125/0x190 [ 757.698609][T24159] do_syscall_64+0xcd/0x4c0 [ 757.698632][T24159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.698647][T24159] RIP: 0033:0x7fe36178eec9 [ 757.698659][T24159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.698674][T24159] RSP: 002b:00007fe362566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 757.698688][T24159] RAX: ffffffffffffffda RBX: 00007fe3619e5fa0 RCX: 00007fe36178eec9 [ 757.698698][T24159] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 757.698707][T24159] RBP: 00007fe361811f91 R08: 000000000000000a R09: 0000000000008000 [ 757.698717][T24159] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 757.698726][T24159] R13: 00007fe3619e6038 R14: 00007fe3619e5fa0 R15: 00007ffe6f8b50b8 [ 757.698749][T24159] [ 757.706439][T20024] Bluetooth: hci3: command 0x0c1a tx timeout [ 757.715804][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout [ 757.789873][T20024] Bluetooth: hci1: command 0x0c1a tx timeout [ 757.803811][T24159] sock: sock_timestamping_bind_phc: sock not bind to device [ 758.126913][ T5871] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 758.126946][ T5871] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 758.145484][ T5871] Bluetooth: hci3: Dropping invalid advertising data [ 758.152415][ T5871] Bluetooth: hci3: Dropping invalid advertising data [ 758.159312][ T5871] Bluetooth: hci3: Dropping invalid advertising data [ 758.166106][ T5871] Bluetooth: hci3: Malformed LE Event: 0x02 [ 758.537901][T24159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 758.544006][T24159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.595476][T24159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 758.612908][T24196] FAULT_INJECTION: forcing a failure. [ 758.612908][T24196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.629551][T24196] CPU: 1 UID: 0 PID: 24196 Comm: syz.3.3592 Not tainted syzkaller #0 PREEMPT(full) [ 758.629583][T24196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 758.629596][T24196] Call Trace: [ 758.629605][T24196] [ 758.629615][T24196] dump_stack_lvl+0x16c/0x1f0 [ 758.629656][T24196] should_fail_ex+0x512/0x640 [ 758.629698][T24196] _copy_from_user+0x2e/0xd0 [ 758.629726][T24196] copy_msghdr_from_user+0x98/0x160 [ 758.629763][T24196] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 758.629804][T24196] ? kfree+0x24f/0x4d0 [ 758.629826][T24196] ? __pfx__kstrtoull+0x10/0x10 [ 758.629866][T24196] ___sys_sendmsg+0xfe/0x1d0 [ 758.629903][T24196] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.629972][T24196] ? __pfx___might_resched+0x10/0x10 [ 758.630006][T24196] __sys_sendmmsg+0x200/0x420 [ 758.630054][T24196] ? __pfx___sys_sendmmsg+0x10/0x10 [ 758.630101][T24196] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 758.630151][T24196] ? fput+0x9b/0xd0 [ 758.630184][T24196] ? ksys_write+0x1ac/0x250 [ 758.630211][T24196] ? __pfx_ksys_write+0x10/0x10 [ 758.630246][T24196] __x64_sys_sendmmsg+0x9c/0x100 [ 758.630281][T24196] ? lockdep_hardirqs_on+0x7c/0x110 [ 758.630315][T24196] do_syscall_64+0xcd/0x4c0 [ 758.630353][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.630379][T24196] RIP: 0033:0x7f184f18eec9 [ 758.630398][T24196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.630421][T24196] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 758.630446][T24196] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 758.630463][T24196] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 758.630478][T24196] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 758.630494][T24196] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 758.630509][T24196] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 758.630544][T24196] [ 758.634498][T24159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.500097][T24224] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3601'. [ 760.352342][T24257] FAULT_INJECTION: forcing a failure. [ 760.352342][T24257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.381261][T24257] CPU: 1 UID: 0 PID: 24257 Comm: syz.3.3606 Not tainted syzkaller #0 PREEMPT(full) [ 760.381294][T24257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 760.381309][T24257] Call Trace: [ 760.381317][T24257] [ 760.381327][T24257] dump_stack_lvl+0x16c/0x1f0 [ 760.381366][T24257] should_fail_ex+0x512/0x640 [ 760.381406][T24257] _copy_from_user+0x2e/0xd0 [ 760.381434][T24257] copy_msghdr_from_user+0x98/0x160 [ 760.381469][T24257] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 760.381510][T24257] ? kfree+0x24f/0x4d0 [ 760.381532][T24257] ? __pfx__kstrtoull+0x10/0x10 [ 760.381569][T24257] ___sys_sendmsg+0xfe/0x1d0 [ 760.381618][T24257] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.381685][T24257] ? __pfx___might_resched+0x10/0x10 [ 760.381719][T24257] __sys_sendmmsg+0x200/0x420 [ 760.381760][T24257] ? __pfx___sys_sendmmsg+0x10/0x10 [ 760.381808][T24257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.381859][T24257] ? fput+0x9b/0xd0 [ 760.381898][T24257] ? ksys_write+0x1ac/0x250 [ 760.381926][T24257] ? __pfx_ksys_write+0x10/0x10 [ 760.381952][T24257] ? xfd_validate_state+0x61/0x180 [ 760.381993][T24257] __x64_sys_sendmmsg+0x9c/0x100 [ 760.382028][T24257] ? lockdep_hardirqs_on+0x7c/0x110 [ 760.382064][T24257] do_syscall_64+0xcd/0x4c0 [ 760.382102][T24257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.382135][T24257] RIP: 0033:0x7f184f18eec9 [ 760.382155][T24257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.382179][T24257] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 760.382204][T24257] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 760.382222][T24257] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 760.382237][T24257] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 760.382252][T24257] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 760.382267][T24257] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 760.382301][T24257] [ 760.537747][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 760.598424][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout [ 760.663399][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.739734][T20024] Bluetooth: hci1: command 0x0c1a tx timeout [ 761.024686][T24269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 761.040944][T24270] ima: policy update failed [ 761.115328][ T30] audit: type=1802 audit(4294969426.761:26): pid=24270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3610" res=0 errno=0 [ 761.865624][T24288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3615'. [ 762.307340][T24301] FAULT_INJECTION: forcing a failure. [ 762.307340][T24301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.398745][T24301] CPU: 0 UID: 0 PID: 24301 Comm: syz.3.3617 Not tainted syzkaller #0 PREEMPT(full) [ 762.398779][T24301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 762.398792][T24301] Call Trace: [ 762.398800][T24301] [ 762.398807][T24301] dump_stack_lvl+0x16c/0x1f0 [ 762.398843][T24301] should_fail_ex+0x512/0x640 [ 762.398880][T24301] _copy_from_user+0x2e/0xd0 [ 762.398906][T24301] copy_msghdr_from_user+0x98/0x160 [ 762.398942][T24301] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 762.398983][T24301] ? kfree+0x24f/0x4d0 [ 762.399016][T24301] ___sys_sendmsg+0xfe/0x1d0 [ 762.399053][T24301] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.399116][T24301] ? __pfx___might_resched+0x10/0x10 [ 762.399150][T24301] __sys_sendmmsg+0x200/0x420 [ 762.399190][T24301] ? __pfx___sys_sendmmsg+0x10/0x10 [ 762.399223][T24301] ? __schedule+0x11a3/0x5de0 [ 762.399286][T24301] ? ksys_write+0x1ac/0x250 [ 762.399316][T24301] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 762.399358][T24301] __x64_sys_sendmmsg+0x9c/0x100 [ 762.399393][T24301] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.399427][T24301] do_syscall_64+0xcd/0x4c0 [ 762.399465][T24301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.399489][T24301] RIP: 0033:0x7f184f18eec9 [ 762.399509][T24301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.399533][T24301] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 762.399557][T24301] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 762.399584][T24301] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 762.399600][T24301] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 762.399614][T24301] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 762.399630][T24301] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 762.399664][T24301] [ 762.829411][T20024] Bluetooth: hci1: command 0x0c1a tx timeout [ 763.122816][T20024] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 763.888541][T24352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'. [ 764.178062][T24356] FAULT_INJECTION: forcing a failure. [ 764.178062][T24356] name failslab, interval 1, probability 0, space 0, times 0 [ 764.264323][T24356] CPU: 0 UID: 0 PID: 24356 Comm: syz.2.3623 Not tainted syzkaller #0 PREEMPT(full) [ 764.264347][T24356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.264357][T24356] Call Trace: [ 764.264362][T24356] [ 764.264370][T24356] dump_stack_lvl+0x16c/0x1f0 [ 764.264396][T24356] should_fail_ex+0x512/0x640 [ 764.264418][T24356] ? fs_reclaim_acquire+0xae/0x150 [ 764.264441][T24356] should_failslab+0xc2/0x120 [ 764.264460][T24356] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 764.264478][T24356] ? security_inode_alloc+0x3b/0x2b0 [ 764.264504][T24356] security_inode_alloc+0x3b/0x2b0 [ 764.264521][T24356] inode_init_always_gfp+0xce4/0x1030 [ 764.264542][T24356] alloc_inode+0x86/0x240 [ 764.264563][T24356] iget_locked+0x2e4/0x830 [ 764.264582][T24356] ? stack_trace_save+0x8e/0xc0 [ 764.264600][T24356] ? __pfx_iget_locked+0x10/0x10 [ 764.264621][T24356] ? find_held_lock+0x2b/0x80 [ 764.264636][T24356] ? kernfs_find_and_get_node_by_id+0x1c3/0x3f0 [ 764.264661][T24356] kernfs_get_inode+0x48/0x460 [ 764.264679][T24356] kernfs_fh_to_dentry+0xf3/0x250 [ 764.264696][T24356] exportfs_decode_fh_raw+0x164/0x7d0 [ 764.264710][T24356] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 764.264727][T24356] ? __pfx_kernfs_fh_to_dentry+0x10/0x10 [ 764.264743][T24356] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 764.264779][T24356] do_handle_open+0x6e3/0xc50 [ 764.264795][T24356] ? __pfx_do_handle_open+0x10/0x10 [ 764.264808][T24356] ? __x64_sys_futex+0x1e0/0x4c0 [ 764.264830][T24356] ? xfd_validate_state+0x61/0x180 [ 764.264856][T24356] ? do_syscall_64+0xcd/0x4c0 [ 764.264876][T24356] do_syscall_64+0xcd/0x4c0 [ 764.264898][T24356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.264912][T24356] RIP: 0033:0x7ff2ccd8eec9 [ 764.264925][T24356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.264940][T24356] RSP: 002b:00007ff2cdcde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 764.264954][T24356] RAX: ffffffffffffffda RBX: 00007ff2ccfe5fa0 RCX: 00007ff2ccd8eec9 [ 764.264964][T24356] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 764.264973][T24356] RBP: 00007ff2cce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 764.264981][T24356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.264990][T24356] R13: 00007ff2ccfe6038 R14: 00007ff2ccfe5fa0 R15: 00007ffc232b3a58 [ 764.265009][T24356] [ 764.656259][T24374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3627'. [ 764.795496][T24387] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3628'. [ 765.392813][ T30] audit: type=1800 audit(4294969431.039:27): pid=24413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3630" name="dbroot" dev="configfs" ino=81650 res=0 errno=0 [ 767.496740][T24483] ima: policy update failed [ 767.515332][ T30] audit: type=1802 audit(4294969433.158:28): pid=24483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3641" res=0 errno=0 [ 768.222470][T24498] FAULT_INJECTION: forcing a failure. [ 768.222470][T24498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.252077][T24498] CPU: 0 UID: 0 PID: 24498 Comm: syz.4.3653 Not tainted syzkaller #0 PREEMPT(full) [ 768.252110][T24498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.252122][T24498] Call Trace: [ 768.252131][T24498] [ 768.252140][T24498] dump_stack_lvl+0x16c/0x1f0 [ 768.252181][T24498] should_fail_ex+0x512/0x640 [ 768.252226][T24498] _copy_from_user+0x2e/0xd0 [ 768.252254][T24498] copy_msghdr_from_user+0x98/0x160 [ 768.252296][T24498] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 768.252338][T24498] ? kfree+0x24f/0x4d0 [ 768.252360][T24498] ? __pfx__kstrtoull+0x10/0x10 [ 768.252399][T24498] ___sys_sendmsg+0xfe/0x1d0 [ 768.252437][T24498] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.252505][T24498] ? __pfx___might_resched+0x10/0x10 [ 768.252539][T24498] __sys_sendmmsg+0x200/0x420 [ 768.252579][T24498] ? __pfx___sys_sendmmsg+0x10/0x10 [ 768.252627][T24498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 768.252678][T24498] ? fput+0x9b/0xd0 [ 768.252712][T24498] ? ksys_write+0x1ac/0x250 [ 768.252739][T24498] ? __pfx_ksys_write+0x10/0x10 [ 768.252774][T24498] __x64_sys_sendmmsg+0x9c/0x100 [ 768.252810][T24498] ? lockdep_hardirqs_on+0x7c/0x110 [ 768.252843][T24498] do_syscall_64+0xcd/0x4c0 [ 768.252882][T24498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.252907][T24498] RIP: 0033:0x7fe36178eec9 [ 768.252928][T24498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.252951][T24498] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 