last executing test programs: 24m54.611268882s ago: executing program 3 (id=89): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000200), r1) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), 0xffffffffffffffff) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80442, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r3, 0xc1b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x7a5}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x7}, @GTPA_LINK={0x8, 0x1, 0xfffffff8}, @GTPA_TID={0xc, 0x3, 0x8000000000000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x800) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_snmp6/veth1\x00', 0x8000, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7, 0x9, 0x0) unshare$auto(0x40000080) r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@siginfo_0_0={0xe8c, 0x2, 0x8, @_timer={0xffffffffffffffff, 0x40, @sival_ptr=&(0x7f0000000b40)="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"}}}, 0x9, &(0x7f0000000440)={{0xa, 0x3}, {0xffffffff, 0x1000}, 0x1b63, 0xb6, 0x9, 0x2, 0x9, 0x7, 0x8001, 0x1ff, 0xf, 0x1, 0x5, 0x81, 0x401, 0x9}) sendmsg$auto_NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000004a40)={0x2950, 0x0, 0x2, 0x70bd25, 0x25dfdc02, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfffa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x68, 0xac, "c891c15a75d6d7c6f6c9d979710d40116390369042f5dbc86a06b960f3d43b1577d210f934b00f412b93c2d6107f22c3aa797e93a3e69dfe53aa495fdc7d3e9e08e445660d6913348c0c1e5f38dc409b5804972b65b9983d48a967c0fa643c520869da42"}, @NL80211_ATTR_MESH_CONFIG={0x2859, 0x23, 0x0, 0x1, [@nested={0x243, 0x133, 0x0, 0x1, [@generic="eef70a4a3389acd7ed808e769621542cbf255ba68ff88a8f35fabe93f71324ff6935c0d998d7c41973381d8df037e72b4a2a36f68e", @typed={0x8, 0x123, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @generic="d05dc0ca49a5c256c707741737b739797644becd347f198526ba1ef16b40c701389e87481f28e531a610f4608ea10b3ef8937d3505a0dd453cbb04936247c79deb5a84af40400bf4f94e98f6d6b962bd1ceb749a9e34045c7179c93c5a1f4ccb432773a18abeb51e0482d0ed17e5eec2fb21f4cefe311d82da5fb9cdc7037cb7e0e90ea458df363d7c52799bbaeae65b0d042cd0cff70d971af3a718e0bb3e11a0e7fc90ad7350dac7cc8f1cf94da7527f863836061e25c49441a8c3bc99617fd1fb668bfcaa76d124fc355ffa138224d7264c45b22e8e77466fc58f4fef2b", @nested={0x4, 0x5}, @generic="f7fe724a65d46b9d07a96b810ebcccf922295dc312194e1bcdfecce7ea23f5aafc79c89b6ccf8fee478dcc1607e632", @generic="d7fc307bd7bc382b0c169bc33d2e040606a2664d783343353f539a524988b729537135fd0c99151009babecc40a861fa60a24adaa7ac0eacd84e913d403d86957a791028d00523843ff613fe105f93e281b0689f24e1dede31b10efc57917d294ed85eb61e354af4e5a063dee8eb49351494eb565ab9dcb5e056d8b07fa1", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xb6}, @generic="0928202771ad7c634f3aa506d22d026e7c2746c19fcbef4b544ef4b3657bebece759e0da7eed7a18b5c92880b1c93a5317c772fe92b9ba721a73f43cfd8e49bf20a452db75b4557e8f8fecaef191c4cb1a448eacddd1"]}, @typed={0x8, 0xe1, 0x0, 0x0, @fd}, @generic="0d436ef4dc48e4664ec1cb7a17fadb96c80ded3ccd408dfdeb6b389e88b88d5c63d46ca28d4867883257206d947f6903d6b44c66c8f47ab6fdd9384744a7ea8b4a3e5ee7", @nested={0x2a, 0x71, 0x0, 0x1, [@generic="1384ef25129d9e63d076", @nested={0x4, 0x45}, @nested={0x4, 0x150}, @typed={0x8, 0x95, 0x0, 0x0, @uid}, @nested={0x4, 0xdd}, @typed={0x8, 0xd8, 0x0, 0x0, @pid}]}, @generic="6af7f8a14d48a81a5ed40949a1344788392e2c335d2a233bdf0a04a9828d0d2444d6f55c4095c66d1484207dde2aab6153cda47be8efed598e9b4effc152b016c6ce5b7a420814e4c1ba4fa3b7885d619b7e6633b3d8d85756e4786366a7f677cb83cbd131eabecf5a6cc8e35662f8687e4f0d4bcfa85592bf5ae7c95acfa9b8a702b6ef7e7489c416760573e58686234d5f3232e430d30414b607d6507c58e5bc731d81a575dab747d49f59f21274fbd3ff980eb4630d317932e1a1c5abe12ba88918ec7852dea150f9eece35fdcd35da221514cfd9301ba032d1623758f9261c5461a1a5244c65fc101cbc62243e7aa6162f715347f39464d107008abde6727633f032f139227d4c55dc914a72ca75524406c98fb4b3314b773761e6b5c5e926805a99d51c8dc89938c75f4c2e6121704fb53d3c1774b8891aacb9238a571e29bc562aa1a3d5b1b6f01d663bf370d6e599b718d2b0aab0b7460c48565314b311a9c47e1f76db0ac0f95dece82d1ae1ae8df7b34f74c1009e2b1f8c6bff6652061d19eacc7d6ea4b604894779c7b22eacd8aa51336316550d066005f0d30cd1a5a2838b49d31ee97bdf01442abbccbbfddeaec6614e80e27aa47ee679179506eaef319193a69df6dde95506dcab69220b698887eb1db3edf14701bbe2f4a95d6a75dd17fb511283bc97bee367b22d2385485d8e8173d22fdae0584644f4e46d4d08d4195a97a3de84741d34383c85df6ffe207c63c8108b8ee1737dd95b7923db1d89bf34b5575a3febc8c4c6f22b9bb126ef614566646154eca4a1dfc4c3dd6691b8ac1f54ea5bde16e2fdaa827477bcbd36484cd7a091974a0a5e3b667adbcdde3b04617bca0985c090ae7d9ddc4ee23ddc22a943b1ba15c4a2e079f6525fb7a4e9374815e2d584bea8feb61761ba20ab9902d9b9d7fd3f05034b992add78fc0852ed5a4848d80f5ca9188e4e34a74f0cd53664222a74cef34367eb2132973ec8afe0b01f1edb4f4288d549717f1356f83a0039e8395c51c5b2b0d685631025c25906fc74e1ca64f7bae6426818f6bd9da8c148cf562739c46d0f60c097ea96a2ca02045b2a1a037a394a59b8efb76ce516897d68c81c116515e2e019672d6887ea99ce416960857cb0a97aa7905345f132599865d0f88c104d001dc01847ef12c8958691cb617171a807c61e3e6af496020bf312e94e2de5176dbb91f5eaaaacf027826e54ece673db55d106dbcc1fd3a7cab914ad1680bc227763438703ce3cd7b23f360b4af3dc23ef0fda18c2ae6de2264fbdcd6bf03178cc880e368a7777d53aa5ae6b8dee5c6b3f3e0a00c312b321259e04f8ff1f1ca5006ca2024650148af5ac3f2cea6e2ce02c950503e125357cfe54721fbc076fcef4d5afc4853170e2067ea88cef61da0c2c7788b30fe9d0148d6913c9efd1c5fdabba4e3abd984129f19466b9d1073b0898ca2c7b95c845682b50853ea4be8260b261eebfdaa69e76a9301b5fa605666cf28d493c7397f00fd5b7822f5ba78637929e2404fbc822082eaaaae98d8f4af4b5b24be39d904ca14a0859c1a641c9b7edfcaa8b8c72c8af5da296f16ec24a1a4fa9407064e9cb2953f092fae2cd5af0b5b04a29b7e9a993dc80116eec014981e8698fde3829bd9e1d18a4976037987e02b4d2b87e536619017a3918ac82d32e234efc85f247adbf2211454002d7f8bba6a6b8e5cea14eb782a0680d7ebfafca229e48f0e4842d3633385ef942af100c5a22e865ba860f6dc4133748a47bb06d850c366ae530ca72bbc055a5ccf46526a5575501b0183bbe6ed5b1ebd94c7bde8bf9eff689ca6e778d13bfda87c54ba3f3bafdc3ba5e7825194b6f608ee74757aa24e10215d3e19fb0926978b06bb8174277f15a6236f1f60b49984d9353626c79fbb61ac29870e450fd00d22351fd5954754a357a3f5a4fa5a53273c4207b1411a6ec61f87189522cc66bb302d4d82dfa69116ed9ecd365f89559f37f5e7d036b5c409e6fa91c022b415009fbfd4f499fa981d7ce4af25324afe40508d1df9f4421f33cad1456720d14648846919940eab444e7309f37d5419165312675b34d8cac818505a2481971974d7e8e3be1262e65254cbe205bdf756a43a9ed1ed2001c353baa13286835bc82e1a338d5f37cf59342c0e15c0604176a2be3932960a465b05818136339605c73ceb00bf6f27b4a2dfb35479d546324cc40aa48b3a67739f9bddfe9f0da767a8b6b2b68fdb53b2c59e9673386b5e71d581f59d98b77e58eca2b0144324a7e601f13881e58500d26c83574b303c16279b6b6d2d95e59962480f1dffebfa886a02ae4d73247812e76ff65c70897e83382472511b96940cabb44a68506c9fca91c7ac5b49b059610a18f613c6792b24aadd62add9846f204fcea8c1e681beb3c5b7e708b47d289cd9ceead7faf76c4b415a405d24a91ace9ea2b24a9d1fcc88bc5d38b48ff806668fdd7d6396fae35259982063a80d7bdca8fbe445d757cbf78f81901a4e0859dd5b4eeedb9fe7a416ab0f69a8d250c0416cbf21934078e1b28165daa2dbb8ce4064a1e9526ba621bbc01c4814d70bac0141a931de0b974d4889c83c6825959c0009a215e7865f85e9f8ab1d30fa7186a3b4763c3ce98fef871a873fdeb4e3eb11d3ce4cbdb197ff0b854110bedd59a36db0715bebf3e217b4f7638913d9824024c502244ac3e76e4c2d10f8b72be799f2b5257017b9ae93698c5ecc0d57d72808242ac9f08bbf7c007f3b5c85808fd72100b57aa24d5d8760247aea84e2e96a0467a461f075ec26a91e28df135abc2e69a738850a5f138c8f17a805708a623bea653fc9afd95a561c1201ec70aa77d84d1c53e7545e38bb16167e98b0137cf215c73109613a868cfe427dd1f0a75c025e1f7a72b9bce55ec4f7e147ee11fbf4defca0fda4ad43f635db97c8fd1a36ed971b2cca39ac8037b8c534f430f8851e1ef7a3fdfdc0114544af2e02cb3a12c59dc35d5cc71a0cd2d1b216c540ce59a955fce8923a42b9e0310dcd3579115aee316cd94fcdf3f53e04c2c22c116e3c7168109034b065d9285a01cb6e3d9f13f9b3b460e012e9d18ed5e4d3c3bf36f74b4cb853cbe350150d154f1e5459960f5570f4c6eaee33b05752027073ee6b1580b99d940cc5d28973af0b9fe8182ac882cc4c76c261ec607490abcc665247c2cf15d9ad94f583cda6b4a39a0921171e6ee7aebf981a0c7914e7e3ce5d362103e8d2560267addd895d55f3792c7244729d41e46002ffe2e94a42b62986867ddfe8dc1cfa427da11920a01f384e7c972cba9371aefb9ab469dca283144c48e5209d7d74889061249fe28140f5989c3e7451c71aebf9d5559c08d4c64f4840c393e020ecb238fcaebe237de11bcfa7a18eab16051e8be2b3347c7196d8701121df9b52d3463bbb6415a0fe111ad6f32d1a4db301427e3047a311b2123e2393c33b13f365da4876626fbb87710214ce20cd9affc2f480b5734fac279c7efd094d8121393f3184ac7632bbec93232f41381e83413af98ff0a7fa3e6b1284a3b1aa6afd57de60c186494aac91a194739239e1b5843b49c54ea4173733136f9751083f16930278b013d9788994234043edb60824e987d0a4a4fb54e971d0de0e0f5bbe7704f6466078dc1982586b954cd132ac498004a20491812d98485824b8c8dec3172fc34b4ed4f50a85eea47f84f6b0bd6db9c15becee99efb608ffd9a5bc19309a2908244d245bd29a4b52984fff9cc5e20f9b6f6be5d20d831b6f28f9d1a3a66d97b702b32926a96a48095fc58a581f66a68fad8fd83b9bce7623055bdf883b294566ff404e419ce7c0e015096db688d8e750b291628345416d9e4642d317ca1397e8552ed36f5370b9e4d1e80e642bb28e028f0f7891a4378eaecf449d8da97693e16fa9e5c9d044402680b242d5942ea1b8ce83ab67d81091757543ba89853e7dd8073d1563a13c764167c92d605da01b69fd56f3c420da8c14972ebf0346b1b27d9496872e6ef3e511b8f628d7ee7ac38bc8a84cd940aa3e14d1e784a401b2133d99a7886f27e23bd25155cfd74dbab5ef5b555b4e09f269ad01b5a5fa998fc3cc2909ca77e735a9821c4bfa2eb6827e890b14200d96254064d91ebddf85a20f09dddd1cff02ad9253ada5910e5e39df46b29d7783034bfd5c55a8baaaf58ceb3f101ea4682e2d0f6bcb919a53ea02342150d495da5a61be003865dd01a6a9b59999af3010a6c322896dede461c2e028a67437d217dbc5178264e319edff7e95d43e3a739e32a248a985c261a7cb6c77e65faff198eb82668e5a14858df987847bf134e61b135f91938a3374882484f17268bca0651fc8d8f53e7106ae8186ef4cee99dd26800d7daf43e856cd8697ecac0d954e716cda1679c57a9093c53659344d5ef19785e24bd2986421766985fd5cf2e84baf966af5ab69b25dfefde0cd3eaf7f2ed3c7ae15b9e0ff6bbe1f8317a470de051f51690687802ba7a8a5cb88c4f983f0399fee80d5b1aa515a1915b6b10e7f6e3a974af5c70c668454158dfd2a9587827218e1f06ce15c696818af5e372c0ea8842e271cd91177bacaee030a586e7520787495b446502802a2f3a63524f57f814da3c2225b734f819acf6aa72b699d6e7b8223de6757ef4b2954a5fe435416761f5ca8d54df5554aacd110d37736adf18e70ac728b97b7db1e56d0e8471d53b83b5c80fdd7e66d5b3e9bbc6d56914c1c03d5c9bdaadd4cd522611f997e4c672b815e1ebc4cf3d17600342a795c55e36f1ec5bcf0973c084024b276ff17c7f8b6c9b82757c12642eda6a4e76df49a085bfcdc1cac5d649712bbaf094aba8593335fbe53b2bcd89ff2b26fd200ac4af80c7413468abf7db8f386237947417d466d40d3ce0352cd364e530c2c43506886de962cd31d571ccc4dd20edb7d587ff0d59c74829ef222974702f7dc6b8740e6769fc9c7a939250ba6615d6c9c157c8e82c69db50a8d650e078844f2a012f2027e83eb4615dff1044defc4aea159c8d12061c77f802410029a30b63fe50e52088ea43c5c0490ef8fb924af0532244bcc784bf03ebcaae164c971c81c6a71f65d746efe8f0a5bc5dacf1e2ec462d19e6353f7d8ed4c129df72ac4a0f6e3d7a8bff55e23a6b8320f5589316cac10d8fc477c4aa12c3b5abbc18639bc36e2e05cae03ca1949bae1f49acb122b9659c6a14a7d6bc5a501dace6b45a4429e56394452b9c36d2c0306a53f6d894a5c8e0e318979794e29c0402a1e4cb8cc8cbd84906edde3232fa09bc6eebca7e8f9893638b43674f1127e87097acb3bb2dc1a1cc7aec4ad4a9a3c7ff18e4566861f80ec554605d808c05f3954dcb45c2cd62185996cc812b51e9abc37b658109dfbb3ae82604d15cee10d12368568637dc1c946e15b533953b7ec6180797ab2d00477111d0a9caccb59351618aa5a9737a96da0a96c34ece1b4750cd2e407bd280d316ff1779b183120ea8dab57659e78c5ffdc7efceed62ba754a401d9207f7aaf3a47fe1edf4206f8f4ad9759f25a5230134776edc5fcf713b7d31286dfdd0a948e004414e9604b0721a14f5fd966de98eceb02cd4e4325835fef17939da6b3dc0c92907fd417d21968f6d81b3f91b3b3b8d3e1a0a83f264eb10c487a330f2fbb94758d4728860a7ae0c6eeb495519f46fe134e84a102819d7fe31e2c267a44fd869fa00b0e73010d57051fe440b54896bbcbe461ca192e838fdcf24852e7d574179ecbf6adabe0b87157f28609643ce15c1c3550f679e", @nested={0x1271, 0x130, 0x0, 0x1, [@nested={0x121c, 0x150, 0x0, 0x1, [@nested={0x8, 0x13f, 0x0, 0x1, [@nested={0x4, 0xf1}]}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0xb5, 0x0, 0x0, @str='\x98%&\x00'}, @generic="42bce78f50917e93048138fe62171151d4cabda70ba790b51935081c3b35c12d3ecb924a54aaf38cf45de78e955dbee53a910b9de65b1a39070883924374b834307bbffbad741fa28779281d1b61638e7a57ae0eebb42b47ca8b18a02b2a76b8c965b15f827867029bc6e01b60e760090cf4eb876aa0f835356fa2aa3d55cc6e8705b7096eb7cee6a42cc947393831dcb94771f75cc6a712e8e11b68026900e5d26aa16d16f37142f700d59ac44f70f08e997ee50dbdaebca2533031c9a7b57b4d32a2f863c9a4", @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}, @generic="ca18867a5c6b5be27668252e1e17e233d0921ead1cd22ced87179b2808dd0aa75723b725e189ca1acfb6fc97b075c8241fe8", @generic="3dc03cc9a62947c89f0fb2f5e3b7381fac30f3fbdbf798fedca2629dfdaf9fb7edb0665236010ad76f587f4cc98cabc6208133185b36bb2c8d74e84ae90316c6af6bbb14c875df52d60aaa29e4888500fd0bb5462bc0a94b9288302556508e7b8213636638199858af47f079fbee5a19ee72f7e4bc5d9cf421a937cd56a8cfbb8842ab6879da85e9a709229075f56e1704849f5011e83bbda063e3ed6a320ec2e62bab2eddb7c9bf0e77b5a2820f1497f34e170c18f0e93f1b845ecf13954dc873ff86ba11f8800c2bf60bdfb69cdc211bbffd1c726f77b0fb860349878e59c9c687a0435fcae054361537da153354fcc5f870116665bb9a7e612036ee1c797ca170d3ba4c0008300bc240b12d4d168fffc8be2b2fb82c1af5527044206b12f192673cb3897b9226fe85ca967e6256b874521cc26bbf6920ce87ff3a2920dd94ebb931592d7c981a0f6ec46cf268e4de086b534b655af473565842a88cfb99d7d5c8c85c52d3505e64c8904d608b11bbba4da5aebae20c254c0d2f7f0f59ac3f54807e95ca1877d5fc2a2dc911cb6004eb0302a715eefa2770213240abd758fc915b33ad3bc61382872b7c831895a9c78b4cdd0bb0551fcc5bd558d002696f1da3e73a9e76b8e91e748a27090c6862bb5079b78f28c9c667b057bf5318eeceb9db6231f47839168998dda26c4bf08e3e9c30280d59523b224b36ead19f64a4458a5f76551f2413773cd191510095d2f5cad413cc1e16a5788b19678b53b6875f38b26a4f4bc655d8c7271d89cb9ac77e4c75dea4d9b799a90932555cb42c7f29e562da335e93c7462a76df23f14e01675f0588e755c42d0de2338ead5a9714219e4535fa74ad229382094d2560c51b4607c9c3a454ead22d00c6668efd0042ff6c209fdcafc4ba7c7dcb5af90bbb1fcdc18799d9cb86440449e57416cc27911070a718ca1cf541d0321b4a16c831d8560846a25e6de511a60ab851d2d3a7102bdaefb2152548aece144b4e53bf5d835e8f9acbf7fb13ad0bc8ac587eb1dc24eafefbe13169aeb26e70d3e735488605d23e7ab342ddb3f6b6ec7cca0c9f59b37469485f05c523124a9a00d86de0b3fc9793a26b8f4508632ffc9aa0a5e74d5e45f4508f24c49f23d06e97f91d2730d8a21f35ceddbec277505ecb70a41724638e05edb83d6eba0ccfbf400c6b900828442255744199192e46a74aadcd406bcba3d732c0d5e85ef539d023e4bcfa702714ea5c7064b2a0c817e6f34e6d9172b6adad437d4c1fe611d0b2cb5ce4f053b9b75288e30b9c18e588037d068319e9500a86f2e0c65563a153730e51667fb1059a7bc3f27d241069972874c3d6116208ae1ed1a3f431be43756f9b06b25ee563cb78809d6df8326dfadc43ca5eac6c9cd8df0d30960f73e8aa35f676694911e00fee00a2f71f63d5228fa313930da183972e7128ef08f1357ee269ffe3a148203ec047530f5be4ef6d1ff3d1dbd650d19f7ece41e2482f27d8b923a4ad0d4909aebeabdfb8ed8b06d3272eea110bf6eab405502a4717d54b102e0038bb95a56300bf2efb1290aadc5806a911abd0354db3a399ab9365ad906a17399cad6312609678eaffdeec8dd6805237ae387382d05fc655acbc2b0878903e037c190858f103228be85603b9901b02072811106f7d9e1a2cbc419e645e0fffe2a1f7d21b50af0f0fda368b8371838702bbacfe93d3a4dfb0bd662a46a4eba1769a249c2da80f77e175f7df04eb443cd52903b3a1e5d0eb185d4c32b2aeebc6363cd61acc395e5f78e7fc1c5478328faa0c4291db2250b706cabfed6034083dd9b9dcc4e5f88bded0cf96d419984036343bd38bb273fb2d735c795809b303b96e4691385aae613a4ac53df5f63af08412a15589323308aaa0dd4966a0f977a70e64339811c8282fb89207fa0d8c388cf80cd815481acd481e34c035a3f47758de16f25fcccce1550f28f09cc9dc8d05b8df83fbc25855e6070fc37d0f5e45184b55d6694b24f09495336b7ea359d75cafa8933d6be7f6f0dbc957100f894f5b0e72b91a39b4a0f48e6e555acdaa065aacb0e1639dbf27e2d0e4c39481bc42a76cbeb61d25a7be0150157007f25e8bdeefe32b9752da5553f42e95def1d49e1099ba1a576c583758cf23f964173bb268ccb956bf6ad6c051403f3c60bea8eb41e1108bf497769d14a984efd056f85c7c01b0cb3ecd93165d81c50154188f07db3ce69ab9ee7dec7ccae155abc5048f4684cdf3fdd5328e6f6ae1d5b0dda06fe6fb7ceb676a4122084c98fcad3cc2881abaa271d41ba9f69a57a89bf8308c6ea18cdcae203687db149c2e8fa42411146a2abaed42306b4bb096f1701fc3a296b0a965edcc05701701c6c0fd4f83e38574035d61cc54002a40bedd4a40cab387d7946b3d39a16ca624ebed5901ed678ff96dba42ee68ec58399f22d302eb38c140f75a14f4c4333712e1aed1516b010f7956a43139ed856e14ad0c417880829d8e5b08eb848855fde13b4b314e6e0cd7a538aacb8ad40b72641510c25ec3273a9409c48b710f19e6cf2c77cbc0d1422feefc8e0f1ec83c564ed110ae3574419ad217264cf8e7dd0bf8d278a505405ccbdd04409a3b9ebe6904da1713075ab0cbc5835ae7bf373392075666fe2928103019f23d0dc689bbf829d30c855de1440062d3966756cda787c769ee7db59070c2a2dd5f67619432b44e711586995727ca83b1bbf247f191a69675d3e66759b327a852ffee1f000d1bb7de10269d48fb8a94d836f572957d2fe2d3c6d858cc024080e46c8086546eb4c558ac23fcf664c06e0f5f190fbb4a41676190be9dde783d791f7a55d64c191a3f21a52ce0afb11a5acf2c0e7d5ddd1a0447198be4d157de4c37ee46576b7f46d8aa925b41d7be68e518f2c5043e740001d26a6a8f08ca82e745eb28283037fbb6b3ef0c4c7c13e99bacb3ab35c6863da6644217a194002089b642bd9fd33d300026685797dade6c65981e970693d6173828d47c2b430c19987ed9195195f784d34693c7bcd11451112a7e32a53d27cfa2adc2dcdb563dc102139ed534eae404088d6b429544974cff89771956df80ae7f2fc6c04b9ee76e4e50a4b9c87a7f0010774a84c407c99a22243d6658612216684fdbbd6360d1154536490b101b8c17878b6ebe08e43ba3cc5c938db60d2f8250f3e851480d0acfeb28fca2497a07fad859d2b0823f7529e7de0d465b47631be1ff1ef4b0c435261db830f9627d871ed9e192595598582f73b77428e8c412a332c6049449a867b7d5a05be12df096ae9f23a66d55c7c90b794159dfec5c6749dd648541784e8c8d3f40deec99ba359aebb3a6ba9724318f7b92a2c746f5d01e6c4b58b6c6a3b184a50f63a96c12063a2c49ea323f527ea1225c094a296b7bc6b04b125398fe00024e9f399dfae19376a1b25bf8511cf010d8286097bc12f6dcd781327183f11075513f23b2b7144984889643ce1afc69acf2a93864f0fb0d8656777573acd437e28c5f3204ef135a4be974d4389ea76133e9db9da0d8b7a353817508234e79a7de812cc4f421e8c27ef3667982a96fd88e80a61b4493db219d6fac3f390a36661d7be7cd2c4768621bf9f126bc3dab4fcafe54ada38fdfac6af19fb9ea2657d8d813e038fb7c5678d7fcdeea018aad69d5c735b96a9d7732fe1030e2434cce05432bf3972f2b0577a76b829065f12a69e75c6c4e5b4a77d43ae2043e8a8cef037ec66ad9fa33c53ba9c9ffa7998e840b979d98d567e7e113080d97b37a3a0ad565e60d84327b6167327aa0585fd0ace79caf014b6e64801e39dae3cafd8d513d79c71be6ff6af943f6033fd8c94b625e750d70d62a468d2c82ac5c126e112715012bccc289fae87fe1cde93e3145c125490d0b92d84116e3fcf9ac50b08edc69634687b1d28bbcbcabe1edb89d68e6c5a767f8451ad4a19741adba26c52090de27de2560e3bf13dc3115b9300441d3d08842b94d258d697eca6ad4ae891c0ec09401485fbdbe1bf734f6605dc2cf61fba435a76eef08abd9c9cbe42f320e957c54fec4d803e5a4710b57e2e06483c1f7ed22383af2768f2058a68977402a2650869f8d66b1d8d295ad1c745d9322e41e77363a92c1be45686d70cd93f042f53ce137f97902587e8fb22bb305094204154ea640ed718fe3ab4496ffe1d1ae5c3a27dc8deee429991b09ec809e6121bfe0b80c6ae32cf43a17af415cf69e6dfce704857119433d4cc858cb978e52c18fc8385e3417ecf576ae302de03dd73045c373e946a88cb9d48c84af55a5a1cc7fed418ba71f6de48299932d135e3b8f785c17e78baafd2e1d2620d8f18841c28a3cd1d0168951dfcd9933a98a2dddd879b65de875bd3c39e7b5683f3f0d4d317d42a9709ee93875616f78a9fe84ac3c77407cd1f99b8fd7ca29cd2f4567d9a2e723fdfb1a096bdf0642e0b7971cea9ae9df73d4ef64815ad9aa1a49cd45b4ec79f04fda4c30f591853d874cd65e84ebfabd32576e350e18371d654c5ace1e9eabcb0317f16316798b7c9fe30ef751d8484840423d701876068a16c72765d2fb174397942be8395bfdd4fd0d2b0b2a51243da622e66516f12fe4e1afe9f584237993849d5ad900245054d5ef7f12c95d96f4af46e367924e5ca829d0853f0d8418e1737534b50c0dd80e6768795232f20af9b55d72a6896627789dd305ddaa9deeee6a87beb6f08a5a9fd37ceb609a69d88b689d92a084395fae671de8bc729efec3c3687a4dfe531ce4ae158ff09c299ae18931217174f5320d5065619cec93021ea775161370316f0cd787560a8769800e02225bfdc87ebb38579ae79b5ebe6b71222c2115f2ebd9a415eff85662c3ac0ef1973a0aee1088b934e8aa992ee6e79ff3d9c65d3ebaf100e84a7c8cddb41b00c9c8eff549bbeb96d382c3727a13cf356a787c2fe7a7975f30a03f688ff84c9ee224fadcc10cf1abf0716bbe2e0f709b74e1b5a7245b5a9d54ae42d9387a5f5bcb7e165c317eb3038089f58854cd72e59bef3354f775f9a03f29b156ee6abf3fbe006419dea628e2fae706db74f1d3c2051f409e9ac47ed7baf9c9a44ba685f273dba001f43d53b36a6b0b3e212a3110ea9cb47f95fae88fdb475ac0edb86272ac0a100706d3dfa19304ba31bc1b16dc6d30508f56f68ec53a64c49d2c65f01905331f13428d588fe4c91098cd11a652de19acacdd9618eee2e2c8c473d774c85997ea5e4fd9a042e355fc4587e005567f9080727f50800163326c57d5a5266470ed75563508e4be2f2db1552ec5d718fbe3d15bd450fdcc4d6b9fae0d64f3430a5addfe8ac051b2a9fee6f45409e99b792f54ef6e474a78f7c6d0f0aa29cca2f3e217c3bf5b79c0eaaf7d6177e4456372bce22dd6bdfb52e68e8146609c15b227d95f4ccbfeff0f68668e845206ae56d4e9e99e75dc7a26f025f3302c992f79e5eb855790caa95f86a3ef4ec8c43a098fcdb4a025449229a3e97dd49bb81fe057cd0446cef2a31160618768440599d5e7e1c01d14dfe146090c56ed24c714cb3adfd6daf67e6f2b9940426e3b1a535aa0c4ea109e9d2d2b0ccf29aa01a59d0eef71ba30e63c44800ccb9f3a63729b3830d4e5e8b16bbd4f587245996e22c18e88a002f567b15ed167c4cf59ead8c3ced98700e587a415bc46863838beafd3da3a57e19ada8f8854663506fd6c78d5156f2c6fcfe9646467a1a15448b70118db32b3394300f6017e60a25ffed692c8c07cba40557eb15c610a663b5b1593e40f2c62b12be9c153cfd5", @generic="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"]}, @generic="a567474826a21cf1ba7f3c3ceda2f2c32d2a1fc41ea1ada6c4cafd8102372600b765e46f0eb91e9472a3d2a1fb8adaf6ea645abdb64b6ac09d", @typed={0xc, 0xc0, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x16}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0x19b, 0xce, 0x0, 0x1, [@generic="517306195edd642683e9da7b3a55285ce07ce9a5b784c515cac4dc48cb51b6dfb496b61996ccddea3ff3612abf123811141dfc55ce551a9c6c0e7e90daf5dbbe066b793784e4e53c069089b26daf269ce6baf0403fc448d6d8b11c6a4fd555ddb0832eed3b9eb4f012f64830", @generic="9e9c0cb81543846af3df26dc61784c06bd5e78c67633194a9b00a4358f7e1f7fc543261f862ab9d3e3e02821037f10e0d5ba326d3bde736e61b487e25495836f74ee7e14ca8799072eb0a4863869283cf85da576b6937610a5cb4fc0660f10400e8b26e320d5bde216ee9eb2670ca96ed298e54e321b28e87e7b64acd251dcb58ec1b7aa0c0918d3f8920a52ad507fbe8d0a518d9d30e4ed1ace6be1b1df9784d2ce0be8515a7b6f6b1e2edd7efa1c421d7d4f0b347f2c24ebbaeec511c03a2e15ae25d1334bbe3adbbbe83c412e0061ce16c490166ac352b109", @generic="4106cac0f15ea17729fe1ec0a7445053dc74ac681a085180aec07741f213eca9a96adfd9cf156f3fb2c242e4e20db0908860f262ff44bbc4832ecdc00cd395be96619717e67850c4a815dcb13f", @nested={0x4, 0x60}]}, @nested={0x169, 0xc5, 0x0, 0x1, [@generic="6a0a03f99cdf0bc95c4155ed4933fa06294aaffa9d727eb947fbbf38a396eb69f8547bbb8719ba0164fa8b7fbd8a4a51840f6235aa3fe3576de784e3133ae02e74d53719a3feb7a09a7544a0e2b8e07bc8aeb6bf98c3908c55e4777f75f3efc09b564f7960bea10cdd3cb9", @generic="28c99f9cc53c0dd61329b64301e873d75e8fcb7753340d01b3350b02ff2dca786a61bbc6c87fc45a513aa3860a889f4d0b1bbf8e2baa31", @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xa7, 0x0, 0x0, @pid}, @generic="63ea06eae276d714cdd2d9577f25ad21b8f2111b60c5856bab571c381815d76df3b6b5494863448b65b2f4efef6548a25403948371d0e07d1b10d7a3c42207e12316541936a812fbea5e8f8b2210af1c868faa62a6eee1a49bfb3c558725179c63c06502d663a5e8a5b2f531b8beb2ae58e81f2fc5973309218d9964cf207742cbe9a549d384809016502311736366550eaa6a8e95dc105e16c7418d80aca77e7a766f7d573b2b"]}, @generic="8d705841437c35ddcc194b037005755a58381abc29", @typed={0x8, 