last executing test programs: 2m47.504222446s ago: executing program 3 (id=4272): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_PEERNAME(0xffffffffffffffff, 0xfffffffa, 0x1c, &(0x7f00000000c0)='\xaa+.$[\x00', &(0x7f0000000180)=0x8) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0) sendfile$auto(r2, r2, &(0x7f0000000040)=0x8010, 0x788b) 2m46.517864735s ago: executing program 3 (id=4277): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 2m46.182693037s ago: executing program 3 (id=4278): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m45.881105057s ago: executing program 3 (id=4280): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) mmap$auto(0x4010000907, 0x40000c, 0xdf, 0xf2, r0, 0x2f90) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x14f602, 0x0) readahead$auto(r1, 0x9, 0x7fffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) geteuid() r2 = socket(0x10, 0x2, 0x4) socket(0x25, 0x1, 0x3) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x402100, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e", @ANYRES32=r2, @ANYBLOB='\b'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m45.481276876s ago: executing program 3 (id=4283): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x400005, 0x8df, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) clone$auto(0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) exit$auto(0xfff) r1 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r1, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/vbi30/power/control\x00', 0x150102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 2m42.841624847s ago: executing program 3 (id=4296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (fail_nth: 5) 2m31.773769646s ago: executing program 1 (id=4335): adjtimex$auto(&(0x7f0000000000)={0xffffeff0, 0x0, 0x7, 0x21f8, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x80000000004, {0x5, 0x2}, 0x8000000252, 0x5, 0x400000003, 0x1, 0x0, 0x4, 0x9, 0xc578, 0x6, 0x400, 0x7ff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000001100)=""/4096, 0x1000) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) accept$auto(r3, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000108, 0x400, 0x9}]}) 2m30.462171178s ago: executing program 1 (id=4338): mmap$auto(0x0, 0x20000400008, 0x1, 0xff, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x1, 0x9, 0x7, 0x18, 0xfffffffffffffffa, 0x8803) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xffffffffffff06e1, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fstat$auto(r1, &(0x7f00000002c0)={0x0, 0x7ed, 0xc3, 0xfffffffd, 0xee01, 0xffffffffffffffff, 0x0, 0x80, 0xffffffffffffffff, 0x80, 0x1, 0x80000001, 0x5, 0x8, 0x32f, 0x80000001, 0x2}) rt_sigqueueinfo$auto(0x0, 0xb4, &(0x7f00000005c0)={@siginfo_0_0={0x9, 0x1, 0x10000, @_rt={0x0, r2, @sival_ptr=&(0x7f0000000100)="9ebdffab1e55bb7896109392f07ac4bae3fcf0b919206263eb20be2cf52b8b1feae8939056f0e847a4feae29d253e536328d1f5944bcb81b4c8d3f92a97be1cf18b6fabe95b8d70b53ab9abf4df93a5e2713e768284080a4f2c5cd0dd4de49e3d2679ef2dc25e6b64e38744bdf4fc777c2f4ac835e95cebc7c"}}}) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, 0x0, 0xa8000, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x7f24) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a801, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x28102, 0x0) write$auto(r3, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shmget$auto(0x8, 0x10565, 0x7ff) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mask_2ghz\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) read$auto(r4, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) 2m28.665610781s ago: executing program 1 (id=4346): rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub2/info\x00', 0xc0000, 0x0) readv$auto(0x3, 0x0, 0x1da) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x8, 0x38) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x0, 0x0) read$auto_drm_connector_fops_drm_debugfs(r1, &(0x7f0000000040)=""/99, 0x63) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f00000000c0)={0x6, 0xd48f, 0x3db9bc0000000000, 0x9, 0xe}) 2m27.386804102s ago: executing program 32 (id=4296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) (fail_nth: 5) 2m27.189115195s ago: executing program 1 (id=4350): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) read$auto(r2, 0x0, 0x80) r3 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r3, 0x400454d8, &(0x7f0000000680)=0xffc0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) r5 = getegid() r6 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r4, r5, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r6, @raw=0x5, 0x5, 0x0, 0x0, 0x0}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000500)={{0x2, r4, r5, 0x8, 0x5b, 0x401, 0x2}, 0x4, 0x6, 0x6, 0xb0, @raw=0x9, @raw=0xb6f7, 0x17, 0x0, &(0x7f0000000040)="e14e98c93c29f1d68af7fb9108ab7244dd0f05cd198dcf41300ef34bfdeaf3233334a9e7fa9f982660ca4b917b65732d0627627cd4046ced6eca6f367a6c1451", &(0x7f0000002640)="b2e9b4abdace6a500e268d7f6ad74f47b20751b3ba921d9b5c4b6f84f10f1691565e1a82c7b1d084b080a8c3dbcd8e9b00c747b87f06b125efa7e2d2d09a7d9fd38a62592adc0024894feeb074a13c6827d4dfb1ee29b83eb13cf58eb7d45782f151e48f3c41587a1d9f8ceeae60fdb2f06ff0f018242ea50bcbfe130eda2ff8d3bcd40812"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000001c0)={0x8, 0x6, 0x1000, 0x6, 0x0, r7}) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f0000000340)={{0x7ff, r8, 0x0, 0x4, 0xff5b, 0x7fffffff, 0x4}, 0x8000, 0x7, 0x10000, 0x2, @raw=0x9, @raw=0x7fff, 0x2, 0x0, &(0x7f00000000c0)="6e582342984d8b4e4293b22289000000003957ca8892b819ace02085f545420da30f84480897892976a5b942c4fdc1b4be8a07ba168453c99537240a4213e6132f0be6ba6783974cb75b46843a29ddf9", &(0x7f0000000240)="ec2cd7ab8ad39f5b93d3f7687d4e0202a6a55545dd192df10012002c81a10086930a1cb765acc5cc192d3059cd08e7520033dadcee81ee37b87f9d58d0944c0f28cfc5b8d69dfa5485e3528c7142ffc3c10d2edf0d6519095fedef4cde0a8490d0cb7621d8dfa435c7156653a10e4d634386f14939af019156b6d5bb48408e7d35d306aef204f7fe85a3de50486eba98c755829a27a2004738e262401570a21e5a9191f1bbb68812a1df7182979103b254db80c4204dec0958806314087c4f07b3a318343cb95a7bff4e6ec3c2760f338550bd618c5ff6e73041759c00237a620fc14c2ea5a86aef5ccb7fdffff8b5daac361d7679bd41"}) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) r10 = setfsuid$auto(0xee00) setresuid$auto(r10, 0x0, r10) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000780)={0x1dfc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0x12, 0x7, "1b494a283a575d523b9b400ef6aa"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x9}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2e9, 0x75, 0x0, 0x1, [@nested={0x6e, 0xe7, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @uid=r10}, @generic="f2649c63d40131357c862a59fe6563e31e786f90fe96b3db1080d30375f9ea9c14c52a30e3a6ee3cc83b7bba6f51bed7aabd36c4fda0b1b869a67cf024b4fc5a4285bdf79059440751f418f62b26d1015625562b5569", @nested={0x4, 0xf9}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r7}]}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x3}, @generic="f715c345a0a614e5d8ac86a375f2cd6fa5f6ef7ebddb0c2d975a1012adc415145df4bf178f3649f94920263340be4e446e554afa78a0e3fb483dd1a68e2f55f59ce3bf0e2793edad6ad9ab051727a7b86cec25343ff8a65c1d15", @typed={0x4, 0xf8}, @generic="573b3c2b4dffaf6aba3a9696a21549331cdb28ea493ec6267dd2838a0c79f0e457af8025d27ed752b4d8590f8cce5fa3", @nested={0x6d, 0x22, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x5d}, @generic="577848d533e07cf4d4dd5841dc53ceb23c84ab07f8d2279ed99859a87172b945febb94dff5e756fa33756971730a770e8536d54a8f4e16c3b5581c738f0b87e201eb84e98eac17993d9ba2f0e764b05fd0b16d38bbdd80a97416461460", @nested={0x4, 0x57}]}, @generic="41005284688893e873b568873b0e8bddec2e701670cca824506c6c4b9084ab2be766b3c7a3afce6159a17e97e2f9dacc65e5b26cc22efca0fad2f30b6a7b88d11edd2f4e4273e53e47da621d9fca35e1df8e11f8dd6ecb3918c69080a929683a7a1d4e1e0ffd5c96f83aaaea9d2f54ce4e3b74261a70fe6904b87c1eedd12ef52ff55150e9a56a00563b78e2c8e4854f457c8478c08c13289ed504a5b54940a6fac1f4dc1cd66515f87afe3756a74036ed2bab14aa9dabad371fac9ccea25c0ece0b29eb7886e3241f35af30d8c331e221ccbbfbd2", @typed={0x8, 0xd8, 0x0, 0x0, @uid=r9}, @generic="ce17b866078526ddc2a21486a90f9fff879714940a3d69fb66e6f9cf954019cb6dc554e197010020b37fcb56438e28d3baf6bd2b54f67462302d029f19dec4c742a647f1cc8d7a999f503572d64b6eed3dd9e9598a40f1df041c3e0e4ebee807695f3b9f6055262997639a197e0629a78bf414305a80710c401b4072c7471b851c8ce877620d0bfc88e9a862ae20e1625789"]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x1abc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xffffffff}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x12c82}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x25a, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6d605613}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x45e, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x6f5, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x811, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x4c6, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xffff8001}]}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x127}]}]}, 0x1dfc}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 2m26.824498258s ago: executing program 1 (id=4352): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x7ffe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) io_uring_register$auto(r0, 0x3, &(0x7f0000000140)="3f587774e4cfbcd64a30e43f0f64a59f39742946b9964b8e", 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m26.675770422s ago: executing program 1 (id=4353): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) mmap$auto(0x7, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x20009, 0x1003, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x80805, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(r5, 0x10000000084, 0x64, 0x0, 0x2) ioctl$auto(0x3, 0x4020565b, 0x38) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_register$auto(r6, 0x80000000, 0x0, 0x76a7ceb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip_mr_vif\x00', 0x40900, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/gs_usb/uevent\x00', 0x800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x8000, 0x0) pread64$auto(r8, 0x0, 0x594c, 0x9fffffffd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r9) sendmsg$auto_NFSD_CMD_VERSION_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x24, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4044880) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0x10, 0x4, '/dev/video1\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x800}]}, 0x34}}, 0x4000080) r11 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd51ae35893a00"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2m11.602932106s ago: executing program 33 (id=4353): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) mmap$auto(0x7, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x20009, 0x1003, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x80805, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(r5, 0x10000000084, 0x64, 0x0, 0x2) ioctl$auto(0x3, 0x4020565b, 0x38) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_register$auto(r6, 0x80000000, 0x0, 0x76a7ceb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip_mr_vif\x00', 0x40900, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/gs_usb/uevent\x00', 0x800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x8000, 0x0) pread64$auto(r8, 0x0, 0x594c, 0x9fffffffd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r9) sendmsg$auto_NFSD_CMD_VERSION_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x24, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_ENABLED={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4044880) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0x10, 0x4, '/dev/video1\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x800}]}, 0x34}}, 0x4000080) r11 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd51ae35893a00"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 7.097958021s ago: executing program 2 (id=4859): socket(0x1e, 0x4, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8003) socket(0x80000000000000a, 0x2, 0x0) prctl$auto_PR_LOCK_SHADOW_STACK_STATUS(0x4c, 0x9, 0x2, 0x8, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) setresuid$auto(0x8000000000000001, 0x1, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x84941, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) clone3$auto(0x0, 0x7) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) 6.969478972s ago: executing program 4 (id=4861): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 6.198519407s ago: executing program 2 (id=4863): socket(0x1e, 0x4, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8003) socket(0x80000000000000a, 0x2, 0x0) prctl$auto_PR_LOCK_SHADOW_STACK_STATUS(0x4c, 0x9, 0x2, 0x8, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) setresuid$auto(0x8000000000000001, 0x1, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x84941, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) clone3$auto(0x0, 0x7) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) 5.735049227s ago: executing program 5 (id=4864): r0 = bpf$auto(0x1, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0x80000001}, 0x350) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, r1, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x40580, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), r0) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000240)={0x796, 0x3, 0x1, 0xffffffffffffffff, 0xa, 0x0}) r7 = setfsuid$auto(0xee00) setreuid$auto(r7, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000018c0)={0x1c48, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x7}, @OVS_FLOW_ATTR_ACTIONS={0x307, 0x2, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0xdf, 0x51, 0x0, 0x0, @binary="b5b727db83bcc8e258433ec58f6e3abc3e56cf9aaa167f5dbbe9b8eb526daaa57602568a08292416c99d700750dba71ac1ccf75d0ccd6a30673385b13a03ea8ec137525cae60ed8d9ee13588a054f453eb16504d02fe82bb81152101e782dad65d11b08ff5b892429484ca7d0e9a9ceacd907d2050a66ada5075566ccb6f466a6fda8735f909599996fc77b09387a5599a289e0c9ff283db821d32e7ad917ea285a0e2a79fa981e2676f32af74c322c76474e1f4cd42d7befd5f8b66f2f306834c9005217b0c99a0e18d36515648d0894ba774695d32758068c400"}, @generic="08345bd41e9d2be1bbd249a94f17f3cacd4ca040d1601e4059f1bdb8c8e803e1139bab854ed639fd7bad21d570720a75db35dec99ecaeee6661077a005bcae885dcc244e98453e94ef7281642d45637b55dd2fe73bc61d47588eb6f3e916b520c2bee4bd2ac9d8a9baaffd0de85a932c6e5a2b6c62e2736ae5f191", @nested={0xf7, 0xf7, 0x0, 0x1, [@generic="2c9e8e613c12b20486884e4ae3c27444f351deee321e74357873018c1e466ca825844712630e4921e1d47680dd38c14ec1c2467edd51af8ac615d284de9afa53170138544d568da777e154c9b5d7fa90595d59be8ccb3ba067741774fa3ac65deae2870c56f6fe29d16d8a7c1fa713c416369ebfff8cbfd4732350d9f14a5e4a2debea9b698efbcf109a447f861f9f59b944f94b446d13817feee0379f0d923784a583a36e71d41735ce1d4cabcbcb27115102804e7305fd9cb6c06e87923be4381a444ea4ace25eded4f7e528d693a026dd7db65236fe82c8cf15024fac54ae66b70c493a1806e0b9d060c313e76ae220b4f7"]}, @nested={0xa0, 0x87, 0x0, 0x1, [@generic="ff83c740a22f5d77ba85e7f7c8ab18f1fc0be189b55a1091776ef98c12b5fba1b9954ddf412dd57fcff64eaea02ed7be4afdf1d080733e83d66d6bd7a2844a639b72303dc6da1417d1079a1b107518e8bb2e23b39f5806d60d5bf86b7f5bd76cf35b7698cc1e87c4bedfd58b3cb357adf652c166d8b1076793d5b93d0f3bc6c9", @nested={0x4, 0x3d}, @nested={0x4, 0x111}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x26}}]}]}, @OVS_FLOW_ATTR_MASK={0x1266, 0x7, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @u32=0x2}, @generic="a1beff2ddfb910db751cefb0ae5550246fa30a408193a073c170a9d25cf26b6838a00e3ec8349184a42a4a9bb959ba5b1fbe963f9975240015b22f5427ae18c89b855e27d61d6c9edb26efac832f720e84bf70a00bf1e9b3e58a088d47d1799767f236ca3bc2525fa0fb332abe05e3b35ab280f380c91ff2f95500c4d0082f686aad974d55bfd9e49521a8a467865ef567c2c5d30da4ef9aed2daa204045918a23f3c2ec3aa83069762d40ec5fb961f5fb04e3e80f9a38c84ffc26010f3c82720b3a634becfc", @typed={0x8, 0x9f, 0x0, 0x0, @pid=r6}, @nested={0x10d2, 0x60, 0x0, 0x1, [@typed={0x4, 0xa2}, @generic="da8050ae0ebcdb732ff05553a72fac1fea89511c51b8b9ef66ce0d4962c89accdad714fccde7ed439008712d96ce5de86a6c3e42e4b13c5beae7ac9becc0b6d2c33c5ad1cd3ac2e90906a07c37d807ae1e599a06436cdce9913526d838eff454baa567ca62205bc94ad3812c82a1f0cf7e8b5cc4fb0271b47ac7445ee744717564cf6b6a260e49dad56ee041f2a8143a0916785b1d73cdefe74c338aa6564af65a608e1f3b3bdff1d78fe8d281f4bace0cd06be50f334e7b387e00d78f4486391f7d", @generic="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", @typed={0x8, 0xf5, 0x0, 0x0, @fd=r4}]}, @nested={0xb5, 0x31, 0x0, 0x1, [@generic="6e413326e1a8d8f24a8e9ab13db1407c6766fcd927ce998706aa38fb4bf02f981f057273fd5bdb2857995b44d3edaf6de8efb7e827a8b4ea28d30759e03ced09676b3e9bba30553d522cc74a3b8e22499bb631304822cc072b4042961f93a3bdf2e5590e59333c42c99b60aabc8e7295c610751360aca0a023a60b45914fd9da6a455178ea9bb6fa97e1a620fef7250b60a01e2fcdd16328ac7f91d454c554d6ad73fead09", @typed={0x8, 0x71, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x5f}]}]}, @OVS_FLOW_ATTR_KEY={0x6ba, 0x1, 0x0, 0x1, [@nested={0x205, 0x90, 0x0, 0x1, [@generic="de928af8cd3e8b40e4a16bee8ad04a6da1ff1193aa98cef7684f2ce4a7a5901e3fdb9eaae5b9e0d5bc9415926e9dbe9000937e19a10de78d48af047a25cde0283a27a651b9d0d03d5fd139c59e12d0ac10402013e3054c7db1c0fb69", @typed={0x5, 0xa2, 0x0, 0x0, @str='\x00'}, @generic="edfc4504a1dc5720e37db669e5d3a6b38c7c0681efc4fbf9e16ce5274487aaac39fc7ae8b65dd5baf5d34af8ef6da81b8fd1a8d269d1f910c38ffc22a7d710ac32d0c1df063c425228ebd03ba697cdc73885d7b82f3522ad71946cbbca3ae2c780baafa0aff4f5a4715322c7de46065530e89ab2017a6573f63793c2d8db9819d5a140a09b0eed0763bb0b6ef0329f8f2e726638d4e69364a1c4b8e3cf5540f124aea88d47799239a79cadb529a3d72b277260d5a69103b1181d464df66bb4da728ab885de2af4967d6714151635dd61c05d0b389e8805b03860a10086075696834b", @typed={0x8, 0x120, 0x0, 0x0, @uid}, @generic="887f456602d61c558631fef4b0a3388c49361eb7d7b5dabd0114160c3cf86896fc6671980987460b935314dde8307b55b8d8d883bb1f76cac1c138c78be8116e4c81404ab0d380cd97393ca8220e094c8959228700fef71eb293043cd209becf3e844c54b2ac6979f0bfc4b998bd3139da4c292ad60c6a29f376d2af0cffe7675ceb9971d0046a728633c3984d26bfd159dfde13b09b458adbb63384a209edec03f91340e85a8a22671b7c", @nested={0x4, 0xe6}, @nested={0x4, 0x117}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=r7}, @nested={0x8, 0xe4, 0x0, 0x1, [@nested={0x4, 0xc2}]}, @nested={0x16c, 0x5f, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="a7736cbd198cdd3184dc7b73dbec532c6378c20517c127986a624f5c2e41a6e2ffc763fb645168a142c0551b2b094b1a10", @generic="82b07cd7fa5602da4f5fcd073331aa2643c98978ad74d293f2e0c42b921ef23ca4d8dd0c7499500926cbecd9ec43e05edee48015d229401daa25149f77bec9fa995956a442d6fb6800c32d43a0b3dedf192f2e12bb074a1693928f7ab78b75612fe16bef7461be2298dadd", @generic, @generic="6056ddfb559768bc0a8c47541410199651725b467687522c2d3664db740a73a0fbe916d0c438605e737d256861df8b02b654f01ab9410465547c8898a5c1bc1686e5bc35422963b2241bbc5391ffd36a28c5114fa0272ee12d0fcc5cda6e0795f2b8184abea8c302933f6247553874641bf59c3d144b9880ee23a3d473f59cb39fd7a3eba15036e382ca8b8ee64ae30bbe90c5df18c96fdecce79c48f3a6e6bac8db713941c7b4ab5ed8489b45c0e346aa82325460b8ee2a0d738d23256cb8a7b0fb7eb6729fee37"]}, @nested={0x74, 0x91, 0x0, 0x1, [@typed={0xc, 0x126, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @typed={0x5c, 0xc1, 0x0, 0x0, @binary="5d715f0d91c02198c8130a1f1851e537646408bb6b2e3a826f01d423e52ac2ae0132b65e235c45a6811375b65327b5de1c837cb3e7574d288f1b8c8be6ce1c284eecd3ff54c84d97ae61206923780c6c06430340e695eea3"}]}, @nested={0x20, 0xbd, 0x0, 0x1, [@nested={0x4, 0x58}, @nested={0x4, 0x5f}, @typed={0xc, 0x1e, 0x0, 0x0, @u64=0xfaa}, @nested={0x4, 0x7f}, @nested={0x4, 0xbd}]}, @nested={0xd9, 0x79, 0x0, 0x1, [@generic="ab2a6503b98f80bc0703d96f23db060ecfd493da7d3ad706e52b8479ce4865e105cfce2fdec21e994ac162f5fe0fb081cf508107584ca8586f708980ecb3f421d4f8d137f91719ab0a27c0fc61a79ff13e195bc322f4c36a4638c590c309cf11f0b074295d39fad4a08076ac931ff1429103e18a79a8332af7341bc8577966bc262bafc4606a5691fa6296e216690930da311f1e7549d4b3c44e02e1bfb8c1f86d84b94401bd93f86cadcba13d72e9f8b5cbff8d3ea9c7779ed9d5115d924ac825", @generic="fa2926729277d47085b422ee", @typed={0x8, 0x125, 0x0, 0x0, @fd=r0}]}, @generic="dab67639e3afa18512ec010983b5af7f8cc79166190e70478c5a58667bc49762b2ff878e389b714cffa9eb55a36a6f2df9431bd7d6f47c67f565c0181b59675581fd210f4bfc82de2350713407323bb350fa695004e42dcc2085c4efc94b3e2e4deef5949cfe562a525c5eed36e889a4301041b35f6ced6d6b7e93fc00a92c436937af17e8d7fedf758c41bf42b1dee854482f1fbfd24416e51a54992598901014226bff3830c7a4f8c2224c843efe56bfabdaca560e2d3bc5d593d58f99bd8fe94fc19dd0d47c33ff3c38576845caf51951927eb49035c0d6c056c4ce301a2f0848a9d701f90edaaa3443bd0c7727a058c2", @nested={0xc8, 0x13c, 0x0, 