768.252976][T24498] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 768.252993][T24498] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 768.253008][T24498] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 768.253024][T24498] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 768.253039][T24498] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 768.253072][T24498] [ 770.545425][T24575] FAULT_INJECTION: forcing a failure. [ 770.545425][T24575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.582901][T24575] CPU: 0 UID: 0 PID: 24575 Comm: syz.4.3658 Not tainted syzkaller #0 PREEMPT(full) [ 770.582933][T24575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 770.582946][T24575] Call Trace: [ 770.582953][T24575] [ 770.582961][T24575] dump_stack_lvl+0x16c/0x1f0 [ 770.582999][T24575] should_fail_ex+0x512/0x640 [ 770.583039][T24575] _copy_from_user+0x2e/0xd0 [ 770.583074][T24575] copy_msghdr_from_user+0x98/0x160 [ 770.583111][T24575] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 770.583152][T24575] ? kfree+0x24f/0x4d0 [ 770.583174][T24575] ? __pfx__kstrtoull+0x10/0x10 [ 770.583213][T24575] ___sys_sendmsg+0xfe/0x1d0 [ 770.583251][T24575] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.583329][T24575] ? __pfx___might_resched+0x10/0x10 [ 770.583364][T24575] __sys_sendmmsg+0x200/0x420 [ 770.583404][T24575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 770.583451][T24575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 770.583503][T24575] ? fput+0x9b/0xd0 [ 770.583538][T24575] ? ksys_write+0x1ac/0x250 [ 770.583566][T24575] ? __pfx_ksys_write+0x10/0x10 [ 770.583598][T24575] __x64_sys_sendmmsg+0x9c/0x100 [ 770.583633][T24575] ? lockdep_hardirqs_on+0x7c/0x110 [ 770.583668][T24575] do_syscall_64+0xcd/0x4c0 [ 770.583707][T24575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.583732][T24575] RIP: 0033:0x7fe36178eec9 [ 770.583753][T24575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.583777][T24575] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.583802][T24575] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 770.583818][T24575] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 770.583833][T24575] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 770.583849][T24575] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 770.583863][T24575] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 770.583898][T24575] [ 771.544502][T24587] binder: 24586:24587 ioctl 400c620e 2000000039c0 returned -22 [ 772.757114][ T30] audit: type=1804 audit(4294969438.396:29): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3669" name="/newroot/30/file0" dev="tmpfs" ino=170 res=1 errno=0 [ 773.500934][T24658] FAULT_INJECTION: forcing a failure. [ 773.500934][T24658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.614323][T24658] CPU: 1 UID: 0 PID: 24658 Comm: syz.3.3671 Not tainted syzkaller #0 PREEMPT(full) [ 773.614354][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 773.614367][T24658] Call Trace: [ 773.614376][T24658] [ 773.614386][T24658] dump_stack_lvl+0x16c/0x1f0 [ 773.614426][T24658] should_fail_ex+0x512/0x640 [ 773.614465][T24658] _copy_from_user+0x2e/0xd0 [ 773.614491][T24658] copy_msghdr_from_user+0x98/0x160 [ 773.614526][T24658] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 773.614561][T24658] ? kfree+0x24f/0x4d0 [ 773.614581][T24658] ? __pfx__kstrtoull+0x10/0x10 [ 773.614615][T24658] ___sys_sendmsg+0xfe/0x1d0 [ 773.614651][T24658] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.614716][T24658] ? __pfx___might_resched+0x10/0x10 [ 773.614754][T24658] __sys_sendmmsg+0x200/0x420 [ 773.614790][T24658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 773.614833][T24658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 773.614876][T24658] ? fput+0x9b/0xd0 [ 773.614905][T24658] ? ksys_write+0x1ac/0x250 [ 773.614929][T24658] ? __pfx_ksys_write+0x10/0x10 [ 773.614964][T24658] __x64_sys_sendmmsg+0x9c/0x100 [ 773.615000][T24658] ? lockdep_hardirqs_on+0x7c/0x110 [ 773.615038][T24658] do_syscall_64+0xcd/0x4c0 [ 773.615077][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.615102][T24658] RIP: 0033:0x7f184f18eec9 [ 773.615122][T24658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.615147][T24658] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 773.615171][T24658] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 773.615188][T24658] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 773.615204][T24658] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 773.615220][T24658] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 773.615235][T24658] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 773.615270][T24658] [ 774.443925][T24661] ima: policy update failed [ 774.484935][ T30] audit: type=1802 audit(4294969440.095:30): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3673" res=0 errno=0 [ 774.609636][T24671] FAULT_INJECTION: forcing a failure. [ 774.609636][T24671] name fail_futex, interval 1, probability 0, space 0, times 0 [ 774.626463][T24671] CPU: 0 UID: 0 PID: 24671 Comm: syz.2.3674 Not tainted syzkaller #0 PREEMPT(full) [ 774.626486][T24671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 774.626496][T24671] Call Trace: [ 774.626502][T24671] [ 774.626509][T24671] dump_stack_lvl+0x16c/0x1f0 [ 774.626536][T24671] should_fail_ex+0x512/0x640 [ 774.626561][T24671] get_futex_key+0x1d0/0x1560 [ 774.626582][T24671] ? __pfx_get_futex_key+0x10/0x10 [ 774.626601][T24671] ? __cgroup_account_cputime+0xcc/0x120 [ 774.626620][T24671] futex_wait_setup+0x9d/0x550 [ 774.626646][T24671] __futex_wait+0x194/0x2f0 [ 774.626668][T24671] ? __pfx___futex_wait+0x10/0x10 [ 774.626687][T24671] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 774.626706][T24671] ? lockdep_hardirqs_on+0x7c/0x110 [ 774.626728][T24671] ? __pfx_futex_wake_mark+0x10/0x10 [ 774.626751][T24671] ? futex_private_hash_put+0x176/0x300 [ 774.626770][T24671] ? futex_private_hash_put+0x18a/0x300 [ 774.626787][T24671] futex_wait+0xe8/0x380 [ 774.626808][T24671] ? __pfx_futex_wait+0x10/0x10 [ 774.626832][T24671] ? read_tsc+0x9/0x20 [ 774.626848][T24671] ? ktime_get_ts64+0x256/0x400 [ 774.626865][T24671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 774.626889][T24671] do_futex+0x229/0x350 [ 774.626907][T24671] ? __pfx_do_futex+0x10/0x10 [ 774.626929][T24671] __x64_sys_futex+0x1e0/0x4c0 [ 774.626949][T24671] ? __pfx___x64_sys_futex+0x10/0x10 [ 774.626968][T24671] ? __pfx_do_writev+0x10/0x10 [ 774.626988][T24671] do_syscall_64+0xcd/0x4c0 [ 774.627011][T24671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.627026][T24671] RIP: 0033:0x7ff2ccd8eec9 [ 774.627038][T24671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.627051][T24671] RSP: 002b:00007ff2cdcde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 774.627066][T24671] RAX: ffffffffffffffda RBX: 00007ff2ccfe5fa8 RCX: 00007ff2ccd8eec9 [ 774.627075][T24671] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff2ccfe5fa8 [ 774.627083][T24671] RBP: 00007ff2ccfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 774.627092][T24671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.627100][T24671] R13: 00007ff2ccfe6038 R14: 00007ffc232b3970 R15: 00007ffc232b3a58 [ 774.627119][T24671] [ 775.880742][T24700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3683'. [ 775.979123][T24703] FAULT_INJECTION: forcing a failure. [ 775.979123][T24703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.993852][T24703] CPU: 1 UID: 0 PID: 24703 Comm: syz.2.3684 Not tainted syzkaller #0 PREEMPT(full) [ 775.993883][T24703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.993897][T24703] Call Trace: [ 775.993905][T24703] [ 775.993913][T24703] dump_stack_lvl+0x16c/0x1f0 [ 775.993950][T24703] should_fail_ex+0x512/0x640 [ 775.993991][T24703] _copy_from_user+0x2e/0xd0 [ 775.994019][T24703] copy_msghdr_from_user+0x98/0x160 [ 775.994057][T24703] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 775.994103][T24703] ? kfree+0x24f/0x4d0 [ 775.994125][T24703] ? __pfx__kstrtoull+0x10/0x10 [ 775.994172][T24703] ___sys_sendmsg+0xfe/0x1d0 [ 775.994209][T24703] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.994276][T24703] ? __pfx___might_resched+0x10/0x10 [ 775.994310][T24703] __sys_sendmmsg+0x200/0x420 [ 775.994350][T24703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 775.994396][T24703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.994448][T24703] ? fput+0x9b/0xd0 [ 775.994481][T24703] ? ksys_write+0x1ac/0x250 [ 775.994508][T24703] ? __pfx_ksys_write+0x10/0x10 [ 775.994542][T24703] __x64_sys_sendmmsg+0x9c/0x100 [ 775.994577][T24703] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.994610][T24703] do_syscall_64+0xcd/0x4c0 [ 775.994648][T24703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.994673][T24703] RIP: 0033:0x7ff2ccd8eec9 [ 775.994692][T24703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.994715][T24703] RSP: 002b:00007ff2cdcbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 775.994737][T24703] RAX: ffffffffffffffda RBX: 00007ff2ccfe6090 RCX: 00007ff2ccd8eec9 [ 775.994753][T24703] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 775.994767][T24703] RBP: 00007ff2cdcbd090 R08: 0000000000000000 R09: 0000000000000000 [ 775.994780][T24703] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 775.994797][T24703] R13: 00007ff2ccfe6128 R14: 00007ff2ccfe6090 R15: 00007ffc232b3a58 [ 775.994828][T24703] [ 776.224090][T24703] Process accounting paused [ 776.758396][T24742] FAULT_INJECTION: forcing a failure. [ 776.758396][T24742] name fail_futex, interval 1, probability 0, space 0, times 0 [ 776.780961][T24742] CPU: 1 UID: 0 PID: 24742 Comm: syz.1.3688 Not tainted syzkaller #0 PREEMPT(full) [ 776.780997][T24742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.781013][T24742] Call Trace: [ 776.781023][T24742] [ 776.781033][T24742] dump_stack_lvl+0x16c/0x1f0 [ 776.781074][T24742] should_fail_ex+0x512/0x640 [ 776.781100][T24742] get_futex_key+0x1d0/0x1560 [ 776.781120][T24742] ? __pfx_get_futex_key+0x10/0x10 [ 776.781138][T24742] ? find_held_lock+0x2b/0x80 [ 776.781151][T24742] ? __might_fault+0xe3/0x190 [ 776.781168][T24742] ? __might_fault+0xe3/0x190 [ 776.781182][T24742] ? __might_fault+0x13b/0x190 [ 776.781201][T24742] futex_wake+0xea/0x530 [ 776.781221][T24742] ? _copy_to_user+0x48/0xd0 [ 776.781236][T24742] ? __pfx_futex_wake+0x10/0x10 [ 776.781259][T24742] ? read_tsc+0x9/0x20 [ 776.781275][T24742] ? ktime_get_ts64+0x256/0x400 [ 776.781292][T24742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 776.781318][T24742] do_futex+0x1e3/0x350 [ 776.781336][T24742] ? __pfx_do_futex+0x10/0x10 [ 776.781358][T24742] __x64_sys_futex+0x1e0/0x4c0 [ 776.781379][T24742] ? __pfx___x64_sys_futex+0x10/0x10 [ 776.781397][T24742] ? __pfx_do_writev+0x10/0x10 [ 776.781418][T24742] do_syscall_64+0xcd/0x4c0 [ 776.781440][T24742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.781455][T24742] RIP: 0033:0x7f6b7d78eec9 [ 776.781467][T24742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.781482][T24742] RSP: 002b:00007f6b7e6020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 776.781496][T24742] RAX: ffffffffffffffda RBX: 00007f6b7d9e5fa8 RCX: 00007f6b7d78eec9 [ 776.781506][T24742] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b7d9e5fac [ 776.781514][T24742] RBP: 00007f6b7d9e5fa0 R08: 00007f6b7e603000 R09: 0000000000000000 [ 776.781523][T24742] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 776.781531][T24742] R13: 00007f6b7d9e6038 R14: 00007ffd4b9f75b0 R15: 00007ffd4b9f7698 [ 776.781551][T24742] [ 777.193958][T24752] ima: policy update failed [ 777.199299][ T30] audit: type=1802 audit(4294969442.843:31): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3692" res=0 errno=0 [ 777.514858][T24774] bridge0: port 3(gretap0) entered blocking state [ 777.522096][T24774] bridge0: port 3(gretap0) entered disabled state [ 777.582312][T24774] gretap0: entered allmulticast mode [ 777.599867][T24774] gretap0: entered promiscuous mode [ 777.609390][T24774] bridge0: port 3(gretap0) entered blocking state [ 777.615975][T24774] bridge0: port 3(gretap0) entered forwarding state [ 777.658423][T24754] ima: policy update failed [ 777.663455][ T30] audit: type=1802 audit(4294969443.293:32): pid=24754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3693" res=0 errno=0 [ 778.226722][T24758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 778.257485][T24758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 778.264614][T24758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 778.302962][T24758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 778.798351][T24808] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 778.863213][T24813] FAULT_INJECTION: forcing a failure. [ 778.863213][T24813] name failslab, interval 1, probability 0, space 0, times 0 [ 778.876729][T24813] CPU: 0 UID: 0 PID: 24813 Comm: syz.2.3701 Not tainted syzkaller #0 PREEMPT(full) [ 778.876767][T24813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.876780][T24813] Call Trace: [ 778.876788][T24813] [ 778.876797][T24813] dump_stack_lvl+0x16c/0x1f0 [ 778.876837][T24813] should_fail_ex+0x512/0x640 [ 778.876877][T24813] ? __kmalloc_noprof+0xbf/0x510 [ 778.876909][T24813] ? rds_message_alloc+0x42/0x230 [ 778.876940][T24813] should_failslab+0xc2/0x120 [ 778.876971][T24813] __kmalloc_noprof+0xd2/0x510 [ 778.877000][T24813] ? rds_sendmsg+0x747/0x31f0 [ 778.877027][T24813] rds_message_alloc+0x42/0x230 [ 778.877060][T24813] rds_sendmsg+0xb5d/0x31f0 [ 778.877100][T24813] ? __pfx_rds_sendmsg+0x10/0x10 [ 778.877122][T24813] ? aa_sk_perm+0x2f4/0xb10 [ 778.877158][T24813] ? __pfx_aa_sk_perm+0x10/0x10 [ 778.877184][T24813] ? import_ubuf+0x1b6/0x220 [ 778.877218][T24813] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 778.877249][T24813] ? ____sys_sendmsg+0xa98/0xc70 [ 778.877275][T24813] ____sys_sendmsg+0xa98/0xc70 [ 778.877303][T24813] ? copy_msghdr_from_user+0x10a/0x160 [ 778.877338][T24813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.877380][T24813] ___sys_sendmsg+0x134/0x1d0 [ 778.877416][T24813] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.877493][T24813] __sys_sendmsg+0x16d/0x220 [ 778.877529][T24813] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.877587][T24813] do_syscall_64+0xcd/0x4c0 [ 778.877626][T24813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.877651][T24813] RIP: 0033:0x7ff2ccd8eec9 [ 778.877670][T24813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.877694][T24813] RSP: 002b:00007ff2cdcde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.877718][T24813] RAX: ffffffffffffffda RBX: 00007ff2ccfe5fa0 RCX: 00007ff2ccd8eec9 [ 778.877735][T24813] RDX: 0000000000100000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 778.877751][T24813] RBP: 00007ff2cdcde090 R08: 0000000000000000 R09: 0000000000000000 [ 778.877766][T24813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.877781][T24813] R13: 00007ff2ccfe6038 R14: 00007ff2ccfe5fa0 R15: 00007ffc232b3a58 [ 778.877815][T24813] [ 779.350632][T24835] FAULT_INJECTION: forcing a failure. [ 779.350632][T24835] name failslab, interval 1, probability 0, space 0, times 0 [ 779.365015][T24835] CPU: 0 UID: 0 PID: 24835 Comm: syz.3.3705 Not tainted syzkaller #0 PREEMPT(full) [ 779.365047][T24835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 779.365062][T24835] Call Trace: [ 779.365070][T24835] [ 779.365080][T24835] dump_stack_lvl+0x16c/0x1f0 [ 779.365120][T24835] should_fail_ex+0x512/0x640 [ 779.365157][T24835] ? fs_reclaim_acquire+0xae/0x150 [ 779.365193][T24835] ? tomoyo_encode2+0x100/0x3e0 [ 779.365224][T24835] should_failslab+0xc2/0x120 [ 779.365256][T24835] __kmalloc_noprof+0xd2/0x510 [ 779.365285][T24835] ? d_absolute_path+0x136/0x1a0 [ 779.365326][T24835] tomoyo_encode2+0x100/0x3e0 [ 779.365365][T24835] tomoyo_encode+0x29/0x50 [ 779.365397][T24835] tomoyo_realpath_from_path+0x18f/0x6e0 [ 779.365441][T24835] tomoyo_path_number_perm+0x245/0x580 [ 779.365469][T24835] ? tomoyo_path_number_perm+0x237/0x580 [ 779.365502][T24835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.365535][T24835] ? find_held_lock+0x2b/0x80 [ 779.365594][T24835] ? find_held_lock+0x2b/0x80 [ 779.365617][T24835] ? hook_file_ioctl_common+0x145/0x410 [ 779.365658][T24835] ? __fget_files+0x20e/0x3c0 [ 779.365689][T24835] security_file_ioctl+0x9b/0x240 [ 779.365717][T24835] __x64_sys_ioctl+0xb7/0x210 [ 779.365754][T24835] do_syscall_64+0xcd/0x4c0 [ 779.365790][T24835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.365821][T24835] RIP: 0033:0x7f184f18eec9 [ 779.365840][T24835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.365861][T24835] RSP: 002b:00007f1850031038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.365882][T24835] RAX: ffffffffffffffda RBX: 00007f184f3e5fa0 RCX: 00007f184f18eec9 [ 779.365896][T24835] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000004 [ 779.365909][T24835] RBP: 00007f1850031090 R08: 0000000000000000 R09: 0000000000000000 [ 779.365922][T24835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.365937][T24835] R13: 00007f184f3e6038 R14: 00007f184f3e5fa0 R15: 00007ffd7ee77628 [ 779.365971][T24835] [ 779.366059][T24835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.602911][T24834] tty tty12: ldisc open failed (-12), clearing slot 11 [ 779.636695][T24855] netlink: 'syz.4.3706': attribute type 10 has an invalid length. [ 779.644569][T24855] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3706'. [ 779.674902][T24833] ima: policy update failed [ 779.686215][ T30] audit: type=1802 audit(4294969445.322:33): pid=24833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3705" res=0 errno=0 [ 779.787627][T20024] Bluetooth: hci4: command 0x0406 tx timeout [ 780.095204][T24870] FAULT_INJECTION: forcing a failure. [ 780.095204][T24870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.128150][T24870] CPU: 1 UID: 0 PID: 24870 Comm: syz.3.3708 Not tainted syzkaller #0 PREEMPT(full) [ 780.128186][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 780.128200][T24870] Call Trace: [ 780.128209][T24870] [ 780.128219][T24870] dump_stack_lvl+0x16c/0x1f0 [ 780.128261][T24870] should_fail_ex+0x512/0x640 [ 780.128303][T24870] _copy_from_user+0x2e/0xd0 [ 780.128331][T24870] copy_msghdr_from_user+0x98/0x160 [ 780.128369][T24870] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 780.128410][T24870] ? kfree+0x24f/0x4d0 [ 780.128433][T24870] ? __pfx__kstrtoull+0x10/0x10 [ 780.128471][T24870] ___sys_sendmsg+0xfe/0x1d0 [ 780.128505][T24870] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.128562][T24870] ? __pfx___might_resched+0x10/0x10 [ 780.128593][T24870] __sys_sendmmsg+0x200/0x420 [ 780.128633][T24870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 780.128680][T24870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 780.128731][T24870] ? fput+0x9b/0xd0 [ 780.128765][T24870] ? ksys_write+0x1ac/0x250 [ 780.128793][T24870] ? __pfx_ksys_write+0x10/0x10 [ 780.128827][T24870] __x64_sys_sendmmsg+0x9c/0x100 [ 780.128863][T24870] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.128897][T24870] do_syscall_64+0xcd/0x4c0 [ 780.128935][T24870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.128961][T24870] RIP: 0033:0x7f184f18eec9 [ 780.128981][T24870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.129005][T24870] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 780.129036][T24870] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 780.129054][T24870] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 780.129069][T24870] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 780.129085][T24870] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 780.129101][T24870] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 780.129134][T24870] [ 780.507418][T20024] Bluetooth: hci2: command 0x0c1a tx timeout [ 780.515104][T20024] Bluetooth: hci1: command 0x0c1a tx timeout [ 780.521469][T20024] Bluetooth: hci3: command 0x0c1a tx timeout [ 780.729805][T24876] netlink: 'syz.4.3711': attribute type 4 has an invalid length. [ 780.737589][T24876] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3711'. [ 780.965789][T24881] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 781.266737][T24892] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 782.744817][T24952] FAULT_INJECTION: forcing a failure. [ 782.744817][T24952] name failslab, interval 1, probability 0, space 0, times 0 [ 782.845914][T24952] CPU: 1 UID: 0 PID: 24952 Comm: syz.2.3718 Not tainted syzkaller #0 PREEMPT(full) [ 782.845946][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 782.845960][T24952] Call Trace: [ 782.845969][T24952] [ 782.845978][T24952] dump_stack_lvl+0x16c/0x1f0 [ 782.846017][T24952] should_fail_ex+0x512/0x640 [ 782.846050][T24952] ? fs_reclaim_acquire+0xae/0x150 [ 782.846086][T24952] ? tomoyo_encode2+0x100/0x3e0 [ 782.846115][T24952] should_failslab+0xc2/0x120 [ 782.846146][T24952] __kmalloc_noprof+0xd2/0x510 [ 782.846174][T24952] ? d_absolute_path+0x136/0x1a0 [ 782.846212][T24952] tomoyo_encode2+0x100/0x3e0 [ 782.846251][T24952] tomoyo_encode+0x29/0x50 [ 782.846282][T24952] tomoyo_realpath_from_path+0x18f/0x6e0 [ 782.846326][T24952] tomoyo_path_number_perm+0x245/0x580 [ 782.846354][T24952] ? tomoyo_path_number_perm+0x237/0x580 [ 782.846383][T24952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 782.846414][T24952] ? find_held_lock+0x2b/0x80 [ 782.846469][T24952] ? find_held_lock+0x2b/0x80 [ 782.846502][T24952] ? hook_file_ioctl_common+0x145/0x410 [ 782.846540][T24952] ? __fget_files+0x20e/0x3c0 [ 782.846571][T24952] security_file_ioctl+0x9b/0x240 [ 782.846601][T24952] __x64_sys_ioctl+0xb7/0x210 [ 782.846641][T24952] do_syscall_64+0xcd/0x4c0 [ 782.846678][T24952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.846702][T24952] RIP: 0033:0x7ff2ccd8eec9 [ 782.846722][T24952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.846744][T24952] RSP: 002b:00007ff2cdcde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.846765][T24952] RAX: ffffffffffffffda RBX: 00007ff2ccfe5fa0 RCX: 00007ff2ccd8eec9 [ 782.846781][T24952] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000004 [ 782.846796][T24952] RBP: 00007ff2cdcde090 R08: 0000000000000000 R09: 0000000000000000 [ 782.846809][T24952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.846822][T24952] R13: 00007ff2ccfe6038 R14: 00007ff2ccfe5fa0 R15: 00007ffc232b3a58 [ 782.846857][T24952] [ 782.846882][T24952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 783.071080][T24951] ima: policy update failed [ 783.085598][ T30] audit: type=1802 audit(4294969448.710:34): pid=24951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3718" res=0 errno=0 [ 784.980860][T24985] ima: policy update failed [ 785.010877][ T30] audit: type=1802 audit(4294969450.640:35): pid=24985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3728" res=0 errno=0 [ 785.597988][T25026] ubi0: attaching mtd0 [ 785.952400][T25026] ubi0: scanning is finished [ 785.981566][T25026] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 786.162921][T25026] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 786.774715][T25043] FAULT_INJECTION: forcing a failure. [ 786.774715][T25043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.807962][T25043] CPU: 1 UID: 0 PID: 25043 Comm: syz.4.3735 Not tainted syzkaller #0 PREEMPT(full) [ 786.807984][T25043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 786.807993][T25043] Call Trace: [ 786.807999][T25043] [ 786.808005][T25043] dump_stack_lvl+0x16c/0x1f0 [ 786.808031][T25043] should_fail_ex+0x512/0x640 [ 786.808058][T25043] _copy_to_user+0x32/0xd0 [ 786.808076][T25043] simple_read_from_buffer+0xcb/0x170 [ 786.808092][T25043] proc_fail_nth_read+0x197/0x240 [ 786.808117][T25043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.808133][T25043] ? rw_verify_area+0xcf/0x6c0 [ 786.808148][T25043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.808163][T25043] vfs_read+0x1e1/0xcf0 [ 786.808181][T25043] ? __pfx___mutex_lock+0x10/0x10 [ 786.808203][T25043] ? __pfx_vfs_read+0x10/0x10 [ 786.808223][T25043] ? __fget_files+0x20e/0x3c0 [ 786.808244][T25043] ksys_read+0x12a/0x250 [ 786.808260][T25043] ? __pfx_ksys_read+0x10/0x10 [ 786.808281][T25043] do_syscall_64+0xcd/0x4c0 [ 786.808304][T25043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.808318][T25043] RIP: 0033:0x7fe36178d8dc [ 786.808330][T25043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 786.808344][T25043] RSP: 002b:00007fe362566030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.808361][T25043] RAX: ffffffffffffffda RBX: 00007fe3619e5fa0 RCX: 00007fe36178d8dc [ 786.808371][T25043] RDX: 000000000000000f RSI: 00007fe3625660a0 RDI: 0000000000000004 [ 786.808379][T25043] RBP: 00007fe362566090 R08: 0000000000000000 R09: 0000000000000000 [ 786.808388][T25043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.808396][T25043] R13: 00007fe3619e6038 R14: 00007fe3619e5fa0 R15: 00007ffe6f8b50b8 [ 786.808415][T25043] [ 787.259158][T25045] program syz.3.3736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.609700][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'. [ 788.683513][T25112] FAULT_INJECTION: forcing a failure. [ 788.683513][T25112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.773878][T25112] CPU: 0 UID: 0 PID: 25112 Comm: syz.2.3742 Not tainted syzkaller #0 PREEMPT(full) [ 788.773910][T25112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 788.773923][T25112] Call Trace: [ 788.773931][T25112] [ 788.773940][T25112] dump_stack_lvl+0x16c/0x1f0 [ 788.773981][T25112] should_fail_ex+0x512/0x640 [ 788.774022][T25112] _copy_from_user+0x2e/0xd0 [ 788.774050][T25112] copy_msghdr_from_user+0x98/0x160 [ 788.774087][T25112] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 788.774128][T25112] ? kfree+0x24f/0x4d0 [ 788.774153][T25112] ? __pfx__kstrtoull+0x10/0x10 [ 788.774193][T25112] ___sys_sendmsg+0xfe/0x1d0 [ 788.774229][T25112] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.774294][T25112] ? __pfx___might_resched+0x10/0x10 [ 788.774327][T25112] __sys_sendmmsg+0x200/0x420 [ 788.774365][T25112] ? __pfx___sys_sendmmsg+0x10/0x10 [ 788.774412][T25112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 788.774464][T25112] ? fput+0x9b/0xd0 [ 788.774494][T25112] ? ksys_write+0x1ac/0x250 [ 788.774518][T25112] ? __pfx_ksys_write+0x10/0x10 [ 788.774548][T25112] __x64_sys_sendmmsg+0x9c/0x100 [ 788.774579][T25112] ? lockdep_hardirqs_on+0x7c/0x110 [ 788.774613][T25112] do_syscall_64+0xcd/0x4c0 [ 788.774651][T25112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.774675][T25112] RIP: 0033:0x7ff2ccd8eec9 [ 788.774695][T25112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.774719][T25112] RSP: 