last executing test programs: 32.72646561s ago: executing program 1 (id=2316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) waitid$auto(0x3ff, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x3, 0x5, 0x1, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000080)="7ba1f76d954644a76060957c921596dc4f2889dc6717474569c927b6124a7c4ccb640cb1c8d5d61859965b6559a20ee75ffff80b6a8a8c0d75"}}}, 0x6, &(0x7f0000000140)={{0x1, 0x9}, {0x7399, 0x3}, 0xffffffffffffffff, 0x4, 0x2, 0x8000000000000001, 0xfffffffffffffffb, 0x401, 0xfffffffffffffffd, 0xfff, 0x2, 0x200, 0x70, 0xc, 0x2, 0xffffffffffffffff}) (async) r2 = waitid$auto(0x3ff, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x3, 0x5, 0x1, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000080)="7ba1f76d954644a76060957c921596dc4f2889dc6717474569c927b6124a7c4ccb640cb1c8d5d61859965b6559a20ee75ffff80b6a8a8c0d75"}}}, 0x6, &(0x7f0000000140)={{0x1, 0x9}, {0x7399, 0x3}, 0xffffffffffffffff, 0x4, 0x2, 0x8000000000000001, 0xfffffffffffffffb, 0x401, 0xfffffffffffffffd, 0xfff, 0x2, 0x200, 0x70, 0xc, 0x2, 0xffffffffffffffff}) r3 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/features/freeze_notification\x00', 0x400100, 0x0) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f00000002c0)={{0x5, 0xee01, 0xee00, 0x8, 0x74f, 0x6, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x9, 0x9, 0x7, 0x29575ce4, 0x73a, 0x100, 0x6, 0x5, 0xed86, @inferred=0xffffffffffffffff, @raw}) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fb1\x00', 0x80000, 0x0) getsid$auto(0x0) (async) r6 = getsid$auto(0x0) r7 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000380), 0x400200, 0x0) sendmsg$auto_TIPC_NL_NODE_GET(r0, &(0x7f0000002c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x57af3f2dd583e06e}, 0xc, &(0x7f0000002bc0)={&(0x7f00000003c0)={0x27f4, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14e7, 0x5, 0x0, 0x1, [@generic="c1af5494d9de423753fccd373f3d40998aac81a0dd003b", @typed={0x8, 0x92, 0x0, 0x0, @pid=r2}, @nested={0x24f, 0xb4, 0x0, 0x1, [@generic="444b4cb006f282ccd70cf2d300cedf9f586380f9f928d17b9fdca91a9be9abd5f6e78bf77d89c52c47657309a95791aa0a847e78e13e3c2c2bc05e3429c2361d167805bf4ca98cdd90a6f311ff776f58e7625899cd7f6d8103acb5e62ef3372b8c86746907bbdf1395ef8d785f7524af1033d62b35793d05e66a7175be6b1f86c288687441808501eb0e9d45fbcc175509f94bf84a09b17d06697de2ef15ea07bcc690c2eae8f056d475de2d9cc7d9799eb5d45966bf9cf991b2fe5496c25e55134c5754a8ac0ff7d01c691a3fa55bf38ac3f19e5f81bfdb5d57d4a79c0032910782a11fe3a09fd1a01d", @typed={0xc, 0x120, 0x0, 0x0, @u64=0xffffffff}, @generic="f788c2f0c8255ae252497ac8a7d3ef21e3de6e8a297a882c24544601ed09e90f90ffd695f67247d739329d2f65b6e76a75791a19b406ca329412157f17941f376f651069b50d8b7366c0bd591d8451172b5478e801d559dbfb846aa2dc3b8b0833ee57335ba0cd7c5e8ba47ba6dbfc6a0bf8dbe11b4e474af3320f6327cdb6a00faf5b91d4b42c719e8f79bfa393c7505275b6019130699bde", @nested={0x4, 0x3c}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@private0}, @generic="191d3e8d32446c8f35912482ef9b0311d9f7681dbd7971a08f9922b9b55dd7cca635c3b09b0ab59698aa519d578c2a65e9654aa36094d92ebe5925457d20c24ae0559cdbeca0ccaa0598befc8a1d847b12135e6867f740449a2ba0da2a8801c8797b2f1e2942310f240946252005edcef35a189b88c61005ec4a6429ea86421edd9d621d443459055e2d572d15f69283ec19793779d37446f442676a", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r3}]}, @nested={0x144, 0x62, 0x0, 0x1, [@generic="01df67d898d80d763a97826cd024474a1933da0ab5f3689dc94fd7f4cc55fd6d68eebbc0dddaf6796e0da3342862af3827ec184672553c626657c0dfbba860", @generic="699e07c742f5eb752a927db4b2e1549f6660c69dbff5816e834eb6d43d443bf90804dba23eb649e56aec308fc8f114aee190f45a4fd59393e2cb545f8e67519fbe80440d36d3f438280ef164b5663f827f5ffe7d9883af367a67a921c6bc0b8d9befd34de921591e3293bbd47a1cccf401c368c7e5fb6244a39bf618ce1acd92a70c2e05c8bb275f23c6f6fcb43c9bbf927ca678f7cd0c19c344b5122f0296650e1a9c49bdd7c2484ee820fa88516ffac93f2233ec31eed37e665fec9b697e21484a752c01d1952dcd047dac39215a1b936da3cb6c1f8bbaaf178c0894ad5a83e9e796285a295a226d5b45e38051e651ef911ab9d57be310ea", @nested={0x4, 0x5}, @nested={0x4, 0x145}]}, @nested={0x12e, 0x11, 0x0, 0x1, [@typed={0x14, 0x38, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x23, 0x0, 0x0, @u32}, @nested={0x4, 0xd1}, @generic="005c869ecae42663bc6f0e56679c23a821f57414a3e1ee199c95882ee285679b385d9b26bea888aac1ee0054f54456df30b2649f5261c0540f604ba9ed3e57ada7488beccc51ab268b0508b4c0a1e39d81e6a158507830957c481f2c21ac1c0a6f463090aef4c7d2bf9f3bc37d074a3dba6093040f654239d9ffe22d9602e7b2ac6f6b6bad745fb343f073ca2f22c2e19226b848eb9bb8c2ffa378d3284e05db08f34fc550522370dad070534601b8e4f0f1abebf659f661a70c3f86c7e92ad822f068899d81b3e6b22f55783f5f8365b53958d3ae8ff3c7f50d87ba6e1c9068dc9416f1290ef5d5059f4535", @generic="748fa1b6fd681364f0f0b40aa137b9dc4af7", @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x8f}]}, @generic="c15cd4db40a1e39b0b19d7e4b6c2abd63265a00161e73ff4a659ec85840c48f3df94f494acb095e7a24317fe4dcdbeff46070c30da887e1bc42e16a6245749dc03650056ce11b444b3c286d64373d916fce21f64fbdde82cded1ce7e51816609ae62576dd74b3e9b1ea37d24afd002803e177799b33c1bdba31339c12cd6fe7d52b935ef639386ce1966bd883b7e07726e0269629a0ffa32221e5873418a0954ebbaeb0d2a46274f7a8aa6e5b48593564339b3ffca82857bdffd5af6ec99a4bfd0cdc67679fc1353afbc9e4776b03dc3607dfe8752681f30280ca17ac1ec645ae090481722e8dfd3019fe961684f7bda5388831bb4c16340054f3b4701f3ad46000f7d0bf74c9c209dcf91e9f0deb042e3357761137cf051dc1c2fedebdd74a613bd9e0e78e38da661b5af1997545ffab5324c546b69ab7474c2da0b3d3ace1b86e5d1f0573d44ee291a96b3cacc793f501708e144e7ae4acde1a50b3edeac36b123a0c8eda69ed72c32c713d530b1196e4eb4b82d2b5a9ee7c891bc7b5d774a0b2be4c844d9c721e358d4dba4c958e51eaa09ae1ff90fceee46886aa546ee4da2ffb15d296dce9a6de59b5fbe7e446ae8efca5150631f2731a821a8cd663103c1aee6275e7ec675eeaa2d7cb9cd2ccb7819b8622f3bfcb6cb82e5ec4c52b8311226ce50abc242f0a07b52a232a6dd5505cb87a20e838feb138867d38c40726b42dd2504ce9b7492967e8e9bca66a9e69fd3bd0dffbe41aaa7583dad7959bb4559d45f8557e9818f9611fb9b005f6c155d1026b27268d441b003ed69f6e14c9ec5bdf959efa48cfc15df9e1a609240c8e0ab8b6317738c7688caedb101cfca3a9b25f249822782b963a4c55cceeab5de9c522402af2d9b453118b84b201d2490ae63e26169c213fde2ffc6de893a5cbe52185cbf51c2f48c50f9fff932eea55b4a1e01d8c0d43ec291751dccde7e5dea2fc264ad3b1299ac6c3c64ede12488f3cc3f5da19c8eff3ecaafcdd178cfe6701a384899637a596a89286c5953b74b7e84ad081bf5b50a151d890b216b54c427337c886860a5f5650ff9ef932c3cfbc80ff0d9b1e835d30a76b96e1b581f96b6a5f6dcf08753165390f0757a356f257ab4664a36091212f066469fb45db61c1cc2575cb1ee771aa99c388bbd8864b94ca6a528489a513cd5e1996555b971bca02648d8ae1b53e5924c50279f0e0dd840d75db783afb3942a4619b3de90b212ad70128706c673795fd69392b0394291c89b3b609de53cd3fcfbe1324fa07f17dac3fab74dca143787bfbd0a03185755e3a42308b3fc96b01ea6e6acc9c5ab2df673530046bf6e1e0ba436815baa8ab40f0ed08a5153d9eac5df3350391e933ef64181f78bcdf62de7065b6b482ef01af29bff018c732b9b3cc25d031022ac9c69288e5b28150484f85ba5f3b06859a16726e5dab1d52e40634bab59ad1271a7e3b8d9422a15085c05b397623b818a2358658b1d3b6e4dc805febd6d2e48613a9e936cc87a7205c8dd734c32ec0616e82f4291a807743068ba25eedabe6365b9bf182e4836cc2a3d4f5d486df1952bddff7d4c4da7498fe67b10daecf206b7f47714956ab642f05d3c8284c72d374cf76b82cf98dfef47030f70d12f9210a658eed9c1edd206b97e8300e84a2831ed1edc97bc54a7f257114c675ed86a95581f368e2f871f27890d39e89398ae9990e6c81b669d836d422882b069934f456068516133d23a7eef1f1bdd977f70564224ec5924e2604de0f30fe6cd3af4838bae6c0af8be524f67b7eb36c15635fec807e78829661bfd53c7156d7871d12ec544d12a8a9215c46fdbaca0af983ad29a647422167bdeb9144627b48068db0b68fb3e90ad2581b5c7b7512d6a16c1e693dfbf4b9c88bd2f7c1be6677e6e9e40cb3e1caccafa08ad699677b4148207fb5e2ec9b0f2e0306ba034b309cb63c5112ce282f5593cd4fa60e3766b865521612c31a8dd5ecb74c854e1c482213824e45468b9c2de80865609f19f48fc8eb7f6c9f2ff94010a8724428f5f1d653e0499ed8d4425706a70fad7e95d9d8efde6786e99f79446b236d3bbb353529c712960ab3d56dba36c63f6e7a2fe16421acc92d628048cc1d0b87752eb1afc0fe61fef6e1de7e71171ac748568b3cdf1d1534bd96e539012abbbe900865dd2e28b1ce12cbe7b3b896f268a1b5f6b4ceed41c5be3d452a1b5dce6efae34badff0e8b6cd1090a5f51aa148d5e6fc4d831fc997cb255a963d923998ad50037aaf307a396d82fd084ea7c59dc2b475778b5a2ed6f7e2326401867cd037edcde1220dc29478a242e7a2f21cf538c8a5e74a6c07e5503484470d1294aa22c365e134d8b49e839ccac515a5d83e7a91325411b50e3f3bcc84aa4b6be6f4b7bec4178e23bbf21db0880b2ddc37d6b16192eda88a56d43076ec0a917217b400e052fa388a81049d6de6ad8cfffcf42731f736d719c9a8755716c02573825babfaf712cf45d52a72eac501c57994d672f6d5eb034738170c0d4ab4a43cb9630386d2cf11a55b67ab6b10fd821732d245f6396ff16a9124acc7f4d9e2d80cdd69b29e10d5df3d197dc434358574ef5bd50eca12525e613ef9f1fdeac9d77aef29c8f6e21abd144d227a92658ffce58900653c393b05667901756a8631b5c3c2f18ac9e3f0fd2c5d9c3bb35cef939b413f129a6d90bb48942edc1664fd1ed0d50a7fef5a68b347124d4b7215f432944a72da15934b4b999a31625c15619d6308bb957799d280534e0a79e830754574935e4d35782b102ab6504b7938fe0e0da376e6149bb90b50680012f9e164cd461214e357bd808dace230cf16c40c5873c54908f67958103eaefdde11d99fa5f9d8649d993f0f5efccbf465ea5902cf01b8190256f251414bd1059a5270240fadb43bece3705e0f8bd4d54562a443354e068ef8498b0b6294f2cfea1dd07c4e3b03c40bb0b453f0accff0a5c8c0f7562d66adc129c622387e51ac16d9e5fc3b84ef75917cc3d3eb10602691cd23783ab8ce8986c30e1cc72247a5bff0a50fa1dc4dde51f516d1c41a8740708e5511cc7a8bef73cd795e787115a5bf820c7f9f66a5bc06cc7379314a1238a7e2b0a72ecb419a7654c4c4c684061d2f6aaabd273b26bd300c03f301564a303ddee9b6f215ab812c2e5886eda4a35993321c2a1b03456c1bce5f08c0f0a09c855907f4f97868d57ac58b95342b2f7ffa942b69e496ed577b5c082f664f797a81895c44859ab19729b42762cb501a7c7d7118363aa5b319abeffe7ca7167b48f1a5e4e23cc3ad958de71bfae0132942bbf2efa3402a7538862e21a5d50b0949e6aa4243ffaae6fdbb1e80f9281b1fbab5a68d3a8b2da05c82ad2c0d5a508a5ef7ca7e22b59f877547618e692f53bccb368e503aaa0dfdc4c2f5b479aeebce0e9a99d27e1b7f45007c61cbf50fdd974b75a614ca01274f99b9851fd8c0b76b07a3aa4ce3f98e906eb3e9e7308e7e6d8dcb0d71ac8cb8cba6d7b090ca2a40867b87b59c6080ea2cb08713fc011f5ef386e49ace7d523354be1b9abe13ce82d38070f8303afbf10ec55c7536124fd33eeb0f9a4e3a8843ea43eb0d11d62fcf5d91db10f6c9cded5283ce142f8882b45af362b2fea2b919f9fecda1df378c82a165f6b66f2643de1c992e47a809cd0f168d42d309b2294ed791ec4b67a9a7c343f8587ffe481605737d2e008632e38309e85bbf49e83dd70f8496fb2edff6f40f84a50ea95d3b4346a2b275fe6e582c5525b168ef8dcf69da7459b8c09df50429012edbd28688b19cf60e4e01170da0bbb82c6a1621b91f4451b031b4bba2dfcd3d14369e6bf867d510c380a75856116481e188a68767e90321ea77bdd341eea5fe5bee85ac655b41526ae5cd57ec72e5456c2dc43d3ccdc87da69de5c11ca79f63143aac9af7dd23c88c95f83785e42792027c77cfa1a0ad1591cfef685d620be6cebf427d05cade6198afd2d75b36ec8dfc86cd1d04f3ab8290d20830dfcde597d24c68f1b7659a252d2527cddc30db349812e18a2a884a38678e4f69fa6dac9ce749c8032a9124525678e09bd5d6423e8d84e9e3df045ceed9372fed825dfe8a71b804cf83ef6e3838be5df93010708df6bd44e403ee5df292b1f2a684d47547ca964a2b517cfe675b75b3a0b11e46e5f41e7e12b0fee9222530f4d62217eaa2636eae15cba01c0070312bddd7c19a83e4a170299898c458bef08e02a8e1705c4c60ab5c26ef5f4b8378e0ec26febadb8dab2930ba621f04471e5f7b43ba8180df3fabe0bd82cd45df7193f59fb4f3150a2904adc24777dd4dab6db8eef1ecca3d4e60715d310f60fe79ff7ee6caefd7f33f6cce35d171b511287afd17e1b1744298e64d0730a332968dd4278fd254ca32a0caba240c23b6bfec39f64fafb04c2cc94ddc7b384ea6ae9ea19e3c3859bb373683504715d50f5f674e106b33681e4e834eb7d131872b0309bfb2a1dc51613c705abde87ced3bda18f6ea7bd176664366e488c21f888c393abbbfb69b61b71ad348737a290debb2c21f5a63f5169f65f2669518247b1822ab62d75a2c004661ac56ecedda24b3fb9e1021d1e6463f918dffac6ddf3b77cdbc5fe72efe0622c43cee7ac50164b9034316d5f14fffe8b65f32b2e156582e5348356d1cff73adebf66065ff01d37e76942d35d56df1074ba994fd1597583a5df504c4c95272ce53e3d6c85a6153f9d8bb4c416c8bc94bc578ecd12a7723db9bde80666ffd271ea207d6221bd0ae4acf7c4ef0cf2f366904de3bc29847d4b04bb823bfda7742b3c9a498ef7d294ddf759e06fe00481e277b79b3891b25766dbf313fa94658c064a41ba152ab7cb318fe0b3a9f7f877423ada561122282a21a6102e5d21a57060f7924f00e100d57ef1a88a3b52d62384900e2d773059e7b6463935ef431a633a4244ed645997513554f5299e53558b671fe667bd9db5b135d715898413242743cfdd672029bcbd1cd28c062e3bba345d0b80e683ff6c469bf2eb6e4c7f43734f3063572e2b0cb797d5e471f588506a1d61b9a0b2c061b0143b0a17104f66ff0d5a9bcd22d95daf0162bebf8aca53aaebf2efe40fdb7baacd671b8a8733f266756f7eea8a633497b6af9fb59c421f17e075d4ee793a4e9158ebb6271eda4c2444192098cfe090f24225bb87112b0c64180022915f6218c8a4c59751cecc9f01f1267e748e95a8cdb8896392f568bf8cc03fd8b69a9834fae4aa5d233c971d451a7c47860851f463861079bf83582caa433d8c7016c475fb3068ebc27e0ee861e6f7f84331e89daaddbcbb1a4ca2799c481277206a77621a1165e0f043bc187b9f3e159246456c997ed7567421413a9a8b7a2e15e342223570b08e380187f1c5b60a40081e26804af1c824d1047bd0bd799e66dca8b072be39c29c11f7a84854c03837286f9062bcffce2c1c343eb3caf8263a869400cd151bed28ad226abab5c73fb1c7805fe1c73af1a888e99c23e0f1eb629a08afd8c78ceb32f6875c3949e69fdbdb3e69578688c22e998465a95ca90ea2606a296614a8218607d3b6523949564d8f2705774866207a5b68878923ce48a53b972607d677766169f9e54b2166f0ad4ae847a31997ec6f3c302f8a73d5685ff3af8cdf3f6841a2a5ad3acc57e6dd871b77e95943f29a494ba28280dad99e8320d4f4400476d0d0a5bea22e8fe699dc9c4b1232a3aa02198ae84c236aa6799436b47e7f8e4f9ef5a3a5d6b19b822dc93f06f427a137294ab99ad7bb7655b437b74"]}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "e14241edf0affbe8bcb264001a8133eec2a654d33bf74b69ff4c62551a8840557b02f6855f79ac58d5ab040bde9e797e356e8dcaf07c1481635b6fc968dca265fe4f82d1f7321553280c50557609d616d388ee7c646bba0309e9b90296bc182e94ee8fb64a6b744dbc549c7c8678766e100d227514e2c394a4d5a92a034bf71ab019f5aee0e833d333f9edbcdce76172bfdac090d2ba73bdf167526d90c055e037e168c53de8cf6012fe4408f216523d8b3d0b99ee458096ed67d80b1fe0989ec0818319471f1481301c67db1f88dea63c61e7e3efebfcf406724800d175df7355621f5814dd6ee0f9c88a8e205aeb94e890bc28104d91eaddff37cef580a12ebb8c87339927e4e0779afd612ebf34c454ac6adbb272d66eef632986a231e043f2fd68db8d2fd9a48e63a32bec07fda8988f159f2e171b8eb70acd2763e9a65dfe4eeeaa255120150346c47478845ff076460c8da89119821eb3137c39123398354d0d74c867ee2d8a02f0e5d1939fdaf1d7d9cb66ccce1db6fc606dcd444b004137b8ced187dedf0ca9d4c69eb3667fa849dc34bdff9e5d73bdf67934ab9b91db359d552e3cb73171d8fccbd51ce23e797e3bfd90cdd2f666b494a653752fb2bac6a22e2e84a958885dbe4d9181e83e5548fa15552ca9673ba37ce44397eef446dbb59af95ef5d0a28bec7a99503bd236585bc7956b636e1af2967e85a47416efbb3d81a67d2502a15c94cc0e1f2435e9e4b495e1331017edc6defda99bcc3f1f3fce52d91b109f33a08754c0425379f176c09f86f5c81c0fd64a9b0fe6f758e3f5fb2f5850f3af7e274c473ad57d52f6acc9a61081949c898ac6a8dc8b344133b734fd3ca47ad63583b42efe6d00f63e8a21486b13d1ed7aed570b6d12e91adce85c39451325a3c8ba083e0b47c3806fcf01a94ae508423b7c733da2411864cf2b1ad367d353c769c4136d830bc16e19cab102c0e940c01b2bda9387ee4b762d08358668041a8f4a03301b1ec9e340c0dc3cb711f2184d2e3288c299899c98574af7dafe88ffdd61285f59cca409aecf076b88546d1ce638f5f87c3aef3073b39e1d98b065cb756d5ffb8995d8e1ff53fa552bc7261413697967b4ada6bde5b76cfdfcb4f6b4403354a1fe86884208a00722bd3ed51017127ba159c99fb5a8db11ced57cf5d5c2e59a646af5fb7be0e89f1e0b7de93ad0aeb5f642c8dc0439de7edf63cdf5610b3787ecf567114f89ed9d92e6701313693a5f09565fdeb0f3f3a765ae7844b75f511d1844136abb81a9f2878a5061a1ddad96e26b28b2a5c1ce5d7926fa6bfb0c89fff0ecc101328eaadcb8c3658056717b7d414d7fb7a3f6bc263e7a69af16cbc20b10ac2726c83c4d06d49b533621d18cab71fe5f69ca247778ab0d3ef0d125f703f82775ff0945e2337fb5da9de6739b58a294046735e5e46d5c99c50b9e8dbf35c0ce991c2daaf2ef9cae65825c322a01054efec48b9bc6f62984af707f9d7128c7f93695e4132eb18252295e5ef0e4b039e495747c88e356a11c1c33a6b3a2fff53aa90572ec0036d96440e064f0b47b18e90f69116a9b2621c488a3ebdc2c43810461ed12ed1d9313c196dd0d4ed11685969033506fc9bbf06c0280b2460ac1b3c998b357a16ab446eca34060c7359cb8282a0ac39e77a522e0db43102004fade1d40a6049b6d97038aa78f0884974fa8cd77f6426546dfdaf567df578cf52fac3fba80ade280dd6fa98e3a9d90b81a177dbf1040a525aa4019ae78daea8c94ea7d4523e939f37821f6f347330ca16a409b698e63d970fc06e6892d644f38afc5269fc5d64eaf966f1d8305ccb9b899c848bde4935ab2287505b28012a7355a1d2318e2044b7802ad3b76c7beaed0faeb6082d22e3b5d268c80db293bbf18430905899f234c904edff589381adea89b7b302ada78268a1ece89ca0b56d14faf05adc2f0696565f151e8eb9db6555694f82faa1fd2c95a1b8fc8b74b1e41a373140b1ed33bf076ec792e421297c5c2ab1a7d694e5b32b33889c3e1790245619a06ad23a5ebac3e95b09fca1614bfd6fb3ca6f945e0e31a4dfbd17f089a400b83440fdec6802f02d9c54a087a4891ebfe860c1d6a73a18ae68ce7ed4699eeadd15e2ae87b91ea97ad35907b505688816eff122febe4b8966d9f1c62ee53bc0c9257029c9b1d0eb529bf6c67e09fdfcd7afc45dd43bc9275ed10d8cc99d08fc5c846f06f8521e06187c3c83cd4529e52a6587c8de2067bc32310eb2b47ecb5b2c82261608c18106edddc661dc19cd718bbd70e6dbe8407b9ece8a40128c5d9136969154c57846b1627cc340c263e80d355fe03724d8c2f5b8e7501596b3a287e1d8d2ec48f32007bdc6eb826163b02f1dc57aa809b5b1f4717089661e8c539c4b8e6c482dc3a5c688d9dc9a3456ab7c17a841617351086d260593942b6f2410258ff9d930c32fd762e0e91ae8d576c56901ad5432e3549ebf346c7cabac152529fc81ebf740cdd55d0d230284e0dcf8b66f98935ab19088fb98d10d48b705a825f8c40b9348752509af746ab6a73ea0cb460cef9de0064ed8f1e274bbe6c940f79b9b6c58b253c70e5969e136a2a88a9dc450600b02b468ba1a0724116bfde333d239e9f771bfaf4e51a03325f548e20f2648bf0c465880d75c465948211d586dde177d3430d339d280a6ba9cde17d73dcb226f9dfb237938b2c7fb51ecd73dbf07916e67698053208c9ebc918190a22697e1001f3ca9026075d49e162d65446fbe2e149a3e7eb6d260c91ce7cc76ed43fe8109efb03c57a371667d5f917ba66c6284606819a7678234945d6f90b48d5fa87aabd66d58d1906f6c6ddcdcefadf6b9b39a87e1fab35652188da628083fe6d1c326d1aa7c016de93b4a92a946f6992141d2f2057589d40595727e94a4756bf0685869917a1a04b6b774f46aa7e6e51c33e957a0e033eb3da26a2944f57939586d721392cb023fccd84e4ac59d85907072e81919ac2f3c0321cc3979f404d33505389842fb26893027cf2861b612177f500260dd21bb2cde22b453461de4f8222bfba8fd68320ae01d7057a5ca745bacc21ac1ac014be5754685307bd201a346d06f8ecf25b2942f4f533b6cdcbd344cbde9c1903396d026e7a0b7e39ee101e09509fceaba1d855ca0dba9455dad83e543468236719ed476c238d147aea0f65ca9a9393b0f605ed25a2b010218a6663294b3aef66506987bf1cdd19d0c0d737151cd4049e66c33efb83719f9c443be4319f0ea877104db4a837fa14e155e9eea82c533fa72ab8f7799b0d1a2a4d9f565d9a91b9978ecfafdd1a05a7b2010f8826076dcbc4f9f7847ba4e164e7a2f65bb4454c2d168180f52cf5d3f27ce43e53913cd99b9a2a7c80d107a734f2219fd974098710d77f4d60daaee6657027158146efdf2772c0aad0f52deab2c870580939e74ae0cc4668b74d14412f0205848bc0ccd2d7614bb65fca967f13e6f15d3ed20c7e14e7e741434627548845eebe37cfbba202a211af316802fd1c54c0cbf295dd94ad0149cae3c174db9c12c9b68a654e141a5afaa519c621415b8855da887bb0112b98e3ffcfd9eebac91a43f3e4732a3f047f8d58c6d0a07fb36e16bcba185fbfbcf00b8ccfd0caff380e718423f4d09b126ef148631b7e3011ce481c1234afadedb51f4d013c50951963004826001a006746b094c676bae8d3a1926cabc2cf868c77f95e180d550761e7e510138d2160f3ee2d6014aad6206762e6765371c05c31f3386bd5d8f9f0f27b48e1a55ffaa29fb278cab9d72af491e4df78d9bfdc69ed2bb07484f797c13a095b06dee05b217790ef43353c32c19a085c0d8bb9415e6c9a550ce87b8d2d1e533324ad925c91adc64f7b44bf38ad70e96666b438f6c9751d54de915dae365efba343eeb1506d6b3022f7cbbac6ee3743578383ac1169d42f1952fa821a29ff7ba289478f739d0387c226f3c40da58895ee88bfc31044433eec90c741dc1fb9a17e35c50ab82d6a5ec96157dd8a5e5513e6afd9585cf4022b5b38b486a992abfbddade7acc7425ee3bb0c73a4ed60b6a3ca6472723a0967b8b03753e353d4b89479c981c797d324f23a375a9b7ef5a3a523c942b29ccad7043be1094ba4ea02bd4cd41e7fc4ff035bac30e471e5131b401b9e3e3ff1b43a2d8227a8d4ddd1a792f3679fe02ca72de72234ef29d8fba8dd00b7ba242d8837f811e5702a0f243e7e47af9ec793dcf99717d5ddf023c21f40f20c99b6196d692d13af56f2a69d1e97ffe7aca3171e3b36c825d3bf4860ffcf54ad7cd6fc3139b199da44e0fbf6f03dc8e3444f7ee9ca20e5781c90012d10f1d8e15c540d8785ebc9056c1b1996ea765325587a6512e654ee1ef9c93ef973796d70cba39f662fb328ac22cbb826701eca7115276c774ffdd174ffd6c8051a00d5662998bdf3db41e28ae6625fb67bfa97aed89cb13f88f4117708f4620642cf5033e2e18754c42f7f0a08249ab703142947be124eae38c84c9ffd877cb5b84ada5e08cd2cb2b523a9ad6d3506fe771c88419f584058faeac1489d62bcb07339fe9f296e66b91e27463b4144313ae38ded1344db84207765592590464b778624f49a215e24c5d03102ecaed6e1163e6821986b9459b820e1f8cd8780e63882fd10d8a7890d054aecaa4d1c6b81836a5bd5338ed7f773c129f5cf1776a195fe4d4a539d85aeeb83202ccdf4aabe1f8143168673b9e6bb4ed4660dc5a5c9897f50dd085d4e44da2f3b33807ba7009df517bc5b211c100a9752abf466e8baf06ac8a24d1d279141a6684fcbf71a00c880bd8a1df59d36c17a9d67d64ff307e84b69825671e8e1f57e7585d8b8e5131ba8c004163e9b0ff2b28d90d7e89282f0caeac402a01a0750d993010026a71a27b096f8c20ad00f8a95712f1d525a96bda24181fab4da62a711aa22142bf1377444ec038066c1428aac595fa0d6c03ad4df07572fc6e1a55b24b247627034314d34d3f91319e55e28217c61e75e93eafd56590760d85c4893e5a209a0a164528eca7565b0b8d4313bec6d209976f56729606a129057bb602f6cd20f65fa269bdf1445fde91b3162a7829af50abe176cde607350af3d8d274fe86284bcff6b43e8217e388aab746d7f10f760063fc408006d49c539311e4d4abc302defd461deab2d32ace69d9b105b628be16b5bf84810b9599fe7710325bbac43a3d4f16889f25f9f8fdad1d7fbc8496d947ea2f7de87951530d0b9dd013ea6db39b3a2a0b9f20f945bd92a0d92564dab0801d7efac352886fc225ac8c3ebcc78fb167fb21011b739f05997661aeb9c22212b088df77943951fe561ed1507ba2b6367c471773ee9094f1542148fde24715245eaece9e9980f3102e04597144bcb2ace1c6592611adf9ba7b918b5427ea7eaa7035d15c5c8c9148f1f1f8d506232a862dea82f4bb74e7e576bdbdcd794c5f89fac459e220409df1e483ff632d98587a4e09f2eab46820cbc4396454731e02f0b3de6a3c5e53257e013b97ab76bba457d72c047725b437d531129920e74b100446676f7ddf87786496c4b87947c8f59d5161918c954cfe012a057be738f13516879bbf109433ca7ec2915b12a037ced1026a395d39f527152eccae7989151cf9f9b5d9023bbb1e17800bb4f38be9d76ff1bd7b72df3b3a3f2bf908a3e89334e4a0a879a5c7b398f6242795b996121fbda101ca99f3948ab5e8171dfc7944b024bfa46614128ae0bef3049656971267178ec05149a8090d13bd2f0d02d857be8"}, @TIPC_NLA_SOCK={0x9f, 0x2, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @uid=r4}, @generic="cef30a2f719917ed83f8793ca57f1da0c7a7a6d613cf50d4bca313887cc653619694c22264832cd42ea3021d648ba3713914a3c9be40a4017a08be5567987e141117b1c4a008d2f864e77187929a15f5e44b37812c0840b29479f9fc0a1460393d41a506f5a09dd2eea43eb56a19653b82af85a2cdfea5ecb33970", @nested={0x10, 0x16, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xdf}]}, @typed={0x8, 0x102, 0x0, 0x0, @pid=r6}]}, @TIPC_NLA_SOCK={0x252, 0x2, 0x0, 0x1, [@generic="55bdc72ae226fffd3f9bbbb2e3d80a8a4ccb", @typed={0x88, 0xda, 0x0, 0x0, @binary="2e85553d384fda022f42945799ccef3364a124a1f65cc63fb0ea4aedc4d923c33f09235a150213a9e07201cc8fb7167ab71c2e3efb4961c3b4e50ed887061f0c3777818945df5cda0ddb4e007d67e1f6ed1ca1ff469ab79dcc03488955c902a71af9570035dbb104ca9ba593411d761eec112d3c4167a53a6db458db4ad29581fca49dbc"}, @nested={0x18, 0x10d, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x127, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xc0}]}, @generic="321d482cfdaf685924de51da7f1524915409be326182e3550e17695847bbb362d2ed0fc8412dcb55333d6e00cf523eef", @nested={0x16b, 0x137, 0x0, 0x1, [@generic="0982ca2b64d97c3e", @generic="114ce1b077b073a1ff51e8ebd4c9ec42f7a0d2dc185831fb1750488ab008fd9e4e4554a0328ddd2d7b4fde11f81308d78f9cace6bcd428ef111e0142728dd12354cfd7c47e6d196fc60f24", @generic="6cc36da871057af5967d2cd3be", @typed={0x4, 