last executing test programs: 2m43.645895846s ago: executing program 0 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002bc0)={0x1c0, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1ac, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1a8, 0x5, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x78, 0x1, "645537acd7d1c70a69b3a07674270ef63c036bc7e2c313e26d26b0d22027ed5d8b576381380f51b36ea0a6322d8afbe90e0da03c78277ce0e089d32ace752bf9958d13de84640571b6322864c5f3284d19f64cfbe6736b23e94ee45f07cafe9573797718649a750a3b8780e29a6b66fd30f13fec"}, @NL80211_PMSR_PEER_ATTR_RESP={0x38, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x1}]}]}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x40}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x40, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x6}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x613}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x8}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x79, 0x1, "53e9661e932d5e6665577664daf1f78eca69ea9046ed0f84354e7135ae67fb74e3fc2ff37438b9b01df8f7d6a68564d3642f342d3b8fe9c7a14ac4887d9e388a0b911f5bb80f0ad732ffd8b14e8b5f86e56b07649b77b88a6c440f151b3eae27d11e884325de568a9c3d35c735b62a096550f4d25d"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9, 0x1, "0749a87eec"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x28, 0x1, "b7407fa8537dcebeb4c8d171c31f00b9d9202946c5cfe7bf1764c76650053c2d712ea99e"}]}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 2m43.505451865s ago: executing program 0 (id=963): unshare$auto(0x40000080) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004803}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x6, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x408000) clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r1 = socket(0x1e, 0x1, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x4f1f, 0x6, 0x5, 0x7) socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000040)={{&(0x7f0000000040), 0x12, 0x0, 0x1ff, 0x0, 0x9, 0xb}, 0x800009}, 0x8001, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x1, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/swradio6\x00', 0x1cd9309d3d39994a, 0x0) r4 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(r4, 0x29, 0x32, 0x0, 0x113) 2m42.851378996s ago: executing program 0 (id=970): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffffdef}, 0x1) 2m41.857031465s ago: executing program 0 (id=976): r0 = open(&(0x7f0000000000)='./file0\x00', 0x165342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "29de7cd500802914be107178"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40819) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) futex$auto(&(0x7f0000000b40)=0x1, 0x6, 0x6, &(0x7f0000000b80)={0xd0, 0x4}, 0x0, 0x9) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m40.735787079s ago: executing program 0 (id=985): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x84000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT322(r4, 0xc06c4124, &(0x7f0000000100)={0x837, 0x6, 0x9, 0x4, 0xd62, 0x2, 0x7fffffff, 0x2, 0x0, 0x9, 0x4, 0x1ff, 0x10001, 0xffffffff, 0x40, 0x6, 0x9, 0x8, "e5868269455fbf104cf4478862c81a7660f93dc651de15aed4c4c17ddd69d6a94c3b777c"}) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) 2m40.194310611s ago: executing program 0 (id=991): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x948f, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xf4, 0x100000001, 0x5, 0x9, 0x4, 0x3, 0x4, 0x5, 0x3, 0x8, 0x5, 0x7a0, 0xe, 0x3, 0x6, 0x200000009]}, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) r5 = fcntl$auto(r1, 0xfffff2c5, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r5, 0x8, 0x37, 0x0, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) timer_delete$auto(0x1) (async) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) (async) mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) 2m24.875949194s ago: executing program 32 (id=991): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x948f, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xf4, 0x100000001, 0x5, 0x9, 0x4, 0x3, 0x4, 0x5, 0x3, 0x8, 0x5, 0x7a0, 0xe, 0x3, 0x6, 0x200000009]}, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) r5 = fcntl$auto(r1, 0xfffff2c5, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(r5, 0x8, 0x37, 0x0, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) timer_delete$auto(0x1) (async) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) (async) mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) 48.176211337s ago: executing program 4 (id=1497): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x9}, 0x4) unshare$auto(0x40000080) init_module$auto(0x0, 0xffff9, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0xa8680, 0x0) setsockopt$auto_SO_RCVBUFFORCE(r0, 0x1, 0x21, 0x0, 0x5874) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r1, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) 47.534735738s ago: executing program 4 (id=1501): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20240, 0x0) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') open(0x0, 0x261c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0x4, 0x401, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) r2 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)=r2) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbd2250300000008000400f9ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x8090) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x2e440, 0x0) ioctl$auto_BLKPG2(r5, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) 46.905708934s ago: executing program 4 (id=1504): mmap$auto(0x401, 0x400408, 0xdf, 0x9b72, 0xffffffffffffffff, 0x101) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, r3, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r2, 0x8001, &(0x7f0000000140)='\x96\xa6:\xa9', &(0x7f0000001480)="b055c2cb2d94058c65de4307b7528269bf25d0cf42bd6f276fcff2e9d79433dbca0fa46a0b34329d183c910ebe204eb34696ce00e133fa9b213f158fbe7c7a4a91a452a2601fa6dac3014e059c7c1d556c424042c48d563509fe2e5f822b2f16c958e95a5a8d33e3eaa9cfe0a02646c6c373a86ee2e3eba0942b4fe60eaf0c1fb81ad97adc6fca018b134678451cd6cecf5820811c0dc1b595b40cf713ca2cf5249c730c8c87b4ddb8844668de446fcb51c6482e5b895e41da514181967d", 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r6, r5, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x8a4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002b000000fcdbdf250400000004001800"], 0x18}}, 0x4044820) capset$auto(0x0, 0x0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) r8 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r8, &(0x7f0000000440)="110000000500"/17, 0x11) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) getdents$auto(r3, &(0x7f0000000440)={0x100000001, 0x9, 0x5, "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"}, 0x5000) 46.732856173s ago: executing program 4 (id=1507): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 46.680713521s ago: executing program 4 (id=1508): r0 = socket(0x2, 0x801, 0x84) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) ioctl$auto(0xffffffffffffffff, 0x3b93, r1) (async) close_range$auto(0x2, r0, 0x0) r2 = io_uring_setup$auto(0xb, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000", @ANYRESHEX=r3, @ANYRES8=r1], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) socket(0x8, 0x80000, 0x4) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) (async) pipe$auto(0x0) (async) unshare$auto(0x40000080) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) ioctl$auto(r4, 0x81004525, r4) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) 45.257420007s ago: executing program 4 (id=1515): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x5) (async) r1 = socket(0x26, 0x80805, 0x0) (async) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=0x0, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) (async, rerun: 64) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) (async, rerun: 64) r4 = open(0x0, 0xcd1e23e41b02d660, 0x0) execveat$auto(r4, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 30.395313036s ago: executing program 33 (id=1515): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x5) (async) r1 = socket(0x26, 0x80805, 0x0) (async) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=0x0, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) (async, rerun: 64) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) (async, rerun: 64) r4 = open(0x0, 0xcd1e23e41b02d660, 0x0) execveat$auto(r4, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 11.085527955s ago: executing program 1 (id=1609): mmap$auto(0x0, 0x8001, 0x400000000007, 0xdb9a, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, 0x0, 0x0, 0x8) close_range$auto(0x0, 0x5, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) 10.657235882s ago: executing program 2 (id=1610): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = bpf$auto(0x24, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003ec, 0x14) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r0, 0x80044100, &(0x7f0000000000)=0xf) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x22, 0x800, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bpf$auto(0x24, 0x0, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003ec, 0x14) (async) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r0, 0x80044100, &(0x7f0000000000)=0xf) (async) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket(0x22, 0x800, 0x4) (async) 10.519759913s ago: executing program 2 (id=1611): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff) socket(0x15, 0x1, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x7, 0x8000000000000001, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r1, 0x7) io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="84130000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1384}, 0x1, 0x0, 0x0, 0x1}, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x9, 0xf, @raw=0x9}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 10.43628426s ago: executing program 5 (id=1612): mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socket(0x18, 0x5, 0x1) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x109841, 0x0) ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000001c0), 0x480040, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x2201, 0x0) r2 = socket(0x23, 0x4, 0x3c) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x673a}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x200000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r3, &(0x7f0000000200)='/\x01\x00\xf8x\xfd\b\x00\x00\x00\x00\x00\x00\x00o0\xe7\x00\xceJ\x9d\x03\x829\x92^\xbb-\x82hW@S\xb3\xbb\xd1/\xdd\xd5(E,\xdc\xbei`\x91\aR\x16\xc0\xa5\x0f\xdd\xd4\xf0\xbbi@\x06\xef;c\xc5\x92\xab?\xfd\xe9\x11n\xe1\xc3\x810\xc9\xb5\xddH8Q\x88\xca7\xec-\xa0\xe8l\xce?\xb2\x1b\xe0\xd7\x80\xcd5\xeb\xe0\xd6\xb5\x06\x840\x9e\x9f\vW\x82\xcf -\x98\xed\\\x83IO8\xd7^\xc1\xe8\xb0V2!\x13p\xb2\xada\xf9z\x1a\x10\x85\"\\\xa0', 0x100000000) mmap$auto(0x5, 0x400008, 0x2ebf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x6ab82, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) connect$auto(r0, &(0x7f00000000c0)=@phonet={0x23, 0x40, 0x57, 0x1}, 0x2e) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1001, 0x0, 0xb74, 0xfffffffffffffff9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000030c0)=""/4093, 0xffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/afs/addr_prefs\x00', 0x181200, 0x0) 10.173798619s ago: executing program 1 (id=1613): ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x8}, 0x1) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x502, 0x0) getsockopt$auto_SO_BINDTOIFINDEX(r3, 0x0, 0x3e, &(0x7f0000000200)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', &(0x7f0000000240)=0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x4, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) 9.185395506s ago: executing program 5 (id=1614): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/014/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10001) setresuid$auto(0x8, 0x8, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) read$auto_trace_fops_debugfs(r2, 0x0, 0x0) r5 = socket(0x39, 0x2, 0xd36) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb5, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0xb2d, 0x4, 0x4, r4, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, r5, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, r3}, 0x10) ioctl$auto_X86_IOC_WRMSR_REGS(r2, 0xc02063a1, &(0x7f0000000000)=[0x2, 0x2, 0x4, 0x0, 0x2, 0x200, 0x3, 0x7]) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) madvise$auto(0x4, 0x7, 0xfffffe00) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x200000000000, 0x806121, 0x6) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0xffffffffffffff58) 8.736205617s ago: executing program 2 (id=1617): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000) r2 = prctl$auto(0xa134, 0x22, r1, 0x800, 0x5) r3 = socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) ioctl$auto_FICLONE(r2, 0x40049409, r3) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0xffff, 0x43, &(0x7f0000000140)='/dev/sda\x00', 0x8) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) setresuid$auto(0x60, 0x1000, 0x607) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x5607, 0xffffffffffffffff) ioctl$auto(r4, 0x2284, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9"}, 0x6, 0x7) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r6 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r6, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 8.173449281s ago: executing program 1 (id=1618): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) clone$auto(0x20013b46, 0x0, 0x0, 0x0, 0x2) socket(0x840000000002, 0x80000, 0xff) r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.710032654s ago: executing program 1 (id=1619): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x23, 0x80805, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, 0x0, 0x41) unshare$auto(0x40000080) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xdcfaeb3549df84fd, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.85963963s ago: executing program 1 (id=1621): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x181441, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x1cb842, 0x0) write$auto(r2, 0x0, 0x6) 6.670958435s ago: executing program 3 (id=1622): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/oom_score_adj\x00', 0x80100, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket(0x10, 0x3, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x10b802, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) close_range$auto(0xffffffffffffffff, r0, 0x101) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 6.356647032s ago: executing program 2 (id=1623): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) 5.496305097s ago: executing program 1 (id=1624): mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = semctl$auto(0x5, 0x400, 0x0, 0xcae) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r0, 0x402, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0xcc}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_PID={0x8, 0x52, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54004}, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x100000a3da) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0xfe, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x9a28) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, 0x0, 0x6f4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3800, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x4f64a1d2) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) 5.246925466s ago: executing program 3 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002bc0)={0x1d8, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1c4, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1c0, 0x5, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x6a, 0x1, "645537acd7d1c70a69b3a07674270ef63c036bc7e2c313e26d26b0d22027ed5d8b576381380f51b36ea0a6322d8afbe90e0da03c78277ce0e089d32ace752bf9958d13de84640571b6322864c5f3284d19f64cfbe6736b23e94ee45f07cafe9573797718649a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x38, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x1}]}]}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x40}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x40, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x6}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x613}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x8}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa0, 0x1, "53e9661e932d5e6665577664daf1f78eca69ea9046ed0f84354e7135ae67fb74e3fc2ff37438b9b01df8f7d6a68564d3642f342d3b8fe9c7a14ac4887d9e388a0b911f5bb80f0ad732ffd8b14e8b5f86e56b07649b77b88a6c440f151b3eae27d11e884325de568a9c3d35c735b62a096550f4d25d7853acd5f5e50510fb863ffe6d23c348e7c98706a2f8652aabac7d7430df9c9bfb7149c41a1284"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9, 0x1, "0749a87eec"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x28, 0x1, "b7407fa8537dcebeb4c8d171c31f00b9d9202946c5cfe7bf1764c76650053c2d712ea99e"}]}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 4.538748723s ago: executing program 5 (id=1626): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x7, 0x0) (async) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x7, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) syz_clone3(0x0, 0x0) r1 = io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, r1, 0x0) mmap$auto(0x0, 0x10008040009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x10008040009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x8000, 0x0) read$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x2) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) setsockopt$auto_SO_RCVMARK(r3, 0xf, 0x4b, &(0x7f0000000000)='!