002b:00007ff2cdcbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 788.774742][T25112] RAX: ffffffffffffffda RBX: 00007ff2ccfe6090 RCX: 00007ff2ccd8eec9 [ 788.774760][T25112] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 788.774775][T25112] RBP: 00007ff2cdcbd090 R08: 0000000000000000 R09: 0000000000000000 [ 788.774790][T25112] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 788.774805][T25112] R13: 00007ff2ccfe6128 R14: 00007ff2ccfe6090 R15: 00007ffc232b3a58 [ 788.774839][T25112] [ 790.738632][ T30] audit: type=1807 audit(4294969456.367:36): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 790.774071][T25155] ima: policy update failed [ 790.787356][ T30] audit: type=1802 audit(4294969456.387:37): pid=25155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3748" res=0 errno=0 [ 790.814590][T25157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3747'. [ 790.851953][ T30] audit: type=1802 audit(4294969456.457:38): pid=25155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3748" res=0 errno=0 [ 791.181585][T25148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 791.193419][T25148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 791.207321][T25148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 791.234621][T25148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.993622][T25188] FAULT_INJECTION: forcing a failure. [ 791.993622][T25188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.006872][T25188] CPU: 0 UID: 0 PID: 25188 Comm: syz.2.3753 Not tainted syzkaller #0 PREEMPT(full) [ 792.006905][T25188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 792.006921][T25188] Call Trace: [ 792.006930][T25188] [ 792.006940][T25188] dump_stack_lvl+0x16c/0x1f0 [ 792.006982][T25188] should_fail_ex+0x512/0x640 [ 792.007029][T25188] _copy_from_user+0x2e/0xd0 [ 792.007058][T25188] copy_msghdr_from_user+0x98/0x160 [ 792.007095][T25188] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 792.007137][T25188] ? kfree+0x24f/0x4d0 [ 792.007159][T25188] ? __pfx__kstrtoull+0x10/0x10 [ 792.007199][T25188] ___sys_sendmsg+0xfe/0x1d0 [ 792.007236][T25188] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.007307][T25188] ? __pfx___might_resched+0x10/0x10 [ 792.007342][T25188] __sys_sendmmsg+0x200/0x420 [ 792.007381][T25188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 792.007428][T25188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.007479][T25188] ? fput+0x9b/0xd0 [ 792.007514][T25188] ? ksys_write+0x1ac/0x250 [ 792.007549][T25188] ? __pfx_ksys_write+0x10/0x10 [ 792.007584][T25188] __x64_sys_sendmmsg+0x9c/0x100 [ 792.007620][T25188] ? lockdep_hardirqs_on+0x7c/0x110 [ 792.007654][T25188] do_syscall_64+0xcd/0x4c0 [ 792.007693][T25188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.007719][T25188] RIP: 0033:0x7ff2ccd8eec9 [ 792.007739][T25188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.007763][T25188] RSP: 002b:00007ff2cdcbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 792.007787][T25188] RAX: ffffffffffffffda RBX: 00007ff2ccfe6090 RCX: 00007ff2ccd8eec9 [ 792.007804][T25188] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 792.007818][T25188] RBP: 00007ff2cdcbd090 R08: 0000000000000000 R09: 0000000000000000 [ 792.007833][T25188] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 792.007846][T25188] R13: 00007ff2ccfe6128 R14: 00007ff2ccfe6090 R15: 00007ffc232b3a58 [ 792.007878][T25188] [ 792.593867][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 792.996151][T25196] vhci_hcd: invalid port number 16 [ 793.001318][T25196] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 793.242958][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 793.242969][T20024] Bluetooth: hci2: command 0x0c1a tx timeout [ 793.314787][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 795.077094][T25209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 795.115417][T25209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.122286][T25209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 795.141893][T25209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.186033][T20024] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 795.204140][T20024] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 795.213542][T20024] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 795.231359][T20024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 795.245863][T20024] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 795.475345][T20024] Bluetooth: hci4: command 0x0406 tx timeout [ 796.529058][T25238] chnl_net:caif_netlink_parms(): no params data found [ 796.810601][T25394] ima: policy update failed [ 796.838488][ T30] audit: type=1802 audit(4294969462.464:39): pid=25394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3769" res=0 errno=0 [ 797.157621][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 797.163915][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout [ 797.170312][T20024] Bluetooth: hci1: command 0x0c1a tx timeout [ 797.304311][T25238] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.316179][T20024] Bluetooth: hci5: command tx timeout [ 797.322821][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.331807][T25238] bridge_slave_0: entered allmulticast mode [ 797.340112][T25238] bridge_slave_0: entered promiscuous mode [ 797.355132][T25238] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.370783][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.391381][T25238] bridge_slave_1: entered allmulticast mode [ 797.411148][T25238] bridge_slave_1: entered promiscuous mode [ 797.653107][T25238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.679824][T25238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.061462][T25238] team0: Port device team_slave_0 added [ 798.192739][T25238] team0: Port device team_slave_1 added [ 798.559140][T25238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.618872][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.752513][T25238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.801612][T25238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.816867][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.006951][T25238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.221212][T25238] hsr_slave_0: entered promiscuous mode [ 799.268198][T25238] hsr_slave_1: entered promiscuous mode [ 799.297334][T25238] debugfs: 'hsr0' already exists in 'hsr' [ 799.307054][T25238] Cannot create hsr debugfs directory [ 799.397129][T20024] Bluetooth: hci5: command tx timeout [ 799.686617][T25620] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 800.155826][ T30] audit: type=1800 audit(4294969465.782:40): pid=25693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3785" name="dbroot" dev="configfs" ino=85397 res=0 errno=0 [ 800.202066][T25238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 800.310256][T25238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.393097][T25238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 800.502273][T25238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 800.694001][T25726] vhci_hcd: invalid port number 16 [ 800.700166][T25726] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 801.382596][T25238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.480700][T20024] Bluetooth: hci5: command tx timeout [ 801.577184][T25238] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.601435][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.608711][ T9791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.641633][T25760] FAULT_INJECTION: forcing a failure. [ 801.641633][T25760] name failslab, interval 1, probability 0, space 0, times 0 [ 801.655825][T25760] CPU: 1 UID: 0 PID: 25760 Comm: syz.2.3791 Not tainted syzkaller #0 PREEMPT(full) [ 801.655863][T25760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.655881][T25760] Call Trace: [ 801.655891][T25760] [ 801.655903][T25760] dump_stack_lvl+0x16c/0x1f0 [ 801.655949][T25760] should_fail_ex+0x512/0x640 [ 801.655988][T25760] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 801.656021][T25760] should_failslab+0xc2/0x120 [ 801.656057][T25760] __kmalloc_cache_noprof+0x6a/0x3e0 [ 801.656084][T25760] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x305/0x610 [ 801.656115][T25760] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x3b3/0x610 [ 801.656144][T25760] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 801.656181][T25760] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 801.656219][T25760] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 801.656249][T25760] snd_mixer_oss_ioctl1+0xb4f/0x1e40 [ 801.656287][T25760] ? lockdep_hardirqs_on+0x7c/0x110 [ 801.656326][T25760] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 801.656355][T25760] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 801.656395][T25760] ? tomoyo_path_number_perm+0x295/0x580 [ 801.656443][T25760] ? tomoyo_path_number_perm+0x18d/0x580 [ 801.656480][T25760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 801.656512][T25760] ? futex_wake+0x1ad/0x530 [ 801.656565][T25760] snd_mixer_oss_ioctl_card+0x102/0x170 [ 801.656606][T25760] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 801.656656][T25760] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 801.656686][T25760] ? find_held_lock+0x2b/0x80 [ 801.656710][T25760] ? hook_file_ioctl_common+0x145/0x410 [ 801.656744][T25760] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 801.656780][T25760] ? __fget_files+0x20e/0x3c0 [ 801.656814][T25760] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 801.656848][T25760] __x64_sys_ioctl+0x18b/0x210 [ 801.656889][T25760] do_syscall_64+0xcd/0x4c0 [ 801.656931][T25760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.656962][T25760] RIP: 0033:0x7ff2ccd8eec9 [ 801.656986][T25760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.657011][T25760] RSP: 002b:00007ff2cdcde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.657038][T25760] RAX: ffffffffffffffda RBX: 00007ff2ccfe5fa0 RCX: 00007ff2ccd8eec9 [ 801.657056][T25760] RDX: 0000000000000000 RSI: 00000000c0044dff RDI: 0000000000000002 [ 801.657072][T25760] RBP: 00007ff2cce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 801.657088][T25760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.657103][T25760] R13: 00007ff2ccfe6038 R14: 00007ff2ccfe5fa0 R15: 00007ffc232b3a58 [ 801.657139][T25760] [ 801.931223][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.938431][ T9791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.063285][T25238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.118671][T25779] ima: policy update failed [ 803.142662][ T30] audit: type=1802 audit(4294969468.770:41): pid=25779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3796" res=0 errno=0 [ 803.559982][T25427] Bluetooth: hci5: command tx timeout [ 804.232280][T25238] veth0_vlan: entered promiscuous mode [ 804.276961][T25238] veth1_vlan: entered promiscuous mode [ 804.473636][T25238] veth0_macvtap: entered promiscuous mode [ 804.539205][T25238] veth1_macvtap: entered promiscuous mode [ 804.636611][T25238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.688271][T25238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.825291][T16054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.844730][T16054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.885502][T16054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.041761][T16054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.208164][T25875] FAULT_INJECTION: forcing a failure. [ 805.208164][T25875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.231788][T25875] CPU: 1 UID: 0 PID: 25875 Comm: syz.4.3807 Not tainted syzkaller #0 PREEMPT(full) [ 805.231822][T25875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 805.231838][T25875] Call Trace: [ 805.231846][T25875] [ 805.231856][T25875] dump_stack_lvl+0x16c/0x1f0 [ 805.231898][T25875] should_fail_ex+0x512/0x640 [ 805.231941][T25875] _copy_from_user+0x2e/0xd0 [ 805.231968][T25875] copy_msghdr_from_user+0x98/0x160 [ 805.232005][T25875] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 805.232045][T25875] ? kfree+0x24f/0x4d0 [ 805.232075][T25875] ? __pfx__kstrtoull+0x10/0x10 [ 805.232115][T25875] ___sys_sendmsg+0xfe/0x1d0 [ 805.232153][T25875] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.232221][T25875] ? __pfx___might_resched+0x10/0x10 [ 805.232254][T25875] __sys_sendmmsg+0x200/0x420 [ 805.232295][T25875] ? __pfx___sys_sendmmsg+0x10/0x10 [ 805.232341][T25875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 805.232391][T25875] ? fput+0x9b/0xd0 [ 805.232425][T25875] ? ksys_write+0x1ac/0x250 [ 805.232453][T25875] ? __pfx_ksys_write+0x10/0x10 [ 805.232484][T25875] __x64_sys_sendmmsg+0x9c/0x100 [ 805.232516][T25875] ? lockdep_hardirqs_on+0x7c/0x110 [ 805.232546][T25875] do_syscall_64+0xcd/0x4c0 [ 805.232582][T25875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.232607][T25875] RIP: 0033:0x7fe36178eec9 [ 805.232626][T25875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.232650][T25875] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 805.232673][T25875] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 805.232689][T25875] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 805.232704][T25875] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 805.232720][T25875] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 