0x9b}, @generic="1923693e9fb82538fcf759d40aad8ba9a520d9f4e46adfa81dc92e3e44c6e3ff18166f150b3b2c5cba35119a08febfff585d72a707914fc08ada665607c55592d8357e2f68c2924b285e2e742db73c5e1d83bbcc858be45778ff6bb5cdcecfcbae0e46d717c1b0039d5a8e16a87147dcaa2cbda852a679c56edf6668c9ac6ec3bf33836c01486e6247b0a614bf1880ca17528c097216cfdaba2e3390cd3de24b44043baba348c919d433fac841445db1eaff97b467fdbf3f582e3ab20cfa6d891287ea19720b05d282792a4a1d88e4ccf48d0515f2e91e0baf2b1e54b359dc3f7c0588f6f479bada335920b05911c7", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x101}, @nested={0x4, 0x120}, @nested={0x4, 0x68}]}]}]}, 0x27f4}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000002c80), r0) (async) r8 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000002c80), r0) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ptrace$auto_PTRACE_POKEDATA(0x5, r2, 0xcc, 0x0) (async) ptrace$auto_PTRACE_POKEDATA(0x5, r2, 0xcc, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002dc0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000003e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003e40)={&(0x7f0000002e00)={0x1024, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MNTR_FLAGS={0x1004, 0x17, "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"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}]}, 0x1024}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0xb}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000124) readv$auto(r3, &(0x7f0000004040)={&(0x7f0000003fc0)="3fe68c357e4722c00872d48c9b62f495c50bee7524faf7cb8f1a1519fe2ab1d216f4e9aa4d7991fbd111e5b0c1edcb1bd0ca48b388ced64fb4f7878fd53a5a593aacd56be00aae94278651541d20dd", 0xd9}, 0x0) fcntl$auto_F_GETSIG(r7, 0xb, 0x5) (async) fcntl$auto_F_GETSIG(r7, 0xb, 0x5) timer_delete$auto(0x2) (async) timer_delete$auto(0x2) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000040c0), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f00000041c0)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x44, r10, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xae6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) r11 = open(&(0x7f0000004200)='./file0\x00', 0x44a42, 0x40) timer_delete$auto(0x5) (async) timer_delete$auto(0x5) fsopen$auto(&(0x7f0000004240)='\x00', 0x9) writev$auto(r11, &(0x7f0000004340)={&(0x7f0000004280)="64c5d89ca14a624547724082c85e34db909a19a3c8bba46dee28952b175b70340465e85859f03fe7231d7945397a1992f28fe3a26b56a5f295760ba0a7bc6821ffa9bee3ac315243ae9ad010ee4ced1abf82fbb2db88e2b2f5d3222aef0b2e054c4fbd1da12be4cd2fb88804434f920024d6b5c28d87840232438d9c5096efe808ea5d979fcbf843588f9931f91ad103226baca7357957be48839e6cf9d369d29abb2a0ca6e2c08b86a7ef374caaa1a9bea735c207d8c9b315dc52", 0x5}, 0xc) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000043c0), r11) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f00000044c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004480)={&(0x7f0000004400)={0x54, r12, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x50) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000045c0)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x24, r9, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0xf}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44100) timerfd_create$auto_CLOCK_TAI(0xb, 0x7) (async) r13 = timerfd_create$auto_CLOCK_TAI(0xb, 0x7) write$auto_nvram_misc_fops_nvram(r13, &(0x7f0000004600)="2197687496430a33bad6fbf9271ceaf93e19ba834773412c866a350f1d8db63231cc21d0cda3e1b4651025fff7b47435a8193b3d6f8821be8807430cbda91d4fb20c01644f7e540760d30558f70469cd1dbaa3ef33def9970a3c4eaf8f67afa6f86c52ccff7062dd8f16273a974e492f0b7f47c0cf4a66d485f195367c2058ab6e61fe2f9cc63e142b33402a799e75fe7e1b819ffc00d81e6fa07522b3e5ce48fee45a33f42f0cf509198970295f41c2d9ffa7c1c830452286506140510041", 0xbf) (async) write$auto_nvram_misc_fops_nvram(r13, &(0x7f0000004600)="2197687496430a33bad6fbf9271ceaf93e19ba834773412c866a350f1d8db63231cc21d0cda3e1b4651025fff7b47435a8193b3d6f8821be8807430cbda91d4fb20c01644f7e540760d30558f70469cd1dbaa3ef33def9970a3c4eaf8f67afa6f86c52ccff7062dd8f16273a974e492f0b7f47c0cf4a66d485f195367c2058ab6e61fe2f9cc63e142b33402a799e75fe7e1b819ffc00d81e6fa07522b3e5ce48fee45a33f42f0cf509198970295f41c2d9ffa7c1c830452286506140510041", 0xbf) sendmsg$auto_IEEE802154_SET_MACPARAMS(r11, &(0x7f0000004880)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004840)={&(0x7f0000004740)={0xd0, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x45}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "1a3063d215d6b8dc35ebf439a4ea84e280331cc29b11a61e594b0cd642cf20f5fbfdcba16f04d29c96f0a48503cbeb1c550bb97733b59a35b5ea586dc5ef19aa11a87494a21714b28fdc58fcc858e3a65590fbae44bffd6d0322276fc3065c448e08970cbce69407894a91eb63dbb562e2359636da0961c98ce845df4ad870f8"}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x98}]}, 0xd0}}, 0x80) 32.395515238s ago: executing program 1 (id=2319): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x7, 0x40009, 0x100, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000040)={0xfffffffd, 0xbf, 0x48}) sendmmsg$auto(r4, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44131011", 0x49}, 0x5, 0x0, 0x805, 0x1}, 0x1}, 0x2, 0x100) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x5, 0x8000020000008001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 27.475740232s ago: executing program 1 (id=2334): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mouse0\x00', 0x181502, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) write$auto(r0, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) sendfile$auto(r2, r2, 0x0, 0xe00000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250d0000000c743edd74504a5ca5000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r5 = open(0x0, 0x212040, 0x0) (rerun: 64) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) write$auto(r5, 0x0, 0x7fffffff) (async, rerun: 32) setns(0xffffffffffffffff, 0x8000000) (async, rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) 26.58751528s ago: executing program 1 (id=2337): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000011c0), 0x80301, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0xfffb, 0x81}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x4}, 0x0, 0x8) (async) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x45c100, 0x0) ioctl$auto_XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000040)={0x0, 0x7}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) adjtimex$auto(&(0x7f0000001340)={0x2, 0x0, 0x8, 0x800, 0x0, 0x3, 0xffff, 0x0, 0x3, 0x8, 0x9, {0xffff, 0xa}, 0x10001, 0x9, 0x9, 0x3, 0x0, 0x80, 0x1, 0xb, 0x5, 0x82, 0xfb1}) (async) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xf0480, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r3 = socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x0, r3) fchdir$auto(r3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) ioperm$auto(0xc5, 0x3, 0xc115) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000040)=""/4099, 0xfd98) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) get_robust_list$auto(0x1, 0x0, 0x0) (async) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000000000, 0x5) (async) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r6, 0x40047459, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000001080)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x6, 0x1000, 0x8, 0x2000000000400009}) (async) ioctl$auto_BLKTRACETEARDOWN(r5, 0x1276, 0x0) (async) r7 = socket(0x26, 0xa, 0x3a) setsockopt$auto(r7, 0x29, 0x4e, 0x0, 0x2) 26.532488123s ago: executing program 1 (id=2339): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x17, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa155"}, 0x7d) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) keyctl$auto(0x1e, 0x0, 0x0, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) close_range$auto(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_TIOCGWINSZ2(r2, 0x5413, &(0x7f0000000180)="9692a1323b3df84d3f22ba90c0c6ec4518b62e9604b38cb4afc1253f69e20f44219d4d385ffd2e9411625fd701f26f4f22acf236acac3112bc8f5b0329a2fac537036c8d673df9a063262604ff0c0bbd0e0df0b0f9ce2d83b5aa5991357ed4a2ba10") sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}]}, 0x20}, 0x1, 0x68, 0x0, 0x24040080}, 0xd0) 24.49312934s ago: executing program 1 (id=2344): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) (async, rerun: 32) fchdir$auto(r0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) (async) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=@bpf_attr_7={@map_id=0x1000, 0x9, 0x5, r1}, 0x4) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000040}, 0x4000000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) (rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x60000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) rt_tgsigqueueinfo$auto(r2, r2, 0x208, &(0x7f0000000100)={@siginfo_0_0={0xf, 0xc7e, 0x9, @_sigsys={&(0x7f00000002c0)="c18c041607f63981c0c463dab29f09688774b6622f9f0361164102cf2e660c862b920d3f018f9407eaddbc0d0aa03569e25a322f369e56209ad5eae1bd71ccaf0b35c21e1038fb84db80c357a51b4f79d3b7f0dcb9d2de2403134a24d9cbcd8fec7f758f8b99cf76002b57095c0e519dee0bd6ef3a580a434081e7f67fb0f8da4bc3a08b9de62369c1aa18775f7a079a6ccbe365585e715b8071aad23bc85db304516177d9492ea92e7d32c32ea30c9f84124f82df5a868e8bae04f997f8b51bab0e78662509c929e36329628450aac0769fe7938ec8aa503d0f", 0x5, 0x8}}}) (async, rerun: 32) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) (async) socket(0x6, 0x1, 0x4) (async, rerun: 32) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) 9.403219368s ago: executing program 0 (id=2385): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0x5, &(0x7f0000000240)=0x4) close_range$auto(r2, 0xffffffffffffffff, 0x20004) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r5, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdfa506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 9.122129183s ago: executing program 32 (id=2344): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) (async, rerun: 32) fchdir$auto(r0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) (async) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=@bpf_attr_7={@map_id=0x1000, 0x9, 0x5, r1}, 0x4) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000040}, 0x4000000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) (rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xebe, 0x401, 0x8000) unshare$auto(0x60000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000540)="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") move_pages$auto(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) rt_tgsigqueueinfo$auto(r2, r2, 0x208, &(0x7f0000000100)={@siginfo_0_0={0xf, 0xc7e, 0x9, @_sigsys={&(0x7f00000002c0)="c18c041607f63981c0c463dab29f09688774b6622f9f0361164102cf2e660c862b920d3f018f9407eaddbc0d0aa03569e25a322f369e56209ad5eae1bd71ccaf0b35c21e1038fb84db80c357a51b4f79d3b7f0dcb9d2de2403134a24d9cbcd8fec7f758f8b99cf76002b57095c0e519dee0bd6ef3a580a434081e7f67fb0f8da4bc3a08b9de62369c1aa18775f7a079a6ccbe365585e715b8071aad23bc85db304516177d9492ea92e7d32c32ea30c9f84124f82df5a868e8bae04f997f8b51bab0e78662509c929e36329628450aac0769fe7938ec8aa503d0f", 0x5, 0x8}}}) (async, rerun: 32) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x40) (async) socket(0x6, 0x1, 0x4) (async, rerun: 32) pread64$auto(0xffffffffffffffff, 0x0, 0x7fe, 0x400) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) 7.924213131s ago: executing program 0 (id=2390): set_mempolicy$auto(0x6005, &(0x7f0000000040)=0x5, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6ef) set_mempolicy$auto(0x6005, &(0x7f0000000040)=0x5, 0x4) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6ef) (async) 7.442795197s ago: executing program 2 (id=2392): syslog$auto_SYSLOG_ACTION_CONSOLE_LEVEL(0x9, &(0x7f0000000000)='/]^\x00', 0x101) r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x400000, 0x0) ioctl$auto_BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x8000000000000000, 0x0, 0x800, 0xfa7, 0x3, 0x0, 0x1ff, 0xfffffffa, 0x5, 0x3}, 0x180000000000000, [0x2893]}) io_uring_register$auto(r0, 0x5, &(0x7f0000000100)="9c90e199cfc85ece663061aee19c62defe27f8ed669b5ec3c4a5ab727d1ff398f33587337b8ae73f8d23ba3a4a384f9ff688ff4e6b7c34a90694098c23165110dff6267236156ab1ece32f0c8a99c60def329f9952635033cd155c4f0677658a9713a49a13f340022f6dccd8b4126b48f802b495c42bf777c9d1da18093116fb1a239c936133f01c8bc705016909c98df9276631e62afc67e1071db5293667d3543cc55fb3", 0x745) r1 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000004c0)={r0, &(0x7f00000001c0)="89572ee6536310563120abd8d9ce5a29bc4cd48cb9bf79a834a82bfe2ceb79f9faf080b3c358158bc0be7b292e04bc5475fcd701740a4262d9c4f3bff72a21d5010c247789a8fadcfee9c5ec096f836ac465d6866d528af3af530fb2705ddaff6d8fe9b14af01aab2178d582703519720dbd39c4d49c336929e54a89e7697ff755afc446928bef66", 0x5, &(0x7f0000000280)="87b7849e4ee9f8014a6d0b0c19094965118af6a84b13781dfd849ca4afc1b025bea8508207661a8d565ea1d6eba4ac71c0ea2090f5f5deea690c561ca75e023ae3da0a3b55b7e92f125af06956ac33aa2a17cd18571464c575cb66bc98757dfa2bd392e81111d28f7bb449af61d7c83a9c8dc45f5355d5cf5666752b2457099266d6718206b93e477c7bb6b8bf4062f2d0730063456cc5eab93cf81057f53de41e3ab18d9175d35e3a3e7a08ae6ab1f7bef87edbba89cd98191eb7e0c5359308035179f93bdb", 0x2, &(0x7f0000000380)="7efbc61005e2a51c33e550342422c4fb1ef05c97b7bb1056b7d12e0b6e50fe66e213d4367cf61dabc2d61d225bc2e4c2dfa6ed559d908ae9bc0bf2df49ae068d529bd0a95c212f3082c7caa83c713c7bb72a027369f5cf4301dfb85b48604a5b342d44b14143b78f9995173d9d2ff9a5def7a9108a1619f54349669eb55db0b1eb255134eaea327b291f447c0cdc4c85b9be43f025bd4bf7aeb729c6fe34d1f5c58471915e29fbb5ace683bcb6791c2db07d4c07d6bc6107eb99fa4dde3ffdff6f12c47cd28ca6a24d", &(0x7f0000000480)=0x5e}) ioctl$auto_SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) fcntl$auto_F_GETSIG(r2, 0xb, 0x800) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)=@query={@target_fd=r0, 0x70, 0x6, 0x8000, 0x7, @count, 0x0, 0xca, 0xef2, 0x800, 0xb44}, 0x3) sendmsg$auto_IPVS_CMD_NEW_DEST(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10000001) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000700), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x27c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_FRAME={0x23e, 0x3, "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"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x9, 0xb, '@&\\).'}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x2}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x3}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/pcm1p/info\x00', 0x141800, 0x0) r5 = eventfd$auto(0x7fff) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000ac0), r5) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VERSION={0x4}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x480d4}, 0x0) r7 = fsopen$auto(&(0x7f0000000c00)='\xbc\xbd#{)/,\x00', 0x1) ioctl$auto_BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000c40)={0x8000000000000001, 0x3, {0x6, @usage=0xe163, 0x7ff, 0x7ff, 0x6, 0x1f0, 0x3, 0x7fff, 0x4, @btrfs_balance_args_9_1={0xfffffffa, 0x5}, 0x5, 0x64e}, {0x22, @usage=0x8, 0x2, 0x80000000, 0x1, 0x8, 0x0, 0x6, 0x9, @btrfs_balance_args_9_1={0x0, 0x6}, 0x5, 0x1}, {0xff, @usage=0xffff, 0x8, 0x6, 0x7, 0x8000000000000000, 0x7, 0x0, 0x2, @limit=0x4, 0x5, 0x78}, {0xa7fa, 0x3, 0x9}}) ioctl$auto_MTDFILEMODE(r1, 0x4d13, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f00000021c0)={r4, &(0x7f0000001040)="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", 0x6, &(0x7f0000002040)="08a5c05f230e59d2a69a95e0cdecd204b450cc6ad92b379f6dab54e464db9396d4440328151904da0311a7aae5584619d7553b1f9280bacab6057a112dd9de6dfbfcdd5067fd91e8791266a772c949541b2ffe2bba0c307c8cb215f1de2cbca0", 0x5, &(0x7f00000020c0)="4e46b391ddb2d11673d72a20420db9a3219cbf3818316cadb0de37618833fed4373c5437d7c76fc170fe4f29e5ebc3cbeb1f65c6bb781317c16e860844c60a64340a8e9f0dcef0cf896d48fba69adc41f20742a85424aaa6b46ab990be41c84a90e70708c1a6f56a8652dca4e2f6a358b09255bcb2dfaf7acbc08ef2febdd022fc8b1bae2ae2b8", &(0x7f0000002180)=0x4}) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000002200), r7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000002240)='/dev/ram5\x00', 0x2, 0x0) syslog$auto_SYSLOG_ACTION_CONSOLE_LEVEL(0x9, &(0x7f0000002280)='\x00', 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000022c0), r8) r9 = waitid$auto_P_ALL(0x0, 0xfffffffa, &(0x7f0000002400)={@siginfo_0_0={0xa, 0x2, 0x3, @_sigfault={&(0x7f0000002300)="0a46ef05fc44fce76a13438d1169de35164ed135c03c1c5d90e702f4496e45f53a4b7da115132dc4f8cd76fd26be52d950cd04b3c93562c03adca7984872a335f47fc1571e736ab025876433a720bafe62a82544dbfaebfb14a7a6a2545b7f47a2b7522ea58f4ae01d77dae32b5928e65dd92e339897f09d3dd0e75ed5b85c65cfcfca8b98405f03f96b7a8eaca1c78563b0545668c69e00e7107ee889e3c189c448a93d8f8a0a8ac6271da18a9b2f7a266b24b4f3fe508945bb3e3cdc1d4d963f3737715a1a00c35424bc1e50cdcf7e3e8e10249574d534038394d06d5759425ca45d01ed2a1cb8bb6d92109ed683f35f2afb39", @_perf={0x591, 0x1, 0xfffffffc}}}}, 0x142a0000, &(0x7f0000002480)={{0x6, 0x9}, {0x2, 0x1}, 0x44d, 0x7, 0x8472, 0xfffffffffffffffc, 0xe3, 0x8, 0x2, 0x80000001, 0x7, 0x765, 0x1, 0x0, 0x0, 0x8}) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002540)=@task_fd_query={r9, r7, 0x2, 0x9, 0x6, 0x6, r5, 0xffff, 0x9}, 0x5) ioctl$auto_TIOCCBRK(r7, 0x5428, &(0x7f0000002600)="8d3f8e0ec1570ecd126fcf8455af680e044a021ea18796a3aace6239de5b76b35400cc4158ce28873783b729d7323e7a1aae3eaa69098f76af0f0e97c9ce75172c561bca9e8ad571754f4efc9b0c36b3bea009cb33862d20029c9454155bb517e8bd9d2db78eea5e5f698dd9d91601159aec2f2d5826674b2a9248ad540d26e87fd0b227223c53a2393f401d2d167f33015c17e26a00db60f56a98b0e795d7b4bddc4a57201af6a9") r10 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f00000026c0), 0x4082, 0x0) timerfd_gettime$auto(r10, &(0x7f0000002700)={{0x622, 0x1000}, {0x800, 0x5}}) sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 7.432211464s ago: executing program 0 (id=2399): r0 = socket(0x26, 0x800, 0x1) connect$auto(r0, &(0x7f00000002c0)=@in={0x2, 0x0, @private=0xa010100}, 0x40000055) connect$auto(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1, 0x30001}, 0x7f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000140)=0x9) ioctl$auto_RNDADDTOENTCNT2(r2, 0x40045201, &(0x7f0000000240)=0xcd80) (async) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r1) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250b0000000c0001006e6c38303231310079ef7a12d4f542f2d13585a6c180537ca66fcedb84bd85dd37"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, "95feb96d94b8a7ae24f6c3afa81f3e188a2d486acfb92de66d"}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4840) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/ifalias\x00', 0xb02, 0x0) (async) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) (async) execve$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x40001, 0x0) ftruncate$auto(0x3, 0x400180200000) mmap$auto(0xa, 0x40009, 0xfffffffffffff227, 0x9b72, 0xffffffffffffffff, 0x28000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) (rerun: 32) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) (async) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x1, 0x100) getsockopt$auto(r6, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83) (async) mmap$auto(0x2, 0xa4c, 0x1000, 0x8000000000000011, 0xffffffffffffffff, 0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc40, 0x0) 7.371179403s ago: executing program 3 (id=2393): ioctl$auto(0x3, 0xc018aa3f, 0xf0b) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r1, 0x0, 0x80000000006) cachestat$auto(r0, 0x0, 0x0, 0x401) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, 0x0, 0x100000a3d9) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop14/rqos/wbt/inflight\x00', 0x900, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r4, r3, 0x0, 0x1000202) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', 0x0) 6.794550033s ago: executing program 2 (id=2394): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x402000d, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x28, r0, 0x1, 0x70bd35, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0xfffffff2, 0x7, 0x7}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) ioctl$auto(r3, 0x89f1, r3) 6.51934374s ago: executing program 0 (id=2395): mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r0, @new_prog_fd, 0x6}, 0x800003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000000c0)) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000280), 0x109040, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.232406397s ago: executing program 2 (id=2396): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000) socket(0x2, 0x2, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000140), 0x20201, 0x0) write$auto(r0, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xc, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x4003) socket(0x15, 0x2, 0x3a) getsockopt$auto_SO_RCVLOWAT(r1, 0x8, 0x12, &(0x7f0000000040)='\\\x00', &(0x7f0000000180)=0xfffffff7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000340)="0800b8e7c69c10e0c15742274204589e770aa7bd9d154e2363b0a92cdbd7e1885256c7756ed772fccd69cc41139b9f49703273217b1e2a030229337f3a304580cdede355c5ece4a729acee9debbc3a43646fa0fad699a1d078e159824acc83f03942968a879c334f1c7d2614a17b53f2b83d8b019f910d0f126e640828b27bdf06a634f84df5eb051358cc117b776f471c8587d3c228884700f14079691331c943ca3e26f07a9fe6d939b52bdae2cc6a93d220ae17abf9c131c5b48742633146d6bbca1f6c0f7cb96042cd6260ae25d85588298579844b1ccb45ef", 0x3}, 0x7) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x9, 0x21005, 0x1fe, 0xeb1, 0x8000000000000024, 0x48000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x100, 0x0) setsockopt$auto_SO_PRIORITY(r2, 0x3, 0xc, &(0x7f0000000200)='\x00', 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x1008000000008011, r3, 0x8000) mmap$auto(0xfff7, 0x7, 0x4, 0x7ff, 0x401, 0x8000000000000000) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r4, 0xc, 0x0, 0x5) 5.211647366s ago: executing program 3 (id=2404): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = timerfd_create$auto_CLOCK_TAI(0xb, 0x8) ioctl$auto_TUNSETOWNER(r3, 0x400454cc, &(0x7f0000000340)=0x80000000) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\f \x00', @ANYRES16=r2, @ANYBLOB="100029bd7000ffdbdf259700000008000a010400000006001a012a00000008003700000000000600ab00ffff000004002d010400d1000400ec00"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) r5 = socketpair$auto(0x4, 0x9, 0x80, &(0x7f0000000300)=0x4) getsockopt$auto_SO_RCVPRIORITY(r5, 0x4, 0x52, &(0x7f0000000380)='\x10!