0x57, 0x0, 0x0, @pid=r5}]}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x800}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x57, 0xbb, "c258cdebefa20d7377de55273d3c07916005b38d2ff56ace6a8b58a09ecfdc27df73743c10eaa1df69344835de4c8c142fbc2bf612ad4255ca87dcb0eae65472a8c96aa54dc424530382b061f46f0746fc5084"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x7}]}, 0x2950}, 0x1, 0x0, 0x0, 0x4002}, 0x4) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0x1) mmap$auto(0xf22, 0x6, 0xfd5, 0x9d, 0xffffffffffffffff, 0x0) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/ht40allow_map\x00', 0x20000, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) getpid() close_range$auto(0x2, 0x8000, 0x0) set_mempolicy$auto(0x2, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 24m50.953703736s ago: executing program 3 (id=97): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x6, 0x3000, 0x6, 0xb, 0x400a, 0xffffffffffffffff, [0x3], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x6}, {0x100, 0xfffffffd, 0x5, 0x85, 0x2, 0x1a7b874a, 0x76c9, 0x5, 0x100000000}}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r4, 0x4008bc0d, 0x0) getgroups$auto(0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffeffff, 0xc, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x4, 0x6]}, 0x0) r5 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)="d7ed17cdf0e8a27a47eb7fe301d875ce901c37295f26bc34e8dfabfdd9b3153119fa677b93dc12cd7922a6b6df08ff9679297ca2d889bd51c4a4f3af315a6ee85e1ff7c8f225d95bdc9b321a93e547d837bb25a606263fcc1b887348866fba4d09053cd9ac3ef8bd83e0a2219152b1514b39f8ee2107c166a5ca308743e342ef3f61350538e9dd41eb958ea7d7036e63ae7069bfaeef8f0a95aab3fdc91d6be8479e5de386b34f96fcd0c08e8f95f05584f60e869c73d9588a0866afaee93b925faa841acea10286d9fcf874724d583e3b0bf27358959c10ce64b887c425ada2cac82d1af83653a2937b0bd041ed67a0da1f37964a472d1b") syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r5) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) 24m50.046715455s ago: executing program 3 (id=100): io_submit$auto(0x9, 0x1, &(0x7f0000000140)=&(0x7f0000000100)={0x4, 0x8, 0x7, 0xa, 0x9, 0xffffffffffffffff, 0x4, 0x7fffffffffffffff, 0x20000, 0x0, 0xfffffffe}) write$auto_lowpan_control_fops_6lowpan(r0, &(0x7f0000000180)="a34d735af9dc1e05a635d89fe236f91b67f3b0647c21461b1dd423aa6b7887adfe566c7265e11b84a089249723d8b397833ef55cf924063928e814960bd88a67cc44789459b37e043e274f6ad43f39777954957d2ad7048b9da708c99f8c46477dade8d437d5872f3e89e29f1a8045a288e7", 0x72) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r2, 0x0, 0x200005) waitid$auto_P_ALL(0x0, 0x5, 0x0, 0x8, 0x0) 24m49.711128542s ago: executing program 3 (id=102): mkdir$auto(0x0, 0x8001) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r0 = socket(0x10, 0x2, 0xcfe) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r0, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000040)="9f13b2fa0bd84f959b6dcb732dbc9e02f2eb299d802cf0ba1f88295f04e3427f752ce7", 0x0, 0x0, 0x3, 0x0, 0xeff, 0x4}, 0xc8ea}, 0x6, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r2, &(0x7f0000000300)='7\x02\\\xa0\x04|\a\xcb\x12\xfa\x83\n\x18\xe4H\xba\x881Z\xba\xf8\xb7\xf3\b\x13\bk', 0x8081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r3) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2525000000200001800800dab4759f04000300000014000200877e653000000000000000000000000092f2d6294891399724ec6d7dc9fe72b9ea9fc29ef6dc58c192e2ac01df4fefd28a252a5f9856248888fc3f1dd1928df7992b80864fe28984e1ad1b6cca30dc64b019b95d2e98f4904d73c2be48f79d524665e42edfc1e71656ff3c7908e6ecb0f659bbde5bb2da7045c950719ffa876b88283d18c1f0d87b0ce4037e7b8ae0a43226454d4add9cfe25db562a8732366a91eb77f86d1e6036f54f804c92"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) r5 = socket(0x1e, 0x5, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r5) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="00012abd7000fddbdf25150000003400018014000200626174616476300000000000000000001400020067656e6576650800000000000000000008000100", @ANYRES32=r1, @ANYBLOB="08000600c600000020000180140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000600a2a70000080006000300000078000180080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300050000001400020069703667726530000000000000000000cffe0100", @ANYRES32=r1, @ANYBLOB="08000300050000001400020070696d36726567310000000000000000080003000700000014000200726f73653000000000000000000000000800030009000000"], 0xf8}, 0x1, 0x0, 0x0, 0x404c801}, 0x200080d4) ioctl$auto(r5, 0x8941, 0x8) 24m49.084322642s ago: executing program 3 (id=106): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) mlockall$auto(0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mem\x00', 0x0, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x1) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x161342, 0x13d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r4, 0x0, 0x0) write$auto(0x3, 0x0, 0x100085) 24m47.640079663s ago: executing program 3 (id=111): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram3\x00', 0x14040, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = fcntl$auto(0x0, 0x407, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x11100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x80) read$auto_ftrace_system_enable_fops_trace_events(r1, &(0x7f0000000000)=""/53, 0x6f) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r3, 0x0, 0x1000) write$auto(0x3, 0x0, 0x5c8) 24m32.309959536s ago: executing program 32 (id=111): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram3\x00', 0x14040, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = fcntl$auto(0x0, 0x407, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x11100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x80) read$auto_ftrace_system_enable_fops_trace_events(r1, &(0x7f0000000000)=""/53, 0x6f) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r3, 0x0, 0x1000) write$auto(0x3, 0x0, 0x5c8) 22m18.005894689s ago: executing program 0 (id=554): mmap$auto(0x0, 0x6, 0x5dca, 0x200000018, 0xffffffffffffffff, 0x6) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x404b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="72010000", @ANYRES32=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x4004014) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x20040014}, 0x2404c014) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x86e, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x9, 0x400000004) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000800) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x26e100, 0x0) read$auto(r6, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec", @ANYRESHEX=r7], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 22m16.969720415s ago: executing program 0 (id=558): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sigaltstack$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000010c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8840) close_range$auto(0x2, 0x8, 0x0) 22m15.750497111s ago: executing program 0 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) bpf$auto(0x48, &(0x7f00000001c0)=@bpf_attr_1={r0, 0x3, @next_key=0x3}, 0x11) settimeofday$auto(&(0x7f0000000180)={0xfffffffd, 0x100000000001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0x477, 0x0, 0x0, 0x0, 0x0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x1) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 22m14.069423951s ago: executing program 0 (id=571): socket(0x28, 0x1, 0x0) mmap$auto(0x6e55, 0x20009, 0x240000, 0x200000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd07, &(0x7f00000001c0)) io_uring_enter$auto(r0, 0xe, 0x2a, 0x7, &(0x7f0000000000)="83331d635d4fc0750463faef3a3760b6e39902e55e9124383b68e0d48b28757b5aa47c5d", 0x3) r1 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/stations/08:02:11:00:00:01/rx_fragments\x00', 0x480102, 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)=@test={r1, 0x4, 0x4, 0x2, 0x8, 0x4, 0x2, 0x0, 0xd, 0x1000000, 0x5, 0x1, 0x6, 0x85, 0x5}, 0x10009) openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404041, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x8, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x9, 0x8, 0x10007, 0x7d, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x8140aecc, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x121102, 0x0) write$auto(r4, &(0x7f0000000080)='[#FQ:\x00', 0x83) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 22m13.484012272s ago: executing program 0 (id=574): membarrier$auto_MEMBARRIER_CMD_GLOBAL_EXPEDITED(0x2, 0x0, 0xfff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x3ff) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x6, 0xa, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(r0, 0x0, 0x6f) connect$auto(r0, 0x0, 0x55) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x3, 0x1) socket(0xa, 0x2, 0x88) 22m12.521007393s ago: executing program 0 (id=577): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) timer_settime$auto(0x0, 0x2, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x2000000003}}, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(r0, 0x0, 0x81) 21m57.184276765s ago: executing program 33 (id=577): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) timer_settime$auto(0x0, 0x2, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x2000000003}}, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(r0, 0x0, 0x81) 7m55.916365579s ago: executing program 1 (id=3657): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xf0, 0x1, 0xfd5, 0x12, r0, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(0x0, 0xffffffffffffffff) gettid() open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) 7m55.237898778s ago: executing program 1 (id=3662): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getresuid$auto(&(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x380, 0x0) r1 = fsmount$auto(0xffffffffffffffff, 0xfffffff8, 0x10) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) prctl$auto(0x23, 0x1, 0x1000000000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xce8a, &(0x7f0000000000)={[0xfff, 0xa6, 0x6, 0x4, 0x7, 0x4, 0x4, 0x5, 0x101, 0x0, 0x1e, 0x0, 0x8000000000000001, 0x1, 0x6, 0xffffffff]}, &(0x7f0000000080)={[0x9, 0x2000, 0xa30, 0x4f7e, 0x2729, 0x7, 0x1000, 0x7ff, 0x16d26827, 0xfb01, 0x10005, 0x1, 0x9, 0x5, 0x4eaf, 0xffffffffffffffff]}, &(0x7f0000000100)={[0x7, 0x2, 0xd6, 0x3, 0x5, 0xb23, 0x10000, 0x4, 0x0, 0x6, 0x7f, 0xfffffffffffffffe, 0x9, 0x6, 0x8000000000000001, 0xe096]}, &(0x7f00000001c0)={0x0, 0x2}) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) socket(0x3, 0x1, 0x2) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) write$auto(r0, &(0x7f0000000040), 0x9) 7m54.752803903s ago: executing program 1 (id=3664): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) r1 = socket(0xa, 0x3, 0x5) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) pwrite64$auto(r0, &(0x7f0000000480)='/dev/vcsa\x00\x84\xbd\xe3\xa8\xaf\xd0E>IY\x1cPw+\x85\xdf\xa2\xfd\xf1\x80\xc6\xde>KC\x931\xf7vvjlm\xae\xf8\xc3\xa8\xbe\xdc9|\xfe}\xaf\x9e\'\xef\x84\xa8\xd3eX\x8f\x00q\xca\xfe\xa8<\'~\xec\x0f\xc9\x91\x86\x19\x97}\xba\x1f\x1a\xf8\x15\x8a?\xe0\xeb\xfaOS\x11\x964\xd58\xf9q\xdc\xce\t\f\xa3\xc7\x84j\x15\x81\x16\xbb\x8d\xa9\x04\xc4\x03W(\xbc\x03N\x95\xb8\x1b&,\xeb\x94\xc2p}u#\xd22[\xfe@\xfa`\x8c\xa8&\xb3\xbe\x12R\xd1V\xd0\xd4\xb1\x8b\xf3\x86\xd2\xba\r\x8a~]\\wg=\raRc\xb8\xf0\x9e\xc7D\xde\xa6;\x7f\x90\xf8\xf3\xc8f\xa1\n\x8b\xd6\xd5\xc6-\xf6X\x8cS\x10\x98)D\xb7\xf2\b\xfa\xad\xa43\x9dI9d\x152\x96\xd7\x9f\x9e\t^\x827\xfe\xb1!Z\x12\xf9\x1e\x9b\xef\xd5\xb7\x17\x8f\xc8]\x9f\x1b\xfa\xd3\xf6\xc9\x9e\x1fl6\x02*\xe1iD\xa7\x1f\x8a\xaf\x919\x8ee\xb4\x13\x05\xf1\x04>\r\x80*j&\x9de\v\xfd\x9b\xd0\xb8y\xa2\xa7\x85\x87*\x00\xea\xe1c\xda\x11\xbcF\xc5\xe0T\x9c\xe9\xd2\xc9\xea\f\x9bt\x18\xc5\xa0o\xae\x91X\t\x8a\x91', 0x7b05, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x101, 0x3) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r3, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 7m53.50676797s ago: executing program 1 (id=3669): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x3) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x101000, 0x0) r1 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0x10}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "0fb0bf36f9765e7dc5e796824ca1932f31cf0619887633e7"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x0, 0x94, "dd6ec3ec1886d002934c5ed1d6fa9b84340345f97bac1ef2a052"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) close_range$auto(0x2, r2, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x8, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/threaded\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xfbP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x921\a2\xa2X`\a\xf1y\xb3\"=', 0x40) 7m52.024372287s ago: executing program 1 (id=3675): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x10000000000008, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c110002", @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf2520000000080005000a00000005001a000e00000008000d003e500000"], 0x2c}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250400ff0f00000000000034e6de69a1509e3e2906366733"], 0x2c}, 0x1, 0x0, 0x0, 0x64048058}, 0x4000810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) io_setup$auto(0x7ffe, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x80000002, &(0x7f00000000c0)={&(0x7f00000001c0)="cb61beae96905197a2aa0816cc4ebbfb717ea30b0d09e9a8599c5f04deac6714ee6b6873a41737bcfdd5081edbcc038d66635a12be2bdbf28fe9e7b6604bd7322a302da0e699f93b60224d12b972cc242626e70c6db5595656beb3", 0x4}, 0x2, &(0x7f0000000240)="6293d87a46e21de3ed83b97e74f3647665987c1fffef9e9535bcb90a9aba67dc88aeb0728fc13f", 0x5, 0x2}, 0x5}, 0xfffffffe, 0x689) io_setup$auto(0x1, 0x0) r4 = socket(0x0, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, r3, 0x7f) recvmmsg$auto(r4, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f00000004c0)="ebe0d540ef48", 0x6) semctl$auto(0x0, 0xe3, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 7m40.628528981s ago: executing program 1 (id=3715): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) read$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000003dc0)=""/167, 0xa7) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(0xc8, 0x400454d4, 0xe) 7m39.753459492s ago: executing program 34 (id=3715): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) read$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000003dc0)=""/167, 0xa7) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(0xc8, 0x400454d4, 0xe) 6.462605484s ago: executing program 4 (id=5159): rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x9, 0x6, 0xffffffff, 0x2}, 0xfffd, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffb) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb0050000) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns(0xffffffffffffffff, 0x60020000) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) 5.570485535s ago: executing program 2 (id=5163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="60120000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080081000700000000000400058008002600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3], 0x1260}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) 5.554911853s ago: executing program 4 (id=5164): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7073000000001400980108000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) 5.114749674s ago: executing program 2 (id=5166): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0xfffffffffffff000) syz_genetlink_get_family_id$auto_nlbl_calipso(0x0, 0xffffffffffffffff) gettid() open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) 5.096980284s ago: executing program 4 (id=5167): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) (async) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r2, 0x4008556c, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r4 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r4, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) getsockopt$auto(r3, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0xd, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_enter$auto(0x3, 0x5, 0xfffffffb, 0x3, 0x0, 0x2) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) 4.796492705s ago: executing program 6 (id=5169): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec20\x00', 0x0, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"843beb0e", 0x3, 0xc, 0x1, 0x7, 0x80, "8a59a63dfcdca4ecf6b9088a298c78", "23dad012", "93d4aed0", "7452fd4d", ["9cbbce59de4024a3fa4f1395", "b35c043db74bbd971c8aac05", "63ec3f6be923d2300e933075", "68d896fe2d986a435429293d"]}) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x30000, 0x0) close_range$auto(r0, r0, 0x0) 4.348034528s ago: executing program 6 (id=5172): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_SETFD(r0, 0x2, 0x100) r1 = io_uring_setup$auto(0xb, 0x0) socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video53\x00', 0x161002, 0x0) ioctl$auto(r2, 0xc0845658, r2) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000000c0), r1) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1fc, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xe, 0x4, "85ce34543cb55dfd8f38"}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACINFO={0x31, 0x7, 0x0, 0x1, [@generic="b0236057b0d831491e0f55a7b26ffbe98bae982be715c53824ab595d7edabea93bb36dc21658304964136db511"]}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0xb9, 0x4, "b4a1a64d2cbfaefb531c6b0cfa6cc7d73605cb1ba0cb8c76394ddb3b0c27a9b36e47813cbf00825c663340e5c8d916596f71402e6ee9afa945c1a5ea7f3804368fd4be47ffae56d6d01746554169aac5bf8c2c0ee0a323056dadb078a44dc2d03758763aa7aa778e58ffe3c3bb398ff0b71b981c7ba90f9494cd9db48c88293cc9d33709c2802bc9341f349189cf1e813b221b50cc0b09eefe12898cd9976310dfa2b7a3862a30e113612ec7c33f640dbf2239d11d"}, @SEG6_ATTR_SECRET={0xc9, 0x4, "bda8cc6ddc2685274078f4b5f51e83b46e6ad0e746b3667ae39173ac2c78183b108d7e32fe8d7046b546d238c6ea17ad5f55b6af72ea8171b2a72c4a1788e40f9afa2e96fa37629560ca00c20ae5e313096bacac9220cfd6f2e10135ca6a8e7fcfd680ea0907d6ebd6956463fbafa78626a28a4ba96dc61579396e1ed88c6f2077b343e4d22689a2a67b5d06dd0d125c4ec3fc6be881727fcee6678adaa1127c78c9924288f4741c771cd711a1b89cd405041a10a8d62b24d239d89b37d2e9d9d66bc98bdf"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x15}, 0x40000) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) open(0x0, 0x22240, 0x155) uname$auto(0x0) r4 = socket(0x2, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x2, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x64, 0x0, 0x1d) 4.158055458s ago: executing program 4 (id=5174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c0001006970366772653000"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 3.935953111s ago: executing program 2 (id=5175): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xfff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x10001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0xa, 0x801, 0x106) pipe2$auto(0x0, 0x4800) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) select$auto(0x434, &(0x7f0000000040)={[0x1, 0x5, 0xffffffffffffff7a, 0x2, 0x4, 0xfffffffffffffff2, 0x6, 0x10001, 0x2, 0x401, 0x5, 0x1, 0x5, 0x2, 0x1, 0x7ff]}, &(0x7f00000000c0)={[0x5, 0x8, 0x7f, 0x5, 0x8, 0x3, 0x81, 0x2, 0x3331, 0x4a2c, 0x8, 0x39b7, 0x8, 0x5, 0xfffffffffffffffb, 0x1c600000]}, &(0x7f0000000140)={[0x1, 0x9, 0x5c2, 0x4000000000000000, 0xffffffff, 0xfffffffffffffff7, 0x1, 0x4, 0xfffffffffffffffd, 0xee9, 0x46ae9b64, 0x10000, 0xc857, 0xb, 0x7, 0x3]}, &(0x7f00000001c0)={0x8, 0x4}) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000100)) 3.795849706s ago: executing program 4 (id=5176): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7073000000001400000708000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) 3.261435681s ago: executing program 5 (id=5179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x10, 0x9, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='$!.}\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) 3.173302503s ago: executing program 5 (id=5180): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xc1, 0x400, 0x9}]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, 0x0) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) r3 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000200)=""/36, 0x24) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000380)=@bpf_attr_4={0x6, 0xffffffffffffffff, 0x200, r0}, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 3.0724588s ago: executing program 2 (id=5181): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8568cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000001900000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296", 0x2e) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 3.027806047s ago: executing program 4 (id=5182): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, &(0x7f0000000080)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc) ioctl$auto_MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) r2 = set_tid_address$auto(&(0x7f0000000140)=0x8) r3 = gettid() kill$auto(r3, 0x11) (async) kill$auto(r3, 0x11) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r5 = epoll_create$auto(0x8800001) epoll_ctl$auto(r5, 0x4, r4, 0x0) syz_clone3(&(0x7f0000000300)={0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3b}, &(0x7f00000001c0)=""/90, 0x5a, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=[0x0, r2, r3], 0x3, {r5}}, 0x58) (async) syz_clone3(&(0x7f0000000300)={0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3b}, &(0x7f00000001c0)=""/90, 0x5a, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=[0x0, r2, r3], 0x3, {r5}}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) sendmmsg$auto(0x3, 0x0, 0x2, 0xe1) ioctl$auto(r6, 0x2203, r6) read$auto(r1, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x151101, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x151101, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, &(0x7f0000000500)='*#\x00', 0x7f, 0x437bd615) 2.985686473s ago: executing program 6 (id=5183): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80, 0x0) fstat$auto(0x2, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 2.426427239s ago: executing program 5 (id=5184): socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55) r0 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x2042, 0x0) socket(0x2, 0x80002, 0x73) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0x123041, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x7) migrate_pages$auto(0x0, 0x7e6, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(r6, 0x10000) sendfile$auto(0xffffffffffffffff, r6, 0x0, 0x8) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x8000000000009b7f, 0x2, 0x8000) 2.137872215s ago: executing program 6 (id=5186): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_FIBMAP(0xffffffffffffffff, 0x1, 0x7f) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) sysfs$auto(0x2, 0x1f, 0x0) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r1, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) 1.930300173s ago: executing program 5 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x2300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x14bb00, 0x0) mmap$auto(0x0, 0x40009, 0xfffffffffffffffa, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r4, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/ahci/bind\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) 1.57557239s ago: executing program 2 (id=5188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x10, 0x9, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='$!.