805.232734][T25875] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 805.232769][T25875] [ 805.236472][T25870] Invalid ELF header magic: != ELF [ 805.576449][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.607467][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.783193][T16055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.811991][T16055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.968757][ T30] audit: type=1800 audit(4294969471.589:42): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3808" name="dbroot" dev="configfs" ino=86122 res=0 errno=0 [ 806.027766][T25891] ima: policy update failed [ 806.051024][ T30] audit: type=1802 audit(4294969471.669:43): pid=25891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3810" res=0 errno=0 [ 806.124410][T25870] kAFS: No cell specified [ 806.188878][T25899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3760'. [ 806.268062][T25876] Process accounting resumed [ 806.299611][ T30] audit: type=1807 audit(4294969471.919:44): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 806.318210][T25905] ima: policy update failed [ 806.324538][ T30] audit: type=1802 audit(4294969471.939:45): pid=25905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3812" res=0 errno=0 [ 806.366135][ T30] audit: type=1802 audit(4294969471.949:46): pid=25905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3812" res=0 errno=0 [ 806.573800][T25914] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 806.887817][T25919] __vm_enough_memory: pid: 25919, comm: syz.2.3813, bytes: 4398046511104 not enough memory for the allocation [ 807.184830][T25925] FAULT_INJECTION: forcing a failure. [ 807.184830][T25925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.218952][T25925] CPU: 0 UID: 0 PID: 25925 Comm: syz.5.3815 Not tainted syzkaller #0 PREEMPT(full) [ 807.218984][T25925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 807.218993][T25925] Call Trace: [ 807.218999][T25925] [ 807.219006][T25925] dump_stack_lvl+0x16c/0x1f0 [ 807.219032][T25925] should_fail_ex+0x512/0x640 [ 807.219057][T25925] _copy_from_user+0x2e/0xd0 [ 807.219073][T25925] copy_msghdr_from_user+0x98/0x160 [ 807.219095][T25925] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 807.219125][T25925] ? kfree+0x24f/0x4d0 [ 807.219137][T25925] ? __pfx__kstrtoull+0x10/0x10 [ 807.219159][T25925] ___sys_sendmsg+0xfe/0x1d0 [ 807.219186][T25925] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.219235][T25925] ? __pfx___might_resched+0x10/0x10 [ 807.219254][T25925] __sys_sendmmsg+0x200/0x420 [ 807.219277][T25925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 807.219303][T25925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 807.219331][T25925] ? fput+0x9b/0xd0 [ 807.219351][T25925] ? ksys_write+0x1ac/0x250 [ 807.219367][T25925] ? __pfx_ksys_write+0x10/0x10 [ 807.219385][T25925] __x64_sys_sendmmsg+0x9c/0x100 [ 807.219406][T25925] ? lockdep_hardirqs_on+0x7c/0x110 [ 807.219425][T25925] do_syscall_64+0xcd/0x4c0 [ 807.219447][T25925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.219462][T25925] RIP: 0033:0x7f2f2258eec9 [ 807.219474][T25925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.219488][T25925] RSP: 002b:00007f2f2345a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.219502][T25925] RAX: ffffffffffffffda RBX: 00007f2f227e6090 RCX: 00007f2f2258eec9 [ 807.219511][T25925] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 807.219520][T25925] RBP: 00007f2f2345a090 R08: 0000000000000000 R09: 0000000000000000 [ 807.219528][T25925] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 807.219536][T25925] R13: 00007f2f227e6128 R14: 00007f2f227e6090 R15: 00007ffcfec5f3c8 [ 807.219554][T25925] [ 808.631927][T25944] ima: policy update failed [ 808.642953][ T30] audit: type=1802 audit(4294969474.258:47): pid=25944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3820" res=0 errno=0 [ 808.710982][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.725074][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.248514][T25974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3833'. [ 810.422896][ T30] audit: type=1807 audit(4294969476.037:48): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 810.443079][T26014] ima: policy update failed [ 810.474174][T26021] FAULT_INJECTION: forcing a failure. [ 810.474174][T26021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.498893][ T30] audit: type=1802 audit(4294969476.037:49): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3834" res=0 errno=0 [ 810.517606][T26021] CPU: 1 UID: 0 PID: 26021 Comm: syz.4.3831 Not tainted syzkaller #0 PREEMPT(full) [ 810.517633][T26021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 810.517646][T26021] Call Trace: [ 810.517654][T26021] [ 810.517663][T26021] dump_stack_lvl+0x16c/0x1f0 [ 810.517701][T26021] should_fail_ex+0x512/0x640 [ 810.517742][T26021] _copy_from_user+0x2e/0xd0 [ 810.517770][T26021] copy_msghdr_from_user+0x98/0x160 [ 810.517820][T26021] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 810.517862][T26021] ? kfree+0x24f/0x4d0 [ 810.517884][T26021] ? __pfx__kstrtoull+0x10/0x10 [ 810.517924][T26021] ___sys_sendmsg+0xfe/0x1d0 [ 810.517961][T26021] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.518030][T26021] ? __pfx___might_resched+0x10/0x10 [ 810.518064][T26021] __sys_sendmmsg+0x200/0x420 [ 810.518103][T26021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 810.518151][T26021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.518202][T26021] ? fput+0x9b/0xd0 [ 810.518236][T26021] ? ksys_write+0x1ac/0x250 [ 810.518263][T26021] ? __pfx_ksys_write+0x10/0x10 [ 810.518297][T26021] __x64_sys_sendmmsg+0x9c/0x100 [ 810.518332][T26021] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.518367][T26021] do_syscall_64+0xcd/0x4c0 [ 810.518406][T26021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.518431][T26021] RIP: 0033:0x7fe36178eec9 [ 810.518450][T26021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.518474][T26021] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 810.518498][T26021] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 810.518515][T26021] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.518530][T26021] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 810.518543][T26021] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 810.518558][T26021] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 810.518592][T26021] [ 810.724862][ T30] audit: type=1802 audit(4294969476.067:50): pid=26014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3834" res=0 errno=0 [ 813.102763][T26098] ima: policy update failed [ 813.126402][ T30] audit: type=1802 audit(4294969478.745:51): pid=26098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3843" res=0 errno=0 [ 813.962206][T26113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3847'. [ 815.127076][T26154] Invalid ELF header magic: != ELF [ 815.296865][T26164] FAULT_INJECTION: forcing a failure. [ 815.296865][T26164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.340868][T26164] CPU: 1 UID: 0 PID: 26164 Comm: syz.4.3855 Not tainted syzkaller #0 PREEMPT(full) [ 815.340899][T26164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 815.340914][T26164] Call Trace: [ 815.340923][T26164] [ 815.340933][T26164] dump_stack_lvl+0x16c/0x1f0 [ 815.340974][T26164] should_fail_ex+0x512/0x640 [ 815.341016][T26164] _copy_from_user+0x2e/0xd0 [ 815.341051][T26164] copy_msghdr_from_user+0x98/0x160 [ 815.341089][T26164] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 815.341130][T26164] ? kfree+0x24f/0x4d0 [ 815.341154][T26164] ? __pfx___schedule+0x10/0x10 [ 815.341185][T26164] ? ____sys_sendmsg+0x543/0xc70 [ 815.341217][T26164] ___sys_sendmsg+0xfe/0x1d0 [ 815.341254][T26164] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.341321][T26164] ? __pfx___might_resched+0x10/0x10 [ 815.341354][T26164] __sys_sendmmsg+0x200/0x420 [ 815.341395][T26164] ? __pfx___sys_sendmmsg+0x10/0x10 [ 815.341442][T26164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 815.341493][T26164] ? fput+0x9b/0xd0 [ 815.341527][T26164] ? ksys_write+0x1ac/0x250 [ 815.341554][T26164] ? __pfx_ksys_write+0x10/0x10 [ 815.341589][T26164] __x64_sys_sendmmsg+0x9c/0x100 [ 815.341623][T26164] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.341657][T26164] do_syscall_64+0xcd/0x4c0 [ 815.341695][T26164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.341720][T26164] RIP: 0033:0x7fe36178eec9 [ 815.341740][T26164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.341763][T26164] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 815.341787][T26164] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 815.341804][T26164] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 815.341823][T26164] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 815.341838][T26164] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 815.341854][T26164] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 815.341887][T26164] [ 816.560458][T26153] kAFS: No cell specified [ 816.697874][T26174] bond0: option all_slaves_active: invalid value (20) [ 816.974311][T26212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3861'. [ 818.130626][T26260] FAULT_INJECTION: forcing a failure. [ 818.130626][T26260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.196572][T26260] CPU: 0 UID: 0 PID: 26260 Comm: syz.4.3866 Not tainted syzkaller #0 PREEMPT(full) [ 818.196602][T26260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 818.196615][T26260] Call Trace: [ 818.196623][T26260] [ 818.196631][T26260] dump_stack_lvl+0x16c/0x1f0 [ 818.196671][T26260] should_fail_ex+0x512/0x640 [ 818.196719][T26260] _copy_from_user+0x2e/0xd0 [ 818.196747][T26260] copy_msghdr_from_user+0x98/0x160 [ 818.196785][T26260] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 818.196826][T26260] ? kfree+0x24f/0x4d0 [ 818.196849][T26260] ? __pfx__kstrtoull+0x10/0x10 [ 818.196888][T26260] ___sys_sendmsg+0xfe/0x1d0 [ 818.196925][T26260] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.196992][T26260] ? __pfx___might_resched+0x10/0x10 [ 818.197026][T26260] __sys_sendmmsg+0x200/0x420 [ 818.197066][T26260] ? __pfx___sys_sendmmsg+0x10/0x10 [ 818.197114][T26260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 818.197164][T26260] ? fput+0x9b/0xd0 [ 818.197199][T26260] ? ksys_write+0x1ac/0x250 [ 818.197226][T26260] ? __pfx_ksys_write+0x10/0x10 [ 818.197260][T26260] __x64_sys_sendmmsg+0x9c/0x100 [ 818.197295][T26260] ? lockdep_hardirqs_on+0x7c/0x110 [ 818.197329][T26260] do_syscall_64+0xcd/0x4c0 [ 818.197368][T26260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.197393][T26260] RIP: 0033:0x7fe36178eec9 [ 818.197413][T26260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.197437][T26260] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.197461][T26260] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 818.197478][T26260] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 818.197493][T26260] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 818.197508][T26260] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 818.197523][T26260] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 818.197557][T26260] [ 820.092562][T26290] Debayer A: ================= START STATUS ================= [ 820.142668][T26290] Debayer A: Debayer Mean Window Size: 3 [ 820.177692][T26290] Debayer A: ================== END STATUS ================== [ 820.305332][T26293] random: crng reseeded on system resumption [ 820.555995][T21178] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 821.651091][T26338] FAULT_INJECTION: forcing a failure. [ 821.651091][T26338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.668712][T26338] CPU: 0 UID: 0 PID: 26338 Comm: syz.3.3878 Not tainted syzkaller #0 PREEMPT(full) [ 821.668742][T26338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 821.668755][T26338] Call Trace: [ 821.668764][T26338] [ 821.668774][T26338] dump_stack_lvl+0x16c/0x1f0 [ 821.668814][T26338] should_fail_ex+0x512/0x640 [ 821.668856][T26338] _copy_from_user+0x2e/0xd0 [ 821.668889][T26338] copy_msghdr_from_user+0x98/0x160 [ 821.668925][T26338] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 821.668968][T26338] ? kfree+0x24f/0x4d0 [ 821.668989][T26338] ? __pfx__kstrtoull+0x10/0x10 [ 821.669028][T26338] ___sys_sendmsg+0xfe/0x1d0 [ 821.669066][T26338] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.669135][T26338] ? __pfx___might_resched+0x10/0x10 [ 821.669170][T26338] __sys_sendmmsg+0x200/0x420 [ 821.669211][T26338] ? __pfx___sys_sendmmsg+0x10/0x10 [ 821.669258][T26338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 821.669309][T26338] ? fput+0x9b/0xd0 [ 821.669345][T26338] ? ksys_write+0x1ac/0x250 [ 821.669372][T26338] ? __pfx_ksys_write+0x10/0x10 [ 821.669404][T26338] __x64_sys_sendmmsg+0x9c/0x100 [ 821.669440][T26338] ? lockdep_hardirqs_on+0x7c/0x110 [ 821.669475][T26338] do_syscall_64+0xcd/0x4c0 [ 821.669512][T26338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.669538][T26338] RIP: 0033:0x7f184f18eec9 [ 821.669559][T26338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.669583][T26338] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 821.669607][T26338] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 821.669624][T26338] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 