#]\x00', 0xa6dc) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) (async) r4 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) (async) r5 = socket(0x11, 0x80003, 0x300) getsockname$auto(r5, &(0x7f0000000000)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000000c0)=0x9) (async) getsockname$auto(r5, &(0x7f0000000000)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000000c0)=0x9) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) read$auto(r4, 0x0, 0x0) (async) read$auto(r4, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) 4.530003531s ago: executing program 3 (id=1627): socket(0x18, 0x4, 0x1) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) (async) select$auto(0x4, 0x0, &(0x7f0000000200)={[0xc, 0x40009, 0x3, 0x2, 0x6, 0x9, 0x9, 0xff, 0x3, 0x7fff, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0x3, 0x9]}, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x1d, 0x2, 0x7) getsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x0) (async, rerun: 32) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/loginuid\x00', 0x101000, 0x0) (async, rerun: 32) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) (async) mprotect$auto(0x200000000000, 0x806121, 0x4) (async) writev$auto(0x3, &(0x7f00000001c0)={0x0, 0x3}, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$auto(0x0, 0x0) (async) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$auto(0x1000001, 0x5, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) write$auto(0x3, 0x0, 0x7fffffff) 3.33600741s ago: executing program 3 (id=1628): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r3, 0x40086602, 0x8) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r4 = socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x5403, 0x0) connect$auto(r4, 0x0, 0x3a) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 3.333583136s ago: executing program 2 (id=1636): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) socket(0x25, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80240, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101c81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x401, 0x1, 0x5, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x2, 0x3, 0x6) r3 = socket(0x0, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @empty}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) 3.260180745s ago: executing program 5 (id=1629): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) socket(0x25, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80240, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101c81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x401, 0x1, 0x5, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) getdents64$auto(0xffffffffffffffff, 0x0, 0x18) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x2, 0x3, 0x6) r3 = socket(0x0, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @empty}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) 2.150660748s ago: executing program 5 (id=1630): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x42800, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r1, 0x80845663, r1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) capget$auto(&(0x7f0000000080)={0x40, 0xffffffffffffffff}, &(0x7f0000000100)={0xe, 0x7e3e, 0x7}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000043c0)={0x488, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x0, 0x2, 0x0, 0x1, [@generic="7920f2f8a65ce3d1fd7684de71f65744be0fd89e333dbd6198becd5620453e917945b7c900506716436b85c918764dbf8911c23c6ba47158b48fe937326ae1749521103f180a89563b9e9c02dd863635fabac025103421a8165ec32eae6ab7448a5368d1dc0ff262bef457f3e032ceed492ec55ab6cc4d252f24dde8a5373f5022a179b25bfcd30503b9983d30b9de1066e332158ee7d9bf379ea816f44f", @typed={0x0, 0x22, 0x0, 0x0, @pid=r3}, @generic="7d64096ef8a2ade335e5140205574bdc5d9e77ad241544bee43aad949747a9e18a540afcc1367b69ac2b68402595f00f91eb07", @generic="09837d12f761e0c3d682d66ad517129cd6b0890973f9ea228c81cec4bbf350bfdc56ce9154ca70a3030ebecea9719f33f0fdb2282d87322ff4e30174f877e932390f8e6e71a1e4960dffad528b9f18f09a8333fb5174c3"]}, @MACSEC_ATTR_SA_CONFIG={0x0, 0x3, 0x0, 0x1, [@generic="e12a939be0572fa0d5e15332da02f5e15252d33476ba953f52eb5ddab3a604eb54ec74082aba235eae412dff215b26f44b9abfdbbd6a7c06bb8bf23154e4d40e412a6e6057ec25a6b5218a3826791f2965d9ed4306a474d91d227822ee9a337f270e11b8275e4cff11a483a7a3d9832d04c7bddf394b76b9e22c6d206ebb24", @nested={0x0, 0xbc, 0x0, 0x1, [@nested={0x0, 0x14e}, @typed={0x0, 0x40}, @nested={0x0, 0xa6, 0x0, 0x1, [@generic="38d99623a56f4823c5791e38c879abc723a063e935363d3dc51388adb89a9b34a066846c99a5935f1e8c97c5573a3b94392f0384fd47a12c2c88c6455923e675297a3e78eaa485990e5fba57a211cf492e6513d1d73f6503f48ad8ae51fd08fa606c14c816190445158e669975f798c6d07b16e6a6a27f072a40ebefaa4bfe5b929cac9d219459c31e081caa37da5e7fed94575866659a821b8d3d80e6a12c5b8bb8cd51b568fae50cc1bfec150c89e5665362b1a0acbbc1509b1a265639950d1d126804b4f8effe97c6609a1f65643b4fa19e54a7ff266a03c2c8d95f4b94eb2fb8d66c9cce0cb52916856f04c1", @nested={0x0, 0x111, 0x0, 0x1, [@typed={0x0, 0xed}]}, @generic="c07645bc8ff9db6136e88ddb8f796e9fdfbd174decb8da37f4bf4f00017f2c1f114e2a1ed799ef4e0d3ab46f5da5a14ead75d9313b0c89ba33415cec5199fa66023a45385729a92f2e2fd901e03bca4904cfc3a0214545a0c58894c94f40a4fc772c2dd749114c07673ca5bfc7ea636c7bfa515e0eabcfc5b609633a40cfd2c86a829d03a890fc4db2f8cf22cda320b19e643ccde727e51c08317da8b34d0ee4dead7e721e867fc113ddc2bc5b5ca17345309a885f0c939ee436ef3fb4a4881ff9e7784303276b0a0b"]}]}, @typed={0x0, 0x76, 0x0, 0x0, @str='/sys/devices/virtual/net/nr14/proto_down\x00'}, @nested={0x0, 0x0, 0x0, 0x1, [@generic="9adc083956bcfc5a598a70964edc20eb4a6fece0bd93d71bafac254b6b126e046368d6a9d3ad08a999903e15ae248a154972fc1c5a3a9c268e2ce5358beaad6ed8919634e7319cd71f00dc869c208a3d47b8188a10f692056a9cb417d52990defa4b4311a37f6b2fa3f1e978bd94a8564a0f2f9a936b212da5c46be1b30764caafdf60b314eaf0a7301a6f5c7c91cee5013946746df96593619eb64ca4d3c6672a8cb3e18cb23cffc87e7920284743dc84a8ccbf2750e9b08dd74b613f4627bc63ea89a452a84a2e412c8762c52c4bb5dcf801e6e721cc18dee685b733b5b47d1c49201c44d05a64d7cc313d1580732a104af5ad98a75067230c2309d26599b424187452b8c33d89e68fbd51358300ad62ddd695898cfcf99208623bbd5026320c883358913c480fa903f84e923b59ced6d32082737134ce3acc670c5404edf53eca87a394fc8e19ba967ab4791cd4e13224caa39fe00af9bd9bfe2cdf3a5c1c9dc4225ec133c2cd409aa9a377253d937251bfc04a15e4e57e76ccbd2f4284fc93def915fdc6691f2de80893619532f8668f378f54e9cc43d90a1c643ecee4a21a78f3dbb3c0e5c36e1445ba37f8c03b705546d73f3af36afeeadaa01574e103b8421248c5e2dbdbe2e2bc1f708170951dbbd6af4a07c9d46667a6a68c2b0539f8e29c75c00544443bcd80b9365bc4c53644a76d1b5575de0c7aa5b46b1a48310949956c677ad4bd8792c8472aedaa498cf3a25783c7fa0ba9821849182d25f52700e39d37bacb34edbf4d12fcac6d6aeed3b6bef925efeb72306b076020c1e2bd3c670e7d1388dd482aa0365bc0c317bd45690611fb69a7e8b759358c319f6fbd3a5d215f9b3a63832e314d09ff26a78c89a4e0f1984e717966e614b6e62aa1fc49fb936e52bf7d76bc8b7be1ba57ce6f90fb54509aecf74c121d937e0f040a89fdc31ec1f0c1eb44b691b985c80b2c5a320204d145c54f5f232c1ae4c7d7ba86b466ea56ab6a975ce7629835becb2b12e7dda5b4e61081a04dc46f27d54c1f757e6eeb993baffaefd5c322375a1107723e560a6f2599a5e2f119258dfdc3ef52e925332057543e5d869bcefbaef6ccdad508bdbc502b6195d3f3078d52aa0d341697f4ffcdf53b3831e5de7664e201ee28e6cabf03d3a91a737681c8b02a8ab30feffa8f548ac6b7a36d8188d44ad12cb3ea00b5ce7aace96b34729bf474e72f329722c94e844f36a5088eb98ddf014c94d0e7ae5b95cd6ce669ee9d30323230bfe1361c3aa7f87472b5784f0fb500751ccc6f04a321f949ddc9e07fcfaf9698f6339050dfb3a78dc7c697b053f0362e54a062fecbea7f8642e271f3e1e5a8f07d91c338931206ea08c7a43f225b4a0c4675b1ff3a90e90e29a492dab9bb5f0a0cfdda6c1d063d69a8e1260559cdb2afac0dc3d5657f88050b3a02f01bfc2b80661a09ca54e807ba28ac501e4d38334499c0646e14c152283726b042dcb2ae0eec1ecea0982c0d4451f36489fde7c8c90bc5e2fcc9a25ca2ded772097c9ddae48b9ea6d004470e769b2daddc8c7660ce5a7c0a50043396405d57d89bd006541ac21f517a898b023eb2b25e60463e01dad1891be9c3592ed24fef21bbdf8206022f3207a27990838cbaf9659a0b9a2005e67edb5c0c251928e079159810f1723ddc2b49828d806923ea1324a043e66ddb02fc448bba869b5ee6fd52c84fc2ae718c7600fe382f6eadb78fec701a887232955d825c86058c6dd01c7d8a69c3579307dae304beb706a699a4864c32882aef06614d745915534f873c6035096357af72caceb49651c33f97c4bfcafb48565e826aeb4f90a4482be7429118f607bfe7ab83170fd9ac1d3a8bcf5b6f0e08c596eb92d2b5b019cc5b09c11a39d51d5d4638f65f1dabc4913266010ecc1b830f193b950dcb69aa2aff90c1baab9f7bc94af38e9d62a443901cdb2c5287929de02a2380dca1a5eb21d632ba40b00a54721872c688e9dfff925fb72d65859de1712ee8faf10b7523aaf6033bc216c5954e30f5e10d30e6d2ddbc966202eae3e11e2627dce018fd3a6ad5575daf19152a169f7325c5920f09bd416775b7dfa7510f424173245c94069b5416a62d1ca24cb93213cc7abd047f7afe22486c8c3f6a38746076df8626b701e46f792456fcc821212296b22c2800a21b161eecb4264092ac50d5c99a9e16d7052208b8a1b0a438d4ef46a27f61978f50f28b81b3734014065d5d8251a0c2ba47df1daa152b6d12d293c6feefbcee82753d2fc7730788cc0a54fbccc59c33c99d6c68f22ac946047633456062b4716552ace0df07e4d3c0620b57fdb124f76bc8428c6f2f3940abcd48f12074cdb33073c996433e98d21d7edd54c2528b3ba271362a37e12278c6fccd8fcbf653839a4623b1184e8c2564a9acff3112637c133b146ffed3f138fce14678576aa300781c88b6bdf5571605e8288f0f89ec3edb0c3089319662ad543f7449169eec1793554e7c4138b7c3529fb0ef2886e21da75b7838e17d7eb2a8159faaf96d0690dbecf8931a673c69a4231d67226cb3c45f891868e73c77d4b11f2250d402c90cc38f950e79d22a22d6ce3172a32984ee045f6d6f15eb76cbd41be040624109a76954eb6569dc9e555c1833e03b58040f3d0ab19d65d0d75f373fd522af62165f7361622c33ee7220a487e11f94f106fc9d4c953ef9d50fa3bb6be62267d65d4231f6989efc7d38fed697601aa7d18d9a0e3934e4d0195bf61955743d726d161d6e087245f6526532920192da5b34a07e832a07dd5cb7ca556f57384962d655f499ef6767f79070d2621f61221afd55c5d6aad7c867c849ca2e77aeb178ee887f9d9339960ecf78d3dc3c3966548bc2960d9691109206ce05f34780be1f0e58bfda3ebd7b22c55f9dd9cff180c2f6a770653349a7ad2f9252091849e3fa32757005c6ffcf488e8e8616f39347ac68086561da35c32b1b1fe354ea9bab2fa7a8ffed26a8dafc5556af403491bfc788f80b8bd8cd10bb65a5bf767fafe60c6358a72a53289e528b116a0b88159ebd4e79ee6595691bcde392abf493cd849ff688964d8fd716f16d1623a918c8697407991889101442b327ea4bd0695d5f0a63bf100f4b69fb57d8a128006d5140020fa1e0bbdb716470c09969a9c647f33d0fa605d0300be6e5408b8bb87baf35fb86cdc1bcdc7bd79630d01ba0ab118297e8b08538a0411a07009b67480ccc7004042a2bf0d3bd717831483ed0a9cc055ca70f5ddc3148a95f1f2b32aea047b2d1838b6cfaeeaebb4e14fd5c7e204849ea66f7208dede9069d0445973a31a7586de670517c364f3066aa3ce2c58b3ca9e598809bbaaf5677fbe2df728205d9c33111c4505a655e8a587a08fec4e0df8a2dcd18d3f7836ce877f8cf49e394e7d252bf27b83143bc0fdbc95fc2892dd9e9a0865a3c7efba4e2eef705697a260670ad23e58cf5baffed026838eb3e8a592aaa7daf026c74767d1e527c4764044998b70e73fc1ac1e9cecc2f37d967d59000a3186e14411d07a452e2e03df08ae6dce4440c4352666e04bcf5e346f69e9d160c59c8ffb8557a7855cf2fa7b300c5b8532582bfbe6d84123462f6b4bdbd493edd1a2199336318b4c3de64da406284273afd259388e30fa4612a759b8ae6eaa9882777255b6255a54bbee7607bdf436246402bcdca64b651cfe7ce740ee9e31f47f6650de5b6cc5effde7e191ffff19135a82f8e324cc0e97dcae7d2b903c4f9d28ad19f8f17e0814fb717e2cdb660a181d43e7e07402b1917094bd8612c77e104c8302d7e3013049e694f76b61c748552a8ecbb17b4becffe0ddb5a5315d135175622d2b39e95fb435817791fd04a20b3a2893adb3a8432e3c311f3c713ea56fb10b69e50435f3b59dd9942617d734d4f1c07d4a9ab39d587e58ed5d1be0e85d26cda59d3297c5f71d3198d5ebf07111ea671510fcc972e9f3f1a0010105fcf1b1236920a2768dcead58bf6210efd4c4d7efadc74a5c888745c480da18756c137e002f6c393caf5e4ecb52d17391ce52f55e83401d73aecd61cda870b8d61da4bf7c5636d0c7fbd516a4e1681da59e724722156e1a227458f471c4fc2eb044e3845050cbf7af51f08a9fd967201b6967c5ef7cb8e3dd32e954d13960216ff4a0778f4cc6cf147c91e5da1860a0984e5c8741aac63ce6179afdb4c1502f3c65a1ed243a66b6e2bbab1dd805e602dd90346dca77d371128ed764b57db59ff5b77eecc7680be4722fc2ab30df587aee63d1623c8e7e10d533b05b9a023703a6714d4a95985cf4d8d27cd8d4e09fbd72fbca9b8f9cf14d2177fc8aabe5718b7e9b28fcda8dec68649b6801c877f055aa817de8f0f5053f4f6350b22aff3ccb20fa165bc933cfa7b491b6b559a399787633a064324555c319887eac833acccb450293ef855a0897b4f8fbc05c38d87d145b5ffcdb684d1f21eb320481f0cd3ca193702450b54b9fa56ea23f4225db147133e4b5ed88df0cf1e574a7d45877d5daa3ebdf483522ee3e21fed7cad8f764578468a3246bf30224217b0ecd1af6fee29ccdb2e82ff63302c61572ef46b15f484fb034d6076f32b57a88499b039622427ac8e177c3794189377a58e2d2591b9a0dc4c2c4a7ec1ea613a06758c6f21ff8fea0546514718f412f2a45430563fe5c0b9bcc06570398d1c8c35a8e7a21fcd0d4712cc8aad6ea9cd5ad8e023de2862d89d55180883184bb82d79920f4e93efb1a427942d6094b3305012a565107040ff5ebe6c903ce73350d100fa2a6cf7a50c36a7e09cf77ed991095b0356926bd4c66fcfb04a646c20aaeecfd606d49ee7a161c7355fc1ac39ce0989ac3f411ad11766b6fd227ff98183cb476b01c4e408094a1f4e549c21bac40344ffaa5cc19a42d994a528842a68d0b93bc804b91cd81fc43e5096b3ccb0e09481ff03528ac9d54d3efc8463a18a75bca9747db7571942bd40095920f0e94b5f52812f233a18baa30a85e30a74684728c4b924303b9104a75540f9b66f09b37f97a7fb9678a6e4585f1ff3b515796dc2cdf16a33490640df8c0067d1de6447ce69b50647d0f8d15324ba49c2be969744a62fbb7cdd83d9c669cc99c7cb3b48e3e1878797fc792cc7c8f07c0e6de7ee350ab3c8d54bd754d40718f1608a755b1d5e4f0326442762b5eea1b0b1ca95595ab4195b6e4a5586553d788e10ebb6d62a0a56550b2e46fe7ff0d786b3b5a26fda2c389f0bf329737c2349391dfb439cee20e2a4984b48420f8e44a3b1cdb942aecc77ab771111c381d2e946b10079f88cbeff568b8a618d1f91f4d567a6eb6401dda00bd71da400d79349503e5df87598b0ccd12fff6b588e1b19974aef0f4095dc9709ad80e55777978ed812ed578734a572489a75b4d88fda9b0029d9b220646c69576b85a272bf86e11f56e542dbc5f0c25d7f27ce01432ded775afc350dcc671aef686cf7a5606ba0f1ddda510e3cd2d4554d367d6026f3b34a5bb12c754e586df6a9978c63320e193794037fda938a3a0908bb0c9111946d892aeea70191c646f223f4516f7581794e1e5a98f0313ad7f884d122f2dc6e45fca65ca4e450bd1aa5e8fbe0ea26141d371b66e5f3827f9149104cf28732e9b48621514c149de94b4e9c3e577ee9f02a3b228b5fc39eb12309164cd78193321c4eb2d2ab68c763c5d4f4732bc35455f1b581a174f4edad1ce126a9350ab6d4b5c94abfe0c4bc03b290b63708b578dd70b5b804b312849587f3ca47c3bfeb1dc012027abe10c3fda92b6572", @generic="df714eccdab946a2636fbce2345af0b1bb0b45c0e15b", @generic="6e7ab5996a8b424c870d674348955f4e973d2a81269bafe54faa6646217ad3f5f60491df3a25b566ec6ab96465ac0cf654046f4f7ce5c25202ce"]}, @nested={0x0, 0x28, 0x0, 0x1, [@generic="36766b46cc8dc21bc5a4932fca3c0db5f2dc9661f654d507abe85ba8070cc7e1a487c5d744b1a26128a7b216902ca402551afd35486794e8a0c68f4ada141196ac6a73eced7292c3a00d6d8ba1dc06b8e4b977b70d92536cd32cbe0bc02c3a69a9d5731eb8d0033a72abb32cdca56b24104e20254d28d54f1cb12e000ed3c48e5ccfe59ea84adbfe7a1843bc802283", @nested={0x0, 0x5}]}, @typed={0x0, 0x119, 0x0, 0x0, @fd}, @typed={0x0, 0x14d, 0x0, 0x0, @u32=0xf7}]}, @MACSEC_ATTR_OFFLOAD={0x219, 0x9, 0x0, 0x1, [@nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x5, 0xd6, 0x0, 0x0, @str=')\x00'}]}, @generic="984d5707fc7f308e4f1bb513c28243af784351615c4e5f795e1dedacf7d10672fb74558096367c9b4db543bcfed7f41fe8ab7cc4b41178e2d71cfda4d85eb1021f9dc3b8c4467cec90019d16824ff8c322f32875ccfef02230599283a0c2c81b93fcdaaab9ab48f25ed10e9d5387aebabb40b01f5fcfbceb6ab14beaf20602c0f907acefb53e86f9d4f93c82e6640b27c61f53c6975044ba63fd60c211df7f46dbf638c8eca9ca", @nested={0x4, 0x84}, @generic="23bd7601040000c25301006a5f3a92607d6a463623cb3a3b300cee605040f73385feb2a0431994e48ca0d75c7b25254acc4ea272b2ea173d4e341ca30d9033d6ce3f55c86ab368ebca048a45c02d55d68cbbd90d53a73c6035751f680000000000004e36113454ad29d7ef6d4239bbe2bf6beeb93f4f", @generic="4a72bbb8a567f6c4302e05294febc489e8ae3320eea30a2eaaba56181f87d53be52fbd874fdd2a3bf9913b2e1bc67ee31ff43c23f8bb1c805cfb3017960569b7d337125d0ad395fca95ee845533edb90fe0bf1e6b2eaae8ec29fcd672bc6cf1d37e13f74ffbda8f79e65b03e5b7dbf0309ac259da3bfb636ded58958be6b3d6ef5d8940c3afcab02628df2a202d18c62d884274c55f1ed7634cf03a57d4293b7a336970f625cdc0f7eb7e78fe8cef83c22a02b4f44dde1d6712714860de2ece6d753077544bcbc2b79ce303ae70d8544abdf23ad1e8ce25819b29030a6db0a977d2409311550276d"]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) poll$auto(&(0x7f0000000000)={r5, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r6, 0x113, 0x3, 0x0, 0x79ad226b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x45d9, 0x0) r7 = socketcall$auto(0x8000, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 1.609757761s ago: executing program 3 (id=1631): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) wait4$auto(0xfffffff9, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4018aee1, &(0x7f00000000c0)={0x2, 0x0, [{0x1c4, 0xfffffdff, 0x2}]}) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) 611.43894ms ago: executing program 3 (id=1632): ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x8}, 0x1) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x502, 0x0) getsockopt$auto_SO_BINDTOIFINDEX(r3, 0x0, 0x3e, &(0x7f0000000200)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', &(0x7f0000000240)=0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x4, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) 455.059562ms ago: executing program 2 (id=1633): r0 = socket(0x10, 0x0, 0x21fffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/if_inet6\x00', 0x0, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyte\x00', 0x80, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, &(0x7f0000000240)="e9ef15a0260ccfd3a45030cb0aa2b9c4c747165388b5d9fc7a9f2fa86aa1d81c9c8ff342671fe2e10aed0096e24792f7c0fc94b104d52f7e4be7e1bb4b208f914038efb0102853a4f0761cfa23dfbea73acc80d7ef7947c9dd726642d30316f141a644d6341dc124557e0f8cc3eb222ee464bacc6538d105ba4f10ab730fbe0ab1bb7309025e30") r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop7\x00', 0x14be02, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r4, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), r1) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) io_setup$auto(0xe, &(0x7f0000000080)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) madvise$auto(0x0, 0x8, 0xe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) mknod$auto(0x0, 0xcb, 0xfffffffa) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001040)={0xa0, 0x6, 0x303, 0x1, 0x101, 0x10000006, &(0x7f0000000040)}) acct$auto(&(0x7f0000000040)='/dev/bus/usb/024/001\x00') fdatasync$auto(r3) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000180)={0xffffffffffffff99, &(0x7f00000000c0)="809e9c71b48394b3f89b0265b1c1f5021cc4b1d38022bbb9f5065eb1024dc5f9fefc8a0156155242fd4d434e24d35381288d0cac0d4b71931fca34b76f1519dfda40", 0x1}) r6 = socket(0xa, 0x1, 0x84) getsockopt$auto(r6, 0x1004, 0x5, 0x0, &(0x7f00000001c0)=0x3ff) 0s ago: executing program 5 (id=1634): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x7ffff003) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xfff, 0x1, 0x948b, 0x7, 0x95f4da2d, 0xc, 0x6, 0x64, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000100)={[0x1fe, 0x6, 0x2, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8000000000000000, 0x6]}, 0x0) listen$auto(r1, 0xffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000036", @ANYRES16, @ANYBLOB="010025bd7000f7dbdf250100003f"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) lsm_list_modules$auto(&(0x7f0000000040)=0xfffffffffffffff8, &(0x7f0000000080)=0x4, 0x5) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000140)='0[.[\x00', 0xcd04) getsockopt$auto(r3, 0x1, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 302.628270][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.2.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.628308][T10082] Tainted: [L]=SOFTLOCKUP [ 302.628316][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.628330][T10082] Call Trace: [ 302.628337][T10082] [ 302.628347][T10082] dump_stack_lvl+0x16c/0x1f0 [ 302.628379][T10082] should_fail_ex+0x512/0x640 [ 302.628410][T10082] _copy_to_iter+0x29f/0x1710 [ 302.628438][T10082] ? find_held_lock+0x2b/0x80 [ 302.628474][T10082] ? __pfx__copy_to_iter+0x10/0x10 [ 302.628498][T10082] ? __folio_put+0x32e/0x450 [ 302.628530][T10082] ? __pfx___folio_put+0x10/0x10 [ 302.628562][T10082] ? __lock_acquire+0x433/0x22f0 [ 302.628594][T10082] copy_page_to_iter+0x12a/0x1e0 [ 302.628621][T10082] anon_pipe_read+0x47e/0x1210 [ 302.628661][T10082] ? __pfx_anon_pipe_read+0x10/0x10 [ 302.628691][T10082] ? __pfx_aa_file_perm+0x10/0x10 [ 302.628722][T10082] ? find_held_lock+0x2b/0x80 [ 302.628773][T10082] fifo_pipe_read+0x1e/0xd0 [ 302.628798][T10082] do_iter_readv_writev+0x743/0x9e0 [ 302.628825][T10082] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 302.628847][T10082] ? common_file_perm+0x1b1/0x500 [ 302.628877][T10082] ? bpf_lsm_file_permission+0x9/0x10 [ 302.628909][T10082] ? security_file_permission+0x71/0x210 [ 302.628939][T10082] ? rw_verify_area+0xcf/0x6c0 [ 302.628977][T10082] vfs_readv+0x4cb/0x8b0 [ 302.629014][T10082] ? __lock_acquire+0x433/0x22f0 [ 302.629042][T10082] ? __pfx_vfs_readv+0x10/0x10 [ 302.629090][T10082] ? __fget_files+0x20e/0x3c0 [ 302.629112][T10082] ? __fget_files+0x120/0x3c0 [ 302.629145][T10082] ? do_readv+0x28c/0x340 [ 302.629164][T10082] do_readv+0x28c/0x340 [ 302.629187][T10082] ? __pfx_do_readv+0x10/0x10 [ 302.629220][T10082] do_syscall_64+0xcd/0xf80 [ 302.629257][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.629281][T10082] RIP: 0033:0x7fe92978f7c9 [ 302.629305][T10082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.629328][T10082] RSP: 002b:00007fe9279d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 302.629351][T10082] RAX: ffffffffffffffda RBX: 00007fe9299e6090 RCX: 00007fe92978f7c9 [ 302.629367][T10082] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 302.629382][T10082] RBP: 00007fe9279d5090 R08: 0000000000000000 R09: 0000000000000000 [ 302.629396][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.629411][T10082] R13: 00007fe9299e6128 R14: 00007fe9299e6090 R15: 00007ffdf0656a58 [ 302.629455][T10082] [ 303.034710][T10069] FAULT_INJECTION: forcing a failure. [ 303.034710][T10069] name fail_futex, interval 1, probability 0, space 0, times 0 [ 303.050919][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.3.