-\x00', &(0x7f00000003c0)=0x81) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@test={0x9, 0x1, 0xa93f, 0x8, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae90, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.907034318s ago: executing program 2 (id=2397): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_KEY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x101, 0x103) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x6, 0x0) 3.906123545s ago: executing program 3 (id=2398): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) (async) socket(0x2, 0x1, 0x84) (async) mmap$auto(0x7, 0x200040009, 0xdf, 0x800000000009b72, 0xffffffffffffffff, 0x8da) (async) r0 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) r1 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0107000000000000000000000000000000000000000000000000000061dc217bd3f375114d43271e9d342d564be237545bdfafb46f8aba762787e7c60ab7d2f6e11acbf2c1e9b0152a318fd0860c8670c9b20553d55953ae536ba7d43ed29c14e4263549f25970030970c5675f3b71188a136a9ef182c73ad9941605a170dc133598fc573f723e8bf58c8f9a4e520119cd9cfb3733e0c5c0ef42af531bae56e5ebe9863a4d2a5801b76da72f7634c7a39d669e6d24255cad300a789468c7de0c24"], 0x14}, 0x1, 0x0, 0x0, 0x20048810}, 0x4804) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) (async) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) (async) socket(0x10, 0x4, 0xffffffc0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r3, 0x0, 0x5) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.893773969s ago: executing program 0 (id=2406): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r2 = io_uring_setup$auto(0x400, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x3, 0xa}, 0x5, 0x3fc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) getrandom$auto(&(0x7f0000000000)='}\x00', 0xffffffff00000000, 0xfffffeff) io_uring_enter$auto(0x3, 0xa84, 0x7ffffffe, 0xa, 0x0, 0x46) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="5de1"], 0x1ac}}, 0x40000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r3 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) socket(0xa, 0x5, 0x0) r4 = socket(0xa, 0x2, 0x88) close_range$auto(r3, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) r5 = open(0x0, 0x22240, 0x154) socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r4, 0x100, @old_prog_fd=r4}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r6, 0xbb8, @value, 0x3}, 0xcd) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8933, r2) 2.907503381s ago: executing program 3 (id=2400): r0 = socket(0xc, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000090}, 0x24008054) read$auto(0xffffffffffffffff, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x23, 0xa, 0x100) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$auto(r1, 0x0, 0x3, 0x2000c7d7) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./file1\x00', 0x60082, 0x11a) getdents64$auto(r2, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000080)={0x2, 0x4, 0x7}, 0xb, 0x0) landlock_add_rule$auto(r3, 0x1, 0x0, 0x0) lsm_set_self_attr$auto(0x14, &(0x7f0000000140)={0x68, 0xd, 0x80, 0x7f, "c92e8e138d5bc09bae4fdf2d6bc795f146fe1e34dc8912a095fe1caaa0fadf7009be74d3663ecd2d0c23e17cffc0e4ab7a75236da1d74b8d09942acf68be3449efb301fee1d680691db2f2a28728623518a14c747800e6927fc305499eff9310d45e9449204fe9ca6fa9af985c5a52ef80c3ebc02995930750cd4925a00757"}, 0x7e, 0x0) 2.79346287s ago: executing program 0 (id=2401): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8f, r0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) sendmsg$auto_ILA_CMD_ADD(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r4, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x1, 0xfffffc01, 0x4, &(0x7f00000002c0)="9cb0e925b6c933c1e84975dc16630bb8b0f266d7793d8229a9d6a5dfa1591faeb97caa277628e870ede4c8395f647b1d493e45805b63a07812b75f6cd4492fdea9bdc15d4023d9dd883e34e03b76d722485bc83c1485c188d0dd8520707151", 0x4) 2.687084563s ago: executing program 3 (id=2402): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) r0 = open(0x0, 0x161342, 0x100) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)={0x6f4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x6d2, 0x1, 0x0, 0x1, [@generic="31d94103c454add132ce9feafc1b75ef0a7676aa02a82367f41750c954716048cbe40163c7fbb158747c74fc0ae4583578f61f8c4c42414ce73321b8fff12bf826edd06c8df713a8670cf297919fa893dcae15fd6a2b8f4ebeb1d53db3d8a8c3614303a6728a6c2d06db37b5fd83b592b1aa7d3f128b4ed3f0e72e625f7e283739dc5dd846f4afcae250da4d995da31a555a7d758033fa38a07b3ba81fef3c600e60e4bb81df3327f4ca943eb2b6767525b6ef2c3926", @nested={0x616, 0xff, 0x0, 0x1, [@nested={0x319, 0xab, 0x0, 0x1, [@generic="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", @typed={0xef, 0x6a, 0x0, 0x0, @binary="9b14fd116d78d3df15ce475df930911032a395d94dfb8862857c8f10446c69479d4feb2010f5b5ed5cd0ca0fb373d64c93e2218832c1d62a44691917bf244dd4732a7a984cb8996675f01f2e97fbaf429940f10661c13d414256eb0e2d5362684ece17e773898e65cda121249bd663bd091d7f0bcc67907b7aad61b12af62345f0a9c57c4422771d9f61c5787cbb7b9f434c1dc0e8e23d1d69d26df8eca2a396a4271b03c7ad875339566ffcebdc49192ad1441913b944d74e6a0c4a09ed9a556b301c050ff99c0beb9728ece86445df1cb5565235ac85fdcc442cf3214b30554c11dcae81cb60d0827f6b"}, @generic="847ed66277f388b0f36ba799a0e25e823483e333d2efbea404de6122e3e22b2f9eba6f9bd9a5daba4d8445e1afc243bbafe3a8659bcf7849b3dfee8f6ca4a324fa283115bfbf973e371e636d568e2ba61157a1bb2df976a57f123907fb845c3558e5fc777fe08d310a2fd2e40d71d4f9896c2a2cf65cccd02548b7b5159f1412ea79287aef4ee41ea9340f7ff69e08d9c103f00df1e2e177c13d4575933c32019cc3455c0d7408ecd74930b603259ed4ce790425055ae0af445f227bf52dff4e57a097657cb2275d", @nested={0x4, 0x12c}, @generic]}, @generic="d1daceef7dcbd78adc163f297fcc931903238853c05333e84ec4727111dcef0647d3d8381dfc08ba6f54de63fc5730fdc2a981db081d428a4906f6bdaaffe1e352e3949cd0859a59184aa6351c3c7be35e361b961ebad9b59d25297509a38a7740be05b4931cef6dbc4eea2d2c7984e541304758b56d658b7c35", @nested={0xe5, 0xd5, 0x0, 0x1, [@generic="1f199942bb1f281753c94d59d1e72070326952754a5ff65b79672802761da3788f62b926b558e14960368c241f5d3c64fd0a891d30ddabb5e8b9e783564232eafa4935b1e31b274a91d9fd69c267b05c7c3510fdf674eaf90c05e02b6545bfdec5d5dbc662469c369b538d76de5e7bce653f1321f3e280c97e654b0c34857294ee0bae1a22795ce47d1dc071f520be9942471cad5433de8b45440fd47ec2cba0dd141bcb8ce1db437ed5dba8ea697c6039", @nested={0x4, 0x115}, @nested={0x4, 0xcf}, @generic="b749ead1ed3900cded8aa953b55592cd44296347a415384c740d0f612222f6b93596acc2711451c6"]}, @nested={0x189, 0xe7, 0x0, 0x1, [@nested={0x4, 0x97}, @generic="d7fccab6954eade135024c6b3179c32df6b5eb303cfd16be2ba2042c1a251943dfbe49d7c4bad8525b37c755f52ea195284ec6f9c8c282378c2f1f49ddc71ce2d44c263e1182e943419c0462ab5ac1a65dcae0f9ee1e9d084278ac8fde83a6f429dee9ee9c3a3f484aef02d1232f17c27e5208a215f37066478eba0370d80129fd8ee542aa3c5e3397df189ffc04f01e22c39254ad27215b5d87a42a215d20b5d475fb12fa1d979a1ae23920266c9120a3a150", @nested={0x4, 0x13b}, @typed={0xc, 0xaf, 0x0, 0x0, @u64=0x3}, @generic="321bc59fdcb6cba57866bf92dfd45e605e2d86d0f8d68c805d5cd3d39434d2a83bde809ba9314ece2a3bc516801cc4dd956aee9667002d1fbd8ecefa2d691495bb4fae4b311f327b8e1b9612679500a8d914224cd31bd198e03f2a568f2ebcce57ff07dd794df541c8f31640225a1a190d90f6412177ef9d17ac55ad9d337113eaff1668be33085cdbdfbf82d3721570aa24b1e00e8fcf7195eef7eed4df205b51e0600c3fb2ceaa0415b72a047877f80b76270052576e70d0abeae01b8d"]}, @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x9}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x2b, 0x0, 0x1, [@generic, @nested={0x4, 0x126}]}]}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0xfffffffffffffffb, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x81}]}, 0x28}}, 0x4001) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x6, 0x3, &(0x7f0000000000)='!-]*\x00', &(0x7f0000000040)=0x8000) ioctl$auto_UI_SET_EVBIT(r0, 0x40045564, 0x0) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r7, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0xc000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) ioperm$auto(0x7, 0x86, 0x9) r8 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) dup2$auto(r8, r8) madvise$auto(0x0, 0x200007, 0x19) r9 = eventfd$auto(0x0) write$auto_evdev_fops_evdev(r9, &(0x7f0000000040)="399817b6b7dfaa50dd9e5ff6284478019d6fcd22ccc1b0b2ae602e2bc8d395", 0x1f) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x3, 0x1, 0x800000ffff, 0xd8f8, 0x7, 0x200000000027fff) 2.334319014s ago: executing program 2 (id=2403): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0xf26, 0x7fd, 0x45ba, 0x8000000080000011, r0, 0x1004) r1 = epoll_create$auto(0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/tty16\x00', 0x2200, 0x0) socket(0x1d, 0x3, 0x40) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80040, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x5, 0x1, 0x0, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r4) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(r3, &(0x7f00000003c0)='\x13`ev/audio1\x00\x8f\\\xdcH\x81\x8b\x91\x84b\x1f\x1d\tc\xdb\x96n\"\xf4Y\xe3]\xae\xfd\x83\x06\xe0U\xf4r\xd9\x04\x11\xa9\x9a\xabM\xf8t/\x1d\x1c0+Oq\xca\xe21n?\a\"\xeb\x1dq\xf2!\rg\xb8\xedH\x9a\xc4\v\xe2\x921lg\t\xb7\xbb\x89d\xe0q\xfc\xf4\xb9\x13J\x1e\xf2\x16=\xef\xdc>@\xdb\xd3%1S\"\'\xb2\xaf\xa1\x13-_\xe0\xd7\xdf\xdd;\n\xefqFGI\xc5\xa4\x9f\xf1\xe4\xaf\xe2\x02\x92\\\t\xa2I\xf1M\x85=!\xeci\x98\xce\xc3\xdc\"\x19\x8b\x87\xfc\x96,*1\xf3\"y\xae\x86\x1a*\xcb\xc6\x00\x1a\xf8\t\xb3\x1a\xff\x8a\xc8\xe6r\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x3, 0x3, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x3, 0x101, 0x80000023, 0x7, 0x0, 0xd, 0xd, 0x1]}, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = getpid() (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, 0x0, 0x0) (async) mmap$auto(0xa, 0x2000a, 0x8, 0xeb1, r2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x3) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2000, 0x0) (async) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x1, 0x8000000000000000, 0x0) (async) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r8, &(0x7f0000000000)=""/194, 0xc2) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x80000000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000380)={0x4, 0xfffffffc, 0x80, 0x8001, 0x10, 0xfc}) (async) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) 707.603829ms ago: executing program 2 (id=2405): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = timerfd_create$auto_CLOCK_TAI(0xb, 0x8) ioctl$auto_TUNSETOWNER(r3, 0x400454cc, &(0x7f0000000340)=0x80000000) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\f \x00', @ANYRES16=r2, @ANYBLOB="100029bd7000ffdbdf259700000008000a010400000006001a012a00000008003700000000000600ab00ffff000004002d010400d1000400ec00"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) r5 = socketpair$auto(0x4, 0x9, 0x80, &(0x7f0000000300)=0x4) getsockopt$auto_SO_RCVPRIORITY(r5, 0x4, 0x52, &(0x7f0000000380)='\x10!-\x00', &(0x7f00000003c0)=0x81) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@test={0x9, 0x1, 0xa93f, 0x8, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae90, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 3 (id=2407): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x123240, 0x100) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x1000000000007fff, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x400000000003, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8003) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/211, 0xd3) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 0 [ 600.532393][T13538] RAX: ffffffffffffffda RBX: 00007f88afbc5fa0 RCX: 00007f88af98ebe9 [ 600.532412][T13538] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 600.532428][T13538] RBP: 00007f88b072d090 R08: 0000000000000000 R09: 0000000000000000 [ 600.532444][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.532460][T13538] R13: 00007f88afbc6038 R14: 00007f88afbc5fa0 R15: 00007ffc73f66788 [ 600.532499][T13538] [ 600.532511][T13538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.000543][T13543] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1546'. [ 601.341560][T13553] FAULT_INJECTION: forcing a failure. [ 601.341560][T13553] name failslab, interval 1, probability 0, space 0, times 0 [ 601.355643][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.0.1550 Tainted: G U syzkaller #0 PREEMPT(full) [ 601.355692][T13553] Tainted: [U]=USER [ 601.355702][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.355718][T13553] Call Trace: [ 601.355728][T13553] [ 601.355740][T13553] dump_stack_lvl+0x16c/0x1f0 [ 601.355789][T13553] should_fail_ex+0x512/0x640 [ 601.355833][T13553] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 601.355871][T13553] should_failslab+0xc2/0x120 [ 601.355908][T13553] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 601.355945][T13553] ? __d_alloc+0x32/0xae0 [ 601.355983][T13553] __d_alloc+0x32/0xae0 [ 601.356022][T13553] path_from_stashed+0x427/0x750 [ 601.356055][T13553] ? do_raw_spin_unlock+0x172/0x230 [ 601.356105][T13553] ns_get_path+0x5f/0x80 [ 601.356135][T13553] proc_ns_get_link+0x121/0x230 [ 601.356169][T13553] ? __pfx_proc_ns_get_link+0x10/0x10 [ 601.356206][T13553] ? try_to_unlazy+0x2a9/0x660 [ 601.356238][T13553] ? __pfx_proc_ns_get_link+0x10/0x10 [ 601.356273][T13553] step_into+0x1a2c/0x2270 [ 601.356302][T13553] ? find_held_lock+0x2b/0x80 [ 601.356335][T13553] ? __pfx_step_into+0x10/0x10 [ 601.356377][T13553] ? lookup_fast+0x156/0x610 [ 601.356412][T13553] path_openat+0x6db/0x2cb0 [ 601.356457][T13553] ? __pfx_path_openat+0x10/0x10 [ 601.356499][T13553] do_filp_open+0x20b/0x470 [ 601.356532][T13553] ? __pfx_do_filp_open+0x10/0x10 [ 601.356595][T13553] ? alloc_fd+0x471/0x7d0 [ 601.356639][T13553] do_sys_openat2+0x11b/0x1d0 [ 601.356690][T13553] ? __pfx_do_sys_openat2+0x10/0x10 [ 601.356739][T13553] ? __fget_files+0x20e/0x3c0 [ 601.356778][T13553] __x64_sys_openat+0x174/0x210 [ 601.356823][T13553] ? __pfx___x64_sys_openat+0x10/0x10 [ 601.356882][T13553] do_syscall_64+0xcd/0x490 [ 601.356927][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.356954][T13553] RIP: 0033:0x7ff1d078d550 [ 601.356977][T13553] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 601.357003][T13553] RSP: 002b:00007ff1d15fcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 601.357029][T13553] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff1d078d550 [ 601.357047][T13553] RDX: 0000000000000000 RSI: 00007ff1d15fcfa0 RDI: 00000000ffffff9c [ 601.357064][T13553] RBP: 00007ff1d15fcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 601.357078][T13553] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 601.357092][T13553] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 601.357129][T13553] [ 602.766893][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1555'. [ 603.588611][T13601] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1561'. [ 603.599447][T13600] netlink: 274 bytes leftover after parsing attributes in process `syz.3.1561'. [ 604.026843][ T30] audit: type=1800 audit(4294967319.530:20): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1555" name="dbroot" dev="configfs" ino=62002 res=0 errno=0 [ 604.932749][T13620] FAULT_INJECTION: forcing a failure. [ 604.932749][T13620] name failslab, interval 1, probability 0, space 0, times 0 [ 605.014302][T13620] CPU: 1 UID: 0 PID: 13620 Comm: syz.1.1565 Tainted: G U syzkaller #0 PREEMPT(full) [ 605.014351][T13620] Tainted: [U]=USER [ 605.014362][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.014378][T13620] Call Trace: [ 605.014388][T13620] [ 605.014400][T13620] dump_stack_lvl+0x16c/0x1f0 [ 605.014450][T13620] should_fail_ex+0x512/0x640 [ 605.014493][T13620] ? fs_reclaim_acquire+0xae/0x150 [ 605.014539][T13620] ? tomoyo_encode2+0x100/0x3e0 [ 605.014578][T13620] should_failslab+0xc2/0x120 [ 605.014615][T13620] __kmalloc_noprof+0xd2/0x510 [ 605.014648][T13620] ? d_absolute_path+0x136/0x1a0 [ 605.014697][T13620] tomoyo_encode2+0x100/0x3e0 [ 605.014744][T13620] tomoyo_encode+0x29/0x50 [ 605.014789][T13620] tomoyo_realpath_from_path+0x18f/0x6e0 [ 605.014845][T13620] tomoyo_path_number_perm+0x245/0x580 [ 605.014881][T13620] ? tomoyo_path_number_perm+0x237/0x580 [ 605.014923][T13620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 605.014963][T13620] ? find_held_lock+0x2b/0x80 [ 605.015035][T13620] ? find_held_lock+0x2b/0x80 [ 605.015185][T13620] ? hook_file_ioctl_common+0x145/0x410 [ 605.015236][T13620] ? __fget_files+0x20e/0x3c0 [ 605.015277][T13620] security_file_ioctl+0x9b/0x240 [ 605.015315][T13620] __x64_sys_ioctl+0xb7/0x210 [ 605.015362][T13620] do_syscall_64+0xcd/0x490 [ 605.015410][T13620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.015439][T13620] RIP: 0033:0x7f347938ebe9 [ 605.015464][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.015493][T13620] RSP: 002b:00007f347a264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.015522][T13620] RAX: ffffffffffffffda RBX: 00007f34795c6090 RCX: 00007f347938ebe9 [ 605.015541][T13620] RDX: 0000000000000000 RSI: 000000004004743c RDI: 0000000000000003 [ 605.015559][T13620] RBP: 00007f347a264090 R08: 0000000000000000 R09: 0000000000000000 [ 605.015576][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.015593][T13620] R13: 00007f34795c6128 R14: 00007f34795c6090 R15: 00007ffccf409f68 [ 605.015633][T13620] [ 605.017573][T13620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.081831][T13622] type: 262143 invalid [ 605.714055][T13629] FAULT_INJECTION: forcing a failure. [ 605.714055][T13629] name failslab, interval 1, probability 0, space 0, times 0 [ 605.749768][T13629] CPU: 0 UID: 0 PID: 13629 Comm: syz.1.1570 Tainted: G U syzkaller #0 PREEMPT(full) [ 605.749814][T13629] Tainted: [U]=USER [ 605.749823][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.749839][T13629] Call Trace: [ 605.749848][T13629] [ 605.749859][T13629] dump_stack_lvl+0x16c/0x1f0 [ 605.749908][T13629] should_fail_ex+0x512/0x640 [ 605.749949][T13629] ? fs_reclaim_acquire+0xae/0x150 [ 605.749995][T13629] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 605.750036][T13629] should_failslab+0xc2/0x120 [ 605.750074][T13629] __kmalloc_noprof+0xd2/0x510 [ 605.750129][T13629] tomoyo_realpath_from_path+0xc2/0x6e0 [ 605.750180][T13629] tomoyo_check_open_permission+0x2ab/0x3c0 [ 605.750218][T13629] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 605.750300][T13629] ? do_raw_spin_lock+0x12c/0x2b0 [ 605.750354][T13629] tomoyo_file_open+0x6b/0x90 [ 605.750384][T13629] security_file_open+0x84/0x1e0 [ 605.750426][T13629] do_dentry_open+0x596/0x1530 [ 605.750475][T13629] vfs_open+0x82/0x3f0 [ 605.750524][T13629] path_openat+0x1de4/0x2cb0 [ 605.750574][T13629] ? __pfx_path_openat+0x10/0x10 [ 605.750619][T13629] do_filp_open+0x20b/0x470 [ 605.750654][T13629] ? __pfx_do_filp_open+0x10/0x10 [ 605.750720][T13629] ? alloc_fd+0x471/0x7d0 [ 605.750765][T13629] do_sys_openat2+0x11b/0x1d0 [ 605.750808][T13629] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.750856][T13629] ? __fget_files+0x20e/0x3c0 [ 605.750896][T13629] __x64_sys_openat+0x174/0x210 [ 605.750941][T13629] ? __pfx___x64_sys_openat+0x10/0x10 [ 605.750982][T13629] ? ksys_write+0x1ac/0x250 [ 605.751028][T13629] do_syscall_64+0xcd/0x490 [ 605.751075][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.751113][T13629] RIP: 0033:0x7f347938d550 [ 605.751137][T13629] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 605.751163][T13629] RSP: 002b:00007f347a284f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 605.751191][T13629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f347938d550 [ 605.751210][T13629] RDX: 0000000000000000 RSI: 00007f347a284fa0 RDI: 00000000ffffff9c [ 605.751226][T13629] RBP: 00007f347a284fa0 R08: 0000000000000000 R09: 0000000000000000 [ 605.751243][T13629] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 605.751259][T13629] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 605.751297][T13629] [ 605.751308][T13629] ERROR: Out of memory at tomoyo_realpath_from_path. [ 606.237555][ T5186] Bluetooth: hci2: Malformed Event: 0x02 [ 608.028411][T13659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1579'. [ 609.091470][T13682] FAULT_INJECTION: forcing a failure. [ 609.091470][T13682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.110223][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.1.1586 Tainted: G U syzkaller #0 PREEMPT(full) [ 609.110272][T13682] Tainted: [U]=USER [ 609.110281][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.110296][T13682] Call Trace: [ 609.110306][T13682] [ 609.110316][T13682] dump_stack_lvl+0x16c/0x1f0 [ 609.110368][T13682] should_fail_ex+0x512/0x640 [ 609.110419][T13682] _copy_to_user+0x32/0xd0 [ 609.110455][T13682] simple_read_from_buffer+0xcb/0x170 [ 609.110488][T13682] proc_fail_nth_read+0x197/0x240 [ 609.110522][T13682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.110558][T13682] ? rw_verify_area+0xcf/0x6c0 [ 609.110589][T13682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.110621][T13682] vfs_read+0x1e4/0xcf0 [ 609.110660][T13682] ? __pfx___mutex_lock+0x10/0x10 [ 609.110705][T13682] ? __pfx_vfs_read+0x10/0x10 [ 609.110749][T13682] ? __fget_files+0x20e/0x3c0 [ 609.110793][T13682] ksys_read+0x12a/0x250 [ 609.110826][T13682] ? __pfx_ksys_read+0x10/0x10 [ 609.110858][T13682] ? fput+0x9b/0xd0 [ 609.110905][T13682] do_syscall_64+0xcd/0x490 [ 609.110951][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.110980][T13682] RIP: 0033:0x7f347938d5fc [ 609.111005][T13682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 609.111041][T13682] RSP: 002b:00007f347a285030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.111069][T13682] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938d5fc [ 609.111089][T13682] RDX: 000000000000000f RSI: 00007f347a2850a0 RDI: 0000000000000004 [ 609.111107][T13682] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 609.111124][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.111141][T13682] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 609.111186][T13682] [ 609.816925][T13691] FAULT_INJECTION: forcing a failure. [ 609.816925][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 609.844642][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.3.1589 Tainted: G U syzkaller #0 PREEMPT(full) [ 609.844691][T13691] Tainted: [U]=USER [ 609.844701][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.844717][T13691] Call Trace: [ 609.844727][T13691] [ 609.844738][T13691] dump_stack_lvl+0x16c/0x1f0 [ 609.844788][T13691] should_fail_ex+0x512/0x640 [ 609.844833][T13691] ? fs_reclaim_acquire+0xae/0x150 [ 609.844879][T13691] ? tomoyo_encode2+0x100/0x3e0 [ 609.844918][T13691] should_failslab+0xc2/0x120 [ 609.844957][T13691] __kmalloc_noprof+0xd2/0x510 [ 609.845001][T13691] tomoyo_encode2+0x100/0x3e0 [ 609.845048][T13691] tomoyo_encode+0x29/0x50 [ 609.845096][T13691] tomoyo_realpath_from_path+0x18f/0x6e0 [ 609.845151][T13691] tomoyo_check_open_permission+0x2ab/0x3c0 [ 609.845190][T13691] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 609.845272][T13691] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.845326][T13691] tomoyo_file_open+0x6b/0x90 [ 609.845357][T13691] security_file_open+0x84/0x1e0 [ 609.845399][T13691] do_dentry_open+0x596/0x1530 [ 609.845449][T13691] vfs_open+0x82/0x3f0 [ 609.845496][T13691] path_openat+0x1de4/0x2cb0 [ 609.845547][T13691] ? __pfx_path_openat+0x10/0x10 [ 609.845592][T13691] do_filp_open+0x20b/0x470 [ 609.845628][T13691] ? __pfx_do_filp_open+0x10/0x10 [ 609.845694][T13691] ? alloc_fd+0x471/0x7d0 [ 609.845738][T13691] do_sys_openat2+0x11b/0x1d0 [ 609.845780][T13691] ? __pfx_do_sys_openat2+0x10/0x10 [ 609.845828][T13691] ? __fget_files+0x20e/0x3c0 [ 609.845867][T13691] __x64_sys_openat+0x174/0x210 [ 609.845911][T13691] ? __pfx___x64_sys_openat+0x10/0x10 [ 609.845954][T13691] ? ksys_write+0x1ac/0x250 [ 609.846003][T13691] do_syscall_64+0xcd/0x490 [ 609.846049][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.846087][T13691] RIP: 0033:0x7f88af98d550 [ 609.846111][T13691] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 609.846141][T13691] RSP: 002b:00007f88b072cf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.846169][T13691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f88af98d550 [ 609.846187][T13691] RDX: 0000000000000000 RSI: 00007f88b072cfa0 RDI: 00000000ffffff9c [ 609.846205][T13691] RBP: 00007f88b072cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 609.846222][T13691] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 609.846239][T13691] R13: 00007f88afbc6038 R14: 00007f88afbc5fa0 R15: 00007ffc73f66788 [ 609.846278][T13691] [ 609.846309][T13691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.333636][T13704] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 612.177990][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 612.233184][T13741] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1600'. [ 613.252080][T13753] FAULT_INJECTION: forcing a failure. [ 613.252080][T13753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.265517][T13753] CPU: 1 UID: 0 PID: 13753 Comm: syz.3.1603 Tainted: G U syzkaller #0 PREEMPT(full) [ 613.265563][T13753] Tainted: [U]=USER [ 613.265573][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.265589][T13753] Call Trace: [ 613.265598][T13753] [ 613.265609][T13753] dump_stack_lvl+0x16c/0x1f0 [ 613.265658][T13753] should_fail_ex+0x512/0x640 [ 613.265724][T13753] _copy_to_user+0x32/0xd0 [ 613.265759][T13753] simple_read_from_buffer+0xcb/0x170 [ 613.265793][T13753] proc_fail_nth_read+0x197/0x240 [ 613.265826][T13753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.265860][T13753] ? rw_verify_area+0xcf/0x6c0 [ 613.265890][T13753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.265928][T13753] vfs_read+0x1e4/0xcf0 [ 613.265966][T13753] ? __pfx___mutex_lock+0x10/0x10 [ 613.266010][T13753] ? __pfx_vfs_read+0x10/0x10 [ 613.266054][T13753] ? __fget_files+0x20e/0x3c0 [ 613.266100][T13753] ksys_read+0x12a/0x250 [ 613.266133][T13753] ? __pfx_ksys_read+0x10/0x10 [ 613.266178][T13753] do_syscall_64+0xcd/0x490 [ 613.266225][T13753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.266254][T13753] RIP: 0033:0x7f88af98d5fc [ 613.266277][T13753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 613.266305][T13753] RSP: 002b:00007f88b072d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 613.266340][T13753] RAX: ffffffffffffffda RBX: 00007f88afbc5fa0 RCX: 00007f88af98d5fc [ 613.266359][T13753] RDX: 000000000000000f RSI: 00007f88b072d0a0 RDI: 0000000000000005 [ 613.266377][T13753] RBP: 00007f88b072d090 R08: 0000000000000000 R09: 0000000000000000 [ 613.266394][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.266411][T13753] R13: 00007f88afbc6038 R14: 00007f88afbc5fa0 R15: 00007ffc73f66788 [ 613.266451][T13753] [ 613.757883][T13744] ptrace attach of "./syz-executor exec"[5867] was attempted by ""[13744] [ 616.014356][T13773] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 621.222654][T13849] FAULT_INJECTION: forcing a failure. [ 621.222654][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 621.237568][T13849] CPU: 0 UID: 0 PID: 13849 Comm: syz.0.1627 Tainted: G U syzkaller #0 PREEMPT(full) [ 621.237617][T13849] Tainted: [U]=USER [ 621.237627][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.237643][T13849] Call Trace: [ 621.237655][T13849] [ 621.237667][T13849] dump_stack_lvl+0x16c/0x1f0 [ 621.237735][T13849] should_fail_ex+0x512/0x640 [ 621.237780][T13849] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 621.237820][T13849] should_failslab+0xc2/0x120 [ 621.237858][T13849] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 621.237890][T13849] ? __kernfs_new_node+0xd2/0x8e0 [ 621.237947][T13849] __kernfs_new_node+0xd2/0x8e0 [ 621.237984][T13849] ? kernfs_add_one+0x37d/0x840 [ 621.238021][T13849] ? __pfx___kernfs_new_node+0x10/0x10 [ 621.238065][T13849] ? find_held_lock+0x2b/0x80 [ 621.238094][T13849] ? kernfs_root+0xee/0x2a0 [ 621.238138][T13849] kernfs_new_node+0x13c/0x1e0 [ 621.238185][T13849] __kernfs_create_file+0x53/0x350 [ 621.238252][T13849] sysfs_add_file_mode_ns+0x207/0x3c0 [ 621.238302][T13849] sysfs_create_file_ns+0x13d/0x1d0 [ 621.238341][T13849] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 621.238376][T13849] ? down_read+0x13d/0x480 [ 621.238407][T13849] ? __pfx___up_read+0x10/0x10 [ 621.238453][T13849] ? acpi_device_notify+0x351/0x480 [ 621.238505][T13849] device_create_file+0xf2/0x1e0 [ 621.238547][T13849] device_add+0x2bf/0x1aa0 [ 621.238581][T13849] ? __pfx___debug_object_init+0x10/0x10 [ 621.238619][T13849] ? alloc_workqueue_noprof+0x198/0x200 [ 621.238661][T13849] ? __pfx_device_add+0x10/0x10 [ 621.238710][T13849] nfc_register_device+0x41/0x3c0 [ 621.238761][T13849] nci_register_device+0x7f1/0xb80 [ 621.238803][T13849] ? __pfx_nci_register_device+0x10/0x10 [ 621.238850][T13849] ? lockdep_init_map_type+0x5c/0x280 [ 621.238900][T13849] virtual_ncidev_open+0x141/0x220 [ 621.238941][T13849] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 621.238978][T13849] misc_open+0x35d/0x420 [ 621.239013][T13849] ? __pfx_misc_open+0x10/0x10 [ 621.239046][T13849] chrdev_open+0x231/0x6a0 [ 621.239083][T13849] ? __pfx_apparmor_file_open+0x10/0x10 [ 621.239119][T13849] ? __pfx_chrdev_open+0x10/0x10 [ 621.239169][T13849] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 621.239220][T13849] do_dentry_open+0x97f/0x1530 [ 621.239261][T13849] ? __pfx_chrdev_open+0x10/0x10 [ 621.239309][T13849] vfs_open+0x82/0x3f0 [ 621.239371][T13849] path_openat+0x1de4/0x2cb0 [ 621.239426][T13849] ? __pfx_path_openat+0x10/0x10 [ 621.239475][T13849] do_filp_open+0x20b/0x470 [ 621.239513][T13849] ? __pfx_do_filp_open+0x10/0x10 [ 621.239583][T13849] ? alloc_fd+0x471/0x7d0 [ 621.239630][T13849] do_sys_openat2+0x11b/0x1d0 [ 621.239684][T13849] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.239732][T13849] ? find_held_lock+0x2b/0x80 [ 621.239775][T13849] __x64_sys_openat+0x174/0x210 [ 621.239822][T13849] ? __pfx___x64_sys_openat+0x10/0x10 [ 621.239907][T13849] do_syscall_64+0xcd/0x490 [ 621.239958][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.239989][T13849] RIP: 0033:0x7ff1d078ebe9 [ 621.240016][T13849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.240045][T13849] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 621.240083][T13849] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 621.240103][T13849] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 621.240122][T13849] RBP: 00007ff1d0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 621.240140][T13849] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 621.240158][T13849] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 621.240203][T13849] [ 625.011552][T13906] netlink: 'syz.3.1641': attribute type 27 has an invalid length. [ 625.019566][T13906] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1641'. [ 625.085364][T13907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1636'. [ 625.671736][T13907] veth0_macvtap: left promiscuous mode [ 627.148027][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1644'. [ 627.736174][T13944] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 629.732856][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.739326][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.769544][ T30] audit: type=1800 audit(4294967346.260:21): pid=13993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1659" name="features" dev="configfs" ino=63294 res=0 errno=0 [ 632.449032][T14025] mkiss: ax0: crc mode is auto. [ 632.829842][T14033] bridge0: port 4(veth1_macvtap) entered blocking state [ 632.837866][T14033] bridge0: port 4(veth1_macvtap) entered disabled state [ 632.885950][T14033] veth1_macvtap: entered allmulticast mode [ 632.897367][T14033] veth1_macvtap: left allmulticast mode [ 633.876694][T14050] netlink: 138 bytes leftover after parsing attributes in process `syz.3.1676'. [ 637.852360][T14135] random: crng reseeded on system resumption [ 639.464645][T14154] input: f as /devices/virtual/input/input40 [ 640.617140][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 642.185275][T14201] FAULT_INJECTION: forcing a failure. [ 642.185275][T14201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.231062][T14201] CPU: 0 UID: 0 PID: 14201 Comm: syz.0.1713 Tainted: G U syzkaller #0 PREEMPT(full) [ 642.231110][T14201] Tainted: [U]=USER [ 642.231119][T14201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.231135][T14201] Call Trace: [ 642.231144][T14201] [ 642.231156][T14201] dump_stack_lvl+0x16c/0x1f0 [ 642.231203][T14201] should_fail_ex+0x512/0x640 [ 642.231252][T14201] _copy_from_user+0x2e/0xd0 [ 642.231283][T14201] copy_msghdr_from_user+0x98/0x160 [ 642.231327][T14201] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 642.231390][T14201] ___sys_sendmsg+0xfe/0x1d0 [ 642.231435][T14201] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.231526][T14201] __sys_sendmsg+0x16d/0x220 [ 642.231570][T14201] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.231638][T14201] do_syscall_64+0xcd/0x490 [ 642.231689][T14201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.231717][T14201] RIP: 0033:0x7ff1d078ebe9 [ 642.231740][T14201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.231768][T14201] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.231805][T14201] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 642.231824][T14201] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 642.231841][T14201] RBP: 00007ff1d15fd090 R08: 0000000000000000 R09: 0000000000000000 [ 642.231857][T14201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.231875][T14201] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 642.231910][T14201] [ 643.075345][T14209] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 643.315671][T14209] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 643.394316][T14209] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 643.660703][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 643.692530][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 643.703506][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 643.715600][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 643.755982][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 644.065025][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 644.146571][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 644.315013][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 644.386997][T14221] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[14221] [ 644.417639][T11606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.498760][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.509155][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.531166][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.554778][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.574748][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 644.831187][T11606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.136246][T11606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.843619][T11606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.694128][ T51] Bluetooth: hci2: command tx timeout [ 646.845930][T14274] FAULT_INJECTION: forcing a failure. [ 646.845930][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 646.890699][T14274] CPU: 0 UID: 0 PID: 14274 Comm: syz.1.1729 Tainted: G U syzkaller #0 PREEMPT(full) [ 646.890748][T14274] Tainted: [U]=USER [ 646.890758][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.890774][T14274] Call Trace: [ 646.890784][T14274] [ 646.890795][T14274] dump_stack_lvl+0x16c/0x1f0 [ 646.890853][T14274] should_fail_ex+0x512/0x640 [ 646.890895][T14274] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 646.890936][T14274] should_failslab+0xc2/0x120 [ 646.890972][T14274] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 646.891006][T14274] ? __alloc_skb+0x2b2/0x380 [ 646.891052][T14274] __alloc_skb+0x2b2/0x380 [ 646.891089][T14274] ? __pfx___alloc_skb+0x10/0x10 [ 646.891132][T14274] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 646.891174][T14274] ? __lock_acquire+0xb97/0x1ce0 [ 646.891217][T14274] netlink_alloc_large_skb+0x69/0x130 [ 646.891264][T14274] netlink_sendmsg+0x6a1/0xdd0 [ 646.891314][T14274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.891362][T14274] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 646.891402][T14274] ____sys_sendmsg+0xa95/0xc70 [ 646.891436][T14274] ? copy_msghdr_from_user+0x10a/0x160 [ 646.891479][T14274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.891530][T14274] ___sys_sendmsg+0x134/0x1d0 [ 646.891575][T14274] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.891664][T14274] __sys_sendmsg+0x16d/0x220 [ 646.891706][T14274] ? __pfx___sys_sendmsg+0x10/0x10 [ 646.891774][T14274] do_syscall_64+0xcd/0x490 [ 646.891826][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.891855][T14274] RIP: 0033:0x7f347938ebe9 [ 646.891879][T14274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.891907][T14274] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.891936][T14274] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 646.891954][T14274] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 646.891971][T14274] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 646.891989][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.892004][T14274] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 646.892041][T14274] [ 647.254916][T14244] chnl_net:caif_netlink_parms(): no params data found [ 647.330411][T11606] team0: left allmulticast mode [ 647.342517][T11606] team_slave_0: left allmulticast mode [ 647.368700][T11606] team_slave_1: left allmulticast mode [ 647.401855][T11606] team0: left promiscuous mode [ 647.440748][T11606] team_slave_0: left promiscuous mode [ 647.468352][T11606] team_slave_1: left promiscuous mode [ 647.487934][T11606] bridge0: port 3(team0) entered disabled state [ 647.545181][T11606] bridge_slave_1: left allmulticast mode [ 647.557874][T11606] bridge_slave_1: left promiscuous mode [ 647.609700][T11606] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.635093][T11606] bridge_slave_0: left allmulticast mode [ 647.640810][T11606] bridge_slave_0: left promiscuous mode [ 647.654275][T11606] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.215597][T11606] erspan0 (unregistering): left allmulticast mode [ 648.776432][ T51] Bluetooth: hci2: command tx timeout [ 648.786224][T11606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.797865][T11606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.808591][T11606] bond0 (unregistering): Released all slaves [ 648.993256][T11606] ovs_: left promiscuous mode [ 649.046513][T11606] HfR: left promiscuous mode [ 649.656567][T14323] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 649.701673][T14244] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.735768][T14244] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.743111][T14244] bridge_slave_0: entered allmulticast mode [ 649.753415][T14244] bridge_slave_0: entered promiscuous mode [ 649.866217][T14244] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.934817][T14244] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.942199][T14244] bridge_slave_1: entered allmulticast mode [ 649.949555][T14244] bridge_slave_1: entered promiscuous mode [ 650.356556][T14244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.421917][T14244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.844311][ T51] Bluetooth: hci2: command tx timeout [ 650.946490][T14244] team0: Port device team_slave_0 added [ 650.983700][T14244] team0: Port device team_slave_1 added [ 651.378912][T14244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.407831][T14244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.437864][T14244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.586005][T14244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.593060][T14244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.670374][T14244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.081860][T14244] hsr_slave_0: entered promiscuous mode [ 652.140270][T14244] hsr_slave_1: entered promiscuous mode [ 652.181847][T14244] debugfs: 'hsr0' already exists in 'hsr' [ 652.191164][T14244] Cannot create hsr debugfs directory [ 652.230701][T11606] hsr_slave_0: left promiscuous mode [ 652.256373][T11606] hsr_slave_1: left promiscuous mode [ 652.277499][T11606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.290786][T11606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.342646][T11606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.352548][T11606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.426120][T11606] veth1_macvtap: left promiscuous mode [ 652.456678][T11606] veth0_macvtap: left promiscuous mode [ 652.462365][T11606] veth1_vlan: left promiscuous mode [ 652.469677][T11606] veth0_vlan: left promiscuous mode [ 652.924286][ T51] Bluetooth: hci2: command tx timeout [ 653.907966][T11606] team0 (unregistering): Port device team_slave_1 removed [ 653.949787][T11606] team0 (unregistering): Port device team_slave_0 removed [ 654.729358][T14396] FAULT_INJECTION: forcing a failure. [ 654.729358][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 654.742606][T14396] CPU: 0 UID: 0 PID: 14396 Comm: syz.1.1750 Tainted: G U syzkaller #0 PREEMPT(full) [ 654.742655][T14396] Tainted: [U]=USER [ 654.742665][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.742683][T14396] Call Trace: [ 654.742692][T14396] [ 654.742704][T14396] dump_stack_lvl+0x16c/0x1f0 [ 654.742819][T14396] should_fail_ex+0x512/0x640 [ 654.742867][T14396] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 654.742913][T14396] should_failslab+0xc2/0x120 [ 654.742956][T14396] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 654.742992][T14396] ? __pfx_stack_trace_save+0x10/0x10 [ 654.743026][T14396] ? __d_alloc+0x32/0xae0 [ 654.743070][T14396] __d_alloc+0x32/0xae0 [ 654.743113][T14396] d_alloc_parallel+0x111/0x1480 [ 654.743174][T14396] ? find_held_lock+0x2b/0x80 [ 654.743207][T14396] ? __pfx_d_alloc_parallel+0x10/0x10 [ 654.743257][T14396] ? __d_lookup+0x266/0x4a0 [ 654.743311][T14396] lookup_open.isra.0+0x665/0x1580 [ 654.743351][T14396] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 654.743404][T14396] ? __pfx_down_write+0x10/0x10 [ 654.743430][T14396] ? mnt_get_write_access+0x20c/0x300 [ 654.743482][T14396] path_openat+0x893/0x2cb0 [ 654.743532][T14396] ? __pfx_path_openat+0x10/0x10 [ 654.743570][T14396] ? __lock_acquire+0xb97/0x1ce0 [ 654.743614][T14396] do_filp_open+0x20b/0x470 [ 654.743651][T14396] ? __pfx_do_filp_open+0x10/0x10 [ 654.743721][T14396] ? _raw_spin_unlock+0x28/0x50 [ 654.743773][T14396] ? alloc_fd+0x471/0x7d0 [ 654.743819][T14396] do_sys_openat2+0x11b/0x1d0 [ 654.743866][T14396] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.743911][T14396] ? fdget+0x187/0x210 [ 654.743943][T14396] ? __sys_sendmsg+0x18c/0x220 [ 654.744000][T14396] __x64_sys_open+0x153/0x1e0 [ 654.744049][T14396] ? __pfx___x64_sys_open+0x10/0x10 [ 654.744107][T14396] ? rcu_is_watching+0x12/0xc0 [ 654.744143][T14396] do_syscall_64+0xcd/0x490 [ 654.744194][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.744225][T14396] RIP: 0033:0x7f347938ebe9 [ 654.744251][T14396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.744281][T14396] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 654.744310][T14396] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 654.744329][T14396] RDX: 0000000000000084 RSI: 00000000000261c2 RDI: 0000200000000000 [ 654.744348][T14396] RBP: 00007f3479411e19 R08: 0000000000000000 R09: 0000000000000000 [ 654.744366][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.744384][T14396] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 654.744426][T14396] [ 656.704211][T14435] FAULT_INJECTION: forcing a failure. [ 656.704211][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.717719][T14435] CPU: 1 UID: 0 PID: 14435 Comm: syz.1.1759 Tainted: G U syzkaller #0 PREEMPT(full) [ 656.717765][T14435] Tainted: [U]=USER [ 656.717775][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.717792][T14435] Call Trace: [ 656.717801][T14435] [ 656.717812][T14435] dump_stack_lvl+0x16c/0x1f0 [ 656.717862][T14435] should_fail_ex+0x512/0x640 [ 656.717913][T14435] _copy_from_iter+0x29f/0x1720 [ 656.717947][T14435] ? __alloc_skb+0x200/0x380 [ 656.717981][T14435] ? __pfx__copy_from_iter+0x10/0x10 [ 656.718016][T14435] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 656.718055][T14435] ? __lock_acquire+0xb97/0x1ce0 [ 656.718097][T14435] netlink_sendmsg+0x829/0xdd0 [ 656.718145][T14435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.718190][T14435] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 656.718223][T14435] ____sys_sendmsg+0xa95/0xc70 [ 656.718252][T14435] ? copy_msghdr_from_user+0x10a/0x160 [ 656.718289][T14435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.718332][T14435] ___sys_sendmsg+0x134/0x1d0 [ 656.718372][T14435] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.718452][T14435] __sys_sendmsg+0x16d/0x220 [ 656.718490][T14435] ? __pfx___sys_sendmsg+0x10/0x10 [ 656.718551][T14435] do_syscall_64+0xcd/0x490 [ 656.718594][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.718618][T14435] RIP: 0033:0x7f347938ebe9 [ 656.718640][T14435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.718666][T14435] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.718701][T14435] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 656.718718][T14435] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 656.718735][T14435] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 656.718750][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.718765][T14435] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 656.718801][T14435] [ 657.406463][T14244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 657.575333][T14244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 657.749651][T14244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 657.841244][T14244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 