821.669647][T26338] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 821.669662][T26338] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 821.669677][T26338] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 821.669711][T26338] [ 822.053041][T26341] openvswitch: netlink: Message has 8 unknown bytes. [ 822.763729][T26360] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 822.953575][T26365] ima: policy update failed [ 822.993239][ T30] audit: type=1802 audit(4294969488.601:52): pid=26365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3884" res=0 errno=0 [ 823.348809][T26370] HfR: entered promiscuous mode [ 823.550462][T26370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3883'. [ 823.584524][T26370] HfR: left promiscuous mode [ 823.833618][ T30] audit: type=1800 audit(4294969489.430:53): pid=26392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3887" name="dbroot" dev="configfs" ino=87950 res=0 errno=0 [ 824.334307][T26417] FAULT_INJECTION: forcing a failure. [ 824.334307][T26417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.409946][T26417] CPU: 1 UID: 0 PID: 26417 Comm: syz.3.3889 Not tainted syzkaller #0 PREEMPT(full) [ 824.409980][T26417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.409994][T26417] Call Trace: [ 824.410004][T26417] [ 824.410014][T26417] dump_stack_lvl+0x16c/0x1f0 [ 824.410062][T26417] should_fail_ex+0x512/0x640 [ 824.410103][T26417] _copy_from_user+0x2e/0xd0 [ 824.410131][T26417] copy_msghdr_from_user+0x98/0x160 [ 824.410166][T26417] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 824.410206][T26417] ? kfree+0x24f/0x4d0 [ 824.410227][T26417] ? __pfx__kstrtoull+0x10/0x10 [ 824.410265][T26417] ___sys_sendmsg+0xfe/0x1d0 [ 824.410302][T26417] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.410370][T26417] ? __pfx___might_resched+0x10/0x10 [ 824.410402][T26417] __sys_sendmmsg+0x200/0x420 [ 824.410440][T26417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 824.410487][T26417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 824.410535][T26417] ? fput+0x9b/0xd0 [ 824.410567][T26417] ? ksys_write+0x1ac/0x250 [ 824.410594][T26417] ? __pfx_ksys_write+0x10/0x10 [ 824.410627][T26417] __x64_sys_sendmmsg+0x9c/0x100 [ 824.410661][T26417] ? lockdep_hardirqs_on+0x7c/0x110 [ 824.410695][T26417] do_syscall_64+0xcd/0x4c0 [ 824.410733][T26417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.410757][T26417] RIP: 0033:0x7f184f18eec9 [ 824.410776][T26417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.410799][T26417] RSP: 002b:00007f1850010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 824.410823][T26417] RAX: ffffffffffffffda RBX: 00007f184f3e6090 RCX: 00007f184f18eec9 [ 824.410840][T26417] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 824.410855][T26417] RBP: 00007f1850010090 R08: 0000000000000000 R09: 0000000000000000 [ 824.410870][T26417] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 824.410884][T26417] R13: 00007f184f3e6128 R14: 00007f184f3e6090 R15: 00007ffd7ee77628 [ 824.410918][T26417] [ 824.618991][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.399876][ T30] audit: type=1326 audit(4294969491.009:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26470 comm="syz.3.3893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184f18eec9 code=0x0 [ 826.235669][ T30] audit: type=1800 audit(4294969491.829:55): pid=26490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3897" name="dbroot" dev="configfs" ino=88094 res=0 errno=0 [ 826.519365][ T30] audit: type=1807 audit(4294969492.129:56): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 826.540920][ T30] audit: type=1802 audit(4294969492.129:57): pid=26492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3898" res=0 errno=0 [ 826.612353][T26492] ima: policy update failed [ 826.618716][ T30] audit: type=1802 audit(4294969492.229:58): pid=26492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3898" res=0 errno=0 [ 826.955347][T26502] FAULT_INJECTION: forcing a failure. [ 826.955347][T26502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.037928][T26502] CPU: 0 UID: 0 PID: 26502 Comm: syz.4.3899 Not tainted syzkaller #0 PREEMPT(full) [ 827.037958][T26502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 827.037971][T26502] Call Trace: [ 827.037978][T26502] [ 827.037986][T26502] dump_stack_lvl+0x16c/0x1f0 [ 827.038025][T26502] should_fail_ex+0x512/0x640 [ 827.038065][T26502] _copy_from_user+0x2e/0xd0 [ 827.038099][T26502] copy_msghdr_from_user+0x98/0x160 [ 827.038136][T26502] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 827.038178][T26502] ? kfree+0x24f/0x4d0 [ 827.038200][T26502] ? __pfx__kstrtoull+0x10/0x10 [ 827.038237][T26502] ___sys_sendmsg+0xfe/0x1d0 [ 827.038272][T26502] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.038335][T26502] ? __pfx___might_resched+0x10/0x10 [ 827.038369][T26502] __sys_sendmmsg+0x200/0x420 [ 827.038409][T26502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 827.038456][T26502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 827.038522][T26502] ? fput+0x9b/0xd0 [ 827.038556][T26502] ? ksys_write+0x1ac/0x250 [ 827.038584][T26502] ? __pfx_ksys_write+0x10/0x10 [ 827.038618][T26502] __x64_sys_sendmmsg+0x9c/0x100 [ 827.038654][T26502] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.038688][T26502] do_syscall_64+0xcd/0x4c0 [ 827.038727][T26502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.038753][T26502] RIP: 0033:0x7fe36178eec9 [ 827.038773][T26502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.038797][T26502] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 827.038822][T26502] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 827.038838][T26502] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 827.038852][T26502] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 827.038868][T26502] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 827.038883][T26502] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 827.038917][T26502] [ 827.661485][T26534] misc userio: No port type given on /dev/userio [ 827.876677][T26537] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 827.949903][T26537] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 828.218923][T26562] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.5.3903: bg 4: bad block bitmap checksum [ 828.308164][T26562] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.5.3903: Error -74 reading block bitmap for 4 [ 828.491487][T26565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3902'. [ 830.543880][T26634] FAULT_INJECTION: forcing a failure. [ 830.543880][T26634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.606080][T26634] CPU: 1 UID: 0 PID: 26634 Comm: syz.5.3911 Not tainted syzkaller #0 PREEMPT(full) [ 830.606110][T26634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 830.606123][T26634] Call Trace: [ 830.606131][T26634] [ 830.606139][T26634] dump_stack_lvl+0x16c/0x1f0 [ 830.606179][T26634] should_fail_ex+0x512/0x640 [ 830.606220][T26634] _copy_from_user+0x2e/0xd0 [ 830.606249][T26634] copy_msghdr_from_user+0x98/0x160 [ 830.606286][T26634] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 830.606326][T26634] ? kfree+0x24f/0x4d0 [ 830.606349][T26634] ? __pfx__kstrtoull+0x10/0x10 [ 830.606388][T26634] ___sys_sendmsg+0xfe/0x1d0 [ 830.606424][T26634] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.606492][T26634] ? __pfx___might_resched+0x10/0x10 [ 830.606527][T26634] __sys_sendmmsg+0x200/0x420 [ 830.606568][T26634] ? __pfx___sys_sendmmsg+0x10/0x10 [ 830.606616][T26634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 830.606670][T26634] ? fput+0x9b/0xd0 [ 830.606702][T26634] ? ksys_write+0x1ac/0x250 [ 830.606729][T26634] ? __pfx_ksys_write+0x10/0x10 [ 830.606761][T26634] __x64_sys_sendmmsg+0x9c/0x100 [ 830.606792][T26634] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.606827][T26634] do_syscall_64+0xcd/0x4c0 [ 830.606865][T26634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.606891][T26634] RIP: 0033:0x7f2f2258eec9 [ 830.606911][T26634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.606934][T26634] RSP: 002b:00007f2f2345a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.606957][T26634] RAX: ffffffffffffffda RBX: 00007f2f227e6090 RCX: 00007f2f2258eec9 [ 830.606974][T26634] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 830.606988][T26634] RBP: 00007f2f2345a090 R08: 0000000000000000 R09: 0000000000000000 [ 830.607003][T26634] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 830.607018][T26634] R13: 00007f2f227e6128 R14: 00007f2f227e6090 R15: 00007ffcfec5f3c8 [ 830.607049][T26634] [ 831.829854][T26674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3917'. [ 834.114330][T26733] FAULT_INJECTION: forcing a failure. [ 834.114330][T26733] name failslab, interval 1, probability 0, space 0, times 0 [ 834.228190][T26733] CPU: 1 UID: 0 PID: 26733 Comm: syz.5.3923 Not tainted syzkaller #0 PREEMPT(full) [ 834.228228][T26733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 834.228244][T26733] Call Trace: [ 834.228252][T26733] [ 834.228264][T26733] dump_stack_lvl+0x16c/0x1f0 [ 834.228310][T26733] should_fail_ex+0x512/0x640 [ 834.228350][T26733] ? __kmalloc_noprof+0xbf/0x510 [ 834.228385][T26733] ? kobject_get_path+0xd2/0x2a0 [ 834.228424][T26733] should_failslab+0xc2/0x120 [ 834.228458][T26733] __kmalloc_noprof+0xd2/0x510 [ 834.228498][T26733] kobject_get_path+0xd2/0x2a0 [ 834.228545][T26733] kobject_uevent_env+0x289/0x1870 [ 834.228575][T26733] ? __pfx_dev_uevent_name+0x10/0x10 [ 834.228615][T26733] ? bus_to_subsys+0x131/0x160 [ 834.228650][T26733] device_add+0x10dd/0x1aa0 [ 834.228682][T26733] ? __pfx_device_add+0x10/0x10 [ 834.228724][T26733] device_create_groups_vargs+0x1f8/0x270 [ 834.228761][T26733] device_create+0xed/0x130 [ 834.228791][T26733] ? __pfx_device_create+0x10/0x10 [ 834.228823][T26733] ? do_init_timer+0xc9/0x110 [ 834.228856][T26733] ? ieee80211_roc_setup+0x136/0x270 [ 834.228889][T26733] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 834.228933][T26733] mac80211_hwsim_new_radio+0x369/0x54d0 [ 834.228978][T26733] ? __asan_memset+0x23/0x50 [ 834.229014][T26733] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 834.229058][T26733] hwsim_new_radio_nl+0xb51/0x12c0 [ 834.229094][T26733] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 834.229138][T26733] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 834.229169][T26733] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 834.229207][T26733] genl_family_rcv_msg_doit+0x209/0x2f0 [ 834.229238][T26733] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 834.229279][T26733] ? bpf_lsm_capable+0x9/0x10 [ 834.229304][T26733] ? security_capable+0x7e/0x260 [ 834.229333][T26733] ? ns_capable+0xd7/0x110 [ 834.229365][T26733] genl_rcv_msg+0x55c/0x800 [ 834.229398][T26733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.229427][T26733] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 834.229471][T26733] netlink_rcv_skb+0x158/0x420 [ 834.229511][T26733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.229541][T26733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.229597][T26733] ? netlink_deliver_tap+0x1ae/0xd30 [ 834.229641][T26733] genl_rcv+0x28/0x40 [ 834.229665][T26733] netlink_unicast+0x5a7/0x870 [ 834.229709][T26733] ? __pfx_netlink_unicast+0x10/0x10 [ 834.229749][T26733] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 834.229786][T26733] ? __lock_acquire+0xb97/0x1ce0 [ 834.229831][T26733] netlink_sendmsg+0x8d1/0xdd0 [ 834.229877][T26733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.229921][T26733] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 834.229958][T26733] ____sys_sendmsg+0xa98/0xc70 [ 834.229991][T26733] ? copy_msghdr_from_user+0x10a/0x160 [ 834.230038][T26733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.230077][T26733] ? __pfx_futex_wake_mark+0x10/0x10 [ 834.230122][T26733] ___sys_sendmsg+0x134/0x1d0 [ 834.230163][T26733] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.230247][T26733] __sys_sendmsg+0x16d/0x220 [ 834.230286][T26733] ? __pfx___sys_sendmsg+0x10/0x10 [ 834.230323][T26733] ? __x64_sys_futex+0x1e0/0x4c0 [ 834.230379][T26733] do_syscall_64+0xcd/0x4c0 [ 834.230420][T26733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.230447][T26733] RIP: 0033:0x7f2f2258eec9 [ 834.230469][T26733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.230496][T26733] RSP: 002b:00007f2f2347b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.230522][T26733] RAX: ffffffffffffffda RBX: 00007f2f227e5fa0 RCX: 00007f2f2258eec9 [ 834.230541][T26733] RDX: 0000000004040040 RSI: 0000200000000300 RDI: 0000000000000006 [ 834.230558][T26733] RBP: 00007f2f22611f91 R08: 0000000000000000 R09: 0000000000000000 [ 834.230575][T26733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.230592][T26733] R13: 00007f2f227e6038 R14: 00007f2f227e5fa0 R15: 00007ffcfec5f3c8 [ 834.230629][T26733] [ 835.332290][T26750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 836.129925][T26767] HfR: entered promiscuous mode [ 836.155625][T26758] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 836.339600][T26750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3933'. [ 836.366799][T26750] HfR: left promiscuous mode [ 837.021353][T26744] Process accounting paused [ 838.018448][T26921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 