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.050961][T10069] Tainted: [L]=SOFTLOCKUP [ 303.050969][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.050982][T10069] Call Trace: [ 303.050989][T10069] [ 303.050998][T10069] dump_stack_lvl+0x16c/0x1f0 [ 303.051026][T10069] should_fail_ex+0x512/0x640 [ 303.051057][T10069] get_futex_key+0x1d0/0x15f0 [ 303.051087][T10069] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 303.051119][T10069] ? __pfx_get_futex_key+0x10/0x10 [ 303.051147][T10069] ? __destroy_inode+0x2ed/0x740 [ 303.051176][T10069] ? __pfx_sock_free_inode+0x10/0x10 [ 303.051209][T10069] ? destroy_inode+0x12c/0x1b0 [ 303.051240][T10069] futex_wake+0xea/0x530 [ 303.051272][T10069] ? __pfx_evict+0x10/0x10 [ 303.051299][T10069] ? __pfx_futex_wake+0x10/0x10 [ 303.051343][T10069] do_futex+0x1e3/0x350 [ 303.051371][T10069] ? __pfx_do_futex+0x10/0x10 [ 303.051396][T10069] ? iput+0x35/0x40 [ 303.051421][T10069] ? __sock_release+0x20b/0x270 [ 303.051454][T10069] __x64_sys_futex+0x1e0/0x4c0 [ 303.051482][T10069] ? __sys_socket+0xad/0x2d0 [ 303.051500][T10069] ? __x64_sys_openat+0x174/0x210 [ 303.051530][T10069] ? __pfx___x64_sys_futex+0x10/0x10 [ 303.051557][T10069] ? xfd_validate_state+0x61/0x180 [ 303.051588][T10069] do_syscall_64+0xcd/0xf80 [ 303.051613][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.051634][T10069] RIP: 0033:0x7fbce878f7c9 [ 303.051650][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.051672][T10069] RSP: 002b:00007fbce95fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.051692][T10069] RAX: ffffffffffffffda RBX: 00007fbce89e5fa8 RCX: 00007fbce878f7c9 [ 303.051715][T10069] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbce89e5fac [ 303.051729][T10069] RBP: 00007fbce89e5fa0 R08: 00007fbce95fc000 R09: 0000000000000000 [ 303.051743][T10069] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 303.051756][T10069] R13: 00007fbce89e6038 R14: 00007ffff191ca40 R15: 00007ffff191cb28 [ 303.051787][T10069] [ 304.072065][T10099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 304.417383][T10102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 304.458128][T10107] netlink: 'syz.1.1004': attribute type 11 has an invalid length. [ 304.493381][T10107] netlink: 'syz.1.1004': attribute type 11 has an invalid length. [ 304.947866][T10114] sd 0:0:1:0: PR command failed: 1026 [ 304.957979][T10114] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 304.966832][T10114] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 305.103856][ T5837] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 306.193257][T10136] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1012'. [ 306.402559][T10142] netlink: 'syz.1.1014': attribute type 11 has an invalid length. [ 306.417614][T10142] netlink: 'syz.1.1014': attribute type 11 has an invalid length. [ 306.575116][T10147] FAULT_INJECTION: forcing a failure. [ 306.575116][T10147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.611647][T10147] CPU: 0 UID: 0 PID: 10147 Comm: syz.2.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.611688][T10147] Tainted: [L]=SOFTLOCKUP [ 306.611696][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.611717][T10147] Call Trace: [ 306.611725][T10147] [ 306.611735][T10147] dump_stack_lvl+0x16c/0x1f0 [ 306.611766][T10147] should_fail_ex+0x512/0x640 [ 306.611799][T10147] _copy_to_iter+0x29f/0x1710 [ 306.611827][T10147] ? find_held_lock+0x2b/0x80 [ 306.611866][T10147] ? __pfx__copy_to_iter+0x10/0x10 [ 306.611890][T10147] ? __folio_put+0x32e/0x450 [ 306.611929][T10147] ? __pfx___folio_put+0x10/0x10 [ 306.611962][T10147] ? __lock_acquire+0x433/0x22f0 [ 306.611999][T10147] copy_page_to_iter+0x12a/0x1e0 [ 306.612030][T10147] anon_pipe_read+0x47e/0x1210 [ 306.612072][T10147] ? __pfx_anon_pipe_read+0x10/0x10 [ 306.612103][T10147] ? __pfx_aa_file_perm+0x10/0x10 [ 306.612134][T10147] ? find_held_lock+0x2b/0x80 [ 306.612179][T10147] fifo_pipe_read+0x1e/0xd0 [ 306.612205][T10147] do_iter_readv_writev+0x743/0x9e0 [ 306.612232][T10147] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 306.612256][T10147] ? common_file_perm+0x1b1/0x500 [ 306.612287][T10147] ? bpf_lsm_file_permission+0x9/0x10 [ 306.612325][T10147] ? security_file_permission+0x71/0x210 [ 306.612356][T10147] ? rw_verify_area+0xcf/0x6c0 [ 306.612397][T10147] vfs_readv+0x4cb/0x8b0 [ 306.612424][T10147] ? __lock_acquire+0x433/0x22f0 [ 306.612452][T10147] ? __pfx_vfs_readv+0x10/0x10 [ 306.612502][T10147] ? __fget_files+0x20e/0x3c0 [ 306.612525][T10147] ? __fget_files+0x120/0x3c0 [ 306.612558][T10147] ? do_readv+0x28c/0x340 [ 306.612574][T10147] do_readv+0x28c/0x340 [ 306.612603][T10147] ? __pfx_do_readv+0x10/0x10 [ 306.612637][T10147] do_syscall_64+0xcd/0xf80 [ 306.612669][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.612693][T10147] RIP: 0033:0x7fe92978f7c9 [ 306.612713][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.612736][T10147] RSP: 002b:00007fe9279d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 306.612759][T10147] RAX: ffffffffffffffda RBX: 00007fe9299e6090 RCX: 00007fe92978f7c9 [ 306.612775][T10147] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 306.612790][T10147] RBP: 00007fe9279d5090 R08: 0000000000000000 R09: 0000000000000000 [ 306.612805][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.612818][T10147] R13: 00007fe9299e6128 R14: 00007fe9299e6090 R15: 00007ffdf0656a58 [ 306.612853][T10147] [ 307.919607][T10171] program syz.2.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.939040][T10171] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 308.381476][T10173] zswap: compressor not available [ 309.323393][T10202] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.104), cmd(7) [ 310.325485][T10219] program syz.1.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.384165][T10219] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 310.763228][T10223] zswap: compressor not available [ 311.380102][T10244] warning: `syz.1.1042' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 311.689910][T10254] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1045'. [ 311.760096][T10263] forcing mempool usage for bvec_alloc+0x192/0x210 [ 311.837918][T10266] netlink: 'syz.2.1048': attribute type 11 has an invalid length. [ 311.854001][T10266] netlink: 'syz.2.1048': attribute type 11 has an invalid length. [ 312.463233][T10269] program syz.3.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.474721][T10269] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 312.511284][T10272] zero sized request [ 312.839318][T10270] zswap: compressor not available [ 313.569518][T10300] base or size exceeds the MTRR width [ 313.807667][T10310] FAULT_INJECTION: forcing a failure. [ 313.807667][T10310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.856825][T10310] CPU: 0 UID: 0 PID: 10310 Comm: syz.1.1059 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.856866][T10310] Tainted: [L]=SOFTLOCKUP [ 313.856875][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.856888][T10310] Call Trace: [ 313.856897][T10310] [ 313.856906][T10310] dump_stack_lvl+0x16c/0x1f0 [ 313.856937][T10310] should_fail_ex+0x512/0x640 [ 313.856971][T10310] _copy_to_iter+0x29f/0x1710 [ 313.857000][T10310] ? find_held_lock+0x2b/0x80 [ 313.857039][T10310] ? __pfx__copy_to_iter+0x10/0x10 [ 313.857064][T10310] ? __folio_put+0x32e/0x450 [ 313.857097][T10310] ? __pfx___folio_put+0x10/0x10 [ 313.857130][T10310] ? __lock_acquire+0x433/0x22f0 [ 313.857167][T10310] copy_page_to_iter+0x12a/0x1e0 [ 313.857198][T10310] anon_pipe_read+0x47e/0x1210 [ 313.857239][T10310] ? __pfx_anon_pipe_read+0x10/0x10 [ 313.857272][T10310] ? __pfx_aa_file_perm+0x10/0x10 [ 313.857302][T10310] ? find_held_lock+0x2b/0x80 [ 313.857347][T10310] fifo_pipe_read+0x1e/0xd0 [ 313.857374][T10310] do_iter_readv_writev+0x743/0x9e0 [ 313.857401][T10310] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 313.857424][T10310] ? common_file_perm+0x1b1/0x500 [ 313.857456][T10310] ? bpf_lsm_file_permission+0x9/0x10 [ 313.857487][T10310] ? security_file_permission+0x71/0x210 [ 313.857518][T10310] ? rw_verify_area+0xcf/0x6c0 [ 313.857557][T10310] vfs_readv+0x4cb/0x8b0 [ 313.857584][T10310] ? __lock_acquire+0x433/0x22f0 [ 313.857613][T10310] ? __pfx_vfs_readv+0x10/0x10 [ 313.857662][T10310] ? __fget_files+0x20e/0x3c0 [ 313.857686][T10310] ? __fget_files+0x120/0x3c0 [ 313.857719][T10310] ? do_readv+0x28c/0x340 [ 313.857739][T10310] do_readv+0x28c/0x340 [ 313.857762][T10310] ? __pfx_do_readv+0x10/0x10 [ 313.857797][T10310] do_syscall_64+0xcd/0xf80 [ 313.857831][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.857856][T10310] RIP: 0033:0x7f7e5258f7c9 [ 313.857875][T10310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.857898][T10310] RSP: 002b:00007f7e53407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 313.857921][T10310] RAX: ffffffffffffffda RBX: 00007f7e527e6090 RCX: 00007f7e5258f7c9 [ 313.857938][T10310] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 313.857953][T10310] RBP: 00007f7e53407090 R08: 0000000000000000 R09: 0000000000000000 [ 313.857968][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.857982][T10310] R13: 00007f7e527e6128 R14: 00007f7e527e6090 R15: 00007ffdfe0df458 [ 313.858018][T10310] [ 314.457894][T10313] zswap: compressor not available [ 314.625132][T10322] FAULT_INJECTION: forcing a failure. [ 314.625132][T10322] name failslab, interval 1, probability 0, space 0, times 0 [ 314.640737][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.2.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.640772][T10322] Tainted: [L]=SOFTLOCKUP [ 314.640779][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.640791][T10322] Call Trace: [ 314.640799][T10322] [ 314.640807][T10322] dump_stack_lvl+0x16c/0x1f0 [ 314.640837][T10322] should_fail_ex+0x512/0x640 [ 314.640867][T10322] should_failslab+0xc2/0x120 [ 314.640895][T10322] kmem_cache_alloc_noprof+0x75/0x760 [ 314.640926][T10322] ? __es_insert_extent+0x743/0x1440 [ 314.640961][T10322] ? __es_insert_extent+0x743/0x1440 [ 314.640984][T10322] __es_insert_extent+0x743/0x1440 [ 314.641022][T10322] ext4_es_insert_extent+0x449/0x1120 [ 314.641057][T10322] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 314.641087][T10322] ? find_held_lock+0x2b/0x80 [ 314.641128][T10322] ? rcu_is_watching+0x12/0xc0 [ 314.641149][T10322] ? ext4_es_lookup_extent+0xcc/0xc80 [ 314.641181][T10322] ext4_map_blocks+0xad7/0x1350 [ 314.641226][T10322] ? __pfx_ext4_map_blocks+0x10/0x10 [ 314.641258][T10322] ? trace_kmem_cache_alloc+0x28/0xb0 [ 314.641282][T10322] ? kmem_cache_alloc_noprof+0x2a1/0x760 [ 314.641313][T10322] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 314.641346][T10322] ? ext4_ext_index_trans_blocks+0x159/0x190 [ 314.641370][T10322] ? __ext4_journal_ensure_credits+0x25e/0x2f0 [ 314.641409][T10322] ext4_do_writepages+0x1fa6/0x3c70 [ 314.641440][T10322] ? __lock_acquire+0x433/0x22f0 [ 314.641488][T10322] ? __pfx_ext4_do_writepages+0x10/0x10 [ 314.641541][T10322] ? ext4_writepages+0x37a/0x7d0 [ 314.641575][T10322] ext4_writepages+0x37a/0x7d0 [ 314.641611][T10322] ? __pfx_ext4_writepages+0x10/0x10 [ 314.641659][T10322] ? _kstrtoull+0x145/0x200 [ 314.641697][T10322] ? __pfx_ext4_writepages+0x10/0x10 [ 314.641743][T10322] do_writepages+0x27a/0x600 [ 314.641773][T10322] ? __pfx_do_writepages+0x10/0x10 [ 314.641796][T10322] ? do_raw_spin_unlock+0x172/0x230 [ 314.641829][T10322] ? _raw_spin_unlock+0x28/0x50 [ 314.641869][T10322] filemap_writeback+0x225/0x2d0 [ 314.641898][T10322] ? __pfx_filemap_writeback+0x10/0x10 [ 314.641965][T10322] ? __pfx_mt_find+0x10/0x10 [ 314.642005][T10322] file_write_and_wait_range+0xcd/0x140 [ 314.642039][T10322] ext4_sync_file+0x310/0xeb0 [ 314.642075][T10322] ? __pfx___up_read+0x10/0x10 [ 314.642107][T10322] ? __pfx_ext4_sync_file+0x10/0x10 [ 314.642138][T10322] vfs_fsync_range+0x142/0x230 [ 314.642174][T10322] __do_sys_msync+0x3cb/0x590 [ 314.642215][T10322] do_syscall_64+0xcd/0xf80 [ 314.642244][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.642269][T10322] RIP: 0033:0x7fe92978f7c9 [ 314.642289][T10322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.642312][T10322] RSP: 002b:00007fe9279f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 314.642335][T10322] RAX: ffffffffffffffda RBX: 00007fe9299e5fa0 RCX: 00007fe92978f7c9 [ 314.642351][T10322] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 314.642367][T10322] RBP: 00007fe9279f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.642381][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.642395][T10322] R13: 00007fe9299e6038 R14: 00007fe9299e5fa0 R15: 00007ffdf0656a58 [ 314.642431][T10322] [ 315.274406][T10311] zswap: compressor 000 not available [ 315.474550][T10330] zero sized request [ 317.554152][T10358] random: crng reseeded on system resumption [ 317.744300][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.759454][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.775591][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.795450][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.809301][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.879129][T10368] netlink: 'syz.3.1072': attribute type 11 has an invalid length. [ 317.890816][T10368] netlink: 'syz.3.1072': attribute type 11 has an invalid length. [ 318.433641][T10374] zswap: compressor not available [ 318.717851][T10366] chnl_net:caif_netlink_parms(): no params data found [ 319.034141][T10378] zswap: compressor 000 not available [ 319.125669][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.173687][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.182348][T10366] bridge_slave_0: entered allmulticast mode [ 319.201039][T10395] zswap: compressor not available [ 319.225263][T10366] bridge_slave_0: entered promiscuous mode [ 319.255873][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.293601][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.312570][T10366] bridge_slave_1: entered allmulticast mode [ 319.334577][T10366] bridge_slave_1: entered promiscuous mode [ 319.454426][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.497385][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.580591][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 319.687588][T10407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1077'. [ 319.708948][T10366] team0: Port device team_slave_0 added [ 319.783632][T10399] openvswitch: HfR: Dropping previously announced user features [ 319.802311][T10366] team0: Port device team_slave_1 added [ 319.843581][ T5846] Bluetooth: hci4: command tx timeout [ 320.016423][T10413] netlink: 'syz.1.1081': attribute type 11 has an invalid length. [ 320.049284][T10413] netlink: 'syz.1.1081': attribute type 11 has an invalid length. [ 320.091989][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.103724][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.141305][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.170798][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.179758][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.218339][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.373783][T10366] hsr_slave_0: entered promiscuous mode [ 320.381745][T10366] hsr_slave_1: entered promiscuous mode [ 320.392977][T10366] debugfs: 'hsr0' already exists in 'hsr' [ 320.400251][T10366] Cannot create hsr debugfs directory [ 320.736655][T10419] zero sized request [ 320.803056][T10366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.841978][T10366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.898135][T10366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.995929][T10366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.340890][T10424] zswap: compressor not available [ 321.404306][T10366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.467955][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.506270][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.514865][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.571839][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.580458][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.923896][ T5846] Bluetooth: hci4: command tx timeout [ 322.228572][T10366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.407857][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.420132][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.869958][T10366] veth0_vlan: entered promiscuous mode [ 322.912276][T10366] veth1_vlan: entered promiscuous mode [ 322.999475][T10366] veth0_macvtap: entered promiscuous mode [ 323.031707][T10366] veth1_macvtap: entered promiscuous mode [ 323.139062][T10366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.207560][T10366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.292939][T10453] zswap: compressor 000 not available [ 323.319241][ T3462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.368675][ T3462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.448136][ T3462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.481263][ T3462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.608827][T10474] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1090'. [ 323.909872][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.921204][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.976745][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.993532][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.003751][ T5846] Bluetooth: hci4: command tx timeout [ 324.639408][T10493] FAULT_INJECTION: forcing a failure. [ 324.639408][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 324.671034][T10493] CPU: 1 UID: 0 PID: 10493 Comm: syz.2.