0x1, [@generic="ea40154fa881587e32b5fe929d3bb61dbfbf6be6237d7ce7f0881a00901f6bc63761e1ff291f2658ce5b7d90acf6827fa25b27fefd10926b100eeb50d3114f8b297239fc8d6eac09832e042fa8d4afa8dfa243223c0ef4b9878823f791fd80d49ae787628277eee049c213386061574ad02fea804c23fe530b47", @nested={0x4, 0x95}, @generic="5d914684a2cbd53c07c1a40fb6fd145c78aebef123c4117f0ec61766c96a80343915f4cbd669761a976960cbc46fa8ba4891acb744217c0f354fd7c486d57ecf299c6d758414"]}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0xffffffff}]}]}, 0x1c48}, 0x1, 0x0, 0x0, 0x4404c805}, 0x20000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x470000, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fanotify_init$auto(0x65, 0x2) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) 4.997056513s ago: executing program 4 (id=4866): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (fail_nth: 1) 4.869271574s ago: executing program 2 (id=4867): rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub2/info\x00', 0xc0000, 0x0) readv$auto(0x3, 0x0, 0x1da) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r1 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x0, 0x0) read$auto_drm_connector_fops_drm_debugfs(r1, &(0x7f0000000040)=""/99, 0x63) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f00000000c0)={0x6, 0xd48f, 0x3db9bc0000000000, 0x9, 0xe}) 4.197256203s ago: executing program 0 (id=4868): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0xb, 0x0) socket(0x2, 0x5, 0x0) unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x900000af, 0x0, 0x9, 0x0, 0x1f, 0x8000}, 0xff}, 0x40007, 0x1) preadv$auto(0x40000000000003, 0x0, 0x40000000007fff, 0x5ff4, 0xfffffffffffffffe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010029bd6000fbdbdf2501000000080007000500000008000100", @ANYRESOCT=r3, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x22000010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/node/node0/cpulist\x00', 0x28000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, 0x0, 0x8000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af13, r5) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) 4.195772675s ago: executing program 5 (id=4869): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x80000001) getpgid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen_full\x00', 0xc0040, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0x13, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1000007, 0xf3f9, 0x2c, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x3, 0x8d, 0xffffffe000000001]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x6, 0x4, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x4, 0xa7, 0x100000002, 0xfffffffffefffffd, 0x41c, 0xaa9, 0x1000007ffffffd, 0xffffffffffffffff, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffa]}, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/140, 0x8c) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-', 0x1) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 4.195645696s ago: executing program 4 (id=4870): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f0000000140)="8e", 0x1) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x20c940, 0x0) socket(0x10, 0x2, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x1, 0x106) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x41ff, 0x7, 0x10000000000d, 0x1, 0x958b, 0x3, 0x3, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3d, 0xb, 0x2, 0x8]}, 0x0) read$auto(r2, 0x0, 0x9a28) setreuid$auto(0xffffffffffffffff, 0x8) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x40000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r5, &(0x7f0000000000)="49a915", 0x3) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') 3.271901199s ago: executing program 0 (id=4871): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x4) r5 = pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) fcntl$auto_F_UNLCK(r5, 0x5, 0x2) mlock$auto(0xfbe8, 0x4) keyctl$auto(0x2000001f, 0x1, 0x6, 0x3, 0x8000) madvise$auto(0x0, 0x240007, 0x1d) ioctl$auto_BLKROSET(r6, 0x125d, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0x8, 0x7fff) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x7) 3.130698772s ago: executing program 5 (id=4872): sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) (fail_nth: 15) 2.651019913s ago: executing program 0 (id=4873): sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x3, 0x0, 0x275d) epoll_create$auto(0x25321f21) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0xcbf3, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9de9eeffccd484c7c91c9100fefbbabef8ff9368c7996e841f3f1561d4992f726b0a6c36b0b21cf562367fe6596824585447118bba165f00", 0x100000a}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x10240, 0x0) 2.362072187s ago: executing program 0 (id=4874): mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={r0, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004f80)={0x18, r2, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x14) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x500, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) semctl$auto_GETPID(0x0, 0x3, 0xb, 0x9) socket(0x2, 0x3, 0xa) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', 0x0, &(0x7f0000001180), 0x2) 2.267676095s ago: executing program 5 (id=4875): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 1.560923015s ago: executing program 2 (id=4876): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) mmap$auto(0x4010000907, 0x40000c, 0xdf, 0xf2, r0, 0x2f90) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x14f602, 0x0) readahead$auto(r1, 0x9, 0x7fffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) geteuid() r2 = socket(0x10, 0x2, 0x4) socket(0x25, 0x1, 0x3) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x402100, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e", @ANYRES32=r2, @ANYBLOB='\b'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 986.589257ms ago: executing program 2 (id=4877): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 931.877867ms ago: executing program 4 (id=4878): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/lg-g15/bind\x00', 0x5cc42, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x7d}, 0xfd, 0x0, 0x0, 0x8) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 726.533549ms ago: executing program 0 (id=4879): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r0 = socketpair$auto(0x1, 0x8000, 0x725e, 0x0) socket(0x18, 0x2, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r1) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x40c0, 0x0) writev$auto(r2, 0x0, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r3 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x4, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r6 = pidfd_getfd$auto(0xffffffffffffffff, r3, 0x7f) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x17c, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_SE_APDU={0x4f, 0x19, "3fd4291f611ddb0d69fd480ea15adb52cb503913ebc01d53942c4c5930525b6654d4ccff1afc9f8054767243d75e02984c5b1943ebf6f1ff6d4e4f9c03bf3a899702fc47131486a09017d5"}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, ']{\\\\'}, @NFC_ATTR_LLC_SDP={0xe6, 0x13, 0x0, 0x1, [@typed={0x24, 0xda, 0x0, 0x0, @binary="c31c628de7f8c142a3af1cba3f1c4e31c1694887821f7d8e151bb0b127289e3b"}, @typed={0x6, 0xc7, 0x0, 0x0, @str='.\x00'}, @nested={0x4, 0xcd}, @generic="a0e0ab5eab9c33b191ada2d866e3e01812fa2eb97766024ce6ef221abed7b47e23ddd680bd0a243685b5b225693ad5b789897b34744101e91ec1f44329150cfb685479158f47a735f8c9fd5729ce50488015aabfccbc900dfa3c9917def40e8ea8e307d74a4955624b9e29950e24dcb0a7ccd8ffde3000671f59df858f0f1fbdcf5095bdaa79e7cdebaf4b38fd59e7f54b785cbd42b58baade7e040121b3d53d291dbf77e6811a5c9bee61fa9afc71b4376c"]}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3ff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000815) sendfile$auto(r5, r5, 0x0, 0x2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r8, r8, 0x0, 0x2) 604.71608ms ago: executing program 5 (id=4880): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) read$auto(r2, 0x0, 0x80) r3 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r3, 0x400454d8, &(0x7f0000000680)=0xffc0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) r5 = getegid() r6 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r4, r5, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r6, @raw=0x5, 0x5, 0x0, 0x0, 0x0}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000500)={{0x2, r4, r5, 0x8, 0x5b, 0x401, 0x2}, 0x4, 0x6, 0x6, 0xb0, @raw=0x9, @raw=0xb6f7, 0x17, 0x0, &(0x7f0000000040)="e14e98c93c29f1d68af7fb9108ab7244dd0f05cd198dcf41300ef34bfdeaf3233334a9e7fa9f982660ca4b917b65732d0627627cd4046ced6eca6f367a6c1451", &(0x7f0000002640)="b2e9b4abdace6a500e268d7f6ad74f47b20751b3ba921d9b5c4b6f84f10f1691565e1a82c7b1d084b080a8c3dbcd8e9b00c747b87f06b125efa7e2d2d09a7d9fd38a62592adc0024894feeb074a13c6827d4dfb1ee29b83eb13cf58eb7d45782f151e48f3c41587a1d9f8ceeae60fdb2f06ff0f018242ea50bcbfe130eda2ff8d3bcd40812"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000001c0)={0x8, 0x6, 0x1000, 0x6, 0x0, r7}) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f0000000340)={{0x7ff, r8, 0x0, 0x4, 0xff5b, 0x7fffffff, 0x4}, 0x8000, 0x7, 0x10000, 0x2, @raw=0x9, @raw=0x7fff, 0x2, 0x0, &(0x7f00000000c0)="6e582342984d8b4e4293b22289000000003957ca8892b819ace02085f545420da30f84480897892976a5b942c4fdc1b4be8a07ba168453c99537240a4213e6132f0be6ba6783974cb75b46843a29ddf9", &(0x7f0000000240)="ec2cd7ab8ad39f5b93d3f7687d4e0202a6a55545dd192df10012002c81a10086930a1cb765acc5cc192d3059cd08e7520033dadcee81ee37b87f9d58d0944c0f28cfc5b8d69dfa5485e3528c7142ffc3c10d2edf0d6519095fedef4cde0a8490d0cb7621d8dfa435c7156653a10e4d634386f14939af019156b6d5bb48408e7d35d306aef204f7fe85a3de50486eba98c755829a27a2004738e262401570a21e5a9191f1bbb68812a1df7182979103b254db80c4204dec0958806314087c4f07b3a318343cb95a7bff4e6ec3c2760f338550bd618c5ff6e73041759c00237a620fc14c2ea5a86aef5ccb7fdffff8b5daac361d7679bd41"}) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) r10 = setfsuid$auto(0xee00) setresuid$auto(r10, 0x0, r10) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000780)={0x1d88, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0x12, 0x7, "1b494a283a575d523b9b400ef6aa"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x9}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2e9, 0x75, 0x0, 0x1, [@nested={0x6e, 0xe7, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @uid=r10}, @generic="f2649c63d40131357c862a59fe6563e31e786f90fe96b3db1080d30375f9ea9c14c52a30e3a6ee3cc83b7bba6f51bed7aabd36c4fda0b1b869a67cf024b4fc5a4285bdf79059440751f418f62b26d1015625562b5569", @nested={0x4, 0xf9}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r7}]}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x3}, @generic="f715c345a0a614e5d8ac86a375f2cd6fa5f6ef7ebddb0c2d975a1012adc415145df4bf178f3649f94920263340be4e446e554afa78a0e3fb483dd1a68e2f55f59ce3bf0e2793edad6ad9ab051727a7b86cec25343ff8a65c1d15", @typed={0x4, 0xf8}, @generic="573b3c2b4dffaf6aba3a9696a21549331cdb28ea493ec6267dd2838a0c79f0e457af8025d27ed752b4d8590f8cce5fa3", @nested={0x6d, 0x22, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x5d}, @generic="577848d533e07cf4d4dd5841dc53ceb23c84ab07f8d2279ed99859a87172b945febb94dff5e756fa33756971730a770e8536d54a8f4e16c3b5581c738f0b87e201eb84e98eac17993d9ba2f0e764b05fd0b16d38bbdd80a97416461460", @nested={0x4, 0x57}]}, @generic="41005284688893e873b568873b0e8bddec2e701670cca824506c6c4b9084ab2be766b3c7a3afce6159a17e97e2f9dacc65e5b26cc22efca0fad2f30b6a7b88d11edd2f4e4273e53e47da621d9fca35e1df8e11f8dd6ecb3918c69080a929683a7a1d4e1e0ffd5c96f83aaaea9d2f54ce4e3b74261a70fe6904b87c1eedd12ef52ff55150e9a56a00563b78e2c8e4854f457c8478c08c13289ed504a5b54940a6fac1f4dc1cd66515f87afe3756a74036ed2bab14aa9dabad371fac9ccea25c0ece0b29eb7886e3241f35af30d8c331e221ccbbfbd2", @typed={0x8, 0xd8, 0x0, 0x0, @uid=r9}, @generic="ce17b866078526ddc2a21486a90f9fff879714940a3d69fb66e6f9cf954019cb6dc554e197010020b37fcb56438e28d3baf6bd2b54f67462302d029f19dec4c742a647f1cc8d7a999f503572d64b6eed3dd9e9598a40f1df041c3e0e4ebee807695f3b9f6055262997639a197e0629a78bf414305a80710c401b4072c7471b851c8ce877620d0bfc88e9a862ae20e1625789"]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x1a48, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xffffffff}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x1f0, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6d605613}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x460, 0x2, "e4b7079f0e685baa455c90a6cd70f7211ceef533b44eb30ac32549a2445f3c630b7ef2d7e98ab87e3a84608b18f60fcbb670b2d2b0e95d1531511e1c63bc58cf5e146abcbc5704537a3dc670c5a2eaa13203b1223c9b53eb838ea50c8e2a47921c0dd8136e6671301fa45677660df159ab7da9fa7a02580a03f1cec1b00edff4678a233b2c6e840423abc33d4a47a3e8885af043fe0ec53900bd2a3475901781f06ede95d11dda18b021ee5b2c9895ec7b219e0e4db2e5ddc474d71e289a213663c4a6bdaac66edccc4c2007f2d95b106aced9a85d92f07cfbd1f95108d5919d0747a6fa603fe489835445d28feba891c27731f98f2136e39d48b60463a84432b38e5dd81bde3eb9c8e6b1a75061975172182d536665033c3d436fa8b4a0678f7582a9e07193b7f880d1cafb29844d35d170b51c829ba985e9b68e19cc9f754c0a65c98668fe8939e0b29320ed709b90bb2b1c8a2079094e224eb0229977de6df1a35d0f515e65fd227597bb05cd0f34560b39201c588901d0e33506a199544026128b0727625d155f6cf548b037fbf90ecab3b56d37f7748ea06d5b7d603a2e5d4830bdc19ee152487e40b8d06c4a5fdc63b0058ca44ba2298baa47cbcf956b3fceda226ba5615adba63df86b9ab416d3a94f87b80a66269e099a3f8c2bf7c0cb312c349406e1825b2278a2da2410e8a99bbaf83e96161d394da1a9d5cf5d017700e7ce0abf3a5370ba6d246dd5afd683b6ca639352ac4a080a877407053fa73085f2994a67d5460a0b59b26e3a286c3dac1f1dcc668e30a0983cca6760f1cc2dc7dcbbbcc1c42f7ca489932238a552b26e2daafb03524d4a173f27de88477f48c2ca2bf37c244fabb3f47e939199fa5be6d6115d056929236b17dc1a42301bb248e322abd4d7c385316e4efdb1640ab1d8e43cf185778f667d8859050807590e7986700c718a71b2551132fe68026d320e6a6d58158a65e0ed8acfe218fe676db5771e6cfdd46a4680031055bc2840e8e8c85524c4af644caa67ed074b8e1ba0f7e57cf53c0e8ad26247e5863014801abb752a435940e2408556ee33f1a5005688308c1518afc73e27a9ce426abbd922160f3580f09cfec848d896bf8e0c129a2a747429012e79972912794d6215aa750a2d4f2b3ae3d117035d6188ffd72fb3e3a6805cb1ef1284e66bcbb610f1b3435fc16cdcf2a4627733a8ec3b666a59e10f4748893abd1b33fcbe908876d9b99775163091f6b961921a5ba91ffb200e7d04c748a515feeafaed6640606878028b686565bd555ac17a144a3bee73fd6e707b5e4d3b7abe5741fa9e76c9a098c2842a03a7e916c0adc06378abaadcd5f3108f1dbcccbe12acda78a9909cf24c5472a6d59377f5ffa54d7c86a4a9aafd4e5274f0f0b882d90ed141f3182502459de653ac52b3edb09d2a3fbdc546c15e71c84b7837c924ab8860803e275a7d518163068dbc3060bad952e96f749dd7d6faa7fd387bdae14a78a50641443073a4dfbceab12c7f9028cd8332689ea54522e0dca23fc2560dbd3ff390a6378698e880cb6edbe41773ce285f268f41"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x6f5, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x811, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x4c6, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xffff8001}]}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x127}]}]}, 0x1d88}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 604.514195ms ago: executing program 2 (id=4881): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) adjtimex$auto(0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0xc, 0x8000b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) socket(0xa, 0x3, 0x100) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x88000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x8924, 0x0) 598.945345ms ago: executing program 4 (id=4882): mmap$auto(0x0, 0xe983, 0xde, 0xeb1, 0x401, 0x8000) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x23, 0x0) acct$auto(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x10e, 0x1, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x4, 0x0, 0x0, 0x9, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x23, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xc060ff0b, r2) 9.64051ms ago: executing program 0 (id=4883): mmap$auto(0x0, 0x20000400008, 0x1, 0xff, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x10bb41, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x1, 0x9, 0x7, 0x18, 0xfffffffffffffffa, 0x8803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xffffffffffff06e1, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fstat$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7ed, 0xc3, 0xfffffffd, 0xee01, 0xffffffffffffffff, 0x0, 0x80, 0xffffffffffffffff, 0x80, 0x1, 0x80000001, 0x5, 0x8, 0x32f, 0x80000001, 0x2}) rt_sigqueueinfo$auto(0x0, 0xb4, &(0x7f00000005c0)={@siginfo_0_0={0x9, 0x1, 0x10000, @_rt={0x0, r1, @sival_ptr=&(0x7f0000000100)="9ebdffab1e55bb7896109392f07ac4bae3fcf0b919206263eb20be2cf52b8b1feae8939056f0e847a4feae29d253e536328d1f5944bcb81b4c8d3f92a97be1cf18b6fabe95b8d70b53ab9abf4df93a5e2713e768284080a4f2c5cd0dd4de49e3d2679ef2dc25e6b64e38744bdf4fc777c2f4ac835e95cebc7c"}}}) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, 0x0, 0xa8000, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x7f24) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a801, 0x0) mmap$auto(0xffffffffffff5c13, 0x0, 0x5, 0x18, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x28102, 0x0) write$auto(r3, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shmget$auto(0x8, 0x10565, 0x7ff) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mask_2ghz\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) read$auto(r4, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) 6.778841ms ago: executing program 5 (id=4884): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r1 = wait4$auto(0x0, &(0x7f0000001200)=0x8175, 0x8001, &(0x7f0000001240)={{0x4, 0x1ff}, {0xa, 0x5}, 0xc, 0x5, 0x305c, 0x8000000000000000, 0xfffffffffffffffa, 0xffffffff, 0xe7, 0xffffffffffffffff, 0xe5f, 0x9, 0x4a7e, 0x222, 0x9, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="18000000", @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) r6 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000001040)={@siginfo_0_0={0x80000001, 0x7, 0x66ea, @_timer={r1, 0x4, @sival_ptr=&(0x7f0000001300)="bd1c77926428e9e827857ba9e8b29c490d863d8de8a2d15341ca43ad7f6a323c462795e17500c604603e39197f5a296f14ba88c55840b1a5b2ea58a56ed4265cc752ae874ade9a7bb43215abd9550360dbcd0dd69ffa7b826a6183ff8762647af56ca098c9c09bcd657c19c1b10f9b8d6f0318b529e8699e99090043e50144ba8dba5c54a70144200733dd1eddf204ade8a2ee0091a7e8ee93", 0xffffffff}}}, 0x4000000, &(0x7f00000010c0)={{0x25a, 0x8000000000000001}, {0x6, 0xef}, 0xd9ce, 0x1, 0x80000001, 0x3, 0x74, 0x1, 0x8, 0x4, 0x0, 0x4, 0x5, 0x1, 0x4, 0x3}) migrate_pages$auto(r6, 0x18b, &(0x7f0000001180)=0x57, &(0x7f00000011c0)=0x9) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x4a) 0s ago: executing program 4 (id=4885): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x100, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) kernel console output (not intermixed with test programs): dv_slave_0 [ 793.855872][T19577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.905187][T19577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.917950][T19577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.924907][T19577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.953892][T19577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.115242][T19577] hsr_slave_0: entered promiscuous mode [ 794.125574][T19577] hsr_slave_1: entered promiscuous mode [ 794.148588][T19577] debugfs: 'hsr0' already exists in 'hsr' [ 794.154333][T19577] Cannot create hsr debugfs directory [ 794.651538][T19577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 794.674693][T19577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 794.685772][T19577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 794.697677][T19577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 794.758576][T13897] Bluetooth: hci3: command tx timeout [ 795.021521][T19577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.058496][T19577] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.074593][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.081770][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.103746][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.110924][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.538299][T19619] FAULT_INJECTION: forcing a failure. [ 795.538299][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 795.567152][T19577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.571342][T19619] CPU: 1 UID: 0 PID: 19619 Comm: syz.2.4360 Not tainted syzkaller #0 PREEMPT(full) [ 795.571377][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.571393][T19619] Call Trace: [ 795.571402][T19619] [ 795.571413][T19619] dump_stack_lvl+0x16c/0x1f0 [ 795.571450][T19619] should_fail_ex+0x512/0x640 [ 795.571491][T19619] should_failslab+0xc2/0x120 [ 