838.229187][T26921] team0: Port device team_slave_0 removed [ 839.152829][T26939] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 839.237977][T26949] FAULT_INJECTION: forcing a failure. [ 839.237977][T26949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.346637][T26949] CPU: 0 UID: 0 PID: 26949 Comm: syz.2.3934 Not tainted syzkaller #0 PREEMPT(full) [ 839.346668][T26949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 839.346681][T26949] Call Trace: [ 839.346689][T26949] [ 839.346699][T26949] dump_stack_lvl+0x16c/0x1f0 [ 839.346746][T26949] should_fail_ex+0x512/0x640 [ 839.346788][T26949] _copy_from_user+0x2e/0xd0 [ 839.346816][T26949] copy_msghdr_from_user+0x98/0x160 [ 839.346853][T26949] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 839.346894][T26949] ? kfree+0x24f/0x4d0 [ 839.346914][T26949] ? __pfx__kstrtoull+0x10/0x10 [ 839.346951][T26949] ___sys_sendmsg+0xfe/0x1d0 [ 839.346987][T26949] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.347052][T26949] ? __pfx___might_resched+0x10/0x10 [ 839.347083][T26949] __sys_sendmmsg+0x200/0x420 [ 839.347122][T26949] ? __pfx___sys_sendmmsg+0x10/0x10 [ 839.347164][T26949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 839.347220][T26949] ? fput+0x9b/0xd0 [ 839.347256][T26949] ? ksys_write+0x1ac/0x250 [ 839.347284][T26949] ? __pfx_ksys_write+0x10/0x10 [ 839.347319][T26949] __x64_sys_sendmmsg+0x9c/0x100 [ 839.347354][T26949] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.347389][T26949] do_syscall_64+0xcd/0x4c0 [ 839.347429][T26949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.347454][T26949] RIP: 0033:0x7ff2ccd8eec9 [ 839.347475][T26949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.347498][T26949] RSP: 002b:00007ff2cdcbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 839.347522][T26949] RAX: ffffffffffffffda RBX: 00007ff2ccfe6090 RCX: 00007ff2ccd8eec9 [ 839.347540][T26949] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 839.347555][T26949] RBP: 00007ff2cdcbd090 R08: 0000000000000000 R09: 0000000000000000 [ 839.347570][T26949] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 839.347585][T26949] R13: 00007ff2ccfe6128 R14: 00007ff2ccfe6090 R15: 00007ffc232b3a58 [ 839.347620][T26949] [ 839.966809][ T30] audit: type=1800 audit(4294969505.572:59): pid=26957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3938" name="dbroot" dev="configfs" ino=88776 res=0 errno=0 [ 839.987064][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.220975][T26961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3940'. [ 841.157781][T27016] ptrace attach of "./syz-executor exec"[25238] was attempted by ""[27016] [ 841.528983][T27014] FAULT_INJECTION: forcing a failure. [ 841.528983][T27014] name failslab, interval 1, probability 0, space 0, times 0 [ 841.578415][T27014] CPU: 1 UID: 0 PID: 27014 Comm: syz.5.3949 Not tainted syzkaller #0 PREEMPT(full) [ 841.578438][T27014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 841.578447][T27014] Call Trace: [ 841.578453][T27014] [ 841.578460][T27014] dump_stack_lvl+0x16c/0x1f0 [ 841.578487][T27014] should_fail_ex+0x512/0x640 [ 841.578509][T27014] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 841.578527][T27014] should_failslab+0xc2/0x120 [ 841.578546][T27014] __kmalloc_cache_noprof+0x6a/0x3e0 [ 841.578562][T27014] ? __do_sys_fanotify_init+0x57a/0xc00 [ 841.578584][T27014] ? kasan_save_track+0x14/0x30 [ 841.578602][T27014] __do_sys_fanotify_init+0x57a/0xc00 [ 841.578626][T27014] do_syscall_64+0xcd/0x4c0 [ 841.578648][T27014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.578663][T27014] RIP: 0033:0x7f2f2258eec9 [ 841.578675][T27014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.578689][T27014] RSP: 002b:00007f2f2347b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 841.578703][T27014] RAX: ffffffffffffffda RBX: 00007f2f227e5fa0 RCX: 00007f2f2258eec9 [ 841.578712][T27014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ba [ 841.578721][T27014] RBP: 00007f2f22611f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.578729][T27014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.578737][T27014] R13: 00007f2f227e6038 R14: 00007f2f227e5fa0 R15: 00007ffcfec5f3c8 [ 841.578755][T27014] [ 841.739936][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.018693][T27038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3943'. [ 842.257405][T27023] Invalid ELF header magic: != ELF [ 842.607585][T27083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3944'. [ 842.684732][T27023] usbip-vudc usbip-vudc.0: gadget not bound [ 842.859211][T27083] team0: Port device team_slave_0 removed [ 843.307078][T27096] ima: policy update failed [ 843.324839][ T30] audit: type=1807 audit(4294969508.910:60): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 843.382202][ T30] audit: type=1802 audit(4294969508.910:61): pid=27096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3946" res=0 errno=0 [ 843.509183][ T30] audit: type=1802 audit(4294969508.920:62): pid=27096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3946" res=0 errno=0 [ 843.596177][ T30] audit: type=1800 audit(4294969509.030:63): pid=27105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3948" name="dbroot" dev="configfs" ino=89627 res=0 errno=0 [ 843.725413][T27115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 843.727330][T27117] __vm_enough_memory: pid: 27117, comm: syz.4.3950, bytes: 4398046511104 not enough memory for the allocation [ 845.739822][T27165] kAFS: No cell specified [ 846.529365][T27196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3961'. [ 846.576687][T27196] netlink: 93 bytes leftover after parsing attributes in process `syz.4.3961'. [ 848.358047][T27309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3965'. [ 849.608609][T27329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3968'. [ 850.227527][T27329] bond0: (slave bond_slave_0): Releasing backup interface [ 850.632137][T27341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3971'. [ 852.090878][ T30] audit: type=1800 audit(4294969517.636:64): pid=27386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3977" name="dbroot" dev="configfs" ino=90234 res=0 errno=0 [ 852.767634][T27404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3982'. [ 853.358469][T27409] batman_adv: Routing algorithm '/Eev/audio1' is not supported [ 854.564893][T27456] warning: `syz.2.3986' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 856.366491][ T30] audit: type=1807 audit(4294969521.964:65): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 856.426873][T27504] ima: policy update failed [ 856.486271][ T30] audit: type=1802 audit(4294969521.964:66): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3992" res=0 errno=0 [ 856.582754][ T30] audit: type=1802 audit(4294969522.024:67): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3992" res=0 errno=0 [ 857.571315][T27531] queue_state_write: unsupported operation '' [ 857.606297][T27531] queue_state_write: use 'run', 'start' or 'kick' [ 857.847440][T27549] FAULT_INJECTION: forcing a failure. [ 857.847440][T27549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.940425][T27549] CPU: 1 UID: 0 PID: 27549 Comm: syz.4.3995 Not tainted syzkaller #0 PREEMPT(full) [ 857.940456][T27549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 857.940469][T27549] Call Trace: [ 857.940477][T27549] [ 857.940486][T27549] dump_stack_lvl+0x16c/0x1f0 [ 857.940522][T27549] should_fail_ex+0x512/0x640 [ 857.940561][T27549] _copy_from_user+0x2e/0xd0 [ 857.940589][T27549] copy_msghdr_from_user+0x98/0x160 [ 857.940626][T27549] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 857.940668][T27549] ? kfree+0x24f/0x4d0 [ 857.940690][T27549] ? __pfx__kstrtoull+0x10/0x10 [ 857.940734][T27549] ___sys_sendmsg+0xfe/0x1d0 [ 857.940771][T27549] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.940840][T27549] ? __pfx___might_resched+0x10/0x10 [ 857.940873][T27549] __sys_sendmmsg+0x200/0x420 [ 857.940913][T27549] ? __pfx___sys_sendmmsg+0x10/0x10 [ 857.940961][T27549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 857.941012][T27549] ? fput+0x9b/0xd0 [ 857.941046][T27549] ? ksys_write+0x1ac/0x250 [ 857.941074][T27549] ? __pfx_ksys_write+0x10/0x10 [ 857.941108][T27549] __x64_sys_sendmmsg+0x9c/0x100 [ 857.941143][T27549] ? lockdep_hardirqs_on+0x7c/0x110 [ 857.941178][T27549] do_syscall_64+0xcd/0x4c0 [ 857.941216][T27549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.941242][T27549] RIP: 0033:0x7fe36178eec9 [ 857.941262][T27549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.941287][T27549] RSP: 002b:00007fe362545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.941310][T27549] RAX: ffffffffffffffda RBX: 00007fe3619e6090 RCX: 00007fe36178eec9 [ 857.941328][T27549] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 857.941343][T27549] RBP: 00007fe362545090 R08: 0000000000000000 R09: 0000000000000000 [ 857.941358][T27549] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 857.941371][T27549] R13: 00007fe3619e6128 R14: 00007fe3619e6090 R15: 00007ffe6f8b50b8 [ 857.941404][T27549] [ 858.686919][ T30] audit: type=1800 audit(4294969524.283:68): pid=27577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3998" name="dbroot" dev="configfs" ino=89973 res=0 errno=0 [ 858.802209][T27575] zram0: detected capacity change from 0 to 8 [ 860.787995][ T30] audit: type=1800 audit(4294969526.382:69): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4001" name="dbroot" dev="configfs" ino=90587 res=0 errno=0 [ 861.570374][T27695] FAULT_INJECTION: forcing a failure. [ 861.570374][T27695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.591671][T27695] CPU: 1 UID: 0 PID: 27695 Comm: syz.5.4007 Not tainted syzkaller #0 PREEMPT(full) [ 861.591702][T27695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 861.591717][T27695] Call Trace: [ 861.591725][T27695] [ 861.591733][T27695] dump_stack_lvl+0x16c/0x1f0 [ 861.591774][T27695] should_fail_ex+0x512/0x640 [ 861.591816][T27695] _copy_from_user+0x2e/0xd0 [ 861.591844][T27695] copy_msghdr_from_user+0x98/0x160 [ 861.591882][T27695] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 861.591923][T27695] ? kfree+0x24f/0x4d0 [ 861.591945][T27695] ? __pfx__kstrtoull+0x10/0x10 [ 861.591982][T27695] ___sys_sendmsg+0xfe/0x1d0 [ 861.592018][T27695] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.592086][T27695] ? __pfx___might_resched+0x10/0x10 [ 861.592120][T27695] __sys_sendmmsg+0x200/0x420 [ 861.592159][T27695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 861.592208][T27695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 861.592258][T27695] ? fput+0x9b/0xd0 [ 861.592291][T27695] ? ksys_write+0x1ac/0x250 [ 861.592318][T27695] ? __pfx_ksys_write+0x10/0x10 [ 861.592353][T27695] __x64_sys_sendmmsg+0x9c/0x100 [ 861.592414][T27695] ? lockdep_hardirqs_on+0x7c/0x110 [ 861.592449][T27695] do_syscall_64+0xcd/0x4c0 [ 861.592488][T27695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.592513][T27695] RIP: 0033:0x7f2f2258eec9 [ 861.592534][T27695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.592559][T27695] RSP: 002b:00007f2f2345a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 861.592583][T27695] RAX: ffffffffffffffda RBX: 00007f2f227e6090 RCX: 00007f2f2258eec9 [ 861.592600][T27695] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 861.592616][T27695] RBP: 00007f2f2345a090 R08: 0000000000000000 R09: 0000000000000000 [ 861.592631][T27695] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000003 [ 861.592646][T27695] R13: 00007f2f227e6128 R14: 00007f2f227e6090 R15: 00007ffcfec5f3c8 [ 861.592681][T27695] [ 862.328769][T27702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4009'. [ 864.264981][T27764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4014'. [ 865.707461][T27836] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 865.782437][T27836] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 865.892453][T27836] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 865.900080][T27836] page_type: f5(slab) [ 865.904223][T27836] raw: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 865.915824][T27836] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 865.924683][T27836] head: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 865.935091][T27836] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 865.943851][T27836] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 865.952912][T27836] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 865.973544][T27836] page dumped because: unmovable page [ 865.978968][T27836] page_owner tracks the page as allocated [ 865.985151][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4024'. [ 866.012976][T27836] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5248, tgid 5248 (udevadm), ts 35665811709, free_ts 28444388089 [ 866.183849][T27836] post_alloc_hook+0x1c0/0x230 [ 866.188838][T27836] get_page_from_freelist+0x132b/0x38e0 [ 866.194746][T27836] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 866.201951][T27836] alloc_pages_mpol+0x1fb/0x550 [ 866.206975][T27836] new_slab+0x247/0x330 [ 866.211855][T27836] ___slab_alloc+0xcf2/0x1750 [ 866.216676][T27836] __slab_alloc.constprop.0+0x56/0xb0 [ 866.222633][T27836] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 866.228907][T27836] alloc_inode+0xc3/0x240 [ 