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.671073][T10493] Tainted: [L]=SOFTLOCKUP [ 324.671080][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.671093][T10493] Call Trace: [ 324.671101][T10493] [ 324.671111][T10493] dump_stack_lvl+0x16c/0x1f0 [ 324.671142][T10493] should_fail_ex+0x512/0x640 [ 324.671170][T10493] ? fs_reclaim_acquire+0xae/0x150 [ 324.671201][T10493] should_failslab+0xc2/0x120 [ 324.671230][T10493] kmem_cache_alloc_noprof+0x75/0x760 [ 324.671265][T10493] ? ext4_init_io_end+0x24/0x170 [ 324.671300][T10493] ? ext4_init_io_end+0x24/0x170 [ 324.671327][T10493] ext4_init_io_end+0x24/0x170 [ 324.671356][T10493] ext4_do_writepages+0xb06/0x3c70 [ 324.671391][T10493] ? __lock_acquire+0x433/0x22f0 [ 324.671445][T10493] ? __pfx_ext4_do_writepages+0x10/0x10 [ 324.671500][T10493] ? ext4_writepages+0x37a/0x7d0 [ 324.671533][T10493] ext4_writepages+0x37a/0x7d0 [ 324.671569][T10493] ? __pfx_ext4_writepages+0x10/0x10 [ 324.671619][T10493] ? do_writepages+0x4b7/0x600 [ 324.671647][T10493] ? __pfx_ext4_writepages+0x10/0x10 [ 324.671685][T10493] do_writepages+0x27a/0x600 [ 324.671715][T10493] ? __pfx_do_writepages+0x10/0x10 [ 324.671738][T10493] ? do_raw_spin_unlock+0x172/0x230 [ 324.671779][T10493] ? _raw_spin_unlock+0x28/0x50 [ 324.671818][T10493] filemap_writeback+0x225/0x2d0 [ 324.671846][T10493] ? __pfx_filemap_writeback+0x10/0x10 [ 324.671912][T10493] ? __pfx_mt_find+0x10/0x10 [ 324.671952][T10493] file_write_and_wait_range+0xcd/0x140 [ 324.671985][T10493] ext4_sync_file+0x310/0xeb0 [ 324.672020][T10493] ? __pfx___up_read+0x10/0x10 [ 324.672051][T10493] ? __pfx_ext4_sync_file+0x10/0x10 [ 324.672082][T10493] vfs_fsync_range+0x142/0x230 [ 324.672116][T10493] __do_sys_msync+0x3cb/0x590 [ 324.672158][T10493] do_syscall_64+0xcd/0xf80 [ 324.672187][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.672212][T10493] RIP: 0033:0x7fe92978f7c9 [ 324.672232][T10493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.672255][T10493] RSP: 002b:00007fe9279f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 324.672279][T10493] RAX: ffffffffffffffda RBX: 00007fe9299e5fa0 RCX: 00007fe92978f7c9 [ 324.672295][T10493] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 324.672310][T10493] RBP: 00007fe9279f6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.672325][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.672339][T10493] R13: 00007fe9299e6038 R14: 00007fe9299e5fa0 R15: 00007ffdf0656a58 [ 324.672375][T10493] [ 325.388764][ T30] audit: type=1800 audit(4294967388.420:4): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1097" name="dbroot" dev="configfs" ino=36807 res=0 errno=0 [ 326.030376][T10514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.059595][T10514] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 326.091080][ T5846] Bluetooth: hci4: command tx timeout [ 326.251207][T10514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.279829][T10514] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 326.332584][T10514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.394826][T10514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 326.492766][T10518] FAULT_INJECTION: forcing a failure. [ 326.492766][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 326.540669][T10514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.549741][T10514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 326.591786][T10529] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1107'. [ 326.614026][T10514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.623609][T10514] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 326.634027][T10535] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1109'. [ 326.704936][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.1.1105 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.704981][T10518] Tainted: [L]=SOFTLOCKUP [ 326.704989][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.705004][T10518] Call Trace: [ 326.705012][T10518] [ 326.705021][T10518] dump_stack_lvl+0x16c/0x1f0 [ 326.705053][T10518] should_fail_ex+0x512/0x640 [ 326.705081][T10518] ? __kmalloc_noprof+0xca/0x8f0 [ 326.705117][T10518] should_failslab+0xc2/0x120 [ 326.705145][T10518] __kmalloc_noprof+0xdd/0x8f0 [ 326.705174][T10518] ? sk_prot_alloc+0x1a8/0x2a0 [ 326.705214][T10518] ? sk_prot_alloc+0x1a8/0x2a0 [ 326.705247][T10518] sk_prot_alloc+0x1a8/0x2a0 [ 326.705318][T10518] sk_alloc+0x36/0xc20 [ 326.705350][T10518] mctp_pf_create+0xe8/0x360 [ 326.705376][T10518] __sock_create+0x339/0x8a0 [ 326.705406][T10518] __sys_socket+0x153/0x2d0 [ 326.705430][T10518] ? __pfx___sys_socket+0x10/0x10 [ 326.705455][T10518] ? syscall_user_dispatch+0x78/0x140 [ 326.705498][T10518] __x64_sys_socket+0x72/0xb0 [ 326.705522][T10518] do_syscall_64+0xcd/0xf80 [ 326.705550][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.705574][T10518] RIP: 0033:0x7f7e5258f7c9 [ 326.705593][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.705617][T10518] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 326.705641][T10518] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 326.705658][T10518] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 326.705673][T10518] RBP: 00007f7e52613f91 R08: 0000000000000000 R09: 0000000000000000 [ 326.705688][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.705703][T10518] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 326.705737][T10518] [ 327.307375][T10514] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 327.803130][T10549] forcing mempool usage for bvec_alloc+0x192/0x210 [ 328.083563][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 328.323934][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 328.403900][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 328.564069][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 328.644522][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.163531][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 330.226001][ T30] audit: type=1800 audit(4294967393.260:5): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1123" name="lu_gp_id" dev="configfs" ino=37129 res=0 errno=0 [ 330.276187][T10587] kstrtoul() returned -22 for lu_gp_id [ 330.404329][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 330.491700][T10588] zswap: compressor not available [ 330.498203][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 330.575217][T10596] FAULT_INJECTION: forcing a failure. [ 330.575217][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 330.593257][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz.2.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.593301][T10596] Tainted: [L]=SOFTLOCKUP [ 330.593310][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.593325][T10596] Call Trace: [ 330.593334][T10596] [ 330.593345][T10596] dump_stack_lvl+0x16c/0x1f0 [ 330.593381][T10596] should_fail_ex+0x512/0x640 [ 330.593411][T10596] ? __kmalloc_cache_noprof+0x5f/0x800 [ 330.593451][T10596] should_failslab+0xc2/0x120 [ 330.593477][T10596] __kmalloc_cache_noprof+0x72/0x800 [ 330.593509][T10596] ? lockdep_init_map_type+0x5c/0x270 [ 330.593540][T10596] ? kernfs_fop_open+0xa3a/0xda0 [ 330.593576][T10596] ? kernfs_fop_open+0xa3a/0xda0 [ 330.593605][T10596] kernfs_fop_open+0xa3a/0xda0 [ 330.593641][T10596] do_dentry_open+0x748/0x1590 [ 330.593668][T10596] ? __pfx_kernfs_fop_open+0x10/0x10 [ 330.593707][T10596] vfs_open+0x82/0x3f0 [ 330.593773][T10596] path_openat+0x2078/0x3140 [ 330.593816][T10596] ? __pfx_path_openat+0x10/0x10 [ 330.593868][T10596] do_filp_open+0x20b/0x470 [ 330.593901][T10596] ? __pfx_do_filp_open+0x10/0x10 [ 330.593959][T10596] ? alloc_fd+0x471/0x7d0 [ 330.593999][T10596] do_sys_openat2+0x11f/0x280 [ 330.594035][T10596] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.594085][T10596] __x64_sys_openat+0x174/0x210 [ 330.594122][T10596] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.594173][T10596] do_syscall_64+0xcd/0xf80 [ 330.594204][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.594232][T10596] RIP: 0033:0x7fe92978f7c9 [ 330.594254][T10596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.594281][T10596] RSP: 002b:00007fe9279f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.594307][T10596] RAX: ffffffffffffffda RBX: 00007fe9299e5fa0 RCX: 00007fe92978f7c9 [ 330.594325][T10596] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 330.594342][T10596] RBP: 00007fe929813f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.594357][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.594373][T10596] R13: 00007fe9299e6038 R14: 00007fe9299e5fa0 R15: 00007ffdf0656a58 [ 330.594410][T10596] [ 330.872310][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 330.872391][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.950494][T10615] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 332.167866][T10619] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 332.623482][ T30] audit: type=1800 audit(4294967395.650:6): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="lu_gp_id" dev="configfs" ino=37196 res=0 errno=0 [ 332.665906][T10627] kstrtoul() returned -22 for lu_gp_id [ 332.967709][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 333.239844][T10637] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1139'. [ 333.431230][T10638] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1140'. [ 334.156112][T10651] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 335.070669][ T30] audit: type=1800 audit(4294967398.100:7): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1149" name="lu_gp_id" dev="configfs" ino=38279 res=0 errno=0 [ 335.209619][T10668] kstrtoul() returned -22 for lu_gp_id [ 335.689737][T10649] kexec: Could not allocate control_code_buffer [ 336.034741][T10671] tipc: Withdrawal distribution failure [ 336.839614][T10694] cifs: Unknown parameter 'ù;4çÉ.Õ°hf[Ìîø…¾GƒLöÑÈ̺_Â,"Ì’ |ÉTãÕe§V•×–+ëþöš#ÍL«/ýV")W©bH›©¸#' [ 337.664999][T10715] netlink: 'syz.3.1162': attribute type 11 has an invalid length. [ 337.706158][T10715] netlink: 'syz.3.1162': attribute type 11 has an invalid length. [ 338.056665][ T30] audit: type=1800 audit(4294967401.090:8): pid=10720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1163" name="lu_gp_id" dev="configfs" ino=38374 res=0 errno=0 [ 338.073496][T10720] kstrtoul() returned -22 for lu_gp_id [ 338.583378][T10723] zswap: compressor not available [ 338.750295][ T30] audit: type=1326 audit(4294967401.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10728 comm="syz.1.1165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e5258f7c9 code=0x0 [ 339.362079][ T30] audit: type=1800 audit(4294967402.390:10): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1167" name="lu_gp_id" dev="configfs" ino=38401 res=0 errno=0 [ 339.836934][T10749] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 339.993296][T10752] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1173'. [ 340.433103][T10755] FAULT_INJECTION: forcing a failure. [ 340.433103][T10755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 340.668798][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.3.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.668841][T10755] Tainted: [L]=SOFTLOCKUP [ 340.668851][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.668866][T10755] Call Trace: [ 340.668874][T10755] [ 340.668885][T10755] dump_stack_lvl+0x16c/0x1f0 [ 340.668918][T10755] should_fail_ex+0x512/0x640 [ 340.668954][T10755] get_futex_key+0x1d0/0x15f0 [ 340.668994][T10755] ? __pfx_get_futex_key+0x10/0x10 [ 340.669040][T10755] futex_wake+0xea/0x530 [ 340.669083][T10755] ? __pfx_futex_wake+0x10/0x10 [ 340.669138][T10755] ? kmem_cache_free+0x171/0x770 [ 340.669182][T10755] do_futex+0x1e3/0x350 [ 340.669217][T10755] ? __pfx_do_futex+0x10/0x10 [ 340.669251][T10755] ? __pfx___might_resched+0x10/0x10 [ 340.669276][T10755] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 340.669315][T10755] __x64_sys_futex+0x1e0/0x4c0 [ 340.669352][T10755] ? __do_sys_close_range+0x278/0x730 [ 340.669384][T10755] ? __pfx___x64_sys_futex+0x10/0x10 [ 340.669420][T10755] ? rcu_is_watching+0x12/0xc0 [ 340.669456][T10755] do_syscall_64+0xcd/0xf80 [ 340.669485][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.669511][T10755] RIP: 0033:0x7fbce878f7c9 [ 340.669531][T10755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.669556][T10755] RSP: 002b:00007fbce95da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.669580][T10755] RAX: ffffffffffffffda RBX: 00007fbce89e6098 RCX: 00007fbce878f7c9 [ 340.669598][T10755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbce89e609c [ 340.669615][T10755] RBP: 00007fbce89e6090 R08: 00007fbce95fc000 R09: 0000000000000000 [ 340.669632][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.669647][T10755] R13: 00007fbce89e6128 R14: 00007ffff191ca40 R15: 00007ffff191cb28 [ 340.669684][T10755] [ 342.879133][T10778] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 343.877709][T10790] netlink: 'syz.1.1185': attribute type 2 has an invalid length. [ 344.679559][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.146464][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.206813][T10808] __vm_enough_memory: pid: 10808, comm: syz.4.1188, bytes: 8589938688 not enough memory for the allocation [ 345.694376][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.020201][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.220727][T10820] netlink: 'syz.2.1191': attribute type 11 has an invalid length. [ 346.270651][T10820] netlink: 'syz.2.1191': attribute type 11 has an invalid length. [ 347.135096][ T36] bridge_slave_0: left allmulticast mode [ 347.153042][ T36] bridge_slave_0: left promiscuous mode [ 347.167602][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.574124][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.631176][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.696888][ T36] bond0 (unregistering): Released all slaves [ 348.873881][ T36] HfR: left promiscuous mode [ 348.961019][T10881] random: crng reseeded on system resumption [ 350.500944][T10917] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 350.966631][T10922] vhci_hcd: invalid port number 252 [ 350.990844][T10922] vhci_hcd: default hub control req: 040f v0772 i00fc l2 [ 352.319429][ T36] hsr_slave_0: left promiscuous mode [ 352.351919][ T36] hsr_slave_1: left promiscuous mode [ 352.360463][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.371712][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.415332][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.470180][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.480146][T10949] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 352.642471][ T36] veth1_macvtap: left promiscuous mode [ 352.659812][ T36] veth0_macvtap: left promiscuous mode [ 352.669961][ T36] veth1_vlan: left promiscuous mode [ 352.693775][ T36] veth0_vlan: left promiscuous mode [ 354.312016][T10982] FAULT_INJECTION: forcing a failure. [ 354.312016][T10982] name failslab, interval 1, probability 0, space 0, times 0 [ 354.360506][T10982] CPU: 0 UID: 0 PID: 10982 Comm: syz.3.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.360542][T10982] Tainted: [L]=SOFTLOCKUP [ 354.360550][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.360564][T10982] Call Trace: [ 354.360572][T10982] [ 354.360581][T10982] dump_stack_lvl+0x16c/0x1f0 [ 354.360614][T10982] should_fail_ex+0x512/0x640 [ 354.360640][T10982] ? kmem_cache_alloc_noprof+0x62/0x760 [ 354.360678][T10982] should_failslab+0xc2/0x120 [ 354.360706][T10982] kmem_cache_alloc_noprof+0x75/0x760 [ 354.360740][T10982] ? getname_flags.part.0+0x4c/0x550 [ 354.360780][T10982] ? getname_flags.part.0+0x4c/0x550 [ 354.360810][T10982] getname_flags.part.0+0x4c/0x550 [ 354.360847][T10982] getname_flags+0x93/0xf0 [ 354.360871][T10982] do_sys_openat2+0xb8/0x280 [ 354.360901][T10982] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.360938][T10982] ? __fget_files+0x20e/0x3c0 [ 354.360971][T10982] __x64_sys_openat+0x174/0x210 [ 354.361004][T10982] ? __pfx___x64_sys_openat+0x10/0x10 [ 354.361036][T10982] ? ksys_write+0x1ac/0x250 [ 354.361073][T10982] do_syscall_64+0xcd/0xf80 [ 354.361101][T10982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.361125][T10982] RIP: 0033:0x7fbce878f7c9 [ 354.361145][T10982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.361168][T10982] RSP: 002b:00007fbce9598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 354.361191][T10982] RAX: ffffffffffffffda RBX: 00007fbce89e6270 RCX: 00007fbce878f7c9 [ 354.361207][T10982] RDX: 0000000000029202 RSI: 0000200000001a80 RDI: ffffffffffffff9c [ 354.361223][T10982] RBP: 00007fbce9598090 R08: 0000000000000000 R09: 0000000000000000 [ 354.361238][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.361251][T10982] R13: 00007fbce89e6308 R14: 00007fbce89e6270 R15: 00007ffff191cb28 [ 354.361286][T10982] [ 355.307675][T10992] FAULT_INJECTION: forcing a failure. [ 355.307675][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 355.330977][ T36] team0 (unregistering): Port device team_slave_1 removed [ 355.352249][T10992] CPU: 1 UID: 0 PID: 10992 Comm: syz.3.1222 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.352291][T10992] Tainted: [L]=SOFTLOCKUP [ 355.352300][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.352337][T10992] Call Trace: [ 355.352345][T10992] [ 355.352356][T10992] dump_stack_lvl+0x16c/0x1f0 [ 355.352400][T10992] should_fail_ex+0x512/0x640 [ 355.352430][T10992] ? __kmalloc_noprof+0xca/0x8f0 [ 355.352468][T10992] should_failslab+0xc2/0x120 [ 355.352497][T10992] __kmalloc_noprof+0xdd/0x8f0 [ 355.352528][T10992] ? __kernel_text_address+0xd/0x40 [ 355.352561][T10992] ? unwind_get_return_address+0x59/0xa0 [ 355.352591][T10992] ? constrain_params_by_rules+0x175/0xca0 [ 355.352622][T10992] ? constrain_params_by_rules+0x175/0xca0 [ 355.352642][T10992] constrain_params_by_rules+0x175/0xca0 [ 355.352672][T10992] ? stack_trace_save+0x8e/0xc0 [ 355.352701][T10992] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 355.352732][T10992] ? __kasan_kmalloc+0xaa/0xb0 [ 355.352752][T10992] ? snd_pcm_oss_change_params_locked+0x247/0x3a40 [ 355.352776][T10992] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 355.352798][T10992] ? snd_pcm_oss_sync+0x1de/0x840 [ 355.352832][T10992] ? rcu_is_watching+0x12/0xc0 [ 355.352855][T10992] ? snd_interval_refine+0x2fa/0x580 [ 355.352892][T10992] snd_pcm_hw_refine+0x7de/0xad0 [ 355.352924][T10992] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 355.352963][T10992] ? __asan_memset+0x23/0x50 [ 355.352998][T10992] ? _snd_pcm_hw_param_min+0x259/0x630 [ 355.353039][T10992] snd_pcm_oss_change_params_locked+0x65e/0x3a40 [ 355.353063][T10992] ? trace_contention_end+0xa0/0x110 [ 355.353091][T10992] ? __mutex_lock+0x27b/0x1b10 [ 355.353125][T10992] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 355.353148][T10992] ? __pfx___mutex_lock+0x10/0x10 [ 355.353197][T10992] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 355.353221][T10992] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 355.353243][T10992] snd_pcm_oss_sync+0x1de/0x840 [ 355.353264][T10992] ? kmem_cache_free+0x171/0x770 [ 355.353300][T10992] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 355.353365][T10992] snd_pcm_oss_release+0x28b/0x310 [ 355.353395][T10992] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 355.353422][T10992] __fput+0x402/0xb70 [ 355.353460][T10992] task_work_run+0x150/0x240 [ 355.353495][T10992] ? __pfx_task_work_run+0x10/0x10 [ 355.353525][T10992] ? __do_sys_close_range+0x278/0x730 [ 355.353560][T10992] exit_to_user_mode_loop+0xfb/0x540 [ 355.353598][T10992] do_syscall_64+0x4ee/0xf80 [ 355.353627][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.353650][T10992] RIP: 0033:0x7fbce878f7c9 [ 355.353670][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.353696][T10992] RSP: 002b:00007fbce95fb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 355.353720][T10992] RAX: 0000000000000000 RBX: 00007fbce89e5fa0 RCX: 00007fbce878f7c9 [ 355.353736][T10992] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 355.353751][T10992] RBP: 00007fbce8813f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.353766][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.353779][T10992] R13: 00007fbce89e6038 R14: 00007fbce89e5fa0 R15: 00007ffff191cb28 [ 355.353812][T10992] [ 355.833809][T10990] zswap: compressor not available [ 355.857354][ T36] team0 (unregistering): Port device team_slave_0 removed [ 356.620183][T11014] FAULT_INJECTION: forcing a failure. [ 356.620183][T11014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.637538][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.1.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.637567][T11014] Tainted: [L]=SOFTLOCKUP [ 356.637572][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.637581][T11014] Call Trace: [ 356.637587][T11014] [ 356.637593][T11014] dump_stack_lvl+0x16c/0x1f0 [ 356.637613][T11014] should_fail_ex+0x512/0x640 [ 356.637632][T11014] strncpy_from_user+0x3b/0x2e0 [ 356.637648][T11014] getname_flags.part.0+0x8f/0x550 [ 356.637671][T11014] getname_flags+0x93/0xf0 [ 356.637684][T11014] do_sys_openat2+0xb8/0x280 [ 356.637703][T11014] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.637724][T11014] ? __fget_files+0x20e/0x3c0 [ 356.637742][T11014] __x64_sys_openat+0x174/0x210 [ 356.637761][T11014] ? __pfx___x64_sys_openat+0x10/0x10 [ 356.637779][T11014] ? ksys_write+0x1ac/0x250 [ 356.637799][T11014] do_syscall_64+0xcd/0xf80 [ 356.637815][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.637830][T11014] RIP: 0033:0x7f7e5258f7c9 [ 356.637842][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.637855][T11014] RSP: 002b:00007f7e533c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.637868][T11014] RAX: ffffffffffffffda RBX: 00007f7e527e6270 RCX: 00007f7e5258f7c9 [ 356.637877][T11014] RDX: 0000000000029202 RSI: 0000200000001a80 RDI: ffffffffffffff9c [ 356.637886][T11014] RBP: 00007f7e533c5090 R08: 0000000000000000 R09: 0000000000000000 [ 356.637894][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.637902][T11014] R13: 00007f7e527e6308 R14: 00007f7e527e6270 R15: 00007ffdfe0df458 [ 356.637920][T11014] [ 357.446940][T11021] netlink: 'syz.1.1230': attribute type 11 has an invalid length. [ 357.491918][T11021] netlink: 'syz.1.1230': attribute type 11 has an invalid length. [ 357.827923][T11037] sp0: Synchronizing with TNC [ 359.560517][T11091] netlink: 'syz.1.1241': attribute type 11 has an invalid length. [ 359.604641][T11091] netlink: 'syz.1.1241': attribute type 11 has an invalid length. [ 359.821463][T11095] mkiss: ax0: crc mode is auto. [ 360.056655][T11105] FAULT_INJECTION: forcing a failure. [ 360.056655][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 360.112664][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.1.