658.858774][T14244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.935954][T14244] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.971279][T11588] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.978496][T11588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.052945][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.060246][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.619299][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 659.655768][T14518] vivid-007: ================= START STATUS ================= [ 659.691259][T14518] vivid-007: Generate PTS: true [ 659.703256][T14518] vivid-007: Generate SCR: true [ 659.747896][T14518] tpg source WxH: 320x240 (Y'CbCr) [ 659.757207][T14518] tpg field: 1 [ 659.761846][T14518] tpg crop: (0,0)/320x240 [ 659.766932][T14518] tpg compose: (0,0)/320x240 [ 659.775109][T14518] tpg colorspace: 8 [ 659.786517][T14518] tpg transfer function: 0/0 [ 659.792903][T14518] tpg Y'CbCr encoding: 0/0 [ 659.800402][T14518] tpg quantization: 0/0 [ 659.814247][T14518] tpg RGB range: 0/2 [ 659.819865][T14518] vivid-007: ================== END STATUS ================== [ 660.012617][T14244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.078141][T14529] FAULT_INJECTION: forcing a failure. [ 660.078141][T14529] name failslab, interval 1, probability 0, space 0, times 0 [ 660.139832][T14529] CPU: 1 UID: 0 PID: 14529 Comm: syz.1.1776 Tainted: G U syzkaller #0 PREEMPT(full) [ 660.139882][T14529] Tainted: [U]=USER [ 660.139891][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.139906][T14529] Call Trace: [ 660.139916][T14529] [ 660.139927][T14529] dump_stack_lvl+0x16c/0x1f0 [ 660.139972][T14529] should_fail_ex+0x512/0x640 [ 660.140022][T14529] should_failslab+0xc2/0x120 [ 660.140061][T14529] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 660.140095][T14529] ? skb_clone+0x190/0x3f0 [ 660.140145][T14529] skb_clone+0x190/0x3f0 [ 660.140189][T14529] netlink_deliver_tap+0xabd/0xd30 [ 660.140240][T14529] netlink_unicast+0x64c/0x870 [ 660.140288][T14529] ? __pfx_netlink_unicast+0x10/0x10 [ 660.140333][T14529] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 660.140374][T14529] ? __lock_acquire+0xb97/0x1ce0 [ 660.140422][T14529] netlink_sendmsg+0x8d1/0xdd0 [ 660.140473][T14529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.140522][T14529] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 660.140563][T14529] ____sys_sendmsg+0xa95/0xc70 [ 660.140596][T14529] ? copy_msghdr_from_user+0x10a/0x160 [ 660.140638][T14529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.140691][T14529] ___sys_sendmsg+0x134/0x1d0 [ 660.140746][T14529] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.140842][T14529] __sys_sendmsg+0x16d/0x220 [ 660.140884][T14529] ? __pfx___sys_sendmsg+0x10/0x10 [ 660.140955][T14529] do_syscall_64+0xcd/0x490 [ 660.141001][T14529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.141030][T14529] RIP: 0033:0x7f347938ebe9 [ 660.141054][T14529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.141081][T14529] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.141109][T14529] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 660.141129][T14529] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 660.141146][T14529] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 660.141164][T14529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.141181][T14529] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 660.141221][T14529] [ 660.189983][T14244] veth0_vlan: entered promiscuous mode [ 660.430789][T14244] veth1_vlan: entered promiscuous mode [ 660.662016][T14244] veth0_macvtap: entered promiscuous mode [ 660.673482][T14244] veth1_macvtap: entered promiscuous mode [ 660.796822][T14244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.903603][T14244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.980119][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.997571][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.028339][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.107935][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.517044][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.577757][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.321530][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.352325][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.919787][T14594] FAULT_INJECTION: forcing a failure. [ 662.919787][T14594] name failslab, interval 1, probability 0, space 0, times 0 [ 662.944040][T14594] CPU: 1 UID: 0 PID: 14594 Comm: syz.3.1789 Tainted: G U syzkaller #0 PREEMPT(full) [ 662.944089][T14594] Tainted: [U]=USER [ 662.944099][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.944115][T14594] Call Trace: [ 662.944125][T14594] [ 662.944136][T14594] dump_stack_lvl+0x16c/0x1f0 [ 662.944184][T14594] should_fail_ex+0x512/0x640 [ 662.944229][T14594] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 662.944264][T14594] should_failslab+0xc2/0x120 [ 662.944304][T14594] __kmalloc_cache_noprof+0x6a/0x3e0 [ 662.944336][T14594] ? genl_start+0x1e8/0x980 [ 662.944373][T14594] genl_start+0x1e8/0x980 [ 662.944409][T14594] __netlink_dump_start+0x60e/0x990 [ 662.944460][T14594] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 662.944497][T14594] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 662.944527][T14594] ? genl_op_from_small+0x25/0x440 [ 662.944564][T14594] ? __pfx_genl_get_cmd+0x10/0x10 [ 662.944588][T14594] ? __pfx_genl_start+0x10/0x10 [ 662.944614][T14594] ? __pfx_genl_dumpit+0x10/0x10 [ 662.944641][T14594] ? __pfx_genl_done+0x10/0x10 [ 662.944677][T14594] ? __radix_tree_lookup+0x21f/0x2c0 [ 662.944724][T14594] genl_rcv_msg+0x46e/0x800 [ 662.944761][T14594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.944793][T14594] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 662.944850][T14594] netlink_rcv_skb+0x158/0x420 [ 662.944896][T14594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.944929][T14594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.944993][T14594] ? netlink_deliver_tap+0x1ae/0xd30 [ 662.945040][T14594] genl_rcv+0x28/0x40 [ 662.945065][T14594] netlink_unicast+0x5a7/0x870 [ 662.945111][T14594] ? __pfx_netlink_unicast+0x10/0x10 [ 662.945153][T14594] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 662.945194][T14594] ? __lock_acquire+0xb97/0x1ce0 [ 662.945242][T14594] netlink_sendmsg+0x8d1/0xdd0 [ 662.945289][T14594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.945334][T14594] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 662.945372][T14594] ____sys_sendmsg+0xa95/0xc70 [ 662.945404][T14594] ? copy_msghdr_from_user+0x10a/0x160 [ 662.945442][T14594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.945491][T14594] ___sys_sendmsg+0x134/0x1d0 [ 662.945532][T14594] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.945623][T14594] __sys_sendmsg+0x16d/0x220 [ 662.945663][T14594] ? __pfx___sys_sendmsg+0x10/0x10 [ 662.945734][T14594] do_syscall_64+0xcd/0x490 [ 662.945780][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.945807][T14594] RIP: 0033:0x7f860f78ebe9 [ 662.945829][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.945856][T14594] RSP: 002b:00007f86106d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.945884][T14594] RAX: ffffffffffffffda RBX: 00007f860f9c5fa0 RCX: 00007f860f78ebe9 [ 662.945903][T14594] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 662.945919][T14594] RBP: 00007f86106d1090 R08: 0000000000000000 R09: 0000000000000000 [ 662.945936][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.945970][T14594] R13: 00007f860f9c6038 R14: 00007f860f9c5fa0 R15: 00007ffc718c0aa8 [ 662.946010][T14594] [ 663.302116][T14597] FAULT_INJECTION: forcing a failure. [ 663.302116][T14597] name failslab, interval 1, probability 0, space 0, times 0 [ 663.359294][T14597] CPU: 1 UID: 0 PID: 14597 Comm: syz.0.1788 Tainted: G U syzkaller #0 PREEMPT(full) [ 663.359343][T14597] Tainted: [U]=USER [ 663.359354][T14597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.359370][T14597] Call Trace: [ 663.359380][T14597] [ 663.359391][T14597] dump_stack_lvl+0x16c/0x1f0 [ 663.359443][T14597] should_fail_ex+0x512/0x640 [ 663.359488][T14597] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 663.359529][T14597] should_failslab+0xc2/0x120 [ 663.359568][T14597] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 663.359603][T14597] ? _raw_spin_unlock+0x28/0x50 [ 663.359641][T14597] ? alloc_inode+0xc3/0x240 [ 663.359691][T14597] alloc_inode+0xc3/0x240 [ 663.359734][T14597] new_inode+0x22/0x1c0 [ 663.359779][T14597] simple_fill_super+0x306/0x720 [ 663.359819][T14597] ? __pfx_nfsd_fill_super+0x10/0x10 [ 663.359857][T14597] nfsd_fill_super+0x90/0x530 [ 663.359890][T14597] ? __pfx_set_anon_super_fc+0x10/0x10 [ 663.359923][T14597] ? __pfx_nfsd_fill_super+0x10/0x10 [ 663.359957][T14597] get_tree_keyed+0x10b/0x1d0 [ 663.360006][T14597] vfs_get_tree+0x8b/0x340 [ 663.360035][T14597] path_mount+0x1513/0x2000 [ 663.360084][T14597] ? __pfx_path_mount+0x10/0x10 [ 663.360127][T14597] ? kmem_cache_free+0x2d1/0x4d0 [ 663.360161][T14597] ? putname+0x154/0x1a0 [ 663.360206][T14597] ? putname+0x154/0x1a0 [ 663.360251][T14597] ? __x64_sys_mount+0x28d/0x310 [ 663.360288][T14597] __x64_sys_mount+0x28d/0x310 [ 663.360328][T14597] ? __pfx___x64_sys_mount+0x10/0x10 [ 663.360380][T14597] do_syscall_64+0xcd/0x490 [ 663.360430][T14597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.360461][T14597] RIP: 0033:0x7ff1d078ebe9 [ 663.360486][T14597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.360516][T14597] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 663.360545][T14597] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 663.360565][T14597] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 663.360584][T14597] RBP: 00007ff1d0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 663.360602][T14597] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 663.360620][T14597] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 663.360661][T14597] [ 664.197948][T14622] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 666.320850][T14661] phram: not enough arguments [ 667.171123][T14669] FAULT_INJECTION: forcing a failure. [ 667.171123][T14669] name failslab, interval 1, probability 0, space 0, times 0 [ 667.204192][T14669] CPU: 1 UID: 0 PID: 14669 Comm: syz.1.1805 Tainted: G U syzkaller #0 PREEMPT(full) [ 667.204246][T14669] Tainted: [U]=USER [ 667.204256][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.204273][T14669] Call Trace: [ 667.204282][T14669] [ 667.204293][T14669] dump_stack_lvl+0x16c/0x1f0 [ 667.204342][T14669] should_fail_ex+0x512/0x640 [ 667.204386][T14669] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 667.204427][T14669] should_failslab+0xc2/0x120 [ 667.204466][T14669] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 667.204500][T14669] ? genl_start+0x1e8/0x980 [ 667.204527][T14669] ? __netlink_dump_start+0x60e/0x990 [ 667.204567][T14669] ? __alloc_skb+0x2b2/0x380 [ 667.204616][T14669] __alloc_skb+0x2b2/0x380 [ 667.204656][T14669] ? __pfx___alloc_skb+0x10/0x10 [ 667.204723][T14669] netlink_dump+0x19b/0xd30 [ 667.204771][T14669] ? __pfx_netlink_dump+0x10/0x10 [ 667.204830][T14669] ? __asan_memset+0x23/0x50 [ 667.204861][T14669] ? genl_start+0x67f/0x980 [ 667.204897][T14669] __netlink_dump_start+0x6d6/0x990 [ 667.204947][T14669] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 667.204983][T14669] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 667.205014][T14669] ? genl_op_from_small+0x25/0x440 [ 667.205051][T14669] ? __pfx_genl_get_cmd+0x10/0x10 [ 667.205076][T14669] ? __pfx_genl_start+0x10/0x10 [ 667.205101][T14669] ? __pfx_genl_dumpit+0x10/0x10 [ 667.205128][T14669] ? __pfx_genl_done+0x10/0x10 [ 667.205163][T14669] ? __radix_tree_lookup+0x21f/0x2c0 [ 667.205210][T14669] genl_rcv_msg+0x46e/0x800 [ 667.205247][T14669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.205279][T14669] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 667.205335][T14669] netlink_rcv_skb+0x158/0x420 [ 667.205380][T14669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.205410][T14669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.205466][T14669] ? netlink_deliver_tap+0x1ae/0xd30 [ 667.205513][T14669] genl_rcv+0x28/0x40 [ 667.205538][T14669] netlink_unicast+0x5a7/0x870 [ 667.205586][T14669] ? __pfx_netlink_unicast+0x10/0x10 [ 667.205628][T14669] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 667.205668][T14669] ? __lock_acquire+0xb97/0x1ce0 [ 667.205725][T14669] netlink_sendmsg+0x8d1/0xdd0 [ 667.205776][T14669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.205825][T14669] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 667.205865][T14669] ____sys_sendmsg+0xa95/0xc70 [ 667.205897][T14669] ? copy_msghdr_from_user+0x10a/0x160 [ 667.205939][T14669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.205991][T14669] ___sys_sendmsg+0x134/0x1d0 [ 667.206035][T14669] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.206131][T14669] __sys_sendmsg+0x16d/0x220 [ 667.206173][T14669] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.206243][T14669] do_syscall_64+0xcd/0x490 [ 667.206290][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.206320][T14669] RIP: 0033:0x7f347938ebe9 [ 667.206343][T14669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.206371][T14669] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.206399][T14669] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 667.206419][T14669] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 667.206435][T14669] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 667.206452][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.206466][T14669] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 667.206505][T14669] [ 669.142498][T14703] FAULT_INJECTION: forcing a failure. [ 669.142498][T14703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.164671][T14703] CPU: 1 UID: 0 PID: 14703 Comm: syz.1.1814 Tainted: G U syzkaller #0 PREEMPT(full) [ 669.164726][T14703] Tainted: [U]=USER [ 669.164736][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.164752][T14703] Call Trace: [ 669.164761][T14703] [ 669.164771][T14703] dump_stack_lvl+0x16c/0x1f0 [ 669.164814][T14703] should_fail_ex+0x512/0x640 [ 669.164864][T14703] _copy_from_user+0x2e/0xd0 [ 669.164896][T14703] copy_msghdr_from_user+0x98/0x160 [ 669.164939][T14703] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 669.164991][T14703] ? __pfx__kstrtoull+0x10/0x10 [ 669.165038][T14703] ___sys_sendmsg+0xfe/0x1d0 [ 669.165085][T14703] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.165148][T14703] ? find_held_lock+0x2b/0x80 [ 669.165204][T14703] __sys_sendmmsg+0x200/0x420 [ 669.165255][T14703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 669.165313][T14703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 669.165373][T14703] ? fput+0x9b/0xd0 [ 669.165415][T14703] ? ksys_write+0x1ac/0x250 [ 669.165448][T14703] ? __pfx_ksys_write+0x10/0x10 [ 669.165501][T14703] __x64_sys_sendmmsg+0x9c/0x100 [ 669.165544][T14703] ? lockdep_hardirqs_on+0x7c/0x110 [ 669.165586][T14703] do_syscall_64+0xcd/0x490 [ 669.165633][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.165662][T14703] RIP: 0033:0x7f347938ebe9 [ 669.165694][T14703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.165723][T14703] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 669.165751][T14703] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 669.165771][T14703] RDX: 00000000000009a4 RSI: 0000000000000000 RDI: 0000000000000003 [ 669.165788][T14703] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 669.165804][T14703] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 669.165822][T14703] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 669.165861][T14703] [ 670.395301][ T30] audit: type=1326 audit(4294985728.930:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm=6E6C696E650A exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f860f78ebe9 code=0x0 [ 672.098443][T14753] ubi0: attaching mtd0 [ 672.116595][T14753] ubi0: scanning is finished [ 672.123949][T14753] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 672.351681][T14753] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 673.380795][T14778] FAULT_INJECTION: forcing a failure. [ 673.380795][T14778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.395033][T14778] CPU: 1 UID: 0 PID: 14778 Comm: syz.3.1834 Tainted: G U syzkaller #0 PREEMPT(full) [ 673.395081][T14778] Tainted: [U]=USER [ 673.395091][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.395108][T14778] Call Trace: [ 673.395117][T14778] [ 673.395129][T14778] dump_stack_lvl+0x16c/0x1f0 [ 673.395179][T14778] should_fail_ex+0x512/0x640 [ 673.395230][T14778] should_fail_alloc_page+0xe7/0x130 [ 673.395272][T14778] prepare_alloc_pages+0x3c2/0x610 [ 673.395315][T14778] ? find_held_lock+0x2b/0x80 [ 673.395350][T14778] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 673.395389][T14778] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.395426][T14778] ? is_bpf_text_address+0x94/0x1a0 [ 673.395463][T14778] ? kernel_text_address+0x8d/0x100 [ 673.395491][T14778] ? __kernel_text_address+0xd/0x40 [ 673.395518][T14778] ? unwind_get_return_address+0x59/0xa0 [ 673.395548][T14778] ? arch_stack_walk+0xa6/0x100 [ 673.395582][T14778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.395623][T14778] ? __lock_acquire+0x62e/0x1ce0 [ 673.395664][T14778] ? __pfx_stack_trace_save+0x10/0x10 [ 673.395701][T14778] ? look_up_lock_class+0x59/0x150 [ 673.395744][T14778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 673.395792][T14778] ? policy_nodemask+0xea/0x4e0 [ 673.395835][T14778] alloc_pages_mpol+0x1fb/0x550 [ 673.395877][T14778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 673.395939][T14778] alloc_pages_noprof+0x131/0x390 [ 673.395980][T14778] __pmd_alloc+0x3b/0x930 [ 673.396028][T14778] __handle_mm_fault+0xa06/0x2a50 [ 673.396065][T14778] ? mt_find+0x3ef/0xa30 [ 673.396095][T14778] ? __pfx___handle_mm_fault+0x10/0x10 [ 673.396124][T14778] ? __pfx_mt_find+0x10/0x10 [ 673.396175][T14778] ? find_vma+0xbf/0x140 [ 673.396214][T14778] ? __pfx_find_vma+0x10/0x10 [ 673.396258][T14778] handle_mm_fault+0x589/0xd10 [ 673.396291][T14778] ? trace_raw_output_exceptions+0x131/0x150 [ 673.396340][T14778] do_user_addr_fault+0x7a6/0x1370 [ 673.396391][T14778] ? rcu_is_watching+0x12/0xc0 [ 673.396427][T14778] exc_page_fault+0x5c/0xb0 [ 673.396469][T14778] asm_exc_page_fault+0x26/0x30 [ 673.396498][T14778] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 673.396534][T14778] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 673.396563][T14778] RSP: 0018:ffffc9000486f9f8 EFLAGS: 00050206 [ 673.396588][T14778] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 673.396605][T14778] RDX: fffff5200090df50 RSI: 0000000000000000 RDI: ffffc9000486fa48 [ 673.396623][T14778] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200090df4f [ 673.396641][T14778] R10: ffffc9000486fa7f R11: 0000000000000000 R12: 0000000000000000 [ 673.396656][T14778] R13: ffffc9000486fa48 R14: ffffc9000486fb40 R15: ffffc9000486fa48 [ 673.396699][T14778] _copy_from_user+0x98/0xd0 [ 673.396734][T14778] copy_msghdr_from_user+0x98/0x160 [ 673.396779][T14778] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 673.396831][T14778] ? __pfx__kstrtoull+0x10/0x10 [ 673.396880][T14778] ___sys_sendmsg+0xfe/0x1d0 [ 673.396937][T14778] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.397007][T14778] ? find_held_lock+0x2b/0x80 [ 673.397066][T14778] __sys_sendmmsg+0x200/0x420 [ 673.397119][T14778] ? __pfx___sys_sendmmsg+0x10/0x10 [ 673.397176][T14778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.397239][T14778] ? fput+0x9b/0xd0 [ 673.397280][T14778] ? ksys_write+0x1ac/0x250 [ 673.397313][T14778] ? __pfx_ksys_write+0x10/0x10 [ 673.397355][T14778] __x64_sys_sendmmsg+0x9c/0x100 [ 673.397399][T14778] ? lockdep_hardirqs_on+0x7c/0x110 [ 673.397440][T14778] do_syscall_64+0xcd/0x490 [ 673.397487][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.397516][T14778] RIP: 0033:0x7f860f78ebe9 [ 673.397539][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.397567][T14778] RSP: 002b:00007f86106d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 673.397592][T14778] RAX: ffffffffffffffda RBX: 00007f860f9c5fa0 RCX: 00007f860f78ebe9 [ 673.397612][T14778] RDX: 00000000000009a4 RSI: 0000000000000000 RDI: 0000000000000003 [ 673.397629][T14778] RBP: 00007f86106d1090 R08: 0000000000000000 R09: 0000000000000000 [ 673.397646][T14778] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 673.397663][T14778] R13: 00007f860f9c6038 R14: 00007f860f9c5fa0 R15: 00007ffc718c0aa8 [ 673.397703][T14778] [ 676.480315][T14825] FAULT_INJECTION: forcing a failure. [ 676.480315][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 676.543859][T14825] CPU: 1 UID: 0 PID: 14825 Comm: syz.0.1845 Tainted: G U syzkaller #0 PREEMPT(full) [ 676.543893][T14825] Tainted: [U]=USER [ 676.543899][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 676.543909][T14825] Call Trace: [ 676.543915][T14825] [ 676.543923][T14825] dump_stack_lvl+0x16c/0x1f0 [ 676.543955][T14825] should_fail_ex+0x512/0x640 [ 676.543988][T14825] should_failslab+0xc2/0x120 [ 676.544013][T14825] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 676.544036][T14825] ? skb_clone+0x190/0x3f0 [ 676.544067][T14825] skb_clone+0x190/0x3f0 [ 676.544095][T14825] netlink_deliver_tap+0xabd/0xd30 [ 676.544131][T14825] netlink_dump+0xa5f/0xd30 [ 676.544160][T14825] ? __pfx_netlink_dump+0x10/0x10 [ 676.544196][T14825] ? __asan_memset+0x23/0x50 [ 676.544214][T14825] ? genl_start+0x67f/0x980 [ 676.544235][T14825] __netlink_dump_start+0x6d6/0x990 [ 676.544266][T14825] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 676.544289][T14825] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 676.544309][T14825] ? genl_op_from_small+0x25/0x440 [ 676.544330][T14825] ? __pfx_genl_get_cmd+0x10/0x10 [ 676.544346][T14825] ? __pfx_genl_start+0x10/0x10 [ 676.544365][T14825] ? __pfx_genl_dumpit+0x10/0x10 [ 676.544381][T14825] ? __pfx_genl_done+0x10/0x10 [ 676.544402][T14825] ? __radix_tree_lookup+0x21f/0x2c0 [ 676.544431][T14825] genl_rcv_msg+0x46e/0x800 [ 676.544452][T14825] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.544472][T14825] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 676.544506][T14825] netlink_rcv_skb+0x158/0x420 [ 676.544537][T14825] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.544564][T14825] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.544605][T14825] ? netlink_deliver_tap+0x1ae/0xd30 [ 676.544636][T14825] genl_rcv+0x28/0x40 [ 676.544652][T14825] netlink_unicast+0x5a7/0x870 [ 676.544683][T14825] ? __pfx_netlink_unicast+0x10/0x10 [ 676.544712][T14825] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 676.544738][T14825] ? __lock_acquire+0xb97/0x1ce0 [ 676.544769][T14825] netlink_sendmsg+0x8d1/0xdd0 [ 676.544804][T14825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.544838][T14825] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 676.544863][T14825] ____sys_sendmsg+0xa95/0xc70 [ 676.544885][T14825] ? copy_msghdr_from_user+0x10a/0x160 [ 676.544912][T14825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.544943][T14825] ___sys_sendmsg+0x134/0x1d0 [ 676.544972][T14825] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.545027][T14825] __sys_sendmsg+0x16d/0x220 [ 676.545056][T14825] ? __pfx___sys_sendmsg+0x10/0x10 [ 676.545098][T14825] do_syscall_64+0xcd/0x490 [ 676.545128][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.545146][T14825] RIP: 0033:0x7ff1d078ebe9 [ 676.545161][T14825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.545178][T14825] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.545196][T14825] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 676.545207][T14825] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000003 [ 676.545218][T14825] RBP: 00007ff1d15fd090 R08: 0000000000000000 R09: 0000000000000000 [ 676.545229][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.545239][T14825] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 676.545262][T14825] [ 677.096136][T14832] FAULT_INJECTION: forcing a failure. [ 677.096136][T14832] name failslab, interval 1, probability 0, space 0, times 0 [ 677.109201][T14832] CPU: 1 UID: 0 PID: 14832 Comm: syz.1.1848 Tainted: G U syzkaller #0 PREEMPT(full) [ 677.109232][T14832] Tainted: [U]=USER [ 677.109238][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.109249][T14832] Call Trace: [ 677.109256][T14832] [ 677.109263][T14832] dump_stack_lvl+0x16c/0x1f0 [ 677.109297][T14832] should_fail_ex+0x512/0x640 [ 677.109325][T14832] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 677.109348][T14832] should_failslab+0xc2/0x120 [ 677.109373][T14832] __kmalloc_cache_noprof+0x6a/0x3e0 [ 677.109393][T14832] ? kvm_dev_ioctl+0x15f6/0x1af0 [ 677.109416][T14832] kvm_dev_ioctl+0x15f6/0x1af0 [ 677.109441][T14832] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 677.109468][T14832] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 677.109488][T14832] __x64_sys_ioctl+0x18e/0x210 [ 677.109519][T14832] do_syscall_64+0xcd/0x490 [ 677.109549][T14832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.109568][T14832] RIP: 0033:0x7f347938ebe9 [ 677.109584][T14832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.109603][T14832] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.109621][T14832] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 677.109633][T14832] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 677.109646][T14832] RBP: 00007f3479411e19 R08: 0000000000000000 R09: 0000000000000000 [ 677.109676][T14832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.109693][T14832] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 677.109730][T14832] [ 678.436227][T14866] FAULT_INJECTION: forcing a failure. [ 678.436227][T14866] name failslab, interval 1, probability 0, space 0, times 0 [ 678.493889][T14866] CPU: 1 UID: 0 PID: 14866 Comm: syz.1.1855 Tainted: G U syzkaller #0 PREEMPT(full) [ 678.493940][T14866] Tainted: [U]=USER [ 678.493950][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.493967][T14866] Call Trace: [ 678.493976][T14866] [ 678.493987][T14866] dump_stack_lvl+0x16c/0x1f0 [ 678.494035][T14866] should_fail_ex+0x512/0x640 [ 678.494078][T14866] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 678.494118][T14866] should_failslab+0xc2/0x120 [ 678.494158][T14866] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 678.494193][T14866] ? __pmd_alloc+0xbf/0x930 [ 678.494243][T14866] __pmd_alloc+0xbf/0x930 [ 678.494291][T14866] __handle_mm_fault+0xa06/0x2a50 [ 678.494326][T14866] ? mt_find+0x3ef/0xa30 [ 678.494363][T14866] ? __pfx___handle_mm_fault+0x10/0x10 [ 678.494391][T14866] ? __pfx_mt_find+0x10/0x10 [ 678.494443][T14866] ? find_vma+0xbf/0x140 [ 678.494480][T14866] ? __pfx_find_vma+0x10/0x10 [ 678.494522][T14866] handle_mm_fault+0x589/0xd10 [ 678.494554][T14866] ? trace_raw_output_exceptions+0x131/0x150 [ 678.494612][T14866] do_user_addr_fault+0x7a6/0x1370 [ 678.494663][T14866] ? rcu_is_watching+0x12/0xc0 [ 678.494700][T14866] exc_page_fault+0x5c/0xb0 [ 678.494743][T14866] asm_exc_page_fault+0x26/0x30 [ 678.494771][T14866] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 678.494806][T14866] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 678.494835][T14866] RSP: 0018:ffffc90003e4f9f8 EFLAGS: 00050206 [ 678.494860][T14866] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 678.494878][T14866] RDX: fffff520007c9f50 RSI: 0000000000000000 RDI: ffffc90003e4fa48 [ 678.494897][T14866] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520007c9f4f [ 678.494915][T14866] R10: ffffc90003e4fa7f R11: 0000000000000000 R12: 0000000000000000 [ 678.494931][T14866] R13: ffffc90003e4fa48 R14: ffffc90003e4fb40 R15: ffffc90003e4fa48 [ 678.494975][T14866] _copy_from_user+0x98/0xd0 [ 678.495009][T14866] copy_msghdr_from_user+0x98/0x160 [ 678.495054][T14866] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 678.495108][T14866] ? __pfx__kstrtoull+0x10/0x10 [ 678.495159][T14866] ___sys_sendmsg+0xfe/0x1d0 [ 678.495205][T14866] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.495273][T14866] ? find_held_lock+0x2b/0x80 [ 678.495336][T14866] __sys_sendmmsg+0x200/0x420 [ 678.495387][T14866] ? __pfx___sys_sendmmsg+0x10/0x10 [ 678.495460][T14866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 678.495526][T14866] ? fput+0x9b/0xd0 [ 678.495567][T14866] ? ksys_write+0x1ac/0x250 [ 678.495608][T14866] ? __pfx_ksys_write+0x10/0x10 [ 678.495651][T14866] __x64_sys_sendmmsg+0x9c/0x100 [ 678.495694][T14866] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.495736][T14866] do_syscall_64+0xcd/0x490 [ 678.495783][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.495812][T14866] RIP: 0033:0x7f347938ebe9 [ 678.495835][T14866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.495861][T14866] RSP: 002b:00007f347a285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 678.495887][T14866] RAX: ffffffffffffffda RBX: 00007f34795c5fa0 RCX: 00007f347938ebe9 [ 678.495905][T14866] RDX: 00000000000009a4 RSI: 0000000000000000 RDI: 0000000000000003 [ 678.495922][T14866] RBP: 00007f347a285090 R08: 0000000000000000 R09: 0000000000000000 [ 678.495938][T14866] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 678.495955][T14866] R13: 00007f34795c6038 R14: 00007f34795c5fa0 R15: 00007ffccf409f68 [ 678.495996][T14866] [ 679.386165][T14890] FAULT_INJECTION: forcing a failure. [ 679.386165][T14890] name failslab, interval 1, probability 0, space 0, times 0 [ 679.405648][T14890] CPU: 0 UID: 0 PID: 14890 Comm: syz.3.1858 Tainted: G U syzkaller #0 PREEMPT(full) [ 679.405697][T14890] Tainted: [U]=USER [ 679.405707][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.405723][T14890] Call Trace: [ 679.405732][T14890] [ 679.405743][T14890] dump_stack_lvl+0x16c/0x1f0 [ 679.405793][T14890] should_fail_ex+0x512/0x640 [ 679.405846][T14890] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 679.405881][T14890] should_failslab+0xc2/0x120 [ 679.405919][T14890] __kmalloc_cache_noprof+0x6a/0x3e0 [ 679.405949][T14890] ? find_held_lock+0x2b/0x80 [ 679.405975][T14890] ? alloc_pipe_info+0x10e/0x590 [ 679.406018][T14890] alloc_pipe_info+0x10e/0x590 [ 679.406059][T14890] splice_direct_to_actor+0x77d/0xa30 [ 679.406092][T14890] ? __lock_acquire+0x62e/0x1ce0 [ 679.406127][T14890] ? __pfx_direct_splice_actor+0x10/0x10 [ 679.406160][T14890] ? __pfx_aa_file_perm+0x10/0x10 [ 679.406202][T14890] ? find_held_lock+0x2b/0x80 [ 679.406231][T14890] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 679.406259][T14890] ? get_pid_task+0xfc/0x250 [ 679.406310][T14890] do_splice_direct+0x174/0x240 [ 679.406340][T14890] ? __pfx_do_splice_direct+0x10/0x10 [ 679.406372][T14890] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 679.406409][T14890] ? rw_verify_area+0xcf/0x6c0 [ 679.406444][T14890] do_sendfile+0xb06/0xe50 [ 679.406483][T14890] ? __pfx_do_sendfile+0x10/0x10 [ 679.406516][T14890] ? __fget_files+0x20e/0x3c0 [ 679.406559][T14890] __x64_sys_sendfile64+0x1d8/0x220 [ 679.406597][T14890] ? ksys_write+0x1ac/0x250 [ 679.406630][T14890] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 679.406682][T14890] do_syscall_64+0xcd/0x490 [ 679.406730][T14890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.406759][T14890] RIP: 0033:0x7f860f78ebe9 [ 679.406783][T14890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.406819][T14890] RSP: 002b:00007f86106d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 679.406847][T14890] RAX: ffffffffffffffda RBX: 00007f860f9c5fa0 RCX: 00007f860f78ebe9 [ 679.406866][T14890] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 679.406882][T14890] RBP: 00007f86106d1090 R08: 0000000000000000 R09: 0000000000000000 [ 679.406900][T14890] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 679.406916][T14890] R13: 00007f860f9c6038 R14: 00007f860f9c5fa0 R15: 00007ffc718c0aa8 [ 679.406955][T14890] [ 681.235378][T14935] FAULT_INJECTION: forcing a failure. [ 681.235378][T14935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.295255][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.2.1866 Tainted: G U syzkaller #0 PREEMPT(full) [ 681.295304][T14935] Tainted: [U]=USER [ 681.295314][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 681.295331][T14935] Call Trace: [ 681.295341][T14935] [ 681.295352][T14935] dump_stack_lvl+0x16c/0x1f0 [ 681.295401][T14935] should_fail_ex+0x512/0x640 [ 681.295452][T14935] _copy_to_user+0x32/0xd0 [ 681.295489][T14935] simple_read_from_buffer+0xcb/0x170 [ 681.295533][T14935] proc_fail_nth_read+0x197/0x240 [ 681.295567][T14935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.295602][T14935] ? rw_verify_area+0xcf/0x6c0 [ 681.295632][T14935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.295664][T14935] vfs_read+0x1e4/0xcf0 [ 681.295703][T14935] ? __pfx___mutex_lock+0x10/0x10 [ 681.295748][T14935] ? __pfx_vfs_read+0x10/0x10 [ 681.295803][T14935] ? __fget_files+0x20e/0x3c0 [ 681.295848][T14935] ksys_read+0x12a/0x250 [ 681.295882][T14935] ? __pfx_ksys_read+0x10/0x10 [ 681.295929][T14935] do_syscall_64+0xcd/0x490 [ 681.295977][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.296006][T14935] RIP: 0033:0x7fe79278d5fc [ 681.296029][T14935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 681.296058][T14935] RSP: 002b:00007fe79365a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.296086][T14935] RAX: ffffffffffffffda RBX: 00007fe7929c5fa0 RCX: 00007fe79278d5fc [ 681.296105][T14935] RDX: 000000000000000f RSI: 00007fe79365a0a0 RDI: 0000000000000004 [ 681.296122][T14935] RBP: 00007fe79365a090 R08: 0000000000000000 R09: 0000000000000000 [ 681.296140][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.296157][T14935] R13: 00007fe7929c6038 R14: 00007fe7929c5fa0 R15: 00007fff0517bf88 [ 681.296196][T14935] [ 682.560642][T14970] random: crng reseeded on system resumption [ 683.275127][T14980] FAULT_INJECTION: forcing a failure. [ 683.275127][T14980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 683.372588][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.0.1875 Tainted: G U syzkaller #0 PREEMPT(full) [ 683.372636][T14980] Tainted: [U]=USER [ 683.372644][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.372661][T14980] Call Trace: [ 683.372670][T14980] [ 683.372681][T14980] dump_stack_lvl+0x16c/0x1f0 [ 683.372730][T14980] should_fail_ex+0x512/0x640 [ 683.372780][T14980] should_fail_alloc_page+0xe7/0x130 [ 683.372821][T14980] prepare_alloc_pages+0x3c2/0x610 [ 683.372867][T14980] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 683.372902][T14980] ? stack_trace_save+0x8e/0xc0 [ 683.372933][T14980] ? __pfx_stack_trace_save+0x10/0x10 [ 683.372963][T14980] ? rcu_is_watching+0x12/0xc0 [ 683.372991][T14980] ? stack_depot_save_flags+0x29/0x9c0 [ 683.373047][T14980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 683.373079][T14980] ? __kasan_slab_alloc+0x89/0x90 [ 683.373114][T14980] ? __pmd_alloc+0xbf/0x930 [ 683.373153][T14980] ? handle_mm_fault+0x589/0xd10 [ 683.373178][T14980] ? do_user_addr_fault+0x7a6/0x1370 [ 683.373220][T14980] ? exc_page_fault+0x5c/0xb0 [ 683.373255][T14980] ? asm_exc_page_fault+0x26/0x30 [ 683.373281][T14980] ? rep_movs_alternative+0x30/0x90 [ 683.373313][T14980] ? _copy_from_user+0x98/0xd0 [ 683.373339][T14980] ? copy_msghdr_from_user+0x98/0x160 [ 683.373396][T14980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 683.373441][T14980] ? policy_nodemask+0xea/0x4e0 [ 683.373481][T14980] alloc_pages_mpol+0x1fb/0x550 [ 683.373520][T14980] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 683.373581][T14980] alloc_pages_noprof+0x131/0x390 [ 683.373627][T14980] pte_alloc_one+0x1c/0x3a0 [ 683.373658][T14980] do_pte_missing+0x1afc/0x3ba0 [ 683.373689][T14980] ? do_raw_spin_unlock+0x172/0x230 [ 683.373735][T14980] ? __pmd_alloc+0x3fb/0x930 [ 683.373779][T14980] __handle_mm_fault+0x152a/0x2a50 [ 683.373814][T14980] ? mt_find+0x3ef/0xa30 [ 683.373843][T14980] ? __pfx___handle_mm_fault+0x10/0x10 [ 683.373869][T14980] ? __pfx_mt_find+0x10/0x10 [ 683.373918][T14980] ? find_vma+0xbf/0x140 [ 683.373955][T14980] ? __pfx_find_vma+0x10/0x10 [ 683.373999][T14980] handle_mm_fault+0x589/0xd10 [ 683.374031][T14980] ? trace_raw_output_exceptions+0x131/0x150 [ 683.374080][T14980] do_user_addr_fault+0x7a6/0x1370 [ 683.374131][T14980] ? rcu_is_watching+0x12/0xc0 [ 683.374167][T14980] exc_page_fault+0x5c/0xb0 [ 683.374211][T14980] asm_exc_page_fault+0x26/0x30 [ 683.374239][T14980] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 683.374275][T14980] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 683.374303][T14980] RSP: 0018:ffffc90003bbf9f8 EFLAGS: 00050206 [ 683.374327][T14980] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 683.374344][T14980] RDX: fffff52000777f50 RSI: 0000000000000000 RDI: ffffc90003bbfa48 [ 683.374363][T14980] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52000777f4f [ 683.374381][T14980] R10: ffffc90003bbfa7f R11: 0000000000000000 R12: 0000000000000000 [ 683.374398][T14980] R13: ffffc90003bbfa48 R14: ffffc90003bbfb40 R15: ffffc90003bbfa48 [ 683.374440][T14980] _copy_from_user+0x98/0xd0 [ 683.374475][T14980] copy_msghdr_from_user+0x98/0x160 [ 683.374520][T14980] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 683.374582][T14980] ? __pfx__kstrtoull+0x10/0x10 [ 683.374631][T14980] ___sys_sendmsg+0xfe/0x1d0 [ 683.374679][T14980] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.374743][T14980] ? find_held_lock+0x2b/0x80 [ 683.374800][T14980] __sys_sendmmsg+0x200/0x420 [ 683.374851][T14980] ? __pfx___sys_sendmmsg+0x10/0x10 [ 683.374910][T14980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 683.374974][T14980] ? fput+0x9b/0xd0 [ 683.375016][T14980] ? ksys_write+0x1ac/0x250 [ 683.375049][T14980] ? __pfx_ksys_write+0x10/0x10 [ 683.375091][T14980] __x64_sys_sendmmsg+0x9c/0x100 [ 683.375135][T14980] ? lockdep_hardirqs_on+0x7c/0x110 [ 683.375177][T14980] do_syscall_64+0xcd/0x490 [ 683.375226][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.375254][T14980] RIP: 0033:0x7ff1d078ebe9 [ 683.375278][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.375306][T14980] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 683.375332][T14980] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 683.375352][T14980] RDX: 00000000000009a4 RSI: 0000000000000000 RDI: 0000000000000003 [ 683.375368][T14980] RBP: 00007ff1d15fd090 R08: 0000000000000000 R09: 0000000000000000 [ 683.375386][T14980] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 683.375404][T14980] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 683.375445][T14980] [ 685.826255][ T30] audit: type=1806 audit(4294985744.360:23): xattr="" res=-22 [ 687.487314][T15039] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1891'. [ 691.187896][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.194585][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.405268][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 693.608911][T15188] can: request_module (can-proto-0) failed. [ 693.710299][T15186] delete_channel: no stack [ 700.317061][T15303] FAULT_INJECTION: forcing a failure. [ 700.317061][T15303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 700.330539][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.0.1962 Tainted: G U syzkaller #0 PREEMPT(full) [ 700.330587][T15303] Tainted: [U]=USER [ 700.330607][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.330623][T15303] Call Trace: [ 700.330633][T15303] [ 700.330644][T15303] dump_stack_lvl+0x16c/0x1f0 [ 700.330694][T15303] should_fail_ex+0x512/0x640 [ 700.330746][T15303] should_fail_alloc_page+0xe7/0x130 [ 700.330788][T15303] prepare_alloc_pages+0x3c2/0x610 [ 700.330836][T15303] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 700.330867][T15303] ? __lock_acquire+0x62e/0x1ce0 [ 700.330913][T15303] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 700.330942][T15303] ? find_held_lock+0x2b/0x80 [ 700.330965][T15303] ? is_bpf_text_address+0x8a/0x1a0 [ 700.330994][T15303] ? bpf_ksym_find+0x124/0x1c0 [ 700.331018][T15303] ? is_bpf_text_address+0x94/0x1a0 [ 700.331047][T15303] ? kernel_text_address+0x8d/0x100 [ 700.331070][T15303] ? __kernel_text_address+0xd/0x40 [ 700.331091][T15303] ? unwind_get_return_address+0x59/0xa0 [ 700.331117][T15303] ? arch_stack_walk+0xa6/0x100 [ 700.331140][T15303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.331177][T15303] ? policy_nodemask+0xea/0x4e0 [ 700.331211][T15303] alloc_pages_mpol+0x1fb/0x550 [ 700.331244][T15303] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 700.331278][T15303] ? _kstrtoull+0x145/0x200 [ 700.331313][T15303] ? iovec_from_user+0x108/0x140 [ 700.331336][T15303] ___kmalloc_large_node+0xed/0x160 [ 700.331382][T15303] ? iovec_from_user+0x108/0x140 [ 700.331406][T15303] __kmalloc_large_node_noprof+0x1c/0x70 [ 700.331446][T15303] __kmalloc_noprof.cold+0xc/0x61 [ 700.331489][T15303] iovec_from_user+0x108/0x140 [ 700.331519][T15303] __import_iovec+0x88/0x650 [ 700.331553][T15303] import_iovec+0x86/0xb0 [ 700.331584][T15303] vfs_readv+0x19a/0x8b0 [ 700.331617][T15303] ? __pfx_vfs_readv+0x10/0x10 [ 700.331669][T15303] ? __fget_files+0x20e/0x3c0 [ 700.331692][T15303] ? __fget_files+0x140/0x3c0 [ 700.331726][T15303] ? do_readv+0x132/0x340 [ 700.331747][T15303] do_readv+0x132/0x340 [ 700.331772][T15303] ? __pfx_do_readv+0x10/0x10 [ 700.331807][T15303] do_syscall_64+0xcd/0x490 [ 700.331845][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.331869][T15303] RIP: 0033:0x7ff1d078ebe9 [ 700.331888][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.331912][T15303] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 700.331936][T15303] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 700.331952][T15303] RDX: 0000000000000400 RSI: 00002000000000c0 RDI: 0000000000000004 [ 700.331966][T15303] RBP: 00007ff1d15fd090 R08: 0000000000000000 R09: 0000000000000000 [ 700.331980][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.331995][T15303] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 700.332025][T15303] [ 702.600997][T15343] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 703.936356][T15356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 704.021324][T15356] team0: Port device team_slave_0 removed [ 705.041201][T15380] FAULT_INJECTION: forcing a failure. [ 705.041201][T15380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.083444][T15380] CPU: 1 UID: 0 PID: 15380 Comm: syz.2.1970 Tainted: G U syzkaller #0 PREEMPT(full) [ 705.083491][T15380] Tainted: [U]=USER [ 705.083502][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.083517][T15380] Call Trace: [ 705.083526][T15380] [ 705.083537][T15380] dump_stack_lvl+0x16c/0x1f0 [ 705.083586][T15380] should_fail_ex+0x512/0x640 [ 705.083645][T15380] _copy_to_user+0x32/0xd0 [ 705.083680][T15380] msr_read+0x14e/0x250 [ 705.083716][T15380] ? __pfx_msr_read+0x10/0x10 [ 705.083754][T15380] ? bpf_lsm_file_permission+0x9/0x10 [ 705.083794][T15380] ? security_file_permission+0x71/0x210 [ 705.083835][T15380] ? rw_verify_area+0xcf/0x6c0 [ 705.083866][T15380] ? __pfx_msr_read+0x10/0x10 [ 705.083899][T15380] vfs_readv+0x5be/0x8b0 [ 705.083935][T15380] ? __pfx_vfs_readv+0x10/0x10 [ 705.083993][T15380] ? __fget_files+0x20e/0x3c0 [ 705.084046][T15380] ? __fget_files+0x140/0x3c0 [ 705.084099][T15380] ? do_readv+0x132/0x340 [ 705.084125][T15380] do_readv+0x132/0x340 [ 705.084155][T15380] ? __pfx_do_readv+0x10/0x10 [ 705.084196][T15380] do_syscall_64+0xcd/0x490 [ 705.084241][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.084269][T15380] RIP: 0033:0x7fe79278ebe9 [ 705.084293][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.084319][T15380] RSP: 002b:00007fe79365a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 705.084347][T15380] RAX: ffffffffffffffda RBX: 00007fe7929c5fa0 RCX: 00007fe79278ebe9 [ 705.084366][T15380] RDX: 0000000000000400 RSI: 00002000000000c0 RDI: 0000000000000004 [ 705.084382][T15380] RBP: 00007fe79365a090 R08: 0000000000000000 R09: 0000000000000000 [ 705.084398][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.084414][T15380] R13: 00007fe7929c6038 R14: 00007fe7929c5fa0 R15: 00007fff0517bf88 [ 705.084461][T15380] [ 714.059828][ T30] audit: type=1804 audit(4294985772.590:24): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1997" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 716.014639][T15545] Line length is too long: Should be less than 4094 [ 722.600535][T15640] zswap: compressor not available [ 723.390725][T15661] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 723.933428][T15670] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 725.313461][T15704] random: crng reseeded on system resumption [ 726.525963][T15721] FAULT_INJECTION: forcing a failure. [ 726.525963][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 726.576705][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.0.2045 Tainted: G U syzkaller #0 PREEMPT(full) [ 726.576754][T15721] Tainted: [U]=USER [ 726.576763][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.576779][T15721] Call Trace: [ 726.576789][T15721] [ 726.576800][T15721] dump_stack_lvl+0x16c/0x1f0 [ 726.576850][T15721] should_fail_ex+0x512/0x640 [ 726.576892][T15721] ? fs_reclaim_acquire+0xae/0x150 [ 726.576945][T15721] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 726.576984][T15721] should_failslab+0xc2/0x120 [ 726.577021][T15721] __kmalloc_noprof+0xd2/0x510 [ 726.577070][T15721] tomoyo_realpath_from_path+0xc2/0x6e0 [ 726.577127][T15721] tomoyo_check_open_permission+0x2ab/0x3c0 [ 726.577167][T15721] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 