866.234294][T27836] iget_locked+0x2e4/0x830 [ 866.238864][T27836] kernfs_get_inode+0x48/0x460 [ 866.244158][T27836] kernfs_iop_lookup+0x1a7/0x2d0 [ 866.249298][T27836] __lookup_slow+0x251/0x460 [ 866.374432][T27836] walk_component+0x353/0x5b0 [ 866.505134][T27836] path_lookupat+0x142/0x6d0 [ 866.509791][T27836] filename_lookup+0x224/0x5f0 [ 866.585531][T27836] page last free pid 1 tgid 1 stack trace: [ 866.591457][T27836] __free_frozen_pages+0x7d5/0x10f0 [ 866.603657][T27836] free_contig_range+0x183/0x4b0 [ 866.715738][T27836] destroy_args+0x794/0xc10 [ 866.770902][T27836] debug_vm_pgtable+0x1a32/0x3640 [ 866.778091][T27836] do_one_initcall+0x120/0x6e0 [ 866.796132][T27836] kernel_init_freeable+0x5c2/0x910 [ 866.857146][T27836] kernel_init+0x1c/0x2b0 [ 866.901816][T27836] ret_from_fork+0x56d/0x730 [ 866.931051][T27836] ret_from_fork_asm+0x1a/0x30 [ 867.175289][T27837] Process accounting resumed [ 867.442092][T27904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4029'. [ 867.535169][T27907] ima: policy update failed [ 867.536885][ T30] audit: type=1807 audit(4294969533.118:70): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 867.684737][ T30] audit: type=1802 audit(4294969533.118:71): pid=27907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.4038" res=0 errno=0 [ 867.740912][ T30] audit: type=1802 audit(4294969533.148:72): pid=27907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4038" res=0 errno=0 [ 867.855870][ T882] smpboot: CPU 1 is now offline [ 868.798409][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.812003][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.394679][ T30] audit: type=1807 audit(4294969535.967:73): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 870.431819][T28014] ima: policy update failed [ 870.512771][ T30] audit: type=1802 audit(4294969536.007:74): pid=28014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.4043" res=0 errno=0 [ 870.690181][T28022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4044'. [ 870.706961][ T30] audit: type=1802 audit(4294969536.077:75): pid=28014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4043" res=0 errno=0 [ 872.277020][T28096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4052'. [ 872.373393][T28096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.420753][T28096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.457906][T28096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.480689][T28096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.473573][T28133] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 873.991239][ T30] audit: type=1807 audit(4294969539.575:76): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 874.036086][T28191] ima: policy update failed [ 874.113191][ T30] audit: type=1802 audit(4294969539.575:77): pid=28191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.4062" res=0 errno=0 [ 874.291235][ T30] audit: type=1802 audit(4294969539.655:78): pid=28191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4062" res=0 errno=0 [ 874.791457][T28233] FAULT_INJECTION: forcing a failure. [ 874.791457][T28233] name failslab, interval 1, probability 0, space 0, times 0 [ 874.873811][T28233] CPU: 0 UID: 0 PID: 28233 Comm: syz.5.4064 Not tainted syzkaller #0 PREEMPT(full) [ 874.873833][T28233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 874.873843][T28233] Call Trace: [ 874.873848][T28233] [ 874.873854][T28233] dump_stack_lvl+0x16c/0x1f0 [ 874.873880][T28233] should_fail_ex+0x512/0x640 [ 874.873901][T28233] ? fs_reclaim_acquire+0xae/0x150 [ 874.873923][T28233] ? tomoyo_encode2+0x100/0x3e0 [ 874.873942][T28233] should_failslab+0xc2/0x120 [ 874.873960][T28233] __kmalloc_noprof+0xd2/0x510 [ 874.873982][T28233] tomoyo_encode2+0x100/0x3e0 [ 874.874003][T28233] tomoyo_encode+0x29/0x50 [ 874.874022][T28233] tomoyo_realpath_from_path+0x18f/0x6e0 [ 874.874044][T28233] ? tomoyo_profile+0x47/0x60 [ 874.874059][T28233] tomoyo_path_number_perm+0x245/0x580 [ 874.874075][T28233] ? tomoyo_path_number_perm+0x237/0x580 [ 874.874093][T28233] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 874.874111][T28233] ? find_held_lock+0x2b/0x80 [ 874.874140][T28233] ? __pfx___do_sys_newfstat+0x10/0x10 [ 874.874163][T28233] ? hook_file_ioctl_common+0x145/0x410 [ 874.874190][T28233] security_file_ioctl+0x9b/0x240 [ 874.874209][T28233] __x64_sys_ioctl+0xb7/0x210 [ 874.874232][T28233] do_syscall_64+0xcd/0x4c0 [ 874.874255][T28233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.874269][T28233] RIP: 0033:0x7f2f2258eec9 [ 874.874281][T28233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.874295][T28233] RSP: 002b:00007f2f2347b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.874309][T28233] RAX: ffffffffffffffda RBX: 00007f2f227e5fa0 RCX: 00007f2f2258eec9 [ 874.874318][T28233] RDX: 0000000000000000 RSI: 000000004018aee1 RDI: 0000000000000004 [ 874.874327][T28233] RBP: 00007f2f2347b090 R08: 0000000000000000 R09: 0000000000000000 [ 874.874335][T28233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.874343][T28233] R13: 00007f2f227e6038 R14: 00007f2f227e5fa0 R15: 00007ffcfec5f3c8 [ 874.874361][T28233] [ 874.874376][T28233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 878.041006][T28302] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 878.283017][T28279] bond0: option arp_interval: invalid value () [ 878.392095][T28279] bond0: option arp_interval: allowed values 0 - 2147483647 [ 879.125650][T28344] random: crng reseeded on system resumption [ 879.243858][T28352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4075'. [ 880.291672][T28352] team0: Port device team_slave_1 removed [ 880.574515][T28395] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4082'. [ 880.695506][ T30] audit: type=1800 audit(4294969546.262:79): pid=28393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4081" name="members" dev="configfs" ino=93513 res=0 errno=0 [ 881.474408][T28324] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 881.752935][T28420] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 882.039719][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'. [ 882.132449][T28442] netlink: 354 bytes leftover after parsing attributes in process `syz.4.4088'. [ 883.023024][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'. [ 883.098210][T28469] netlink: 354 bytes leftover after parsing attributes in process `syz.2.4095'. [ 884.416502][ T30] audit: type=1807 audit(4294969549.990:80): UNKNOWN='ìÅÖ'`Õ‚¶,û]U=²2Ê_@Ñjn}2ÛŸídÓ1‘Äfª9ÜivWLûŠ…wÕx9L—œ res=0 [ 884.534464][ T30] audit: type=1802 audit(4294969549.990:81): pid=28529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.4102" res=0 errno=0 [ 884.896225][T28526] ima: policy update failed [ 884.925002][ T30] audit: type=1802 audit(4294969550.510:82): pid=28526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4102" res=0 errno=0 [ 885.653147][T28586] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4107'. [ 888.115405][T28273] ------------[ cut here ]------------ [ 888.120903][T28273] WARNING: CPU: 0 PID: 28273 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 888.131838][T28273] Modules linked in: [ 888.135972][T28273] CPU: 0 UID: 0 PID: 28273 Comm: syz.4.4069 Not tainted syzkaller #0 PREEMPT(full) [ 888.145682][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.156274][T28273] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 888.163202][T28273] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 888.182812][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.189514][T28273] RSP: 0018:ffffc9000faff9c0 EFLAGS: 00010293 [ 888.196038][T28273] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 888.204100][T28273] RDX: ffff888053149e00 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 888.212258][T28273] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 888.220249][T28273] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880280817c8 [ 888.228528][T28273] R13: dffffc0000000000 R14: ffffc9000faffa58 R15: 0000000000000000 [ 888.236948][T28273] FS: 0000000000000000(0000) GS:ffff8881246ba000(0000) knlGS:0000000000000000 [ 888.246260][T28273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.253142][T28273] CR2: 00007f18500109a0 CR3: 0000000023be2000 CR4: 00000000003526f0 [ 888.261566][T28273] Call Trace: [ 888.265044][T28273] [ 888.267961][T28273] remove_vma+0x88/0x160 [ 888.272282][T28273] exit_mmap+0x511/0xb90 [ 888.276588][T28273] ? __pfx_exit_mmap+0x10/0x10 [ 888.281409][T28273] ? find_held_lock+0x2b/0x80 [ 888.286192][T28273] __mmput+0x12a/0x410 [ 888.290257][T28273] mmput+0x62/0x70 [ 888.294519][T28273] do_exit+0x7c7/0x2bf0 [ 888.299073][T28273] ? proc_coredump_connector+0x2d1/0x4f0 [ 888.304773][T28273] ? __pfx_do_exit+0x10/0x10 [ 888.309362][T28273] do_group_exit+0xd3/0x2a0 [ 888.313939][T28273] get_signal+0x2673/0x26d0 [ 888.318470][T28273] ? force_sig_fault+0xc4/0x100 [ 888.323370][T28273] ? __pfx_get_signal+0x10/0x10 [ 888.328489][T28273] arch_do_signal_or_restart+0x8f/0x790 [ 888.334291][T28273] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 888.340404][T28273] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 888.346638][T28273] irqentry_exit_to_user_mode+0x13e/0x290 [ 888.352729][T28273] asm_exc_page_fault+0x26/0x30 [ 888.357991][T28273] RIP: 0033:0x21000 [ 888.362034][T28273] Code: Unable to access opcode bytes at 0x20fd6. [ 888.368444][T28273] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 888.374554][T28273] RAX: 0000000000000000 RBX: 00007fe3619e5fa0 RCX: 00007fe36178eec9 [ 888.382582][T28273] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 888.390628][T28273] RBP: 00007fe361811f91 R08: 0000000000000002 R09: 0000000000000000 [ 888.399130][T28273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.407630][T28273] R13: 00007fe3619e6038 R14: 00007fe3619e5fa0 R15: 00007ffe6f8b50b8 [ 888.415684][T28273] [ 888.418694][T28273] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 888.426055][T28273] CPU: 0 UID: 0 PID: 28273 Comm: syz.4.4069 Not tainted syzkaller #0 PREEMPT(full) [ 888.435406][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.445442][T28273] Call Trace: [ 888.448708][T28273] [ 888.451621][T28273] dump_stack_lvl+0x3d/0x1f0 [ 888.456201][T28273] vpanic+0x6e8/0x7a0 [ 888.460200][T28273] ? __pfx_vpanic+0x10/0x10 [ 888.464695][T28273] ? tracing_buffers_mmap_close+0xdd/0x130 [ 888.470495][T28273] panic+0xca/0xd0 [ 888.474218][T28273] ? __pfx_panic+0x10/0x10 [ 888.478639][T28273] ? check_panic_on_warn+0x1f/0xb0 [ 888.483750][T28273] check_panic_on_warn+0xab/0xb0 [ 888.488680][T28273] __warn+0xf6/0x3c0 [ 888.492567][T28273] ? tracing_buffers_mmap_close+0xdd/0x130 [ 888.498367][T28273] report_bug+0x3c3/0x580 [ 888.502687][T28273] ? tracing_buffers_mmap_close+0xdd/0x130 [ 888.508498][T28273] handle_bug+0x184/0x210 [ 888.512813][T28273] exc_invalid_op+0x17/0x50 [ 888.517339][T28273] asm_exc_invalid_op+0x1a/0x20 [ 888.522215][T28273] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 888.528620][T28273] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 888.548210][T28273] RSP: 0018:ffffc9000faff9c0 EFLAGS: 00010293 [ 888.554276][T28273] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 888.562406][T28273] RDX: ffff888053149e00 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 888.570360][T28273] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 888.578314][T28273] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880280817c8 [ 888.586272][T28273] R13: dffffc0000000000 R14: ffffc9000faffa58 R15: 0000000000000000 [ 888.594231][T28273] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 888.600466][T28273] ? tracing_buffers_mmap_close+0xc9/0x130 [ 888.606285][T28273] ? tracing_buffers_mmap_close+0xdc/0x130 [ 888.612085][T28273] remove_vma+0x88/0x160 [ 888.616312][T28273] exit_mmap+0x511/0xb90 [ 888.620548][T28273] ? __pfx_exit_mmap+0x10/0x10 [ 888.625740][T28273] ? find_held_lock+0x2b/0x80 [ 888.630428][T28273] __mmput+0x12a/0x410 [ 888.634500][T28273] mmput+0x62/0x70 [ 888.638212][T28273] do_exit+0x7c7/0x2bf0 [ 888.642363][T28273] ? proc_coredump_connector+0x2d1/0x4f0 [ 888.647985][T28273] ? __pfx_do_exit+0x10/0x10 [ 888.652576][T28273] do_group_exit+0xd3/0x2a0 [ 888.657070][T28273] get_signal+0x2673/0x26d0 [ 888.661563][T28273] ? force_sig_fault+0xc4/0x100 [ 888.666416][T28273] ? __pfx_get_signal+0x10/0x10 [ 888.671275][T28273] arch_do_signal_or_restart+0x8f/0x790 [ 888.676810][T28273] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 888.682868][T28273] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 888.689017][T28273] irqentry_exit_to_user_mode+0x13e/0x290 [ 888.694743][T28273] asm_exc_page_fault+0x26/0x30 [ 888.699675][T28273] RIP: 0033:0x21000 [ 888.703463][T28273] Code: Unable to access opcode bytes at 0x20fd6. [ 888.709862][T28273] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 888.715925][T28273] RAX: 0000000000000000 RBX: 00007fe3619e5fa0 RCX: 00007fe36178eec9 [ 888.723888][T28273] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 888.731977][T28273] RBP: 00007fe361811f91 R08: 0000000000000002 R09: 0000000000000000 [ 888.739927][T28273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.747893][T28273] R13: 00007fe3619e6038 R14: 00007fe3619e5fa0 R15: 00007ffe6f8b50b8 [ 888.755890][T28273] [ 888.758964][T28273] Kernel Offset: disabled [ 888.763279][T28273] Rebooting in 86400 seconds..