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.112691][T11105] Tainted: [L]=SOFTLOCKUP [ 360.112695][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.112703][T11105] Call Trace: [ 360.112708][T11105] [ 360.112714][T11105] dump_stack_lvl+0x16c/0x1f0 [ 360.112734][T11105] should_fail_ex+0x512/0x640 [ 360.112750][T11105] ? kmem_cache_alloc_noprof+0x62/0x760 [ 360.112772][T11105] should_failslab+0xc2/0x120 [ 360.112788][T11105] kmem_cache_alloc_noprof+0x75/0x760 [ 360.112807][T11105] ? stack_depot_save_flags+0x29/0x9b0 [ 360.112822][T11105] ? alloc_empty_file+0x55/0x1e0 [ 360.112843][T11105] ? alloc_empty_file+0x55/0x1e0 [ 360.112859][T11105] ? kasan_save_track+0x14/0x30 [ 360.112871][T11105] alloc_empty_file+0x55/0x1e0 [ 360.112890][T11105] path_openat+0xde/0x3140 [ 360.112905][T11105] ? do_syscall_64+0xcd/0xf80 [ 360.112920][T11105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.112940][T11105] ? __pfx_path_openat+0x10/0x10 [ 360.112962][T11105] do_filp_open+0x20b/0x470 [ 360.112977][T11105] ? __pfx_do_filp_open+0x10/0x10 [ 360.113005][T11105] ? alloc_fd+0x471/0x7d0 [ 360.113025][T11105] do_sys_openat2+0x11f/0x280 [ 360.113045][T11105] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.113065][T11105] ? __fget_files+0x20e/0x3c0 [ 360.113082][T11105] __x64_sys_openat+0x174/0x210 [ 360.113101][T11105] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.113119][T11105] ? ksys_write+0x1ac/0x250 [ 360.113139][T11105] do_syscall_64+0xcd/0xf80 [ 360.113160][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.113174][T11105] RIP: 0033:0x7f7e5258f7c9 [ 360.113185][T11105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.113198][T11105] RSP: 002b:00007f7e533c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.113211][T11105] RAX: ffffffffffffffda RBX: 00007f7e527e6270 RCX: 00007f7e5258f7c9 [ 360.113220][T11105] RDX: 0000000000029202 RSI: 0000200000001a80 RDI: ffffffffffffff9c [ 360.113229][T11105] RBP: 00007f7e533c5090 R08: 0000000000000000 R09: 0000000000000000 [ 360.113237][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.113245][T11105] R13: 00007f7e527e6308 R14: 00007f7e527e6270 R15: 00007ffdfe0df458 [ 360.113263][T11105] [ 360.420622][T11110] random: crng reseeded on system resumption [ 360.880013][T11116] zswap: compressor not available [ 361.540940][T11143] netlink: 'syz.4.1254': attribute type 11 has an invalid length. [ 361.583528][T11143] netlink: 'syz.4.1254': attribute type 11 has an invalid length. [ 362.495502][T11157] zswap: compressor not available [ 362.894385][T11176] FAULT_INJECTION: forcing a failure. [ 362.894385][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 362.970082][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.3.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.970117][T11176] Tainted: [L]=SOFTLOCKUP [ 362.970124][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.970136][T11176] Call Trace: [ 362.970143][T11176] [ 362.970152][T11176] dump_stack_lvl+0x16c/0x1f0 [ 362.970180][T11176] should_fail_ex+0x512/0x640 [ 362.970205][T11176] ? kmem_cache_alloc_noprof+0x62/0x760 [ 362.970243][T11176] should_failslab+0xc2/0x120 [ 362.970271][T11176] kmem_cache_alloc_noprof+0x75/0x760 [ 362.970304][T11176] ? security_file_alloc+0x34/0x2b0 [ 362.970341][T11176] ? security_file_alloc+0x34/0x2b0 [ 362.970368][T11176] security_file_alloc+0x34/0x2b0 [ 362.970414][T11176] init_file+0x93/0x4c0 [ 362.970446][T11176] alloc_empty_file+0x73/0x1e0 [ 362.970479][T11176] path_openat+0xde/0x3140 [ 362.970505][T11176] ? do_syscall_64+0xcd/0xf80 [ 362.970528][T11176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.970562][T11176] ? __pfx_path_openat+0x10/0x10 [ 362.970603][T11176] do_filp_open+0x20b/0x470 [ 362.970631][T11176] ? __pfx_do_filp_open+0x10/0x10 [ 362.970684][T11176] ? alloc_fd+0x471/0x7d0 [ 362.970721][T11176] do_sys_openat2+0x11f/0x280 [ 362.970755][T11176] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.970792][T11176] ? __fget_files+0x20e/0x3c0 [ 362.970824][T11176] __x64_sys_openat+0x174/0x210 [ 362.970855][T11176] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.970895][T11176] ? ksys_write+0x1ac/0x250 [ 362.970931][T11176] do_syscall_64+0xcd/0xf80 [ 362.970959][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.970982][T11176] RIP: 0033:0x7fbce878f7c9 [ 362.971001][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.971025][T11176] RSP: 002b:00007fbce9598038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.971048][T11176] RAX: ffffffffffffffda RBX: 00007fbce89e6270 RCX: 00007fbce878f7c9 [ 362.971064][T11176] RDX: 0000000000029202 RSI: 0000200000001a80 RDI: ffffffffffffff9c [ 362.971079][T11176] RBP: 00007fbce9598090 R08: 0000000000000000 R09: 0000000000000000 [ 362.971092][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.971106][T11176] R13: 00007fbce89e6308 R14: 00007fbce89e6270 R15: 00007ffff191cb28 [ 362.971137][T11176] [ 363.533210][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 365.443638][T11204] mkiss: ax0: crc mode is auto. [ 365.897517][T11219] netlink: 'syz.3.1276': attribute type 11 has an invalid length. [ 365.977065][T11219] netlink: 'syz.3.1276': attribute type 11 has an invalid length. [ 366.201811][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1278'. [ 366.821388][T11237] FAULT_INJECTION: forcing a failure. [ 366.821388][T11237] name failslab, interval 1, probability 0, space 0, times 0 [ 366.862067][T11237] CPU: 0 UID: 0 PID: 11237 Comm: syz.2.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.862111][T11237] Tainted: [L]=SOFTLOCKUP [ 366.862120][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.862196][T11237] Call Trace: [ 366.862205][T11237] [ 366.862215][T11237] dump_stack_lvl+0x16c/0x1f0 [ 366.862247][T11237] should_fail_ex+0x512/0x640 [ 366.862274][T11237] ? fs_reclaim_acquire+0xae/0x150 [ 366.862305][T11237] should_failslab+0xc2/0x120 [ 366.862336][T11237] __kmalloc_noprof+0xdd/0x8f0 [ 366.862370][T11237] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 366.862413][T11237] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 366.862445][T11237] tomoyo_realpath_from_path+0xc2/0x6e0 [ 366.862482][T11237] ? tomoyo_profile+0x47/0x60 [ 366.862518][T11237] tomoyo_path_number_perm+0x245/0x580 [ 366.862540][T11237] ? tomoyo_path_number_perm+0x237/0x580 [ 366.862565][T11237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 366.862616][T11237] ? hook_file_ioctl_common+0x144/0x410 [ 366.862647][T11237] ? __x64_sys_futex+0x1e0/0x4c0 [ 366.862675][T11237] ? __x64_sys_futex+0x1e9/0x4c0 [ 366.862718][T11237] security_file_ioctl+0x9b/0x240 [ 366.862747][T11237] __x64_sys_ioctl+0xb7/0x210 [ 366.862788][T11237] do_syscall_64+0xcd/0xf80 [ 366.862817][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.862844][T11237] RIP: 0033:0x7fe92978f7c9 [ 366.862866][T11237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.862892][T11237] RSP: 002b:00007fe9279b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.862917][T11237] RAX: ffffffffffffffda RBX: 00007fe9299e6180 RCX: 00007fe92978f7c9 [ 366.862935][T11237] RDX: 00002000000000c0 RSI: 0000000000008933 RDI: 0000000000000000 [ 366.862952][T11237] RBP: 00007fe929813f91 R08: 0000000000000000 R09: 0000000000000000 [ 366.862969][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.862984][T11237] R13: 00007fe9299e6218 R14: 00007fe9299e6180 R15: 00007ffdf0656a58 [ 366.863022][T11237] [ 366.863032][T11237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 367.401626][T11249] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 367.409842][T11249] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 367.607111][T11255] netlink: 'syz.2.1286': attribute type 11 has an invalid length. [ 367.631919][T11255] netlink: 'syz.2.1286': attribute type 11 has an invalid length. [ 367.838359][T11259] ubi: mtd0 is already attached to ubi31 [ 369.295320][T11290] random: crng reseeded on system resumption [ 370.252304][T11314] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 370.260098][T11314] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 370.910518][T11325] mkiss: ax0: crc mode is auto. [ 371.142016][T11343] nvme_fcloop: unknown parameter or missing value '' [ 372.036050][T11368] FAULT_INJECTION: forcing a failure. [ 372.036050][T11368] name failslab, interval 1, probability 0, space 0, times 0 [ 372.209253][T11374] netlink: 'syz.3.1307': attribute type 11 has an invalid length. [ 372.218902][T11374] netlink: 'syz.3.1307': attribute type 11 has an invalid length. [ 372.230220][T11368] CPU: 0 UID: 0 PID: 11368 Comm: syz.2.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.230255][T11368] Tainted: [L]=SOFTLOCKUP [ 372.230262][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.230273][T11368] Call Trace: [ 372.230278][T11368] [ 372.230283][T11368] dump_stack_lvl+0x16c/0x1f0 [ 372.230303][T11368] should_fail_ex+0x512/0x640 [ 372.230319][T11368] ? __kmalloc_cache_noprof+0x5f/0x800 [ 372.230340][T11368] should_failslab+0xc2/0x120 [ 372.230356][T11368] __kmalloc_cache_noprof+0x72/0x800 [ 372.230375][T11368] ? usbdev_open+0x9d/0x8b0 [ 372.230398][T11368] ? usbdev_open+0x9d/0x8b0 [ 372.230416][T11368] usbdev_open+0x9d/0x8b0 [ 372.230435][T11368] ? kobject_get_unless_zero+0x156/0x1e0 [ 372.230451][T11368] ? __pfx_usbdev_open+0x10/0x10 [ 372.230471][T11368] ? chrdev_open+0x10b/0x6a0 [ 372.230489][T11368] ? __pfx_usbdev_open+0x10/0x10 [ 372.230508][T11368] chrdev_open+0x234/0x6a0 [ 372.230523][T11368] ? __pfx_apparmor_file_open+0x10/0x10 [ 372.230537][T11368] ? __pfx_chrdev_open+0x10/0x10 [ 372.230553][T11368] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 372.230573][T11368] do_dentry_open+0x748/0x1590 [ 372.230587][T11368] ? __pfx_chrdev_open+0x10/0x10 [ 372.230607][T11368] vfs_open+0x82/0x3f0 [ 372.230628][T11368] path_openat+0x2078/0x3140 [ 372.230652][T11368] ? __pfx_path_openat+0x10/0x10 [ 372.230673][T11368] do_filp_open+0x20b/0x470 [ 372.230689][T11368] ? __pfx_do_filp_open+0x10/0x10 [ 372.230718][T11368] ? alloc_fd+0x471/0x7d0 [ 372.230737][T11368] do_sys_openat2+0x11f/0x280 [ 372.230756][T11368] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.230777][T11368] ? __fget_files+0x20e/0x3c0 [ 372.230794][T11368] __x64_sys_openat+0x174/0x210 [ 372.230813][T11368] ? __pfx___x64_sys_openat+0x10/0x10 [ 372.230831][T11368] ? ksys_write+0x1ac/0x250 [ 372.230851][T11368] do_syscall_64+0xcd/0xf80 [ 372.230867][T11368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.230887][T11368] RIP: 0033:0x7fe92978f7c9 [ 372.230898][T11368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.230912][T11368] RSP: 002b:00007fe927993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.230925][T11368] RAX: ffffffffffffffda RBX: 00007fe9299e6270 RCX: 00007fe92978f7c9 [ 372.230934][T11368] RDX: 0000000000029202 RSI: 0000200000001a80 RDI: ffffffffffffff9c [ 372.230943][T11368] RBP: 00007fe927993090 R08: 0000000000000000 R09: 0000000000000000 [ 372.230951][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.230959][T11368] R13: 00007fe9299e6308 R14: 00007fe9299e6270 R15: 00007ffdf0656a58 [ 372.230977][T11368] [ 373.372824][T11392] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.380567][T11392] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 374.432812][T11421] udc dummy_udc.0: soft-connect without a gadget driver [ 374.905534][T11446] FAULT_INJECTION: forcing a failure. [ 374.905534][T11446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.949205][T11446] CPU: 1 UID: 0 PID: 11446 Comm: syz.1.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.949244][T11446] Tainted: [L]=SOFTLOCKUP [ 374.949253][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.949267][T11446] Call Trace: [ 374.949275][T11446] [ 374.949285][T11446] dump_stack_lvl+0x16c/0x1f0 [ 374.949316][T11446] should_fail_ex+0x512/0x640 [ 374.949348][T11446] _copy_to_user+0x32/0xd0 [ 374.949377][T11446] simple_read_from_buffer+0xcb/0x170 [ 374.949406][T11446] proc_fail_nth_read+0x197/0x240 [ 374.949439][T11446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.949473][T11446] ? rw_verify_area+0xcf/0x6c0 [ 374.949508][T11446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.949537][T11446] vfs_read+0x1e4/0xcf0 [ 374.949563][T11446] ? __pfx___mutex_lock+0x10/0x10 [ 374.949599][T11446] ? __pfx_vfs_read+0x10/0x10 [ 374.949633][T11446] ? __fget_files+0x20e/0x3c0 [ 374.949668][T11446] ksys_read+0x12a/0x250 [ 374.949693][T11446] ? __pfx_ksys_read+0x10/0x10 [ 374.949728][T11446] do_syscall_64+0xcd/0xf80 [ 374.949756][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.949781][T11446] RIP: 0033:0x7f7e5258e1dc [ 374.949804][T11446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 374.949827][T11446] RSP: 002b:00007f7e533c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.949849][T11446] RAX: ffffffffffffffda RBX: 00007f7e527e6270 RCX: 00007f7e5258e1dc [ 374.949866][T11446] RDX: 000000000000000f RSI: 00007f7e533c50a0 RDI: 0000000000000004 [ 374.949880][T11446] RBP: 00007f7e533c5090 R08: 0000000000000000 R09: 0000000000000000 [ 374.949894][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.949909][T11446] R13: 00007f7e527e6308 R14: 00007f7e527e6270 R15: 00007ffdfe0df458 [ 374.949944][T11446] [ 375.637707][T11466] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 376.607789][T11484] FAULT_INJECTION: forcing a failure. [ 376.607789][T11484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.680287][T11484] CPU: 0 UID: 0 PID: 11484 Comm: syz.3.1324 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.680327][T11484] Tainted: [L]=SOFTLOCKUP [ 376.680336][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.680349][T11484] Call Trace: [ 376.680358][T11484] [ 376.680368][T11484] dump_stack_lvl+0x16c/0x1f0 [ 376.680398][T11484] should_fail_ex+0x512/0x640 [ 376.680430][T11484] _copy_from_iter+0x2a4/0x16c0 [ 376.680462][T11484] ? __alloc_skb+0x220/0x410 [ 376.680487][T11484] ? __alloc_skb+0x35d/0x410 [ 376.680514][T11484] ? __pfx__copy_from_iter+0x10/0x10 [ 376.680539][T11484] ? unwind_get_return_address+0x59/0xa0 [ 376.680572][T11484] ? __pfx___might_resched+0x10/0x10 [ 376.680606][T11484] netlink_sendmsg+0x820/0xdd0 [ 376.680649][T11484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.680688][T11484] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 376.680732][T11484] ____sys_sendmsg+0xa5d/0xc30 [ 376.680769][T11484] ? copy_msghdr_from_user+0x10a/0x160 [ 376.680798][T11484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.680832][T11484] ? __lock_acquire+0x433/0x22f0 [ 376.680875][T11484] ___sys_sendmsg+0x134/0x1d0 [ 376.680908][T11484] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.680936][T11484] ? __lock_acquire+0x433/0x22f0 [ 376.681004][T11484] __sys_sendmsg+0x16d/0x220 [ 376.681035][T11484] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.681088][T11484] do_syscall_64+0xcd/0xf80 [ 376.681117][T11484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.681141][T11484] RIP: 0033:0x7fbce878f7c9 [ 376.681166][T11484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.681190][T11484] RSP: 002b:00007fbce95fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.681212][T11484] RAX: ffffffffffffffda RBX: 00007fbce89e5fa0 RCX: 00007fbce878f7c9 [ 376.681229][T11484] RDX: 000000000000c050 RSI: 0000200000000300 RDI: 0000000000000003 [ 376.681244][T11484] RBP: 00007fbce95fb090 R08: 0000000000000000 R09: 0000000000000000 [ 376.681258][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.681272][T11484] R13: 00007fbce89e6038 R14: 00007fbce89e5fa0 R15: 00007ffff191cb28 [ 376.681310][T11484] [ 378.030024][T11504] mkiss: ax0: crc mode is auto. [ 378.824734][T11536] netlink: 'syz.4.1334': attribute type 11 has an invalid length. [ 378.852592][T11536] netlink: 'syz.4.1334': attribute type 11 has an invalid length. [ 379.067113][T11551] FAULT_INJECTION: forcing a failure. [ 379.067113][T11551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.104972][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.4.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.105012][T11551] Tainted: [L]=SOFTLOCKUP [ 379.105020][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.105034][T11551] Call Trace: [ 379.105042][T11551] [ 379.105052][T11551] dump_stack_lvl+0x16c/0x1f0 [ 379.105084][T11551] should_fail_ex+0x512/0x640 [ 379.105117][T11551] _copy_from_iter+0x2a4/0x16c0 [ 379.105155][T11551] ? __alloc_skb+0x220/0x410 [ 379.105179][T11551] ? __alloc_skb+0x35d/0x410 [ 379.105205][T11551] ? __pfx__copy_from_iter+0x10/0x10 [ 379.105230][T11551] ? unwind_get_return_address+0x59/0xa0 [ 379.105263][T11551] ? __pfx___might_resched+0x10/0x10 [ 379.105298][T11551] netlink_sendmsg+0x820/0xdd0 [ 379.105340][T11551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.105376][T11551] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 379.105420][T11551] ____sys_sendmsg+0xa5d/0xc30 [ 379.105458][T11551] ? copy_msghdr_from_user+0x10a/0x160 [ 379.105485][T11551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.105525][T11551] ? __lock_acquire+0x433/0x22f0 [ 379.105570][T11551] ___sys_sendmsg+0x134/0x1d0 [ 379.105603][T11551] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.105631][T11551] ? __lock_acquire+0x433/0x22f0 [ 379.105698][T11551] __sys_sendmsg+0x16d/0x220 [ 379.105730][T11551] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.105780][T11551] do_syscall_64+0xcd/0xf80 [ 379.105810][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.105834][T11551] RIP: 0033:0x7fb06458f7c9 [ 379.105854][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.105877][T11551] RSP: 002b:00007fb065362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.105901][T11551] RAX: ffffffffffffffda RBX: 00007fb0647e5fa0 RCX: 00007fb06458f7c9 [ 379.105917][T11551] RDX: 000000000000c050 RSI: 0000200000000300 RDI: 0000000000000003 [ 379.105933][T11551] RBP: 00007fb065362090 R08: 0000000000000000 R09: 0000000000000000 [ 379.105946][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.105964][T11551] R13: 00007fb0647e6038 R14: 00007fb0647e5fa0 R15: 00007fff8622b378 [ 379.106000][T11551] [ 380.725386][T11589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 381.985098][T11622] FAULT_INJECTION: forcing a failure. [ 381.985098][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 382.039750][T11622] CPU: 0 UID: 0 PID: 11622 Comm: syz.3.