795.571526][T19619] kmem_cache_alloc_noprof+0x75/0x6e0 [ 795.571554][T19619] ? skb_clone+0x190/0x3f0 [ 795.571586][T19619] ? skb_clone+0x190/0x3f0 [ 795.571607][T19619] skb_clone+0x190/0x3f0 [ 795.571633][T19619] netlink_deliver_tap+0xabd/0xd30 [ 795.571667][T19619] netlink_unicast+0x64c/0x870 [ 795.571699][T19619] ? __pfx_netlink_unicast+0x10/0x10 [ 795.571739][T19619] netlink_sendmsg+0x8c8/0xdd0 [ 795.571772][T19619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.571803][T19619] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 795.571845][T19619] __sys_sendto+0x4a3/0x520 [ 795.571882][T19619] ? __pfx___sys_sendto+0x10/0x10 [ 795.571928][T19619] ? find_held_lock+0x2b/0x80 [ 795.571981][T19619] __x64_sys_sendto+0xe0/0x1c0 [ 795.572015][T19619] ? do_syscall_64+0x91/0xfa0 [ 795.572045][T19619] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.572073][T19619] do_syscall_64+0xcd/0xfa0 [ 795.572113][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.572140][T19619] RIP: 0033:0x7f26c759155c [ 795.572162][T19619] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 795.572187][T19619] RSP: 002b:00007f26c8470ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 795.572212][T19619] RAX: ffffffffffffffda RBX: 00007f26c8470fc0 RCX: 00007f26c759155c [ 795.572230][T19619] RDX: 000000000000001c RSI: 00007f26c8471010 RDI: 0000000000000008 [ 795.572246][T19619] RBP: 0000000000000000 R08: 00007f26c8470f14 R09: 000000000000000c [ 795.572262][T19619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 795.572279][T19619] R13: 00007f26c8470f68 R14: 00007f26c8471010 R15: 0000000000000000 [ 795.572316][T19619] [ 796.210449][T19577] veth0_vlan: entered promiscuous mode [ 796.254881][T19577] veth1_vlan: entered promiscuous mode [ 796.315796][T19577] veth0_macvtap: entered promiscuous mode [ 796.338041][T19577] veth1_macvtap: entered promiscuous mode [ 796.376841][T19577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.401460][T19577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.427491][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.436211][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.453554][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.481930][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.647885][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.656257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.695878][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.707774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.848276][T13897] Bluetooth: hci3: command tx timeout [ 797.061034][T19654] netlink: 346 bytes leftover after parsing attributes in process `syz.2.4365'. [ 798.710806][T19678] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 798.919963][T13897] Bluetooth: hci3: command tx timeout [ 801.005808][T13897] Bluetooth: hci3: command tx timeout [ 801.704718][T19704] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4378'. [ 801.715876][T19704] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4378'. [ 802.597561][T19724] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input245 [ 802.612394][T19721] FAULT_INJECTION: forcing a failure. [ 802.612394][T19721] name failslab, interval 1, probability 0, space 0, times 0 [ 802.652430][T19721] CPU: 0 UID: 0 PID: 19721 Comm: syz.4.4383 Not tainted syzkaller #0 PREEMPT(full) [ 802.652465][T19721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.652481][T19721] Call Trace: [ 802.652491][T19721] [ 802.652502][T19721] dump_stack_lvl+0x16c/0x1f0 [ 802.652537][T19721] should_fail_ex+0x512/0x640 [ 802.652574][T19721] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 802.652606][T19721] should_failslab+0xc2/0x120 [ 802.652639][T19721] kmem_cache_alloc_noprof+0x75/0x6e0 [ 802.652666][T19721] ? prepare_creds+0x2c/0x7d0 [ 802.652708][T19721] ? prepare_creds+0x2c/0x7d0 [ 802.652740][T19721] prepare_creds+0x2c/0x7d0 [ 802.652777][T19721] __sys_setfsuid+0xda/0x350 [ 802.652804][T19721] ? rcu_is_watching+0x12/0xc0 [ 802.652835][T19721] do_syscall_64+0xcd/0xfa0 [ 802.652867][T19721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.652894][T19721] RIP: 0033:0x7f266578f6c9 [ 802.652915][T19721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.652939][T19721] RSP: 002b:00007f2666666038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 802.652963][T19721] RAX: ffffffffffffffda RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 802.652981][T19721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 802.652997][T19721] RBP: 00007f2665811f91 R08: 0000000000000000 R09: 0000000000000000 [ 802.653013][T19721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.653028][T19721] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 802.653064][T19721] [ 804.839288][T19764] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input246 [ 805.593431][T19772] hub 1-0:1.0: USB hub found [ 805.618550][T19772] hub 1-0:1.0: 1 port detected [ 805.671322][T19767] hub 1-0:1.0: USB hub found [ 805.722429][T19767] hub 1-0:1.0: 1 port detected [ 806.057692][T19776] random: crng reseeded on system resumption [ 806.095731][T19776] hub 1-0:1.0: USB hub found [ 806.130559][T19776] hub 1-0:1.0: 1 port detected [ 806.165206][T19790] Restarting kernel threads ... [ 806.185470][T19790] Done restarting kernel threads. [ 808.497622][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.524229][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.534690][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.543181][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.551193][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.698097][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.704551][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.854306][T19818] chnl_net:caif_netlink_parms(): no params data found [ 810.559706][T19818] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.567173][T19818] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.578453][T19818] bridge_slave_0: entered allmulticast mode [ 810.662962][T19818] bridge_slave_0: entered promiscuous mode [ 810.688469][ T5832] Bluetooth: hci5: command tx timeout [ 810.743144][T19818] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.750640][T19818] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.758147][T19818] bridge_slave_1: entered allmulticast mode [ 810.768476][T19818] bridge_slave_1: entered promiscuous mode [ 810.977718][T19818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.498572][T19818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.836191][T19818] team0: Port device team_slave_0 added [ 812.004921][T19818] team0: Port device team_slave_1 added [ 812.190513][T19818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.209658][T19818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.245686][T19818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.258672][T19818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.265715][T19818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.296642][T19818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.628415][T19818] hsr_slave_0: entered promiscuous mode [ 812.635250][T19818] hsr_slave_1: entered promiscuous mode [ 812.642556][T19818] debugfs: 'hsr0' already exists in 'hsr' [ 812.649841][T19818] Cannot create hsr debugfs directory [ 812.765808][ T5832] Bluetooth: hci5: command tx timeout [ 812.775890][T19866] hub 1-0:1.0: USB hub found [ 812.781310][T19866] hub 1-0:1.0: 1 port detected [ 812.874257][T19862] hub 1-0:1.0: USB hub found [ 812.882066][T19862] hub 1-0:1.0: 1 port detected [ 813.043905][T19872] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4415'. [ 813.055621][T19872] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4415'. [ 813.534154][T19877] random: crng reseeded on system resumption [ 813.598289][T19818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 813.673529][T19818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 813.709288][T19818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 813.733703][T19818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 814.165926][T19818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.247790][T19818] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.262640][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.269808][T18877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.324266][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.331437][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.777335][T19903] FAULT_INJECTION: forcing a failure. [ 814.777335][T19903] name failslab, interval 1, probability 0, space 0, times 0 [ 814.807904][T19903] CPU: 0 UID: 0 PID: 19903 Comm: syz.0.4421 Not tainted syzkaller #0 PREEMPT(full) [ 814.807939][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.807956][T19903] Call Trace: [ 814.807966][T19903] [ 814.807977][T19903] dump_stack_lvl+0x16c/0x1f0 [ 814.808014][T19903] should_fail_ex+0x512/0x640 [ 814.808051][T19903] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 814.808083][T19903] should_failslab+0xc2/0x120 [ 814.808118][T19903] kmem_cache_alloc_noprof+0x75/0x6e0 [ 814.808146][T19903] ? prepare_creds+0x2c/0x7d0 [ 814.808189][T19903] ? prepare_creds+0x2c/0x7d0 [ 814.808224][T19903] prepare_creds+0x2c/0x7d0 [ 814.808263][T19903] __sys_setfsuid+0xda/0x350 [ 814.808291][T19903] ? rcu_is_watching+0x12/0xc0 [ 814.808331][T19903] do_syscall_64+0xcd/0xfa0 [ 814.808366][T19903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.808393][T19903] RIP: 0033:0x7fcc0858f6c9 [ 814.808415][T19903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.808440][T19903] RSP: 002b:00007fcc09422038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 814.808465][T19903] RAX: ffffffffffffffda RBX: 00007fcc087e5fa0 RCX: 00007fcc0858f6c9 [ 814.808483][T19903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 814.808499][T19903] RBP: 00007fcc08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.808515][T19903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.808531][T19903] R13: 00007fcc087e6038 R14: 00007fcc087e5fa0 R15: 00007ffd31fe0698 [ 814.808566][T19903] [ 814.821598][T19818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.872148][ T5832] Bluetooth: hci5: command tx timeout [ 815.137662][T19909] FAULT_INJECTION: forcing a failure. [ 815.137662][T19909] name failslab, interval 1, probability 0, space 0, times 0 [ 815.164961][T19909] CPU: 0 UID: 0 PID: 19909 Comm: syz.2.4422 Not tainted syzkaller #0 PREEMPT(full) [ 815.164993][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.165010][T19909] Call Trace: [ 815.165018][T19909] [ 815.165028][T19909] dump_stack_lvl+0x16c/0x1f0 [ 815.165064][T19909] should_fail_ex+0x512/0x640 [ 815.165097][T19909] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 815.165127][T19909] should_failslab+0xc2/0x120 [ 815.165159][T19909] kmem_cache_alloc_noprof+0x75/0x6e0 [ 815.165185][T19909] ? prepare_creds+0x2c/0x7d0 [ 815.165225][T19909] ? prepare_creds+0x2c/0x7d0 [ 815.165259][T19909] prepare_creds+0x2c/0x7d0 [ 815.165316][T19909] __sys_setfsuid+0xda/0x350 [ 815.165346][T19909] ? rcu_is_watching+0x12/0xc0 [ 815.165375][T19909] do_syscall_64+0xcd/0xfa0 [ 815.165408][T19909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.165434][T19909] RIP: 0033:0x7f26c758f6c9 [ 815.165455][T19909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.165479][T19909] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 815.165504][T19909] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 815.165522][T19909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 815.165543][T19909] RBP: 00007f26c7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 815.165558][T19909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.165573][T19909] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 815.165608][T19909] [ 815.363282][T19919] hub 1-0:1.0: USB hub found [ 815.386949][T19919] hub 1-0:1.0: 1 port detected [ 815.452776][T19914] hub 1-0:1.0: USB hub found [ 815.472475][T19914] hub 1-0:1.0: 1 port detected [ 815.731889][T19818] veth0_vlan: entered promiscuous mode [ 815.745127][T19818] veth1_vlan: entered promiscuous mode [ 815.799941][T19818] veth0_macvtap: entered promiscuous mode [ 815.822050][T19818] veth1_macvtap: entered promiscuous mode [ 815.963178][T19818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.979843][T19818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.014841][T19852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.059664][T19852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.133087][T19852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.245365][T19852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.456421][T19950] netlink: 350 bytes leftover after parsing attributes in process `syz.0.4431'. [ 816.678694][T18877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.720123][T18877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.782918][T19852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.794434][T19852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.842314][T19955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4433'. [ 817.010207][ T5832] Bluetooth: hci5: command tx timeout [ 817.097286][T19960] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input247 [ 819.432716][T20004] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4445'. [ 819.745052][T20013] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4448'. [ 820.232967][T20024] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input248 [ 822.224680][T20056] FAULT_INJECTION: forcing a failure. [ 822.224680][T20056] name failslab, interval 1, probability 0, space 0, times 0 [ 822.242504][T20056] CPU: 0 UID: 0 PID: 20056 Comm: syz.2.4461 Not tainted syzkaller #0 PREEMPT(full) [ 822.242534][T20056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.242549][T20056] Call Trace: [ 822.242558][T20056] [ 822.242568][T20056] dump_stack_lvl+0x16c/0x1f0 [ 822.242601][T20056] should_fail_ex+0x512/0x640 [ 822.242635][T20056] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 822.242667][T20056] should_failslab+0xc2/0x120 [ 822.242700][T20056] __kvmalloc_node_noprof+0x141/0x9c0 [ 822.242738][T20056] ? traverse.part.0.constprop.0+0x397/0x650 [ 822.242783][T20056] ? traverse.part.0.constprop.0+0x397/0x650 [ 822.242818][T20056] traverse.part.0.constprop.0+0x397/0x650 [ 822.242865][T20056] seq_read_iter+0x93c/0x12d0 [ 822.242916][T20056] seq_read+0x3a3/0x570 [ 822.242951][T20056] ? __pfx_seq_read+0x10/0x10 [ 822.242993][T20056] ? get_pid_task+0xfc/0x250 [ 822.243041][T20056] full_proxy_read+0x131/0x1a0 [ 822.243068][T20056] ? __pfx_full_proxy_read+0x10/0x10 [ 822.243087][T20056] vfs_read+0x1e4/0xcf0 [ 822.243106][T20056] ? __pfx_vfs_read+0x10/0x10 [ 822.243118][T20056] ? find_held_lock+0x2b/0x80 [ 822.243133][T20056] ? __fget_files+0x204/0x3c0 [ 822.243151][T20056] ? __fget_files+0x20e/0x3c0 [ 822.243163][T20056] ? __fget_files+0x130/0x3c0 [ 822.243181][T20056] __x64_sys_pread64+0x1eb/0x250 [ 822.243198][T20056] ? __pfx___x64_sys_pread64+0x10/0x10 [ 822.243219][T20056] do_syscall_64+0xcd/0xfa0 [ 822.243238][T20056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.243252][T20056] RIP: 0033:0x7f26c758f6c9 [ 822.243264][T20056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.243277][T20056] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 822.243290][T20056] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 822.243300][T20056] RDX: 00000000000040b6 RSI: 0000200000000080 RDI: 0000000000000004 [ 822.243309][T20056] RBP: 00007f26c8493090 R08: 0000000000000000 R09: 0000000000000000 [ 822.243317][T20056] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 822.243326][T20056] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 822.243345][T20056] [ 824.089393][T20079] netlink: Conntrack attr has 5244 unknown bytes [ 824.133561][T20079] netlink: Conntrack attr has 5244 unknown bytes [ 825.901374][T20107] hub 1-0:1.0: USB hub found [ 825.920552][T20107] hub 1-0:1.0: 1 port detected [ 825.952822][T20105] hub 1-0:1.0: USB hub found [ 825.958530][T20105] hub 1-0:1.0: 1 port detected [ 826.051764][T20111] netlink: 98 bytes leftover after parsing attributes in process `syz.4.4476'. [ 826.129883][T20113] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4477'. [ 826.162890][T20115] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4476'. [ 827.334525][T20119] bridge0: port 3(team0) entered blocking state [ 827.394257][T20119] bridge0: port 3(team0) entered disabled state [ 827.400731][T20119] team0: entered allmulticast mode [ 827.413152][T20119] team_slave_0: entered allmulticast mode [ 827.413177][T20119] team_slave_1: entered allmulticast mode [ 827.421970][T20119] team0: entered promiscuous mode [ 827.438435][T20119] team_slave_0: entered promiscuous mode [ 827.444561][T20119] team_slave_1: entered promiscuous mode [ 827.451127][T20119] bridge0: port 3(team0) entered blocking state [ 827.457810][T20119] bridge0: port 3(team0) entered forwarding state [ 827.690074][T20142] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 830.643128][T20195] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4496'. [ 832.956759][T20247] hub 1-0:1.0: USB hub found [ 833.017828][T20247] hub 1-0:1.0: 1 port detected [ 833.100501][T20251] hub 1-0:1.0: USB hub found [ 833.148326][T20253] FAULT_INJECTION: forcing a failure. [ 833.148326][T20253] name failslab, interval 1, probability 0, space 0, times 0 [ 833.148455][T20251] hub 1-0:1.0: 1 port detected [ 833.167142][T20253] CPU: 0 UID: 0 PID: 20253 Comm: syz.4.4511 Not tainted syzkaller #0 PREEMPT(full) [ 833.167173][T20253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 833.167188][T20253] Call Trace: [ 833.167197][T20253] [ 833.167207][T20253] dump_stack_lvl+0x16c/0x1f0 [ 833.167240][T20253] should_fail_ex+0x512/0x640 [ 833.167274][T20253] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 833.167304][T20253] should_failslab+0xc2/0x120 [ 833.167336][T20253] kmem_cache_alloc_node_noprof+0x78/0x770 [ 833.167361][T20253] ? __alloc_skb+0x2b2/0x380 [ 833.167403][T20253] ? __alloc_skb+0x2b2/0x380 [ 833.167435][T20253] ? __pfx_netlink_insert+0x10/0x10 [ 833.167458][T20253] __alloc_skb+0x2b2/0x380 [ 833.167492][T20253] ? __pfx___alloc_skb+0x10/0x10 [ 833.167528][T20253] ? netlink_autobind.isra.0+0x158/0x370 [ 833.167564][T20253] netlink_alloc_large_skb+0x69/0x140 [ 833.167593][T20253] netlink_sendmsg+0x698/0xdd0 [ 833.167625][T20253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.167656][T20253] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 833.167698][T20253] ____sys_sendmsg+0xa98/0xc70 [ 833.167728][T20253] ? copy_msghdr_from_user+0x10a/0x160 [ 833.167753][T20253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.167800][T20253] ___sys_sendmsg+0x134/0x1d0 [ 833.167826][T20253] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.167848][T20253] ? __lock_acquire+0x622/0x1c90 [ 833.167921][T20253] __sys_sendmsg+0x16d/0x220 [ 833.167947][T20253] ? __pfx___sys_sendmsg+0x10/0x10 [ 833.167995][T20253] do_syscall_64+0xcd/0xfa0 [ 833.168027][T20253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.168056][T20253] RIP: 0033:0x7f266578f6c9 [ 833.168076][T20253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.168100][T20253] RSP: 002b:00007f2666666038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.168131][T20253] RAX: ffffffffffffffda RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 833.168148][T20253] RDX: 0000000004000800 RSI: 0000200000002300 RDI: 0000000000000003 [ 833.168164][T20253] RBP: 00007f2666666090 R08: 0000000000000000 R09: 0000000000000000 [ 833.168180][T20253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.168195][T20253] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 833.168231][T20253] [ 833.347556][T20242] hub 1-0:1.0: USB hub found [ 833.467049][T20242] hub 1-0:1.0: 1 port detected [ 834.215241][T20258] zswap: compressor not available [ 834.267125][T20267] Setting dangerous option i915.mitigations - tainting kernel [ 834.346115][T20271] FAULT_INJECTION: forcing a failure. [ 834.346115][T20271] name failslab, interval 1, probability 0, space 0, times 0 [ 834.382056][T20271] CPU: 0 UID: 0 PID: 20271 Comm: syz.5.4516 Tainted: G U syzkaller #0 PREEMPT(full) [ 834.382095][T20271] Tainted: [U]=USER [ 834.382105][T20271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 834.382121][T20271] Call Trace: [ 834.382130][T20271] [ 834.382140][T20271] dump_stack_lvl+0x16c/0x1f0 [ 834.382175][T20271] should_fail_ex+0x512/0x640 [ 834.382212][T20271] ? __kmalloc_noprof+0xca/0x880 [ 834.382250][T20271] should_failslab+0xc2/0x120 [ 834.382282][T20271] __kmalloc_noprof+0xdd/0x880 [ 834.382317][T20271] ? __pfx___mutex_trylock_common+0x10/0x10 [ 