}\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) 859.577945ms ago: executing program 5 (id=5189): mmap$auto(0x3, 0x4020009, 0xbe, 0x210, 0x401, 0x8000) (async) mmap$auto(0x8000, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 64) close_range$auto(r0, 0x8, 0x0) (async) brk$auto(0xffffffffffffff66) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) (async, rerun: 32) msgctl$auto_IPC_RMID(0xfffffaff, 0x0, &(0x7f0000000300)={{0x7, 0xee01, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x100}, &(0x7f00000001c0)=0xd, &(0x7f0000000280)=0x1, 0x8001, 0x7, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, @inferred=0xffffffffffffffff}) (rerun: 32) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000380)={"6cb7cd649d57b93a516b7e2bcf4f8857113d869d7423f7879486d95907418f77", 0x5, 0x2, 0x8, 0x8000000000000001, 0x66e, 0xffffffffffffffff}) (async, rerun: 32) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000500)={0x0}}, 0xc000) (async, rerun: 32) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) (async, rerun: 64) mlockall$auto(0x7) (async, rerun: 64) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) (async) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r0, @ANYRES32=r3], 0x14}}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x8, 0x5, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, &(0x7f0000000400)="af90897da8efca7c3f9faab54ff73d5da18c5f1e035861f25e22796906cc7b01adad1d72529b9f22b4c80e5a9a8af6415c52650f6df19caacd2d266ade1c1748c500cb4e327aa7eadf189de648fe4d12b57167ad65eba50c28") (async) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r6, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf250300000084011c80800105805800008054000480040001803c000180280001800c00120003000000000000000c001200040000000000000004000b800800030009000000100001800c000e000d000000000000000c000400090000000000000004000500200100802600010030c511ec7df4dcee3201b4fafb1d8721300bedec252c688ba75d49e26d7421b22ce80000ba000100851088047bfb7f4c47587b5f1c8c0433dff157dc61c93e987c05982548d291015cc7c14a79f4919736cf2117a8136b18af9976d95aed7bb5c52ccc81d4e303eb9f90a630171557d6536efb7c28fbd97314b8092838dd9873f4c2a84ec61a741d59b65784f4f51dba326ec64987db8593cea1f74f5a9456752813d6c272d64f71f2bc8252d303cfa435acd6c5bc158e209264d7c7e96e67500913d5a2909e548de98449b5893d9b9cfc62b0fc8c517213e1723e9a745d00003700010075d76f7e0a94bb50602a1f400d0cf729ec35d9f72fe1b7751827248c9c378b9ca64cf3b172e289025d820bb77e79c10f1e53310004000080"], 0x198}, 0x1, 0x0, 0x0, 0x40015}, 0x24001094) 857.9654ms ago: executing program 2 (id=5190): acct$auto(&(0x7f00000003c0)='/dev/usbmon38\x00') (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) (async, rerun: 32) keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x8000000e) (async, rerun: 32) r2 = epoll_create1$auto(0x1) lseek$auto(r2, 0xffffffffff800002, 0xe) (async) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404050}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25100000001b012e805804863e0782330d9e0f1f1ea674ba2d1c3e48193a1661af4751807a7a650a351464188013944aee9c2a0590db369c25654473c09133df8fcf526396de271cf28b972eda94e5654fbf5d55997140343d97e1f5a0f1691bb3c83e7d2fc93051afac0acd8e2a4585ebd9bea05228344d972995bdcbca69f0b15462d6aa6702ef3f9a7f5a5524ef4a30389e6e77e646dc66a73fa92f730feeac9f26529c4bf76b88eed9d91cd0af3442e3d29fa5b4704765516f04f42f0673a403575aa201e06f980444e7c981a03b8cf1182916b918cb4dab9308ac50ee8aeaa451a40cd2b459bdbb698b3dc8c959933d2203240003801400f100fc0100000000000000000000000000000800ad00000000000400dc8008003300", @ANYRES32=r0, @ANYBLOB="8055defc50c40cc58f45e88e458cbbc2ec31c8d67b7774c6605ea0d07cec0360663b7382b35e59b8b9c6d9098b5c205b9785701138f9e227d4334dfa6f427178c0207bdaa69da93cc40e0389816ee640fca9ed0578bbf7ffed12c75746d46da80d043cd176056cfb08801825227e4f7ac312a1877257bb732f97335aef9853429e25f81e69d2c12aaf12"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x68800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async) unshare$auto(0x40000080) (async) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000090}, 0x2000) (async) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r4, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), 0xffffffffffffffff) (async) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10002, 0x0) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0x0) 786.235315ms ago: executing program 6 (id=5191): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7073000000001400003f08000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) 0s ago: executing program 6 (id=5192): r0 = open(&(0x7f0000000000)='./file0\x00', 0x668342, 0x100) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000040)={"8d6a6db7f707a2a4440130a84c3b55bc1c845590eb6def5a875a023737ba1c81", 0x7f, 0x254a, 0x6, 0xfffffffffff00000, 0x4, 0x0}) fcntl$auto(r0, 0x401, r1) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x1ff, 0x7b42, 0x3, 0xfff, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(r3, 0xab07, 0xffffffffffffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x8, 0x46) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r5, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400ffff", @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r6, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): read+0x1ac/0x250 [ 1495.499964][T24473] ? __pfx_ksys_read+0x10/0x10 [ 1495.500003][T24473] do_syscall_64+0xcd/0xfa0 [ 1495.500041][T24473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.500066][T24473] RIP: 0033:0x7f4cce38f7c9 [ 1495.500085][T24473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.500109][T24473] RSP: 002b:00007f4ccf2800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1495.500132][T24473] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa8 RCX: 00007f4cce38f7c9 [ 1495.500148][T24473] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cce5e5fac [ 1495.500163][T24473] RBP: 00007f4cce5e5fa0 R08: 00007f4ccf281000 R09: 0000000000000000 [ 1495.500179][T24473] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1495.500194][T24473] R13: 00007f4cce5e6038 R14: 00007fff5cdc0aa0 R15: 00007fff5cdc0b88 [ 1495.500225][T24473] [ 1495.995776][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.012455][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.451824][T24471] Process accounting resumed [ 1499.063174][T24473] kexec: Could not allocate control_code_buffer [ 1499.589072][T24509] input: 00 [ 1499.589072][T24509] as /devices/virtual/input/input152 [ 1499.805667][T24011] Bluetooth: hci2: Malformed LE Event: 0x1d [ 1499.990384][T24519] FAULT_INJECTION: forcing a failure. [ 1499.990384][T24519] name failslab, interval 1, probability 393216, space 0, times 0 [ 1500.005622][T24519] CPU: 0 UID: 0 PID: 24519 Comm: syz.5.4724 Tainted: G U syzkaller #0 PREEMPT(full) [ 1500.005668][T24519] Tainted: [U]=USER [ 1500.005677][T24519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1500.005691][T24519] Call Trace: [ 1500.005700][T24519] [ 1500.005709][T24519] dump_stack_lvl+0x16c/0x1f0 [ 1500.005739][T24519] should_fail_ex+0x512/0x640 [ 1500.005768][T24519] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1500.005800][T24519] should_failslab+0xc2/0x120 [ 1500.005837][T24519] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1500.005870][T24519] ? __kernfs_new_node+0xd2/0x8e0 [ 1500.005914][T24519] ? __kernfs_new_node+0xd2/0x8e0 [ 1500.005952][T24519] __kernfs_new_node+0xd2/0x8e0 [ 1500.005993][T24519] ? __pfx___kernfs_new_node+0x10/0x10 [ 1500.006040][T24519] ? find_held_lock+0x2b/0x80 [ 1500.006069][T24519] ? kernfs_root+0xee/0x2a0 [ 1500.006096][T24519] kernfs_new_node+0x13c/0x1e0 [ 1500.006127][T24519] __kernfs_create_file+0x53/0x350 [ 1500.006163][T24519] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1500.006207][T24519] internal_create_group+0x578/0xf30 [ 1500.006237][T24519] ? __pfx_internal_create_group+0x10/0x10 [ 1500.006266][T24519] ? kernfs_create_link+0x1bd/0x240 [ 1500.006303][T24519] internal_create_groups+0x9d/0x150 [ 1500.006329][T24519] device_add+0xf30/0x1aa0 [ 1500.006362][T24519] ? __pfx_device_add+0x10/0x10 [ 1500.006391][T24519] ? lockdep_init_map_type+0x5c/0x280 [ 1500.006429][T24519] ? __init_waitqueue_head+0xca/0x150 [ 1500.006460][T24519] netdev_register_kobject+0x1a9/0x3d0 [ 1500.006488][T24519] register_netdevice+0x13dc/0x2270 [ 1500.006530][T24519] ? __pfx_register_netdevice+0x10/0x10 [ 1500.006574][T24519] ? __pfx_loopback_net_init+0x10/0x10 [ 1500.006612][T24519] register_netdev+0x34/0x50 [ 1500.006647][T24519] loopback_net_init+0x7a/0x170 [ 1500.006692][T24519] ? __pfx_loopback_net_init+0x10/0x10 [ 1500.006728][T24519] ops_init+0x1e2/0x5f0 [ 1500.006765][T24519] setup_net+0x11d/0x3a0 [ 1500.006800][T24519] ? __pfx_setup_net+0x10/0x10 [ 1500.006836][T24519] ? debug_mutex_init+0x37/0x70 [ 1500.006866][T24519] copy_net_ns+0x351/0x5d0 [ 1500.006906][T24519] create_new_namespaces+0x3ea/0xab0 [ 1500.006941][T24519] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1500.006971][T24519] ksys_unshare+0x45b/0xa40 [ 1500.007003][T24519] ? __pfx_ksys_unshare+0x10/0x10 [ 1500.007036][T24519] ? xfd_validate_state+0x61/0x180 [ 1500.007079][T24519] __x64_sys_unshare+0x31/0x40 [ 1500.007110][T24519] do_syscall_64+0xcd/0xfa0 [ 1500.007137][T24519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.007161][T24519] RIP: 0033:0x7f4cce38f7c9 [ 1500.007181][T24519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.007204][T24519] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1500.007227][T24519] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1500.007244][T24519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1500.007258][T24519] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1500.007273][T24519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1500.007287][T24519] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1500.007319][T24519] [ 1501.837971][T24538] FAULT_INJECTION: forcing a failure. [ 1501.837971][T24538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1501.938478][T24538] CPU: 0 UID: 0 PID: 24538 Comm: syz.6.4728 Tainted: G U syzkaller #0 PREEMPT(full) [ 1501.938518][T24538] Tainted: [U]=USER [ 1501.938526][T24538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1501.938541][T24538] Call Trace: [ 1501.938548][T24538] [ 1501.938558][T24538] dump_stack_lvl+0x16c/0x1f0 [ 1501.938588][T24538] should_fail_ex+0x512/0x640 [ 1501.938621][T24538] should_fail_alloc_page+0xe7/0x130 [ 1501.938661][T24538] prepare_alloc_pages+0x3c2/0x610 [ 1501.938698][T24538] ? smp_call_function_many_cond+0x457/0x1600 [ 1501.938733][T24538] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1501.938763][T24538] ? avic_vcpu_unblocking+0xe/0x160 [ 1501.938787][T24538] ? avic_vcpu_unblocking+0xe/0x160 [ 1501.938811][T24538] ? avic_vcpu_unblocking+0xe/0x160 [ 1501.938835][T24538] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1501.938873][T24538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1501.938903][T24538] ? __pfx___text_poke+0x10/0x10 [ 1501.938931][T24538] ? find_held_lock+0x2b/0x80 [ 1501.938964][T24538] ? static_key_slow_inc_cpuslocked+0x101/0x150 [ 1501.938995][T24538] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1501.939020][T24538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1501.939050][T24538] ? policy_nodemask+0xea/0x4e0 [ 1501.939090][T24538] alloc_pages_mpol+0x1fb/0x550 [ 1501.939129][T24538] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1501.939175][T24538] alloc_pages_noprof+0x131/0x390 [ 1501.939214][T24538] kvm_arch_vcpu_create+0x2a7/0xb20 [ 1501.939237][T24538] ? lockdep_init_map_type+0x5c/0x280 [ 1501.939280][T24538] kvm_vm_ioctl+0xfec/0x3fd0 [ 1501.939316][T24538] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1501.939360][T24538] ? kasan_quarantine_put+0x10a/0x240 [ 1501.939392][T24538] ? lockdep_hardirqs_on+0x7c/0x110 [ 1501.939420][T24538] ? find_held_lock+0x2b/0x80 [ 1501.939449][T24538] ? tomoyo_path_number_perm+0x295/0x580 [ 1501.939492][T24538] ? tomoyo_path_number_perm+0x18d/0x580 [ 1501.939526][T24538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1501.939568][T24538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1501.939596][T24538] ? do_vfs_ioctl+0x128/0x14f0 [ 1501.939621][T24538] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1501.939653][T24538] ? find_held_lock+0x2b/0x80 [ 1501.939679][T24538] ? hook_file_ioctl_common+0x145/0x410 [ 1501.939720][T24538] ? __fget_files+0x20e/0x3c0 [ 1501.939753][T24538] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1501.939780][T24538] __x64_sys_ioctl+0x18e/0x210 [ 1501.939806][T24538] do_syscall_64+0xcd/0xfa0 [ 1501.939832][T24538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.939856][T24538] RIP: 0033:0x7f2b7bf8f7c9 [ 1501.939875][T24538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.939900][T24538] RSP: 002b:00007f2b7a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1501.939923][T24538] RAX: ffffffffffffffda RBX: 00007f2b7c1e5fa0 RCX: 00007f2b7bf8f7c9 [ 1501.939939][T24538] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1501.939954][T24538] RBP: 00007f2b7c013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1501.939968][T24538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1501.939983][T24538] R13: 00007f2b7c1e6038 R14: 00007f2b7c1e5fa0 R15: 00007fff1b5c04a8 [ 1501.940014][T24538] [ 1502.328448][T24543] netlink: 266 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1502.337634][T24543] IPv6: NLM_F_CREATE should be specified when creating new route [ 1502.557331][T24550] FAULT_INJECTION: forcing a failure. [ 1502.557331][T24550] name failslab, interval 1, probability 393216, space 0, times 0 [ 1502.570979][T24550] CPU: 0 UID: 0 PID: 24550 Comm: syz.5.4731 Tainted: G U syzkaller #0 PREEMPT(full) [ 1502.571015][T24550] Tainted: [U]=USER [ 1502.571023][T24550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1502.571038][T24550] Call Trace: [ 1502.571046][T24550] [ 1502.571054][T24550] dump_stack_lvl+0x16c/0x1f0 [ 1502.571083][T24550] should_fail_ex+0x512/0x640 [ 1502.571110][T24550] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1502.571145][T24550] should_failslab+0xc2/0x120 [ 1502.571180][T24550] __kvmalloc_node_noprof+0x141/0x9c0 [ 1502.571213][T24550] ? __v4l2_subdev_state_alloc+0x1ac/0x400 [ 1502.571251][T24550] ? __v4l2_subdev_state_alloc+0x1ac/0x400 [ 1502.571280][T24550] __v4l2_subdev_state_alloc+0x1ac/0x400 [ 1502.571313][T24550] subdev_open+0xa6/0x540 [ 1502.571343][T24550] v4l2_open+0x1d2/0x5e0 [ 1502.571377][T24550] ? __pfx_v4l2_open+0x10/0x10 [ 1502.571410][T24550] chrdev_open+0x234/0x6a0 [ 1502.571449][T24550] ? __pfx_apparmor_file_open+0x10/0x10 [ 1502.571478][T24550] ? __pfx_chrdev_open+0x10/0x10 [ 1502.571512][T24550] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1502.571550][T24550] do_dentry_open+0x6fe/0x1560 [ 1502.571581][T24550] ? __pfx_chrdev_open+0x10/0x10 [ 1502.571620][T24550] vfs_open+0x82/0x3f0 [ 1502.571645][T24550] path_openat+0x2016/0x2f90 [ 1502.571683][T24550] ? kasan_save_stack+0x42/0x60 [ 1502.571715][T24550] ? __pfx_path_openat+0x10/0x10 [ 1502.571742][T24550] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1502.571768][T24550] ? getname_flags.part.0+0x4c/0x550 [ 1502.571788][T24550] ? getname_flags+0x93/0xf0 [ 1502.571813][T24550] ? acct_on+0x82/0xa00 [ 1502.571833][T24550] ? __x64_sys_acct+0x81/0x1e0 [ 1502.571854][T24550] ? do_syscall_64+0xcd/0xfa0 [ 1502.571877][T24550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.571906][T24550] do_filp_open+0x20b/0x470 [ 1502.571936][T24550] ? __pfx_do_filp_open+0x10/0x10 [ 1502.571989][T24550] ? find_held_lock+0x2b/0x80 [ 1502.572016][T24550] ? __might_fault+0xe3/0x190 [ 1502.572043][T24550] ? __might_fault+0xe3/0x190 [ 1502.572068][T24550] ? __might_fault+0x13b/0x190 [ 1502.572101][T24550] file_open_name+0x2a3/0x450 [ 1502.572125][T24550] ? __pfx_file_open_name+0x10/0x10 [ 1502.572152][T24550] ? getname_flags.part.0+0x1c5/0x550 [ 1502.572180][T24550] acct_on+0xc7/0xa00 [ 1502.572204][T24550] ? __pfx_acct_on+0x10/0x10 [ 1502.572228][T24550] ? bpf_lsm_capable+0x9/0x10 [ 1502.572270][T24550] __x64_sys_acct+0x81/0x1e0 [ 1502.572293][T24550] ? lockdep_hardirqs_on+0x7c/0x110 [ 1502.572317][T24550] do_syscall_64+0xcd/0xfa0 [ 1502.572343][T24550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.572367][T24550] RIP: 0033:0x7f4cce38f7c9 [ 1502.572387][T24550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.572410][T24550] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1502.572437][T24550] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1502.572453][T24550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1502.572468][T24550] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1502.572483][T24550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1502.572497][T24550] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1502.572529][T24550] [ 1503.065303][T24559] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input153 [ 1503.419399][T24555] Process accounting resumed [ 1504.557812][T24584] FAULT_INJECTION: forcing a failure. [ 1504.557812][T24584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1504.777934][T24584] CPU: 0 UID: 0 PID: 24584 Comm: syz.6.4741 Tainted: G U syzkaller #0 PREEMPT(full) [ 1504.777974][T24584] Tainted: [U]=USER [ 1504.777983][T24584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1504.777998][T24584] Call Trace: [ 1504.778005][T24584] [ 1504.778014][T24584] dump_stack_lvl+0x16c/0x1f0 [ 1504.778043][T24584] should_fail_ex+0x512/0x640 [ 1504.778077][T24584] should_fail_alloc_page+0xe7/0x130 [ 1504.778117][T24584] prepare_alloc_pages+0x3c2/0x610 [ 1504.778153][T24584] ? smp_call_function_many_cond+0x457/0x1600 [ 1504.778188][T24584] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1504.778218][T24584] ? avic_vcpu_unblocking+0xe/0x160 [ 1504.778243][T24584] ? avic_vcpu_unblocking+0xe/0x160 [ 1504.778275][T24584] ? avic_vcpu_unblocking+0xe/0x160 [ 1504.778299][T24584] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1504.778337][T24584] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1504.778367][T24584] ? __pfx___text_poke+0x10/0x10 [ 1504.778391][T24584] ? find_held_lock+0x2b/0x80 [ 1504.778424][T24584] ? static_key_slow_inc_cpuslocked+0x101/0x150 [ 1504.778455][T24584] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1504.778481][T24584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1504.778510][T24584] ? policy_nodemask+0xea/0x4e0 [ 1504.778550][T24584] alloc_pages_mpol+0x1fb/0x550 [ 1504.778589][T24584] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1504.778634][T24584] alloc_pages_noprof+0x131/0x390 [ 1504.778674][T24584] kvm_arch_vcpu_create+0x2a7/0xb20 [ 1504.778698][T24584] ? lockdep_init_map_type+0x5c/0x280 [ 1504.778740][T24584] kvm_vm_ioctl+0xfec/0x3fd0 [ 1504.778778][T24584] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1504.778822][T24584] ? kasan_quarantine_put+0x10a/0x240 [ 1504.778854][T24584] ? lockdep_hardirqs_on+0x7c/0x110 [ 1504.778882][T24584] ? find_held_lock+0x2b/0x80 [ 1504.778911][T24584] ? tomoyo_path_number_perm+0x295/0x580 [ 1504.778948][T24584] ? tomoyo_path_number_perm+0x18d/0x580 [ 1504.778982][T24584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1504.779025][T24584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1504.779054][T24584] ? do_vfs_ioctl+0x128/0x14f0 [ 1504.779078][T24584] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1504.779112][T24584] ? find_held_lock+0x2b/0x80 [ 1504.779139][T24584] ? hook_file_ioctl_common+0x145/0x410 [ 1504.779179][T24584] ? __fget_files+0x20e/0x3c0 [ 1504.779213][T24584] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1504.779239][T24584] __x64_sys_ioctl+0x18e/0x210 [ 1504.779271][T24584] do_syscall_64+0xcd/0xfa0 [ 1504.779298][T24584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.779323][T24584] RIP: 0033:0x7f2b7bf8f7c9 [ 1504.779342][T24584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1504.779367][T24584] RSP: 002b:00007f2b7a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.779390][T24584] RAX: ffffffffffffffda RBX: 00007f2b7c1e5fa0 RCX: 00007f2b7bf8f7c9 [ 1504.779406][T24584] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1504.779421][T24584] RBP: 00007f2b7c013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1504.779436][T24584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.779450][T24584] R13: 00007f2b7c1e6038 R14: 00007f2b7c1e5fa0 R15: 00007fff1b5c04a8 [ 1504.779481][T24584] [ 1505.102273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.296152][ T30] audit: type=1804 audit(4294967301.760:139): pid=24615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4750" name="/newroot/486/file0" dev="tmpfs" ino=2562 res=1 errno=0 [ 1507.905326][ T30] audit: type=1804 audit(4294967302.370:140): pid=24616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4749" name="/newroot/561/file0" dev="tmpfs" ino=2969 res=1 errno=0 [ 1508.214934][ T30] audit: type=1800 audit(4294967302.460:141): pid=24616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4749" name="file0" dev="tmpfs" ino=2969 res=0 errno=0 [ 1509.104278][T24639] FAULT_INJECTION: forcing a failure. [ 1509.104278][T24639] name failslab, interval 1, probability 393216, space 0, times 0 [ 1509.127516][T24635] syz.6.4754: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1509.151476][T24639] CPU: 0 UID: 0 PID: 24639 Comm: syz.5.4755 Tainted: G U syzkaller #0 PREEMPT(full) [ 1509.151513][T24639] Tainted: [U]=USER [ 1509.151521][T24639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1509.151536][T24639] Call Trace: [ 1509.151544][T24639] [ 1509.151553][T24639] dump_stack_lvl+0x16c/0x1f0 [ 1509.151582][T24639] should_fail_ex+0x512/0x640 [ 1509.151611][T24639] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1509.151642][T24639] should_failslab+0xc2/0x120 [ 1509.151680][T24639] __kmalloc_cache_noprof+0x72/0x780 [ 1509.151708][T24639] ? kvm_arch_vcpu_create+0x375/0xb20 [ 1509.151738][T24639] ? kvm_arch_vcpu_create+0x375/0xb20 [ 1509.151761][T24639] kvm_arch_vcpu_create+0x375/0xb20 [ 1509.151791][T24639] kvm_vm_ioctl+0xfec/0x3fd0 [ 1509.151828][T24639] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1509.151872][T24639] ? kasan_quarantine_put+0x10a/0x240 [ 1509.151904][T24639] ? lockdep_hardirqs_on+0x7c/0x110 [ 1509.151932][T24639] ? find_held_lock+0x2b/0x80 [ 1509.151961][T24639] ? tomoyo_path_number_perm+0x295/0x580 [ 1509.151998][T24639] ? tomoyo_path_number_perm+0x18d/0x580 [ 1509.152042][T24639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1509.152072][T24639] ? futex_wake+0x1ad/0x530 [ 1509.152105][T24639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1509.152135][T24639] ? do_vfs_ioctl+0x128/0x14f0 [ 1509.152159][T24639] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1509.152192][T24639] ? find_held_lock+0x2b/0x80 [ 1509.152219][T24639] ? hook_file_ioctl_common+0x145/0x410 [ 1509.152261][T24639] ? __fget_files+0x20e/0x3c0 [ 1509.152295][T24639] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1509.152323][T24639] __x64_sys_ioctl+0x18e/0x210 [ 1509.152349][T24639] do_syscall_64+0xcd/0xfa0 [ 1509.152376][T24639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.152400][T24639] RIP: 0033:0x7f4cce38f7c9 [ 1509.152420][T24639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.152444][T24639] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.152466][T24639] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1509.152482][T24639] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1509.152496][T24639] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1509.152511][T24639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.152525][T24639] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1509.152557][T24639] [ 1509.665384][T24635] CPU: 0 UID: 0 PID: 24635 Comm: syz.6.4754 Tainted: G U syzkaller #0 PREEMPT(full) [ 1509.665425][T24635] Tainted: [U]=USER [ 1509.665433][T24635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1509.665449][T24635] Call Trace: [ 1509.665457][T24635] [ 1509.665466][T24635] dump_stack_lvl+0x16c/0x1f0 [ 1509.665496][T24635] warn_alloc+0x248/0x3a0 [ 1509.665528][T24635] ? __pfx_warn_alloc+0x10/0x10 [ 1509.665558][T24635] ? alloc_pages_mpol+0x25a/0x550 [ 1509.665598][T24635] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1509.665634][T24635] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 1509.665663][T24635] ? __kmalloc_node_noprof+0x364/0x8a0 [ 1509.665697][T24635] ? __get_vm_area_node+0x208/0x330 [ 1509.665742][T24635] __vmalloc_node_range_noprof+0x119b/0x1480 [ 1509.665792][T24635] ? kernel_clone+0xfc/0x930 [ 1509.665829][T24635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1509.665877][T24635] ? rcu_is_watching+0x12/0xc0 [ 1509.665909][T24635] ? kernel_clone+0xfc/0x930 [ 1509.665937][T24635] __vmalloc_node_noprof+0xad/0xf0 [ 1509.665977][T24635] ? kernel_clone+0xfc/0x930 [ 1509.666009][T24635] copy_process+0x2c7f/0x76b0 [ 1509.666051][T24635] ? __pfx_copy_process+0x10/0x10 [ 1509.666089][T24635] ? _copy_from_user+0x59/0xd0 [ 1509.666125][T24635] kernel_clone+0xfc/0x930 [ 1509.666157][T24635] ? __pfx_kernel_clone+0x10/0x10 [ 1509.666193][T24635] ? futex_private_hash_put+0xd5/0x190 [ 1509.666233][T24635] ? __pfx_futex_wait+0x10/0x10 [ 1509.666266][T24635] __do_sys_clone3+0x212/0x290 [ 1509.666296][T24635] ? __pfx___do_sys_clone3+0x10/0x10 [ 1509.666364][T24635] do_syscall_64+0xcd/0xfa0 [ 1509.666391][T24635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.666417][T24635] RIP: 0033:0x7f2b7bf8f7c9 [ 1509.666436][T24635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.666460][T24635] RSP: 002b:00007f2b7a1f5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1509.666483][T24635] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2b7bf8f7c9 [ 1509.666499][T24635] RDX: 00007f2b7a1f5f20 RSI: 0000000000000058 RDI: 00007f2b7a1f5f20 [ 1509.666515][T24635] RBP: 00007f2b7c013f91 R08: 0000000000000000 R09: 0000000000000058 [ 1509.666530][T24635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.666545][T24635] R13: 00007f2b7c1e6038 R14: 00007f2b7c1e5fa0 R15: 00007fff1b5c04a8 [ 1509.666576][T24635] [ 1509.666585][T24635] Mem-Info: [ 1511.510393][T24653] FAULT_INJECTION: forcing a failure. [ 1511.510393][T24653] name failslab, interval 1, probability 393216, space 0, times 0 [ 1511.635788][T24653] CPU: 0 UID: 0 PID: 24653 Comm: syz.2.4760 Tainted: G U syzkaller #0 PREEMPT(full) [ 1511.635827][T24653] Tainted: [U]=USER [ 1511.635836][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.635850][T24653] Call Trace: [ 1511.635858][T24653] [ 1511.635868][T24653] dump_stack_lvl+0x16c/0x1f0 [ 1511.635898][T24653] should_fail_ex+0x512/0x640 [ 1511.635927][T24653] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1511.635957][T24653] should_failslab+0xc2/0x120 [ 1511.636002][T24653] __kmalloc_cache_noprof+0x72/0x780 [ 1511.636030][T24653] ? snd_card_file_add+0x52/0x340 [ 1511.636061][T24653] ? snd_card_file_add+0x52/0x340 [ 1511.636086][T24653] snd_card_file_add+0x52/0x340 [ 1511.636115][T24653] snd_rawmidi_open+0x2cc/0xbf0 [ 1511.636152][T24653] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1511.636188][T24653] ? kobject_get_unless_zero+0x156/0x1e0 [ 1511.636220][T24653] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1511.636249][T24653] snd_open+0x22d/0x4c0 [ 1511.636271][T24653] ? __pfx_snd_open+0x10/0x10 [ 1511.636291][T24653] chrdev_open+0x234/0x6a0 [ 1511.636324][T24653] ? __pfx_apparmor_file_open+0x10/0x10 [ 1511.636353][T24653] ? __pfx_chrdev_open+0x10/0x10 [ 1511.636388][T24653] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1511.636427][T24653] do_dentry_open+0x6fe/0x1560 [ 1511.636458][T24653] ? __pfx_chrdev_open+0x10/0x10 [ 1511.636499][T24653] vfs_open+0x82/0x3f0 [ 1511.636524][T24653] path_openat+0x2016/0x2f90 [ 1511.636565][T24653] ? __pfx_path_openat+0x10/0x10 [ 1511.636598][T24653] ? __lock_acquire+0xb8a/0x1c90 [ 1511.636639][T24653] do_filp_open+0x20b/0x470 [ 1511.636670][T24653] ? __pfx_do_filp_open+0x10/0x10 [ 1511.636723][T24653] ? alloc_fd+0x471/0x7d0 [ 1511.636760][T24653] do_sys_openat2+0x11b/0x1d0 [ 1511.636782][T24653] ? __pfx_do_sys_openat2+0x10/0x10 [ 1511.636807][T24653] ? find_held_lock+0x2b/0x80 [ 1511.636842][T24653] __x64_sys_openat+0x174/0x210 [ 1511.636866][T24653] ? __pfx___x64_sys_openat+0x10/0x10 [ 1511.636902][T24653] do_syscall_64+0xcd/0xfa0 [ 1511.636929][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.636953][T24653] RIP: 0033:0x7fc2d418f7c9 [ 1511.636979][T24653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1511.637003][T24653] RSP: 002b:00007fc2d503c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1511.637026][T24653] RAX: ffffffffffffffda RBX: 00007fc2d43e5fa0 RCX: 00007fc2d418f7c9 [ 1511.637042][T24653] RDX: 0000000000103000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1511.637057][T24653] RBP: 00007fc2d4213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1511.637072][T24653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.637087][T24653] R13: 00007fc2d43e6038 R14: 00007fc2d43e5fa0 R15: 00007ffca6ab5178 [ 1511.637119][T24653] [ 1511.975766][T24635] active_anon:15066 inactive_anon:60 isolated_anon:0 [ 1511.975766][T24635] active_file:10801 inactive_file:44938 isolated_file:0 [ 1511.975766][T24635] unevictable:768 dirty:229 writeback:0 [ 1511.975766][T24635] slab_reclaimable:14358 slab_unreclaimable:104049 [ 1511.975766][T24635] mapped:25566 shmem:1358 pagetables:1302 [ 1511.975766][T24635] sec_pagetables:0 bounce:0 [ 1511.975766][T24635] kernel_misc_reclaimable:0 [ 1511.975766][T24635] free:1262338 free_pcp:53732 free_cma:0 [ 1512.022419][T24635] Node 0 active_anon:60264kB inactive_anon:240kB active_file:43204kB inactive_file:179520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102160kB dirty:916kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:12208kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1512.055936][T24635] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1512.086634][T24635] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.116776][T24635] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1512.122876][T24635] Node 0 DMA32 free:1184124kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60264kB inactive_anon:240kB active_file:43204kB inactive_file:179520kB unevictable:1536kB writepending:916kB zspages:1040kB present:3129332kB managed:2544924kB mlocked:0kB bounce:0kB free_pcp:152188kB local_pcp:152188kB free_cma:0kB [ 1512.157768][T24635] lowmem_reserve[]: 0 0 1 1 1 [ 1512.162964][T24635] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.193016][T24635] lowmem_reserve[]: 0 0 0 0 0 [ 1512.198400][T24635] Node 1 Normal free:3849856kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62740kB local_pcp:62740kB free_cma:0kB [ 1512.330685][T24635] lowmem_reserve[]: 0 0 0 0 0 [ 1512.353482][T24635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1512.386078][T24635] Node 0 DMA32: 2232*4kB (UM) 1609*8kB (UME) 1188*16kB (UME) 1041*32kB (UM) 832*64kB (UM) 535*128kB (UME) 296*256kB (UME) 177*512kB (UME) 129*1024kB (UME) 31*2048kB (UM) 155*4096kB (UM) = 1192712kB [ 1512.429001][T24635] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1512.510008][T24635] Node 1 Normal: 2*4kB (ME) 3*8kB (ME) 2*16kB (M) 4*32kB (UM) 3*64kB (UM) 4*128kB (UME) 3*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 937*4096kB (UM) = 3849856kB [ 1512.567438][T24665] FAULT_INJECTION: forcing a failure. [ 1512.567438][T24665] name failslab, interval 1, probability 393216, space 0, times 0 [ 1512.590029][T24663] FAULT_INJECTION: forcing a failure. [ 1512.590029][T24663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.603513][T24635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1512.613433][T24665] CPU: 0 UID: 0 PID: 24665 Comm: syz.4.4765 Tainted: G U syzkaller #0 PREEMPT(full) [ 1512.613469][T24665] Tainted: [U]=USER [ 1512.613477][T24665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1512.613492][T24665] Call Trace: [ 1512.613500][T24665] [ 1512.613509][T24665] dump_stack_lvl+0x16c/0x1f0 [ 1512.613538][T24665] should_fail_ex+0x512/0x640 [ 1512.613565][T24665] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1512.613594][T24665] should_failslab+0xc2/0x120 [ 1512.613629][T24665] __kmalloc_cache_noprof+0x72/0x780 [ 1512.613655][T24665] ? sctp_auth_shkey_create+0x9e/0x210 [ 1512.613690][T24665] ? sctp_auth_shkey_create+0x9e/0x210 [ 1512.613713][T24665] sctp_auth_shkey_create+0x9e/0x210 [ 1512.613740][T24665] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 1512.613771][T24665] sctp_association_new+0x19ad/0x2a00 [ 1512.613809][T24665] sctp_connect_new_asoc+0x1a8/0x770 [ 1512.613842][T24665] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1512.613873][T24665] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1512.613904][T24665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1512.613933][T24665] sctp_sendmsg+0x1557/0x1e00 [ 1512.613971][T24665] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1512.613998][T24665] ? __pfx___might_resched+0x10/0x10 [ 1512.614031][T24665] ? aa_sk_perm+0x2f4/0xb10 [ 1512.614066][T24665] ? __pfx_aa_sk_perm+0x10/0x10 [ 1512.614105][T24665] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1512.614135][T24665] inet_sendmsg+0x11c/0x140 [ 1512.614166][T24665] ____sys_sendmsg+0x973/0xc70 [ 1512.614191][T24665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.614218][T24665] ? __pfx__kstrtoull+0x10/0x10 [ 1512.614259][T24665] ___sys_sendmsg+0x134/0x1d0 [ 1512.614292][T24665] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.614337][T24665] ? find_held_lock+0x2b/0x80 [ 1512.614381][T24665] __sys_sendmmsg+0x200/0x420 [ 1512.614416][T24665] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1512.614457][T24665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1512.614495][T24665] ? fput+0x9b/0xd0 [ 1512.614529][T24665] ? ksys_write+0x1ac/0x250 [ 1512.614558][T24665] ? __pfx_ksys_write+0x10/0x10 [ 1512.614592][T24665] __x64_sys_sendmmsg+0x9c/0x100 [ 1512.614623][T24665] ? lockdep_hardirqs_on+0x7c/0x110 [ 1512.614646][T24665] do_syscall_64+0xcd/0xfa0 [ 1512.614677][T24665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.614701][T24665] RIP: 0033:0x7f8d6038f7c9 [ 1512.614719][T24665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.614743][T24665] RSP: 002b:00007f8d611db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1512.614766][T24665] RAX: ffffffffffffffda RBX: 00007f8d605e5fa0 RCX: 00007f8d6038f7c9 [ 1512.614782][T24665] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 1512.614796][T24665] RBP: 00007f8d611db090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.614811][T24665] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000001 [ 1512.614825][T24665] R13: 00007f8d605e6038 R14: 00007f8d605e5fa0 R15: 00007fff4e7ea5b8 [ 1512.614857][T24665] [ 1512.911255][T24635] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1512.921979][T24635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1512.931681][T24635] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1512.941272][T24635] 57154 total pagecache pages [ 1512.946187][T24635] 63 pages in swap cache [ 1512.950847][T24635] Free swap = 123656kB [ 1512.955333][T24635] Total swap = 124996kB [ 1512.959572][T24635] 2097051 pages RAM [ 1512.963432][T24635] 0 pages HighMem/MovableOnly [ 1512.968341][T24635] 428730 pages reserved [ 1512.973035][T24635] 0 pages cma reserved [ 1513.102258][T24663] CPU: 0 UID: 0 PID: 24663 Comm: syz.2.4762 Tainted: G U syzkaller #0 PREEMPT(full) [ 1513.102298][T24663] Tainted: [U]=USER [ 1513.102306][T24663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1513.102320][T24663] Call Trace: [ 1513.102328][T24663] [ 1513.102337][T24663] dump_stack_lvl+0x16c/0x1f0 [ 1513.102365][T24663] should_fail_ex+0x512/0x640 [ 1513.102399][T24663] _copy_to_user+0x32/0xd0 [ 1513.102430][T24663] simple_read_from_buffer+0xcb/0x170 [ 1513.102460][T24663] proc_fail_nth_read+0x197/0x240 [ 1513.102494][T24663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1513.102529][T24663] ? rw_verify_area+0xcf/0x6c0 [ 1513.102554][T24663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1513.102586][T24663] vfs_read+0x1e4/0xcf0 [ 1513.102619][T24663] ? __pfx___mutex_lock+0x10/0x10 [ 1513.102651][T24663] ? __pfx_vfs_read+0x10/0x10 [ 1513.102688][T24663] ? __fget_files+0x20e/0x3c0 [ 1513.102724][T24663] ksys_read+0x12a/0x250 [ 1513.102753][T24663] ? __pfx_ksys_read+0x10/0x10 [ 1513.102791][T24663] do_syscall_64+0xcd/0xfa0 [ 1513.102818][T24663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.102842][T24663] RIP: 0033:0x7fc2d418e1dc [ 1513.102861][T24663] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1513.102884][T24663] RSP: 002b:00007fc2d4ffa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1513.102907][T24663] RAX: ffffffffffffffda RBX: 00007fc2d43e6180 RCX: 00007fc2d418e1dc [ 1513.102923][T24663] RDX: 000000000000000f RSI: 00007fc2d4ffa0a0 RDI: 0000000000000007 [ 1513.102937][T24663] RBP: 00007fc2d4ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.102952][T24663] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1513.102966][T24663] R13: 00007fc2d43e6218 R14: 00007fc2d43e6180 R15: 00007ffca6ab5178 [ 1513.102998][T24663] [ 1514.064273][T24684] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4769'. [ 1514.717793][T24699] random: crng reseeded on system resumption [ 1515.698353][T24707] Process accounting paused [ 1516.216084][T24728] netlink: 'syz.4.4781': attribute type 1 has an invalid length. [ 1517.899550][T24749] hub 3-0:1.0: USB hub found [ 1518.001017][T24749] hub 3-0:1.0: 1 port detected [ 1518.232524][T24749] usb usb3: authorized to connect [ 1518.588932][T24758] FAULT_INJECTION: forcing a failure. [ 1518.588932][T24758] name failslab, interval 1, probability 393216, space 0, times 0 [ 1518.615345][T24758] CPU: 0 UID: 0 PID: 24758 Comm: syz.5.4790 Tainted: G U syzkaller #0 PREEMPT(full) [ 1518.615387][T24758] Tainted: [U]=USER [ 1518.615395][T24758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1518.615410][T24758] Call Trace: [ 1518.615419][T24758] [ 1518.615429][T24758] dump_stack_lvl+0x16c/0x1f0 [ 1518.615458][T24758] should_fail_ex+0x512/0x640 [ 1518.615487][T24758] ? fs_reclaim_acquire+0xae/0x150 [ 1518.615528][T24758] should_failslab+0xc2/0x120 [ 1518.615565][T24758] __kmalloc_noprof+0xdd/0x880 [ 1518.615593][T24758] ? security_inode_init_security+0x13f/0x390 [ 1518.615624][T24758] ? security_inode_init_security+0x13f/0x390 [ 1518.615647][T24758] security_inode_init_security+0x13f/0x390 [ 1518.615673][T24758] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1518.615710][T24758] ? __pfx_security_inode_init_security+0x10/0x10 [ 1518.615746][T24758] shmem_mknod+0x22e/0x450 [ 1518.615789][T24758] vfs_mknod+0x5da/0x8e0 [ 1518.615820][T24758] do_mknodat+0x30f/0x5d0 [ 1518.615854][T24758] ? __pfx_do_mknodat+0x10/0x10 [ 1518.615883][T24758] ? getname_flags.part.0+0x1c5/0x550 [ 1518.615913][T24758] __x64_sys_mknod+0x87/0xb0 [ 1518.615945][T24758] do_syscall_64+0xcd/0xfa0 [ 1518.615973][T24758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.615998][T24758] RIP: 0033:0x7f4cce38f7c9 [ 1518.616018][T24758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.616042][T24758] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1518.616065][T24758] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1518.616081][T24758] RDX: 0000000000000009 RSI: 0000000000001081 RDI: 0000200000000580 [ 1518.616096][T24758] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1518.616111][T24758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1518.616126][T24758] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1518.616158][T24758] [ 1521.552068][T24815] ovs_ÿþÿþ: entered promiscuous mode [ 1522.143506][T24808] Process accounting paused [ 1522.936428][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1523.158198][T24853] random: crng reseeded on system resumption [ 1523.174960][T24853] FAULT_INJECTION: forcing a failure. [ 1523.174960][T24853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1523.210225][T24853] CPU: 0 UID: 0 PID: 24853 Comm: syz.5.4811 Tainted: G U syzkaller #0 PREEMPT(full) [ 1523.210267][T24853] Tainted: [U]=USER [ 1523.210275][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.210291][T24853] Call Trace: [ 1523.210299][T24853] [ 1523.210308][T24853] dump_stack_lvl+0x16c/0x1f0 [ 1523.210338][T24853] should_fail_ex+0x512/0x640 [ 1523.210372][T24853] should_fail_alloc_page+0xe7/0x130 [ 1523.210412][T24853] prepare_alloc_pages+0x3c2/0x610 [ 1523.210456][T24853] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1523.210493][T24853] ? rcu_is_watching+0x12/0xc0 [ 1523.210524][T24853] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1523.210563][T24853] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 1523.210596][T24853] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1523.210630][T24853] ? is_bpf_text_address+0x8a/0x1a0 [ 1523.210669][T24853] ? bpf_ksym_find+0x124/0x1c0 [ 1523.210701][T24853] ? is_bpf_text_address+0x94/0x1a0 [ 1523.210739][T24853] ? kernel_text_address+0x8d/0x100 [ 1523.210778][T24853] ? __kernel_text_address+0xd/0x40 [ 1523.210815][T24853] ? unwind_get_return_address+0x59/0xa0 [ 1523.210860][T24853] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1523.210889][T24853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1523.210920][T24853] ? policy_nodemask+0xea/0x4e0 [ 1523.210961][T24853] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1523.210993][T24853] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1523.211045][T24853] kasan_populate_vmalloc+0x112/0x2d0 [ 1523.211077][T24853] ? alloc_vmap_area+0x8b5/0x29e0 [ 1523.211118][T24853] alloc_vmap_area+0x960/0x29e0 [ 1523.211166][T24853] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1523.211210][T24853] __get_vm_area_node+0x1ca/0x330 [ 1523.211255][T24853] __vmalloc_node_range_noprof+0x271/0x1480 [ 1523.211299][T24853] ? n_tty_open+0x1a/0x170 [ 1523.211331][T24853] ? n_tty_open+0x1a/0x170 [ 1523.211361][T24853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1523.211401][T24853] ? look_up_lock_class+0x6b/0x150 [ 1523.211430][T24853] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1523.211459][T24853] ? n_tty_open+0x1a/0x170 [ 1523.211481][T24853] __vmalloc_node_noprof+0xad/0xf0 [ 1523.211520][T24853] ? n_tty_open+0x1a/0x170 [ 1523.211541][T24853] ? __pfx_n_tty_open+0x10/0x10 [ 1523.211566][T24853] n_tty_open+0x1a/0x170 [ 1523.211588][T24853] ? __pfx_n_tty_open+0x10/0x10 [ 1523.211610][T24853] tty_ldisc_open+0x9f/0x120 [ 1523.211641][T24853] tty_ldisc_setup+0x40/0x100 [ 1523.211674][T24853] tty_init_dev.part.0+0x1ec/0x500 [ 1523.211715][T24853] tty_open+0xa4f/0xf90 [ 1523.211758][T24853] ? __pfx_tty_open+0x10/0x10 [ 1523.211796][T24853] ? chrdev_open+0x58c/0x6a0 [ 1523.211840][T24853] ? __pfx_tty_open+0x10/0x10 [ 1523.211878][T24853] chrdev_open+0x234/0x6a0 [ 1523.211920][T24853] ? __pfx_chrdev_open+0x10/0x10 [ 1523.211956][T24853] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1523.211997][T24853] do_dentry_open+0x6fe/0x1560 [ 1523.212028][T24853] ? __pfx_chrdev_open+0x10/0x10 [ 1523.212070][T24853] vfs_open+0x82/0x3f0 [ 1523.212095][T24853] path_openat+0x2016/0x2f90 [ 1523.212137][T24853] ? __pfx_path_openat+0x10/0x10 [ 1523.212169][T24853] ? __lock_acquire+0xb8a/0x1c90 [ 1523.212209][T24853] do_filp_open+0x20b/0x470 [ 1523.212240][T24853] ? __pfx_do_filp_open+0x10/0x10 [ 1523.212293][T24853] ? alloc_fd+0x471/0x7d0 [ 1523.212330][T24853] do_sys_openat2+0x11b/0x1d0 [ 1523.212353][T24853] ? __pfx_do_sys_openat2+0x10/0x10 [ 1523.212387][T24853] __x64_sys_openat+0x174/0x210 [ 1523.212412][T24853] ? __pfx___x64_sys_openat+0x10/0x10 [ 1523.212448][T24853] do_syscall_64+0xcd/0xfa0 [ 1523.212475][T24853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.212499][T24853] RIP: 0033:0x7f4cce38f7c9 [ 1523.212520][T24853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.212547][T24853] RSP: 002b:00007f4ccf25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1523.212570][T24853] RAX: ffffffffffffffda RBX: 00007f4cce5e6090 RCX: 00007f4cce38f7c9 [ 1523.212586][T24853] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1523.212602][T24853] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1523.212617][T24853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.212632][T24853] R13: 00007f4cce5e6128 R14: 00007f4cce5e6090 R15: 00007fff5cdc0b88 [ 1523.212665][T24853] [ 1523.691533][T24853] syz.5.4811: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1523.707144][T24853] CPU: 0 UID: 0 PID: 24853 Comm: syz.5.4811 Tainted: G U syzkaller #0 PREEMPT(full) [ 1523.707183][T24853] Tainted: [U]=USER [ 1523.707192][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.707207][T24853] Call Trace: [ 1523.707215][T24853] [ 1523.707224][T24853] dump_stack_lvl+0x16c/0x1f0 [ 1523.707254][T24853] warn_alloc+0x248/0x3a0 [ 1523.707286][T24853] ? __pfx_warn_alloc+0x10/0x10 [ 1523.707316][T24853] ? __get_vm_area_node+0x2cd/0x330 [ 1523.707359][T24853] ? __get_vm_area_node+0x2cd/0x330 [ 1523.707394][T24853] ? __get_vm_area_node+0x1dc/0x330 [ 1523.707430][T24853] ? __get_vm_area_node+0x208/0x330 [ 1523.707474][T24853] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1523.707524][T24853] ? n_tty_open+0x1a/0x170 [ 1523.707556][T24853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1523.707596][T24853] ? look_up_lock_class+0x6b/0x150 [ 1523.707625][T24853] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1523.707674][T24853] ? n_tty_open+0x1a/0x170 [ 1523.707696][T24853] __vmalloc_node_noprof+0xad/0xf0 [ 1523.707735][T24853] ? n_tty_open+0x1a/0x170 [ 1523.707757][T24853] ? __pfx_n_tty_open+0x10/0x10 [ 1523.707781][T24853] n_tty_open+0x1a/0x170 [ 1523.707802][T24853] ? __pfx_n_tty_open+0x10/0x10 [ 1523.707825][T24853] tty_ldisc_open+0x9f/0x120 [ 1523.707856][T24853] tty_ldisc_setup+0x40/0x100 [ 1523.707889][T24853] tty_init_dev.part.0+0x1ec/0x500 [ 1523.707929][T24853] tty_open+0xa4f/0xf90 [ 1523.707972][T24853] ? __pfx_tty_open+0x10/0x10 [ 1523.708009][T24853] ? chrdev_open+0x58c/0x6a0 [ 1523.708047][T24853] ? __pfx_tty_open+0x10/0x10 [ 1523.708083][T24853] chrdev_open+0x234/0x6a0 [ 1523.708124][T24853] ? __pfx_chrdev_open+0x10/0x10 [ 1523.708159][T24853] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1523.708199][T24853] do_dentry_open+0x6fe/0x1560 [ 1523.708230][T24853] ? __pfx_chrdev_open+0x10/0x10 [ 1523.708272][T24853] vfs_open+0x82/0x3f0 [ 1523.708297][T24853] path_openat+0x2016/0x2f90 [ 1523.708338][T24853] ? __pfx_path_openat+0x10/0x10 [ 1523.708370][T24853] ? __lock_acquire+0xb8a/0x1c90 [ 1523.708410][T24853] do_filp_open+0x20b/0x470 [ 1523.708442][T24853] ? __pfx_do_filp_open+0x10/0x10 [ 1523.708494][T24853] ? alloc_fd+0x471/0x7d0 [ 1523.708531][T24853] do_sys_openat2+0x11b/0x1d0 [ 1523.708554][T24853] ? __pfx_do_sys_openat2+0x10/0x10 [ 1523.708589][T24853] __x64_sys_openat+0x174/0x210 [ 1523.708613][T24853] ? __pfx___x64_sys_openat+0x10/0x10 [ 1523.708649][T24853] do_syscall_64+0xcd/0xfa0 [ 1523.708676][T24853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.708700][T24853] RIP: 0033:0x7f4cce38f7c9 [ 1523.708720][T24853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.708744][T24853] RSP: 002b:00007f4ccf25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1523.708767][T24853] RAX: ffffffffffffffda RBX: 00007f4cce5e6090 RCX: 00007f4cce38f7c9 [ 1523.708783][T24853] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1523.708799][T24853] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1523.708814][T24853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.708829][T24853] R13: 00007f4cce5e6128 R14: 00007f4cce5e6090 R15: 00007fff5cdc0b88 [ 1523.708861][T24853] [ 1523.708871][T24853] Mem-Info: [ 1524.049949][T24853] active_anon:16029 inactive_anon:60 isolated_anon:0 [ 1524.049949][T24853] active_file:11048 inactive_file:44944 isolated_file:0 [ 1524.049949][T24853] unevictable:768 dirty:871 writeback:0 [ 1524.049949][T24853] slab_reclaimable:13998 slab_unreclaimable:105256 [ 1524.049949][T24853] mapped:26654 shmem:1365 pagetables:1265 [ 1524.049949][T24853] sec_pagetables:0 bounce:0 [ 1524.049949][T24853] kernel_misc_reclaimable:0 [ 1524.049949][T24853] free:1285066 free_pcp:28468 free_cma:0 [ 1524.105414][T24853] Node 0 active_anon:64116kB inactive_anon:240kB active_file:44192kB inactive_file:179644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106612kB dirty:3484kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:12592kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1524.155303][T24853] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1524.201037][T24853] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.254411][T24853] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1524.266282][T24853] Node 0 DMA32 free:1277852kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67288kB inactive_anon:240kB active_file:44192kB inactive_file:179644kB unevictable:1536kB writepending:3488kB zspages:1040kB present:3129332kB managed:2544924kB mlocked:0kB bounce:0kB free_pcp:45344kB local_pcp:45344kB free_cma:0kB [ 1524.335012][T24853] lowmem_reserve[]: 0 0 1 1 1 [ 1524.342891][T24853] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.413594][T24853] lowmem_reserve[]: 0 0 0 0 0 [ 1524.425319][T24853] Node 1 Normal free:3850612kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62484kB local_pcp:62484kB free_cma:0kB [ 1524.517689][T24853] lowmem_reserve[]: 0 0 0 0 0 [ 1524.523518][T24853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1524.546749][T24853] Node 0 DMA32: 3358*4kB (UM) 2285*8kB (UME) 1817*16kB (UME) 2294*32kB (UM) 1004*64kB (UM) 583*128kB (UME) 319*256kB (UME) 203*512kB (UME) 130*1024kB (UME) 29*2048kB (U) 153*4096kB (UM) = 1277872kB [ 1524.585554][T24853] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1524.625349][T24853] Node 1 Normal: 3*4kB (UME) 3*8kB (ME) 3*16kB (UM) 3*32kB (UM) 3*64kB (UM) 4*128kB (UME) 4*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 937*4096kB (UM) = 3850612kB [ 1524.645437][T24853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.674814][T24853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1524.691568][T24853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.703527][T24853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1524.715280][T24853] 58563 total pagecache pages [ 1524.719981][T24853] 61 pages in swap cache [ 1524.724929][T24853] Free swap = 123652kB [ 1524.745317][T24853] Total swap = 124996kB [ 1524.750125][T24853] 2097051 pages RAM [ 1524.775382][T24853] 0 pages HighMem/MovableOnly [ 1524.780260][T24853] 428730 pages reserved [ 1524.784443][T24853] 0 pages cma reserved [ 1524.789416][T24853] pty pty16: ldisc open failed (-12), clearing slot 16 [ 1524.876857][ T30] audit: type=1804 audit(4294967319.210:142): pid=24860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4812" name="/newroot/592/file0" dev="tmpfs" ino=3127 res=1 errno=0 [ 1524.995638][ T30] audit: type=1800 audit(4294967319.320:143): pid=24860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4812" name="file0" dev="tmpfs" ino=3127 res=0 errno=0 [ 1525.381038][T24870] FAULT_INJECTION: forcing a failure. [ 1525.381038][T24870] name failslab, interval 1, probability 393216, space 0, times 0 [ 1525.405901][T24870] CPU: 0 UID: 0 PID: 24870 Comm: syz.5.4816 Tainted: G U syzkaller #0 PREEMPT(full) [ 1525.405942][T24870] Tainted: [U]=USER [ 1525.405950][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1525.405966][T24870] Call Trace: [ 1525.405975][T24870] [ 1525.405986][T24870] dump_stack_lvl+0x16c/0x1f0 [ 1525.406015][T24870] should_fail_ex+0x512/0x640 [ 1525.406045][T24870] ? fs_reclaim_acquire+0xae/0x150 [ 1525.406085][T24870] should_failslab+0xc2/0x120 [ 1525.406123][T24870] __kmalloc_noprof+0xdd/0x880 [ 1525.406151][T24870] ? security_inode_init_security+0x13f/0x390 [ 1525.406182][T24870] ? security_inode_init_security+0x13f/0x390 [ 1525.406206][T24870] security_inode_init_security+0x13f/0x390 [ 1525.406232][T24870] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1525.406284][T24870] ? __pfx_security_inode_init_security+0x10/0x10 [ 1525.406319][T24870] shmem_mknod+0x22e/0x450 [ 1525.406363][T24870] vfs_mknod+0x5da/0x8e0 [ 1525.406395][T24870] do_mknodat+0x30f/0x5d0 [ 1525.406429][T24870] ? __pfx_do_mknodat+0x10/0x10 [ 1525.406457][T24870] ? getname_flags.part.0+0x1c5/0x550 [ 1525.406486][T24870] __x64_sys_mknod+0x87/0xb0 [ 1525.406518][T24870] do_syscall_64+0xcd/0xfa0 [ 1525.406545][T24870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.406570][T24870] RIP: 0033:0x7f4cce38f7c9 [ 1525.406590][T24870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1525.406614][T24870] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1525.406637][T24870] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1525.406653][T24870] RDX: 0000000000000009 RSI: 0000000000001081 RDI: 0000200000000580 [ 1525.406668][T24870] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1525.406683][T24870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.406697][T24870] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1525.406734][T24870] [ 1525.690632][T24868] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input154 [ 1526.074109][T24886] FAULT_INJECTION: forcing a failure. [ 1526.074109][T24886] name failslab, interval 1, probability 393216, space 0, times 0 [ 1526.126654][T24886] CPU: 0 UID: 0 PID: 24886 Comm: syz.5.4819 Tainted: G U syzkaller #0 PREEMPT(full) [ 1526.126702][T24886] Tainted: [U]=USER [ 1526.126710][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1526.126725][T24886] Call Trace: [ 1526.126733][T24886] [ 1526.126743][T24886] dump_stack_lvl+0x16c/0x1f0 [ 1526.126773][T24886] should_fail_ex+0x512/0x640 [ 1526.126800][T24886] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1526.126830][T24886] should_failslab+0xc2/0x120 [ 1526.126865][T24886] __kmalloc_cache_noprof+0x72/0x780 [ 1526.126891][T24886] ? sctp_transport_new+0xa8/0x7b0 [ 1526.126927][T24886] ? sctp_transport_new+0xa8/0x7b0 [ 1526.126955][T24886] sctp_transport_new+0xa8/0x7b0 [ 1526.126988][T24886] sctp_assoc_add_peer+0x2e3/0x1550 [ 1526.127024][T24886] sctp_connect_new_asoc+0x1f8/0x770 [ 1526.127057][T24886] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1526.127088][T24886] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1526.127118][T24886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1526.127147][T24886] sctp_sendmsg+0x1557/0x1e00 [ 1526.127193][T24886] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1526.127221][T24886] ? __pfx___might_resched+0x10/0x10 [ 1526.127255][T24886] ? aa_sk_perm+0x2f4/0xb10 [ 1526.127291][T24886] ? __pfx_aa_sk_perm+0x10/0x10 [ 1526.127330][T24886] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1526.127362][T24886] inet_sendmsg+0x11c/0x140 [ 1526.127393][T24886] ____sys_sendmsg+0x973/0xc70 [ 1526.127419][T24886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1526.127446][T24886] ? __pfx__kstrtoull+0x10/0x10 [ 1526.127509][T24886] ___sys_sendmsg+0x134/0x1d0 [ 1526.127543][T24886] ? __pfx____sys_sendmsg+0x10/0x10 [ 1526.127588][T24886] ? find_held_lock+0x2b/0x80 [ 1526.127634][T24886] __sys_sendmmsg+0x200/0x420 [ 1526.127675][T24886] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1526.127717][T24886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1526.127756][T24886] ? fput+0x9b/0xd0 [ 1526.127791][T24886] ? ksys_write+0x1ac/0x250 [ 1526.127820][T24886] ? __pfx_ksys_write+0x10/0x10 [ 1526.127855][T24886] __x64_sys_sendmmsg+0x9c/0x100 [ 1526.127886][T24886] ? lockdep_hardirqs_on+0x7c/0x110 [ 1526.127910][T24886] do_syscall_64+0xcd/0xfa0 [ 1526.127936][T24886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.127960][T24886] RIP: 0033:0x7f4cce38f7c9 [ 1526.127978][T24886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1526.128001][T24886] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1526.128023][T24886] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1526.128039][T24886] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 1526.128053][T24886] RBP: 00007f4ccf280090 R08: 0000000000000000 R09: 0000000000000000 [ 1526.128067][T24886] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000001 [ 1526.128080][T24886] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1526.128111][T24886] [ 1526.469377][T24891] FAULT_INJECTION: forcing a failure. [ 1526.469377][T24891] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1526.482457][T24891] CPU: 0 UID: 0 PID: 24891 Comm: syz.6.4813 Tainted: G U syzkaller #0 PREEMPT(full) [ 1526.482496][T24891] Tainted: [U]=USER [ 1526.482505][T24891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1526.482520][T24891] Call Trace: [ 1526.482528][T24891] [ 1526.482537][T24891] dump_stack_lvl+0x16c/0x1f0 [ 1526.482573][T24891] should_fail_ex+0x512/0x640 [ 1526.482608][T24891] get_futex_key+0x1d0/0x1560 [ 1526.482647][T24891] ? __pfx_get_futex_key+0x10/0x10 [ 1526.482681][T24891] ? find_held_lock+0x2b/0x80 [ 1526.482718][T24891] futex_wake+0xea/0x530 [ 1526.482740][T24891] ? futex_wait+0x120/0x380 [ 1526.482765][T24891] ? __pfx_futex_wait+0x10/0x10 [ 1526.482791][T24891] ? __pfx_futex_wake+0x10/0x10 [ 1526.482819][T24891] ? __lock_acquire+0x622/0x1c90 [ 1526.482862][T24891] do_futex+0x1e3/0x350 [ 1526.482899][T24891] ? __pfx_do_futex+0x10/0x10 [ 1526.482944][T24891] __x64_sys_futex+0x1e0/0x4c0 [ 1526.482985][T24891] ? __pfx___x64_sys_futex+0x10/0x10 [ 1526.483024][T24891] ? __task_pid_nr_ns+0x1f5/0x500 [ 1526.483067][T24891] do_syscall_64+0xcd/0xfa0 [ 1526.483094][T24891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.483119][T24891] RIP: 0033:0x7f2b7bf8f7c9 [ 1526.483139][T24891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1526.483163][T24891] RSP: 002b:00007f2b7a1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1526.483186][T24891] RAX: ffffffffffffffda RBX: 00007f2b7c1e5fa8 RCX: 00007f2b7bf8f7c9 [ 1526.483203][T24891] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b7c1e5fac [ 1526.483218][T24891] RBP: 00007f2b7c1e5fa0 R08: 00007f2b7cd22000 R09: 0000000000000000 [ 1526.483233][T24891] R10: 000000000000037f R11: 0000000000000246 R12: 0000000000000000 [ 1526.483248][T24891] R13: 00007f2b7c1e6038 R14: 00007fff1b5c03c0 R15: 00007fff1b5c04a8 [ 1526.483279][T24891] [ 1527.293698][T24877] Process accounting paused [ 1527.519271][T24904] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input155 [ 1527.712174][T24911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4823'. [ 1527.819004][T24911] team0: Port device team_slave_0 removed [ 1527.854512][T24908] FAULT_INJECTION: forcing a failure. [ 1527.854512][T24908] name failslab, interval 1, probability 393216, space 0, times 0 [ 1527.997805][T24891] kexec: Could not allocate control_code_buffer [ 1528.006142][T24908] CPU: 0 UID: 0 PID: 24908 Comm: syz.4.4822 Tainted: G U syzkaller #0 PREEMPT(full) [ 1528.006181][T24908] Tainted: [U]=USER [ 1528.006189][T24908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1528.006204][T24908] Call Trace: [ 1528.006212][T24908] [ 1528.006221][T24908] dump_stack_lvl+0x16c/0x1f0 [ 1528.006251][T24908] should_fail_ex+0x512/0x640 [ 1528.006280][T24908] ? fs_reclaim_acquire+0xae/0x150 [ 1528.006319][T24908] should_failslab+0xc2/0x120 [ 1528.006357][T24908] __kmalloc_noprof+0xdd/0x880 [ 1528.006383][T24908] ? tomoyo_encode2+0x100/0x3e0 [ 1528.006424][T24908] ? tomoyo_encode2+0x100/0x3e0 [ 1528.006458][T24908] tomoyo_encode2+0x100/0x3e0 [ 1528.006498][T24908] tomoyo_encode+0x29/0x50 [ 1528.006532][T24908] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1528.006578][T24908] tomoyo_path_number_perm+0x245/0x580 [ 1528.006608][T24908] ? tomoyo_path_number_perm+0x237/0x580 [ 1528.006642][T24908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1528.006672][T24908] ? futex_wake+0x1ad/0x530 [ 1528.006725][T24908] ? find_held_lock+0x2b/0x80 [ 1528.006752][T24908] ? hook_file_ioctl_common+0x145/0x410 [ 1528.006803][T24908] ? __fget_files+0x20e/0x3c0 [ 1528.006838][T24908] security_file_ioctl+0x9b/0x240 [ 1528.006872][T24908] __x64_sys_ioctl+0xb7/0x210 [ 1528.006897][T24908] do_syscall_64+0xcd/0xfa0 [ 1528.006925][T24908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.006950][T24908] RIP: 0033:0x7f8d6038f7c9 [ 1528.006969][T24908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.006993][T24908] RSP: 002b:00007f8d611db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1528.007016][T24908] RAX: ffffffffffffffda RBX: 00007f8d605e5fa0 RCX: 00007f8d6038f7c9 [ 1528.007032][T24908] RDX: 0000200000000040 RSI: 000000004004550c RDI: 0000000000000008 [ 1528.007048][T24908] RBP: 00007f8d60413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1528.007063][T24908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.007077][T24908] R13: 00007f8d605e6038 R14: 00007f8d605e5fa0 R15: 00007fff4e7ea5b8 [ 1528.007112][T24908] [ 1528.247666][T24908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1529.667592][T24941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1529.675055][T24941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1529.684426][T24941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1529.691124][T24941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1529.757810][T24941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1531.116376][T24964] Invalid ELF header magic: != ELF [ 1531.686981][T24011] Bluetooth: hci2: command 0x0c1a tx timeout [ 1531.693344][T24011] Bluetooth: hci1: command 0x0c1a tx timeout [ 1531.699780][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 1531.771599][T24982] Bluetooth: hci3: command 0x0406 tx timeout [ 1531.867782][T24985] random: crng reseeded on system resumption [ 1532.021415][T24982] Bluetooth: hci2: unexpected event 0x3c length: 725 > 7 [ 1532.644662][T24964] zswap: compressor not available [ 1533.765358][T24982] Bluetooth: hci2: command 0x0c1a tx timeout [ 1536.799472][T25048] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1536.920677][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4848'. [ 1538.252916][T25060] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 1538.322928][T24989] Process accounting paused [ 1538.766539][T25061] svc: failed to register nfsdv3 RPC service (errno 101). [ 1538.917824][T25061] svc: failed to register nfsaclv3 RPC service (errno 101). [ 1540.308100][T25076] netlink: 194 bytes leftover after parsing attributes in process `syz.6.4856'. [ 1541.417322][T25097] netlink: 'syz.6.4862': attribute type 5 has an invalid length. [ 1544.340484][T25155] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1544.583597][T25157] kexec: Could not allocate control_code_buffer [ 1544.759765][T25162] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input156 [ 1545.122117][ T30] audit: type=1800 audit(4294967308.620:144): pid=25174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4883" name="lu_gp_id" dev="configfs" ino=108612 res=0 errno=0 [ 1546.590243][T25159] Process accounting resumed [ 1547.089360][T25200] netlink: 194 bytes leftover after parsing attributes in process `syz.5.4891'. [ 1547.749672][T25209] random: crng reseeded on system resumption [ 1548.441241][T25216] FAULT_INJECTION: forcing a failure. [ 1548.441241][T25216] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1548.479878][T25216] CPU: 0 UID: 0 PID: 25216 Comm: syz.5.4896 Tainted: G U syzkaller #0 PREEMPT(full) [ 1548.479918][T25216] Tainted: [U]=USER [ 1548.479927][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1548.479941][T25216] Call Trace: [ 1548.479960][T25216] [ 1548.479969][T25216] dump_stack_lvl+0x16c/0x1f0 [ 1548.479999][T25216] should_fail_ex+0x512/0x640 [ 1548.480028][T25216] ? kmem_cache_free+0x2d4/0x6c0 [ 1548.480062][T25216] get_futex_key+0x1d0/0x1560 [ 1548.480101][T25216] ? __pfx_get_futex_key+0x10/0x10 [ 1548.480145][T25216] futex_wake+0xea/0x530 [ 1548.480172][T25216] ? __pfx_futex_wake+0x10/0x10 [ 1548.480202][T25216] ? rcu_is_watching+0x12/0xc0 [ 1548.480230][T25216] ? kasan_quarantine_put+0x10a/0x240 [ 1548.480262][T25216] ? lockdep_hardirqs_on+0x7c/0x110 [ 1548.480290][T25216] do_futex+0x1e3/0x350 [ 1548.480327][T25216] ? __pfx_do_futex+0x10/0x10 [ 1548.480365][T25216] ? putname+0xf5/0x1a0 [ 1548.480403][T25216] __x64_sys_futex+0x1e0/0x4c0 [ 1548.480444][T25216] ? __pfx___x64_sys_futex+0x10/0x10 [ 1548.480481][T25216] ? getname_flags.part.0+0x1c5/0x550 [ 1548.480513][T25216] do_syscall_64+0xcd/0xfa0 [ 1548.480539][T25216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.480563][T25216] RIP: 0033:0x7f4cce38f7c9 [ 1548.480582][T25216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.480606][T25216] RSP: 002b:00007f4ccf2800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1548.480629][T25216] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa8 RCX: 00007f4cce38f7c9 [ 1548.480645][T25216] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cce5e5fac [ 1548.480660][T25216] RBP: 00007f4cce5e5fa0 R08: 00007f4ccf281000 R09: 0000000000000000 [ 1548.480675][T25216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.480689][T25216] R13: 00007f4cce5e6038 R14: 00007fff5cdc0aa0 R15: 00007fff5cdc0b88 [ 1548.480720][T25216] [ 1548.996975][T25128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1549.011278][T25128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1549.020960][T25128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1549.029131][T25128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1549.037054][T25128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1549.244933][ T30] audit: type=1804 audit(4294967312.740:145): pid=25223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4897" name=2F6E6577726F6F742F3536302F3531310A dev="tmpfs" ino=2944 res=1 errno=0 [ 1549.448518][ T30] audit: type=1800 audit(4294967312.740:146): pid=25223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4897" name=3531310A dev="tmpfs" ino=2944 res=0 errno=0 [ 1549.676786][T25175] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.795720][T25231] FAULT_INJECTION: forcing a failure. [ 1549.795720][T25231] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1549.816406][T25231] CPU: 0 UID: 0 PID: 25231 Comm: syz.5.4900 Tainted: G U syzkaller #0 PREEMPT(full) [ 1549.816444][T25231] Tainted: [U]=USER [ 1549.816453][T25231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1549.816468][T25231] Call Trace: [ 1549.816476][T25231] [ 1549.816486][T25231] dump_stack_lvl+0x16c/0x1f0 [ 1549.816516][T25231] should_fail_ex+0x512/0x640 [ 1549.816550][T25231] get_futex_key+0x1d0/0x1560 [ 1549.816590][T25231] ? __pfx_get_futex_key+0x10/0x10 [ 1549.816634][T25231] futex_wake+0xea/0x530 [ 1549.816658][T25231] ? rcu_is_watching+0x12/0xc0 [ 1549.816688][T25231] ? __pfx_futex_wake+0x10/0x10 [ 1549.816716][T25231] ? kmem_cache_free+0x2d4/0x6c0 [ 1549.816745][T25231] ? putname+0xf5/0x1a0 [ 1549.816786][T25231] do_futex+0x1e3/0x350 [ 1549.816823][T25231] ? __pfx_do_futex+0x10/0x10 [ 1549.816861][T25231] ? find_held_lock+0x2b/0x80 [ 1549.816892][T25231] __x64_sys_futex+0x1e0/0x4c0 [ 1549.816930][T25231] ? __x64_sys_openat+0x174/0x210 [ 1549.816954][T25231] ? __pfx___x64_sys_futex+0x10/0x10 [ 1549.817002][T25231] do_syscall_64+0xcd/0xfa0 [ 1549.817030][T25231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.817054][T25231] RIP: 0033:0x7f4cce38f7c9 [ 1549.817073][T25231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.817096][T25231] RSP: 002b:00007f4ccf2800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1549.817134][T25231] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa8 RCX: 00007f4cce38f7c9 [ 1549.817150][T25231] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cce5e5fac [ 1549.817165][T25231] RBP: 00007f4cce5e5fa0 R08: 00007f4ccf281000 R09: 0000000000000000 [ 1549.817181][T25231] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1549.817195][T25231] R13: 00007f4cce5e6038 R14: 00007fff5cdc0aa0 R15: 00007fff5cdc0b88 [ 1549.817227][T25231] [ 1550.774012][T25175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.113624][T25175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.127918][T25141] Bluetooth: hci4: command tx timeout [ 1551.226213][T25175] bridge0: port 3(netdevsim1) entered disabled state [ 1551.331579][T25175] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 1551.387304][T25175] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 1551.431186][T25175] bridge0: port 3(netdevsim1) entered disabled state [ 1551.493558][T25175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.700426][T25257] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input157 [ 1551.880655][T25175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.042929][T25262] block nbd9: NBD_DISCONNECT [ 1552.730394][T25264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.848863][T25264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.956671][T25264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.079503][T25264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.209810][T25141] Bluetooth: hci4: command tx timeout [ 1553.226888][T25175] bridge_slave_1: left allmulticast mode [ 1553.295679][T25264] Process accounting resumed [ 1553.304935][T25175] bridge_slave_1: left promiscuous mode [ 1553.341548][T25275] FAULT_INJECTION: forcing a failure. [ 1553.341548][T25275] name failslab, interval 1, probability 393216, space 0, times 0 [ 1553.380774][T25175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.495348][T25275] CPU: 0 UID: 0 PID: 25275 Comm: syz.6.4912 Tainted: G U syzkaller #0 PREEMPT(full) [ 1553.495388][T25275] Tainted: [U]=USER [ 1553.495396][T25275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1553.495410][T25275] Call Trace: [ 1553.495418][T25275] [ 1553.495428][T25275] dump_stack_lvl+0x16c/0x1f0 [ 1553.495457][T25275] should_fail_ex+0x512/0x640 [ 1553.495485][T25275] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1553.495526][T25275] should_failslab+0xc2/0x120 [ 1553.495563][T25275] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1553.495591][T25275] ? __alloc_skb+0x2b2/0x380 [ 1553.495626][T25275] ? __alloc_skb+0x2b2/0x380 [ 1553.495658][T25275] __alloc_skb+0x2b2/0x380 [ 1553.495688][T25275] ? __pfx___alloc_skb+0x10/0x10 [ 1553.495722][T25275] ? find_held_lock+0x2b/0x80 [ 1553.495752][T25275] sctp_packet_transmit+0x1ca/0x3040 [ 1553.495790][T25275] ? __sctp_packet_append_chunk+0x489/0xd60 [ 1553.495831][T25275] ? sctp_packet_append_chunk+0xe60/0x1190 [ 1553.495863][T25275] ? sctp_packet_config+0x6b1/0xf40 [ 1553.495901][T25275] sctp_packet_singleton+0x19e/0x370 [ 1553.495933][T25275] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 1553.495973][T25275] ? sctp_outq_select_transport+0x208/0x740 [ 1553.496009][T25275] sctp_outq_flush+0x53d/0x3350 [ 1553.496038][T25275] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 1553.496084][T25275] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1553.496118][T25275] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 1553.496155][T25275] ? sctp_outq_tail+0x671/0xa30 [ 1553.496186][T25275] ? sctp_endpoint_add_asoc+0x1db/0x2e0 [ 1553.496221][T25275] sctp_do_sm+0x1792/0x5c80 [ 1553.496260][T25275] ? kasan_save_stack+0x42/0x60 [ 1553.496293][T25275] ? kasan_save_stack+0x33/0x60 [ 1553.496323][T25275] ? kasan_save_track+0x14/0x30 [ 1553.496354][T25275] ? __pfx_sctp_do_sm+0x10/0x10 [ 1553.496384][T25275] ? sctp_sendmsg+0xe99/0x1e00 [ 1553.496415][T25275] ? ____sys_sendmsg+0x973/0xc70 [ 1553.496437][T25275] ? __x64_sys_sendmmsg+0x9c/0x100 [ 1553.496468][T25275] ? do_syscall_64+0xcd/0xfa0 [ 1553.496524][T25275] ? sk_leave_memory_pressure+0xdd/0x130 [ 1553.496564][T25275] ? __sk_mem_raise_allocated+0x817/0x14b0 [ 1553.496604][T25275] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 1553.496641][T25275] sctp_sendmsg_to_asoc+0xa32/0x1bd0 [ 1553.496668][T25275] ? sctp_assoc_set_primary+0x177/0x300 [ 1553.496696][T25275] ? sctp_assoc_add_peer+0x252/0x1550 [ 1553.496730][T25275] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1553.496756][T25275] ? sctp_connect_new_asoc+0x41e/0x770 [ 1553.496788][T25275] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1553.496820][T25275] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1553.496850][T25275] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1553.496880][T25275] sctp_sendmsg+0xe99/0x1e00 [ 1553.496917][T25275] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1553.496945][T25275] ? __pfx___might_resched+0x10/0x10 [ 1553.496977][T25275] ? aa_sk_perm+0x2f4/0xb10 [ 1553.497013][T25275] ? __pfx_aa_sk_perm+0x10/0x10 [ 1553.497052][T25275] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1553.497082][T25275] inet_sendmsg+0x11c/0x140 [ 1553.497113][T25275] ____sys_sendmsg+0x973/0xc70 [ 1553.497137][T25275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1553.497164][T25275] ? __pfx__kstrtoull+0x10/0x10 [ 1553.497206][T25275] ___sys_sendmsg+0x134/0x1d0 [ 1553.497238][T25275] ? __pfx____sys_sendmsg+0x10/0x10 [ 1553.497283][T25275] ? find_held_lock+0x2b/0x80 [ 1553.497326][T25275] __sys_sendmmsg+0x200/0x420 [ 1553.497360][T25275] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1553.497400][T25275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1553.497438][T25275] ? fput+0x9b/0xd0 [ 1553.497471][T25275] ? ksys_write+0x1ac/0x250 [ 1553.497500][T25275] ? __pfx_ksys_write+0x10/0x10 [ 1553.497540][T25275] __x64_sys_sendmmsg+0x9c/0x100 [ 1553.497571][T25275] ? lockdep_hardirqs_on+0x7c/0x110 [ 1553.497595][T25275] do_syscall_64+0xcd/0xfa0 [ 1553.497621][T25275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.497645][T25275] RIP: 0033:0x7f2b7bf8f7c9 [ 1553.497664][T25275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.497687][T25275] RSP: 002b:00007f2b7a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1553.497709][T25275] RAX: ffffffffffffffda RBX: 00007f2b7c1e5fa0 RCX: 00007f2b7bf8f7c9 [ 1553.497725][T25275] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 1553.497740][T25275] RBP: 00007f2b7a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.497754][T25275] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000002 [ 1553.497769][T25275] R13: 00007f2b7c1e6038 R14: 00007f2b7c1e5fa0 R15: 00007fff1b5c04a8 [ 1553.497800][T25275] [ 1554.482237][T25175] bridge_slave_0: left allmulticast mode [ 1554.491634][T25175] bridge_slave_0: left promiscuous mode [ 1554.507787][T25175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.083712][T25287] FAULT_INJECTION: forcing a failure. [ 1555.083712][T25287] name failslab, interval 1, probability 393216, space 0, times 0 [ 1555.107786][T25287] CPU: 0 UID: 0 PID: 25287 Comm: syz.5.4917 Tainted: G U syzkaller #0 PREEMPT(full) [ 1555.107826][T25287] Tainted: [U]=USER [ 1555.107834][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1555.107849][T25287] Call Trace: [ 1555.107857][T25287] [ 1555.107867][T25287] dump_stack_lvl+0x16c/0x1f0 [ 1555.107897][T25287] should_fail_ex+0x512/0x640 [ 1555.107926][T25287] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1555.107957][T25287] should_failslab+0xc2/0x120 [ 1555.107994][T25287] __kmalloc_cache_noprof+0x72/0x780 [ 1555.108020][T25287] ? lock_acquire+0x179/0x350 [ 1555.108055][T25287] ? open_substream+0xec/0x990 [ 1555.108088][T25287] ? open_substream+0xec/0x990 [ 1555.108115][T25287] open_substream+0xec/0x990 [ 1555.108142][T25287] ? lockdep_hardirqs_on+0x7c/0x110 [ 1555.108169][T25287] rawmidi_open_priv+0x4db/0x6e0 [ 1555.108203][T25287] snd_rawmidi_open+0x4cb/0xbf0 [ 1555.108238][T25287] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1555.108270][T25287] ? __pfx_default_wake_function+0x10/0x10 [ 1555.108302][T25287] ? kobject_get_unless_zero+0x156/0x1e0 [ 1555.108333][T25287] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1555.108363][T25287] snd_open+0x22d/0x4c0 [ 1555.108385][T25287] ? __pfx_snd_open+0x10/0x10 [ 1555.108406][T25287] chrdev_open+0x234/0x6a0 [ 1555.108439][T25287] ? __pfx_apparmor_file_open+0x10/0x10 [ 1555.108468][T25287] ? __pfx_chrdev_open+0x10/0x10 [ 1555.108503][T25287] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1555.108542][T25287] do_dentry_open+0x6fe/0x1560 [ 1555.108572][T25287] ? __pfx_chrdev_open+0x10/0x10 [ 1555.108614][T25287] vfs_open+0x82/0x3f0 [ 1555.108639][T25287] path_openat+0x2016/0x2f90 [ 1555.108688][T25287] ? __pfx_path_openat+0x10/0x10 [ 1555.108722][T25287] ? __lock_acquire+0xb8a/0x1c90 [ 1555.108761][T25287] do_filp_open+0x20b/0x470 [ 1555.108792][T25287] ? __pfx_do_filp_open+0x10/0x10 [ 1555.108845][T25287] ? alloc_fd+0x471/0x7d0 [ 1555.108881][T25287] do_sys_openat2+0x11b/0x1d0 [ 1555.108904][T25287] ? __pfx_do_sys_openat2+0x10/0x10 [ 1555.108939][T25287] __x64_sys_openat+0x174/0x210 [ 1555.108963][T25287] ? __pfx___x64_sys_openat+0x10/0x10 [ 1555.108999][T25287] do_syscall_64+0xcd/0xfa0 [ 1555.109026][T25287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.109050][T25287] RIP: 0033:0x7f4cce38f7c9 [ 1555.109069][T25287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.109093][T25287] RSP: 002b:00007f4ccf280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1555.109117][T25287] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa0 RCX: 00007f4cce38f7c9 [ 1555.109133][T25287] RDX: 0000000000103000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1555.109149][T25287] RBP: 00007f4cce413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1555.109164][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.109178][T25287] R13: 00007f4cce5e6038 R14: 00007f4cce5e5fa0 R15: 00007fff5cdc0b88 [ 1555.109211][T25287] [ 1555.766108][T25141] Bluetooth: hci4: command tx timeout [ 1556.082537][T25294] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input158 [ 1556.255666][T25300] netlink: 'syz.6.4919': attribute type 1 has an invalid length. [ 1556.586048][T25309] netlink: 'syz.5.4922': attribute type 1 has an invalid length. [ 1557.369770][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.376873][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.855252][T25128] Bluetooth: hci4: command tx timeout [ 1557.931829][T25320] FAULT_INJECTION: forcing a failure. [ 1557.931829][T25320] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1557.944845][T25320] CPU: 0 UID: 0 PID: 25320 Comm: syz.5.4926 Tainted: G U syzkaller #0 PREEMPT(full) [ 1557.944884][T25320] Tainted: [U]=USER [ 1557.944893][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1557.944908][T25320] Call Trace: [ 1557.944917][T25320] [ 1557.944926][T25320] dump_stack_lvl+0x16c/0x1f0 [ 1557.944955][T25320] should_fail_ex+0x512/0x640 [ 1557.944988][T25320] get_futex_key+0x1d0/0x1560 [ 1557.945047][T25320] ? __pfx_get_futex_key+0x10/0x10 [ 1557.945080][T25320] ? find_held_lock+0x2b/0x80 [ 1557.945122][T25320] futex_wake+0xea/0x530 [ 1557.945149][T25320] ? __pfx_futex_wake+0x10/0x10 [ 1557.945180][T25320] ? post_copy_siginfo_from_user.isra.0+0x209/0x300 [ 1557.945230][T25320] do_futex+0x1e3/0x350 [ 1557.945271][T25320] ? __pfx_do_futex+0x10/0x10 [ 1557.945315][T25320] __x64_sys_futex+0x1e0/0x4c0 [ 1557.945353][T25320] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 1557.945390][T25320] ? __pfx___x64_sys_futex+0x10/0x10 [ 1557.945437][T25320] do_syscall_64+0xcd/0xfa0 [ 1557.945465][T25320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.945490][T25320] RIP: 0033:0x7f4cce38f7c9 [ 1557.945509][T25320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1557.945532][T25320] RSP: 002b:00007f4ccf2800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1557.945555][T25320] RAX: ffffffffffffffda RBX: 00007f4cce5e5fa8 RCX: 00007f4cce38f7c9 [ 1557.945571][T25320] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cce5e5fac [ 1557.945586][T25320] RBP: 00007f4cce5e5fa0 R08: 00007f4ccf281000 R09: 0000000000000000 [ 1557.945602][T25320] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1557.945618][T25320] R13: 00007f4cce5e6038 R14: 00007fff5cdc0aa0 R15: 00007fff5cdc0b88 [ 1557.945649][T25320] [ 1558.128328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.147683][T25321] WARNING! power/level is deprecated; use power/control instead [ 1558.157510][T25321] ICMPv6: process `syz.6.4925' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 1558.350964][T25322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input159 [ 1558.415843][T25175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1558.484796][T25175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1558.530641][T25324] netlink: 114 bytes leftover after parsing attributes in process `syz.5.4927'. [ 1558.591124][T25175] bond0 (unregistering): Released all slaves [ 1558.694911][T25217] chnl_net:caif_netlink_parms(): no params data found [ 1559.113942][T25175] tipc: Left network mode [ 1559.414621][T25217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.455295][T25217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.484137][T25267] Process accounting resumed [ 1559.494825][T25217] bridge_slave_0: entered allmulticast mode [ 1559.532251][T25217] bridge_slave_0: entered promiscuous mode [ 1559.577703][T25217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.615372][T25217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.635618][T25217] bridge_slave_1: entered allmulticast mode [ 1559.673987][T25217] bridge_slave_1: entered promiscuous mode [ 1559.948039][T25217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.079778][T25350] netlink: 'syz.5.4934': attribute type 1 has an invalid length. [ 1560.090539][T25217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.662677][T25217] team0: Port device team_slave_0 added [ 1560.710316][T25217] team0: Port device team_slave_1 added [ 1560.780102][T25362] netlink: 'syz.5.4937': attribute type 5 has an invalid length. [ 1561.838640][T25217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.874778][T25217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.901062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.028853][T25217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.352990][T25217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.360007][T25217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.712288][T25217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.623863][T25217] hsr_slave_0: entered promiscuous mode [ 1563.652955][T25217] hsr_slave_1: entered promiscuous mode [ 1563.741894][T25217] debugfs: 'hsr0' already exists in 'hsr' [ 1563.777501][T25217] Cannot create hsr debugfs directory [ 1566.216994][T25424] netlink: 'syz.6.4950': attribute type 1 has an invalid length. [ 1566.909274][T25431] netlink: 194 bytes leftover after parsing attributes in process `syz.6.4952'. [ 1568.529958][T25217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1568.825510][T25217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1569.146189][T25217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1570.012610][T25217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1570.062417][T25469] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1571.997168][T25175] hsr_slave_0: left promiscuous mode [ 1572.270750][T25175] hsr_slave_1: left promiscuous mode [ 1572.276761][T25175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.404241][T25175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.649301][T25175] veth1_macvtap: left promiscuous mode [ 1572.654977][T25175] veth0_macvtap: left promiscuous mode [ 1572.759803][T25175] veth1_vlan: left promiscuous mode [ 1572.765166][T25175] veth0_vlan: left promiscuous mode [ 1573.496737][T25495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4967'. [ 1575.277913][T25175] team0 (unregistering): Port device team_slave_1 removed [ 1575.464869][T25175] team0 (unregistering): Port device team_slave_0 removed [ 1578.415082][T25438] Process accounting paused [ 1578.484826][T25217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.942655][T25217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.085663][T25146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.092910][T25146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.206903][T25146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.214830][T25146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.301893][T25510] FAULT_INJECTION: forcing a failure. [ 1579.301893][T25510] name failslab, interval 1, probability 393216, space 0, times 0 [ 1579.315539][T25510] CPU: 0 UID: 0 PID: 25510 Comm: syz.5.4972 Tainted: G U syzkaller #0 PREEMPT(full) [ 1579.315591][T25510] Tainted: [U]=USER [ 1579.315618][T25510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1579.315632][T25510] Call Trace: [ 1579.315640][T25510] [ 1579.315648][T25510] dump_stack_lvl+0x16c/0x1f0 [ 1579.315678][T25510] should_fail_ex+0x512/0x640 [ 1579.315705][T25510] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1579.315738][T25510] should_failslab+0xc2/0x120 [ 1579.315773][T25510] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1579.315801][T25510] ? skb_clone+0x190/0x3f0 [ 1579.315838][T25510] ? skb_clone+0x190/0x3f0 [ 1579.315867][T25510] skb_clone+0x190/0x3f0 [ 1579.315898][T25510] netlink_deliver_tap+0xabd/0xd30 [ 1579.315939][T25510] netlink_unicast+0x64c/0x870 [ 1579.315978][T25510] ? __pfx_netlink_unicast+0x10/0x10 [ 1579.316024][T25510] netlink_sendmsg+0x8c8/0xdd0 [ 1579.316064][T25510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.316103][T25510] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1579.316135][T25510] ____sys_sendmsg+0xa98/0xc70 [ 1579.316157][T25510] ? copy_msghdr_from_user+0x10a/0x160 [ 1579.316188][T25510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1579.316224][T25510] ___sys_sendmsg+0x134/0x1d0 [ 1579.316256][T25510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1579.316285][T25510] ? __lock_acquire+0x622/0x1c90 [ 1579.316355][T25510] __sys_sendmsg+0x16d/0x220 [ 1579.316385][T25510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1579.316436][T25510] do_syscall_64+0xcd/0xfa0 [ 1579.316461][T25510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.316485][T25510] RIP: 0033:0x7f4cce38f7c9 [ 1579.316503][T25510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.316526][T25510] RSP: 002b:00007f4ccf25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1579.316549][T25510] RAX: ffffffffffffffda RBX: 00007f4cce5e6090 RCX: 00007f4cce38f7c9 [ 1579.316570][T25510] RDX: 0000000000008094 RSI: 00002000000006c0 RDI: 000000000000000a [ 1579.316586][T25510] RBP: 00007f4ccf25f090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.316600][T25510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1579.316614][T25510] R13: 00007f4cce5e6128 R14: 00007f4cce5e6090 R15: 00007fff5cdc0b88 [ 1579.316645][T25510] [ 1580.651606][T25217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1582.276508][T25217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.716891][T25217] veth0_vlan: entered promiscuous mode [ 1582.792633][T25217] veth1_vlan: entered promiscuous mode [ 1583.015801][T25217] veth0_macvtap: entered promiscuous mode [ 1583.085324][T25217] veth1_macvtap: entered promiscuous mode [ 1583.200610][T25541] Process accounting paused [ 1583.248410][T25217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.357587][T25217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.478166][T25310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.562035][T25310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.623508][T25310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.661531][T25310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.741172][T25128] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1583.945246][T25557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input160 [ 1584.836216][T25175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.940309][T25175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.569538][T25576] cgroup: fork rejected by pids controller in /syz5 [ 1585.855851][T25175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.969884][T25175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.397573][T25628] netlink: 'syz.2.4990': attribute type 1 has an invalid length. [ 1589.232585][ T30] audit: type=1804 audit(4294969400.884:147): pid=25633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4991" name="/newroot/285/file0" dev="tmpfs" ino=1510 res=1 errno=0 [ 1589.254117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.608708][ T30] audit: type=1800 audit(4294969400.974:148): pid=25633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4991" name="file0" dev="tmpfs" ino=1510 res=0 errno=0 [ 1590.140459][T25636] netlink: 'syz.2.4992': attribute type 5 has an invalid length. [ 1591.257154][T25343] Process accounting paused [ 1593.382553][T25141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1593.404047][T25141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1593.431184][T25141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1593.448009][T25141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1593.455954][T25141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1594.287347][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5000'. [ 1594.322330][T25660] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input161 [ 1594.587548][T25655] chnl_net:caif_netlink_parms(): no params data found [ 