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.039790][T11622] Tainted: [L]=SOFTLOCKUP [ 382.039798][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.039812][T11622] Call Trace: [ 382.039821][T11622] [ 382.039831][T11622] dump_stack_lvl+0x16c/0x1f0 [ 382.039862][T11622] should_fail_ex+0x512/0x640 [ 382.039889][T11622] ? __kmalloc_noprof+0xca/0x8f0 [ 382.039925][T11622] should_failslab+0xc2/0x120 [ 382.039952][T11622] __kmalloc_noprof+0xdd/0x8f0 [ 382.039982][T11622] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 382.040019][T11622] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 382.040045][T11622] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 382.040081][T11622] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 382.040109][T11622] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.040135][T11622] ? genl_get_cmd+0x194/0x580 [ 382.040167][T11622] ? bpf_lsm_capable+0x9/0x10 [ 382.040189][T11622] ? security_capable+0x7e/0x260 [ 382.040232][T11622] genl_rcv_msg+0x55c/0x800 [ 382.040261][T11622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.040287][T11622] ? __pfx_net_shaper_nl_pre_doit+0x10/0x10 [ 382.040315][T11622] ? __pfx_net_shaper_nl_delete_doit+0x10/0x10 [ 382.040345][T11622] ? __pfx_net_shaper_nl_post_doit+0x10/0x10 [ 382.040388][T11622] netlink_rcv_skb+0x158/0x420 [ 382.040422][T11622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.040450][T11622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.040500][T11622] ? netlink_deliver_tap+0x1ae/0xd30 [ 382.040540][T11622] genl_rcv+0x28/0x40 [ 382.040561][T11622] netlink_unicast+0x5aa/0x870 [ 382.040607][T11622] ? __pfx_netlink_unicast+0x10/0x10 [ 382.040642][T11622] ? __pfx___might_resched+0x10/0x10 [ 382.040677][T11622] netlink_sendmsg+0x8c8/0xdd0 [ 382.040721][T11622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.040761][T11622] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 382.040805][T11622] ____sys_sendmsg+0xa5d/0xc30 [ 382.040843][T11622] ? copy_msghdr_from_user+0x10a/0x160 [ 382.040873][T11622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.040906][T11622] ? __lock_acquire+0x433/0x22f0 [ 382.040951][T11622] ___sys_sendmsg+0x134/0x1d0 [ 382.040984][T11622] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.041013][T11622] ? __lock_acquire+0x433/0x22f0 [ 382.041084][T11622] __sys_sendmsg+0x16d/0x220 [ 382.041115][T11622] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.041170][T11622] do_syscall_64+0xcd/0xf80 [ 382.041198][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.041269][T11622] RIP: 0033:0x7fbce878f7c9 [ 382.041289][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.041311][T11622] RSP: 002b:00007fbce95fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.041334][T11622] RAX: ffffffffffffffda RBX: 00007fbce89e5fa0 RCX: 00007fbce878f7c9 [ 382.041350][T11622] RDX: 000000000000c050 RSI: 0000200000000300 RDI: 0000000000000003 [ 382.041365][T11622] RBP: 00007fbce95fb090 R08: 0000000000000000 R09: 0000000000000000 [ 382.041380][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.041394][T11622] R13: 00007fbce89e6038 R14: 00007fbce89e5fa0 R15: 00007ffff191cb28 [ 382.041429][T11622] [ 383.858252][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.873675][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.009002][T11650] mkiss: ax0: crc mode is auto. [ 384.205108][T11668] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1350'. [ 384.311125][T11668] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1350'. [ 384.783650][T11681] netlink: 'syz.4.1363': attribute type 11 has an invalid length. [ 384.793173][T11681] netlink: 'syz.4.1363': attribute type 11 has an invalid length. [ 384.907386][T11686] FAULT_INJECTION: forcing a failure. [ 384.907386][T11686] name failslab, interval 1, probability 0, space 0, times 0 [ 384.953080][T11686] CPU: 1 UID: 0 PID: 11686 Comm: syz.3.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.953125][T11686] Tainted: [L]=SOFTLOCKUP [ 384.953133][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.953146][T11686] Call Trace: [ 384.953155][T11686] [ 384.953164][T11686] dump_stack_lvl+0x16c/0x1f0 [ 384.953197][T11686] should_fail_ex+0x512/0x640 [ 384.953225][T11686] ? __kmalloc_noprof+0xca/0x8f0 [ 384.953260][T11686] should_failslab+0xc2/0x120 [ 384.953288][T11686] __kmalloc_noprof+0xdd/0x8f0 [ 384.953319][T11686] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 384.953355][T11686] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 384.953381][T11686] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 384.953411][T11686] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 384.953439][T11686] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 384.953463][T11686] ? genl_get_cmd+0x194/0x580 [ 384.953492][T11686] ? bpf_lsm_capable+0x9/0x10 [ 384.953512][T11686] ? security_capable+0x7e/0x260 [ 384.953559][T11686] genl_rcv_msg+0x55c/0x800 [ 384.953587][T11686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.953613][T11686] ? __pfx_net_shaper_nl_pre_doit+0x10/0x10 [ 384.953641][T11686] ? __pfx_net_shaper_nl_delete_doit+0x10/0x10 [ 384.953670][T11686] ? __pfx_net_shaper_nl_post_doit+0x10/0x10 [ 384.953712][T11686] netlink_rcv_skb+0x158/0x420 [ 384.953748][T11686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.953775][T11686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.953825][T11686] ? netlink_deliver_tap+0x1ae/0xd30 [ 384.953864][T11686] genl_rcv+0x28/0x40 [ 384.953884][T11686] netlink_unicast+0x5aa/0x870 [ 384.953924][T11686] ? __pfx_netlink_unicast+0x10/0x10 [ 384.953959][T11686] ? __pfx___might_resched+0x10/0x10 [ 384.953991][T11686] netlink_sendmsg+0x8c8/0xdd0 [ 384.954033][T11686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.954073][T11686] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 384.954117][T11686] ____sys_sendmsg+0xa5d/0xc30 [ 384.954155][T11686] ? copy_msghdr_from_user+0x10a/0x160 [ 384.954184][T11686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.954217][T11686] ? __lock_acquire+0x433/0x22f0 [ 384.954261][T11686] ___sys_sendmsg+0x134/0x1d0 [ 384.954293][T11686] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.954323][T11686] ? __lock_acquire+0x433/0x22f0 [ 384.954393][T11686] __sys_sendmsg+0x16d/0x220 [ 384.954424][T11686] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.954478][T11686] do_syscall_64+0xcd/0xf80 [ 384.954507][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.954537][T11686] RIP: 0033:0x7fbce878f7c9 [ 384.954557][T11686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.954579][T11686] RSP: 002b:00007fbce95fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.954603][T11686] RAX: ffffffffffffffda RBX: 00007fbce89e5fa0 RCX: 00007fbce878f7c9 [ 384.954619][T11686] RDX: 000000000000c050 RSI: 0000200000000300 RDI: 0000000000000003 [ 384.954634][T11686] RBP: 00007fbce95fb090 R08: 0000000000000000 R09: 0000000000000000 [ 384.954647][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.954662][T11686] R13: 00007fbce89e6038 R14: 00007fbce89e5fa0 R15: 00007ffff191cb28 [ 384.954694][T11686] [ 385.728094][ T30] audit: type=1800 audit(4294967448.760:11): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1367" name="dbroot" dev="configfs" ino=43023 res=0 errno=0 [ 386.299813][T11716] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1360'. [ 387.546847][T11759] FAULT_INJECTION: forcing a failure. [ 387.546847][T11759] name failslab, interval 1, probability 0, space 0, times 0 [ 387.562697][T11759] CPU: 0 UID: 0 PID: 11759 Comm: syz.1.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.562737][T11759] Tainted: [L]=SOFTLOCKUP [ 387.562745][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.562759][T11759] Call Trace: [ 387.562768][T11759] [ 387.562777][T11759] dump_stack_lvl+0x16c/0x1f0 [ 387.562808][T11759] should_fail_ex+0x512/0x640 [ 387.562840][T11759] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 387.562877][T11759] should_failslab+0xc2/0x120 [ 387.562906][T11759] kmem_cache_alloc_noprof+0x75/0x760 [ 387.562941][T11759] ? skb_clone+0x190/0x3f0 [ 387.562976][T11759] ? skb_clone+0x190/0x3f0 [ 387.563004][T11759] skb_clone+0x190/0x3f0 [ 387.563036][T11759] netlink_deliver_tap+0xabd/0xd30 [ 387.563079][T11759] netlink_unicast+0x71f/0x870 [ 387.563120][T11759] ? __pfx_netlink_unicast+0x10/0x10 [ 387.563164][T11759] ? genl_rcv_msg+0x4bb/0x800 [ 387.563198][T11759] netlink_ack+0x696/0xb80 [ 387.563244][T11759] netlink_rcv_skb+0x332/0x420 [ 387.563279][T11759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.563306][T11759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.563357][T11759] ? netlink_deliver_tap+0x1ae/0xd30 [ 387.563400][T11759] genl_rcv+0x28/0x40 [ 387.563418][T11759] netlink_unicast+0x5aa/0x870 [ 387.563458][T11759] ? __pfx_netlink_unicast+0x10/0x10 [ 387.563492][T11759] ? __pfx___might_resched+0x10/0x10 [ 387.563528][T11759] netlink_sendmsg+0x8c8/0xdd0 [ 387.563568][T11759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.563604][T11759] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 387.563644][T11759] ____sys_sendmsg+0xa5d/0xc30 [ 387.563681][T11759] ? copy_msghdr_from_user+0x10a/0x160 [ 387.563710][T11759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.563740][T11759] ? __lock_acquire+0x433/0x22f0 [ 387.563784][T11759] ___sys_sendmsg+0x134/0x1d0 [ 387.563815][T11759] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.563844][T11759] ? __lock_acquire+0x433/0x22f0 [ 387.563914][T11759] __sys_sendmsg+0x16d/0x220 [ 387.563945][T11759] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.563999][T11759] do_syscall_64+0xcd/0xf80 [ 387.564028][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.564053][T11759] RIP: 0033:0x7f7e5258f7c9 [ 387.564073][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.564096][T11759] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.564119][T11759] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 387.564142][T11759] RDX: 000000000000c050 RSI: 0000200000000300 RDI: 0000000000000003 [ 387.564157][T11759] RBP: 00007f7e53428090 R08: 0000000000000000 R09: 0000000000000000 [ 387.564170][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.564183][T11759] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 387.564214][T11759] [ 388.210919][T11767] FAULT_INJECTION: forcing a failure. [ 388.210919][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 388.294306][T11767] CPU: 0 UID: 0 PID: 11767 Comm: syz.3.1370 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.294350][T11767] Tainted: [L]=SOFTLOCKUP [ 388.294359][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.294375][T11767] Call Trace: [ 388.294383][T11767] [ 388.294393][T11767] dump_stack_lvl+0x16c/0x1f0 [ 388.294427][T11767] should_fail_ex+0x512/0x640 [ 388.294456][T11767] ? kmem_cache_alloc_noprof+0x62/0x760 [ 388.294497][T11767] should_failslab+0xc2/0x120 [ 388.294527][T11767] kmem_cache_alloc_noprof+0x75/0x760 [ 388.294562][T11767] ? seq_open+0x55/0x170 [ 388.294603][T11767] ? __pfx_snd_info_seq_show+0x10/0x10 [ 388.294640][T11767] ? seq_open+0x55/0x170 [ 388.294671][T11767] seq_open+0x55/0x170 [ 388.294705][T11767] ? __pfx_snd_info_seq_show+0x10/0x10 [ 388.294743][T11767] single_open+0xfc/0x1f0 [ 388.294781][T11767] snd_info_text_entry_open+0x179/0x2e0 [ 388.294808][T11767] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 388.294840][T11767] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 388.294866][T11767] proc_reg_open+0x2ab/0x5f0 [ 388.294906][T11767] do_dentry_open+0x748/0x1590 [ 388.294933][T11767] ? __pfx_proc_reg_open+0x10/0x10 [ 388.294978][T11767] vfs_open+0x82/0x3f0 [ 388.295017][T11767] path_openat+0x2078/0x3140 [ 388.295057][T11767] ? __pfx_path_openat+0x10/0x10 [ 388.295100][T11767] do_filp_open+0x20b/0x470 [ 388.295130][T11767] ? __pfx_do_filp_open+0x10/0x10 [ 388.295186][T11767] ? alloc_fd+0x471/0x7d0 [ 388.295229][T11767] do_sys_openat2+0x11f/0x280 [ 388.295265][T11767] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.295317][T11767] __x64_sys_openat+0x174/0x210 [ 388.295355][T11767] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.295406][T11767] do_syscall_64+0xcd/0xf80 [ 388.295435][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.295461][T11767] RIP: 0033:0x7fbce878f7c9 [ 388.295481][T11767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.295505][T11767] RSP: 002b:00007fbce95da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.295530][T11767] RAX: ffffffffffffffda RBX: 00007fbce89e6090 RCX: 00007fbce878f7c9 [ 388.295547][T11767] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 388.295565][T11767] RBP: 00007fbce8813f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.295581][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.295596][T11767] R13: 00007fbce89e6128 R14: 00007fbce89e6090 R15: 00007ffff191cb28 [ 388.295633][T11767] syzkaller syzkaller login: [ 389.765009][T11804] sd 0:0:1:0: PR command failed: 1026 [ 389.793097][T11804] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 389.817309][T11804] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 390.266030][T11816] block nbd2: not configured, cannot reconfigure [ 391.365205][T11835] FAULT_INJECTION: forcing a failure. [ 391.365205][T11835] name failslab, interval 1, probability 0, space 0, times 0 [ 391.393812][T11835] CPU: 1 UID: 0 PID: 11835 Comm: syz.1.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.393854][T11835] Tainted: [L]=SOFTLOCKUP [ 391.393862][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.393876][T11835] Call Trace: [ 391.393884][T11835] [ 391.393894][T11835] dump_stack_lvl+0x16c/0x1f0 [ 391.393926][T11835] should_fail_ex+0x512/0x640 [ 391.393953][T11835] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.393990][T11835] should_failslab+0xc2/0x120 [ 391.394018][T11835] kmem_cache_alloc_noprof+0x75/0x760 [ 391.394052][T11835] ? skb_clone+0x190/0x3f0 [ 391.394089][T11835] ? skb_clone+0x190/0x3f0 [ 391.394117][T11835] skb_clone+0x190/0x3f0 [ 391.394153][T11835] netlink_deliver_tap+0xabd/0xd30 [ 391.394196][T11835] netlink_unicast+0x71f/0x870 [ 391.394237][T11835] ? __pfx_netlink_unicast+0x10/0x10 [ 391.394273][T11835] ? genl_rcv_msg+0x4bb/0x800 [ 391.394307][T11835] netlink_ack+0x696/0xb80 [ 391.394353][T11835] netlink_rcv_skb+0x332/0x420 [ 391.394388][T11835] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.394415][T11835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.394466][T11835] ? netlink_deliver_tap+0x1ae/0xd30 [ 391.394505][T11835] genl_rcv+0x28/0x40 [ 391.394526][T11835] netlink_unicast+0x5aa/0x870 [ 391.394567][T11835] ? __pfx_netlink_unicast+0x10/0x10 [ 391.394601][T11835] ? __pfx___might_resched+0x10/0x10 [ 391.394637][T11835] netlink_sendmsg+0x8c8/0xdd0 [ 391.394679][T11835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.394720][T11835] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 391.394764][T11835] ____sys_sendmsg+0xa5d/0xc30 [ 391.394803][T11835] ? copy_msghdr_from_user+0x10a/0x160 [ 391.394832][T11835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.394862][T11835] ? __lock_acquire+0x433/0x22f0 [ 391.394901][T11835] ___sys_sendmsg+0x134/0x1d0 [ 391.394930][T11835] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.394954][T11835] ? __lock_acquire+0x433/0x22f0 [ 391.395021][T11835] __sys_sendmsg+0x16d/0x220 [ 391.395053][T11835] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.395107][T11835] do_syscall_64+0xcd/0xf80 [ 391.395136][T11835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.395160][T11835] RIP: 0033:0x7f7e5258f7c9 [ 391.395180][T11835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.395203][T11835] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.395226][T11835] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 391.395242][T11835] RDX: 000000000000c050 RSI: 0000200000000300 RDI: 0000000000000003 [ 391.395257][T11835] RBP: 00007f7e53428090 R08: 0000000000000000 R09: 0000000000000000 [ 391.395271][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.395285][T11835] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 391.395321][T11835] [ 391.841180][T11839] netlink: 'syz.3.1389': attribute type 11 has an invalid length. [ 392.190675][T11839] netlink: 'syz.3.1389': attribute type 11 has an invalid length. [ 392.731092][ T5837] Bluetooth: hci2: unexpected subevent 0x05 length: 123 > 12 [ 392.800737][T11843] FAULT_INJECTION: forcing a failure. [ 392.800737][T11843] name failslab, interval 1, probability 0, space 0, times 0 [ 392.846626][T11843] CPU: 0 UID: 8 PID: 11843 Comm: syz.1.1391 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.846672][T11843] Tainted: [L]=SOFTLOCKUP [ 392.846681][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.846697][T11843] Call Trace: [ 392.846705][T11843] [ 392.846716][T11843] dump_stack_lvl+0x16c/0x1f0 [ 392.846750][T11843] should_fail_ex+0x512/0x640 [ 392.846779][T11843] ? __kmalloc_node_track_caller_noprof+0xcb/0x910 [ 392.846811][T11843] should_failslab+0xc2/0x120 [ 392.846842][T11843] __kmalloc_node_track_caller_noprof+0xde/0x910 [ 392.846869][T11843] ? key_alloc+0x43e/0x1330 [ 392.846898][T11843] ? kmem_cache_alloc_noprof+0x2a1/0x760 [ 392.846939][T11843] ? kmemdup_noprof+0x29/0x60 [ 392.846972][T11843] kmemdup_noprof+0x29/0x60 [ 392.847007][T11843] key_alloc+0x43e/0x1330 [ 392.847051][T11843] ? __pfx_key_alloc+0x10/0x10 [ 392.847081][T11843] ? __pfx_key_default_cmp+0x10/0x10 [ 392.847116][T11843] ? __pfx_keyring_search_iterator+0x10/0x10 [ 392.847155][T11843] keyring_alloc+0x44/0xc0 [ 392.847193][T11843] look_up_user_keyrings+0x46d/0x790 [ 392.847230][T11843] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 392.847263][T11843] ? __pfx_futex_wait+0x10/0x10 [ 392.847296][T11843] lookup_user_key+0xdf6/0x1300 [ 392.847330][T11843] ? __pfx_lookup_user_key+0x10/0x10 [ 392.847390][T11843] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 392.847427][T11843] ? __x64_sys_futex+0x1e0/0x4c0 [ 392.847461][T11843] ? __x64_sys_futex+0x1e9/0x4c0 [ 392.847511][T11843] keyctl_session_to_parent+0x28/0xaf0 [ 392.847545][T11843] __do_sys_keyctl+0x25c/0x590 [ 392.847574][T11843] do_syscall_64+0xcd/0xf80 [ 392.847607][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.847633][T11843] RIP: 0033:0x7f7e5258f7c9 [ 392.847655][T11843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.847680][T11843] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 392.847706][T11843] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 392.847723][T11843] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 392.847740][T11843] RBP: 00007f7e52613f91 R08: 0000000000000001 R09: 0000000000000000 [ 392.847755][T11843] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 392.847771][T11843] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 392.847808][T11843] [ 393.726558][T11876] FAULT_INJECTION: forcing a failure. [ 393.726558][T11876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.745108][T11876] CPU: 1 UID: 0 PID: 11876 Comm: syz.2.1400 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.745134][T11876] Tainted: [L]=SOFTLOCKUP [ 393.745145][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.745153][T11876] Call Trace: [ 393.745158][T11876] [ 393.745164][T11876] dump_stack_lvl+0x16c/0x1f0 [ 393.745184][T11876] should_fail_ex+0x512/0x640 [ 393.745203][T11876] _copy_to_user+0x32/0xd0 [ 393.745220][T11876] simple_read_from_buffer+0xcb/0x170 [ 393.745237][T11876] proc_fail_nth_read+0x197/0x240 [ 393.745256][T11876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.745275][T11876] ? rw_verify_area+0xcf/0x6c0 [ 393.745295][T11876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.745312][T11876] vfs_read+0x1e4/0xcf0 [ 393.745327][T11876] ? __pfx___mutex_lock+0x10/0x10 [ 393.745345][T11876] ? __pfx_vfs_read+0x10/0x10 [ 393.745363][T11876] ? __fget_files+0x20e/0x3c0 [ 393.745383][T11876] ksys_read+0x12a/0x250 [ 393.745401][T11876] ? __pfx_ksys_read+0x10/0x10 [ 393.745420][T11876] do_syscall_64+0xcd/0xf80 [ 393.745436][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.745451][T11876] RIP: 0033:0x7fe92978e1dc [ 393.745463][T11876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.745476][T11876] RSP: 002b:00007fe9279f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.745489][T11876] RAX: ffffffffffffffda RBX: 00007fe9299e5fa0 RCX: 00007fe92978e1dc [ 393.745498][T11876] RDX: 000000000000000f RSI: 00007fe9279f60a0 RDI: 0000000000000005 [ 393.745506][T11876] RBP: 00007fe9279f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.745514][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.745522][T11876] R13: 00007fe9299e6038 R14: 00007fe9299e5fa0 R15: 00007ffdf0656a58 [ 393.745540][T11876] [ 