834.382349][T20271] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 834.382391][T20271] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 834.382423][T20271] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 834.382463][T20271] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 834.382496][T20271] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 834.382527][T20271] ? genl_get_cmd+0x194/0x580 [ 834.382564][T20271] ? __radix_tree_lookup+0x21f/0x2c0 [ 834.382598][T20271] genl_rcv_msg+0x55c/0x800 [ 834.382631][T20271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.382662][T20271] ? __pfx_ctrl_getfamily+0x10/0x10 [ 834.382702][T20271] netlink_rcv_skb+0x158/0x420 [ 834.382728][T20271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.382761][T20271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.382816][T20271] ? netlink_deliver_tap+0x1ae/0xd30 [ 834.382849][T20271] genl_rcv+0x28/0x40 [ 834.382877][T20271] netlink_unicast+0x5aa/0x870 [ 834.382908][T20271] ? __pfx_netlink_unicast+0x10/0x10 [ 834.382949][T20271] netlink_sendmsg+0x8c8/0xdd0 [ 834.382981][T20271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.383012][T20271] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 834.383054][T20271] __sys_sendto+0x4a3/0x520 [ 834.383098][T20271] ? __pfx___sys_sendto+0x10/0x10 [ 834.383148][T20271] ? fd_install+0x225/0x750 [ 834.383190][T20271] ? __pfx___sys_socket+0x10/0x10 [ 834.383221][T20271] ? xfd_validate_state+0x61/0x180 [ 834.383254][T20271] ? __pfx_do_writev+0x10/0x10 [ 834.383285][T20271] __x64_sys_sendto+0xe0/0x1c0 [ 834.383321][T20271] ? do_syscall_64+0x91/0xfa0 [ 834.383350][T20271] ? lockdep_hardirqs_on+0x7c/0x110 [ 834.383379][T20271] do_syscall_64+0xcd/0xfa0 [ 834.383412][T20271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.383438][T20271] RIP: 0033:0x7fce8ab9155c [ 834.383459][T20271] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 834.383483][T20271] RSP: 002b:00007fce8b97cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 834.383506][T20271] RAX: ffffffffffffffda RBX: 00007fce8b97cfc0 RCX: 00007fce8ab9155c [ 834.383524][T20271] RDX: 000000000000001c RSI: 00007fce8b97d010 RDI: 0000000000000008 [ 834.383540][T20271] RBP: 0000000000000000 R08: 00007fce8b97cf14 R09: 000000000000000c [ 834.383556][T20271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 834.383571][T20271] R13: 00007fce8b97cf68 R14: 00007fce8b97d010 R15: 0000000000000000 [ 834.383605][T20271] [ 835.312548][T20300] hub 1-0:1.0: USB hub found [ 835.320838][T20300] hub 1-0:1.0: 1 port detected [ 835.558195][T20303] warn_alloc: 1 callbacks suppressed [ 835.558208][T20303] syz.2.4519: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 835.678396][T20303] CPU: 1 UID: 0 PID: 20303 Comm: syz.2.4519 Tainted: G U syzkaller #0 PREEMPT(full) [ 835.678421][T20303] Tainted: [U]=USER [ 835.678430][T20303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.678438][T20303] Call Trace: [ 835.678443][T20303] [ 835.678450][T20303] dump_stack_lvl+0x16c/0x1f0 [ 835.678472][T20303] warn_alloc+0x248/0x3a0 [ 835.678489][T20303] ? __pfx_warn_alloc+0x10/0x10 [ 835.678514][T20303] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 835.678535][T20303] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 835.678557][T20303] ? __pfx___might_resched+0x10/0x10 [ 835.678573][T20303] ? rcu_is_watching+0x12/0xc0 [ 835.678589][T20303] ? trace_contention_end+0xdd/0x130 [ 835.678608][T20303] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 835.678627][T20303] ? tomoyo_path_number_perm+0x295/0x580 [ 835.678653][T20303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 835.678673][T20303] ? __pfx___mutex_lock+0x10/0x10 [ 835.678702][T20303] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 835.678728][T20303] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 835.678746][T20303] __vmalloc_node_noprof+0xad/0xf0 [ 835.678766][T20303] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 835.678789][T20303] dvb_dvr_do_ioctl+0x15d/0x290 [ 835.678811][T20303] dvb_usercopy+0x167/0x340 [ 835.678828][T20303] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 835.678848][T20303] ? __pfx_dvb_usercopy+0x10/0x10 [ 835.678874][T20303] ? __fget_files+0x20e/0x3c0 [ 835.678892][T20303] dvb_dvr_ioctl+0x29/0x40 [ 835.678910][T20303] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 835.678929][T20303] __x64_sys_ioctl+0x18e/0x210 [ 835.678953][T20303] do_syscall_64+0xcd/0xfa0 [ 835.678971][T20303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.678985][T20303] RIP: 0033:0x7f26c758f6c9 [ 835.678997][T20303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.679011][T20303] RSP: 002b:00007f26c8472038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.679025][T20303] RAX: ffffffffffffffda RBX: 00007f26c77e6090 RCX: 00007f26c758f6c9 [ 835.679034][T20303] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 835.679043][T20303] RBP: 00007f26c7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 835.679052][T20303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.679060][T20303] R13: 00007f26c77e6128 R14: 00007f26c77e6090 R15: 00007ffce7cdce38 [ 835.679081][T20303] [ 835.682151][T20303] Mem-Info: [ 836.097416][T20303] active_anon:31552 inactive_anon:0 isolated_anon:0 [ 836.097416][T20303] active_file:18325 inactive_file:56039 isolated_file:0 [ 836.097416][T20303] unevictable:768 dirty:420 writeback:0 [ 836.097416][T20303] slab_reclaimable:12278 slab_unreclaimable:101329 [ 836.097416][T20303] mapped:46764 shmem:17938 pagetables:1356 [ 836.097416][T20303] sec_pagetables:0 bounce:0 [ 836.097416][T20303] kernel_misc_reclaimable:0 [ 836.097416][T20303] free:1246326 free_pcp:16116 free_cma:0 [ 836.146067][T20303] Node 0 active_anon:126308kB inactive_anon:0kB active_file:73300kB inactive_file:224004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:187036kB dirty:1664kB writeback:0kB shmem:70216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12296kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 836.179749][T20303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 836.210768][T20303] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 836.211983][T20313] netlink: 93 bytes leftover after parsing attributes in process `syz.4.4522'. [ 836.241199][T20303] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 836.256146][T20303] Node 0 DMA32 free:1088536kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:126308kB inactive_anon:0kB active_file:73300kB inactive_file:224004kB unevictable:1536kB writepending:1664kB zspages:148kB present:3129332kB managed:2545084kB mlocked:0kB bounce:0kB free_pcp:38772kB local_pcp:16752kB free_cma:0kB [ 836.296934][T20303] lowmem_reserve[]: 0 0 1 1 1 [ 836.359555][T20303] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 836.389256][T20303] lowmem_reserve[]: 0 0 0 0 0 [ 836.393997][T20303] Node 1 Normal free:3881208kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:152kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25804kB local_pcp:13312kB free_cma:0kB [ 836.428581][T20303] lowmem_reserve[]: 0 0 0 0 0 [ 836.433332][T20303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 836.446127][T20303] Node 0 DMA32: 1*4kB (E) 442*8kB (UM) 2509*16kB (UME) 1412*32kB (UME) 879*64kB (UM) 330*128kB (UME) 149*256kB (M) 37*512kB (UME) 35*1024kB (UM) 12*2048kB (UME) 191*4096kB (M) = 1087204kB [ 836.477473][T20303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 836.508563][T20303] Node 1 Normal: 51*4kB (UME) 62*8kB (UME) 53*16kB (UME) 227*32kB (UME) 75*64kB (UME) 18*128kB (UME) 9*256kB (UM) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (ME) 941*4096kB (M) = 3881260kB [ 836.587775][T20303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.608300][T20303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 836.618821][T20316] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4524'. [ 836.654934][T20303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.732115][T20303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 836.741913][T20303] 94052 total pagecache pages [ 836.748775][T20303] 4 pages in swap cache [ 836.753052][T20303] Free swap = 120748kB [ 836.758532][T20303] Total swap = 124996kB [ 836.762698][T20303] 2097051 pages RAM [ 836.766616][T20303] 0 pages HighMem/MovableOnly [ 836.805970][T20303] 428690 pages reserved [ 836.860041][T20303] 0 pages cma reserved [ 837.315878][T20330] FAULT_INJECTION: forcing a failure. [ 837.315878][T20330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.509168][T20330] CPU: 1 UID: 0 PID: 20330 Comm: syz.5.4528 Tainted: G U syzkaller #0 PREEMPT(full) [ 837.509206][T20330] Tainted: [U]=USER [ 837.509213][T20330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.509221][T20330] Call Trace: [ 837.509227][T20330] [ 837.509233][T20330] dump_stack_lvl+0x16c/0x1f0 [ 837.509256][T20330] should_fail_ex+0x512/0x640 [ 837.509279][T20330] _copy_from_iter+0x29f/0x1720 [ 837.509303][T20330] ? __alloc_skb+0x200/0x380 [ 837.509325][T20330] ? __pfx__copy_from_iter+0x10/0x10 [ 837.509346][T20330] ? netlink_autobind.isra.0+0x158/0x370 [ 837.509368][T20330] netlink_sendmsg+0x820/0xdd0 [ 837.509386][T20330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.509403][T20330] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 837.509427][T20330] ____sys_sendmsg+0xa98/0xc70 [ 837.509446][T20330] ? copy_msghdr_from_user+0x10a/0x160 [ 837.509459][T20330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.509484][T20330] ___sys_sendmsg+0x134/0x1d0 [ 837.509499][T20330] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.509511][T20330] ? __lock_acquire+0x622/0x1c90 [ 837.509552][T20330] __sys_sendmsg+0x16d/0x220 [ 837.509566][T20330] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.509591][T20330] do_syscall_64+0xcd/0xfa0 [ 837.509609][T20330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.509624][T20330] RIP: 0033:0x7fce8ab8f6c9 [ 837.509635][T20330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.509649][T20330] RSP: 002b:00007fce8b97e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.509663][T20330] RAX: ffffffffffffffda RBX: 00007fce8ade5fa0 RCX: 00007fce8ab8f6c9 [ 837.509672][T20330] RDX: 0000000004000800 RSI: 0000200000002300 RDI: 0000000000000003 [ 837.509681][T20330] RBP: 00007fce8b97e090 R08: 0000000000000000 R09: 0000000000000000 [ 837.509689][T20330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.509697][T20330] R13: 00007fce8ade6038 R14: 00007fce8ade5fa0 R15: 00007ffd1c351f48 [ 837.509716][T20330] [ 837.978713][ T5832] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 839.326753][T20361] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4534'. [ 839.948295][T20383] futex_wake_op: syz.0.4542 tries to shift op by -2048; fix this program [ 840.030538][T20384] size and base must be multiples of 4 kiB [ 840.036760][T20384] CPU: 1 UID: 0 PID: 20384 Comm: syz.0.4542 Tainted: G U syzkaller #0 PREEMPT(full) [ 840.036801][T20384] Tainted: [U]=USER [ 840.036810][T20384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.036826][T20384] Call Trace: [ 840.036835][T20384] [ 840.036845][T20384] dump_stack_lvl+0x16c/0x1f0 [ 840.036880][T20384] mtrr_add+0xdf/0x110 [ 840.036915][T20384] mtrr_ioctl+0x7ef/0xcf0 [ 840.036951][T20384] ? __pfx_mtrr_ioctl+0x10/0x10 [ 840.036989][T20384] ? find_held_lock+0x2b/0x80 [ 840.037010][T20384] ? __fget_files+0x20e/0x3c0 [ 840.037024][T20384] ? __pfx_mtrr_ioctl+0x10/0x10 [ 840.037043][T20384] proc_reg_unlocked_ioctl+0x229/0x320 [ 840.037063][T20384] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 840.037084][T20384] __x64_sys_ioctl+0x18e/0x210 [ 840.037105][T20384] do_syscall_64+0xcd/0xfa0 [ 840.037123][T20384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.037138][T20384] RIP: 0033:0x7fcc0858f6c9 [ 840.037150][T20384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.037163][T20384] RSP: 002b:00007fcc09401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.037177][T20384] RAX: ffffffffffffffda RBX: 00007fcc087e6090 RCX: 00007fcc0858f6c9 [ 840.037187][T20384] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 840.037195][T20384] RBP: 00007fcc08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 840.037204][T20384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.037212][T20384] R13: 00007fcc087e6128 R14: 00007fcc087e6090 R15: 00007ffd31fe0698 [ 840.037231][T20384] [ 840.755886][T20400] hub 1-0:1.0: USB hub found [ 840.775804][T20400] hub 1-0:1.0: 1 port detected [ 841.251653][T20410] bonding: no command found in bonding_masters - use +ifname or -ifname [ 841.643703][T20422] FAULT_INJECTION: forcing a failure. [ 841.643703][T20422] name failslab, interval 1, probability 0, space 0, times 0 [ 841.692863][T20422] CPU: 1 UID: 0 PID: 20422 Comm: syz.2.4554 Tainted: G U syzkaller #0 PREEMPT(full) [ 841.692902][T20422] Tainted: [U]=USER [ 841.692911][T20422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 841.692925][T20422] Call Trace: [ 841.692934][T20422] [ 841.692944][T20422] dump_stack_lvl+0x16c/0x1f0 [ 841.692977][T20422] should_fail_ex+0x512/0x640 [ 841.693011][T20422] ? __kmalloc_cache_noprof+0x5f/0x780 [ 841.693038][T20422] should_failslab+0xc2/0x120 [ 841.693070][T20422] __kmalloc_cache_noprof+0x72/0x780 [ 841.693094][T20422] ? memtype_get_idx+0x3d/0xc0 [ 841.693128][T20422] ? memtype_get_idx+0x3d/0xc0 [ 841.693156][T20422] memtype_get_idx+0x3d/0xc0 [ 841.693185][T20422] seq_read_iter+0xa1c/0x12d0 [ 841.693243][T20422] seq_read+0x3a3/0x570 [ 841.693277][T20422] ? __pfx_seq_read+0x10/0x10 [ 841.693319][T20422] ? get_pid_task+0xfc/0x250 [ 841.693366][T20422] full_proxy_read+0x131/0x1a0 [ 841.693398][T20422] ? __pfx_full_proxy_read+0x10/0x10 [ 841.693431][T20422] vfs_read+0x1e4/0xcf0 [ 841.693464][T20422] ? __pfx_vfs_read+0x10/0x10 [ 841.693487][T20422] ? find_held_lock+0x2b/0x80 [ 841.693513][T20422] ? __fget_files+0x204/0x3c0 [ 841.693544][T20422] ? __fget_files+0x20e/0x3c0 [ 841.693566][T20422] ? __fget_files+0x130/0x3c0 [ 841.693600][T20422] __x64_sys_pread64+0x1eb/0x250 [ 841.693628][T20422] ? __pfx___x64_sys_pread64+0x10/0x10 [ 841.693667][T20422] do_syscall_64+0xcd/0xfa0 [ 841.693698][T20422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.693723][T20422] RIP: 0033:0x7f26c758f6c9 [ 841.693743][T20422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.693766][T20422] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 841.693790][T20422] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 841.693807][T20422] RDX: 00000000000040b6 RSI: 0000200000000080 RDI: 0000000000000004 [ 841.693823][T20422] RBP: 00007f26c8493090 R08: 0000000000000000 R09: 0000000000000000 [ 841.693838][T20422] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 841.693853][T20422] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 841.693889][T20422] [ 842.015270][T20428] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input250 [ 842.132213][T20431] random: crng reseeded on system resumption [ 842.644592][T20429] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input251 [ 843.207876][T20450] zswap: compressor not available [ 843.237048][T20456] FAULT_INJECTION: forcing a failure. [ 843.237048][T20456] name failslab, interval 1, probability 0, space 0, times 0 [ 843.270305][T20456] CPU: 1 UID: 0 PID: 20456 Comm: syz.4.4560 Tainted: G U syzkaller #0 PREEMPT(full) [ 843.270353][T20456] Tainted: [U]=USER [ 843.270363][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 843.270379][T20456] Call Trace: [ 843.270388][T20456] [ 843.270398][T20456] dump_stack_lvl+0x16c/0x1f0 [ 843.270434][T20456] should_fail_ex+0x512/0x640 [ 843.270471][T20456] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 843.270502][T20456] should_failslab+0xc2/0x120 [ 843.270536][T20456] kmem_cache_alloc_noprof+0x75/0x6e0 [ 843.270563][T20456] ? prepare_creds+0x2c/0x7d0 [ 843.270606][T20456] ? prepare_creds+0x2c/0x7d0 [ 843.270642][T20456] prepare_creds+0x2c/0x7d0 [ 843.270682][T20456] __sys_setfsuid+0xda/0x350 [ 843.270710][T20456] ? rcu_is_watching+0x12/0xc0 [ 843.270740][T20456] do_syscall_64+0xcd/0xfa0 [ 843.270777][T20456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.270804][T20456] RIP: 0033:0x7f266578f6c9 [ 843.270824][T20456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.270849][T20456] RSP: 002b:00007f2666666038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 843.270874][T20456] RAX: ffffffffffffffda RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 843.270893][T20456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 843.270909][T20456] RBP: 00007f2665811f91 R08: 0000000000000000 R09: 0000000000000000 [ 843.270925][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.270940][T20456] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 843.270977][T20456] [ 845.407617][T20511] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4572'. [ 845.418710][T20511] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4572'. [ 846.677337][T20539] hub 1-0:1.0: USB hub found [ 846.700193][T20539] hub 1-0:1.0: 1 port detected [ 846.751422][T20541] FAULT_INJECTION: forcing a failure. [ 846.751422][T20541] name failslab, interval 1, probability 0, space 0, times 0 [ 846.818940][T20544] FAULT_INJECTION: forcing a failure. [ 846.818940][T20544] name failslab, interval 1, probability 0, space 0, times 0 [ 846.873730][T20544] CPU: 0 UID: 0 PID: 20544 Comm: syz.2.4580 Tainted: G U syzkaller #0 PREEMPT(full) [ 846.873769][T20544] Tainted: [U]=USER [ 846.873779][T20544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.873795][T20544] Call Trace: [ 846.873812][T20544] [ 846.873823][T20544] dump_stack_lvl+0x16c/0x1f0 [ 846.873860][T20544] should_fail_ex+0x512/0x640 [ 846.873898][T20544] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 846.873918][T20544] should_failslab+0xc2/0x120 [ 846.873943][T20544] kmem_cache_alloc_noprof+0x75/0x6e0 [ 846.873969][T20544] ? __proc_create+0x2ce/0x8e0 [ 846.874010][T20544] ? __proc_create+0x2ce/0x8e0 [ 846.874046][T20544] __proc_create+0x2ce/0x8e0 [ 846.874073][T20544] ? __pfx___proc_create+0x10/0x10 [ 846.874095][T20544] ? _raw_write_unlock+0x28/0x50 [ 846.874111][T20544] ? proc_register+0x559/0x8b0 [ 846.874133][T20544] proc_create_reg+0x7d/0x180 [ 846.874155][T20544] proc_create_net_data+0x8e/0x1c0 [ 846.874176][T20544] ? __pfx_proc_create_net_data+0x10/0x10 [ 846.874199][T20544] ? fib_default_rule_add+0x341/0x420 [ 846.874216][T20544] ? __pfx_ip6_flowlabel_proc_init+0x10/0x10 [ 846.874232][T20544] ip6_flowlabel_proc_init+0x53/0x70 [ 846.874247][T20544] ops_init+0x1e2/0x5f0 [ 846.874264][T20544] setup_net+0x100/0x390 [ 846.874279][T20544] ? __pfx_setup_net+0x10/0x10 [ 846.874294][T20544] ? debug_mutex_init+0x37/0x70 [ 846.874312][T20544] copy_net_ns+0x2f8/0x690 [ 846.874331][T20544] create_new_namespaces+0x3ea/0xa90 [ 846.874351][T20544] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 846.874369][T20544] ksys_unshare+0x45b/0xa40 [ 846.874388][T20544] ? __pfx_ksys_unshare+0x10/0x10 [ 846.874408][T20544] ? syscall_user_dispatch+0x78/0x140 [ 846.874426][T20544] __x64_sys_unshare+0x31/0x40 [ 846.874444][T20544] do_syscall_64+0xcd/0xfa0 [ 846.874462][T20544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.874477][T20544] RIP: 0033:0x7f26c758f6c9 [ 846.874489][T20544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.874503][T20544] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 846.874517][T20544] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 846.874526][T20544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 846.874535][T20544] RBP: 00007f26c7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 846.874544][T20544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.874552][T20544] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 846.874574][T20544] [ 847.146987][T20541] CPU: 1 UID: 0 PID: 20541 Comm: syz.5.4577 Tainted: G U syzkaller #0 PREEMPT(full) [ 847.147029][T20541] Tainted: [U]=USER [ 847.147037][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 847.147050][T20541] Call Trace: [ 847.147059][T20541] [ 847.147070][T20541] dump_stack_lvl+0x16c/0x1f0 [ 847.147096][T20541] should_fail_ex+0x512/0x640 [ 847.147117][T20541] ? __kmalloc_cache_noprof+0x5f/0x780 [ 847.147132][T20541] should_failslab+0xc2/0x120 [ 847.147151][T20541] __kmalloc_cache_noprof+0x72/0x780 [ 847.147165][T20541] ? alloc_pipe_info+0x10e/0x590 [ 847.147182][T20541] ? find_held_lock+0x2b/0x80 [ 847.147198][T20541] ? alloc_pipe_info+0x10e/0x590 [ 847.147213][T20541] alloc_pipe_info+0x10e/0x590 [ 847.147231][T20541] splice_direct_to_actor+0x77d/0xa30 [ 847.147247][T20541] ? __pfx_direct_splice_actor+0x10/0x10 [ 847.147262][T20541] ? __pfx_aa_file_perm+0x10/0x10 [ 847.147278][T20541] ? find_held_lock+0x2b/0x80 [ 847.147292][T20541] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 