726.577263][T15721] ? do_raw_spin_lock+0x12c/0x2b0 [ 726.577321][T15721] tomoyo_file_open+0x6b/0x90 [ 726.577353][T15721] security_file_open+0x84/0x1e0 [ 726.577394][T15721] do_dentry_open+0x596/0x1530 [ 726.577447][T15721] vfs_open+0x82/0x3f0 [ 726.577505][T15721] path_openat+0x1de4/0x2cb0 [ 726.577558][T15721] ? __pfx_path_openat+0x10/0x10 [ 726.577615][T15721] do_filp_open+0x20b/0x470 [ 726.577649][T15721] ? __pfx_do_filp_open+0x10/0x10 [ 726.577722][T15721] ? alloc_fd+0x471/0x7d0 [ 726.577769][T15721] do_sys_openat2+0x11b/0x1d0 [ 726.577814][T15721] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.577877][T15721] __x64_sys_openat+0x174/0x210 [ 726.577921][T15721] ? __pfx___x64_sys_openat+0x10/0x10 [ 726.577981][T15721] do_syscall_64+0xcd/0x490 [ 726.578015][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.578036][T15721] RIP: 0033:0x7ff1d078ebe9 [ 726.578051][T15721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.578069][T15721] RSP: 002b:00007ff1d15fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.578087][T15721] RAX: ffffffffffffffda RBX: 00007ff1d09c5fa0 RCX: 00007ff1d078ebe9 [ 726.578099][T15721] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 726.578110][T15721] RBP: 00007ff1d0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 726.578120][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.578131][T15721] R13: 00007ff1d09c6038 R14: 00007ff1d09c5fa0 R15: 00007fff9cce0878 [ 726.578153][T15721] [ 726.580800][T15721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.859632][T15697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 727.177722][ T30] audit: type=1800 audit(4294985785.690:25): pid=15721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2045" name="features" dev="configfs" ino=77222 res=0 errno=0 [ 727.616253][T15739] __vm_enough_memory: pid: 15739, comm: syz.2.2047, bytes: 4398046511104 not enough memory for the allocation [ 728.581192][T15773] ima: policy update failed [ 728.588347][ T30] audit: type=1802 audit(4294986810.122:26): pid=15773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2058" res=0 errno=0 [ 729.296768][ T30] audit: type=1800 audit(4294986810.832:27): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2060" name="lu_gp_id" dev="configfs" ino=76403 res=0 errno=0 [ 729.474314][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.533858][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.554182][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.614395][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.740930][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.767037][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.774178][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.927559][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.958377][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.963940][T15784] kstrtoul() returned -22 for lu_gp_id [ 729.981136][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.136219][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.141810][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.148869][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.156453][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.162251][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.204521][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.305004][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.353156][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.454856][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.490510][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.711982][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.734970][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.852962][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.956927][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.962487][T15784] kstrtoul() returned -22 for lu_gp_id [ 730.976248][T15804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2064'. [ 731.013833][T15804] veth0_macvtap: left promiscuous mode [ 731.042488][T15806] syz.0.2065(15806): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 731.068968][T15804] macvtap0: entered promiscuous mode [ 731.074334][T15804] macvtap0: entered allmulticast mode [ 731.124977][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.134198][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.289823][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.399430][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.405077][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.517599][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.532138][T15784] kstrtoul() returned -22 for lu_gp_id [ 731.586928][ T51] bt_warn_ratelimited: 23 callbacks suppressed [ 731.586954][ T51] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 732.755608][T15840] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 733.059823][T15853] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2075'. [ 733.319860][ T30] audit: type=1804 audit(4294986814.820:28): pid=15856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2076" name="/newroot/sys/kernel/tracing/tracing_thresh" dev="tracefs" ino=211 res=1 errno=0 [ 733.342869][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.722345][T15900] random: crng reseeded on system resumption [ 736.520978][T15929] vivid-003: ================= START STATUS ================= [ 736.561026][T15929] vivid-003: Radio HW Seek Mode: Bounded [ 736.592682][T15929] vivid-003: Radio Programmable HW Seek: false [ 736.600790][T15929] vivid-003: RDS Rx I/O Mode: Block I/O [ 736.662472][T15929] vivid-003: Generate RBDS Instead of RDS: false [ 736.683423][T15929] vivid-003: RDS Reception: true [ 736.691713][T15928] FAULT_INJECTION: forcing a failure. [ 736.691713][T15928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.729731][T15928] CPU: 1 UID: 0 PID: 15928 Comm: syz.1.2093 Tainted: G U syzkaller #0 PREEMPT(full) [ 736.729752][T15929] vivid-003: RDS Program Type: [ 736.729779][T15928] Tainted: [U]=USER [ 736.729790][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.729804][T15928] Call Trace: [ 736.729812][T15928] [ 736.729822][T15928] dump_stack_lvl+0x16c/0x1f0 [ 736.729866][T15928] should_fail_ex+0x512/0x640 [ 736.729912][T15928] should_fail_alloc_page+0xe7/0x130 [ 736.729949][T15928] prepare_alloc_pages+0x3c2/0x610 [ 736.730007][T15928] ? stack_depot_save_flags+0x29/0x9c0 [ 736.730052][T15928] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 736.730085][T15928] ? kasan_save_stack+0x42/0x60 [ 736.730113][T15928] ? kasan_save_stack+0x33/0x60 [ 736.730140][T15928] ? kasan_save_track+0x14/0x30 [ 736.730172][T15928] ? __kasan_slab_alloc+0x89/0x90 [ 736.730202][T15928] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 736.730237][T15928] ? ptlock_alloc+0x1f/0x70 [ 736.730260][T15928] ? pte_alloc_one+0x82/0x3a0 [ 736.730285][T15928] ? __pte_alloc+0x6d/0x3c0 [ 736.730324][T15928] ? walk_pgd_range+0xb84/0x1f50 [ 736.730352][T15928] ? __walk_page_range+0x163/0x820 [ 736.730381][T15928] ? walk_page_range_mm+0x461/0xb40 [ 736.730410][T15928] ? madvise_vma_behavior+0xa62/0x2d60 [ 736.730453][T15928] ? madvise_walk_vmas+0x31f/0x9c0 [ 736.730486][T15928] ? madvise_do_behavior+0x1e2/0x530 [ 736.730521][T15928] ? do_madvise+0x176/0x240 [ 736.730553][T15928] ? __x64_sys_madvise+0xa9/0x110 [ 736.730587][T15928] ? do_syscall_64+0xcd/0x490 [ 736.730624][T15928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.730652][T15928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 736.730689][T15928] ? look_up_lock_class+0x6b/0x150 [ 736.730743][T15928] ? __lock_acquire+0xb97/0x1ce0 [ 736.730777][T15928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 736.730818][T15928] ? policy_nodemask+0xea/0x4e0 [ 736.730857][T15928] alloc_pages_mpol+0x1fb/0x550 [ 736.730894][T15928] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 736.730931][T15928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 736.730977][T15928] alloc_pages_noprof+0x131/0x390 [ 736.731013][T15928] pte_alloc_one+0x1c/0x3a0 [ 736.731041][T15928] __pte_alloc+0x6d/0x3c0 [ 736.731075][T15928] ? __pfx___pte_alloc+0x10/0x10 [ 736.731111][T15928] ? walk_pgd_range+0x13b4/0x1f50 [ 736.731150][T15928] walk_pgd_range+0xb84/0x1f50 [ 736.731187][T15928] ? __pfx_guard_install_set_pte+0x10/0x10 [ 736.731221][T15928] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 736.731258][T15928] ? __pfx_guard_install_set_pte+0x10/0x10 [ 736.731299][T15928] ? __pfx_guard_install_set_pte+0x10/0x10 [ 736.731335][T15928] ? __pfx_guard_install_set_pte+0x10/0x10 [ 736.731372][T15928] ? __pfx_walk_pgd_range+0x10/0x10 [ 736.731416][T15928] __walk_page_range+0x163/0x820 [ 736.731459][T15928] ? find_vma+0xbf/0x140 [ 736.731492][T15928] ? __pfx_find_vma+0x10/0x10 [ 736.731529][T15928] ? walk_page_test+0x9b/0x180 [ 736.731562][T15928] walk_page_range_mm+0x461/0xb40 [ 736.731600][T15928] ? __pfx_walk_page_range_mm+0x10/0x10 [ 736.731643][T15928] ? __anon_vma_prepare+0x2e2/0x5e0 [ 736.731677][T15928] madvise_vma_behavior+0xa62/0x2d60 [ 736.731718][T15928] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 736.731757][T15928] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 736.731797][T15928] ? __pfx_mas_prev+0x10/0x10 [ 736.731844][T15928] ? find_vma_prev+0xda/0x160 [ 736.731881][T15928] ? __pfx_find_vma_prev+0x10/0x10 [ 736.731952][T15928] madvise_walk_vmas+0x31f/0x9c0 [ 736.731996][T15928] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 736.732043][T15928] madvise_do_behavior+0x1e2/0x530 [ 736.732079][T15928] ? futex_private_hash_put+0x18a/0x300 [ 736.732111][T15928] ? __pfx_madvise_do_behavior+0x10/0x10 [ 736.732150][T15928] ? down_read+0x13d/0x480 [ 736.732194][T15928] do_madvise+0x176/0x240 [ 736.732229][T15928] ? __pfx_do_madvise+0x10/0x10 [ 736.732264][T15928] ? do_futex+0x122/0x350 [ 736.732322][T15928] ? xfd_validate_state+0x61/0x180 [ 736.732358][T15928] ? __pfx_ksys_write+0x10/0x10 [ 736.732396][T15928] __x64_sys_madvise+0xa9/0x110 [ 736.732432][T15928] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.732476][T15928] do_syscall_64+0xcd/0x490 [ 736.732518][T15928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.732544][T15928] RIP: 0033:0x7f347938ebe9 [ 736.732567][T15928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.732593][T15928] RSP: 002b:00007f347a243038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 736.732618][T15928] RAX: ffffffffffffffda RBX: 00007f34795c6180 RCX: 00007f347938ebe9 [ 736.732635][T15928] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 736.732650][T15928] RBP: 00007f3479411e19 R08: 0000000000000000 R09: 0000000000000000 [ 736.732665][T15928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.732680][T15928] R13: 00007f34795c6218 R14: 00007f34795c6180 R15: 00007ffccf409f68 [ 736.732715][T15928] [ 737.229171][T15929] 0 inactive [ 737.303666][T15929] vivid-003: RDS PS Name: inactive [ 737.427664][T15929] vivid-003: RDS Radio Text: inactive [ 737.499810][T15929] vivid-003: RDS Traffic Announcement: false inactive [ 737.531859][T15929] vivid-003: RDS Traffic Program: false inactive [ 737.538701][T15929] vivid-003: RDS Music: false inactive [ 737.544295][T15929] vivid-003: ================== END STATUS ================== [ 737.668816][T15946] usb usb34: usbfs: process 15946 (syz.2.2097) did not claim interface 0 before use [ 737.925566][T15963] tty tty16: ldisc open failed (-12), clearing slot 15 [ 737.947752][T15964] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2102'. [ 738.192741][T15973] random: crng reseeded on system resumption [ 738.262154][T15975] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 738.290760][T15972] usb usb36: usbfs: process 15972 (syz.3.2105) did not claim interface 0 before use [ 738.673726][T15986] busy [ 739.542158][ T30] audit: type=1326 audit(4294967303.040:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15999 comm="syz.3.2110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f860f78ebe9 code=0x0 [ 741.289222][T16060] usb usb36: usbfs: process 16060 (syz.3.2120) did not claim interface 0 before use [ 741.756111][T16074] FAULT_INJECTION: forcing a failure. [ 741.756111][T16074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.826510][T16074] CPU: 0 UID: 0 PID: 16074 Comm: syz.2.2123 Tainted: G U syzkaller #0 PREEMPT(full) [ 741.826560][T16074] Tainted: [U]=USER [ 741.826570][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.826587][T16074] Call Trace: [ 741.826596][T16074] [ 741.826608][T16074] dump_stack_lvl+0x16c/0x1f0 [ 741.826669][T16074] should_fail_ex+0x512/0x640 [ 741.826720][T16074] _copy_from_user+0x2e/0xd0 [ 741.826755][T16074] get_timespec64+0x8b/0x1b0 [ 741.826791][T16074] ? __pfx_get_timespec64+0x10/0x10 [ 741.826825][T16074] ? ktime_get+0x200/0x310 [ 741.826870][T16074] __x64_sys_futex+0x288/0x4c0 [ 741.826914][T16074] ? __pfx___x64_sys_futex+0x10/0x10 [ 741.826959][T16074] ? xfd_validate_state+0x61/0x180 [ 741.827016][T16074] do_syscall_64+0xcd/0x490 [ 741.827063][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.827103][T16074] RIP: 0033:0x7fe79278ebe9 [ 741.827128][T16074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.827157][T16074] RSP: 002b:00007fff0517c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 741.827186][T16074] RAX: ffffffffffffffda RBX: 00000000000b5157 RCX: 00007fe79278ebe9 [ 741.827205][T16074] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe7929c5fac [ 741.827222][T16074] RBP: 0000000000000032 R08: 00007fe79365b000 R09: 0000000d0517c3df [ 741.827240][T16074] R10: 00007fff0517c1e0 R11: 0000000000000246 R12: 00007fe7929c5fac [ 741.827258][T16074] R13: 00007fff0517c1e0 R14: 00000000000b5189 R15: 00007fff0517c200 [ 741.827297][T16074] [ 745.256423][T16121] misc userio: Invalid payload size [ 746.492665][T16141] Invalid ELF header magic: != ELF [ 747.294376][T16161] random: crng reseeded on system resumption [ 748.672684][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 749.703383][T16187] netlink: 'syz.0.2142': attribute type 15 has an invalid length. [ 750.201071][T16205] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 750.698421][T16215] vivid-003: ================= START STATUS ================= [ 750.840795][T16215] vivid-003: Radio HW Seek Mode: Bounded [ 750.853958][T16215] vivid-003: Radio Programmable HW Seek: false [ 750.883563][T16215] vivid-003: RDS Rx I/O Mode: Block I/O [ 750.920491][T16215] vivid-003: Generate RBDS Instead of RDS: false [ 750.950559][T16215] vivid-003: RDS Reception: true [ 750.988736][T16215] vivid-003: RDS Program Type: 0 inactive [ 750.994500][T16215] vivid-003: RDS PS Name: inactive [ 750.999895][T16215] vivid-003: RDS Radio Text: inactive [ 751.005413][T16215] vivid-003: RDS Traffic Announcement: false inactive [ 751.012406][T16215] vivid-003: RDS Traffic Program: false inactive [ 751.019025][T16215] vivid-003: RDS Music: false inactive [ 751.051104][T16215] vivid-003: ================== END STATUS ================== [ 751.131627][T16208] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 752.630803][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.656081][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.437316][T16260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 753.626374][T16260] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 753.716132][T16260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.722601][T16260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.728785][T16260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.735300][T16260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.741624][T16260] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 753.949048][T16260] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 754.105195][T16265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 755.499538][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 755.806439][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 755.806465][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 755.816424][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 755.847260][ T30] audit: type=1800 audit(4294967319.360:30): pid=16314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2160" name="discovery_nqn" dev="configfs" ino=80057 res=0 errno=0 [ 757.566432][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 757.755778][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2170'. [ 757.886359][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 757.892587][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 758.173384][T16356] nfs: Unknown parameter '' [ 759.177764][T16365] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 759.374788][T16383] [ 759.966408][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 761.585723][T16423] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 763.400340][T16454] vivid-007: ================= START STATUS ================= [ 763.489129][T16454] vivid-007: Generate PTS: true [ 763.625474][T16454] vivid-007: Generate SCR: true [ 763.635815][T16454] tpg source WxH: 320x240 (Y'CbCr) [ 763.734893][T16454] tpg field: 1 [ 763.850108][T16454] tpg crop: (0,0)/320x240 [ 763.856468][T16454] tpg compose: (0,0)/320x240 [ 763.882288][T16454] tpg colorspace: 8 [ 763.912434][T16454] tpg transfer function: 0/0 [ 763.931559][T16454] tpg Y'CbCr encoding: 0/0 [ 763.992383][T16454] tpg quantization: 0/0 [ 764.037218][T16473] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.2193: bg 4: bad block bitmap checksum [ 764.068426][T16454] tpg RGB range: 0/2 [ 764.072483][T16454] vivid-007: ================== END STATUS ================== [ 764.154482][T16473] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 764.171069][T16473] EXT4-fs (sda1): This should not happen!! Data will be lost [ 764.171069][T16473] [ 765.491981][T16503] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 765.541996][T16503] EXT4-fs (sda1): This should not happen!! Data will be lost [ 765.541996][T16503] [ 771.187571][T16583] nbd: socks must be embedded in a SOCK_ITEM attr [ 771.199187][T16583] block nbd0: shutting down sockets [ 772.125725][T16605] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.2.2221: Error -117 reading block bitmap for 4 [ 772.654111][T16615] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 776.758025][T16689] FAULT_INJECTION: forcing a failure. [ 776.758025][T16689] name failslab, interval 1, probability 0, space 0, times 0 [ 776.856994][T16689] CPU: 1 UID: 0 PID: 16689 Comm: syz.1.2236 Tainted: G U syzkaller #0 PREEMPT(full) [ 776.857027][T16689] Tainted: [U]=USER [ 776.857032][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.857043][T16689] Call Trace: [ 776.857049][T16689] [ 776.857056][T16689] dump_stack_lvl+0x16c/0x1f0 [ 776.857089][T16689] should_fail_ex+0x512/0x640 [ 776.857130][T16689] should_failslab+0xc2/0x120 [ 776.857155][T16689] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 776.857179][T16689] ? skb_clone+0x190/0x3f0 [ 776.857209][T16689] skb_clone+0x190/0x3f0 [ 776.857237][T16689] netlink_deliver_tap+0xabd/0xd30 [ 776.857270][T16689] netlink_unicast+0x64c/0x870 [ 776.857302][T16689] ? __pfx_netlink_unicast+0x10/0x10 [ 776.857339][T16689] netlink_sendmsg+0x8d1/0xdd0 [ 776.857371][T16689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.857403][T16689] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 776.857428][T16689] ____sys_sendmsg+0xa95/0xc70 [ 776.857449][T16689] ? copy_msghdr_from_user+0x10a/0x160 [ 776.857476][T16689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.857507][T16689] ___sys_sendmsg+0x134/0x1d0 [ 776.857536][T16689] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.857591][T16689] __sys_sendmsg+0x16d/0x220 [ 776.857621][T16689] ? __pfx___sys_sendmsg+0x10/0x10 [ 776.857648][T16689] ? __x64_sys_futex+0x1e0/0x4c0 [ 776.857686][T16689] do_syscall_64+0xcd/0x490 [ 776.857716][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.857734][T16689] RIP: 0033:0x7f347938ebe9 [ 776.857749][T16689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.857767][T16689] RSP: 002b:00007f347a264038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.857785][T16689] RAX: ffffffffffffffda RBX: 00007f34795c6090 RCX: 00007f347938ebe9 [ 776.857796][T16689] RDX: 0000000000000004 RSI: 0000200000001840 RDI: 0000000000000006 [ 776.857807][T16689] RBP: 00007f3479411e19 R08: 0000000000000000 R09: 0000000000000000 [ 776.857818][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.857830][T16689] R13: 00007f34795c6128 R14: 00007f34795c6090 R15: 00007ffccf409f68 [ 776.857856][T16689] [ 777.084389][ C1] vkms_vblank_simulate: vblank timer overrun [ 777.266393][T16697] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2239'. [ 777.278385][T16697] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2239'. [ 779.015977][T16732] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 779.320664][T16739] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.4294967293), cmd(3) [ 780.668248][T16755] ima: policy update failed [ 780.700085][ T30] audit: type=1802 audit(4294967344.200:31): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2247" res=0 errno=0 [ 785.308804][T16839] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 786.244356][T16849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 786.709930][T16854] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 789.358199][T16895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 789.370203][T16895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 789.379248][T16895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.427844][T16895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.458927][T16895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 789.832484][ T5868] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 789.861274][T16920] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2276'. [ 790.291903][T16924] zswap: compressor not available [ 791.408401][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 791.408423][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 791.408474][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 791.486268][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 793.486521][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 796.983024][T17034] input: f as /devices/virtual/input/input49 [ 797.553287][T17037] zswap: compressor not available [ 797.819362][T17048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2296'. [ 798.105082][T17048] team0: Port device team_slave_0 removed [ 801.221781][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 801.436445][T17101] can: request_module (can-proto-0) failed. [ 801.444712][T17100] delete_channel: no stack [ 802.281007][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 802.381074][T17113] can: request_module (can-proto-0) failed. [ 