394.049973][T11881] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 394.059813][T11881] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 394.291717][T11886] blktrace: Concurrent blktraces are not allowed on loop2 [ 394.466943][T11884] delete_channel: no stack [ 394.803471][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 396.150396][T11945] netlink: 'syz.1.1420': attribute type 11 has an invalid length. [ 396.160277][T11945] netlink: 'syz.1.1420': attribute type 11 has an invalid length. [ 396.267810][T11955] wlan1: mtu less than device minimum [ 396.405743][T11950] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 396.507929][T11960] usb usb36: usbfs: process 11960 (syz.1.1423) did not claim interface 0 before use syzkaller syzkaller login: [ 396.645960][T11969] Invalid ELF header magic: != ELF [ 396.717193][T11968] Invalid ELF header magic: != ELF [ 397.095848][T11963] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 398.049095][T11950] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 398.651706][T12015] netlink: 'syz.1.1431': attribute type 11 has an invalid length. [ 398.733821][T12015] netlink: 'syz.1.1431': attribute type 11 has an invalid length. [ 398.909860][T12005] blktrace: Concurrent blktraces are not allowed on loop2 syzkaller syzkaller login: [ 399.694474][T12037] mkiss: ax0: crc mode is auto. [ 400.436632][T12052] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 400.822414][T12080] netlink: 'syz.4.1442': attribute type 11 has an invalid length. [ 400.900329][T12080] netlink: 'syz.4.1442': attribute type 11 has an invalid length. [ 402.284244][T12091] mkiss: ax0: crc mode is auto. [ 403.444584][T12147] netlink: 'syz.3.1452': attribute type 11 has an invalid length. [ 403.472418][T12147] netlink: 'syz.3.1452': attribute type 11 has an invalid length. [ 403.809535][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1454'. [ 405.622811][T12184] netlink: 'syz.3.1463': attribute type 11 has an invalid length. [ 405.783617][T12184] netlink: 'syz.3.1463': attribute type 11 has an invalid length. [ 406.096552][T12198] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1464'. [ 408.827304][T12255] netlink: 'syz.3.1472': attribute type 11 has an invalid length. [ 408.875635][T12255] netlink: 'syz.3.1472': attribute type 11 has an invalid length. [ 409.676093][T12264] zswap: compressor not available [ 410.052475][T12275] zswap: compressor not available [ 410.073316][ T30] audit: type=1800 audit(4294967473.100:12): pid=12283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1478" name="dbroot" dev="configfs" ino=44888 res=0 errno=0 [ 410.439124][T12288] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1481'. [ 410.628716][T12293] netlink: 'syz.1.1482': attribute type 11 has an invalid length. [ 410.673608][T12293] netlink: 'syz.1.1482': attribute type 11 has an invalid length. [ 411.070336][ T30] audit: type=1800 audit(4294967474.100:13): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1485" name="lu_gp_id" dev="configfs" ino=45274 res=0 errno=0 [ 411.070786][T12303] kstrtoul() returned -22 for lu_gp_id [ 411.294853][T12301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 411.578437][T12306] zswap: compressor not available [ 411.734856][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 411.905436][T12308] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 412.080468][T12314] mkiss: ax0: crc mode is auto. [ 412.870260][T12333] netlink: 'syz.1.1492': attribute type 11 has an invalid length. [ 412.898741][T12333] netlink: 'syz.1.1492': attribute type 11 has an invalid length. [ 413.747010][T12356] mkiss: ax0: crc mode is auto. [ 414.136006][T12369] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 414.234384][T12373] futex_wake_op: syz.4.1501 tries to shift op by -2048; fix this program [ 414.260098][T12373] futex_wake_op: syz.4.1501 tries to shift op by -2048; fix this program [ 415.078587][ T30] audit: type=1800 audit(4294967478.110:14): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1510" name="dbroot" dev="configfs" ino=46329 res=0 errno=0 [ 415.350850][T12398] mkiss: ax0: crc mode is auto. [ 416.018093][T12420] FAULT_INJECTION: forcing a failure. [ 416.018093][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 416.060586][T12420] CPU: 0 UID: 0 PID: 12420 Comm: syz.1.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.060626][T12420] Tainted: [L]=SOFTLOCKUP [ 416.060635][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.060648][T12420] Call Trace: [ 416.060656][T12420] [ 416.060666][T12420] dump_stack_lvl+0x16c/0x1f0 [ 416.060696][T12420] should_fail_ex+0x512/0x640 [ 416.060724][T12420] ? __kvmalloc_node_noprof+0x129/0xa50 [ 416.060751][T12420] should_failslab+0xc2/0x120 [ 416.060779][T12420] __kvmalloc_node_noprof+0x13c/0xa50 [ 416.060806][T12420] ? alloc_netdev_mqs+0xd7/0x1550 [ 416.060845][T12420] ? __pfx_loopback_setup+0x10/0x10 [ 416.060872][T12420] ? alloc_netdev_mqs+0xd7/0x1550 [ 416.060903][T12420] alloc_netdev_mqs+0xd7/0x1550 [ 416.060936][T12420] ? gtp_net_init+0xf2/0x300 [ 416.060970][T12420] ? __pfx_loopback_net_init+0x10/0x10 [ 416.060998][T12420] loopback_net_init+0x38/0x170 [ 416.061027][T12420] ? __pfx_loopback_net_init+0x10/0x10 [ 416.061052][T12420] ops_init+0x1e2/0x5f0 [ 416.061086][T12420] setup_net+0x11d/0x3a0 [ 416.061118][T12420] ? __pfx_setup_net+0x10/0x10 [ 416.061145][T12420] ? lockdep_init_map_type+0x5c/0x270 [ 416.061174][T12420] ? mutex_init_lockep+0x110/0x150 [ 416.061216][T12420] copy_net_ns+0x351/0x5d0 [ 416.061254][T12420] create_new_namespaces+0x3ea/0xab0 [ 416.061299][T12420] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 416.061338][T12420] ksys_unshare+0x45b/0xa40 [ 416.061364][T12420] ? __pfx_ksys_unshare+0x10/0x10 [ 416.061391][T12420] ? xfd_validate_state+0x61/0x180 [ 416.061426][T12420] __x64_sys_unshare+0x31/0x40 [ 416.061450][T12420] do_syscall_64+0xcd/0xf80 [ 416.061478][T12420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.061502][T12420] RIP: 0033:0x7f7e5258f7c9 [ 416.061521][T12420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.061545][T12420] RSP: 002b:00007f7e53407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 416.061567][T12420] RAX: ffffffffffffffda RBX: 00007f7e527e6090 RCX: 00007f7e5258f7c9 [ 416.061583][T12420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 416.061597][T12420] RBP: 00007f7e52613f91 R08: 0000000000000000 R09: 0000000000000000 [ 416.061612][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.061626][T12420] R13: 00007f7e527e6128 R14: 00007f7e527e6090 R15: 00007ffdfe0df458 [ 416.061661][T12420] [ 416.369814][T12423] netlink: 'syz.3.1514': attribute type 1 has an invalid length. [ 416.824821][T12440] FAULT_INJECTION: forcing a failure. [ 416.824821][T12440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.906122][T12440] CPU: 0 UID: 0 PID: 12440 Comm: syz.1.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.906162][T12440] Tainted: [L]=SOFTLOCKUP [ 416.906170][T12440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.906184][T12440] Call Trace: [ 416.906192][T12440] [ 416.906202][T12440] dump_stack_lvl+0x16c/0x1f0 [ 416.906232][T12440] should_fail_ex+0x512/0x640 [ 416.906265][T12440] _copy_from_user+0x2e/0xd0 [ 416.906300][T12440] copy_msghdr_from_user+0x98/0x160 [ 416.906332][T12440] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 416.906370][T12440] ? __pfx__kstrtoull+0x10/0x10 [ 416.906409][T12440] ___sys_sendmsg+0xfe/0x1d0 [ 416.906442][T12440] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.906490][T12440] ? find_held_lock+0x2b/0x80 [ 416.906538][T12440] ? proc_fail_nth_write+0x9f/0x220 [ 416.906569][T12440] ? find_held_lock+0x2b/0x80 [ 416.906608][T12440] __sys_sendmmsg+0x200/0x420 [ 416.906644][T12440] ? __pfx___sys_sendmmsg+0x10/0x10 [ 416.906684][T12440] ? do_sys_openat2+0x190/0x280 [ 416.906717][T12440] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.906767][T12440] ? ksys_write+0x1ac/0x250 [ 416.906792][T12440] ? __pfx_ksys_write+0x10/0x10 [ 416.906823][T12440] __x64_sys_sendmmsg+0x9c/0x100 [ 416.906853][T12440] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.906879][T12440] do_syscall_64+0xcd/0xf80 [ 416.906907][T12440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.906932][T12440] RIP: 0033:0x7f7e5258f7c9 [ 416.906951][T12440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.906975][T12440] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 416.906999][T12440] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 416.907015][T12440] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 416.907030][T12440] RBP: 00007f7e53428090 R08: 0000000000000000 R09: 0000000000000000 [ 416.907045][T12440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.907059][T12440] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 416.907095][T12440] [ 417.244724][T12446] mkiss: ax0: crc mode is auto. [ 417.532393][T12443] svc: failed to register nfsdv3 RPC service (errno 111). [ 417.673911][T12443] svc: failed to register nfsaclv3 RPC service (errno 111). [ 417.833626][T12450] mkiss: ax1: crc mode is auto. [ 418.205717][T12448] zswap: compressor not available [ 418.615964][ T30] audit: type=1800 audit(4294967481.640:15): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1523" name="dbroot" dev="configfs" ino=45685 res=0 errno=0 [ 420.079977][T12480] random: crng reseeded on system resumption [ 420.279644][T12486] svc: failed to register nfsdv3 RPC service (errno 111). [ 420.296268][T12486] svc: failed to register nfsaclv3 RPC service (errno 111). [ 421.886052][T12505] zswap: compressor not available [ 423.674100][T12541] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 426.052038][T12573] mkiss: ax0: crc mode is auto. [ 426.582526][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1548'. [ 427.138960][T12588] zswap: compressor not available [ 427.500040][T12598] zswap: compressor not available [ 427.514796][T12539] kexec: Could not allocate control_code_buffer [ 429.882909][T12627] cougar: G6 mapped to F18 [ 430.442343][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 430.788288][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1561'. [ 431.463830][ T5837] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 431.774140][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.797762][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.819292][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.840126][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.849426][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.970011][T12651] chnl_net:caif_netlink_parms(): no params data found [ 433.326906][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.371257][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.393730][T12651] bridge_slave_0: entered allmulticast mode [ 433.421532][T12651] bridge_slave_0: entered promiscuous mode [ 433.444767][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.478753][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.491925][T12651] bridge_slave_1: entered allmulticast mode [ 433.511595][T12651] bridge_slave_1: entered promiscuous mode [ 433.733077][T12671] mkiss: ax0: crc mode is auto. [ 433.923731][ T5846] Bluetooth: hci3: command tx timeout [ 434.025517][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.074463][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.320290][T12651] team0: Port device team_slave_0 added [ 434.398546][T12651] team0: Port device team_slave_1 added [ 434.610944][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.629099][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.690818][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.744305][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.752768][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.802728][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.964611][T12694] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 434.988714][T12651] hsr_slave_0: entered promiscuous mode [ 435.005725][T12651] hsr_slave_1: entered promiscuous mode [ 435.019893][T12651] debugfs: 'hsr0' already exists in 'hsr' [ 435.051474][T12651] Cannot create hsr debugfs directory [ 436.013636][ T5846] Bluetooth: hci3: command tx timeout [ 436.738138][T11982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.979301][T11982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.104697][T12693] kexec: Could not allocate control_code_buffer [ 437.219091][T11982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.304649][T12707] cougar: G6 mapped to F18 [ 437.416085][T11982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.547551][T12651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.612952][T12651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.654638][T12651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.748121][T12651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.083704][ T5846] Bluetooth: hci3: command tx timeout [ 438.467250][T11982] bridge_slave_1: left allmulticast mode [ 438.483454][T11982] bridge_slave_1: left promiscuous mode [ 438.490359][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.556908][T11982] bridge_slave_0: left allmulticast mode [ 438.573451][T11982] bridge_slave_0: left promiscuous mode [ 438.582089][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.428502][T11982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.456744][T11982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.480997][T11982] bond0 (unregistering): Released all slaves [ 440.163869][ T5846] Bluetooth: hci3: command tx timeout [ 440.186814][T11982] hsr_slave_0: left promiscuous mode [ 440.214370][T11982] hsr_slave_1: left promiscuous mode [ 440.221586][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.259549][T11982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.290576][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.319919][T11982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.395877][T11982] veth1_macvtap: left promiscuous mode [ 440.404050][T11982] veth0_macvtap: left promiscuous mode [ 440.410828][T11982] veth1_vlan: left promiscuous mode [ 440.436093][T11982] veth0_vlan: left promiscuous mode [ 441.089140][T11982] team0 (unregistering): Port device team_slave_1 removed [ 441.127785][T11982] team0 (unregistering): Port device team_slave_0 removed [ 441.459519][T12651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.520866][T12651] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.563075][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.571697][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.594337][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.602984][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.018273][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.360045][T12651] veth0_vlan: entered promiscuous mode [ 442.376601][T12651] veth1_vlan: entered promiscuous mode [ 442.427507][T12651] veth0_macvtap: entered promiscuous mode [ 442.440224][T12651] veth1_macvtap: entered promiscuous mode [ 442.467900][T12651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.482918][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.509259][ T3462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.538999][ T3462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.565106][ T3651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.583783][ T3651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.641195][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.663467][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.702469][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.717506][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.686734][T12795] random: crng reseeded on system resumption [ 444.703811][T12815] mkiss: ax0: crc mode is auto. [ 445.290511][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.299002][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.438506][T12838] random: crng reseeded on system resumption [ 446.725906][ T5846] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 447.125643][T12875] netlink: 'syz.5.1594': attribute type 11 has an invalid length. [ 447.151623][T12875] netlink: 'syz.5.1594': attribute type 11 has an invalid length. [ 447.361367][T12877] mkiss: ax0: crc mode is auto. [ 447.968253][T12897] random: crng reseeded on system resumption [ 449.553212][T12931] netlink: 'syz.3.1605': attribute type 11 has an invalid length. [ 449.600746][T12931] netlink: 'syz.3.1605': attribute type 11 has an invalid length. [ 450.634685][T12940] mkiss: ax0: crc mode is auto. [ 451.220597][T12954] random: crng reseeded on system resumption [ 451.768939][T12959] FAULT_INJECTION: forcing a failure. [ 451.768939][T12959] name failslab, interval 1, probability 0, space 0, times 0 [ 451.816338][T12959] CPU: 0 UID: 0 PID: 12959 Comm: syz.1.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.816365][T12959] Tainted: [L]=SOFTLOCKUP [ 451.816370][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.816387][T12959] Call Trace: [ 451.816393][T12959] [ 451.816406][T12959] dump_stack_lvl+0x16c/0x1f0 [ 451.816441][T12959] should_fail_ex+0x512/0x640 [ 451.816465][T12959] ? kmem_cache_alloc_noprof+0x62/0x760 [ 451.816489][T12959] should_failslab+0xc2/0x120 [ 451.816506][T12959] kmem_cache_alloc_noprof+0x75/0x760 [ 451.816525][T12959] ? __kernfs_new_node+0xd2/0x8d0 [ 451.816550][T12959] ? __kernfs_new_node+0xd2/0x8d0 [ 451.816572][T12959] __kernfs_new_node+0xd2/0x8d0 [ 451.816602][T12959] ? __pfx___kernfs_new_node+0x10/0x10 [ 451.816628][T12959] ? find_held_lock+0x2b/0x80 [ 451.816652][T12959] ? kernfs_root+0xee/0x2a0 [ 451.816677][T12959] kernfs_new_node+0x13c/0x1e0 [ 451.816698][T12959] ? __pfx_map_id_range_down+0x10/0x10 [ 451.816716][T12959] __kernfs_create_file+0x53/0x350 [ 451.816737][T12959] sysfs_add_file_mode_ns+0x207/0x3c0 [ 451.816763][T12959] internal_create_group+0x578/0xf20 [ 451.816787][T12959] ? kobject_init_and_add+0x123/0x190 [ 451.816805][T12959] ? __pfx_internal_create_group+0x10/0x10 [ 451.816824][T12959] ? __pfx_kobject_init_and_add+0x10/0x10 [ 451.816840][T12959] ? ops_init+0x1e2/0x5f0 [ 451.816859][T12959] ? ksys_unshare+0x45b/0xa40 [ 451.816873][T12959] ? __x64_sys_unshare+0x31/0x40 [ 451.816886][T12959] ? do_syscall_64+0xcd/0xf80 [ 451.816899][T12959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.816918][T12959] internal_create_groups+0x9d/0x150 [ 451.816943][T12959] netdev_queue_update_kobjects+0x115/0x710 [ 451.816973][T12959] netdev_register_kobject+0x2b3/0x3d0 [ 451.816988][T12959] register_netdevice+0x13ac/0x21d0 [ 451.817012][T12959] ? __pfx_register_netdevice+0x10/0x10 [ 451.817038][T12959] __ip_tunnel_create+0x540/0x6b0 [ 451.817054][T12959] ? __pfx___ip_tunnel_create+0x10/0x10 [ 451.817073][T12959] ip_tunnel_init_net+0x22f/0x7d0 [ 451.817090][T12959] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 451.817110][T12959] ? ops_init+0x77/0x5f0 [ 451.817129][T12959] ? __pfx_erspan_init_net+0x10/0x10 [ 451.817149][T12959] ops_init+0x1e2/0x5f0 [ 451.817169][T12959] setup_net+0x11d/0x3a0 [ 451.817188][T12959] ? __pfx_setup_net+0x10/0x10 [ 451.817205][T12959] ? lockdep_init_map_type+0x5c/0x270 [ 451.817222][T12959] ? mutex_init_lockep+0x110/0x150 [ 451.817242][T12959] copy_net_ns+0x351/0x5d0 [ 451.817264][T12959] create_new_namespaces+0x3ea/0xab0 [ 451.817290][T12959] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 451.817313][T12959] ksys_unshare+0x45b/0xa40 [ 451.817327][T12959] ? __pfx_ksys_unshare+0x10/0x10 [ 451.817342][T12959] ? xfd_validate_state+0x61/0x180 [ 451.817363][T12959] __x64_sys_unshare+0x31/0x40 [ 451.817377][T12959] do_syscall_64+0xcd/0xf80 [ 451.817392][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.817406][T12959] RIP: 0033:0x7f7e5258f7c9 [ 451.817419][T12959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.817436][T12959] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 