847.147304][T20541] ? get_pid_task+0xfc/0x250 [ 847.147327][T20541] do_splice_direct+0x174/0x240 [ 847.147341][T20541] ? __pfx_do_splice_direct+0x10/0x10 [ 847.147355][T20541] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 847.147380][T20541] ? rw_verify_area+0xcf/0x6c0 [ 847.147395][T20541] do_sendfile+0xb06/0xe50 [ 847.147413][T20541] ? __pfx_do_sendfile+0x10/0x10 [ 847.147427][T20541] ? __fget_files+0x20e/0x3c0 [ 847.147446][T20541] __x64_sys_sendfile64+0x1d8/0x220 [ 847.147464][T20541] ? ksys_write+0x1ac/0x250 [ 847.147478][T20541] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 847.147502][T20541] do_syscall_64+0xcd/0xfa0 [ 847.147520][T20541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.147534][T20541] RIP: 0033:0x7fce8ab8f6c9 [ 847.147546][T20541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.147560][T20541] RSP: 002b:00007fce88df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 847.147573][T20541] RAX: ffffffffffffffda RBX: 00007fce8ade6180 RCX: 00007fce8ab8f6c9 [ 847.147583][T20541] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 847.147591][T20541] RBP: 00007fce88df6090 R08: 0000000000000000 R09: 0000000000000000 [ 847.147599][T20541] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 847.147607][T20541] R13: 00007fce8ade6218 R14: 00007fce8ade6180 R15: 00007ffd1c351f48 [ 847.147626][T20541] [ 847.707012][T20548] FAULT_INJECTION: forcing a failure. [ 847.707012][T20548] name failslab, interval 1, probability 0, space 0, times 0 [ 847.745470][T20548] CPU: 1 UID: 0 PID: 20548 Comm: syz.4.4581 Tainted: G U syzkaller #0 PREEMPT(full) [ 847.745508][T20548] Tainted: [U]=USER [ 847.745516][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 847.745530][T20548] Call Trace: [ 847.745539][T20548] [ 847.745548][T20548] dump_stack_lvl+0x16c/0x1f0 [ 847.745582][T20548] should_fail_ex+0x512/0x640 [ 847.745617][T20548] ? __kmalloc_cache_noprof+0x5f/0x780 [ 847.745644][T20548] should_failslab+0xc2/0x120 [ 847.745676][T20548] __kmalloc_cache_noprof+0x72/0x780 [ 847.745701][T20548] ? memtype_get_idx+0x3d/0xc0 [ 847.745749][T20548] ? memtype_get_idx+0x3d/0xc0 [ 847.745776][T20548] memtype_get_idx+0x3d/0xc0 [ 847.745805][T20548] seq_read_iter+0xa1c/0x12d0 [ 847.745856][T20548] seq_read+0x3a3/0x570 [ 847.745888][T20548] ? __pfx_seq_read+0x10/0x10 [ 847.745930][T20548] ? get_pid_task+0xfc/0x250 [ 847.745974][T20548] full_proxy_read+0x131/0x1a0 [ 847.746004][T20548] ? __pfx_full_proxy_read+0x10/0x10 [ 847.746036][T20548] vfs_read+0x1e4/0xcf0 [ 847.746068][T20548] ? __pfx_vfs_read+0x10/0x10 [ 847.746090][T20548] ? find_held_lock+0x2b/0x80 [ 847.746116][T20548] ? __fget_files+0x204/0x3c0 [ 847.746146][T20548] ? __fget_files+0x20e/0x3c0 [ 847.746167][T20548] ? __fget_files+0x130/0x3c0 [ 847.746198][T20548] __x64_sys_pread64+0x1eb/0x250 [ 847.746224][T20548] ? __pfx___x64_sys_pread64+0x10/0x10 [ 847.746260][T20548] do_syscall_64+0xcd/0xfa0 [ 847.746290][T20548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.746315][T20548] RIP: 0033:0x7f266578f6c9 [ 847.746335][T20548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.746358][T20548] RSP: 002b:00007f2666666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 847.746381][T20548] RAX: ffffffffffffffda RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 847.746398][T20548] RDX: 00000000000040b6 RSI: 0000200000000080 RDI: 0000000000000004 [ 847.746413][T20548] RBP: 00007f2666666090 R08: 0000000000000000 R09: 0000000000000000 [ 847.746429][T20548] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 847.746444][T20548] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 847.746481][T20548] [ 848.423187][T20554] zswap: compressor not available [ 848.662274][T20571] hub 1-0:1.0: USB hub found [ 848.667496][T20571] hub 1-0:1.0: 1 port detected [ 848.742018][T20566] hub 1-0:1.0: USB hub found [ 848.782205][T20566] hub 1-0:1.0: 1 port detected [ 849.722920][T20597] FAULT_INJECTION: forcing a failure. [ 849.722920][T20597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.868162][T20597] CPU: 1 UID: 0 PID: 20597 Comm: syz.2.4596 Tainted: G U syzkaller #0 PREEMPT(full) [ 849.868194][T20597] Tainted: [U]=USER [ 849.868199][T20597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.868207][T20597] Call Trace: [ 849.868213][T20597] [ 849.868219][T20597] dump_stack_lvl+0x16c/0x1f0 [ 849.868240][T20597] should_fail_ex+0x512/0x640 [ 849.868264][T20597] _copy_to_iter+0x463/0x1710 [ 849.868280][T20597] ? kasan_quarantine_put+0x10a/0x240 [ 849.868298][T20597] ? __pfx__copy_to_iter+0x10/0x10 [ 849.868312][T20597] ? rcu_is_watching+0x12/0xc0 [ 849.868327][T20597] ? kfree+0x252/0x6d0 [ 849.868345][T20597] seq_read_iter+0xd02/0x12d0 [ 849.868374][T20597] seq_read+0x3a3/0x570 [ 849.868394][T20597] ? __pfx_seq_read+0x10/0x10 [ 849.868418][T20597] ? get_pid_task+0xfc/0x250 [ 849.868446][T20597] full_proxy_read+0x131/0x1a0 [ 849.868464][T20597] ? __pfx_full_proxy_read+0x10/0x10 [ 849.868483][T20597] vfs_read+0x1e4/0xcf0 [ 849.868503][T20597] ? __pfx_vfs_read+0x10/0x10 [ 849.868517][T20597] ? find_held_lock+0x2b/0x80 [ 849.868531][T20597] ? __fget_files+0x204/0x3c0 [ 849.868549][T20597] ? __fget_files+0x20e/0x3c0 [ 849.868560][T20597] ? __fget_files+0x130/0x3c0 [ 849.868584][T20597] __x64_sys_pread64+0x1eb/0x250 [ 849.868600][T20597] ? __pfx___x64_sys_pread64+0x10/0x10 [ 849.868622][T20597] do_syscall_64+0xcd/0xfa0 [ 849.868640][T20597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.868654][T20597] RIP: 0033:0x7f26c758f6c9 [ 849.868666][T20597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.868680][T20597] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 849.868693][T20597] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 849.868702][T20597] RDX: 00000000000040b6 RSI: 0000200000000080 RDI: 0000000000000004 [ 849.868711][T20597] RBP: 00007f26c8493090 R08: 0000000000000000 R09: 0000000000000000 [ 849.868720][T20597] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 849.868728][T20597] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 849.868747][T20597] [ 850.349520][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4597'. [ 851.691698][T20614] netlink: 93 bytes leftover after parsing attributes in process `syz.0.4599'. [ 851.999125][T20623] hub 1-0:1.0: USB hub found [ 852.004012][T20623] hub 1-0:1.0: 1 port detected [ 852.063789][T20623] hub 1-0:1.0: USB hub found [ 852.106336][T20623] hub 1-0:1.0: 1 port detected [ 853.198404][T20643] FAULT_INJECTION: forcing a failure. [ 853.198404][T20643] name failslab, interval 1, probability 0, space 0, times 0 [ 853.212718][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.2.4608 Tainted: G U syzkaller #0 PREEMPT(full) [ 853.212743][T20643] Tainted: [U]=USER [ 853.212747][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 853.212756][T20643] Call Trace: [ 853.212761][T20643] [ 853.212767][T20643] dump_stack_lvl+0x16c/0x1f0 [ 853.212788][T20643] should_fail_ex+0x512/0x640 [ 853.212809][T20643] ? __kmalloc_noprof+0xca/0x880 [ 853.212833][T20643] should_failslab+0xc2/0x120 [ 853.212852][T20643] __kmalloc_noprof+0xdd/0x880 [ 853.212874][T20643] ? lsm_blob_alloc+0x68/0x90 [ 853.212894][T20643] ? lsm_blob_alloc+0x68/0x90 [ 853.212911][T20643] lsm_blob_alloc+0x68/0x90 [ 853.212928][T20643] security_prepare_creds+0x30/0x270 [ 853.212945][T20643] prepare_creds+0x56f/0x7d0 [ 853.212968][T20643] __sys_setfsuid+0xda/0x350 [ 853.212983][T20643] ? rcu_is_watching+0x12/0xc0 [ 853.213000][T20643] do_syscall_64+0xcd/0xfa0 [ 853.213018][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.213032][T20643] RIP: 0033:0x7f26c758f6c9 [ 853.213044][T20643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.213058][T20643] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 853.213072][T20643] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 853.213082][T20643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 853.213090][T20643] RBP: 00007f26c7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 853.213099][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.213107][T20643] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 853.213126][T20643] [ 854.521437][T20662] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4611'. [ 856.429094][T20694] program syz.2.4621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.459575][T20747] FAULT_INJECTION: forcing a failure. [ 859.459575][T20747] name fail_futex, interval 1, probability 0, space 0, times 0 [ 859.551921][T20747] CPU: 0 UID: 0 PID: 20747 Comm: syz.5.4633 Tainted: G U syzkaller #0 PREEMPT(full) [ 859.551946][T20747] Tainted: [U]=USER [ 859.551950][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 859.551959][T20747] Call Trace: [ 859.551964][T20747] [ 859.551970][T20747] dump_stack_lvl+0x16c/0x1f0 [ 859.551991][T20747] should_fail_ex+0x512/0x640 [ 859.552014][T20747] get_futex_key+0x293/0x1560 [ 859.552035][T20747] ? __pfx_get_futex_key+0x10/0x10 [ 859.552052][T20747] ? __mutex_trylock_common+0xe9/0x250 [ 859.552076][T20747] futex_wake+0xea/0x530 [ 859.552106][T20747] ? __pfx_futex_wake+0x10/0x10 [ 859.552125][T20747] ? __lock_acquire+0xb8a/0x1c90 [ 859.552151][T20747] do_futex+0x1e3/0x350 [ 859.552170][T20747] ? __pfx_do_futex+0x10/0x10 [ 859.552187][T20747] ? __might_fault+0xe3/0x190 [ 859.552206][T20747] mm_release+0x24e/0x300 [ 859.552222][T20747] do_exit+0x68e/0x2bf0 [ 859.552244][T20747] ? __pfx_do_exit+0x10/0x10 [ 859.552262][T20747] ? do_raw_spin_lock+0x12c/0x2b0 [ 859.552282][T20747] ? find_held_lock+0x2b/0x80 [ 859.552299][T20747] do_group_exit+0xd3/0x2a0 [ 859.552319][T20747] get_signal+0x2671/0x26d0 [ 859.552341][T20747] ? __pfx_get_signal+0x10/0x10 [ 859.552356][T20747] ? do_futex+0x122/0x350 [ 859.552374][T20747] ? __pfx_do_futex+0x10/0x10 [ 859.552394][T20747] arch_do_signal_or_restart+0x8f/0x790 [ 859.552413][T20747] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 859.552435][T20747] ? xfd_validate_state+0x61/0x180 [ 859.552453][T20747] ? __pfx_ksys_read+0x10/0x10 [ 859.552473][T20747] exit_to_user_mode_loop+0x85/0x130 [ 859.552494][T20747] do_syscall_64+0x426/0xfa0 [ 859.552512][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.552526][T20747] RIP: 0033:0x7fce8ab8f6c9 [ 859.552538][T20747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.552552][T20747] RSP: 002b:00007fce8b95d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 859.552566][T20747] RAX: fffffffffffffe00 RBX: 00007fce8ade6098 RCX: 00007fce8ab8f6c9 [ 859.552575][T20747] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce8ade6098 [ 859.552584][T20747] RBP: 00007fce8ade6090 R08: 0000000000000000 R09: 0000000000000000 [ 859.552593][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.552601][T20747] R13: 00007fce8ade6128 R14: 00007ffd1c351e60 R15: 00007ffd1c351f48 [ 859.552619][T20747] [ 860.375225][T20754] hub 1-0:1.0: USB hub found [ 860.409618][T20754] hub 1-0:1.0: 1 port detected [ 860.463056][T20756] FAULT_INJECTION: forcing a failure. [ 860.463056][T20756] name failslab, interval 1, probability 0, space 0, times 0 [ 860.548146][T20756] CPU: 0 UID: 0 PID: 20756 Comm: syz.5.4634 Tainted: G U syzkaller #0 PREEMPT(full) [ 860.548184][T20756] Tainted: [U]=USER [ 860.548192][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.548206][T20756] Call Trace: [ 860.548214][T20756] [ 860.548224][T20756] dump_stack_lvl+0x16c/0x1f0 [ 860.548258][T20756] should_fail_ex+0x512/0x640 [ 860.548291][T20756] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 860.548324][T20756] should_failslab+0xc2/0x120 [ 860.548355][T20756] __kvmalloc_node_noprof+0x141/0x9c0 [ 860.548385][T20756] ? seq_read_iter+0x830/0x12d0 [ 860.548418][T20756] ? alloc_pages_bulk_noprof+0xa67/0x1410 [ 860.548451][T20756] ? seq_read_iter+0x830/0x12d0 [ 860.548480][T20756] seq_read_iter+0x830/0x12d0 [ 860.548515][T20756] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 860.548553][T20756] kernfs_fop_read_iter+0x46c/0x610 [ 860.548586][T20756] copy_splice_read+0x618/0xc20 [ 860.548619][T20756] ? __pfx_copy_splice_read+0x10/0x10 [ 860.548646][T20756] ? look_up_lock_class+0x6b/0x150 [ 860.548680][T20756] ? lockdep_init_map_type+0x5c/0x280 [ 860.548714][T20756] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 860.548751][T20756] ? __pfx_copy_splice_read+0x10/0x10 [ 860.548774][T20756] do_splice_read+0x285/0x370 [ 860.548801][T20756] splice_direct_to_actor+0x2a1/0xa30 [ 860.548829][T20756] ? __pfx_direct_splice_actor+0x10/0x10 [ 860.548860][T20756] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 860.548883][T20756] ? get_pid_task+0xfc/0x250 [ 860.548924][T20756] do_splice_direct+0x174/0x240 [ 860.548948][T20756] ? __pfx_do_splice_direct+0x10/0x10 [ 860.548972][T20756] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 860.549014][T20756] ? rw_verify_area+0xcf/0x6c0 [ 860.549039][T20756] do_sendfile+0xb06/0xe50 [ 860.549069][T20756] ? __pfx_do_sendfile+0x10/0x10 [ 860.549094][T20756] ? __fget_files+0x20e/0x3c0 [ 860.549129][T20756] __x64_sys_sendfile64+0x1d8/0x220 [ 860.549159][T20756] ? ksys_write+0x1ac/0x250 [ 860.549184][T20756] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 860.549226][T20756] do_syscall_64+0xcd/0xfa0 [ 860.549258][T20756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.549283][T20756] RIP: 0033:0x7fce8ab8f6c9 [ 860.549303][T20756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.549326][T20756] RSP: 002b:00007fce8b95d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 860.549349][T20756] RAX: ffffffffffffffda RBX: 00007fce8ade6090 RCX: 00007fce8ab8f6c9 [ 860.549366][T20756] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 860.549380][T20756] RBP: 00007fce8b95d090 R08: 0000000000000000 R09: 0000000000000000 [ 860.549395][T20756] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 860.549413][T20756] R13: 00007fce8ade6128 R14: 00007fce8ade6090 R15: 00007ffd1c351f48 [ 860.549450][T20756] [ 862.839037][T20763] delete_channel: no stack [ 862.933901][T20788] hub 1-0:1.0: USB hub found [ 862.986789][T20788] hub 1-0:1.0: 1 port detected [ 863.061826][T20785] hub 1-0:1.0: USB hub found [ 863.094380][T20785] hub 1-0:1.0: 1 port detected [ 863.600358][T20801] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4644'. [ 864.883696][T20813] FAULT_INJECTION: forcing a failure. [ 864.883696][T20813] name failslab, interval 1, probability 0, space 0, times 0 [ 864.897971][T20813] CPU: 0 UID: 0 PID: 20813 Comm: syz.0.4646 Tainted: G U syzkaller #0 PREEMPT(full) [ 864.898012][T20813] Tainted: [U]=USER [ 864.898022][T20813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.898038][T20813] Call Trace: [ 864.898047][T20813] [ 864.898058][T20813] dump_stack_lvl+0x16c/0x1f0 [ 864.898095][T20813] should_fail_ex+0x512/0x640 [ 864.898132][T20813] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 864.898164][T20813] should_failslab+0xc2/0x120 [ 864.898198][T20813] kmem_cache_alloc_noprof+0x75/0x6e0 [ 864.898225][T20813] ? prepare_creds+0x2c/0x7d0 [ 864.898266][T20813] ? prepare_creds+0x2c/0x7d0 [ 864.898300][T20813] prepare_creds+0x2c/0x7d0 [ 864.898339][T20813] __sys_setfsuid+0xda/0x350 [ 864.898367][T20813] ? rcu_is_watching+0x12/0xc0 [ 864.898397][T20813] do_syscall_64+0xcd/0xfa0 [ 864.898440][T20813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.898466][T20813] RIP: 0033:0x7fcc0858f6c9 [ 864.898488][T20813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.898512][T20813] RSP: 002b:00007fcc09422038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 864.898538][T20813] RAX: ffffffffffffffda RBX: 00007fcc087e5fa0 RCX: 00007fcc0858f6c9 [ 864.898556][T20813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 864.898572][T20813] RBP: 00007fcc08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 864.898588][T20813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.898603][T20813] R13: 00007fcc087e6038 R14: 00007fcc087e5fa0 R15: 00007ffd31fe0698 [ 864.898640][T20813] [ 865.316050][T20822] random: crng reseeded on system resumption [ 868.293733][T20873] KVM: debugfs: duplicate directory 20873-3 [ 869.564397][T20894] FAULT_INJECTION: forcing a failure. [ 869.564397][T20894] name failslab, interval 1, probability 0, space 0, times 0 [ 869.634065][T20894] CPU: 1 UID: 0 PID: 20894 Comm: syz.2.4665 Tainted: G U syzkaller #0 PREEMPT(full) [ 869.634106][T20894] Tainted: [U]=USER [ 869.634117][T20894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.634133][T20894] Call Trace: [ 869.634143][T20894] [ 869.634153][T20894] dump_stack_lvl+0x16c/0x1f0 [ 869.634191][T20894] should_fail_ex+0x512/0x640 [ 869.634229][T20894] ? __kmalloc_noprof+0xca/0x880 [ 869.634271][T20894] should_failslab+0xc2/0x120 [ 869.634306][T20894] __kmalloc_noprof+0xdd/0x880 [ 869.634345][T20894] ? lsm_blob_alloc+0x68/0x90 [ 869.634383][T20894] ? lsm_blob_alloc+0x68/0x90 [ 869.634413][T20894] lsm_blob_alloc+0x68/0x90 [ 869.634445][T20894] security_prepare_creds+0x30/0x270 [ 869.634479][T20894] prepare_creds+0x56f/0x7d0 [ 869.634519][T20894] __sys_setfsuid+0xda/0x350 [ 869.634547][T20894] ? rcu_is_watching+0x12/0xc0 [ 869.634579][T20894] do_syscall_64+0xcd/0xfa0 [ 869.634613][T20894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.634640][T20894] RIP: 0033:0x7f26c758f6c9 [ 869.634661][T20894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.634685][T20894] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 869.634711][T20894] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 869.634729][T20894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 869.634745][T20894] RBP: 00007f26c7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 869.634762][T20894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.634778][T20894] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 869.634815][T20894] [ 870.174781][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.183692][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.560010][T20940] delete_channel: no stack [ 872.807277][T20952] FAULT_INJECTION: forcing a failure. [ 872.807277][T20952] name failslab, interval 1, probability 0, space 0, times 0 [ 872.821022][T20952] CPU: 1 UID: 0 PID: 20952 Comm: syz.0.4676 Tainted: G U syzkaller #0 PREEMPT(full) [ 872.821064][T20952] Tainted: [U]=USER [ 872.821074][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.821090][T20952] Call Trace: [ 872.821099][T20952] [ 872.821110][T20952] dump_stack_lvl+0x16c/0x1f0 [ 872.821145][T20952] should_fail_ex+0x512/0x640 [ 872.821183][T20952] ? __kmalloc_noprof+0xca/0x880 [ 872.821225][T20952] should_failslab+0xc2/0x120 [ 872.821261][T20952] __kmalloc_noprof+0xdd/0x880 [ 872.821301][T20952] ? lsm_blob_alloc+0x68/0x90 [ 872.821337][T20952] ? lsm_blob_alloc+0x68/0x90 [ 872.821367][T20952] lsm_blob_alloc+0x68/0x90 [ 872.821399][T20952] security_prepare_creds+0x30/0x270 [ 872.821432][T20952] prepare_creds+0x56f/0x7d0 [ 872.821472][T20952] __sys_setfsuid+0xda/0x350 [ 872.821500][T20952] ? rcu_is_watching+0x12/0xc0 [ 872.821531][T20952] do_syscall_64+0xcd/0xfa0 [ 872.821564][T20952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.821591][T20952] RIP: 0033:0x7fcc0858f6c9 [ 872.821612][T20952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.821637][T20952] RSP: 002b:00007fcc09401038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 872.821662][T20952] RAX: ffffffffffffffda RBX: 00007fcc087e6090 RCX: 00007fcc0858f6c9 [ 872.821680][T20952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 872.821696][T20952] RBP: 00007fcc08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 872.821713][T20952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.821729][T20952] R13: 00007fcc087e6128 R14: 00007fcc087e6090 R15: 00007ffd31fe0698 [ 872.821765][T20952] [ 875.270787][ T9] Process accounting resumed [ 876.367087][T20991] FAULT_INJECTION: forcing a failure. [ 876.367087][T20991] name failslab, interval 1, probability 0, space 0, times 0 [ 876.384764][T20991] CPU: 0 UID: 0 PID: 20991 Comm: syz.2.4684 Tainted: G U syzkaller #0 PREEMPT(full) [ 876.384804][T20991] Tainted: [U]=USER [ 876.384813][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.384829][T20991] Call Trace: [ 876.384838][T20991] [ 876.384849][T20991] dump_stack_lvl+0x16c/0x1f0 [ 876.384886][T20991] should_fail_ex+0x512/0x640 [ 876.384929][T20991] should_failslab+0xc2/0x120 [ 876.384962][T20991] kmem_cache_alloc_noprof+0x75/0x6e0 [ 876.384991][T20991] ? skb_clone+0x190/0x3f0 [ 876.385025][T20991] ? skb_clone+0x190/0x3f0 [ 876.385048][T20991] skb_clone+0x190/0x3f0 [ 876.385077][T20991] netlink_deliver_tap+0xabd/0xd30 [ 876.385113][T20991] netlink_unicast+0x64c/0x870 [ 876.385146][T20991] ? __pfx_netlink_unicast+0x10/0x10 [ 876.385189][T20991] netlink_sendmsg+0x8c8/0xdd0 [ 