802.862158][T17112] delete_channel: no stack [ 802.870910][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 802.935535][T17119] team0: Port device team_slave_0 removed [ 804.178387][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2320'. [ 804.289361][T17160] team0: left allmulticast mode [ 804.332903][T17160] team_slave_0: left allmulticast mode [ 804.349107][T17160] team_slave_1: left allmulticast mode [ 804.363485][T17160] team0: left promiscuous mode [ 804.389805][T17160] team_slave_0: left promiscuous mode [ 804.408812][T17160] team_slave_1: left promiscuous mode [ 804.439637][T17160] bridge0: port 3(team0) entered disabled state [ 804.767732][T17160] bridge_slave_1: left allmulticast mode [ 804.783226][T17160] bridge_slave_1: left promiscuous mode [ 804.808342][T17160] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.838236][T17160] bridge_slave_0: left allmulticast mode [ 804.872047][T17160] bridge_slave_0: left promiscuous mode [ 804.887370][T17160] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.750699][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2327'. [ 808.593571][T17226] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 809.121452][T17236] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 809.150508][T17236] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 809.163339][T17236] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 809.172724][T17236] raw: ffff888078000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 809.182801][T17236] page dumped because: unmovable page [ 809.192378][T17236] page_owner tracks the page as allocated [ 809.202452][T17236] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 8461, tgid 8446 (syz.2.499), ts 265955228826, free_ts 252936490632 [ 809.313496][T17236] post_alloc_hook+0x1c0/0x230 [ 809.330224][T17236] get_page_from_freelist+0x132b/0x38e0 [ 809.353811][T17247] Invalid ELF header magic: != ELF [ 809.366706][T17236] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 809.386238][T17236] alloc_pages_mpol+0x1fb/0x550 [ 809.391188][T17236] alloc_pages_noprof+0x131/0x390 [ 809.465847][T17236] brd_submit_bio+0x942/0x1180 [ 809.474487][T17236] __submit_bio+0x304/0x690 [ 809.504339][T17236] submit_bio_noacct_nocheck+0x852/0xd30 [ 809.551615][T17236] submit_bio_noacct+0xc20/0x1ed0 [ 809.557118][T17236] blkdev_direct_IO+0x163f/0x1fe0 [ 809.562543][T17236] blkdev_write_iter+0x703/0xe00 [ 809.567855][T17236] vfs_write+0x7d0/0x11d0 [ 809.572305][T17236] ksys_write+0x12a/0x250 [ 809.576946][T17236] do_syscall_64+0xcd/0x490 [ 809.581765][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.587887][T17236] page last free pid 5933 tgid 5933 stack trace: [ 809.594501][T17236] __free_frozen_pages+0x7d5/0x10f0 [ 809.600758][T17236] kasan_depopulate_vmalloc_pte+0x5b/0x80 [ 809.606833][T17236] __apply_to_page_range+0xac1/0x13f0 [ 809.612729][T17236] kasan_release_vmalloc+0xd1/0xe0 [ 809.618347][T17236] purge_vmap_node+0x1c4/0xa30 [ 809.623289][T17236] __purge_vmap_area_lazy+0xa06/0xc60 [ 809.629014][T17236] drain_vmap_area_work+0x27/0x40 [ 809.634224][T17236] process_one_work+0x9cf/0x1b70 [ 809.639729][T17236] worker_thread+0x6c8/0xf10 [ 809.644502][T17236] kthread+0x3c5/0x780 [ 809.648894][T17236] ret_from_fork+0x5d7/0x6f0 [ 809.655734][T17236] ret_from_fork_asm+0x1a/0x30 [ 810.224425][T17262] random: crng reseeded on system resumption [ 813.400999][ T30] audit: type=1800 audit(4294967376.910:32): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2347" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 813.826769][T17317] program syz.3.2351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.052562][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.061981][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.838025][T17336] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 816.839067][T17374] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2360'. [ 816.851234][T17372] ima: policy update failed [ 816.876800][ T30] audit: type=1802 audit(4294967380.360:33): pid=17372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2360" res=0 errno=0 [ 817.421961][T17383] zswap: compressor not available [ 822.560003][T17452] ptrace attach of "./syz-executor exec"[17453] was attempted by "./syz-executor exec"[17452] [ 823.106584][T17454] vivid-003: ================= START STATUS ================= [ 823.114390][T17454] vivid-003: Radio HW Seek Mode: Bounded [ 823.312586][T17454] vivid-003: Radio Programmable HW Seek: false [ 823.319350][T17454] vivid-003: RDS Rx I/O Mode: Block I/O [ 823.325824][T17454] vivid-003: Generate RBDS Instead of RDS: false [ 823.346465][T17454] vivid-003: RDS Reception: true [ 823.353969][T17454] vivid-003: RDS Program Type: 0 inactive [ 823.361674][T17454] vivid-003: RDS PS Name: inactive [ 823.367050][T17454] vivid-003: RDS Radio Text: inactive [ 823.372611][T17454] vivid-003: RDS Traffic Announcement: false inactive [ 823.379582][T17454] vivid-003: RDS Traffic Program: false inactive [ 823.386202][T17454] vivid-003: RDS Music: false inactive [ 823.391766][T17454] vivid-003: ================== END STATUS ================== [ 824.402046][T17483] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 824.810777][T17493] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 824.819568][T17493] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 824.841386][T17484] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 826.249677][T17515] random: crng reseeded on system resumption [ 826.449157][T17517] FAULT_INJECTION: forcing a failure. [ 826.449157][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 826.560900][T17517] CPU: 1 UID: 0 PID: 17517 Comm: syz.2.2384 Tainted: G U syzkaller #0 PREEMPT(full) [ 826.560955][T17517] Tainted: [U]=USER [ 826.560966][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 826.560984][T17517] Call Trace: [ 826.560996][T17517] [ 826.561009][T17517] dump_stack_lvl+0x16c/0x1f0 [ 826.561062][T17517] should_fail_ex+0x512/0x640 [ 826.561110][T17517] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 826.561148][T17517] should_failslab+0xc2/0x120 [ 826.561188][T17517] __kmalloc_cache_noprof+0x6a/0x3e0 [ 826.561222][T17517] ? snd_midi_event_new+0x6f/0x210 [ 826.561257][T17517] snd_midi_event_new+0x6f/0x210 [ 826.561289][T17517] snd_virmidi_output_open+0x106/0x670 [ 826.561329][T17517] open_substream+0x478/0x990 [ 826.561373][T17517] rawmidi_open_priv+0x543/0x6e0 [ 826.561418][T17517] snd_rawmidi_open+0x4cc/0xbf0 [ 826.561469][T17517] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 826.561513][T17517] ? __pfx_default_wake_function+0x10/0x10 [ 826.561548][T17517] ? kobject_get_unless_zero+0x156/0x1e0 [ 826.561600][T17517] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 826.561637][T17517] snd_open+0x22a/0x4c0 [ 826.561668][T17517] ? __pfx_snd_open+0x10/0x10 [ 826.561697][T17517] chrdev_open+0x231/0x6a0 [ 826.561735][T17517] ? __pfx_apparmor_file_open+0x10/0x10 [ 826.561770][T17517] ? __pfx_chrdev_open+0x10/0x10 [ 826.561820][T17517] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 826.561866][T17517] do_dentry_open+0x97f/0x1530 [ 826.561903][T17517] ? __pfx_chrdev_open+0x10/0x10 [ 826.561952][T17517] vfs_open+0x82/0x3f0 [ 826.562003][T17517] path_openat+0x1de4/0x2cb0 [ 826.562052][T17517] ? __pfx_path_openat+0x10/0x10 [ 826.562101][T17517] do_filp_open+0x20b/0x470 [ 826.562139][T17517] ? __pfx_do_filp_open+0x10/0x10 [ 826.562207][T17517] ? alloc_fd+0x471/0x7d0 [ 826.562253][T17517] do_sys_openat2+0x11b/0x1d0 [ 826.562300][T17517] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.562365][T17517] __x64_sys_openat+0x174/0x210 [ 826.562414][T17517] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.562478][T17517] do_syscall_64+0xcd/0x490 [ 826.562525][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.562554][T17517] RIP: 0033:0x7fe79278ebe9 [ 826.562578][T17517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.562609][T17517] RSP: 002b:00007fe79365a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.562640][T17517] RAX: ffffffffffffffda RBX: 00007fe7929c5fa0 RCX: 00007fe79278ebe9 [ 826.562661][T17517] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 826.562681][T17517] RBP: 00007fe792811e19 R08: 0000000000000000 R09: 0000000000000000 [ 826.562700][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.562718][T17517] R13: 00007fe7929c6038 R14: 00007fe7929c5fa0 R15: 00007fff0517bf88 [ 826.562759][T17517] [ 826.847423][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.377148][T17531] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 827.791800][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 827.801096][T17534] bridge_slave_1: left allmulticast mode [ 827.816468][T17534] bridge_slave_1: left promiscuous mode [ 827.825861][T17534] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.870552][T17534] bridge_slave_0: left allmulticast mode [ 827.880283][T17534] bridge_slave_0: left promiscuous mode [ 827.897541][T17534] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.190262][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.209285][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.218364][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.236847][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.252475][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 829.645725][T17561] IPVS: length: 131 != 8 [ 829.921882][T17581] program syz.0.2395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.161118][T17576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2394'. [ 830.742585][T17563] chnl_net:caif_netlink_parms(): no params data found [ 831.319711][T17598] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 831.333990][ T5186] Bluetooth: hci4: command tx timeout [ 832.108486][T17563] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.126571][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.133889][T17563] bridge_slave_0: entered allmulticast mode [ 832.178842][T17563] bridge_slave_0: entered promiscuous mode [ 832.229850][T17563] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.237945][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.245455][T17563] bridge_slave_1: entered allmulticast mode [ 832.270253][T17563] bridge_slave_1: entered promiscuous mode [ 832.403200][T17563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.499071][T17563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.593464][T17617] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 832.750262][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2397'. [ 832.858492][T17563] team0: Port device team_slave_0 added [ 832.928347][T17626] bridge_slave_1: left allmulticast mode [ 833.069872][T17626] bridge_slave_1: left promiscuous mode [ 833.209128][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.251451][T17626] bridge_slave_0: left allmulticast mode [ 833.301373][T17626] bridge_slave_0: left promiscuous mode [ 833.386814][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.406646][ T5186] Bluetooth: hci4: command tx timeout [ 833.565365][T17563] team0: Port device team_slave_1 added [ 834.075629][T17563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.083336][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.109375][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.172203][T17563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.257511][T17563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.276518][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.312536][T17563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.540115][T17563] hsr_slave_0: entered promiscuous mode [ 834.571116][T17563] hsr_slave_1: entered promiscuous mode [ 834.579609][T17563] debugfs: 'hsr0' already exists in 'hsr' [ 834.585680][T17563] Cannot create hsr debugfs directory [ 835.487177][ T5186] Bluetooth: hci4: command tx timeout [ 836.990954][T17678] [ 836.993353][T17678] ====================================================== [ 837.000495][T17678] WARNING: possible circular locking dependency detected [ 837.007622][T17678] syzkaller #0 Tainted: G U [ 837.013626][T17678] ------------------------------------------------------ [ 837.020654][T17678] syz.3.2407/17678 is trying to acquire lock: [ 837.026733][T17678] ffff888079da3b38 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 837.038242][T17678] [ 837.038242][T17678] but task is already holding lock: [ 837.045612][T17678] ffff88807137d818 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 837.054647][T17678] [ 837.054647][T17678] which lock already depends on the new lock. [ 837.054647][T17678] [ 837.065065][T17678] [ 837.065065][T17678] the existing dependency chain (in reverse order) is: [ 837.074095][T17678] [ 837.074095][T17678] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 837.081854][T17678] lock_sock_nested+0x41/0xf0 [ 837.087077][T17678] smc_listen_out+0x202/0x4a0 [ 837.092291][T17678] smc_listen_work+0x5a3/0x50b0 [ 837.097681][T17678] process_one_work+0x9cf/0x1b70 [ 837.103197][T17678] worker_thread+0x6c8/0xf10 [ 837.108324][T17678] kthread+0x3c5/0x780 [ 837.112977][T17678] ret_from_fork+0x5d7/0x6f0 [ 837.118157][T17678] ret_from_fork_asm+0x1a/0x30 [ 837.123472][T17678] [ 837.123472][T17678] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 837.133665][T17678] __lock_acquire+0x12a6/0x1ce0 [ 837.139061][T17678] lock_acquire+0x179/0x350 [ 837.144125][T17678] __flush_work+0x4e4/0xcc0 [ 837.149160][T17678] __cancel_work_sync+0x10c/0x130 [ 837.154716][T17678] smc_clcsock_release+0x5f/0xe0 [ 837.160293][T17678] __smc_release+0x5c2/0x880 [ 837.165415][T17678] smc_close_non_accepted+0xda/0x200 [ 837.171239][T17678] smc_close_active+0xc3c/0x1070 [ 837.176725][T17678] __smc_release+0x634/0x880 [ 837.181855][T17678] smc_release+0x1fc/0x620 [ 837.186805][T17678] __sock_release+0xb0/0x270 [ 837.191931][T17678] sock_close+0x1c/0x30 [ 837.196613][T17678] __fput+0x3ff/0xb70 [ 837.201143][T17678] task_work_run+0x14d/0x240 [ 837.206278][T17678] exit_to_user_mode_loop+0xeb/0x110 [ 837.212203][T17678] do_syscall_64+0x3f6/0x490 [ 837.217336][T17678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.223897][T17678] [ 837.223897][T17678] other info that might help us debug this: [ 837.223897][T17678] [ 837.234300][T17678] Possible unsafe locking scenario: [ 837.234300][T17678] [ 837.241970][T17678] CPU0 CPU1 [ 837.247454][T17678] ---- ---- [ 837.252835][T17678] lock(sk_lock-AF_SMC/1); [ 837.257454][T17678] lock((work_completion)(&new_smc->smc_listen_work)); [ 837.267016][T17678] lock(sk_lock-AF_SMC/1); [ 837.274062][T17678] lock((work_completion)(&new_smc->smc_listen_work)); [ 837.281043][T17678] [ 837.281043][T17678] *** DEADLOCK *** [ 837.281043][T17678] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 837.289210][T17678] 3 locks held by syz.3.2407/17678: [ 837.294416][T17678] #0: ffff888049340808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 837.304985][T17678] #1: ffff88807137d818 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 837.314426][T17678] #2: ffffffff8e5c10e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 837.323594][T17678] [ 837.323594][T17678] stack backtrace: [ 837.329513][T17678] CPU: 0 UID: 0 PID: 17678 Comm: syz.3.2407 Tainted: G U syzkaller #0 PREEMPT(full) [ 837.329551][T17678] Tainted: [U]=USER [ 837.329559][T17678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.329574][T17678] Call Trace: [ 837.329584][T17678] [ 837.329595][T17678] dump_stack_lvl+0x116/0x1f0 [ 837.329632][T17678] print_circular_bug+0x275/0x350 [ 837.329673][T17678] check_noncircular+0x14c/0x170 [ 837.329708][T17678] __lock_acquire+0x12a6/0x1ce0 [ 837.329745][T17678] lock_acquire+0x179/0x350 [ 837.329776][T17678] ? __flush_work+0x4d0/0xcc0 [ 837.329801][T17678] ? mark_held_locks+0x49/0x80 [ 837.329832][T17678] ? __flush_work+0x4d0/0xcc0 [ 837.329856][T17678] __flush_work+0x4e4/0xcc0 [ 837.329878][T17678] ? __flush_work+0x4d0/0xcc0 [ 837.329904][T17678] ? __pfx___flush_work+0x10/0x10 [ 837.329927][T17678] ? __lock_acquire+0xb97/0x1ce0 [ 837.329959][T17678] ? __pfx_wq_barrier_func+0x10/0x10 [ 837.329994][T17678] ? do_raw_spin_lock+0x12c/0x2b0 [ 837.330030][T17678] ? __pfx___might_resched+0x10/0x10 [ 837.330059][T17678] __cancel_work_sync+0x10c/0x130 [ 837.330084][T17678] smc_clcsock_release+0x5f/0xe0 [ 837.330117][T17678] __smc_release+0x5c2/0x880 [ 837.330145][T17678] ? __pfx_sock_def_readable+0x10/0x10 [ 837.330179][T17678] smc_close_non_accepted+0xda/0x200 [ 837.330211][T17678] smc_close_active+0xc3c/0x1070 [ 837.330245][T17678] __smc_release+0x634/0x880 [ 837.330273][T17678] smc_release+0x1fc/0x620 [ 837.330301][T17678] __sock_release+0xb0/0x270 [ 837.330323][T17678] ? __pfx_sock_close+0x10/0x10 [ 837.330343][T17678] sock_close+0x1c/0x30 [ 837.330363][T17678] __fput+0x3ff/0xb70 [ 837.330398][T17678] ? _raw_spin_unlock_irq+0x23/0x50 [ 837.330434][T17678] task_work_run+0x14d/0x240 [ 837.330472][T17678] ? __pfx_task_work_run+0x10/0x10 [ 837.330510][T17678] ? __pfx___do_sys_close_range+0x10/0x10 [ 837.330543][T17678] exit_to_user_mode_loop+0xeb/0x110 [ 837.330580][T17678] do_syscall_64+0x3f6/0x490 [ 837.330620][T17678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.330646][T17678] RIP: 0033:0x7f860f78ebe9 [ 837.330672][T17678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.330697][T17678] RSP: 002b:00007f86106d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 837.330721][T17678] RAX: 0000000000000000 RBX: 00007f860f9c5fa0 RCX: 00007f860f78ebe9 [ 837.330737][T17678] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 837.330752][T17678] RBP: 00007f860f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 837.330767][T17678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.330782][T17678] R13: 00007f860f9c6038 R14: 00007f860f9c5fa0 R15: 00007ffc718c0aa8 [ 837.330805][T17678] [ 837.618737][ T5186] Bluetooth: hci4: command tx timeout [ 838.729374][T15685] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 838.756910][T15685] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 838.854958][T16841] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 838.920007][T16841] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 838.977528][T17671] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 839.015163][T17671] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 839.150429][T16009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.234365][T16009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.295143][T16009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.367541][T16009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.491737][T16009] bridge_slave_1: left allmulticast mode [ 839.505539][T16009] bridge_slave_1: left promiscuous mode [ 839.513297][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.530090][T16009] bridge_slave_0: left allmulticast mode [ 839.535798][T16009] bridge_slave_0: left promiscuous mode [ 839.556481][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.741893][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.752283][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.762153][T16009] bond0 (unregistering): Released all slaves [ 839.826050][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.843114][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.853435][T16009] bond0 (unregistering): Released all slaves [ 840.333694][T16009] hsr_slave_0: left promiscuous mode [ 840.349121][T16009] hsr_slave_1: left promiscuous mode [ 840.355024][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.377632][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.408949][T16009] hsr_slave_0: left promiscuous mode [ 840.427394][T16009] hsr_slave_1: left promiscuous mode [ 840.433354][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.442017][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.450101][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.459135][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.473901][T16009] veth1_macvtap: left promiscuous mode [ 840.481107][T16009] veth0_macvtap: left promiscuous mode [ 840.486935][T16009] veth1_vlan: left promiscuous mode [ 840.492236][T16009] veth0_vlan: left promiscuous mode [ 840.693113][T16009] team0 (unregistering): Port device team_slave_1 removed [ 840.724460][T16009] team0 (unregistering): Port device team_slave_0 removed [ 840.990022][T16009] team0 (unregistering): Port device team_slave_1 removed [ 841.740837][T16009] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.838380][T16009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.940117][T16009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.017725][T16009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.102382][T16009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.246453][T16009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.325699][T16009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.403268][T16009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.469578][T16009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.755453][T16009] erspan0 (unregistering): left allmulticast mode [ 842.791689][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.805893][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.818547][T16009] bond0 (unregistering): Released all slaves [ 842.893742][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.904268][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.914508][T16009] bond0 (unregistering): Released all slaves [ 843.048053][T16009] HfR: left promiscuous mode [ 843.118049][T16009] ovs_: left promiscuous mode [ 843.186949][T16009] tipc: Left network mode [ 843.200400][T16009] tipc: Left network mode [ 844.093900][T16009] hsr_slave_0: left promiscuous mode [ 844.109962][T16009] hsr_slave_1: left promiscuous mode [ 844.115787][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.133866][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.142057][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.156410][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.174833][T16009] hsr_slave_0: left promiscuous mode [ 844.185718][T16009] hsr_slave_1: left promiscuous mode [ 844.195269][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.203058][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.211153][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.226390][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.261853][T16009] veth1_macvtap: left promiscuous mode [ 844.271055][T16009] veth1_vlan: left promiscuous mode [ 844.286346][T16009] veth0_vlan: left promiscuous mode [ 844.292661][T16009] veth1_macvtap: left promiscuous mode [ 844.783064][T16009] team0 (unregistering): Port device team_slave_1 removed [ 845.012870][T16009] team0 (unregistering): Port device team_slave_1 removed [ 845.037122][T16009] team0 (unregistering): Port device team_slave_0 removed