451.817450][T12959] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 451.817460][T12959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 451.817468][T12959] RBP: 00007f7e52613f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.817476][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.817485][T12959] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 451.817505][T12959] [ 451.834442][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1613'. [ 454.099510][T12993] FAULT_INJECTION: forcing a failure. [ 454.099510][T12993] name failslab, interval 1, probability 0, space 0, times 0 [ 454.172899][T12993] CPU: 1 UID: 0 PID: 12993 Comm: syz.1.1619 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.172943][T12993] Tainted: [L]=SOFTLOCKUP [ 454.172953][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.172968][T12993] Call Trace: [ 454.172977][T12993] [ 454.172987][T12993] dump_stack_lvl+0x16c/0x1f0 [ 454.173020][T12993] should_fail_ex+0x512/0x640 [ 454.173051][T12993] ? kmem_cache_alloc_noprof+0x62/0x760 [ 454.173093][T12993] should_failslab+0xc2/0x120 [ 454.173123][T12993] kmem_cache_alloc_noprof+0x75/0x760 [ 454.173158][T12993] ? sk_prot_alloc+0x60/0x2a0 [ 454.173212][T12993] ? sk_prot_alloc+0x60/0x2a0 [ 454.173247][T12993] ? find_held_lock+0x2b/0x80 [ 454.173283][T12993] sk_prot_alloc+0x60/0x2a0 [ 454.173322][T12993] sk_alloc+0x36/0xc20 [ 454.173354][T12993] inet_create+0x3a1/0x1040 [ 454.173388][T12993] ? inet_create+0x93/0x1040 [ 454.173420][T12993] __sock_create+0x339/0x8a0 [ 454.173448][T12993] __sys_socket+0x153/0x2d0 [ 454.173470][T12993] ? __pfx___sys_socket+0x10/0x10 [ 454.173492][T12993] ? xfd_validate_state+0x61/0x180 [ 454.173517][T12993] ? __sys_setsockopt+0x140/0x1a0 [ 454.173552][T12993] __x64_sys_socket+0x72/0xb0 [ 454.173571][T12993] ? lockdep_hardirqs_on+0x7c/0x110 [ 454.173596][T12993] do_syscall_64+0xcd/0xf80 [ 454.173624][T12993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.173649][T12993] RIP: 0033:0x7f7e5258f7c9 [ 454.173668][T12993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.173692][T12993] RSP: 002b:00007f7e53407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 454.173716][T12993] RAX: ffffffffffffffda RBX: 00007f7e527e6090 RCX: 00007f7e5258f7c9 [ 454.173734][T12993] RDX: 00000000000000ff RSI: 0000000000000003 RDI: 0000840000000002 [ 454.173750][T12993] RBP: 00007f7e52613f91 R08: 0000000000000000 R09: 0000000000000000 [ 454.173765][T12993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.173780][T12993] R13: 00007f7e527e6128 R14: 00007f7e527e6090 R15: 00007ffdfe0df458 [ 454.173817][T12993] [ 455.328089][T13001] zswap: compressor not available [ 455.784968][T13007] zswap: compressor 600 not available [ 456.508579][T13023] FAULT_INJECTION: forcing a failure. [ 456.508579][T13023] name failslab, interval 1, probability 0, space 0, times 0 [ 456.534100][T13025] netlink: 'syz.3.1625': attribute type 11 has an invalid length. [ 456.574236][T13023] CPU: 0 UID: 0 PID: 13023 Comm: syz.1.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.574281][T13023] Tainted: [L]=SOFTLOCKUP [ 456.574291][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.574306][T13023] Call Trace: [ 456.574316][T13023] [ 456.574326][T13023] dump_stack_lvl+0x16c/0x1f0 [ 456.574360][T13023] should_fail_ex+0x512/0x640 [ 456.574391][T13023] ? __kmalloc_cache_noprof+0x5f/0x800 [ 456.574432][T13023] should_failslab+0xc2/0x120 [ 456.574462][T13023] __kmalloc_cache_noprof+0x72/0x800 [ 456.574498][T13023] ? snd_seq_pool_new+0x44/0x230 [ 456.574531][T13023] ? snd_seq_pool_new+0x44/0x230 [ 456.574555][T13023] ? __pfx_snd_seq_open+0x10/0x10 [ 456.574589][T13023] snd_seq_pool_new+0x44/0x230 [ 456.574616][T13023] snd_seq_fifo_new+0x5a/0x260 [ 456.574645][T13023] snd_seq_open+0x15c/0x590 [ 456.574681][T13023] ? __pfx_snd_seq_open+0x10/0x10 [ 456.574714][T13023] snd_open+0x22d/0x4c0 [ 456.574752][T13023] ? __pfx_snd_open+0x10/0x10 [ 456.574789][T13023] chrdev_open+0x234/0x6a0 [ 456.574819][T13023] ? __pfx_apparmor_file_open+0x10/0x10 [ 456.574844][T13023] ? __pfx_chrdev_open+0x10/0x10 [ 456.574876][T13023] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 456.574914][T13023] do_dentry_open+0x748/0x1590 [ 456.574941][T13023] ? __pfx_chrdev_open+0x10/0x10 [ 456.574980][T13023] vfs_open+0x82/0x3f0 [ 456.575019][T13023] path_openat+0x2078/0x3140 [ 456.575060][T13023] ? __pfx_path_openat+0x10/0x10 [ 456.575105][T13023] do_filp_open+0x20b/0x470 [ 456.575135][T13023] ? __pfx_do_filp_open+0x10/0x10 [ 456.575191][T13023] ? alloc_fd+0x471/0x7d0 [ 456.575236][T13023] do_sys_openat2+0x11f/0x280 [ 456.575274][T13023] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.575325][T13023] __x64_sys_openat+0x174/0x210 [ 456.575360][T13023] ? __pfx___x64_sys_openat+0x10/0x10 [ 456.575410][T13023] do_syscall_64+0xcd/0xf80 [ 456.575441][T13023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.575467][T13023] RIP: 0033:0x7f7e5258f7c9 [ 456.575489][T13023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.575515][T13023] RSP: 002b:00007f7e53428038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.575541][T13023] RAX: ffffffffffffffda RBX: 00007f7e527e5fa0 RCX: 00007f7e5258f7c9 [ 456.575559][T13023] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 456.575575][T13023] RBP: 00007f7e52613f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.575590][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.575605][T13023] R13: 00007f7e527e6038 R14: 00007f7e527e5fa0 R15: 00007ffdfe0df458 [ 456.575641][T13023] [ 456.693916][T13025] netlink: 'syz.3.1625': attribute type 11 has an invalid length. [ 457.324672][T13035] FAULT_INJECTION: forcing a failure. [ 457.324672][T13035] name failslab, interval 1, probability 0, space 0, times 0 [ 457.383506][T13035] CPU: 0 UID: 0 PID: 13035 Comm: syz.5.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.383547][T13035] Tainted: [L]=SOFTLOCKUP [ 457.383554][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.383566][T13035] Call Trace: [ 457.383575][T13035] [ 457.383583][T13035] dump_stack_lvl+0x16c/0x1f0 [ 457.383613][T13035] should_fail_ex+0x512/0x640 [ 457.383640][T13035] ? fs_reclaim_acquire+0xae/0x150 [ 457.383667][T13035] should_failslab+0xc2/0x120 [ 457.383695][T13035] __kmalloc_noprof+0xdd/0x8f0 [ 457.383725][T13035] ? tomoyo_encode2+0x100/0x3e0 [ 457.383759][T13035] ? tomoyo_encode2+0x100/0x3e0 [ 457.383787][T13035] tomoyo_encode2+0x100/0x3e0 [ 457.383821][T13035] tomoyo_encode+0x29/0x50 [ 457.383850][T13035] tomoyo_realpath_from_path+0x18f/0x6e0 [ 457.383891][T13035] tomoyo_check_open_permission+0x2ab/0x3c0 [ 457.384000][T13035] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 457.384065][T13035] ? lock_acquire+0x179/0x330 [ 457.384095][T13035] ? find_held_lock+0x2b/0x80 [ 457.384130][T13035] ? mnt_get_write_access+0x52/0x2f0 [ 457.384178][T13035] tomoyo_file_open+0x6b/0x90 [ 457.384215][T13035] security_file_open+0x84/0x1e0 [ 457.384244][T13035] do_dentry_open+0x597/0x1590 [ 457.384274][T13035] ? security_inode_permission+0xbf/0x260 [ 457.384307][T13035] vfs_open+0x82/0x3f0 [ 457.384343][T13035] path_openat+0x2078/0x3140 [ 457.384383][T13035] ? __pfx_path_openat+0x10/0x10 [ 457.384424][T13035] do_filp_open+0x20b/0x470 [ 457.384452][T13035] ? __pfx_do_filp_open+0x10/0x10 [ 457.384507][T13035] ? alloc_fd+0x471/0x7d0 [ 457.384543][T13035] do_sys_openat2+0x11f/0x280 [ 457.384576][T13035] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.384607][T13035] ? __fget_files+0x204/0x3c0 [ 457.384653][T13035] __x64_sys_openat+0x174/0x210 [ 457.384687][T13035] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.384735][T13035] do_syscall_64+0xcd/0xf80 [ 457.384764][T13035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.384788][T13035] RIP: 0033:0x7f20cd18f7c9 [ 457.384809][T13035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.384832][T13035] RSP: 002b:00007f20cdfc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.384854][T13035] RAX: ffffffffffffffda RBX: 00007f20cd3e6090 RCX: 00007f20cd18f7c9 [ 457.384870][T13035] RDX: 0000000000048402 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 457.384885][T13035] RBP: 00007f20cd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.384899][T13035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.384913][T13035] R13: 00007f20cd3e6128 R14: 00007f20cd3e6090 R15: 00007ffe313cfcb8 [ 457.384949][T13035] [ 457.712040][T13035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.849338][T13059] mkiss: ax0: crc mode is auto. [ 459.161090][T13055] mkiss: ax0: crc mode is auto. [ 460.156503][T13088] FAULT_INJECTION: forcing a failure. [ 460.156503][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 460.222378][T13088] CPU: 0 UID: 0 PID: 13088 Comm: syz.3.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.222423][T13088] Tainted: [L]=SOFTLOCKUP [ 460.222432][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.222447][T13088] Call Trace: [ 460.222456][T13088] [ 460.222466][T13088] dump_stack_lvl+0x16c/0x1f0 [ 460.222500][T13088] should_fail_ex+0x512/0x640 [ 460.222528][T13088] ? kmem_cache_alloc_noprof+0x62/0x760 [ 460.222563][T13088] should_failslab+0xc2/0x120 [ 460.222607][T13088] kmem_cache_alloc_noprof+0x75/0x760 [ 460.222640][T13088] ? kmem_cache_alloc_noprof+0x231/0x760 [ 460.222671][T13088] ? anon_vma_fork+0x200/0x620 [ 460.222710][T13088] ? anon_vma_fork+0x200/0x620 [ 460.222740][T13088] anon_vma_fork+0x200/0x620 [ 460.222779][T13088] dup_mmap+0x151f/0x2250 [ 460.222820][T13088] ? __pfx_dup_mmap+0x10/0x10 [ 460.222877][T13088] copy_process+0x6476/0x74e0 [ 460.222903][T13088] ? preempt_schedule_thunk+0x16/0x30 [ 460.222946][T13088] ? __pfx_copy_process+0x10/0x10 [ 460.222972][T13088] ? find_held_lock+0x2b/0x80 [ 460.223018][T13088] ? futex_private_hash_put+0x160/0x1b0 [ 460.223060][T13088] kernel_clone+0xfc/0x910 [ 460.223085][T13088] ? __pfx_futex_wake+0x10/0x10 [ 460.223120][T13088] ? __pfx_kernel_clone+0x10/0x10 [ 460.223153][T13088] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.223191][T13088] __do_sys_clone+0xce/0x120 [ 460.223216][T13088] ? __pfx___do_sys_clone+0x10/0x10 [ 460.223260][T13088] ? xfd_validate_state+0x61/0x180 [ 460.223300][T13088] do_syscall_64+0xcd/0xf80 [ 460.223331][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.223361][T13088] RIP: 0033:0x7fbce878f7c9 [ 460.223381][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.223406][T13088] RSP: 002b:00007fbce95fafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 460.223431][T13088] RAX: ffffffffffffffda RBX: 00007fbce89e5fa0 RCX: 00007fbce878f7c9 [ 460.223447][T13088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010008000 [ 460.223462][T13088] RBP: 00007fbce8813f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.223478][T13088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 460.223493][T13088] R13: 00007fbce89e6038 R14: 00007fbce89e5fa0 R15: 00007ffff191cb28 [ 460.223531][T13088] [ 461.260293][T13104] FAULT_INJECTION: forcing a failure. [ 461.260293][T13104] name failslab, interval 1, probability 0, space 0, times 0 [ 461.303505][T13104] CPU: 1 UID: 0 PID: 13104 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.303549][T13104] Tainted: [L]=SOFTLOCKUP [ 461.303558][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.303574][T13104] Call Trace: [ 461.303583][T13104] [ 461.303593][T13104] dump_stack_lvl+0x16c/0x1f0 [ 461.303626][T13104] should_fail_ex+0x512/0x640 [ 461.303655][T13104] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 461.303696][T13104] should_failslab+0xc2/0x120 [ 461.303727][T13104] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 461.303765][T13104] ? __d_alloc+0x35/0xa80 [ 461.303801][T13104] ? __d_alloc+0x35/0xa80 [ 461.303829][T13104] __d_alloc+0x35/0xa80 [ 461.303863][T13104] d_alloc_pseudo+0x1c/0xc0 [ 461.303900][T13104] alloc_file_pseudo+0xcf/0x230 [ 461.303936][T13104] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 461.303971][T13104] ? alloc_fd+0x471/0x7d0 [ 461.304003][T13104] sock_alloc_file+0x50/0x210 [ 461.304041][T13104] __sys_socket+0x1c6/0x2d0 [ 461.304066][T13104] ? __pfx___sys_socket+0x10/0x10 [ 461.304102][T13104] __x64_sys_socket+0x72/0xb0 [ 461.304125][T13104] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.304152][T13104] do_syscall_64+0xcd/0xf80 [ 461.304182][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.304207][T13104] RIP: 0033:0x7fe9297916e7 [ 461.304229][T13104] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.304254][T13104] RSP: 002b:00007fe9279f4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 461.304279][T13104] RAX: ffffffffffffffda RBX: 00007fe9299e5fa0 RCX: 00007fe9297916e7 [ 461.304296][T13104] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 461.304311][T13104] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 461.304327][T13104] R10: 0000200000000340 R11: 0000000000000286 R12: 0000000000000000 [ 461.304342][T13104] R13: 00007fe9299e6038 R14: 00007fe9299e5fa0 R15: 00007ffdf0656a58 [ 461.304382][T13104] [ 461.304597][T13104] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff88805d1ce280 [ 461.304597][T13104] fs sockfs mode 140777 opflags 0x8 flags 0x0 state 0x300 count 0 [ 461.690595][T13104] ------------[ cut here ]------------ [ 461.697384][T13104] kernel BUG at fs/inode.c:1971! [ 461.729706][T13104] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 461.737246][T13104] CPU: 1 UID: 0 PID: 13104 Comm: syz.2.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.750382][T13104] Tainted: [L]=SOFTLOCKUP [ 461.755575][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.767644][T13104] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 461.774009][T13104] Code: 4b 68 ff ff 90 0f 0b e8 83 d4 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 75 d4 7c ff 48 c7 c6 20 7d a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 5e d4 7c ff 48 c7 c6 80 7d a0 8b 48 89 df e8 0f 68 ff ff [ 461.797547][T13104] RSP: 0018:ffffc9000418fdc8 EFLAGS: 00010296 [ 461.804833][T13104] RAX: 000000000000009f RBX: ffff88805d1ce280 RCX: ffffc9000c899000 [ 461.814388][T13104] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 461.823942][T13104] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 461.833490][T13104] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 461.843051][T13104] R13: ffffffff90878854 R14: ffff88805d1ce350 R15: dffffc0000000000 [ 461.852609][T13104] FS: 00007fe9279f66c0(0000) GS:ffff888124a65000(0000) knlGS:0000000000000000 [ 461.863311][T13104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.871196][T13104] CR2: 0000000000094000 CR3: 0000000077210000 CR4: 00000000003526f0 [ 461.880746][T13104] Call Trace: [ 461.884659][T13104] [ 461.888155][T13104] iput+0x35/0x40 [ 461.892505][T13104] __sock_release+0x20b/0x270 [ 461.898105][T13104] __sys_socket+0x23a/0x2d0 [ 461.903491][T13104] ? __pfx___sys_socket+0x10/0x10 [ 461.909504][T13104] __x64_sys_socket+0x72/0xb0 [ 461.915093][T13104] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.921336][T13104] do_syscall_64+0xcd/0xf80 [ 461.926725][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.933783][T13104] RIP: 0033:0x7fe9297916e7 [ 461.939060][T13104] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.962577][T13104] RSP: 002b:00007fe9279f4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 461.972656][T13104] RAX: ffffffffffffffda RBX: 00007fe9299e5fa0 RCX: 00007fe9297916e7 [ 461.982215][T13104] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.991758][T13104] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 462.001298][T13104] R10: 0000200000000340 R11: 0000000000000286 R12: 0000000000000000 [ 462.010840][T13104] R13: 00007fe9299e6038 R14: 00007fe9299e5fa0 R15: 00007ffdf0656a58 [ 462.020397][T13104] [ 462.023999][T13104] Modules linked in: [ 462.029519][T13104] ---[ end trace 0000000000000000 ]--- [ 462.085055][T13098] FAULT_INJECTION: forcing a failure. [ 462.085055][T13098] name failslab, interval 1, probability 0, space 0, times 0 [ 462.104669][T13098] CPU: 1 UID: 0 PID: 13098 Comm: syz.3.1632 Tainted: G D L syzkaller #0 PREEMPT(full) [ 462.104720][T13098] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 462.104730][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.104745][T13098] Call Trace: [ 462.104753][T13098] [ 462.104762][T13098] dump_stack_lvl+0x16c/0x1f0 [ 462.104794][T13098] should_fail_ex+0x512/0x640 [ 462.104826][T13098] should_failslab+0xc2/0x120 [ 462.104855][T13098] __kmalloc_cache_noprof+0x72/0x800 [ 462.104889][T13098] ? __pfx_device_add+0x10/0x10 [ 462.104925][T13098] ? kset_create_and_add+0x4d/0x190 [ 462.104956][T13098] ? kset_create_and_add+0x4d/0x190 [ 462.104986][T13098] kset_create_and_add+0x4d/0x190 [ 462.105017][T13098] netdev_register_kobject+0x1ef/0x3d0 [ 462.105045][T13098] register_netdevice+0x13ac/0x21d0 [ 462.105084][T13098] ? __pfx_register_netdevice+0x10/0x10 [ 462.105125][T13098] __ip_tunnel_create+0x540/0x6b0 [ 462.105152][T13098] ? __pfx___ip_tunnel_create+0x10/0x10 [ 462.105182][T13098] ip_tunnel_init_net+0x22f/0x7d0 [ 462.105211][T13098] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 462.105241][T13098] ? lockdep_init_map_type+0x5c/0x270 [ 462.105272][T13098] ? ops_init+0x77/0x5f0 [ 462.105303][T13098] ? __pfx_erspan_init_net+0x10/0x10 [ 462.105339][T13098] ops_init+0x1e2/0x5f0 [ 462.105373][T13098] setup_net+0x11d/0x3a0 [ 462.105406][T13098] ? __pfx_setup_net+0x10/0x10 [ 462.105443][T13098] ? lockdep_init_map_type+0x5c/0x270 [ 462.105473][T13098] ? mutex_init_lockep+0x110/0x150 [ 462.105505][T13098] copy_net_ns+0x351/0x5d0 [ 462.105543][T13098] create_new_namespaces+0x3ea/0xab0 [ 462.105586][T13098] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 462.105625][T13098] ksys_unshare+0x45b/0xa40 [ 462.105651][T13098] ? __pfx_ksys_unshare+0x10/0x10 [ 462.105677][T13098] ? xfd_validate_state+0x61/0x180 [ 462.105706][T13098] __x64_sys_unshare+0x31/0x40 [ 462.105732][T13098] do_syscall_64+0xcd/0xf80 [ 462.105759][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.105784][T13098] RIP: 0033:0x7fbce878f7c9 [ 462.105804][T13098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.105828][T13098] RSP: 002b:00007fbce95fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 462.105852][T13098] RAX: ffffffffffffffda RBX: 00007fbce89e5fa0 RCX: 00007fbce878f7c9 [ 462.105869][T13098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 462.105885][T13098] RBP: 00007fbce8813f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.105901][T13098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.105917][T13098] R13: 00007fbce89e6038 R14: 00007fbce89e5fa0 R15: 00007ffff191cb28 [ 462.105944][T13098] [ 462.474075][T13104] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 462.480473][T13104] Code: 4b 68 ff ff 90 0f 0b e8 83 d4 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 75 d4 7c ff 48 c7 c6 20 7d a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 5e d4 7c ff 48 c7 c6 80 7d a0 8b 48 89 df e8 0f 68 ff ff [ 462.504066][T13104] RSP: 0018:ffffc9000418fdc8 EFLAGS: 00010296 [ 462.511348][T13104] RAX: 000000000000009f RBX: ffff88805d1ce280 RCX: ffffc9000c899000 [ 462.520970][T13104] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 462.530611][T13104] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 462.540497][T13104] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 462.550315][T13104] R13: ffffffff90878854 R14: ffff88805d1ce350 R15: dffffc0000000000 [ 462.560029][T13104] FS: 00007fe9279f66c0(0000) GS:ffff888124a65000(0000) knlGS:0000000000000000 [ 462.570794][T13104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.579361][T13104] CR2: 0000001b33614ff8 CR3: 0000000077210000 CR4: 00000000003526f0 [ 462.580668][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 462.589002][T13104] Kernel panic - not syncing: Fatal exception [ 462.600033][T13104] Kernel Offset: disabled