876.385223][T20991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.385255][T20991] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 876.385298][T20991] __sys_sendto+0x4a3/0x520 [ 876.385336][T20991] ? __pfx___sys_sendto+0x10/0x10 [ 876.385385][T20991] ? fd_install+0x225/0x750 [ 876.385427][T20991] ? __pfx___sys_socket+0x10/0x10 [ 876.385468][T20991] __x64_sys_sendto+0xe0/0x1c0 [ 876.385504][T20991] ? do_syscall_64+0x91/0xfa0 [ 876.385533][T20991] ? lockdep_hardirqs_on+0x7c/0x110 [ 876.385572][T20991] do_syscall_64+0xcd/0xfa0 [ 876.385605][T20991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.385632][T20991] RIP: 0033:0x7f26c759155c [ 876.385653][T20991] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 876.385678][T20991] RSP: 002b:00007f26c8491ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 876.385703][T20991] RAX: ffffffffffffffda RBX: 00007f26c8491fc0 RCX: 00007f26c759155c [ 876.385722][T20991] RDX: 000000000000001c RSI: 00007f26c8492010 RDI: 0000000000000006 [ 876.385738][T20991] RBP: 0000000000000000 R08: 00007f26c8491f14 R09: 000000000000000c [ 876.385755][T20991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 876.385772][T20991] R13: 00007f26c8491f68 R14: 00007f26c8492010 R15: 0000000000000000 [ 876.385809][T20991] [ 878.025163][T21019] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input252 [ 878.374390][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'. [ 879.613204][T21046] FAULT_INJECTION: forcing a failure. [ 879.613204][T21046] name failslab, interval 1, probability 0, space 0, times 0 [ 879.630721][T21046] CPU: 1 UID: 0 PID: 21046 Comm: syz.4.4699 Tainted: G U syzkaller #0 PREEMPT(full) [ 879.630762][T21046] Tainted: [U]=USER [ 879.630771][T21046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 879.630787][T21046] Call Trace: [ 879.630797][T21046] [ 879.630807][T21046] dump_stack_lvl+0x16c/0x1f0 [ 879.630843][T21046] should_fail_ex+0x512/0x640 [ 879.630880][T21046] ? __kmalloc_noprof+0xca/0x880 [ 879.630922][T21046] should_failslab+0xc2/0x120 [ 879.630954][T21046] __kmalloc_noprof+0xdd/0x880 [ 879.630991][T21046] ? __pfx___mutex_trylock_common+0x10/0x10 [ 879.631024][T21046] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 879.631065][T21046] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 879.631099][T21046] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 879.631139][T21046] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 879.631173][T21046] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 879.631205][T21046] ? genl_get_cmd+0x194/0x580 [ 879.631255][T21046] ? __radix_tree_lookup+0x21f/0x2c0 [ 879.631290][T21046] genl_rcv_msg+0x55c/0x800 [ 879.631327][T21046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.631358][T21046] ? __pfx_ctrl_getfamily+0x10/0x10 [ 879.631402][T21046] netlink_rcv_skb+0x158/0x420 [ 879.631429][T21046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.631462][T21046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 879.631502][T21046] ? netlink_deliver_tap+0x1ae/0xd30 [ 879.631534][T21046] genl_rcv+0x28/0x40 [ 879.631566][T21046] netlink_unicast+0x5aa/0x870 [ 879.631601][T21046] ? __pfx_netlink_unicast+0x10/0x10 [ 879.631642][T21046] netlink_sendmsg+0x8c8/0xdd0 [ 879.631675][T21046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.631707][T21046] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 879.631750][T21046] __sys_sendto+0x4a3/0x520 [ 879.631789][T21046] ? __pfx___sys_sendto+0x10/0x10 [ 879.631836][T21046] ? fd_install+0x225/0x750 [ 879.631876][T21046] ? __pfx___sys_socket+0x10/0x10 [ 879.631917][T21046] __x64_sys_sendto+0xe0/0x1c0 [ 879.631949][T21046] ? do_syscall_64+0x91/0xfa0 [ 879.631979][T21046] ? lockdep_hardirqs_on+0x7c/0x110 [ 879.632009][T21046] do_syscall_64+0xcd/0xfa0 [ 879.632044][T21046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.632071][T21046] RIP: 0033:0x7f266579155c [ 879.632092][T21046] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 879.632118][T21046] RSP: 002b:00007f2666643ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 879.632143][T21046] RAX: ffffffffffffffda RBX: 00007f2666643fc0 RCX: 00007f266579155c [ 879.632158][T21046] RDX: 000000000000001c RSI: 00007f2666644010 RDI: 0000000000000007 [ 879.632175][T21046] RBP: 0000000000000000 R08: 00007f2666643f14 R09: 000000000000000c [ 879.632190][T21046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 879.632206][T21046] R13: 00007f2666643f68 R14: 00007f2666644010 R15: 0000000000000000 [ 879.632264][T21046] [ 880.610481][T21064] block nbd9: NBD_DISCONNECT [ 880.669719][T21063] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4705'. [ 880.775925][T21066] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4705'. [ 881.582462][T21074] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input253 [ 881.621973][T21067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.637296][T21075] FAULT_INJECTION: forcing a failure. [ 881.637296][T21075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.743665][T21075] CPU: 0 UID: 0 PID: 21075 Comm: syz.2.4707 Tainted: G U syzkaller #0 PREEMPT(full) [ 881.743702][T21075] Tainted: [U]=USER [ 881.743711][T21075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 881.743726][T21075] Call Trace: [ 881.743735][T21075] [ 881.743745][T21075] dump_stack_lvl+0x16c/0x1f0 [ 881.743778][T21075] should_fail_ex+0x512/0x640 [ 881.743817][T21075] _copy_from_user+0x2e/0xd0 [ 881.743853][T21075] input_event_from_user+0xb9/0x290 [ 881.743883][T21075] ? __pfx_input_event_from_user+0x10/0x10 [ 881.743910][T21075] ? trace_kmalloc+0x2b/0xd0 [ 881.743937][T21075] ? __kmalloc_noprof+0x34f/0x880 [ 881.743983][T21075] uinput_write+0xbe7/0xff0 [ 881.744024][T21075] ? __pfx_uinput_write+0x10/0x10 [ 881.744053][T21075] ? common_file_perm+0x1a9/0x340 [ 881.744080][T21075] ? bpf_lsm_file_permission+0x9/0x10 [ 881.744107][T21075] ? security_file_permission+0x71/0x210 [ 881.744135][T21075] ? rw_verify_area+0xcf/0x6c0 [ 881.744162][T21075] ? __pfx_uinput_write+0x10/0x10 [ 881.744191][T21075] vfs_writev+0x5df/0xde0 [ 881.744226][T21075] ? __pfx_vfs_writev+0x10/0x10 [ 881.744274][T21075] ? __fget_files+0x20e/0x3c0 [ 881.744297][T21075] ? __fget_files+0x130/0x3c0 [ 881.744330][T21075] ? do_writev+0x28c/0x340 [ 881.744358][T21075] do_writev+0x28c/0x340 [ 881.744382][T21075] ? __pfx_do_writev+0x10/0x10 [ 881.744403][T21075] ? xfd_validate_state+0x61/0x180 [ 881.744446][T21075] do_syscall_64+0xcd/0xfa0 [ 881.744477][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.744503][T21075] RIP: 0033:0x7f26c758f6c9 [ 881.744523][T21075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.744545][T21075] RSP: 002b:00007f26c8472038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 881.744569][T21075] RAX: ffffffffffffffda RBX: 00007f26c77e6090 RCX: 00007f26c758f6c9 [ 881.744586][T21075] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 881.744601][T21075] RBP: 00007f26c8472090 R08: 0000000000000000 R09: 0000000000000000 [ 881.744616][T21075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.744631][T21075] R13: 00007f26c77e6128 R14: 00007f26c77e6090 R15: 00007ffce7cdce38 [ 881.744668][T21075] [ 882.272085][T21082] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input254 [ 882.423559][T21067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.550242][T21067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.807503][T21067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.442337][T21099] FAULT_INJECTION: forcing a failure. [ 883.442337][T21099] name failslab, interval 1, probability 0, space 0, times 0 [ 883.468965][T21099] CPU: 1 UID: 0 PID: 21099 Comm: syz.4.4712 Tainted: G U syzkaller #0 PREEMPT(full) [ 883.469006][T21099] Tainted: [U]=USER [ 883.469016][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 883.469033][T21099] Call Trace: [ 883.469041][T21099] [ 883.469052][T21099] dump_stack_lvl+0x16c/0x1f0 [ 883.469087][T21099] should_fail_ex+0x512/0x640 [ 883.469124][T21099] ? __kmalloc_noprof+0xca/0x880 [ 883.469166][T21099] should_failslab+0xc2/0x120 [ 883.469209][T21099] __kmalloc_noprof+0xdd/0x880 [ 883.469248][T21099] ? lsm_blob_alloc+0x68/0x90 [ 883.469284][T21099] ? lsm_blob_alloc+0x68/0x90 [ 883.469314][T21099] lsm_blob_alloc+0x68/0x90 [ 883.469345][T21099] security_prepare_creds+0x30/0x270 [ 883.469377][T21099] prepare_creds+0x56f/0x7d0 [ 883.469414][T21099] __sys_setfsuid+0xda/0x350 [ 883.469440][T21099] ? rcu_is_watching+0x12/0xc0 [ 883.469470][T21099] do_syscall_64+0xcd/0xfa0 [ 883.469501][T21099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.469526][T21099] RIP: 0033:0x7f266578f6c9 [ 883.469547][T21099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.469572][T21099] RSP: 002b:00007f2666666038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 883.469597][T21099] RAX: ffffffffffffffda RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 883.469615][T21099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 883.469630][T21099] RBP: 00007f2665811f91 R08: 0000000000000000 R09: 0000000000000000 [ 883.469646][T21099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.469661][T21099] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 883.469696][T21099] [ 886.683390][T21138] hub 8-0:1.0: USB hub found [ 886.719542][T21138] hub 8-0:1.0: 1 port detected [ 888.168591][T21157] could not allocate digest TFM handle [ 889.332675][T21188] FAULT_INJECTION: forcing a failure. [ 889.332675][T21188] name failslab, interval 1, probability 0, space 0, times 0 [ 889.604986][T21188] CPU: 0 UID: 0 PID: 21188 Comm: syz.0.4731 Tainted: G U syzkaller #0 PREEMPT(full) [ 889.605028][T21188] Tainted: [U]=USER [ 889.605037][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 889.605054][T21188] Call Trace: [ 889.605064][T21188] [ 889.605075][T21188] dump_stack_lvl+0x16c/0x1f0 [ 889.605111][T21188] should_fail_ex+0x512/0x640 [ 889.605148][T21188] ? __kmalloc_cache_noprof+0x5f/0x780 [ 889.605179][T21188] should_failslab+0xc2/0x120 [ 889.605213][T21188] __kmalloc_cache_noprof+0x72/0x780 [ 889.605241][T21188] ? vkms_plane_duplicate_state+0x87/0x130 [ 889.605285][T21188] ? vkms_plane_duplicate_state+0x87/0x130 [ 889.605319][T21188] vkms_plane_duplicate_state+0x87/0x130 [ 889.605357][T21188] drm_atomic_get_plane_state+0x20e/0x590 [ 889.605396][T21188] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 889.605433][T21188] ? __pfx___might_resched+0x10/0x10 [ 889.605469][T21188] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 889.605504][T21188] ? __mutex_lock+0x1c5/0x1060 [ 889.605543][T21188] ? rcu_is_watching+0x12/0xc0 [ 889.605603][T21188] drm_client_modeset_commit_locked+0x14d/0x580 [ 889.605646][T21188] drm_client_modeset_commit+0x4f/0x80 [ 889.605684][T21188] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 889.605724][T21188] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 889.605757][T21188] drm_fbdev_client_restore+0x2c/0x40 [ 889.605786][T21188] drm_client_dev_restore+0x1f6/0x2a0 [ 889.605829][T21188] drm_release+0x2c4/0x360 [ 889.605867][T21188] ? __pfx_drm_release+0x10/0x10 [ 889.605900][T21188] __fput+0x402/0xb70 [ 889.605943][T21188] task_work_run+0x150/0x240 [ 889.605980][T21188] ? __pfx_task_work_run+0x10/0x10 [ 889.606016][T21188] ? __pfx___do_sys_close_range+0x10/0x10 [ 889.606052][T21188] exit_to_user_mode_loop+0xec/0x130 [ 889.606091][T21188] do_syscall_64+0x426/0xfa0 [ 889.606124][T21188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.606151][T21188] RIP: 0033:0x7fcc0858f6c9 [ 889.606174][T21188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.606198][T21188] RSP: 002b:00007fcc09401038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 889.606223][T21188] RAX: 0000000000000000 RBX: 00007fcc087e6090 RCX: 00007fcc0858f6c9 [ 889.606240][T21188] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 889.606255][T21188] RBP: 00007fcc08611f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.606272][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.606287][T21188] R13: 00007fcc087e6128 R14: 00007fcc087e6090 R15: 00007ffd31fe0698 [ 889.606327][T21188] [ 892.646379][T21232] bridge0: port 3(team0) entered blocking state [ 892.697965][T21232] bridge0: port 3(team0) entered disabled state [ 892.706427][T21232] team0: entered allmulticast mode [ 892.711568][T21232] team_slave_0: entered allmulticast mode [ 892.725814][T21232] team_slave_1: entered allmulticast mode [ 892.753598][T21232] team0: entered promiscuous mode [ 892.765971][T21232] team_slave_0: entered promiscuous mode [ 892.773378][T21232] team_slave_1: entered promiscuous mode [ 892.779949][T21232] bridge0: port 3(team0) entered blocking state [ 892.786358][T21232] bridge0: port 3(team0) entered forwarding state [ 893.423702][T21248] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input255 [ 894.007138][T21259] hub 1-0:1.0: USB hub found [ 894.036335][T21260] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input256 [ 894.046536][T21259] hub 1-0:1.0: 1 port detected [ 894.095241][T21261] FAULT_INJECTION: forcing a failure. [ 894.095241][T21261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.257601][T21261] CPU: 1 UID: 0 PID: 21261 Comm: syz.0.4745 Tainted: G U syzkaller #0 PREEMPT(full) [ 894.257639][T21261] Tainted: [U]=USER [ 894.257648][T21261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.257662][T21261] Call Trace: [ 894.257670][T21261] [ 894.257680][T21261] dump_stack_lvl+0x16c/0x1f0 [ 894.257714][T21261] should_fail_ex+0x512/0x640 [ 894.257754][T21261] _copy_from_user+0x2e/0xd0 [ 894.257792][T21261] input_event_from_user+0xb9/0x290 [ 894.257821][T21261] ? __pfx_input_event_from_user+0x10/0x10 [ 894.257850][T21261] ? __pfx___might_resched+0x10/0x10 [ 894.257876][T21261] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 894.257905][T21261] ? input_event+0xb6/0xd0 [ 894.257933][T21261] uinput_write+0xbe7/0xff0 [ 894.257973][T21261] ? __pfx_uinput_write+0x10/0x10 [ 894.258003][T21261] ? common_file_perm+0x1a9/0x340 [ 894.258029][T21261] ? bpf_lsm_file_permission+0x9/0x10 [ 894.258058][T21261] ? security_file_permission+0x71/0x210 [ 894.258085][T21261] ? rw_verify_area+0xcf/0x6c0 [ 894.258111][T21261] ? __pfx_uinput_write+0x10/0x10 [ 894.258140][T21261] vfs_writev+0x5df/0xde0 [ 894.258174][T21261] ? __pfx_vfs_writev+0x10/0x10 [ 894.258224][T21261] ? __fget_files+0x20e/0x3c0 [ 894.258247][T21261] ? __fget_files+0x130/0x3c0 [ 894.258281][T21261] ? do_writev+0x28c/0x340 [ 894.258302][T21261] do_writev+0x28c/0x340 [ 894.258327][T21261] ? __pfx_do_writev+0x10/0x10 [ 894.258368][T21261] do_syscall_64+0xcd/0xfa0 [ 894.258399][T21261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.258425][T21261] RIP: 0033:0x7fcc0858f6c9 [ 894.258444][T21261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.258468][T21261] RSP: 002b:00007fcc09401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 894.258492][T21261] RAX: ffffffffffffffda RBX: 00007fcc087e6090 RCX: 00007fcc0858f6c9 [ 894.258509][T21261] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 894.258525][T21261] RBP: 00007fcc09401090 R08: 0000000000000000 R09: 0000000000000000 [ 894.258540][T21261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.258555][T21261] R13: 00007fcc087e6128 R14: 00007fcc087e6090 R15: 00007ffd31fe0698 [ 894.258593][T21261] [ 894.412477][T21269] hub 1-0:1.0: USB hub found [ 894.542790][T21269] hub 1-0:1.0: 1 port detected [ 898.350921][T21340] FAULT_INJECTION: forcing a failure. [ 898.350921][T21340] name failslab, interval 1, probability 0, space 0, times 0 [ 898.392493][T21340] CPU: 0 UID: 0 PID: 21340 Comm: syz.2.4762 Tainted: G U syzkaller #0 PREEMPT(full) [ 898.392535][T21340] Tainted: [U]=USER [ 898.392544][T21340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 898.392561][T21340] Call Trace: [ 898.392570][T21340] [ 898.392581][T21340] dump_stack_lvl+0x16c/0x1f0 [ 898.392618][T21340] should_fail_ex+0x512/0x640 [ 898.392655][T21340] ? fs_reclaim_acquire+0xae/0x150 [ 898.392691][T21340] should_failslab+0xc2/0x120 [ 898.392725][T21340] __kmalloc_noprof+0xdd/0x880 [ 898.392765][T21340] ? tomoyo_encode2+0x100/0x3e0 [ 898.392809][T21340] ? tomoyo_encode2+0x100/0x3e0 [ 898.392838][T21340] tomoyo_encode2+0x100/0x3e0 [ 898.392872][T21340] tomoyo_encode+0x29/0x50 [ 898.392903][T21340] tomoyo_realpath_from_path+0x18f/0x6e0 [ 898.392945][T21340] tomoyo_mkdev_perm+0x22b/0x570 [ 898.392968][T21340] ? tomoyo_mkdev_perm+0x217/0x570 [ 898.392995][T21340] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 898.393021][T21340] ? do_raw_spin_lock+0x12c/0x2b0 [ 898.393068][T21340] ? do_raw_spin_unlock+0x172/0x230 [ 898.393112][T21340] ? __pfx_current_check_access_path+0x10/0x10 [ 898.393146][T21340] ? simple_lookup+0x105/0x1d0 [ 898.393178][T21340] tomoyo_path_mknod+0x12a/0x190 [ 898.393212][T21340] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 898.393248][T21340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 898.393294][T21340] security_path_mknod+0x161/0x310 [ 898.393323][T21340] do_mknodat+0x239/0x5d0 [ 898.393356][T21340] ? __pfx_do_mknodat+0x10/0x10 [ 898.393381][T21340] ? getname_flags.part.0+0x1c5/0x550 [ 898.393425][T21340] __x64_sys_mknod+0x87/0xb0 [ 898.393455][T21340] do_syscall_64+0xcd/0xfa0 [ 898.393488][T21340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.393515][T21340] RIP: 0033:0x7f26c758f6c9 [ 898.393536][T21340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.393562][T21340] RSP: 002b:00007f26c8493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 898.393587][T21340] RAX: ffffffffffffffda RBX: 00007f26c77e5fa0 RCX: 00007f26c758f6c9 [ 898.393605][T21340] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 898.393622][T21340] RBP: 00007f26c7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 898.393638][T21340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.393654][T21340] R13: 00007f26c77e6038 R14: 00007f26c77e5fa0 R15: 00007ffce7cdce38 [ 898.393692][T21340] [ 898.398213][T21340] ERROR: Out of memory at tomoyo_realpath_from_path. syzkaller syzkaller login: [ 900.132965][ T5832] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 900.264248][T21367] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input257 [ 900.315964][T21368] FAULT_INJECTION: forcing a failure. [ 900.315964][T21368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.356228][T21368] CPU: 0 UID: 0 PID: 21368 Comm: syz.4.4768 Tainted: G U syzkaller #0 PREEMPT(full) [ 900.356267][T21368] Tainted: [U]=USER [ 900.356276][T21368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 900.356290][T21368] Call Trace: [ 900.356299][T21368] [ 900.356309][T21368] dump_stack_lvl+0x16c/0x1f0 [ 900.356343][T21368] should_fail_ex+0x512/0x640 [ 900.356382][T21368] _copy_from_user+0x2e/0xd0 [ 900.356420][T21368] input_event_from_user+0xb9/0x290 [ 900.356450][T21368] ? __pfx_input_event_from_user+0x10/0x10 [ 900.356478][T21368] ? __pfx___might_resched+0x10/0x10 [ 900.356504][T21368] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 900.356532][T21368] ? input_event+0xb6/0xd0 [ 900.356561][T21368] uinput_write+0xbe7/0xff0 [ 900.356603][T21368] ? __pfx_uinput_write+0x10/0x10 [ 900.356632][T21368] ? common_file_perm+0x1a9/0x340 [ 900.356659][T21368] ? bpf_lsm_file_permission+0x9/0x10 [ 900.356688][T21368] ? security_file_permission+0x71/0x210 [ 900.356715][T21368] ? rw_verify_area+0xcf/0x6c0 [ 900.356742][T21368] ? __pfx_uinput_write+0x10/0x10 [ 900.356772][T21368] vfs_writev+0x5df/0xde0 [ 900.356807][T21368] ? __pfx_vfs_writev+0x10/0x10 [ 900.356858][T21368] ? __fget_files+0x20e/0x3c0 [ 900.356887][T21368] ? __fget_files+0x130/0x3c0 [ 900.356920][T21368] ? do_writev+0x28c/0x340 [ 900.356942][T21368] do_writev+0x28c/0x340 [ 900.356967][T21368] ? __pfx_do_writev+0x10/0x10 [ 900.357003][T21368] do_syscall_64+0xcd/0xfa0 [ 900.357033][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.357059][T21368] RIP: 0033:0x7f266578f6c9 [ 900.357078][T21368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.357102][T21368] RSP: 002b:00007f2666645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 900.357126][T21368] RAX: ffffffffffffffda RBX: 00007f26659e6090 RCX: 00007f266578f6c9 [ 900.357143][T21368] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 900.357158][T21368] RBP: 00007f2666645090 R08: 0000000000000000 R09: 0000000000000000 [ 900.357174][T21368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.357189][T21368] R13: 00007f26659e6128 R14: 00007f26659e6090 R15: 00007fff40891fb8 [ 900.357226][T21368] [ 905.114936][T21438] hub 1-0:1.0: USB hub found [ 905.121866][T21438] hub 1-0:1.0: 1 port detected [ 905.450741][T21446] FAULT_INJECTION: forcing a failure. [ 905.450741][T21446] name failslab, interval 1, probability 0, space 0, times 0 [ 905.474851][T21446] CPU: 0 UID: 0 PID: 21446 Comm: syz.5.4789 Tainted: G U syzkaller #0 