1594.746112][T25667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'. [ 1595.053405][T25655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.076931][T25655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.132289][T25655] bridge_slave_0: entered allmulticast mode [ 1595.181416][T25655] bridge_slave_0: entered promiscuous mode [ 1595.261935][T25655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.269122][T25655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.327484][T25655] bridge_slave_1: entered allmulticast mode [ 1595.366125][T25655] bridge_slave_1: entered promiscuous mode [ 1595.491781][T25141] Bluetooth: hci0: command tx timeout [ 1595.700739][T25690] size and base must be multiples of 4 kiB [ 1595.712830][ T30] audit: type=1804 audit(4294969407.408:149): pid=25679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5002" name="/newroot/603/file0" dev="tmpfs" ino=3190 res=1 errno=0 [ 1595.757600][T25655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.785107][T25690] CPU: 0 UID: 0 PID: 25690 Comm: syz.2.5005 Tainted: G U syzkaller #0 PREEMPT(full) [ 1595.785147][T25690] Tainted: [U]=USER [ 1595.785156][T25690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1595.785171][T25690] Call Trace: [ 1595.785179][T25690] [ 1595.785188][T25690] dump_stack_lvl+0x16c/0x1f0 [ 1595.785218][T25690] mtrr_add+0xdf/0x110 [ 1595.785253][T25690] mtrr_ioctl+0x7ef/0xcf0 [ 1595.785287][T25690] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1595.785334][T25690] ? find_held_lock+0x2b/0x80 [ 1595.785370][T25690] ? __fget_files+0x20e/0x3c0 [ 1595.785400][T25690] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1595.785433][T25690] proc_reg_unlocked_ioctl+0x229/0x320 [ 1595.785457][T25690] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1595.785485][T25690] __x64_sys_ioctl+0x18e/0x210 [ 1595.785511][T25690] do_syscall_64+0xcd/0xfa0 [ 1595.785538][T25690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.785563][T25690] RIP: 0033:0x7efe7e18f7c9 [ 1595.785581][T25690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.785606][T25690] RSP: 002b:00007efe7ef5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.785628][T25690] RAX: ffffffffffffffda RBX: 00007efe7e3e6090 RCX: 00007efe7e18f7c9 [ 1595.785644][T25690] RDX: 0000000000000007 RSI: 00000000400c4d01 RDI: 0000000000000007 [ 1595.785659][T25690] RBP: 00007efe7e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1595.785674][T25690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.785689][T25690] R13: 00007efe7e3e6128 R14: 00007efe7e3e6090 R15: 00007ffeef3dc958 [ 1595.785720][T25690] [ 1596.176419][ T30] audit: type=1800 audit(4294969407.448:150): pid=25679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5002" name="file0" dev="tmpfs" ino=3190 res=0 errno=0 [ 1596.646715][T25655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.830768][T25655] team0: Port device team_slave_0 added [ 1597.046774][T25655] team0: Port device team_slave_1 added [ 1597.448647][T25655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.485966][T25655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.564020][T25141] Bluetooth: hci0: command tx timeout [ 1597.628309][T25655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.734368][T25655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.771481][T25655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.897528][T25655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.131408][T25655] hsr_slave_0: entered promiscuous mode [ 1598.186786][T25655] hsr_slave_1: entered promiscuous mode [ 1598.193025][T25655] debugfs: 'hsr0' already exists in 'hsr' [ 1598.259170][T25655] Cannot create hsr debugfs directory [ 1598.556138][T25698] FAULT_INJECTION: forcing a failure. [ 1598.556138][T25698] name failslab, interval 1, probability 393216, space 0, times 0 [ 1598.651948][T25698] CPU: 0 UID: 0 PID: 25698 Comm: syz.6.5008 Tainted: G U syzkaller #0 PREEMPT(full) [ 1598.651988][T25698] Tainted: [U]=USER [ 1598.651997][T25698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1598.652012][T25698] Call Trace: [ 1598.652022][T25698] [ 1598.652031][T25698] dump_stack_lvl+0x16c/0x1f0 [ 1598.652061][T25698] should_fail_ex+0x512/0x640 [ 1598.652090][T25698] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1598.652121][T25698] should_failslab+0xc2/0x120 [ 1598.652158][T25698] __kmalloc_cache_noprof+0x72/0x780 [ 1598.652186][T25698] ? snd_card_file_add+0x52/0x340 [ 1598.652217][T25698] ? snd_card_file_add+0x52/0x340 [ 1598.652242][T25698] snd_card_file_add+0x52/0x340 [ 1598.652271][T25698] snd_rawmidi_open+0x2cc/0xbf0 [ 1598.652308][T25698] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1598.652353][T25698] ? kobject_get_unless_zero+0x156/0x1e0 [ 1598.652385][T25698] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1598.652415][T25698] snd_open+0x22d/0x4c0 [ 1598.652437][T25698] ? __pfx_snd_open+0x10/0x10 [ 1598.652458][T25698] chrdev_open+0x234/0x6a0 [ 1598.652492][T25698] ? __pfx_apparmor_file_open+0x10/0x10 [ 1598.652521][T25698] ? __pfx_chrdev_open+0x10/0x10 [ 1598.652556][T25698] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1598.652595][T25698] do_dentry_open+0x6fe/0x1560 [ 1598.652626][T25698] ? __pfx_chrdev_open+0x10/0x10 [ 1598.652666][T25698] vfs_open+0x82/0x3f0 [ 1598.652690][T25698] path_openat+0x2016/0x2f90 [ 1598.652729][T25698] ? __pfx_path_openat+0x10/0x10 [ 1598.652761][T25698] ? __lock_acquire+0xb8a/0x1c90 [ 1598.652799][T25698] do_filp_open+0x20b/0x470 [ 1598.652829][T25698] ? __pfx_do_filp_open+0x10/0x10 [ 1598.652880][T25698] ? alloc_fd+0x471/0x7d0 [ 1598.652915][T25698] do_sys_openat2+0x11b/0x1d0 [ 1598.652938][T25698] ? __pfx_do_sys_openat2+0x10/0x10 [ 1598.652961][T25698] ? find_held_lock+0x2b/0x80 [ 1598.652995][T25698] __x64_sys_openat+0x174/0x210 [ 1598.653018][T25698] ? __pfx___x64_sys_openat+0x10/0x10 [ 1598.653052][T25698] do_syscall_64+0xcd/0xfa0 [ 1598.653079][T25698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.653103][T25698] RIP: 0033:0x7f2b7bf8f7c9 [ 1598.653121][T25698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1598.653144][T25698] RSP: 002b:00007f2b7a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1598.653167][T25698] RAX: ffffffffffffffda RBX: 00007f2b7c1e5fa0 RCX: 00007f2b7bf8f7c9 [ 1598.653183][T25698] RDX: 0000000000103000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1598.653199][T25698] RBP: 00007f2b7c013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1598.653214][T25698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.653229][T25698] R13: 00007f2b7c1e6038 R14: 00007f2b7c1e5fa0 R15: 00007fff1b5c04a8 [ 1598.653261][T25698] [ 1599.515300][T25700] block2mtd: illegal erase size [ 1599.738529][T25141] Bluetooth: hci0: command tx timeout [ 1600.211387][T25655] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.549601][T25655] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.884926][T25655] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.308831][T25655] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.777939][T25141] Bluetooth: hci0: command tx timeout [ 1602.073416][T25655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1602.117401][T25655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1602.173899][T25655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1602.228021][T25655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1602.788788][T25730] FAULT_INJECTION: forcing a failure. [ 1602.788788][T25730] name failslab, interval 1, probability 393216, space 0, times 0 [ 1602.856779][T25734] netlink: 'syz.4.5018': attribute type 1 has an invalid length. [ 1602.873254][T25730] CPU: 0 UID: 0 PID: 25730 Comm: syz.6.5017 Tainted: G U syzkaller #0 PREEMPT(full) [ 1602.873292][T25730] Tainted: [U]=USER [ 1602.873301][T25730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1602.873316][T25730] Call Trace: [ 1602.873324][T25730] [ 1602.873333][T25730] dump_stack_lvl+0x16c/0x1f0 [ 1602.873361][T25730] should_fail_ex+0x512/0x640 [ 1602.873397][T25730] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1602.873427][T25730] should_failslab+0xc2/0x120 [ 1602.873465][T25730] __kmalloc_cache_noprof+0x72/0x780 [ 1602.873493][T25730] ? snd_card_file_add+0x52/0x340 [ 1602.873524][T25730] ? snd_card_file_add+0x52/0x340 [ 1602.873548][T25730] snd_card_file_add+0x52/0x340 [ 1602.873578][T25730] snd_rawmidi_open+0x2cc/0xbf0 [ 1602.873614][T25730] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1602.873651][T25730] ? kobject_get_unless_zero+0x156/0x1e0 [ 1602.873682][T25730] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1602.873712][T25730] snd_open+0x22d/0x4c0 [ 1602.873734][T25730] ? __pfx_snd_open+0x10/0x10 [ 1602.873754][T25730] chrdev_open+0x234/0x6a0 [ 1602.873787][T25730] ? __pfx_apparmor_file_open+0x10/0x10 [ 1602.873823][T25730] ? __pfx_chrdev_open+0x10/0x10 [ 1602.873858][T25730] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1602.873897][T25730] do_dentry_open+0x6fe/0x1560 [ 1602.873929][T25730] ? __pfx_chrdev_open+0x10/0x10 [ 1602.873971][T25730] vfs_open+0x82/0x3f0 [ 1602.873996][T25730] path_openat+0x2016/0x2f90 [ 1602.874037][T25730] ? __pfx_path_openat+0x10/0x10 [ 1602.874070][T25730] ? __lock_acquire+0xb8a/0x1c90 [ 1602.874110][T25730] do_filp_open+0x20b/0x470 [ 1602.874141][T25730] ? __pfx_do_filp_open+0x10/0x10 [ 1602.874194][T25730] ? alloc_fd+0x471/0x7d0 [ 1602.874231][T25730] do_sys_openat2+0x11b/0x1d0 [ 1602.874253][T25730] ? __pfx_do_sys_openat2+0x10/0x10 [ 1602.874278][T25730] ? find_held_lock+0x2b/0x80 [ 1602.874313][T25730] __x64_sys_openat+0x174/0x210 [ 1602.874337][T25730] ? __pfx___x64_sys_openat+0x10/0x10 [ 1602.874373][T25730] do_syscall_64+0xcd/0xfa0 [ 1602.874400][T25730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.874424][T25730] RIP: 0033:0x7f2b7bf8f7c9 [ 1602.874443][T25730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.874468][T25730] RSP: 002b:00007f2b7a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1602.874491][T25730] RAX: ffffffffffffffda RBX: 00007f2b7c1e5fa0 RCX: 00007f2b7bf8f7c9 [ 1602.874507][T25730] RDX: 0000000000103000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1602.874522][T25730] RBP: 00007f2b7c013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1602.874537][T25730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.874551][T25730] R13: 00007f2b7c1e6038 R14: 00007f2b7c1e5fa0 R15: 00007fff1b5c04a8 [ 1602.874583][T25730] [ 1603.772928][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5021'. [ 1603.939867][T25655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.071625][T25655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.258920][T25126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.266145][T25126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.309720][T25126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.316939][T25126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.649244][T25655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.062264][T25769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5027'. [ 1606.812519][T25780] netlink: 'syz.4.5029': attribute type 1 has an invalid length. [ 1607.438820][T25655] veth0_vlan: entered promiscuous mode [ 1607.552951][T25655] veth1_vlan: entered promiscuous mode [ 1607.764939][T25655] veth0_macvtap: entered promiscuous mode [ 1607.841803][T25655] veth1_macvtap: entered promiscuous mode [ 1607.954167][T25655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.014066][T25655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.086366][T25175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.319039][T25175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.383762][T25175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.491374][T25175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.537433][T25310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.545423][T25310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.762688][T25133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.796190][T25133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.360590][T25827] FAULT_INJECTION: forcing a failure. [ 1611.360590][T25827] name failslab, interval 1, probability 393216, space 0, times 0 [ 1611.398096][T25827] CPU: 0 UID: 0 PID: 25827 Comm: syz.5.5039 Tainted: G U syzkaller #0 PREEMPT(full) [ 1611.398136][T25827] Tainted: [U]=USER [ 1611.398144][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1611.398158][T25827] Call Trace: [ 1611.398166][T25827] [ 1611.398175][T25827] dump_stack_lvl+0x16c/0x1f0 [ 1611.398206][T25827] should_fail_ex+0x512/0x640 [ 1611.398235][T25827] ? __kmalloc_noprof+0xca/0x880 [ 1611.398264][T25827] should_failslab+0xc2/0x120 [ 1611.398301][T25827] __kmalloc_noprof+0xdd/0x880 [ 1611.398328][T25827] ? __alloc_workqueue+0x112/0x1810 [ 1611.398371][T25827] ? __alloc_workqueue+0x112/0x1810 [ 1611.398401][T25827] __alloc_workqueue+0x112/0x1810 [ 1611.398442][T25827] alloc_workqueue_noprof+0xd2/0x200 [ 1611.398474][T25827] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1611.398511][T25827] ? rcu_is_watching+0x12/0xc0 [ 1611.398539][T25827] ? trace_kmalloc+0x2b/0xd0 [ 1611.398573][T25827] ? __kmalloc_noprof+0x34f/0x880 [ 1611.398598][T25827] ? ieee80211_register_hw+0x15c9/0x4120 [ 1611.398635][T25827] ieee80211_register_hw+0x1f1a/0x4120 [ 1611.398675][T25827] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1611.398704][T25827] ? __pfx___debug_object_init+0x10/0x10 [ 1611.398748][T25827] ? find_held_lock+0x2b/0x80 [ 1611.398776][T25827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1611.398806][T25827] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1611.398832][T25827] ? __hrtimer_setup+0x176/0x280 [ 1611.398859][T25827] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 1611.398912][T25827] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1611.398957][T25827] hwsim_new_radio_nl+0xba2/0x1330 [ 1611.398996][T25827] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1611.399041][T25827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1611.399070][T25827] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1611.399104][T25827] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1611.399132][T25827] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1611.399168][T25827] ? bpf_lsm_capable+0x9/0x10 [ 1611.399205][T25827] ? security_capable+0x7e/0x260 [ 1611.399232][T25827] ? ns_capable+0xd7/0x110 [ 1611.399260][T25827] genl_rcv_msg+0x55c/0x800 [ 1611.399289][T25827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1611.399315][T25827] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1611.399378][T25827] netlink_rcv_skb+0x158/0x420 [ 1611.399415][T25827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1611.399442][T25827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1611.399493][T25827] ? netlink_deliver_tap+0x1ae/0xd30 [ 1611.399533][T25827] genl_rcv+0x28/0x40 [ 1611.399553][T25827] netlink_unicast+0x5aa/0x870 [ 1611.399597][T25827] ? __pfx_netlink_unicast+0x10/0x10 [ 1611.399646][T25827] netlink_sendmsg+0x8c8/0xdd0 [ 1611.399688][T25827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1611.399729][T25827] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1611.399762][T25827] ____sys_sendmsg+0xa98/0xc70 [ 1611.399787][T25827] ? copy_msghdr_from_user+0x10a/0x160 [ 1611.399820][T25827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1611.399840][T25827] ? preempt_schedule_thunk+0x16/0x30 [ 1611.399883][T25827] ? try_to_wake_up+0xa67/0x1870 [ 1611.399916][T25827] ___sys_sendmsg+0x134/0x1d0 [ 1611.399946][T25827] ? find_held_lock+0x2b/0x80 [ 1611.399974][T25827] ? __pfx____sys_sendmsg+0x10/0x10 [ 1611.400004][T25827] ? __lock_acquire+0x622/0x1c90 [ 1611.400076][T25827] __sys_sendmsg+0x16d/0x220 [ 1611.400110][T25827] ? __pfx___sys_sendmsg+0x10/0x10 [ 1611.400142][T25827] ? __x64_sys_futex+0x1e0/0x4c0 [ 1611.400197][T25827] do_syscall_64+0xcd/0xfa0 [ 1611.400224][T25827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.400249][T25827] RIP: 0033:0x7f127f78f7c9 [ 1611.400268][T25827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.400292][T25827] RSP: 002b:00007f1280631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.400314][T25827] RAX: ffffffffffffffda RBX: 00007f127f9e5fa0 RCX: 00007f127f78f7c9 [ 1611.400330][T25827] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1611.400351][T25827] RBP: 00007f127f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1611.400366][T25827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1611.400381][T25827] R13: 00007f127f9e6038 R14: 00007f127f9e5fa0 R15: 00007ffd8a7d80e8 [ 1611.400413][T25827] [ 1611.820941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.860846][T25799] Process accounting resumed [ 1612.269435][T25835] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input162 [ 1612.307145][T25128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1612.317481][T25128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1612.329825][T25128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1612.338644][T25128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1612.346898][T25128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1612.754723][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1612.811409][T25175] gretap0: left allmulticast mode [ 1612.816625][T25175] gretap0: left promiscuous mode [ 1612.822713][T25175] bridge0: port 3(gretap0) entered disabled state [ 1612.984830][T25852] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 1613.021415][T25175] bridge_slave_1: left allmulticast mode [ 1613.054399][T25175] bridge_slave_1: left promiscuous mode [ 1613.087405][T25175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.318832][T25175] bridge_slave_0: left allmulticast mode [ 1613.324767][T25175] bridge_slave_0: left promiscuous mode [ 1613.418509][T25175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.135726][T25872] netlink: 'syz.6.5050': attribute type 1 has an invalid length. [ 1614.431519][T25128] Bluetooth: hci2: command tx timeout [ 1614.759380][T25175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.821693][T25175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.841174][T25175] bond0 (unregistering): Released all slaves [ 1615.094683][T25175] HfR: left promiscuous mode [ 1615.658081][T25888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5054'. [ 1616.500734][T25128] Bluetooth: hci2: command tx timeout [ 1617.088138][T25830] chnl_net:caif_netlink_parms(): no params data found [ 1617.892218][T25128] block nbd3: Receive control failed (result -107) [ 1618.219238][T25830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.297812][T25830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.393596][T25926] netlink: 'syz.2.5063': attribute type 1 has an invalid length. [ 1618.402551][T25830] bridge_slave_0: entered allmulticast mode [ 1618.445362][T25830] bridge_slave_0: entered promiscuous mode [ 1618.499754][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.506661][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.571614][T25128] Bluetooth: hci2: command tx timeout [ 1618.590570][T25830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.628299][T25830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.657596][T25830] bridge_slave_1: entered allmulticast mode [ 1618.692456][T25830] bridge_slave_1: entered promiscuous mode [ 1619.100833][T25830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.205901][T25830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.518828][T25830] team0: Port device team_slave_0 added [ 1619.567627][T25830] team0: Port device team_slave_1 added [ 1619.846111][T25942] netlink: 334 bytes leftover after parsing attributes in process `syz.5.5067'. [ 1619.966709][T25830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.014468][T25830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.148620][T25830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.214746][T25830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.246576][T25830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.348982][T25830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.498053][T25175] hsr_slave_0: left promiscuous mode [ 1620.526760][T25175] hsr_slave_1: left promiscuous mode [ 1620.558625][T25175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.595790][T25175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.642295][T25128] Bluetooth: hci2: command tx timeout [ 1620.722743][T25175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.793444][T25175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.082939][T25175] veth1_macvtap: left promiscuous mode [ 1621.167604][T25175] veth0_macvtap: left promiscuous mode [ 1621.253135][T25175] veth1_vlan: left promiscuous mode [ 1621.317157][T25175] veth0_vlan: left promiscuous mode [ 1621.954042][T25966] zswap: compressor 000 not available [ 1622.938623][T25175] team0 (unregistering): Port device team_slave_1 removed [ 1623.058124][T25175] team0 (unregistering): Port device team_slave_0 removed [ 1624.094936][T25949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1624.141130][T25949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1624.173032][T25949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1624.212905][T25949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1624.234081][T25949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1624.269376][T25949] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1624.278815][T25830] hsr_slave_0: entered promiscuous mode [ 1624.311200][T25830] hsr_slave_1: entered promiscuous mode [ 1624.328568][T25949] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1624.388015][T25949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1624.422427][T25949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1624.462114][T25949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1625.831974][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1626.130789][T25128] Bluetooth: hci3: command 0x0406 tx timeout [ 1626.210257][T25128] Bluetooth: hci4: command 0x0c1a tx timeout [ 1626.291065][T25128] Bluetooth: hci0: command 0x0c1a tx timeout [ 1626.449119][T25128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1626.928872][T25830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1626.987913][T26001] netlink: 'syz.5.5085': attribute type 11 has an invalid length. [ 1627.460556][T25830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1627.566997][T25830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1627.590708][ T30] audit: type=1804 