PREEMPT(full) [ 905.474891][T21446] Tainted: [U]=USER [ 905.474901][T21446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 905.474916][T21446] Call Trace: [ 905.474925][T21446] [ 905.474935][T21446] dump_stack_lvl+0x16c/0x1f0 [ 905.474971][T21446] should_fail_ex+0x512/0x640 [ 905.475007][T21446] ? __kmalloc_noprof+0xca/0x880 [ 905.475048][T21446] should_failslab+0xc2/0x120 [ 905.475081][T21446] __kmalloc_noprof+0xdd/0x880 [ 905.475119][T21446] ? lsm_blob_alloc+0x68/0x90 [ 905.475156][T21446] ? lsm_blob_alloc+0x68/0x90 [ 905.475185][T21446] lsm_blob_alloc+0x68/0x90 [ 905.475218][T21446] security_prepare_creds+0x30/0x270 [ 905.475249][T21446] prepare_creds+0x56f/0x7d0 [ 905.475289][T21446] __sys_setfsuid+0xda/0x350 [ 905.475316][T21446] ? rcu_is_watching+0x12/0xc0 [ 905.475348][T21446] do_syscall_64+0xcd/0xfa0 [ 905.475381][T21446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.475408][T21446] RIP: 0033:0x7fce8ab8f6c9 [ 905.475427][T21446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.475452][T21446] RSP: 002b:00007fce8b97e038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 905.475482][T21446] RAX: ffffffffffffffda RBX: 00007fce8ade5fa0 RCX: 00007fce8ab8f6c9 [ 905.475500][T21446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 905.475516][T21446] RBP: 00007fce8ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 905.475532][T21446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.475548][T21446] R13: 00007fce8ade6038 R14: 00007fce8ade5fa0 R15: 00007ffd1c351f48 [ 905.475583][T21446] [ 907.721418][T21481] FAULT_INJECTION: forcing a failure. [ 907.721418][T21481] name failslab, interval 1, probability 0, space 0, times 0 [ 907.823107][T21481] CPU: 1 UID: 0 PID: 21481 Comm: syz.0.4798 Tainted: G U syzkaller #0 PREEMPT(full) [ 907.823148][T21481] Tainted: [U]=USER [ 907.823158][T21481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 907.823178][T21481] Call Trace: [ 907.823187][T21481] [ 907.823199][T21481] dump_stack_lvl+0x16c/0x1f0 [ 907.823236][T21481] should_fail_ex+0x512/0x640 [ 907.823274][T21481] ? fs_reclaim_acquire+0xae/0x150 [ 907.823308][T21481] should_failslab+0xc2/0x120 [ 907.823341][T21481] kmem_cache_alloc_noprof+0x75/0x6e0 [ 907.823366][T21481] ? __pfx_map_id_range_down+0x10/0x10 [ 907.823403][T21481] ? security_inode_alloc+0x3b/0x2b0 [ 907.823446][T21481] ? security_inode_alloc+0x3b/0x2b0 [ 907.823480][T21481] security_inode_alloc+0x3b/0x2b0 [ 907.823518][T21481] inode_init_always_gfp+0xce4/0x1030 [ 907.823550][T21481] alloc_inode+0x86/0x240 [ 907.823583][T21481] iget_locked+0x2fa/0x860 [ 907.823621][T21481] ? __pfx_iget_locked+0x10/0x10 [ 907.823658][T21481] ? find_held_lock+0x2b/0x80 [ 907.823686][T21481] ? kernfs_root+0xee/0x2a0 [ 907.823725][T21481] kernfs_get_inode+0x48/0x460 [ 907.823758][T21481] kernfs_iop_lookup+0x1a7/0x2d0 [ 907.823795][T21481] __lookup_slow+0x251/0x460 [ 907.823831][T21481] ? __pfx___lookup_slow+0x10/0x10 [ 907.823891][T21481] ? lookup_fast+0x156/0x610 [ 907.823922][T21481] walk_component+0x353/0x5b0 [ 907.823949][T21481] path_lookupat+0x142/0x6d0 [ 907.823981][T21481] filename_lookup+0x224/0x5f0 [ 907.824011][T21481] ? __pfx_filename_lookup+0x10/0x10 [ 907.824081][T21481] ? getname_flags.part.0+0x1c5/0x550 [ 907.824126][T21481] user_path_at+0x3a/0x60 [ 907.824155][T21481] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 907.824187][T21481] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 907.824228][T21481] do_syscall_64+0xcd/0xfa0 [ 907.824262][T21481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.824288][T21481] RIP: 0033:0x7fcc0858f6c9 [ 907.824309][T21481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.824333][T21481] RSP: 002b:00007fcc09401038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 907.824358][T21481] RAX: ffffffffffffffda RBX: 00007fcc087e6090 RCX: 00007fcc0858f6c9 [ 907.824376][T21481] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 907.824393][T21481] RBP: 00007fcc08611f91 R08: 0000000000000002 R09: 0000000000000000 [ 907.824410][T21481] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 907.824426][T21481] R13: 00007fcc087e6128 R14: 00007fcc087e6090 R15: 00007ffd31fe0698 [ 907.824464][T21481] [ 909.104532][T21496] hub 1-0:1.0: USB hub found [ 909.114285][T21496] hub 1-0:1.0: 1 port detected [ 909.160910][T21496] hub 1-0:1.0: USB hub found [ 909.180686][T21496] hub 1-0:1.0: 1 port detected [ 911.286651][T21524] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input259 [ 914.627734][T21595] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input260 [ 914.736122][T21598] FAULT_INJECTION: forcing a failure. [ 914.736122][T21598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.826624][T21598] CPU: 1 UID: 0 PID: 21598 Comm: syz.4.4821 Tainted: G U syzkaller #0 PREEMPT(full) [ 914.826662][T21598] Tainted: [U]=USER [ 914.826671][T21598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.826685][T21598] Call Trace: [ 914.826694][T21598] [ 914.826704][T21598] dump_stack_lvl+0x16c/0x1f0 [ 914.826737][T21598] should_fail_ex+0x512/0x640 [ 914.826776][T21598] _copy_from_user+0x2e/0xd0 [ 914.826813][T21598] input_event_from_user+0xb9/0x290 [ 914.826844][T21598] ? __pfx_input_event_from_user+0x10/0x10 [ 914.826872][T21598] ? __pfx___might_resched+0x10/0x10 [ 914.826898][T21598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 914.826926][T21598] ? input_event+0xb6/0xd0 [ 914.826954][T21598] uinput_write+0xbe7/0xff0 [ 914.826994][T21598] ? __pfx_uinput_write+0x10/0x10 [ 914.827023][T21598] ? common_file_perm+0x1a9/0x340 [ 914.827050][T21598] ? bpf_lsm_file_permission+0x9/0x10 [ 914.827078][T21598] ? security_file_permission+0x71/0x210 [ 914.827105][T21598] ? rw_verify_area+0xcf/0x6c0 [ 914.827132][T21598] ? __pfx_uinput_write+0x10/0x10 [ 914.827160][T21598] vfs_writev+0x5df/0xde0 [ 914.827194][T21598] ? __pfx_vfs_writev+0x10/0x10 [ 914.827241][T21598] ? __fget_files+0x20e/0x3c0 [ 914.827263][T21598] ? __fget_files+0x130/0x3c0 [ 914.827296][T21598] ? do_writev+0x28c/0x340 [ 914.827317][T21598] do_writev+0x28c/0x340 [ 914.827342][T21598] ? __pfx_do_writev+0x10/0x10 [ 914.827377][T21598] do_syscall_64+0xcd/0xfa0 [ 914.827406][T21598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.827431][T21598] RIP: 0033:0x7f266578f6c9 [ 914.827450][T21598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.827470][T21598] RSP: 002b:00007f2666645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 914.827493][T21598] RAX: ffffffffffffffda RBX: 00007f26659e6090 RCX: 00007f266578f6c9 [ 914.827517][T21598] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 914.827532][T21598] RBP: 00007f2666645090 R08: 0000000000000000 R09: 0000000000000000 [ 914.827547][T21598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.827561][T21598] R13: 00007f26659e6128 R14: 00007f26659e6090 R15: 00007fff40891fb8 [ 914.827597][T21598] [ 915.416412][T21608] FAULT_INJECTION: forcing a failure. [ 915.416412][T21608] name fail_futex, interval 1, probability 0, space 0, times 0 [ 915.476530][T21608] CPU: 0 UID: 0 PID: 21608 Comm: syz.2.4822 Tainted: G U syzkaller #0 PREEMPT(full) [ 915.476568][T21608] Tainted: [U]=USER [ 915.476577][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 915.476591][T21608] Call Trace: [ 915.476599][T21608] [ 915.476609][T21608] dump_stack_lvl+0x16c/0x1f0 [ 915.476643][T21608] should_fail_ex+0x512/0x640 [ 915.476680][T21608] get_futex_key+0x293/0x1560 [ 915.476722][T21608] ? __pfx_get_futex_key+0x10/0x10 [ 915.476749][T21608] ? find_held_lock+0x2b/0x80 [ 915.476774][T21608] ? __up_read+0x1f8/0x750 [ 915.476812][T21608] futex_wake+0xea/0x530 [ 915.476850][T21608] ? __pfx_futex_wake+0x10/0x10 [ 915.476895][T21608] ? rcu_is_watching+0x12/0xc0 [ 915.476925][T21608] do_futex+0x1e3/0x350 [ 915.476957][T21608] ? __pfx_do_futex+0x10/0x10 [ 915.476991][T21608] ? mm_release+0x209/0x300 [ 915.477021][T21608] mm_release+0x24e/0x300 [ 915.477048][T21608] do_exit+0x68e/0x2bf0 [ 915.477086][T21608] ? __pfx_do_exit+0x10/0x10 [ 915.477116][T21608] ? do_raw_spin_lock+0x12c/0x2b0 [ 915.477151][T21608] ? find_held_lock+0x2b/0x80 [ 915.477180][T21608] do_group_exit+0xd3/0x2a0 [ 915.477214][T21608] get_signal+0x2671/0x26d0 [ 915.477244][T21608] ? kmem_cache_free+0x2d4/0x6c0 [ 915.477279][T21608] ? __pfx_get_signal+0x10/0x10 [ 915.477304][T21608] ? do_futex+0x122/0x350 [ 915.477335][T21608] ? __pfx_do_futex+0x10/0x10 [ 915.477369][T21608] arch_do_signal_or_restart+0x8f/0x790 [ 915.477401][T21608] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 915.477451][T21608] ? xfd_validate_state+0x61/0x180 [ 915.477492][T21608] exit_to_user_mode_loop+0x85/0x130 [ 915.477528][T21608] do_syscall_64+0x426/0xfa0 [ 915.477559][T21608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.477584][T21608] RIP: 0033:0x7f26c758f6c9 [ 915.477604][T21608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.477628][T21608] RSP: 002b:00007f26c84510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 915.477651][T21608] RAX: fffffffffffffe00 RBX: 00007f26c77e6188 RCX: 00007f26c758f6c9 [ 915.477669][T21608] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26c77e6188 [ 915.477685][T21608] RBP: 00007f26c77e6180 R08: 0000000000000000 R09: 0000000000000000 [ 915.477705][T21608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.477720][T21608] R13: 00007f26c77e6218 R14: 00007ffce7cdcd50 R15: 00007ffce7cdce38 [ 915.477756][T21608] [ 915.823133][T21624] FAULT_INJECTION: forcing a failure. [ 915.823133][T21624] name failslab, interval 1, probability 0, space 0, times 0 [ 916.027213][ T30] audit: type=1804 audit(4295034015.026:9): pid=21619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4824" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1175 res=1 errno=0 [ 916.318317][T21624] CPU: 1 UID: 0 PID: 21624 Comm: syz.4.4825 Tainted: G U syzkaller #0 PREEMPT(full) [ 916.318361][T21624] Tainted: [U]=USER [ 916.318370][T21624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.318392][T21624] Call Trace: [ 916.318401][T21624] [ 916.318411][T21624] dump_stack_lvl+0x16c/0x1f0 [ 916.318449][T21624] should_fail_ex+0x512/0x640 [ 916.318493][T21624] should_failslab+0xc2/0x120 [ 916.318526][T21624] kmem_cache_alloc_noprof+0x75/0x6e0 [ 916.318554][T21624] ? skb_clone+0x190/0x3f0 [ 916.318587][T21624] ? skb_clone+0x190/0x3f0 [ 916.318609][T21624] skb_clone+0x190/0x3f0 [ 916.318636][T21624] netlink_deliver_tap+0xabd/0xd30 [ 916.318672][T21624] netlink_unicast+0x64c/0x870 [ 916.318704][T21624] ? __pfx_netlink_unicast+0x10/0x10 [ 916.318745][T21624] netlink_sendmsg+0x8c8/0xdd0 [ 916.318780][T21624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.318813][T21624] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 916.318856][T21624] __sys_sendto+0x4a3/0x520 [ 916.318895][T21624] ? __pfx___sys_sendto+0x10/0x10 [ 916.318944][T21624] ? fd_install+0x225/0x750 [ 916.318984][T21624] ? __pfx___sys_socket+0x10/0x10 [ 916.319024][T21624] __x64_sys_sendto+0xe0/0x1c0 [ 916.319060][T21624] ? do_syscall_64+0x91/0xfa0 [ 916.319090][T21624] ? lockdep_hardirqs_on+0x7c/0x110 [ 916.319121][T21624] do_syscall_64+0xcd/0xfa0 [ 916.319154][T21624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.319181][T21624] RIP: 0033:0x7f266579155c [ 916.319203][T21624] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 916.319228][T21624] RSP: 002b:00007f2666643ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 916.319254][T21624] RAX: ffffffffffffffda RBX: 00007f2666643fc0 RCX: 00007f266579155c [ 916.319271][T21624] RDX: 000000000000001c RSI: 00007f2666644010 RDI: 0000000000000007 [ 916.319287][T21624] RBP: 0000000000000000 R08: 00007f2666643f14 R09: 000000000000000c [ 916.319301][T21624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 916.319317][T21624] R13: 00007f2666643f68 R14: 00007f2666644010 R15: 0000000000000000 [ 916.319360][T21624] [ 917.499547][T21642] FAULT_INJECTION: forcing a failure. [ 917.499547][T21642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 917.580881][T21642] CPU: 0 UID: 0 PID: 21642 Comm: syz.4.4829 Tainted: G U syzkaller #0 PREEMPT(full) [ 917.580920][T21642] Tainted: [U]=USER [ 917.580929][T21642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 917.580943][T21642] Call Trace: [ 917.580952][T21642] [ 917.580963][T21642] dump_stack_lvl+0x16c/0x1f0 [ 917.580996][T21642] should_fail_ex+0x512/0x640 [ 917.581036][T21642] should_fail_alloc_page+0xe7/0x130 [ 917.581071][T21642] prepare_alloc_pages+0x3c2/0x610 [ 917.581109][T21642] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 917.581146][T21642] ? find_held_lock+0x2b/0x80 [ 917.581173][T21642] ? is_bpf_text_address+0x8a/0x1a0 [ 917.581206][T21642] ? bpf_ksym_find+0x124/0x1c0 [ 917.581233][T21642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 917.581257][T21642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 917.581296][T21642] ? kernel_text_address+0x8d/0x100 [ 917.581320][T21642] ? __kernel_text_address+0xd/0x40 [ 917.581353][T21642] ? __lock_acquire+0x622/0x1c90 [ 917.581386][T21642] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 917.581425][T21642] ? policy_nodemask+0xea/0x4e0 [ 917.581460][T21642] alloc_pages_mpol+0x1fb/0x550 [ 917.581493][T21642] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 917.581534][T21642] folio_alloc_mpol_noprof+0x36/0x2f0 [ 917.581571][T21642] vma_alloc_folio_noprof+0xed/0x1e0 [ 917.581606][T21642] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 917.581652][T21642] do_pte_missing+0x2202/0x3ba0 [ 917.581689][T21642] ? find_held_lock+0x2b/0x80 [ 917.581723][T21642] __handle_mm_fault+0x1556/0x2aa0 [ 917.581769][T21642] ? __pfx___handle_mm_fault+0x10/0x10 [ 917.581810][T21642] ? lock_vma_under_rcu+0x176/0x530 [ 917.581855][T21642] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 917.581904][T21642] handle_mm_fault+0x589/0xd10 [ 917.581940][T21642] ? __pkru_allows_pkey+0x21/0xb0 [ 917.581978][T21642] do_user_addr_fault+0x60c/0x1370 [ 917.582006][T21642] ? rcu_is_watching+0x12/0xc0 [ 917.582036][T21642] exc_page_fault+0x64/0xc0 [ 917.582065][T21642] asm_exc_page_fault+0x26/0x30 [ 917.582089][T21642] RIP: 0033:0x7f266565a5ab [ 917.582108][T21642] Code: 00 00 00 48 8d 3d 8d 3b 19 00 48 89 c1 31 c0 e8 db 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 3b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 917.582130][T21642] RSP: 002b:00007f2666664fb0 EFLAGS: 00010202 [ 917.582151][T21642] RAX: 0000000000000000 RBX: 00007f26659e5fa0 RCX: 0000000000000000 [ 917.582166][T21642] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 917.582182][T21642] RBP: 00007f2666666090 R08: 0000000000000000 R09: 0000000000000000 [ 917.582197][T21642] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 917.582211][T21642] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 917.582247][T21642] [ 917.587851][T21642] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 918.662762][T21591] Bluetooth: hci3: command 0x0406 tx timeout [ 919.775628][T21673] Invalid ELF header magic: != ELF [ 920.060825][T21676] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input261 [ 920.161589][T21681] FAULT_INJECTION: forcing a failure. [ 920.161589][T21681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.188296][T21681] CPU: 1 UID: 0 PID: 21681 Comm: syz.5.4835 Tainted: G U syzkaller #0 PREEMPT(full) [ 920.188318][T21681] Tainted: [U]=USER [ 920.188323][T21681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.188331][T21681] Call Trace: [ 920.188337][T21681] [ 920.188343][T21681] dump_stack_lvl+0x16c/0x1f0 [ 920.188363][T21681] should_fail_ex+0x512/0x640 [ 920.188387][T21681] _copy_from_user+0x2e/0xd0 [ 920.188410][T21681] input_event_from_user+0xb9/0x290 [ 920.188427][T21681] ? __pfx_input_event_from_user+0x10/0x10 [ 920.188444][T21681] ? __pfx___might_resched+0x10/0x10 [ 920.188458][T21681] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 920.188475][T21681] ? input_event+0xb6/0xd0 [ 920.188493][T21681] uinput_write+0xbe7/0xff0 [ 920.188516][T21681] ? __pfx_uinput_write+0x10/0x10 [ 920.188533][T21681] ? common_file_perm+0x1a9/0x340 [ 920.188549][T21681] ? bpf_lsm_file_permission+0x9/0x10 [ 920.188565][T21681] ? security_file_permission+0x71/0x210 [ 920.188581][T21681] ? rw_verify_area+0xcf/0x6c0 [ 920.188595][T21681] ? __pfx_uinput_write+0x10/0x10 [ 920.188613][T21681] vfs_writev+0x5df/0xde0 [ 920.188631][T21681] ? __pfx_vfs_writev+0x10/0x10 [ 920.188658][T21681] ? __fget_files+0x20e/0x3c0 [ 920.188671][T21681] ? __fget_files+0x130/0x3c0 [ 920.188689][T21681] ? do_writev+0x28c/0x340 [ 920.188701][T21681] do_writev+0x28c/0x340 [ 920.188714][T21681] ? __pfx_do_writev+0x10/0x10 [ 920.188733][T21681] do_syscall_64+0xcd/0xfa0 [ 920.188751][T21681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.188766][T21681] RIP: 0033:0x7fce8ab8f6c9 [ 920.188777][T21681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.188790][T21681] RSP: 002b:00007fce8b95d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 920.188804][T21681] RAX: ffffffffffffffda RBX: 00007fce8ade6090 RCX: 00007fce8ab8f6c9 [ 920.188813][T21681] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 920.188822][T21681] RBP: 00007fce8b95d090 R08: 0000000000000000 R09: 0000000000000000 [ 920.188830][T21681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.188838][T21681] R13: 00007fce8ade6128 R14: 00007fce8ade6090 R15: 00007ffd1c351f48 [ 920.188857][T21681] [ 925.221407][T21709] FAULT_INJECTION: forcing a failure. [ 925.221407][T21709] name failslab, interval 1, probability 0, space 0, times 0 [ 925.235815][T21709] CPU: 0 UID: 0 PID: 21709 Comm: syz.5.4842 Tainted: G U syzkaller #0 PREEMPT(full) [ 925.235847][T21709] Tainted: [U]=USER [ 925.235854][T21709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 925.235865][T21709] Call Trace: [ 925.235872][T21709] [ 925.235880][T21709] dump_stack_lvl+0x16c/0x1f0 [ 925.235907][T21709] should_fail_ex+0x512/0x640 [ 925.235936][T21709] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 925.235966][T21709] should_failslab+0xc2/0x120 [ 925.235992][T21709] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 925.236011][T21709] ? __pfx___might_resched+0x10/0x10 [ 925.236033][T21709] ? sock_alloc_inode+0x25/0x1c0 [ 925.236060][T21709] ? __pfx_sock_alloc_inode+0x10/0x10 [ 925.236081][T21709] ? sock_alloc_inode+0x25/0x1c0 [ 925.236101][T21709] sock_alloc_inode+0x25/0x1c0 [ 925.236122][T21709] alloc_inode+0x64/0x240 [ 925.236149][T21709] sock_alloc+0x40/0x280 [ 925.236170][T21709] __sock_create+0xc1/0x8d0 [ 925.236199][T21709] __sys_socket+0x14d/0x260 [ 925.236223][T21709] ? __pfx___sys_socket+0x10/0x10 [ 925.236249][T21709] ? do_user_addr_fault+0x843/0x1370 [ 925.236273][T21709] __x64_sys_socket+0x72/0xb0 [ 925.236296][T21709] ? lockdep_hardirqs_on+0x7c/0x110 [ 925.236319][T21709] do_syscall_64+0xcd/0xfa0 [ 925.236343][T21709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.236363][T21709] RIP: 0033:0x7fce8ab915e7 [ 925.236378][T21709] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.236397][T21709] RSP: 002b:00007fce8b97cfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 925.236415][T21709] RAX: ffffffffffffffda RBX: 00007fce8ade5fa0 RCX: 00007fce8ab915e7 [ 925.236428][T21709] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 925.236440][T21709] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 925.236451][T21709] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 925.236463][T21709] R13: 00007fce8ade6038 R14: 00007fce8ade5fa0 R15: 00007ffd1c351f48 [ 925.236490][T21709] [ 925.236503][T21709] socket: no more sockets [ 925.962241][T21715] IPVS: length: 131 != 8 [ 926.327132][T21725] mkiss: ax0: crc mode is auto. [ 931.187925][T21791] mkiss: ax0: crc mode is auto. [ 931.630638][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.639125][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.094922][T21801] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4858'. [ 933.719852][T21628] Bluetooth: hci5: command 0x0406 tx timeout [ 934.619127][T21841] FAULT_INJECTION: forcing a failure. [ 934.619127][T21841] name failslab, interval 1, probability 0, space 0, times 0 [ 934.706727][T21841] CPU: 1 UID: 0 PID: 21841 Comm: syz.4.4866 Tainted: G U syzkaller #0 PREEMPT(full) [ 934.706766][T21841] Tainted: [U]=USER [ 934.706775][T21841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.706789][T21841] Call Trace: [ 934.706798][T21841] [ 934.706809][T21841] dump_stack_lvl+0x16c/0x1f0 [ 934.706843][T21841] should_fail_ex+0x512/0x640 [ 934.706877][T21841] ? __kmalloc_noprof+0xca/0x880 [ 934.706917][T21841] should_failslab+0xc2/0x120 [ 934.706949][T21841] __kmalloc_noprof+0xdd/0x880 [ 934.706985][T21841] ? copy_splice_read+0x1a8/0xc20 [ 934.707014][T21841] ? copy_splice_read+0x1a8/0xc20 [ 934.707036][T21841] copy_splice_read+0x1a8/0xc20 [ 934.707059][T21841] ? trace_contention_end+0xdd/0x130 [ 934.707099][T21841] ? __pfx_copy_splice_read+0x10/0x10 [ 934.707128][T21841] ? __pfx___mutex_lock+0x10/0x10 [ 934.707167][T21841] ? __fget_files+0x204/0x3c0 [ 934.707195][T21841] ? __pfx_copy_splice_read+0x10/0x10 [ 934.707226][T21841] do_splice_read+0x285/0x370 [ 934.707254][T21841] splice_file_to_pipe+0x109/0x120 [ 934.707284][T21841] do_sendfile+0x400/0xe50 [ 934.707317][T21841] ? __pfx_do_sendfile+0x10/0x10 [ 934.707343][T21841] ? __fget_files+0x20e/0x3c0 [ 934.707377][T21841] __x64_sys_sendfile64+0x1d8/0x220 [ 934.707407][T21841] ? ksys_write+0x1ac/0x250 [ 934.707433][T21841] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 934.707475][T21841] do_syscall_64+0xcd/0xfa0 [ 934.707507][T21841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.707532][T21841] RIP: 0033:0x7f266578f6c9 [ 934.707553][T21841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.707576][T21841] RSP: 002b:00007f2666666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 934.707600][T21841] RAX: ffffffffffffffda RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 934.707616][T21841] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 934.707631][T21841] RBP: 00007f2666666090 R08: 0000000000000000 R09: 0000000000000000 [ 934.707646][T21841] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 934.707661][T21841] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 934.707697][T21841] [ 936.184465][T21865] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input263 [ 936.213149][T21865] FAULT_INJECTION: forcing a failure. [ 936.213149][T21865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.327448][T21865] CPU: 0 UID: 0 PID: 21865 Comm: syz.5.4872 Tainted: G U syzkaller #0 PREEMPT(full) [ 936.327488][T21865] Tainted: [U]=USER [ 936.327497][T21865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 936.327512][T21865] Call Trace: [ 936.327520][T21865] [ 936.327531][T21865] dump_stack_lvl+0x16c/0x1f0 [ 936.327565][T21865] should_fail_ex+0x512/0x640 [ 936.327605][T21865] _copy_from_user+0x2e/0xd0 [ 936.327641][T21865] input_event_from_user+0xb9/0x290 [ 936.327672][T21865] ? __pfx_input_event_from_user+0x10/0x10 [ 936.327700][T21865] ? __pfx___might_resched+0x10/0x10 [ 936.327725][T21865] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 936.327751][T21865] ? input_event+0xb6/0xd0 [ 936.327778][T21865] uinput_write+0xbe7/0xff0 [ 936.327825][T21865] ? __pfx_uinput_write+0x10/0x10 [ 936.327855][T21865] ? common_file_perm+0x1a9/0x340 [ 936.327882][T21865] ? bpf_lsm_file_permission+0x9/0x10 [ 936.327908][T21865] ? security_file_permission+0x71/0x210 [ 936.327935][T21865] ? rw_verify_area+0xcf/0x6c0 [ 936.327960][T21865] ? __pfx_uinput_write+0x10/0x10 [ 936.327989][T21865] vfs_writev+0x5df/0xde0 [ 936.328021][T21865] ? __pfx_vfs_writev+0x10/0x10 [ 936.328070][T21865] ? __fget_files+0x20e/0x3c0 [ 936.328093][T21865] ? __fget_files+0x130/0x3c0 [ 936.328126][T21865] ? do_writev+0x28c/0x340 [ 936.328148][T21865] do_writev+0x28c/0x340 [ 936.328173][T21865] ? __pfx_do_writev+0x10/0x10 [ 936.328208][T21865] do_syscall_64+0xcd/0xfa0 [ 936.328239][T21865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.328264][T21865] RIP: 0033:0x7fce8ab8f6c9 [ 936.328285][T21865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.328307][T21865] RSP: 002b:00007fce8b97e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 936.328331][T21865] RAX: ffffffffffffffda RBX: 00007fce8ade5fa0 RCX: 00007fce8ab8f6c9 [ 936.328348][T21865] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 936.328363][T21865] RBP: 00007fce8b97e090 R08: 0000000000000000 R09: 0000000000000000 [ 936.328378][T21865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 936.328393][T21865] R13: 00007fce8ade6038 R14: 00007fce8ade5fa0 R15: 00007ffd1c351f48 [ 936.328429][T21865] [ 936.734420][T21868] input input264: cannot allocate more than FF_MAX_EFFECTS effects [ 937.666403][T21874] FAULT_INJECTION: forcing a failure. [ 937.666403][T21874] name failslab, interval 1, probability 0, space 0, times 0 [ 937.688316][T21874] CPU: 1 UID: 0 PID: 21874 Comm: syz.0.4874 Tainted: G U syzkaller #0 PREEMPT(full) [ 937.688354][T21874] Tainted: [U]=USER [ 937.688363][T21874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 937.688377][T21874] Call Trace: [ 937.688385][T21874] [ 937.688396][T21874] dump_stack_lvl+0x16c/0x1f0 [ 937.688429][T21874] should_fail_ex+0x512/0x640 [ 937.688464][T21874] ? fs_reclaim_acquire+0xae/0x150 [ 937.688499][T21874] should_failslab+0xc2/0x120 [ 937.688532][T21874] kmem_cache_alloc_noprof+0x75/0x6e0 [ 937.688556][T21874] ? __pfx_map_id_range_down+0x10/0x10 [ 937.688594][T21874] ? security_inode_alloc+0x3b/0x2b0 [ 937.688637][T21874] ? security_inode_alloc+0x3b/0x2b0 [ 937.688672][T21874] security_inode_alloc+0x3b/0x2b0 [ 937.688707][T21874] inode_init_always_gfp+0xce4/0x1030 [ 937.688750][T21874] alloc_inode+0x86/0x240 [ 937.688782][T21874] iget_locked+0x2fa/0x860 [ 937.688819][T21874] ? __pfx_iget_locked+0x10/0x10 [ 937.688856][T21874] ? find_held_lock+0x2b/0x80 [ 937.688884][T21874] ? kernfs_root+0xee/0x2a0 [ 937.688923][T21874] kernfs_get_inode+0x48/0x460 [ 937.688955][T21874] kernfs_iop_lookup+0x1a7/0x2d0 [ 937.688996][T21874] __lookup_slow+0x251/0x460 [ 937.689031][T21874] ? __pfx___lookup_slow+0x10/0x10 [ 937.689087][T21874] ? lookup_fast+0x156/0x610 [ 937.689117][T21874] walk_component+0x353/0x5b0 [ 937.689144][T21874] path_lookupat+0x142/0x6d0 [ 937.689175][T21874] filename_lookup+0x224/0x5f0 [ 937.689206][T21874] ? __pfx_filename_lookup+0x10/0x10 [ 937.689266][T21874] ? getname_flags.part.0+0x1c5/0x550 [ 937.689310][T21874] user_path_at+0x3a/0x60 [ 937.689338][T21874] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 937.689371][T21874] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 937.689412][T21874] do_syscall_64+0xcd/0xfa0 [ 937.689445][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.689472][T21874] RIP: 0033:0x7fcc0858f6c9 [ 937.689493][T21874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.689517][T21874] RSP: 002b:00007fcc09401038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 937.689542][T21874] RAX: ffffffffffffffda RBX: 00007fcc087e6090 RCX: 00007fcc0858f6c9 [ 937.689560][T21874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 937.689576][T21874] RBP: 00007fcc08611f91 R08: 0000000000000002 R09: 0000000000000000 [ 937.689593][T21874] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 937.689609][T21874] R13: 00007fcc087e6128 R14: 00007fcc087e6090 R15: 00007ffd31fe0698 [ 937.689647][T21874] [ 938.095709][T21879] netlink: 350 bytes leftover after parsing attributes in process `syz.2.4876'. [ 938.685386][T21885] hub 1-0:1.0: USB hub found [ 938.708369][T21885] hub 1-0:1.0: 1 port detected [ 938.767337][T21888] hub 1-0:1.0: USB hub found [ 938.783413][T21888] hub 1-0:1.0: 1 port detected [ 938.845785][T21889] FAULT_INJECTION: forcing a failure. [ 938.845785][T21889] name failslab, interval 1, probability 0, space 0, times 0 [ 938.897823][T21889] CPU: 1 UID: 0 PID: 21889 Comm: syz.5.4880 Tainted: G U syzkaller #0 PREEMPT(full) [ 938.897863][T21889] Tainted: [U]=USER [ 938.897873][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 938.897889][T21889] Call Trace: [ 938.897898][T21889] [ 938.897908][T21889] dump_stack_lvl+0x16c/0x1f0 [ 938.897941][T21889] should_fail_ex+0x512/0x640 [ 938.897978][T21889] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 938.898008][T21889] should_failslab+0xc2/0x120 [ 938.898042][T21889] kmem_cache_alloc_noprof+0x75/0x6e0 [ 938.898067][T21889] ? prepare_creds+0x2c/0x7d0 [ 938.898109][T21889] ? prepare_creds+0x2c/0x7d0 [ 938.898143][T21889] prepare_creds+0x2c/0x7d0 [ 938.898179][T21889] __sys_setfsuid+0xda/0x350 [ 938.898206][T21889] ? rcu_is_watching+0x12/0xc0 [ 938.898237][T21889] do_syscall_64+0xcd/0xfa0 [ 938.898268][T21889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.898293][T21889] RIP: 0033:0x7fce8ab8f6c9 [ 938.898313][T21889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.898335][T21889] RSP: 002b:00007fce8b97e038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 938.898360][T21889] RAX: ffffffffffffffda RBX: 00007fce8ade5fa0 RCX: 00007fce8ab8f6c9 [ 938.898377][T21889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 938.898393][T21889] RBP: 00007fce8ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 938.898410][T21889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.898426][T21889] R13: 00007fce8ade6038 R14: 00007fce8ade5fa0 R15: 00007ffd1c351f48 [ 938.898462][T21889] [ 939.309122][ T31] INFO: task syz.1.4353:19579 blocked for more than 143 seconds. [ 939.317184][ T31] Tainted: G U syzkaller #0 [ 939.338040][T21899] netlink: 'syz.5.4884': attribute type 2 has an invalid length. [ 939.346357][T21899] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4884'. [ 939.388010][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.428892][ T31] task:syz.1.4353 state:D stack:25800 pid:19579 tgid:19576 ppid:14680 task_flags:0x400140 flags:0x00080006 [ 939.433779][T21894] mkiss: ax0: crc mode is auto. [ 939.458981][ T31] Call Trace: [ 939.462282][ T31] [ 939.465778][ T31] __schedule+0x1190/0x5de0 [ 939.498945][ T31] ? __pfx___schedule+0x10/0x10 [ 939.503840][ T31] ? find_held_lock+0x2b/0x80 [ 939.508537][ T31] ? schedule+0x2d7/0x3a0 [ 939.528989][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 939.549153][ T31] schedule+0xe7/0x3a0 [ 939.553255][ T31] schedule_preempt_disabled+0x13/0x30 [ 939.558734][ T31] __mutex_lock+0x818/0x1060 [ 939.589559][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 939.595238][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 939.609000][ T31] ? __nla_validate_parse+0x600/0x2880 [ 939.614500][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 939.639063][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 939.649018][ T31] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 939.654506][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 939.669035][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 939.676440][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 939.709596][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 939.715180][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 939.722154][ T31] ? rcu_is_watching+0x12/0xc0 [ 939.726955][ T31] ? bpf_lsm_capable+0x9/0x10 [ 939.749093][ T31] ? security_capable+0x7e/0x260 [ 939.754075][ T31] genl_rcv_msg+0x55c/0x800 [ 939.758602][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.764125][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 939.779119][ T31] netlink_rcv_skb+0x158/0x420 [ 939.783914][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 939.788961][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.794828][ T31] genl_rcv+0x28/0x40 [ 939.798831][ T31] netlink_unicast+0x5aa/0x870 [ 939.809106][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 939.814444][ T31] ? __pfx___might_resched+0x10/0x10 [ 939.829101][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 939.833928][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.848533][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 939.868266][ T31] ____sys_sendmsg+0xa98/0xc70 [ 939.879167][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 939.884653][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.901812][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 939.907228][ T31] ? try_to_wake_up+0xa67/0x1870 [ 939.929340][ T31] ___sys_sendmsg+0x134/0x1d0 [ 939.934038][ T31] ? find_held_lock+0x2b/0x80 [ 939.938732][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.959150][ T31] ? __lock_acquire+0x622/0x1c90 [ 939.964169][ T31] __sys_sendmsg+0x16d/0x220 [ 939.968773][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.989181][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 939.994173][ T31] do_syscall_64+0xcd/0xfa0 [ 939.998745][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.009193][ T31] RIP: 0033:0x7f0aebd8f6c9 [ 940.013627][ T31] RSP: 002b:00007f0aecc80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.039190][ T31] RAX: ffffffffffffffda RBX: 00007f0aebfe5fa0 RCX: 00007f0aebd8f6c9 [ 940.047187][ T31] RDX: 0000000004044880 RSI: 00002000000004c0 RDI: 000000000000000b [ 940.089237][ T31] RBP: 00007f0aebe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 940.097232][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.125487][ T31] R13: 00007f0aebfe6038 R14: 00007f0aebfe5fa0 R15: 00007fff49758608 [ 940.142000][ T31] [ 940.145104][ T31] [ 940.145104][ T31] Showing all locks held in the system: [ 940.169902][ T31] 1 lock held by khungtaskd/31: [ 940.174765][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 940.229309][ T31] 2 locks held by kworker/u8:4/60: [ 940.234711][ T31] #0: ffff888020ff2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 940.259384][ T31] #1: ffffc9000211fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 940.299344][ T31] 2 locks held by dhcpcd/5494: [ 940.304118][ T31] #0: ffff888057b776e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xa25/0xd30 [ 940.339370][ T31] #1: ffffffff900ead08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 940.348311][ T31] 2 locks held by syz.3.4296/19328: [ 940.363761][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.389402][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 940.419387][ T31] 2 locks held by syz.1.4353/19579: [ 940.429414][ T31] #0: ffffffff9018ead0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.437936][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 940.509910][ T31] 2 locks held by getty/21345: [ 940.514769][ T31] #0: ffff88814dedd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 940.534739][ T31] #1: ffffc900031c42f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 940.555368][ T31] 4 locks held by kworker/u10:5/21768: [ 940.569460][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 940.589473][ T31] #1: ffffc9000cb17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 940.609484][ T31] #2: ffffffff900d48d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 940.629026][ T31] #3: ffffffff900ead08 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 940.648283][ T31] 3 locks held by syz.4.4855/21796: [ 940.661749][ T31] 4 locks held by syz.2.4881/21893: [ 940.666962][ T31] #0: ffff88805b6f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x86/0x2e0 [ 940.689513][ T31] #1: ffff8880771470a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xb0/0x2e0 [ 940.709560][ T31] #2: ffffffff900ead08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 940.719013][ T31] #3: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 940.739568][ T31] 1 lock held by syz.4.4885/21896: [ 940.744974][ T31] #0: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 940.769568][ T31] 1 lock held by syz.4.4885/21901: [ 940.774692][ T31] #0: ffffffff900ead08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 940.784374][ T31] 6 locks held by syz.0.4883/21905: [ 940.799591][ T31] #0: ffff88804fe36478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 940.808691][ T31] #1: ffff88801bbf0420 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 940.818018][ T31] #2: ffffffff8e44ac08 (trace_types_lock){+.+.}-{4:4}, at: tracing_resize_ring_buffer+0x2d/0x330 [ 940.839620][ T31] #3: ffffffff8e265450 (cpu_hotplug_lock){++++}-{0:0}, at: ring_buffer_resize+0x105/0x1f90 [ 940.850279][ T31] #4: ffff88813ff14c88 (&buffer->mutex){+.+.}-{4:4}, at: ring_buffer_resize+0x118/0x1f90 [ 940.860313][ T31] #5: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 940.889654][ T31] [ 940.892006][ T31] ============================================= [ 940.892006][ T31] [ 940.901623][ T31] NMI backtrace for cpu 1 [ 940.901642][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 940.901675][ T31] Tainted: [U]=USER [ 940.901682][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 940.901696][ T31] Call Trace: [ 940.901711][ T31] [ 940.901720][ T31] dump_stack_lvl+0x116/0x1f0 [ 940.901752][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 940.901786][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 940.901816][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 940.901851][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 940.901889][ T31] watchdog+0xf3f/0x1170 [ 940.901919][ T31] ? rcu_is_watching+0x12/0xc0 [ 940.901945][ T31] ? __pfx_watchdog+0x10/0x10 [ 940.901965][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 940.901994][ T31] ? __kthread_parkme+0x19e/0x250 [ 940.902025][ T31] ? __pfx_watchdog+0x10/0x10 [ 940.902048][ T31] kthread+0x3c5/0x780 [ 940.902082][ T31] ? __pfx_kthread+0x10/0x10 [ 940.902117][ T31] ? rcu_is_watching+0x12/0xc0 [ 940.902142][ T31] ? __pfx_kthread+0x10/0x10 [ 940.902176][ T31] ret_from_fork+0x675/0x7d0 [ 940.902208][ T31] ? __pfx_kthread+0x10/0x10 [ 940.902243][ T31] ret_from_fork_asm+0x1a/0x30 [ 940.902293][ T31] [ 940.902303][ T31] Sending NMI from CPU 1 to CPUs 0: [ 941.034583][ C0] NMI backtrace for cpu 0 [ 941.034604][ C0] CPU: 0 UID: 0 PID: 21796 Comm: syz.4.4855 Tainted: G U syzkaller #0 PREEMPT(full) [ 941.034639][ C0] Tainted: [U]=USER [ 941.034648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 941.034663][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 941.034708][ C0] Code: 48 8b 05 5b de e4 11 48 8b 80 70 16 00 00 e9 d7 25 a4 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 27 de e4 11 65 8b 05 38 de [ 941.034732][ C0] RSP: 0018:ffffc9000cc27428 EFLAGS: 00000282 [ 941.034751][ C0] RAX: 0000000000000000 RBX: 000000000000001f RCX: ffffffff81ff568d [ 941.034767][ C0] RDX: 000000000000001f RSI: 000000000000001c RDI: 0000000000000004 [ 941.034782][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 941.034797][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea0000e2de80 [ 941.034812][ C0] R13: 0000000000000000 R14: ffffc9000cc27708 R15: 000000000000001c [ 941.034828][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 941.034850][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.034866][ C0] CR2: 00007fcc094229a0 CR3: 000000007e56c000 CR4: 00000000003526f0 [ 941.034882][ C0] Call Trace: [ 941.034890][ C0] [ 941.034898][ C0] shmem_undo_range+0x28d/0x1150 [ 941.034930][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 941.034969][ C0] ? find_held_lock+0x2b/0x80 [ 941.034994][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 941.035027][ C0] ? bpf_ksym_find+0x124/0x1c0 [ 941.035066][ C0] ? stack_trace_save+0x8e/0xc0 [ 941.035097][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 941.035123][ C0] ? kasan_save_stack+0x42/0x60 [ 941.035152][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 941.035181][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 941.035220][ C0] ? find_held_lock+0x2b/0x80 [ 941.035244][ C0] ? evict+0x3a2/0x920 [ 941.035274][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 941.035300][ C0] evict+0x3e6/0x920 [ 941.035328][ C0] ? __pfx_evict+0x10/0x10 [ 941.035360][ C0] ? iput.part.0+0x6a1/0xb00 [ 941.035392][ C0] iput.part.0+0x6a9/0xb00 [ 941.035421][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 941.035471][ C0] iput+0x35/0x40 [ 941.035498][ C0] dentry_unlink_inode+0x29c/0x480 [ 941.035528][ C0] __dentry_kill+0x1d0/0x600 [ 941.035558][ C0] dput.part.0+0x4b1/0x9b0 [ 941.035589][ C0] dput+0x1f/0x30 [ 941.035617][ C0] __fput+0x51c/0xb70 [ 941.035652][ C0] task_work_run+0x150/0x240 [ 941.035689][ C0] ? __pfx_task_work_run+0x10/0x10 [ 941.035735][ C0] do_exit+0x86f/0x2bf0 [ 941.035769][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 941.035794][ C0] ? __pfx_do_exit+0x10/0x10 [ 941.035831][ C0] do_group_exit+0xd3/0x2a0 [ 941.035865][ C0] get_signal+0x2671/0x26d0 [ 941.035895][ C0] ? force_sig_fault+0xc4/0x100 [ 941.035923][ C0] ? __pfx_get_signal+0x10/0x10 [ 941.035954][ C0] arch_do_signal_or_restart+0x8f/0x790 [ 941.035984][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 941.036010][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 941.036049][ C0] irqentry_exit_to_user_mode+0x176/0x310 [ 941.036081][ C0] asm_exc_page_fault+0x26/0x30 [ 941.036105][ C0] RIP: 0033:0x7f266578f6d1 [ 941.036122][ C0] Code: Unable to access opcode bytes at 0x7f266578f6a7. [ 941.036134][ C0] RSP: 002b:0000000080000000 EFLAGS: 00010217 [ 941.036152][ C0] RAX: 0000000000000000 RBX: 00007f26659e5fa0 RCX: 00007f266578f6c9 [ 941.036168][ C0] RDX: 00002000000002c0 RSI: 0000000080000000 RDI: 0000000000000400 [ 941.036184][ C0] RBP: 00007f2665811f91 R08: 0000000000000009 R09: 0000000000000000 [ 941.036199][ C0] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 941.036215][ C0] R13: 00007f26659e6038 R14: 00007f26659e5fa0 R15: 00007fff40891fb8 [ 941.036241][ C0]