audit(4294967306.589:151): pid=26011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5084" name="/newroot/25/file0" dev="tmpfs" ino=147 res=1 errno=0 [ 1627.770207][ T30] audit: type=1800 audit(4294967306.760:152): pid=26011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5084" name="file0" dev="tmpfs" ino=147 res=0 errno=0 [ 1627.907281][T25830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1628.282048][T25128] Bluetooth: hci4: command 0x0c1a tx timeout [ 1628.317524][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5089'. [ 1628.360427][T25128] Bluetooth: hci0: command 0x0c1a tx timeout [ 1628.518680][T25128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1628.627910][T26035] netlink: 334 bytes leftover after parsing attributes in process `syz.2.5088'. [ 1629.312572][T25830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.469266][T25830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.621622][T25146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.628869][T25146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.890099][T25290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.897327][T25290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.083807][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5098'. [ 1630.104937][T25128] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1630.355408][T25128] Bluetooth: hci4: command 0x0c1a tx timeout [ 1630.428524][T25128] Bluetooth: hci0: command 0x0c1a tx timeout [ 1630.590757][T25128] Bluetooth: hci2: command 0x0c1a tx timeout [ 1631.304099][T26065] FAULT_INJECTION: forcing a failure. [ 1631.304099][T26065] name failslab, interval 1, probability 393216, space 0, times 0 [ 1631.343546][T26065] CPU: 0 UID: 0 PID: 26065 Comm: syz.5.5101 Tainted: G U syzkaller #0 PREEMPT(full) [ 1631.343595][T26065] Tainted: [U]=USER [ 1631.343604][T26065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1631.343619][T26065] Call Trace: [ 1631.343627][T26065] [ 1631.343636][T26065] dump_stack_lvl+0x16c/0x1f0 [ 1631.343667][T26065] should_fail_ex+0x512/0x640 [ 1631.343697][T26065] ? __kmalloc_noprof+0xca/0x880 [ 1631.343726][T26065] should_failslab+0xc2/0x120 [ 1631.343764][T26065] __kmalloc_noprof+0xdd/0x880 [ 1631.343791][T26065] ? ieee80211_register_hw+0x15c9/0x4120 [ 1631.343827][T26065] ? ieee80211_register_hw+0x15c9/0x4120 [ 1631.343856][T26065] ieee80211_register_hw+0x15c9/0x4120 [ 1631.343897][T26065] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1631.343928][T26065] ? __pfx___debug_object_init+0x10/0x10 [ 1631.343973][T26065] ? find_held_lock+0x2b/0x80 [ 1631.344003][T26065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1631.344032][T26065] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1631.344058][T26065] ? __hrtimer_setup+0x176/0x280 [ 1631.344084][T26065] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 1631.344138][T26065] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1631.344183][T26065] hwsim_new_radio_nl+0xba2/0x1330 [ 1631.344221][T26065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1631.344266][T26065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1631.344295][T26065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1631.344329][T26065] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1631.344357][T26065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1631.344392][T26065] ? bpf_lsm_capable+0x9/0x10 [ 1631.344429][T26065] ? security_capable+0x7e/0x260 [ 1631.344456][T26065] ? ns_capable+0xd7/0x110 [ 1631.344483][T26065] genl_rcv_msg+0x55c/0x800 [ 1631.344511][T26065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1631.344537][T26065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1631.344588][T26065] netlink_rcv_skb+0x158/0x420 [ 1631.344626][T26065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1631.344652][T26065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1631.344701][T26065] ? netlink_deliver_tap+0x1ae/0xd30 [ 1631.344740][T26065] genl_rcv+0x28/0x40 [ 1631.344760][T26065] netlink_unicast+0x5aa/0x870 [ 1631.344802][T26065] ? __pfx_netlink_unicast+0x10/0x10 [ 1631.344850][T26065] netlink_sendmsg+0x8c8/0xdd0 [ 1631.344892][T26065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1631.344933][T26065] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1631.344966][T26065] ____sys_sendmsg+0xa98/0xc70 [ 1631.344990][T26065] ? copy_msghdr_from_user+0x10a/0x160 [ 1631.345023][T26065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1631.345053][T26065] ? __pfx_futex_wake_mark+0x10/0x10 [ 1631.345082][T26065] ___sys_sendmsg+0x134/0x1d0 [ 1631.345117][T26065] ? __pfx____sys_sendmsg+0x10/0x10 [ 1631.345147][T26065] ? __lock_acquire+0x622/0x1c90 [ 1631.345219][T26065] __sys_sendmsg+0x16d/0x220 [ 1631.345251][T26065] ? __pfx___sys_sendmsg+0x10/0x10 [ 1631.345283][T26065] ? __x64_sys_futex+0x1e0/0x4c0 [ 1631.345337][T26065] do_syscall_64+0xcd/0xfa0 [ 1631.345364][T26065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.345389][T26065] RIP: 0033:0x7f127f78f7c9 [ 1631.345409][T26065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.345432][T26065] RSP: 002b:00007f1280631038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1631.345455][T26065] RAX: ffffffffffffffda RBX: 00007f127f9e5fa0 RCX: 00007f127f78f7c9 [ 1631.345472][T26065] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 1631.345488][T26065] RBP: 00007f127f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1631.345503][T26065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.345518][T26065] R13: 00007f127f9e6038 R14: 00007f127f9e5fa0 R15: 00007ffd8a7d80e8 [ 1631.345551][T26065] [ 1632.651227][T26070] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1633.155629][T26085] netlink: 334 bytes leftover after parsing attributes in process `syz.6.5104'. [ 1633.287184][T25830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.627341][T26090] random: crng reseeded on system resumption [ 1634.054650][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5109'. [ 1636.000497][T25830] veth0_vlan: entered promiscuous mode [ 1636.185142][T25830] veth1_vlan: entered promiscuous mode [ 1636.512217][T25830] veth0_macvtap: entered promiscuous mode [ 1636.685328][T25830] veth1_macvtap: entered promiscuous mode [ 1636.695819][ T30] audit: type=1804 audit(4294967315.726:153): pid=26143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5119" name="file0" dev="tmpfs" ino=287 res=1 errno=0 [ 1636.953287][T25830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.964023][ T30] audit: type=1800 audit(4294967315.787:154): pid=26143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5119" name="file0" dev="tmpfs" ino=287 res=0 errno=0 [ 1637.100695][T25830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.274667][T25290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.336286][T25290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.500211][T25290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.564736][T25290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.375584][T25133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.503095][T25133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.623714][T25126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.640861][T26164] netlink: 334 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1638.672718][T25126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.588139][ T30] audit: type=1804 audit(4294967299.593:155): pid=26176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5130" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 1639.851113][T26188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5133'. [ 1642.586551][T26237] futex_wake_op: syz.2.5146 tries to shift op by -1; fix this program [ 1642.786440][T25128] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1642.794432][T25128] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 1643.440886][T26262] netlink: 'syz.5.5152': attribute type 5 has an invalid length. [ 1644.333612][T26269] zswap: compressor 000 not available [ 1646.169200][T26303] netlink: 'syz.2.5163': attribute type 5 has an invalid length. [ 1646.189358][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5164'. [ 1647.053710][ T30] audit: type=1804 audit(4294967307.092:156): pid=26320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5166" name="/newroot/36/file0" dev="tmpfs" ino=206 res=1 errno=0 [ 1647.281281][ T30] audit: type=1800 audit(4294967307.222:157): pid=26320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5166" name="file0" dev="tmpfs" ino=206 res=0 errno=0 [ 1647.498786][T26335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5174'. [ 1648.067181][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5176'. [ 1648.236496][T26353] netlink: 'syz.5.5179': attribute type 1 has an invalid length. [ 1648.386287][T26355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5180'. [ 1648.619145][T26355] team0: Port device team_slave_1 removed [ 1650.188298][T26389] netlink: 'syz.2.5188': attribute type 1 has an invalid length. [ 1651.058456][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5191'. [ 1651.270288][T26397] Console: switching to colour VGA+ 80x25 [ 1651.437400][T26405] netlink: 'syz.5.5189': attribute type 11 has an invalid length. [ 1651.437445][T26405] netlink: 'syz.5.5189': attribute type 11 has an invalid length. [ 1651.437460][T26405] netlink: 'syz.5.5189': attribute type 11 has an invalid length. [ 1651.476816][T26402] ================================================================== [ 1651.476837][T26402] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1651.476873][T26402] Read of size 256 at addr ffff888081867860 by task syz.2.5190/26402 [ 1651.476893][T26402] [ 1651.476907][T26402] CPU: 0 UID: 0 PID: 26402 Comm: syz.2.5190 Tainted: G U syzkaller #0 PREEMPT(full) [ 1651.476940][T26402] Tainted: [U]=USER [ 1651.476948][T26402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.476968][T26402] Call Trace: [ 1651.476976][T26402] [ 1651.476985][T26402] dump_stack_lvl+0x116/0x1f0 [ 1651.477010][T26402] print_report+0xcd/0x630 [ 1651.477044][T26402] ? __virt_addr_valid+0x81/0x610 [ 1651.477074][T26402] ? __phys_addr+0xe8/0x180 [ 1651.477103][T26402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1651.477128][T26402] kasan_report+0xe0/0x110 [ 1651.477162][T26402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1651.477193][T26402] kasan_check_range+0x100/0x1b0 [ 1651.477216][T26402] __asan_memcpy+0x23/0x60 [ 1651.477243][T26402] fbcon_prepare_logo+0xa03/0xc70 [ 1651.477275][T26402] fbcon_init+0xd77/0x1900 [ 1651.477304][T26402] visual_init+0x320/0x620 [ 1651.477332][T26402] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1651.477369][T26402] store_bind+0x61d/0x760 [ 1651.477401][T26402] ? sysfs_file_kobj+0xe4/0x290 [ 1651.477434][T26402] ? __pfx_store_bind+0x10/0x10 [ 1651.477464][T26402] dev_attr_store+0x58/0x80 [ 1651.477489][T26402] ? __pfx_dev_attr_store+0x10/0x10 [ 1651.477515][T26402] sysfs_kf_write+0xf2/0x150 [ 1651.477548][T26402] kernfs_fop_write_iter+0x3af/0x570 [ 1651.477576][T26402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1651.477610][T26402] iter_file_splice_write+0xa24/0x12e0 [ 1651.477667][T26402] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1651.477699][T26402] ? __pfx_copy_splice_read+0x10/0x10 [ 1651.477739][T26402] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1651.477770][T26402] direct_splice_actor+0x192/0x6c0 [ 1651.477799][T26402] splice_direct_to_actor+0x345/0xa30 [ 1651.477847][T26402] ? __pfx_direct_splice_actor+0x10/0x10 [ 1651.477879][T26402] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1651.477912][T26402] do_splice_direct+0x174/0x240 [ 1651.477939][T26402] ? __pfx_do_splice_direct+0x10/0x10 [ 1651.477972][T26402] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1651.478002][T26402] ? rw_verify_area+0xcf/0x6c0 [ 1651.478029][T26402] do_sendfile+0xb06/0xe50 [ 1651.478059][T26402] ? __pfx_do_sendfile+0x10/0x10 [ 1651.478086][T26402] ? __sys_sendmsg+0x18c/0x220 [ 1651.478119][T26402] ? __x64_sys_futex+0x1e0/0x4c0 [ 1651.478154][T26402] ? __x64_sys_futex+0x1e9/0x4c0 [ 1651.478191][T26402] __x64_sys_sendfile64+0x1d8/0x220 [ 1651.478226][T26402] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1651.478265][T26402] do_syscall_64+0xcd/0xfa0 [ 1651.478290][T26402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.478314][T26402] RIP: 0033:0x7efe7e18f7c9 [ 1651.478333][T26402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1651.478357][T26402] RSP: 002b:00007efe7ef3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1651.478380][T26402] RAX: ffffffffffffffda RBX: 00007efe7e3e6180 RCX: 00007efe7e18f7c9 [ 1651.478396][T26402] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1651.478409][T26402] RBP: 00007efe7e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1651.478424][T26402] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1651.478438][T26402] R13: 00007efe7e3e6218 R14: 00007efe7e3e6180 R15: 00007ffeef3dc958 [ 1651.478462][T26402] [ 1651.478470][T26402] [ 1651.478476][T26402] Allocated by task 26392: [ 1651.478487][T26402] kasan_save_stack+0x33/0x60 [ 1651.478517][T26402] kasan_save_track+0x14/0x30 [ 1651.478545][T26402] __kasan_kmalloc+0xaa/0xb0 [ 1651.478574][T26402] __kmalloc_noprof+0x32f/0x880 [ 1651.478596][T26402] sk_prot_alloc+0x1a8/0x2a0 [ 1651.478630][T26402] sk_alloc+0x36/0xb80 [ 1651.478655][T26402] __netlink_create+0x5e/0x2c0 [ 1651.478681][T26402] netlink_create+0x39e/0x620 [ 1651.478710][T26402] __sock_create+0x338/0x8d0 [ 1651.478729][T26402] __sys_socket+0x14d/0x260 [ 1651.478749][T26402] __x64_sys_socket+0x72/0xb0 [ 1651.478770][T26402] do_syscall_64+0xcd/0xfa0 [ 1651.478791][T26402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.478813][T26402] [ 1651.478819][T26402] Freed by task 15: [ 1651.478829][T26402] kasan_save_stack+0x33/0x60 [ 1651.478857][T26402] kasan_save_track+0x14/0x30 [ 1651.478886][T26402] __kasan_save_free_info+0x3b/0x60 [ 1651.478910][T26402] __kasan_slab_free+0x5f/0x80 [ 1651.478941][T26402] kfree+0x2b8/0x6d0 [ 1651.478967][T26402] __sk_destruct+0x888/0xb90 [ 1651.478992][T26402] sk_destruct+0xc2/0xf0 [ 1651.479017][T26402] __sk_free+0xf4/0x3e0 [ 1651.479042][T26402] sk_free+0x6a/0x90 [ 1651.479066][T26402] deferred_put_nlk_sk+0xc9/0x110 [ 1651.479094][T26402] rcu_core+0x79c/0x1530 [ 1651.479116][T26402] handle_softirqs+0x219/0x8e0 [ 1651.479140][T26402] run_ksoftirqd+0x3a/0x60 [ 1651.479163][T26402] smpboot_thread_fn+0x3f7/0xae0 [ 1651.479193][T26402] kthread+0x3c5/0x780 [ 1651.479223][T26402] ret_from_fork+0x675/0x7d0 [ 1651.479255][T26402] ret_from_fork_asm+0x1a/0x30 [ 1651.479285][T26402] [ 1651.479291][T26402] Last potentially related work creation: [ 1651.479298][T26402] kasan_save_stack+0x33/0x60 [ 1651.479327][T26402] kasan_record_aux_stack+0xa7/0xc0 [ 1651.479350][T26402] __call_rcu_common.constprop.0+0xa5/0xa10 [ 1651.479372][T26402] netlink_release+0x9ce/0x2080 [ 1651.479404][T26402] __sock_release+0xb3/0x270 [ 1651.479434][T26402] sock_close+0x1c/0x30 [ 1651.479463][T26402] __fput+0x402/0xb70 [ 1651.479495][T26402] fput_close_sync+0x118/0x210 [ 1651.479514][T26402] __x64_sys_close+0x8b/0x120 [ 1651.479535][T26402] do_syscall_64+0xcd/0xfa0 [ 1651.479556][T26402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.479578][T26402] [ 1651.479583][T26402] The buggy address belongs to the object at ffff888081867000 [ 1651.479583][T26402] which belongs to the cache kmalloc-2k of size 2048 [ 1651.479602][T26402] The buggy address is located 96 bytes to the right of [ 1651.479602][T26402] allocated 2048-byte region [ffff888081867000, ffff888081867800) [ 1651.479626][T26402] [ 1651.479633][T26402] The buggy address belongs to the physical page: [ 1651.479644][T26402] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x81860 [ 1651.479666][T26402] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1651.479685][T26402] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1651.479705][T26402] page_type: f5(slab) [ 1651.479726][T26402] raw: 00fff00000000040 ffff88813ffa7000 ffffea00008bfe00 dead000000000002 [ 1651.479747][T26402] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1651.479770][T26402] head: 00fff00000000040 ffff88813ffa7000 ffffea00008bfe00 dead000000000002 [ 1651.479791][T26402] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1651.479813][T26402] head: 00fff00000000003 ffffea0002061801 00000000ffffffff 00000000ffffffff [ 1651.479834][T26402] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1651.479848][T26402] page dumped because: kasan: bad access detected [ 1651.479859][T26402] page_owner tracks the page as allocated [ 1651.479868][T26402] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23567, tgid 23566 (syz.2.4460), ts 1432303456608, free_ts 1432261932145 [ 1651.479909][T26402] post_alloc_hook+0x1af/0x220 [ 1651.479932][T26402] get_page_from_freelist+0x10a3/0x3a30 [ 1651.479961][T26402] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1651.479988][T26402] alloc_pages_mpol+0x1fb/0x550 [ 1651.480021][T26402] new_slab+0x24a/0x360 [ 1651.480041][T26402] ___slab_alloc+0xd79/0x1a50 [ 1651.480062][T26402] __slab_alloc.constprop.0+0x63/0x110 [ 1651.480086][T26402] __kvmalloc_node_noprof+0x5aa/0x9c0 [ 1651.480116][T26402] evdev_open+0x11a/0x690 [ 1651.480147][T26402] chrdev_open+0x234/0x6a0 [ 1651.480176][T26402] do_dentry_open+0x6fe/0x1560 [ 1651.480204][T26402] vfs_open+0x82/0x3f0 [ 1651.480221][T26402] path_openat+0x2016/0x2f90 [ 1651.480248][T26402] do_filp_open+0x20b/0x470 [ 1651.480274][T26402] do_sys_openat2+0x11b/0x1d0 [ 1651.480292][T26402] __x64_sys_openat+0x174/0x210 [ 1651.480313][T26402] page last free pid 5199 tgid 5199 stack trace: [ 1651.480326][T26402] __free_frozen_pages+0x7df/0x1160 [ 1651.480345][T26402] __put_partials+0x130/0x170 [ 1651.480367][T26402] qlist_free_all+0x4d/0x120 [ 1651.480393][T26402] kasan_quarantine_reduce+0x195/0x1e0 [ 1651.480422][T26402] __kasan_slab_alloc+0x69/0x90 [ 1651.480453][T26402] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1651.480478][T26402] getname_flags.part.0+0x4c/0x550 [ 1651.480497][T26402] __x64_sys_unlink+0xb0/0x110 [ 1651.480526][T26402] do_syscall_64+0xcd/0xfa0 [ 1651.480548][T26402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.480575][T26402] [ 1651.480582][T26402] Memory state around the buggy address: [ 1651.480595][T26402] ffff888081867700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1651.480612][T26402] ffff888081867780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1651.480629][T26402] >ffff888081867800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1651.480642][T26402] ^ [ 1651.480656][T26402] ffff888081867880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1651.480672][T26402] ffff888081867900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1651.480685][T26402] ================================================================== [ 1651.569404][T26402] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1651.569427][T26402] CPU: 0 UID: 0 PID: 26402 Comm: syz.2.5190 Tainted: G U syzkaller #0 PREEMPT(full) [ 1651.569460][T26402] Tainted: [U]=USER [ 1651.569469][T26402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1651.569483][T26402] Call Trace: [ 1651.569491][T26402] [ 1651.569500][T26402] dump_stack_lvl+0x3d/0x1f0 [ 1651.569529][T26402] vpanic+0x640/0x6f0 [ 1651.569563][T26402] panic+0xca/0xd0 [ 1651.569597][T26402] ? __pfx_panic+0x10/0x10 [ 1651.569630][T26402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1651.569657][T26402] ? preempt_schedule_common+0x44/0xc0 [ 1651.569681][T26402] ? preempt_schedule_thunk+0x16/0x30 [ 1651.569718][T26402] ? check_panic_on_warn+0x1f/0xb0 [ 1651.569753][T26402] check_panic_on_warn+0xab/0xb0 [ 1651.569787][T26402] end_report+0x107/0x170 [ 1651.569821][T26402] kasan_report+0xee/0x110 [ 1651.569857][T26402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1651.569886][T26402] kasan_check_range+0x100/0x1b0 [ 1651.569910][T26402] __asan_memcpy+0x23/0x60 [ 1651.569938][T26402] fbcon_prepare_logo+0xa03/0xc70 [ 1651.569971][T26402] fbcon_init+0xd77/0x1900 [ 1651.570009][T26402] visual_init+0x320/0x620 [ 1651.570038][T26402] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1651.570077][T26402] store_bind+0x61d/0x760 [ 1651.570110][T26402] ? sysfs_file_kobj+0xe4/0x290 [ 1651.570145][T26402] ? __pfx_store_bind+0x10/0x10 [ 1651.570176][T26402] dev_attr_store+0x58/0x80 [ 1651.570203][T26402] ? __pfx_dev_attr_store+0x10/0x10 [ 1651.570230][T26402] sysfs_kf_write+0xf2/0x150 [ 1651.570265][T26402] kernfs_fop_write_iter+0x3af/0x570 [ 1651.570294][T26402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1651.570329][T26402] iter_file_splice_write+0xa24/0x12e0 [ 1651.570370][T26402] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1651.570403][T26402] ? __pfx_copy_splice_read+0x10/0x10 [ 1651.570442][T26402] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1651.570473][T26402] direct_splice_actor+0x192/0x6c0 [ 1651.570504][T26402] splice_direct_to_actor+0x345/0xa30 [ 1651.570533][T26402] ? __pfx_direct_splice_actor+0x10/0x10 [ 1651.570565][T26402] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1651.570597][T26402] do_splice_direct+0x174/0x240 [ 1651.570625][T26402] ? __pfx_do_splice_direct+0x10/0x10 [ 1651.570653][T26402] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1651.570683][T26402] ? rw_verify_area+0xcf/0x6c0 [ 1651.570710][T26402] do_sendfile+0xb06/0xe50 [ 1651.570741][T26402] ? __pfx_do_sendfile+0x10/0x10 [ 1651.570768][T26402] ? __sys_sendmsg+0x18c/0x220 [ 1651.570802][T26402] ? __x64_sys_futex+0x1e0/0x4c0 [ 1651.570837][T26402] ? __x64_sys_futex+0x1e9/0x4c0 [ 1651.570873][T26402] __x64_sys_sendfile64+0x1d8/0x220 [ 1651.570909][T26402] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1651.570949][T26402] do_syscall_64+0xcd/0xfa0 [ 1651.570974][T26402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.571003][T26402] RIP: 0033:0x7efe7e18f7c9 [ 1651.571021][T26402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1651.571044][T26402] RSP: 002b:00007efe7ef3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1651.571066][T26402] RAX: ffffffffffffffda RBX: 00007efe7e3e6180 RCX: 00007efe7e18f7c9 [ 1651.571083][T26402] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1651.571097][T26402] RBP: 00007efe7e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1651.571112][T26402] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1651.571127][T26402] R13: 00007efe7e3e6218 R14: 00007efe7e3e6180 R15: 00007ffeef3dc958 [ 1651.571151][T26402] [ 1651.571223][T26402] Kernel Offset: disabled